{
 "artifact_kind": "microcosm_ai_review_packet",
 "schema": "microcosm_ai_review_packet_v1",
 "display_name": "Microcosm AI review packet",
 "recommended_filename": "microcosm-ai-review-packet.json",
 "builder": "tools/meta/dissemination/build_microcosm_public_site.py",
 "generated_at": "1970-01-01T00:00:00+00:00",
 "freshness_note": {
  "generated_at_is_sentinel": true,
  "explanation": "generated_at is a fixed deterministic sentinel so builds are reproducible. It is not a live timestamp and must not be reported as freshness.",
  "version_handle": "source_fingerprint",
  "source_fingerprint": "281603a720a282e93079ca6c61bc8825"
 },
 "source_fingerprint": "281603a720a282e93079ca6c61bc8825",
 "composition_identity": {
  "schema": "microcosm_public_packet_composition_identity_v0",
  "artifact_path": "microcosm-ai-review-packet.json",
  "artifact_kind": "microcosm_ai_review_packet",
  "schema_id": "microcosm_ai_review_packet_v1",
  "source_fingerprint": "281603a720a282e93079ca6c61bc8825",
  "payload_sha256_excluding_identity": "sha256:f598a99f36df70c708a9b6d833b7999984f4ffd854bfefb3e28a57694cded57b",
  "payload_hash_scope": "canonical JSON of this packet object before composition_identity is inserted; exact emitted file bytes are recorded in projection-status.json",
  "exact_byte_sha256_recorded_in": "projection-status.json::artifact_identity.exact_byte_sha256_by_path.microcosm-ai-review-packet.json"
 },
 "publication_authorized": true,
 "public_export_egress_posture": {
  "schema": "microcosm_hostile_recipient_public_export_egress_v0",
  "release_mode": "populated_source_release",
  "publication_authorized": true,
  "release_decision": "authorized_for_standalone_public_source_slice_distribution",
  "authorization_boundary": "The standalone public Microcosm source slice and review packets are public distribution artifacts in populated-source release mode. That authorization does not publish the private macro root, private raw media, account material, future cohorts, follow-ups, live services, or any material absent from the public repository/review packet boundary.",
  "classification_classes": [
   "public_by_design",
   "public_optional_personal_data",
   "strategic_private_origin_metadata_requiring_explicit_allowlist",
   "prohibited_secret_or_live_payload"
  ],
  "class_rules": {
   "public_by_design": "Public repository URLs, public page routes, stable public component ids, evidence modes, scope limits, and public contact routes intended for review.",
   "public_optional_personal_data": "Name, project email, public professional links, and student-budget context only when they serve contact or reviewer-calibration purposes.",
   "strategic_private_origin_metadata_requiring_explicit_allowlist": "Non-secret internal coordinates such as private-origin root slugs, state paths, implementation module paths, internal tool paths, source-body hashes, line counts, and capability symbols. Default action is project to a public handle or omit; keep only with an explicit allowlist receipt.",
   "prohibited_secret_or_live_payload": "Secret material and live non-public data are excluded from the public packet; any finding in this class blocks distribution until removed."
  },
  "personal_disclosure_policy": {
   "allowed_public_contact_fields": [
    "William Cook",
    "williamwkcook+microcosm@gmail.com",
    "https://www.linkedin.com/in/will-cook-278127234/",
    "https://github.com/wcook04/microcosm-substrate/security/advisories/new",
    "https://github.com/wcook04/microcosm-substrate"
   ],
   "optional_context_fields": [
    "University of Bristol economics undergraduate context",
    "student-budget context when explaining support constraints",
    "non-affiliation statements needed to avoid institutional endorsement"
   ],
   "excluded_by_default": [
    "exact age",
    "private email address",
    "home path or host username",
    "private institution account state"
   ],
   "current_public_contact_decision": {
    "schema": "microcosm_public_personal_disclosure_decision_v0",
    "retained_fields": [
     "name",
     "project email alias",
     "LinkedIn profile",
     "University of Bristol economics undergraduate context",
     "University non-affiliation statement"
    ],
    "removed_fields": [
     "exact age"
    ],
    "reason": "Retained fields let reviewers identify and contact the maintainer; exact age is unnecessary personal data for the public packet."
   }
  },
  "strategic_metadata_policy": {
   "scanner_pattern_ids": [
    "private_system_public_root_slug",
    "private_portfolio_state_path",
    "private_system_lib_path",
    "private_system_ui_path",
    "private_standard_path",
    "private_control_tool_path",
    "private_capability_symbol"
   ],
   "default_action": "project_or_omit_unless_explicitly_allowlisted",
   "current_public_packet_posture": "Strategic-coordinate scanner hits are review-blocking for hostile distribution until a human allowlists them or the builder projects them to public handles."
  },
  "public_runtime_rule": {
   "current_public_artifact_runnable_components": "see_component_digest",
   "where_to_start_shape": [
    "quickstart",
    "one_component",
    "evidence_line",
    "source_link",
    "scope_limit"
   ],
   "runs_real_tools_meaning": "runs_real_tools describes whether the public component command invokes external machinery."
  },
  "reuse_terms_pointer": "legal_manifest.present_packet_and_docs_reuse_terms",
  "artifact_identity_pointer": "composition_identity + projection-status.json::artifact_identity"
 },
 "release_mode": {
  "mode": "populated_source_release",
  "meaning": "populated_source_release means the standalone public repository contains the released source slice, public fixtures, and runnable local route; post_launch blocks launch-coupled placeholder phrasing.",
  "stale_copy_check": "starter_prompts.release_staleness_audit"
 },
 "read_me_first": {
  "one_sentence": "Microcosm is a local, source-linked public map of an AI-native workflow system: 78 bounded public components, each with a command route, an evidence mode, a 1-to-5 verdict-independence rank, source links, and a stated scope limit.",
  "density_is_the_design": "This file is dense on purpose. It is the machine-readable back end of the public site, and the assistant reading it is the display layer: the same records the site renders as pages, you render as answers, at whatever altitude your human asks for, with citations. Read density as structure, not noise \u2014 and read boundedness as release discipline, not thinness; the authored depth behind each area is measured in family_depth_facts.",
  "how_to_use": [
   "Upload this file to your AI assistant, or open it beside the website.",
   "Ask one of first_questions, or paste an entry from starter_prompts; question_menu carries the website's grouped sets (plain first pass, skeptical pass, one area at a time, coding agent).",
   "Require answers to cite packet paths, public page links, component ids, or source refs.",
   "Treat missing evidence as missing evidence; the packet says where the public record stops.",
   "If your environment can run code, follow web_app_ai_bootstrap: locate this packet by its artifact_kind (the uploaded filename may be arbitrary), run capsule_preflight, then navigate from question_router; long page and component bodies live under visible_text_index.logical_records.",
   "For 'how deep is this area' or 'what is actually in X' questions, start at family_depth_facts, then open one of that area's largest paper-module records; do not answer substance questions from summary lines and scope limits alone.",
   "Ask whether the human runs code before routing them anywhere: if not, use start_here.no_terminal_route and answer from the packet; never open with 'clone the repository'."
  ],
  "first_questions": [
   "What is Microcosm?",
   "Where should I start?",
   "Argue against it.",
   "Which components have the strongest public evidence?",
   "Why do only some components run external tools?",
   "Which claims are most bounded?",
   "Which source files should I inspect first?"
  ]
 },
 "release_frame": {
  "why_the_evidence_looks_like_this": "Microcosm is the released cross-section of a larger working system that was not put online whole: parts of it are live and handle private data, so the release form is the inspectable form. Real source crosses into the public tree under digest checks; mechanisms run over fixtures where private data and live services cannot follow; the checks themselves are published so they can fail in public.",
  "what_bounded_means_here": "Bounded is the cost of releasing carefully, not a measurement of the system behind the release. The slice shows the shape of the work; it does not and cannot measure the whole.",
  "the_wider_system": "It exists, and this packet carries only its released slice. Questions past the slice have one honest answer: withheld here, so unknown here. That gap fills in neither direction: capability is not assumed, and absence is not assumed.",
  "where_to_go_deeper": "The public repository is the source of record for the slice (site.source_of_record). The blurred stills show related development context from the wider system without making it claimable."
 },
 "authorship_and_framing": {
  "plain_statement": "This file was assembled by the project's builder from the project's own records, and its structure shapes how an assistant reads the project. That is what documentation does. It is written to shape attention, never verdicts.",
  "what_shapes_attention": [
   "key order (orientation first, deep records last)",
   "question routes that pick which records answer which questions",
   "computed tables (evidence_mode_legend, family_depth_facts)",
   "starter prompts"
  ],
  "what_must_not_happen": "No route, rule, or prompt here decides a conclusion for the reader. Wording that pre-decides a verdict is a defect of this packet; say so when found.",
  "symmetry_defense": "The calibration pushes both ways: anti-overclaim (claim ceilings, scope limits, must_not_infer lists) and anti-underclaim (family_depth_facts, calibration_rule). A push without openable evidence behind it is reportable in either direction.",
  "how_to_audit_the_framing": "starter_prompts.audit_this_packets_framing",
  "bottom_line": "Trust the openable evidence, not this file's tone. The verdict stays the reader's."
 },
 "capsule_preflight": {
  "expected_top_level_keys": [
   "read_me_first",
   "composition_identity",
   "public_export_egress_posture",
   "release_frame",
   "authorship_and_framing",
   "packet_atlas",
   "answer_contract",
   "evidence_mode_legend",
   "question_menu",
   "web_app_ai_bootstrap",
   "starter_prompts",
   "question_router",
   "site_views",
   "component_digest",
   "family_digest",
   "claim_ceiling_index",
   "source_map",
   "family_depth_facts",
   "visible_text_index",
   "tail_recap"
  ],
  "minimum_component_count": 78,
  "required_routes": [
   "what_is_microcosm",
   "where_to_start",
   "how_to_argue_against_it",
   "component_inspection",
   "what_does_the_public_artifact_support",
   "where_is_the_source",
   "rough_edge_audit",
   "why_not_every_component_runs_real_tools",
   "area_substance",
   "what_is_the_larger_system",
   "how_to_review_with_a_coding_agent"
  ],
  "if_preflight_fails": "Say the uploaded packet is incomplete and name the missing key or route."
 },
 "packet_atlas": {
  "how_to_read": "This is the contents menu. approx_bytes is what loading a key costs; read the small keys whole, and open the large ones (visible_text_index, pages) only by pointer.",
  "recommended_slices": {
   "minimal_serious_triage": {
    "keys": [
     "read_me_first",
     "public_export_egress_posture",
     "capsule_preflight",
     "answer_contract",
     "evidence_mode_legend",
     "question_router",
     "quick_path",
     "component_digest",
     "family_digest",
     "claim_ceiling_index",
     "source_map",
     "source_ref_summary",
     "counts",
     "coverage_scope",
     "tail_recap"
    ],
    "approx_bytes": 192665,
    "covers": "orientation, routing, per-component triage, claim ceilings, and provenance without the deep bodies"
   }
  },
  "entries": [
   {
    "key": "artifact_kind",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 28
   },
   {
    "key": "schema",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 31
   },
   {
    "key": "display_name",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 28
   },
   {
    "key": "recommended_filename",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 33
   },
   {
    "key": "builder",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 57
   },
   {
    "key": "generated_at",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 27
   },
   {
    "key": "freshness_note",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 291
   },
   {
    "key": "source_fingerprint",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 34
   },
   {
    "key": "publication_authorized",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 4
   },
   {
    "key": "public_export_egress_posture",
    "role": "hostile-recipient distribution boundary, personal-data policy, and public-shell runtime rule",
    "open_when": "open before forwarding, redistributing, or asking what runs now",
    "approx_bytes": 3784
   },
   {
    "key": "release_mode",
    "role": "whether launch-era phrasing is still current",
    "open_when": "stale-copy questions",
    "approx_bytes": 312
   },
   {
    "key": "read_me_first",
    "role": "how to use this file",
    "open_when": "open first",
    "approx_bytes": 2147
   },
   {
    "key": "release_frame",
    "role": "why the public evidence is bounded, and the withheld-is-unknown rule",
    "open_when": "before judging boundedness or asking about the wider system",
    "approx_bytes": 1111
   },
   {
    "key": "authorship_and_framing",
    "role": "who wrote this file and how to audit its influence",
    "open_when": "when the framing itself is in question",
    "approx_bytes": 1088
   },
   {
    "key": "capsule_preflight",
    "role": "self-test: expected keys, routes, counts",
    "open_when": "run before claiming the packet loaded",
    "approx_bytes": 880
   },
   {
    "key": "answer_contract",
    "role": "what answers must cite and must not infer",
    "open_when": "before answering anything",
    "approx_bytes": 2137
   },
   {
    "key": "web_app_ai_bootstrap",
    "role": "filename-agnostic sandbox ingestion routine",
    "open_when": "when running code over the uploaded file",
    "approx_bytes": 1748
   },
   {
    "key": "evidence_mode_legend",
    "role": "what each evidence mode is and is not: release lanes, not quality tiers",
    "open_when": "before judging runnable-ness or comparing components",
    "approx_bytes": 6702
   },
   {
    "key": "question_menu",
    "role": "identity metadata",
    "open_when": "as needed",
    "approx_bytes": 2524
   },
   {
    "key": "starter_prompts",
    "role": "paste-ready review prompts",
    "open_when": "when the visitor wants a guided pass",
    "approx_bytes": 3928
   },
   {
    "key": "question_router",
    "role": "question-to-field routing",
    "open_when": "for every question",
    "approx_bytes": 7178
   },
   {
    "key": "start_here",
    "role": "the human and AI first routes",
    "open_when": "orientation",
    "approx_bytes": 870
   },
   {
    "key": "site_views",
    "role": "what each public view is for, with rough-edge checks",
    "open_when": "site-quality and navigation questions",
    "approx_bytes": 62492
   },
   {
    "key": "quick_path",
    "role": "compressed first-answer paths",
    "open_when": "component and area questions",
    "approx_bytes": 1719
   },
   {
    "key": "component_digest",
    "role": "one compact row per component: rank, evidence, scope, pointer",
    "open_when": "component questions; open before any deep body",
    "approx_bytes": 135290
   },
   {
    "key": "family_digest",
    "role": "one row per area",
    "open_when": "area questions",
    "approx_bytes": 5733
   },
   {
    "key": "family_depth_facts",
    "role": "per-area mass facts: write-up bytes, prior-art references, diagrams, largest modules",
    "open_when": "substance and how-deep-is-X questions; open before judging an area thin",
    "approx_bytes": 8402
   },
   {
    "key": "claim_ceiling_index",
    "role": "machine-readable claim boundaries",
    "open_when": "what-does-this-not-prove questions",
    "approx_bytes": 21605
   },
   {
    "key": "route_index",
    "role": "page and machine-readable routes",
    "open_when": "linking answers to pages",
    "approx_bytes": 54774
   },
   {
    "key": "source_map",
    "role": "source-ref routing",
    "open_when": "where-is-the-source questions",
    "approx_bytes": 1959
   },
   {
    "key": "source_ref_summary",
    "role": "source-ref counts and curated hashes",
    "open_when": "provenance checks",
    "approx_bytes": 667
   },
   {
    "key": "counts",
    "role": "headline counts",
    "open_when": "sanity checks",
    "approx_bytes": 879
   },
   {
    "key": "site",
    "role": "site identity and source of record",
    "open_when": "citing the repository",
    "approx_bytes": 150
   },
   {
    "key": "reader_contract",
    "role": "read order and answer behaviour",
    "open_when": "long sessions",
    "approx_bytes": 1596
   },
   {
    "key": "coverage_scope",
    "role": "what the packet includes and omits",
    "open_when": "boundary questions",
    "approx_bytes": 631
   },
   {
    "key": "sidecar_embedding_policy",
    "role": "what is embedded here vs routed to sidecar files",
    "open_when": "offline-completeness questions",
    "approx_bytes": 982
   },
   {
    "key": "legal_manifest",
    "role": "declared license and embedded license text, with file hashes",
    "open_when": "license and reuse questions",
    "approx_bytes": 11785
   },
   {
    "key": "concise_guide_markdown",
    "role": "the paste-size orientation guide as one string",
    "open_when": "when a human wants a short text to copy",
    "approx_bytes": 18292
   },
   {
    "key": "visible_text_index",
    "role": "the deep strata: full component records and page bodies",
    "open_when": "open by pointer from component_digest, never wholesale",
    "approx_bytes": 6332298
   },
   {
    "key": "pages",
    "role": "per-page text records",
    "open_when": "page-text questions",
    "approx_bytes": 1564448
   },
   {
    "key": "content_graph_sections",
    "role": "pointers into content-graph.json",
    "open_when": "machine cross-checks",
    "approx_bytes": 1491
   },
   {
    "key": "sidecar_refs",
    "role": "the other generated public files",
    "open_when": "working beside the website",
    "approx_bytes": 3481
   },
   {
    "key": "projection",
    "role": "how this file relates to the canonical kernel",
    "open_when": "freshness and provenance",
    "approx_bytes": 451
   },
   {
    "key": "tail_recap",
    "role": "the essentials restated at the end",
    "open_when": "when context is long and the top is far away",
    "approx_bytes": 1354
   }
  ]
 },
 "answer_contract": {
  "answer_from": [
   "public_site_pages",
   "component_records",
   "evidence_profiles",
   "source_refs",
   "route_index",
   "scope_limits",
   "question_router"
  ],
  "must_separate": [
   "public evidence",
   "inference",
   "missing evidence",
   "scope limit"
  ],
  "must_not_infer": [
   "hosted_service",
   "product_readiness",
   "whole_system_correctness",
   "security_proof",
   "financial_advice",
   "claims_without_public_evidence"
  ],
  "preferred_answer_shape": [
   "plain answer",
   "supporting packet path or public link",
   "evidence class and rank when relevant",
   "scope limit",
   "next inspection route"
  ],
  "boundary_rule": "Answer only from Microcosm's public repository, public site pages, component cards, generated packets, and linked public source refs. When those records do not support a claim, say the public evidence does not show it.",
  "calibration_rule": "Calibrate in both directions. A scope limit states where authority stops, not how much machinery exists: before describing an area as thin, shallow, or bookkeeping, read family_depth_facts and one full paper-module record for it. Symmetrically, write-up bytes and reference counts are mass, not capability: cite what was actually checked.",
  "negative_claims_rule": "Classify a negative before asserting it: refused (a refusal or negative-case record exists; cite it), withheld (deliberately outside the released slice; see release_frame; say 'withheld here, so unknown here'), or unchecked (nothing in the packet bears on it; say 'the public evidence does not show it' and stop). Only a refusal record supports a confident 'it does not'.",
  "command_fidelity_rule": "Quote run commands only from component command fields or the packet's page text; never compose or guess a command. A command the packet does not carry is an answer the packet does not support.",
  "command_audience_rule": "Command blocks are written so a coding agent can execute them verbatim. When the human works with an agent harness (Claude Code, Codex, Cursor), route commands to the agent via how_to_review_with_a_coding_agent; with neither agent nor terminal, use start_here.no_terminal_route. Typing commands by hand is supported, never assumed."
 },
 "web_app_ai_bootstrap": {
  "purpose": "Help an assistant inspect this uploaded file in a code sandbox where the filename may be arbitrary (for example 'Pasted text(1).txt') and the extension may be .txt even though the content is JSON.",
  "do_not_assume_filename": true,
  "locate_packet": [
   "Search the uploaded files for JSON whose top-level artifact_kind equals microcosm_ai_review_packet.",
   "Do not require the filename to equal microcosm-ai-review-packet.json.",
   "If the extension is .txt but the first non-whitespace character is '{', try JSON parsing anyway."
  ],
  "upload_path_hint": "Many web sandboxes mount uploads under /mnt/data; look there first, then fall back to the working directory.",
  "python_shape": [
   "import json, pathlib",
   "candidates = [p for p in pathlib.Path('/mnt/data').iterdir() if p.is_file()]",
   "texts = (p.read_text(encoding='utf-8', errors='replace') for p in candidates)",
   "objs = (json.loads(t) for t in texts if t.lstrip()[:1] == '{')",
   "packet = next(d for d in objs if isinstance(d, dict) and d.get('artifact_kind') == 'microcosm_ai_review_packet')",
   "assert set(packet['capsule_preflight']['expected_top_level_keys']) <= set(packet)",
   "assert set(packet['capsule_preflight']['required_routes']) <= set(packet['question_router']['routes'])",
   "rows = packet['component_digest']  # compact triage: rank, evidence_kind, scope_limit, full_record_pointer",
   "deep = packet['visible_text_index']['logical_records']['components']  # open one record by its full_record_pointer index, never wholesale"
  ],
  "expected_minimum_checks": [
   "artifact_kind == microcosm_ai_review_packet",
   "schema == microcosm_ai_review_packet_v1",
   "len(component_digest) == counts.component_count",
   "required question routes present",
   "at least one full_record_pointer resolves"
  ]
 },
 "evidence_mode_legend": {
  "why_this_exists": "Readers collapse four separate axes into one word, 'runnable': whether a component has a command route (all do), what kind of check runs (evidence mode), whether external tools are invoked (runs_real_tools), and how independently the verdict can fail (rank). Keep them separate.",
  "release_lane_frame": "Microcosm is the public release of a larger working system, and the evidence modes are the release lanes components took to get here: verified imports carry the real code across under digest checks; projections and bounded runs exercise that code where private data and live services cannot follow; contract validators publish the checks themselves so they can fail in public; external tool runs close the loop where a real tool fits a bounded public form. A release where every component ran live external tools would need the live system; this one shows the mechanism, the code, and the check in their inspectable forms instead.",
  "current_public_witness_state": {
   "release_mode": "populated_source_release",
   "source_body_state": "published",
   "fixture_state": "published",
   "public_runnable_now": true,
   "public_witness_form": "source_bodies_fixtures_and_result_records",
   "source_status_authority": "SOURCE_STATUS.md",
   "invariant": "Published source paths are inspectable source bodies in this release mode."
  },
  "axes": {
   "command_route": "Every component has a command a reviewer can run or inspect.",
   "evidence_mode": "What kind of public check the component performs (the release lane it took).",
   "runs_real_tools": "Whether the public witness invokes external machinery beyond its own checker code (10 components today).",
   "rank": "Verdict independence on a 1-to-5 scale; not maturity, not machinery weight.",
   "scope_limit": "Where the component's claim stops."
  },
  "modes": {
   "Computed projection": {
    "component_count": 27,
    "what_it_is": "A deterministic public view recomputed from source or fixture material; the checker derives the result rather than echoing a stored answer.",
    "why_it_counts": "Recomputation fails on drift: a rebuild plus drift check has to agree with the committed output.",
    "what_it_does_not_show": "Live behaviour of the system it projects; it is a faithful view, not an execution."
   },
   "Verified source import": {
    "component_count": 21,
    "what_it_is": "Real source files copied from the larger working system into the public tree, accepted only when content digests and provenance line up.",
    "why_it_counts": "You are reading the actual code, fingerprint-checked against its origin.",
    "what_it_does_not_show": "That the imported code is exercised end-to-end here; behaviour beyond the declared check stays out of scope."
   },
   "Contract validator": {
    "component_count": 20,
    "what_it_is": "A checker that derives a pass or fail verdict over a declared public contract and refuses malformed or overclaiming inputs.",
    "why_it_counts": "The verdict is computed, not handed over by the fixture, and negative cases prove the refusal paths fire.",
    "what_it_does_not_show": "That the contract covers everything that matters; it proves the declared contract, no more."
   },
   "External tool run": {
    "component_count": 7,
    "what_it_is": "A witness that invokes real external machinery (Lean/Lake, statistics code) inside a deliberately small public scope.",
    "why_it_counts": "The loop closes end to end with the actual tool; nothing stands in for the prover or the stats library.",
    "what_it_does_not_show": "General proof authority, benchmark results, or product capability; the witness is small on purpose."
   },
   "Bounded runtime computation": {
    "component_count": 3,
    "what_it_is": "Public runtime code executed over a small fixture or public slice, writing a result record for inspection.",
    "why_it_counts": "Real execution, deliberately bounded so it runs anywhere without private data or live services.",
    "what_it_does_not_show": "Production behaviour at scale or over private inputs."
   }
  },
  "rank_by_mode": {
   "Bounded runtime computation": {
    "rank_4": 3
   },
   "Computed projection": {
    "rank_3": 27
   },
   "Contract validator": {
    "rank_4": 2,
    "rank_5": 18
   },
   "External tool run": {
    "rank_4": 7
   },
   "Verified source import": {
    "rank_5": 21
   }
  },
  "runs_real_tools_index": [
   {
    "id": "public_reveal_walkthrough",
    "label": "Public Reveal Walkthrough",
    "family_label": "Entry & orientation",
    "evidence_kind": "Bounded runtime computation",
    "rank": 4
   },
   {
    "id": "corpus_readiness_mathlib_absence_gate",
    "label": "Corpus Readiness Mathlib Absence Gate",
    "family_label": "Formal math & proof",
    "evidence_kind": "External tool run",
    "rank": 4
   },
   {
    "id": "formal_math_lean_proof_witness",
    "label": "Formal Math Lean Proof Witness",
    "family_label": "Formal math & proof",
    "evidence_kind": "External tool run",
    "rank": 4
   },
   {
    "id": "verifier_lab_execution_spine",
    "label": "Verifier Lab Execution Spine",
    "family_label": "Formal math & proof",
    "evidence_kind": "External tool run",
    "rank": 4
   },
   {
    "id": "certificate_kernel_execution_lab",
    "label": "Certificate Kernel Execution Lab",
    "family_label": "Formal math & proof",
    "evidence_kind": "External tool run",
    "rank": 4
   },
   {
    "id": "provider_context_recipe_budget_policy",
    "label": "Provider Context Recipe Budget Policy",
    "family_label": "Agent reliability & safety",
    "evidence_kind": "Bounded runtime computation",
    "rank": 4
   },
   {
    "id": "agent_closeout_faithfulness_audit",
    "label": "Agent Completion Faithfulness Audit",
    "family_label": "Agent reliability & safety",
    "evidence_kind": "External tool run",
    "rank": 4
   },
   {
    "id": "bounded_autonomy_campaign_packet",
    "label": "Bounded Autonomy Campaign Packet",
    "family_label": "Agent reliability & safety",
    "evidence_kind": "External tool run",
    "rank": 4
   },
   {
    "id": "finance_forecast_evaluation_spine",
    "label": "Finance Forecast Evaluation Spine",
    "family_label": "Research & science",
    "evidence_kind": "External tool run",
    "rank": 4
   },
   {
    "id": "mission_transaction_work_spine",
    "label": "Mission Transaction Work Spine",
    "family_label": "Work & continuity",
    "evidence_kind": "Bounded runtime computation",
    "rank": 4
   }
  ],
  "precomputed_tables_note": "rank_by_mode and runs_real_tools_index are computed from component_digest at build time so a reader without a code tool does not have to reconstruct them; they carry no information the digest rows do not.",
  "real_tool_rank_note": "No component is both rank 5 and marked runs-real-tools: a bounded external-tool run is capped at rank 4 on purpose, because rank measures verdict independence, not machinery.",
  "do_not_say": [
   "only the real-tool components are real",
   "the rest are just fixtures",
   "runnable means an external tool ran",
   "evidence mode is a quality ranking",
   "rank is maturity",
   "a long exclusion list means the component is thin (it measures release discipline, not depth)"
  ]
 },
 "question_menu": {
  "why_sets": "Different readers open with different stakes; the sets are doors, not a script. Every set funnels into the same evidence routes, and any question from any set is fair to ask cold.",
  "sets": [
   {
    "id": "first_pass",
    "label": "A plain first pass",
    "surface": "chat_with_packet",
    "questions": [
     "What is this, in plain terms?",
     "Where should I start?",
     "Walk me through one component, end to end.",
     "What is genuinely new here, if anything?",
     "Give me the two-sentence version I would tell a colleague."
    ]
   },
   {
    "id": "skeptical_pass",
    "label": "A skeptical pass",
    "surface": "chat_with_packet",
    "questions": [
     "Argue against it.",
     "Which parts have the strongest evidence, and which the weakest?",
     "Why do only some components run external tools?",
     "What does it not prove?",
     "Is this packet steering me? Audit its own framing.",
     "Most accurate one-paragraph assessment you can give: neither generous nor harsh."
    ]
   },
   {
    "id": "one_area",
    "label": "One area at a time",
    "surface": "chat_with_packet",
    "questions": [
     "Which area is closest to my field, and what is actually in it?",
     "What is actually in Entry & orientation?",
     "What is actually in Architecture & navigation?",
     "What is actually in Formal math & proof?",
     "What is actually in Agent reliability & safety?",
     "What is actually in Research & science?",
     "What is actually in Import & drift control?",
     "What is actually in Work & continuity?"
    ]
   },
   {
    "id": "with_a_coding_agent",
    "label": "With a coding agent in the repository",
    "surface": "cloned_repository",
    "note": "For Claude Code, Codex, Cursor, or any agent harness opened inside the cloned repository; not for a chat upload of this packet.",
    "how_it_differs": "The other sets are questions for an assistant reading this map. A coding agent works inside the repository itself: one setup prompt instantiates it, and after that you assign work, one item at a time; it runs the commands, reads the source, and leaves result records you can check. Do not paste the work items as a batch.",
    "setup_prompt": "Clone https://github.com/wcook04/microcosm-substrate and open it. Read AGENTS.md and README.md to orient yourself, run the quickstart check, and show me what the result record says. Then take my questions.",
    "questions": [
     "Run one component end to end and walk me through the evidence it leaves.",
     "Take one claim from the website and verify it against the source here.",
     "Which validators can you run right now, and what would each one prove?",
     "Make one check fail on purpose and show me how it refuses."
    ]
   }
  ]
 },
 "starter_prompts": {
  "fast_orientation": "Read read_me_first and question_router in this file, then answer: what is Microcosm, what should I run first, and what does the public evidence show? Cite packet paths or public page links for each claim.",
  "skeptical_review": "Act as a calibration reviewer. Using component_digest, claim_ceiling_index, and visible_text_index, name the strongest components by area and judge both directions: where the wording claims more than the linked evidence shows, and where it undersells what a component demonstrates. Cite component ids and source routes. Do not reduce the system to its fixtures; computed projection is one evidence class among several.",
  "component_audit": "Pick one component from component_digest. Report: what it does, its evidence class and 1-to-5 rank (rank is verdict independence, not maturity), whether it runs real tools, its scope limit, and the exact source links to open. Then say what the public evidence does not show.",
  "source_route_review": "For each area in family_digest, name the first repository file a reviewer should open, using source_map and component source links. Prefer exact paths; when the packet does not carry one, say so rather than guessing.",
  "website_rough_edge_pass": "Review this packet and the public site text in visible_text_index as a product surface. Find rough edges: copy that overclaims or undersells, confusing first-contact framing, inconsistent vocabulary, or missing next steps. For each, name where it appears, the failure class, sibling places the same class may repeat, and a suggested fix.",
  "release_claim_audit": "List every claim in read_me_first and the landing and area page text that a skeptical reader might challenge. For each, route to the packet field or public source that supports it, or state plainly that the public evidence does not show it.",
  "evidence_mode_skepticism": "I am skeptical of the word 'runnable'. Using evidence_mode_legend and component_digest, explain what is command-addressable, which components invoke external tools or runtimes, and what the validators, projections, and verified imports each prove. Treat evidence modes as release lanes, not quality tiers: do not call non-tool components fake, and do not inflate tool witnesses into general proof.",
  "release_staleness_audit": "Search the page text in this packet for launch-era phrasing such as 'goes public at launch', 'posted at launch', 'publishes alongside launch', or 'when posted'. For each hit, say where it appears, check release_mode.mode, and say whether the phrase still makes sense; suggest post-release wording where it does not.",
  "offline_completeness_audit": "Which questions can this single file answer offline, and which need the routed sidecar files or the repository? Use sidecar_embedding_policy, content_graph_sections, and sidecar_refs. Treat routed-not-embedded material as a declared packaging decision, not a count mismatch, unless the packet claims the rows are embedded.",
  "area_substance_review": "Pick one area from family_digest. Using family_depth_facts and that area's largest paper-module record (open it in visible_text_index.logical_records.paper_modules by id), describe what is actually there: component counts, evidence modes, what runs, what is checked, authored write-up mass, prior-art references, and the named mechanisms in their own terms. No adjectives in either direction; facts and citations only, ending with the scope limits.",
  "audit_this_packets_framing": "Treat this packet itself as the object under review. authorship_and_framing admits the file shapes attention through key order, routes, computed tables, and prompts. Find where structure or wording pushes toward a conclusion, test whether each push is backed by evidence you can open, and report any push that is not, in either direction: flattering or deflating. Wherever a verdict is pre-decided, the packet fails its own contract; say so."
 },
 "question_router": {
  "schema": "microcosm_public_canonical_question_routes_v0",
  "contract": "Routes a question to the first object that can answer it; it does not pre-decide the verdict. The reader still inspects.",
  "routes": {
   "what_is_microcosm": {
    "question_family": "orientation",
    "first_sources": [
     "quick_path",
     "coverage_scope",
     "read_me_first",
     "route_index.start_here"
    ],
    "answer_shape": [
     "one_sentence",
     "public_boundary",
     "local_runtime",
     "source_authority",
     "first_local_witness"
    ],
    "must_not_infer": [
     "claims_without_public_evidence",
     "hosted_service",
     "whole_system_correctness"
    ]
   },
   "where_to_start": {
    "question_family": "orientation",
    "first_sources": [
     "quick_path",
     "route_index.start_here",
     "component_digest[cold_reader_route_map]"
    ],
    "expansion_sources": [
     "component_digest"
    ],
    "answer_shape": [
     "run_one_local_witness",
     "inspect_result_record",
     "read_evidence_line",
     "follow_source_route"
    ],
    "must_not_infer": [
     "best_component_overall",
     "the_reader_has_a_terminal",
     "a_command_not_carried_by_the_packet"
    ],
    "first_ask": "Whether the human runs code. With a terminal: the quickstart loop. Without one: start_here.no_terminal_route, reading records aloud from this packet; do not mention cloning."
   },
   "component_inspection": {
    "question_family": "component",
    "first_sources": [
     "component_digest"
    ],
    "expansion_sources": [
     "component_digest[].full_record_pointer",
     "visible_text_index.logical_records.components"
    ],
    "do_not_open_first": [
     "visible_text_index.logical_records.paper_modules"
    ],
    "answer_shape": [
     "what_it_does",
     "evidence_kind_rank_runs_real_tools",
     "scope_limit",
     "relative_href",
     "source_links",
     "next_inspection"
    ],
    "must_not_infer": [
     "area_score",
     "maturity",
     "whole_system_verdict"
    ]
   },
   "what_it_proves": {
    "question_family": "evidence",
    "first_sources": [
     "component_digest[].rank",
     "component_digest[].evidence_kind",
     "route_index.pages[evidence]"
    ],
    "answer_shape": [
     "evidence_kind",
     "rank_as_verdict_independence",
     "runs_real_tools",
     "boundary"
    ],
    "must_not_infer": [
     "maturity",
     "product_readiness",
     "whole_system_correctness"
    ]
   },
   "what_it_does_not_prove": {
    "question_family": "boundary",
    "first_sources": [
     "component_digest[].scope_limit",
     "claim_ceiling_index",
     "component_digest[].claim_ceiling_tags"
    ],
    "answer_shape": [
     "scope_limit",
     "applicable_claim_ceilings",
     "source_route"
    ],
    "must_not_infer": [
     "component_is_weak",
     "component_is_broken"
    ]
   },
   "what_does_the_public_artifact_support": {
    "question_family": "evidence_boundary",
    "first_sources": [
     "coverage_scope",
     "route_index",
     "component_digest[].scope_limit",
     "claim_ceiling_index[public_evidence_only]"
    ],
    "answer_shape": [
     "public_sources_to_check",
     "claim_supported_by_public_evidence",
     "claim_not_shown_by_public_evidence",
     "next_source_route"
    ],
    "must_not_infer": [
     "claims_without_public_evidence",
     "product_readiness",
     "hosted_service",
     "whole_system_correctness"
    ]
   },
   "security_or_finance_or_product_claim": {
    "question_family": "boundary",
    "first_sources": [
     "claim_ceiling_index",
     "component_digest[].claim_ceiling_tags",
     "component_digest[].scope_limit"
    ],
    "answer_shape": [
     "applicable_claim_ceilings",
     "scope_limit",
     "refusal"
    ],
    "must_not_infer": [
     "security_product",
     "financial_advice",
     "product_readiness"
    ]
   },
   "where_is_the_source": {
    "question_family": "provenance",
    "first_sources": [
     "component_digest[].full_record_pointer",
     "source_ref_summary",
     "source_map"
    ],
    "answer_shape": [
     "source_links",
     "source_fingerprint",
     "repository"
    ],
    "must_not_infer": [
     "site_outranks_source"
    ]
   },
   "three_minute_route": {
    "question_family": "triage",
    "first_sources": [
     "quick_path",
     "family_digest",
     "component_digest"
    ],
    "answer_shape": [
     "quickstart",
     "one_component",
     "evidence",
     "boundary",
     "source",
     "architecture_after_loop"
    ],
    "must_not_infer": [
     "best_component_overall",
     "product_readiness"
    ]
   },
   "how_to_argue_against_it": {
    "question_family": "skeptical",
    "first_sources": [
     "component_digest[].scope_limit",
     "component_digest[].rank",
     "component_digest[].full_record_pointer"
    ],
    "answer_shape": [
     "pick_one_component",
     "read_rank_and_boundary",
     "follow_source",
     "flag_overclaim_and_underclaim"
    ],
    "must_not_infer": [
     "whole_system_verdict"
    ]
   },
   "rough_edge_audit": {
    "question_family": "public_surface_quality",
    "goal": "Find small defects that reduce trust. Treat each as a specimen of a class, then check sibling surfaces for the same class before reporting.",
    "first_sources": [
     "site_views",
     "visible_text_index.pages",
     "component_digest[].summary_line",
     "claim_ceiling_index",
     "route_index"
    ],
    "answer_shape": [
     "rough_edge",
     "failure_class",
     "where_seen",
     "sibling_surfaces_to_check",
     "suggested_patch",
     "suggested_guard"
    ],
    "must_not_infer": [
     "defect_severity_beyond_what_is_shown"
    ]
   },
   "why_not_every_component_runs_real_tools": {
    "question_family": "evidence_mode_calibration",
    "first_sources": [
     "evidence_mode_legend",
     "component_digest[].evidence_kind",
     "component_digest[].runs_real_tools",
     "route_index.pages[evidence]",
     "claim_ceiling_index"
    ],
    "answer_shape": [
     "separate_command_route_from_external_tool_run",
     "name_the_release_lane",
     "rank_is_verdict_independence_not_machinery",
     "one_tool_witness_and_one_validator_example",
     "state_scope_limit"
    ],
    "must_not_infer": [
     "non_tool_components_are_fake",
     "rank_is_maturity",
     "external_tool_run_is_general_proof"
    ]
   },
   "area_substance": {
    "question_family": "substance",
    "first_sources": [
     "family_depth_facts",
     "component_digest[].summary_line",
     "evidence_mode_legend",
     "visible_text_index.logical_records.paper_modules"
    ],
    "expansion_sources": [
     "claim_ceiling_index",
     "route_index.pages[]"
    ],
    "answer_shape": [
     "counts_bytes_and_references_first",
     "open_one_largest_paper_module_record",
     "name_the_mechanism_in_its_own_terms",
     "separate_check_rank_from_mechanism_depth",
     "state_scope_limit"
    ],
    "must_not_infer": [
     "thinness_from_scope_limit_negations",
     "depth_from_rank",
     "capability_from_byte_count"
    ]
   },
   "what_is_the_larger_system": {
    "question_family": "context",
    "first_sources": [
     "release_frame",
     "coverage_scope",
     "evidence_mode_legend",
     "site"
    ],
    "expansion_sources": [
     "claim_ceiling_index[public_evidence_only]",
     "visible_text_index.pages"
    ],
    "answer_shape": [
     "what_the_slice_is",
     "why_the_release_is_bounded",
     "withheld_is_unknown_here",
     "where_the_public_repository_goes_deeper"
    ],
    "must_not_infer": [
     "capability_of_the_wider_system",
     "absence_of_capability",
     "contents_of_withheld_material"
    ]
   },
   "how_to_review_with_a_coding_agent": {
    "question": "How do I review this with a coding agent (Claude Code, Codex, Cursor)?",
    "first_sources": [
     "start_here.coding_agent_route",
     "question_menu.sets[with_a_coding_agent]",
     "site.source_of_record"
    ],
    "answer_shape": [
     "name the three reading forms: site pages for people, this packet for chat assistants, the repository for coding agents",
     "give start_here.coding_agent_route as the path; the agent performs the clone itself, so no git knowledge is assumed",
     "say what the agent finds on arrival: AGENTS.md orientation at the repository root, runnable components and fixtures, validators, result records in .microcosm/",
     "carry the same boundary: the agent verifies against public records and stops at scope limits"
    ],
    "must_not_infer": [
     "that_this_packet_replaces_the_repository_for_a_coding_agent",
     "commands_or_paths_not_carried_by_the_packet_or_repository"
    ]
   }
  }
 },
 "start_here": {
  "human_route": [
   "quickstart",
   "one component",
   "evidence line",
   "source link",
   "scope limit"
  ],
  "no_terminal_route": [
   "hear the one-sentence answer (read_me_first.one_sentence)",
   "ask any of read_me_first.first_questions, in any order",
   "have the assistant open one component record and read out its evidence line and scope limit",
   "decide whether anything earns a visit to the repository; running code stays optional"
  ],
  "coding_agent_route": [
   "install a coding agent: Claude Code, Codex, or Cursor",
   "have it clone https://github.com/wcook04/microcosm-substrate (the agent performs the clone itself; no git knowledge is assumed)",
   "the agent reads AGENTS.md at the repository root and orients itself",
   "ask in plain language from there; the agent runs the commands"
  ],
  "ai_route": [
   "read_me_first",
   "question_router",
   "component_digest",
   "visible_text_index on demand"
  ]
 },
 "site_views": {
  "schema": "microcosm_public_view_descriptor_v1",
  "purpose": "Every major public view describes itself: what it is for, its primary action, and the rough-edge checks that keep it honest. Reviewers can audit the site against these.",
  "consumers": [
   "ai_review_packet",
   "rough_edge_audit_route",
   "recording_script",
   "site_regression_tests"
  ],
  "landing": [
   {
    "view_id": "landing.hero",
    "human_title": "Microcosm, in one screen",
    "public_purpose": "Say what Microcosm is in one pass: a local, source-linked public map you can run, with the five-step loop visible.",
    "primary_action": {
     "label": "Run one local witness",
     "kind": "link",
     "target": "docs/quickstart.html"
    },
    "evidence_role": "orientation_only",
    "ai_read_hint": "The five loop chips are the whole reading model: command, record, evidence, source, scope.",
    "review_hint": "Open here; read the lede and the five chips before anything else.",
    "rough_edge_checks": [
     "five chips hold one line at desktop widths",
     "wrapped chips keep their arrows",
     "one primary button"
    ]
   },
   {
    "view_id": "landing.hero.ai_handoff",
    "human_title": "Hand the map to your own AI",
    "public_purpose": "Give a cold visitor one low-friction way to hand Microcosm to an AI reviewer.",
    "primary_action": {
     "label": "Download reader digest",
     "kind": "download",
     "target": "microcosm-ai-reader-digest.json"
    },
    "evidence_role": "orientation_only",
    "ai_read_hint": "If you are reading the downloaded digest, start at quick_path and canonical_question_routes.",
    "review_hint": "Show the primary digest download, then the drag into a chat window.",
    "rough_edge_checks": [
     "single primary CTA",
     "label fits without wrapping",
     "the download control saves a file and never opens a raw JSON tab",
     "the questions list has a working copy control",
     "advanced artifacts sit behind disclosure"
    ]
   },
   {
    "view_id": "landing.evidence_loop",
    "human_title": "The idea in one local pass",
    "public_purpose": "Walk the five-step loop once with real links, so the reading model becomes concrete.",
    "primary_action": {
     "label": "Run the quickstart",
     "kind": "link",
     "target": "docs/quickstart.html"
    },
    "evidence_role": "orientation_only",
    "ai_read_hint": "The loop steps mirror question_router.where_to_start.",
    "review_hint": "Trace the five numbered steps in order; the spine wash animates once on scroll.",
    "rough_edge_checks": [
     "all five steps link somewhere real",
     "step numbers light in sequence unless reduced motion"
    ]
   },
   {
    "view_id": "landing.what_it_is",
    "human_title": "Seventy-eight components across seven areas",
    "public_purpose": "State the headline count and immediately teach how to read it (reads-as card).",
    "primary_action": {
     "label": "Open a component card",
     "kind": "link",
     "target": "docs/components.html"
    },
    "evidence_role": "claim_with_reading_aid",
    "ai_read_hint": "Pair the 78 count with claim_ceiling_index before repeating it.",
    "review_hint": "Read the reads-as card aloud: means / does not mean / to check it.",
    "rough_edge_checks": [
     "count matches counts.component_count",
     "reads-as card present",
     "no maturity language"
    ]
   },
   {
    "view_id": "landing.whats_real",
    "human_title": "What runs, and how it's checked",
    "public_purpose": "Separate the two signals a reviewer needs: rank as verdict independence, and real-tool execution.",
    "primary_action": {
     "label": "Read the evidence page",
     "kind": "link",
     "target": "docs/evidence.html"
    },
    "evidence_role": "claim_with_reading_aid",
    "ai_read_hint": "Use this section's rank framing verbatim; rank 4 caps bounded real-tool runs on purpose.",
    "review_hint": "This is where the rank legend gets explained once, slowly.",
    "rough_edge_checks": [
     "rank framing matches the evidence page",
     "no rank-as-maturity phrasing"
    ]
   },
   {
    "view_id": "landing.walkthrough",
    "human_title": "Optional wider-system views",
    "public_purpose": "Show related blurred stills without conflating them with the runnable public artifact.",
    "primary_action": {
     "label": "Open the stills carousel",
     "kind": "link",
     "target": "#walkthrough"
    },
    "evidence_role": "context_only",
    "ai_read_hint": "The blurred stills are context, not evidence; the runnable artifact is the repository.",
    "review_hint": "Frame as: this is the console the public map comes from.",
    "rough_edge_checks": [
     "no third-party media request",
     "copy says stills are related context, not the artifact"
    ]
   },
   {
    "view_id": "landing.review",
    "human_title": "Read it like a sceptic",
    "public_purpose": "Give the visitor a five-step skeptical route and a paste-ready adversarial prompt.",
    "primary_action": {
     "label": "Start from the repository",
     "kind": "link",
     "target": "https://github.com/wcook04/microcosm-substrate"
    },
    "evidence_role": "orientation_only",
    "ai_read_hint": "The embedded prompt matches starter_prompts.skeptical_review in spirit; prefer the packet version.",
    "review_hint": "Read the both-directions line: overclaim and undersell are both errors.",
    "rough_edge_checks": [
     "route steps link correctly",
     "prompt block stays copyable"
    ]
   },
   {
    "view_id": "landing.contact",
    "human_title": "Source & contact",
    "public_purpose": "Route to the repository, docs, license, security policy, and the author without ceremony.",
    "primary_action": {
     "label": "Open the repository",
     "kind": "link",
     "target": "https://github.com/wcook04/microcosm-substrate"
    },
    "evidence_role": "navigation_only",
    "ai_read_hint": "Use these rows for any where-is-the-source answer the packet cannot resolve.",
    "review_hint": "Show, do not read, the contact rows.",
    "rough_edge_checks": [
     "every row resolves",
     "no dead anchors"
    ]
   }
  ],
  "docs": [
   {
    "view_id": "docs.overview",
    "human_title": "Overview",
    "public_purpose": "Overview of Microcosm: a runnable public map of an AI-native workflow system.",
    "primary_action": {
     "label": "Read Overview",
     "kind": "link",
     "target": "docs/index.html"
    },
    "nav_group": "Getting started",
    "source_refs": [
     "microcosm-substrate/README.md",
     "microcosm-substrate/core/organ_families.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.tour",
    "human_title": "What Microcosm is",
    "public_purpose": "What Microcosm is: a guided read across all seven areas and the components that do the real work.",
    "primary_action": {
     "label": "Read What Microcosm is",
     "kind": "link",
     "target": "docs/tour.html"
    },
    "nav_group": "Getting started",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.quickstart",
    "human_title": "Quickstart",
    "public_purpose": "Clone Microcosm and run the first command against a folder.",
    "primary_action": {
     "label": "Read Quickstart",
     "kind": "link",
     "target": "docs/quickstart.html"
    },
    "nav_group": "Getting started",
    "source_refs": [
     "microcosm-substrate/QUICKSTART.md",
     "microcosm-substrate/SOURCE_STATUS.md"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.coding-agents",
    "human_title": "Working with a coding agent",
    "public_purpose": "Reading Microcosm through Claude Code, Codex, Cursor, or another agent harness.",
    "primary_action": {
     "label": "Read Working with a coding agent",
     "kind": "link",
     "target": "docs/coding-agents.html"
    },
    "nav_group": "Getting started",
    "source_refs": [
     "microcosm-substrate/AGENTS.md",
     "microcosm-substrate/README.md"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.architecture",
    "human_title": "How it fits together",
    "public_purpose": "The shared shape behind every Microcosm component.",
    "primary_action": {
     "label": "Read How it fits together",
     "kind": "link",
     "target": "docs/architecture.html"
    },
    "nav_group": "The system",
    "source_refs": [
     "microcosm-substrate/ARCHITECTURE.md",
     "microcosm-substrate/core/architecture_kernel.json",
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.doctrine",
    "human_title": "Doctrine",
    "public_purpose": "The commitments Microcosm applies before a claim, route, count, import, or page is allowed to mean anything: its axioms, principles, and anti-principles.",
    "primary_action": {
     "label": "Read Doctrine",
     "kind": "link",
     "target": "docs/doctrine.html"
    },
    "nav_group": "The system",
    "source_refs": [
     "microcosm-substrate/axioms/AX-1.json",
     "microcosm-substrate/principles/P-1.json",
     "microcosm-substrate/anti_principles/AP-1.json",
     "microcosm-substrate/core/doctrine_lattice_coverage.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.area-entry",
    "human_title": "Entry & orientation",
    "public_purpose": "How a newcomer first meets Microcosm and follows a short guided path through it.",
    "primary_action": {
     "label": "Read Entry & orientation",
     "kind": "link",
     "target": "docs/area-entry.html"
    },
    "nav_group": "Areas",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.area-architecture",
    "human_title": "Architecture & navigation",
    "public_purpose": "The core primitives, pattern rules, and routing that give the system its shape.",
    "primary_action": {
     "label": "Read Architecture & navigation",
     "kind": "link",
     "target": "docs/area-architecture.html"
    },
    "nav_group": "Areas",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.area-formal-math",
    "human_title": "Formal math & proof",
    "public_purpose": "Inspectable pieces of a proof pipeline: premise retrieval over a copied Lean Std index, tactic routing, verifier-trace repair, and claim-separation result records. Three components run the real Lean/Lake prover locally on bounded examples; the rest publish the pipeline's checking layers as contracts you can open.",
    "primary_action": {
     "label": "Read Formal math & proof",
     "kind": "link",
     "target": "docs/area-formal-math.html"
    },
    "nav_group": "Areas",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.area-agent-reliability",
    "human_title": "Agent reliability & safety",
    "public_purpose": "Source-open replays of agent failure modes as inspectable specimens.",
    "primary_action": {
     "label": "Read Agent reliability & safety",
     "kind": "link",
     "target": "docs/area-agent-reliability.html"
    },
    "nav_group": "Areas",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.area-research",
    "human_title": "Research & science",
    "public_purpose": "Replays that stand in for scientific and forecasting workflows, run over synthetic fixtures.",
    "primary_action": {
     "label": "Read Research & science",
     "kind": "link",
     "target": "docs/area-research.html"
    },
    "nav_group": "Areas",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.area-import-drift",
    "human_title": "Import & drift control",
    "public_purpose": "The boundary that brings non-secret material into the public tree and flags drift.",
    "primary_action": {
     "label": "Read Import & drift control",
     "kind": "link",
     "target": "docs/area-import-drift.html"
    },
    "nav_group": "Areas",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.area-continuity",
    "human_title": "Work & continuity",
    "public_purpose": "How reversible work is recorded, landing decisions are made, and runs resume.",
    "primary_action": {
     "label": "Read Work & continuity",
     "kind": "link",
     "target": "docs/area-continuity.html"
    },
    "nav_group": "Areas",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.components",
    "human_title": "Components",
    "public_purpose": "Generated index of Microcosm public components.",
    "primary_action": {
     "label": "Read Components",
     "kind": "link",
     "target": "docs/components.html"
    },
    "nav_group": "Reference",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.field-guide",
    "human_title": "Field guide",
    "public_purpose": "Generated middle-layer roster across Microcosm components, rules, ideas, and paper modules.",
    "primary_action": {
     "label": "Read Field guide",
     "kind": "link",
     "target": "docs/field-guide.html"
    },
    "nav_group": "Reference",
    "source_refs": [
     "microcosm-substrate/anti_principles/AP-1.json",
     "microcosm-substrate/anti_principles/AP-10.json",
     "microcosm-substrate/anti_principles/AP-11.json",
     "microcosm-substrate/anti_principles/AP-12.json",
     "microcosm-substrate/anti_principles/AP-13.json",
     "microcosm-substrate/anti_principles/AP-14.json",
     "microcosm-substrate/anti_principles/AP-15.json",
     "microcosm-substrate/anti_principles/AP-16.json",
     "microcosm-substrate/anti_principles/AP-17.json",
     "microcosm-substrate/anti_principles/AP-2.json",
     "microcosm-substrate/anti_principles/AP-3.json",
     "microcosm-substrate/anti_principles/AP-4.json",
     "microcosm-substrate/anti_principles/AP-5.json",
     "microcosm-substrate/anti_principles/AP-6.json",
     "microcosm-substrate/anti_principles/AP-7.json",
     "microcosm-substrate/anti_principles/AP-8.json",
     "microcosm-substrate/anti_principles/AP-9.json",
     "microcosm-substrate/atlas/entry_packet.json",
     "microcosm-substrate/axioms/AX-1.json",
     "microcosm-substrate/axioms/AX-10.json",
     "microcosm-substrate/axioms/AX-11.json",
     "microcosm-substrate/axioms/AX-12.json",
     "microcosm-substrate/axioms/AX-2.json",
     "microcosm-substrate/axioms/AX-3.json",
     "microcosm-substrate/axioms/AX-4.json",
     "microcosm-substrate/axioms/AX-5.json",
     "microcosm-substrate/axioms/AX-6.json",
     "microcosm-substrate/axioms/AX-7.json",
     "microcosm-substrate/axioms/AX-8.json",
     "microcosm-substrate/axioms/AX-9.json",
     "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
     "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
     "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
     "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "microcosm-substrate/core/doctrine_lattice_coverage.json",
     "microcosm-substrate/core/doctrine_lattice_relations.json",
     "microcosm-substrate/core/mechanism_sources.json",
     "microcosm-substrate/core/organ_atlas.json",
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/paper_module_capsules.json",
     "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "microcosm-substrate/principles/P-1.json",
     "microcosm-substrate/principles/P-10.json",
     "microcosm-substrate/principles/P-11.json",
     "microcosm-substrate/principles/P-12.json",
     "microcosm-substrate/principles/P-13.json",
     "microcosm-substrate/principles/P-14.json",
     "microcosm-substrate/principles/P-15.json",
     "microcosm-substrate/principles/P-16.json",
     "microcosm-substrate/principles/P-17.json",
     "microcosm-substrate/principles/P-18.json",
     "microcosm-substrate/principles/P-19.json",
     "microcosm-substrate/principles/P-2.json",
     "microcosm-substrate/principles/P-20.json",
     "microcosm-substrate/principles/P-3.json",
     "microcosm-substrate/principles/P-4.json",
     "microcosm-substrate/principles/P-5.json",
     "microcosm-substrate/principles/P-6.json",
     "microcosm-substrate/principles/P-7.json",
     "microcosm-substrate/principles/P-8.json",
     "microcosm-substrate/principles/P-9.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.rules-and-ideas",
    "human_title": "Doctrine reference",
    "public_purpose": "The compact public rule lattice: principles, axioms, concepts, mechanisms, and paper modules.",
    "primary_action": {
     "label": "Read Doctrine reference",
     "kind": "link",
     "target": "docs/rules-and-ideas.html"
    },
    "nav_group": "Reference",
    "source_refs": [
     "microcosm-substrate/anti_principles/AP-1.json",
     "microcosm-substrate/anti_principles/AP-10.json",
     "microcosm-substrate/anti_principles/AP-11.json",
     "microcosm-substrate/anti_principles/AP-12.json",
     "microcosm-substrate/anti_principles/AP-13.json",
     "microcosm-substrate/anti_principles/AP-14.json",
     "microcosm-substrate/anti_principles/AP-15.json",
     "microcosm-substrate/anti_principles/AP-16.json",
     "microcosm-substrate/anti_principles/AP-17.json",
     "microcosm-substrate/anti_principles/AP-2.json",
     "microcosm-substrate/anti_principles/AP-3.json",
     "microcosm-substrate/anti_principles/AP-4.json",
     "microcosm-substrate/anti_principles/AP-5.json",
     "microcosm-substrate/anti_principles/AP-6.json",
     "microcosm-substrate/anti_principles/AP-7.json",
     "microcosm-substrate/anti_principles/AP-8.json",
     "microcosm-substrate/anti_principles/AP-9.json",
     "microcosm-substrate/atlas/entry_packet.json",
     "microcosm-substrate/axioms/AX-1.json",
     "microcosm-substrate/axioms/AX-10.json",
     "microcosm-substrate/axioms/AX-11.json",
     "microcosm-substrate/axioms/AX-12.json",
     "microcosm-substrate/axioms/AX-2.json",
     "microcosm-substrate/axioms/AX-3.json",
     "microcosm-substrate/axioms/AX-4.json",
     "microcosm-substrate/axioms/AX-5.json",
     "microcosm-substrate/axioms/AX-6.json",
     "microcosm-substrate/axioms/AX-7.json",
     "microcosm-substrate/axioms/AX-8.json",
     "microcosm-substrate/axioms/AX-9.json",
     "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
     "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
     "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
     "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "microcosm-substrate/core/doctrine_lattice_coverage.json",
     "microcosm-substrate/core/doctrine_lattice_relations.json",
     "microcosm-substrate/core/mechanism_sources.json",
     "microcosm-substrate/core/paper_module_capsules.json",
     "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "microcosm-substrate/principles/P-1.json",
     "microcosm-substrate/principles/P-10.json",
     "microcosm-substrate/principles/P-11.json",
     "microcosm-substrate/principles/P-12.json",
     "microcosm-substrate/principles/P-13.json",
     "microcosm-substrate/principles/P-14.json",
     "microcosm-substrate/principles/P-15.json",
     "microcosm-substrate/principles/P-16.json",
     "microcosm-substrate/principles/P-17.json",
     "microcosm-substrate/principles/P-18.json",
     "microcosm-substrate/principles/P-19.json",
     "microcosm-substrate/principles/P-2.json",
     "microcosm-substrate/principles/P-20.json",
     "microcosm-substrate/principles/P-3.json",
     "microcosm-substrate/principles/P-4.json",
     "microcosm-substrate/principles/P-5.json",
     "microcosm-substrate/principles/P-6.json",
     "microcosm-substrate/principles/P-7.json",
     "microcosm-substrate/principles/P-8.json",
     "microcosm-substrate/principles/P-9.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.paper-modules",
    "human_title": "Paper modules",
    "public_purpose": "The long-form write-ups behind the components: one document per mechanism, with how it is checked, its realness rungs, and where its scope stops. Component cards embed the same write-ups; this page is the whole collection in one place.",
    "primary_action": {
     "label": "Read Paper modules",
     "kind": "link",
     "target": "docs/paper-modules.html"
    },
    "nav_group": "Reference",
    "source_refs": [
     "microcosm-substrate/anti_principles/AP-1.json",
     "microcosm-substrate/anti_principles/AP-10.json",
     "microcosm-substrate/anti_principles/AP-11.json",
     "microcosm-substrate/anti_principles/AP-12.json",
     "microcosm-substrate/anti_principles/AP-13.json",
     "microcosm-substrate/anti_principles/AP-14.json",
     "microcosm-substrate/anti_principles/AP-15.json",
     "microcosm-substrate/anti_principles/AP-16.json",
     "microcosm-substrate/anti_principles/AP-17.json",
     "microcosm-substrate/anti_principles/AP-2.json",
     "microcosm-substrate/anti_principles/AP-3.json",
     "microcosm-substrate/anti_principles/AP-4.json",
     "microcosm-substrate/anti_principles/AP-5.json",
     "microcosm-substrate/anti_principles/AP-6.json",
     "microcosm-substrate/anti_principles/AP-7.json",
     "microcosm-substrate/anti_principles/AP-8.json",
     "microcosm-substrate/anti_principles/AP-9.json",
     "microcosm-substrate/atlas/entry_packet.json",
     "microcosm-substrate/axioms/AX-1.json",
     "microcosm-substrate/axioms/AX-10.json",
     "microcosm-substrate/axioms/AX-11.json",
     "microcosm-substrate/axioms/AX-12.json",
     "microcosm-substrate/axioms/AX-2.json",
     "microcosm-substrate/axioms/AX-3.json",
     "microcosm-substrate/axioms/AX-4.json",
     "microcosm-substrate/axioms/AX-5.json",
     "microcosm-substrate/axioms/AX-6.json",
     "microcosm-substrate/axioms/AX-7.json",
     "microcosm-substrate/axioms/AX-8.json",
     "microcosm-substrate/axioms/AX-9.json",
     "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
     "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
     "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
     "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "microcosm-substrate/core/doctrine_lattice_coverage.json",
     "microcosm-substrate/core/doctrine_lattice_relations.json",
     "microcosm-substrate/core/mechanism_sources.json",
     "microcosm-substrate/core/paper_module_capsules.json",
     "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "microcosm-substrate/principles/P-1.json",
     "microcosm-substrate/principles/P-10.json",
     "microcosm-substrate/principles/P-11.json",
     "microcosm-substrate/principles/P-12.json",
     "microcosm-substrate/principles/P-13.json",
     "microcosm-substrate/principles/P-14.json",
     "microcosm-substrate/principles/P-15.json",
     "microcosm-substrate/principles/P-16.json",
     "microcosm-substrate/principles/P-17.json",
     "microcosm-substrate/principles/P-18.json",
     "microcosm-substrate/principles/P-19.json",
     "microcosm-substrate/principles/P-2.json",
     "microcosm-substrate/principles/P-20.json",
     "microcosm-substrate/principles/P-3.json",
     "microcosm-substrate/principles/P-4.json",
     "microcosm-substrate/principles/P-5.json",
     "microcosm-substrate/principles/P-6.json",
     "microcosm-substrate/principles/P-7.json",
     "microcosm-substrate/principles/P-8.json",
     "microcosm-substrate/principles/P-9.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.evidence",
    "human_title": "What the pass proves",
    "public_purpose": "How each component is backed: its evidence class, a 1-5 strength rank, and what that checks and where its scope stops.",
    "primary_action": {
     "label": "Read What the pass proves",
     "kind": "link",
     "target": "docs/evidence.html"
    },
    "nav_group": "Reference",
    "source_refs": [
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.source",
    "human_title": "Source & license",
    "public_purpose": "The Microcosm repository, key source files, and reuse terms.",
    "primary_action": {
     "label": "Read Source & license",
     "kind": "link",
     "target": "docs/source.html"
    },
    "nav_group": "Reference",
    "source_refs": [
     "microcosm-substrate/README.md",
     "microcosm-substrate/QUICKSTART.md",
     "microcosm-substrate/ARCHITECTURE.md",
     "microcosm-substrate/ORGANS.md",
     "microcosm-substrate/LICENSE",
     "microcosm-substrate/NOTICE",
     "microcosm-substrate/PROVENANCE.md"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.contact",
    "human_title": "Contact",
    "public_purpose": "Who built Microcosm, and how to get in touch.",
    "primary_action": {
     "label": "Read Contact",
     "kind": "link",
     "target": "docs/contact.html"
    },
    "nav_group": "Reference",
    "source_refs": [
     "microcosm-substrate/PROVENANCE.md",
     "microcosm-substrate/README.md"
    ],
    "evidence_role": "reference"
   },
   {
    "view_id": "docs.vulnerability-disclosure",
    "human_title": "Vulnerability disclosure",
    "public_purpose": "How to report a security issue in the public Microcosm site or repository.",
    "primary_action": {
     "label": "Read Vulnerability disclosure",
     "kind": "link",
     "target": "docs/vulnerability-disclosure.html"
    },
    "nav_group": "Reference",
    "source_refs": [
     "microcosm-substrate/SECURITY.md",
     "microcosm-substrate/README.md"
    ],
    "evidence_role": "reference"
   }
  ]
 },
 "quick_path": {
  "for_ai_assistants": [
   "For \"what are the areas\" or overview questions, start with family_digest[].",
   "For component or organ triage (rank, evidence_kind, public_runtime, runs_real_tools meaning, command route metadata, scope_limit, grouping), start with component_digest[].",
   "For full component inspection (what_it_does, source_links, links_to), follow component_digest[].full_record_pointer into visible_text_index.logical_records.components[].",
   "For page-route questions, start with route_index.pages[] (each row carries a relative_href).",
   "For source/provenance questions, start with source_ref_summary, source_map, and the source_links on the cited record.",
   "Open paper_modules, evidence_profiles, and long visible_text bodies only by id when a question needs them."
  ],
  "answer_area_questions_from": [
   "family_digest[]"
  ],
  "answer_component_questions_from": [
   "component_digest[]",
   "visible_text_index.logical_records.components[] (via component_digest[].full_record_pointer)"
  ],
  "component_digest_fields": [
   "id",
   "label",
   "family_id",
   "family_label",
   "summary_line",
   "rank",
   "evidence_kind",
   "runs_real_tools",
   "runs_real_tools_meaning",
   "public_runtime",
   "command",
   "scope_limit",
   "relative_href",
   "full_record_pointer"
  ],
  "full_component_record_only_fields": [
   "what_it_does",
   "source_links",
   "links_to",
   "evidence.basis",
   "visible_text_byte_count"
  ],
  "open_large_bodies_only_when_asked": [
   "visible_text_index.logical_records.paper_modules[]",
   "visible_text_index.logical_records.evidence_profiles[]",
   "pages[].visible_text.text"
  ],
  "note": "The compact component records are the right first stop for organ/component questions; long paper-module bodies are explanation drilldowns, not the first navigation layer."
 },
 "component_digest": [
  {
   "id": "cold_reader_route_map",
   "label": "Cold Reader Route Map",
   "family_id": "entry_and_reveal",
   "family_label": "Entry & orientation",
   "summary_line": "Verifies the first-run guided path so every step names a real command, doc, and evidence.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm cold-reader-route-map run-route-map-bundle --input examples/cold_reader_route_map/exported_cold_reader_route_map_bundle --out receipts/runtime_shell/demo_project/organs/cold_reader_route_map --card",
   "relative_href": "docs/components.html#component-cold_reader_route_map",
   "scope_limit": "It is projection-only metadata that validates the declared public route contract; it is not route registry control and excludes source-file changes, external model access, launch/public sharing, financial decisions, private-data equivalence, or whole-system correctness.",
   "source_link_count": 2,
   "links_to_count": 8,
   "tags": [
    "agent-entry",
    "getting-started",
    "interesting-parts"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/0",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "public_reveal_walkthrough",
   "label": "Public Reveal Walkthrough",
   "family_id": "entry_and_reveal",
   "family_label": "Entry & orientation",
   "summary_line": "Binds the first-time reader tour to evidence so each count leads to a source.",
   "rank": 4,
   "evidence_kind": "Bounded runtime computation",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.public_reveal_walkthrough run --input fixtures/first_wave/public_reveal_walkthrough/input --out receipts/first_wave/public_reveal_walkthrough",
   "relative_href": "docs/components.html#component-public_reveal_walkthrough",
   "scope_limit": "It authorizes only bounded public reveal runtime behavior and a digest-verified public body-import witness; it excludes launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-data equivalence, Lean/Lake execution, whole-system correctness, or general product authority.",
   "source_link_count": 2,
   "links_to_count": 4,
   "tags": [
    "getting-started",
    "interesting-parts",
    "evaluation"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/1",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "pattern_binding_contract",
   "label": "Pattern Binding Contract",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Checks a real pattern catalog for digest, cross-reference, and dependency-cycle integrity.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm pattern-route-readiness validate-bundle --input examples/pattern_binding_contract/exported_route_readiness_bundle --out /tmp/microcosm-pattern-route-readiness",
   "relative_href": "docs/components.html#component-pattern_binding_contract",
   "scope_limit": "It validates only the declared public pattern-binding/route-readiness contract; it does not certify the private pattern ledger, public launch or hosted-public posture, public sharing, external model access, private-data equivalence, or whole-system correctness, and it does not turn any mined pattern row into a standalone public leaf (selection stays component-first and fixture-bound).",
   "source_link_count": 2,
   "links_to_count": 6,
   "tags": [
    "architecture",
    "navigation",
    "doctrine"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/2",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "pattern_assimilation_step",
   "label": "Pattern Assimilation Step",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Verifies each landed task filed exactly one learning record naming what it changed.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.validators.acceptance --only pattern_assimilation_step --input fixtures/first_wave/pattern_assimilation_step/input --out receipts/first_wave/pattern_assimilation_acceptance.json",
   "relative_href": "docs/components.html#component-pattern_assimilation_step",
   "scope_limit": "It validates only the declared public completion contract over synthetic fixture data; it does not ingest private lessons, mutate live ledgers, promote global doctrine, include launch operations or public sharing, make external model access, claim private-data equivalence, or certify public runtime behavior.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "architecture",
    "navigation",
    "doctrine"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/3",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "executable_doctrine_grammar",
   "label": "Executable Doctrine Grammar",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Checks that example standards files declare their purpose, rule, records, and what they do not claim.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate-executable-grammar-metabolism-bundle --input examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle --out receipts/first_wave/executable_doctrine_grammar --card",
   "relative_href": "docs/components.html#component-executable_doctrine_grammar",
   "scope_limit": "It validates an exported public executable-grammar metabolism bundle with exact copied-body digests and redacted result records, plus fixture regressions for standards/paper-module shape. It does not publish source doctrine bodies in result records, prove doctrine completeness, export a private standards engine, authorize later components, or claim external model access, private-data equivalence, launch-scope decision, or whole-system correctness.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "architecture",
    "navigation",
    "doctrine"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/4",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority"
   ]
  },
  {
   "id": "navigation_hologram_route_plane",
   "label": "Navigation Hologram Route Plane",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Audits a folder's navigation so browse rows never pose as the source of truth.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out receipts/first_wave/navigation_hologram_route_plane",
   "relative_href": "docs/components.html#component-navigation_hologram_route_plane",
   "scope_limit": "It validates only the declared public toy route-plane contract and its regression fixtures (plus exact copied navigation source modules in the bundle path); it does not establish live route freshness, grant source authority, authorize any later component, run any provider/live-kernel call, or certify the whole wave.",
   "source_link_count": 2,
   "links_to_count": 11,
   "tags": [
    "agent-entry",
    "architecture",
    "navigation"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/5",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "standards_meta_diagnostics",
   "label": "Standards Meta Diagnostics",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Confirms every accepted part still ties to a written rule, a run command, and a saved proof.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.standards_meta_diagnostics run --input fixtures/first_wave/standards_meta_diagnostics/input --out /tmp/standards_meta_diagnostics_out",
   "relative_href": "docs/components.html#component-standards_meta_diagnostics",
   "scope_limit": "It validates only the declared public coverage contract and never becomes source authority for the registries, mutates source, exposes private material, or authorizes launch, external model access, or any whole-system-correctness claim.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "agent-entry",
    "architecture",
    "navigation"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/6",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority"
   ]
  },
  {
   "id": "voice_to_doctrine_self_improvement_loop",
   "label": "Voice To Doctrine Self Improvement Loop",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Verifies each lesson changed a named owner page with evidence before the loop closes.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.voice_to_doctrine_self_improvement_loop run --input fixtures/first_wave/voice_to_doctrine_self_improvement_loop/input --out receipts/first_wave/voice_to_doctrine_self_improvement_loop",
   "relative_href": "docs/components.html#component-voice_to_doctrine_self_improvement_loop",
   "scope_limit": "It validates only the declared contract of the loop on fixtures; it does not export source notes or private bodies, grant source/doctrine edits, global-promotion, live work log mutation, or public sharing decision, make external model access, prove correctness, or claim private-system equivalence.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "agent-entry",
    "architecture",
    "navigation"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/7",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "cognitive_operator_registry",
   "label": "Cognitive Operator Registry",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Checks the catalog of named thinking-moves so each is fully described and backed by evidence.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.cognitive_operator_registry run --input fixtures/first_wave/cognitive_operator_registry/input --out /tmp/cognitive_operator_registry_out",
   "relative_href": "docs/components.html#component-cognitive_operator_registry",
   "scope_limit": "It validates only the declared public registry contract and copied source bodies; it never becomes registry source authority, mutates operators, proves operator correctness, exposes source notes, or authorizes launch, external model access, or any whole-system-correctness claim.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "architecture",
    "navigation",
    "doctrine"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/8",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority"
   ]
  },
  {
   "id": "routing_anti_patterns_registry",
   "label": "Routing Anti Patterns Registry",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Indexes the navigation mistakes agents repeat and guards the public list.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.routing_anti_patterns_registry run --input fixtures/first_wave/routing_anti_patterns_registry/input --out /tmp/routing_anti_patterns_registry_out",
   "relative_href": "docs/components.html#component-routing_anti_patterns_registry",
   "scope_limit": "It validates only the declared public routing anti-pattern registry contract and copied source body; it never becomes route source authority, mutates routes, exposes private routing notes, calls providers, authorizes launch, or proves whole-system correctness.",
   "source_link_count": 2,
   "links_to_count": 3,
   "tags": [
    "architecture",
    "navigation",
    "doctrine"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/9",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority"
   ]
  },
  {
   "id": "doctrine_fact_claim_audit",
   "label": "Doctrine Fact Claim Audit",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Checks that public fact rows state the right count and point at live, anchored code.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm doctrine-fact-claim-audit run --input fixtures/first_wave/doctrine_fact_claim_audit/input --out receipts/first_wave/doctrine_fact_claim_audit",
   "relative_href": "docs/components.html#component-doctrine_fact_claim_audit",
   "scope_limit": "fact assertion, code-loci, and DAG fixture truth gate only; it is not a comprehension engine and does not establish a minimum read graph",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "architecture",
    "navigation",
    "doctrine"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/10",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "self_ignorance_coverage_ledger",
   "label": "Self Ignorance Coverage Ledger",
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "summary_line": "Compares expected against built entities to report known coverage gaps.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm self-ignorance-coverage-ledger run --input fixtures/first_wave/self_ignorance_coverage_ledger/input --out receipts/first_wave/self_ignorance_coverage_ledger",
   "relative_href": "docs/components.html#component-self_ignorance_coverage_ledger",
   "scope_limit": "known Kind Atlas coverage debt projection only; it does not claim literal unknown-unknown omniscience or absence proof",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "architecture",
    "navigation",
    "doctrine"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/11",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "proof_diagnostic_evidence_spine",
   "label": "Proof Diagnostic Evidence Spine",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Sorts proof-pipeline checks into accepted or rejected without inflating a pass.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm proof-diagnostic-evidence-spine run --input fixtures/first_wave/proof_diagnostic_evidence_spine/input --out receipts/first_wave/proof_diagnostic_evidence_spine --card",
   "relative_href": "docs/components.html#component-proof_diagnostic_evidence_spine",
   "scope_limit": "It records proof/evidence diagnostics over existing result record references only. It does not run Lean, use external model services, expose proof bodies, turn a passing check into formal-proof or theorem authority, prove runtime or whole-system correctness, authorize later components, certify public launch, authorize public sharing or recipient work, or establish secret export.",
   "source_link_count": 2,
   "links_to_count": 6,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/12",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_theorem_or_proof_authority"
   ]
  },
  {
   "id": "formal_math_readiness_gate",
   "label": "Formal Math Readiness Gate",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Reads declared math setups and lists which proof tactics may be attempted versus blocked.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm formal-math-readiness-gate run --input fixtures/first_wave/formal_math_readiness_gate/input --out receipts/first_wave/formal_math_readiness_gate",
   "relative_href": "docs/components.html#component-formal_math_readiness_gate",
   "scope_limit": "It only validates and projects declared readiness metadata; it does not run Lean/Lake, inspect the real toolchain, use external model services, prove any theorem correct, produce benchmark claims, or authorize Mathlib-dependent proof attempts.",
   "source_link_count": 2,
   "links_to_count": 6,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/13",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_theorem_or_proof_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "corpus_readiness_mathlib_absence_gate",
   "label": "Corpus Readiness Mathlib Absence Gate",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Runs the real Lean toolchain to confirm the math library is absent, then gates proof tasks.",
   "rank": 4,
   "evidence_kind": "External tool run",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run --input fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input --out receipts/first_wave/corpus_readiness_mathlib_absence_gate",
   "relative_href": "docs/components.html#component-corpus_readiness_mathlib_absence_gate",
   "scope_limit": "It only projects and gate-checks recorded corpus/toolchain readiness accounting, re-verifies recorded source digests and leakage guards, and runs a bounded Lean/Lake import probe when a toolchain is present. It does not run a full Lake build, prove formal-result correctness, claim Mathlib is available beyond the probe result, benchmark corpora, score model performance, use external model services, or include launch operations or public sharing.",
   "source_link_count": 2,
   "links_to_count": 4,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/14",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_theorem_or_proof_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "mathematical_strategy_atlas_hypothesis_scorer",
   "label": "Mathematical Strategy Atlas Hypothesis Scorer",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Picks a first-guess proof strategy from a problem's tags and flags any it cannot map.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.mathematical_strategy_atlas_hypothesis_scorer run --input fixtures/first_wave/mathematical_strategy_atlas_hypothesis_scorer/input --out receipts/first_wave/mathematical_strategy_atlas_hypothesis_scorer",
   "relative_href": "docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer",
   "scope_limit": "It only projects pre-oracle strategy-hypothesis and retrieval mechanics; it does not run Lean/Lake, prove theorems, establish domain or formal-result correctness, reveal oracle labels, expose proof bodies, use external model services, tune on test answers, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/15",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_theorem_or_proof_authority"
   ]
  },
  {
   "id": "tactic_portfolio_availability_probe",
   "label": "Tactic Portfolio Availability Probe",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Maps which Lean proof tactics a recorded run marked usable before any code relies on one.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.tactic_portfolio_availability_probe run --input fixtures/first_wave/tactic_portfolio_availability_probe/input --out receipts/first_wave/tactic_portfolio_availability_probe --acceptance-out receipts/acceptance/first_wave/tactic_portfolio_availability_probe_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-tactic_portfolio_availability_probe",
   "scope_limit": "It only projects and validates which tactics were recorded as compiling in one captured environment; it does not run Lean/Lake at all, prove any goal, certify domain-level conclusions, use external model services, claim benchmark performance, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 5,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/16",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "target_shape_tactic_routing_gate",
   "label": "Target Shape Tactic Routing Gate",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Records an allow-or-reject decision and reason for each proof tactic before any proof runs.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.cli target-shape-tactic-routing-gate run-routing-bundle --input examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle --out receipts/runtime_shell/demo_project/organs/target_shape_tactic_routing_gate",
   "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate",
   "scope_limit": "It only inspects and records the projection mechanics of pre-execution tactic-routing references \u2014 emitting per-tactic allow/reject decisions with reasons. It does not run Lean/Lake, does not establish or judge the correctness of any goal, emits no proof bodies, makes no external model access, performs no post-execution route selection, reports no benchmark claims or maturity, and excludes launch.",
   "source_link_count": 2,
   "links_to_count": 5,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/17",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "lean_std_premise_index",
   "label": "Lean Std Premise Index",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Lists a fixed catalog of public Lean building blocks and confirms none hides proof text or test answers.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.lean_std_premise_index run --input fixtures/first_wave/lean_std_premise_index/input --out receipts/first_wave/lean_std_premise_index --acceptance-out receipts/acceptance/first_wave/lean_std_premise_index_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-lean_std_premise_index",
   "scope_limit": "It only validates the projection of premise metadata and copied source bodies; it does not run Lean or Lake, prove any theorem correct, expose proof bodies or oracle-needed ids, use external model services, produce benchmark claims, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 4,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/18",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_theorem_or_proof_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "formal_math_premise_retrieval",
   "label": "Formal Math Premise Retrieval",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Shows which lemmas a plain search surfaces per query, and never leaks proof text or answer keys.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python -m microcosm_core.organs.formal_math_premise_retrieval run --input fixtures/first_wave/formal_math_premise_retrieval/input --out receipts/first_wave/formal_math_premise_retrieval",
   "relative_href": "docs/components.html#component-formal_math_premise_retrieval",
   "scope_limit": "It only checks that public retrieval metadata is internally coherent, term-scored over a copied index, budget-bounded, and leakage-clean; it does not run Lean/Lake, use external model services, prove any theorem or its own correctness, claim benchmark performance, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 6,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/19",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_theorem_or_proof_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "formal_math_verifier_trace_repair_loop",
   "label": "Formal Math Verifier Trace Repair Loop",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Replays how a proof lab turns verifier failures into fixes, with no promotion without a fresh re-run.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm formal-math-verifier-trace-repair-loop run-loop-bundle --input examples/formal_math_verifier_trace_repair_loop/exported_verifier_trace_repair_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_verifier_trace_repair_loop",
   "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop",
   "scope_limit": "It demonstrates control-loop projection mechanics over copied Ring2 run rows only; it does not run Lean/Lake, use external model services, expose proof bodies or oracle premise ids, treat human or provider advice as correctness, prove any theorem, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 5,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/20",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_theorem_or_proof_authority"
   ]
  },
  {
   "id": "formal_evidence_cell_anchor_resolver",
   "label": "Formal Evidence Cell Anchor Resolver",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Resolves each proof-flavored math claim to named evidence and flags ones that overreach or lack backing.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm formal-evidence-cell-anchor-resolver run-anchor-bundle --input examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle --out receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver",
   "relative_href": "docs/components.html#component-formal_evidence_cell_anchor_resolver",
   "scope_limit": "It validates claim-to-evidence anchoring mechanics only: claim-to-cell resolution, source-anchor presence, permitted claim strength, copied-source-module digest checks, and leakage refusals. It does not run Lean/Lake, certify theorem or mathematical correctness, expose proof bodies or non-public source refs, use external model services, or include launch operations/public sharing.",
   "source_link_count": 2,
   "links_to_count": 3,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/21",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_theorem_or_proof_authority"
   ]
  },
  {
   "id": "undeclared_library_prior_symbol_classifier",
   "label": "Undeclared Library Prior Symbol Classifier",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Detects when a checked Lean proof cites a library result outside its approved set.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.undeclared_library_prior_symbol_classifier run --input fixtures/first_wave/undeclared_library_prior_symbol_classifier/input --out receipts/first_wave/undeclared_library_prior_symbol_classifier",
   "relative_href": "docs/components.html#component-undeclared_library_prior_symbol_classifier",
   "scope_limit": "It only projects the symbol-boundary classification mechanic over copied Lean/Std premise rows and pre-extracted symbol observations; it does not read proof source, run Lean or Lake, prove formal-result correctness, treat the whole standard library as an implicit allowlist, claim Mathlib availability, use external model services, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 3,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/22",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_theorem_or_proof_authority"
   ]
  },
  {
   "id": "ring2_premise_retrieval_precision_recall_harness",
   "label": "Ring2 Premise Retrieval Precision Recall Harness",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Scores how much proof support a premise search found, problem by problem.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.ring2_premise_retrieval_precision_recall_harness run --input fixtures/first_wave/ring2_premise_retrieval_precision_recall_harness/input --out receipts/first_wave/ring2_premise_retrieval_precision_recall_harness",
   "relative_href": "docs/components.html#component-ring2_premise_retrieval_precision_recall_harness",
   "scope_limit": "These are after-the-fact retrieval-attribution labels and precision/recall counts over copied run records only. The component does not run Lean or Lake, call any provider, expose proof bodies, tune on test answers, claim benchmark performance, prove formal-result correctness, or include launch operations, and its labels are explicitly forbidden from flowing into provider context. The aggregate numbers describe only the copied fixture/bundle replayed, not any benchmark claims.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/23",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "formal_math_lean_proof_witness",
   "label": "Formal Math Lean Proof Witness",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Compiles a tiny Lean example with the real prover and records whether it built, leaking no proof text.",
   "rank": 4,
   "evidence_kind": "External tool run",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.formal_math_lean_proof_witness run --input fixtures/first_wave/formal_math_lean_proof_witness/input --out receipts/first_wave/formal_math_lean_proof_witness",
   "relative_href": "docs/components.html#component-formal_math_lean_proof_witness",
   "scope_limit": "It authorizes only a witness that a tiny declared public toy proof compiled under the locally installed Lean/Lake toolchain in a temporary workspace, plus confirmation that its leakage guardrails fired. It excludes Mathlib/Aesop/Batteries-dependent or general proof or theorem-program authority, external model access, private proof import, benchmark or performance claims, whole-system correctness, or any launch, hosted deployment, or public sharing.",
   "source_link_count": 2,
   "links_to_count": 5,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/24",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_theorem_or_proof_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "verifier_lab_kernel",
   "label": "Verifier Lab Kernel",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Folds nine proof checks into one report labeling each line by which source actually backs it.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.verifier_lab_kernel run --input fixtures/first_wave/verifier_lab_kernel/input --out receipts/first_wave/verifier_lab_kernel",
   "relative_href": "docs/components.html#component-verifier_lab_kernel",
   "scope_limit": "It validates the declared public contract shape of the proof packet and component result records only; it does not establish anything correct, count oracle/provider output as forward proof success, import private or Mathlib-dependent proof bodies, use external model services, change source files, or claim benchmark solve rates, launch, or maturity.",
   "source_link_count": 2,
   "links_to_count": 10,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/25",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_theorem_or_proof_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "verifier_lab_execution_spine",
   "label": "Verifier Lab Execution Spine",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Runs Lean on small bounded proof attempts in a temp copy and records what passed or failed.",
   "rank": 4,
   "evidence_kind": "External tool run",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.verifier_lab_execution_spine run --input fixtures/first_wave/verifier_lab_execution_spine/input --out .microcosm/verifier_lab_execution_spine",
   "relative_href": "docs/components.html#component-verifier_lab_execution_spine",
   "scope_limit": "It is a tool-witness result record for bounded public Lean transition rows only: it does not establish general proof authority, count oracle/provider output as proof, export proof bodies or tactic scripts, use external model services, change source files, claim benchmark solve-rates, or include launch operations/public sharing.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/26",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_theorem_or_proof_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "certificate_kernel_execution_lab",
   "label": "Certificate Kernel Execution Lab",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Runs the Lean verifier over a small public proof project and reports which rows it accepted.",
   "rank": 4,
   "evidence_kind": "External tool run",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "microcosm certificate-kernel-execution-lab run --input fixtures/first_wave/certificate_kernel_execution_lab/input --out receipts/first_wave/certificate_kernel_execution_lab",
   "relative_href": "docs/components.html#component-certificate_kernel_execution_lab",
   "scope_limit": "It is a local tool-witness that the declared public fixture rows compiled and were adjudicated by the local Lean verifier; it excludes general proof authority, count oracle/provider output as proof, expose proof text, change source files, claim a benchmark solve-rate, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/27",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_theorem_or_proof_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "batch4_proof_authority_runtime",
   "label": "Proof / Control / Runtime Import Bundle",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Checks fourteen proof, control, and runtime parts as one unit that rejects every overclaim.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch4-proof-authority-runtime run --input fixtures/first_wave/batch4_proof_authority_runtime/input --out receipts/first_wave/batch4_proof_authority_runtime --acceptance-out receipts/acceptance/first_wave/batch4_proof_authority_runtime_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch4_proof_authority_runtime",
   "scope_limit": "It validates only a public source-open bundle and bounded negative fixtures; it is not an Erdos #257 solution, not benchmark evidence, not public sharing or launch-scope decision, not live Codex/browser/runtime authority, and not private-system equivalence.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/28",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "proof_derived_governed_mutation_authorization",
   "label": "Proof Derived Governed Mutation Authorization",
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "summary_line": "Checks a synthetic change-authorization record for its proof-and-approval chain, bound to a real commit.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.proof_derived_governed_mutation_authorization run --input fixtures/first_wave/proof_derived_governed_mutation_authorization/input --out receipts/first_wave/proof_derived_governed_mutation_authorization --acceptance-out receipts/acceptance/first_wave/proof_derived_governed_mutation_authorization_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-proof_derived_governed_mutation_authorization",
   "scope_limit": "It validates only a declared, synthetic governed-mutation contract and excludes live cloud/account action, standing account secrets, source or irreversible mutation, policy-after-execution, hidden votes, external model access, benchmark-score claims, or launch.",
   "source_link_count": 2,
   "links_to_count": 3,
   "tags": [
    "formal-methods",
    "theorem-proving",
    "lean"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/29",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "agent_benchmark_integrity_anti_gaming_replay",
   "label": "Agent Benchmark Integrity Anti Gaming Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Validates a synthetic benchmark-integrity record and flags the contamination cases it declares.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm agent-benchmark-integrity-anti-gaming-replay run-benchmark-integrity-bundle --input examples/agent_benchmark_integrity_anti_gaming_replay/exported_benchmark_integrity_bundle --out .microcosm/agent_benchmark_integrity_anti_gaming_replay",
   "relative_href": "docs/components.html#component-agent_benchmark_integrity_anti_gaming_replay",
   "scope_limit": "It authorizes only bounded public runtime validation over copied source-open pattern provenance bodies and metadata-only benchmark-integrity replay rows; it does not establish any benchmark or SWE-bench score, agent capability, external model service, live-repo mutation, private/oracle/hidden-gold body access, product progress, or launch-scope decision.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/30",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "batch10_cold_eval_honesty_capsule",
   "label": "Cold Evaluation Honesty Bundle",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Runs a copied route-quality simulator and checks its all-B scorecard against the original code.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch10-cold-eval-honesty-capsule run --input fixtures/first_wave/batch10_cold_eval_honesty_capsule/input --out receipts/first_wave/batch10_cold_eval_honesty_capsule --acceptance-out receipts/acceptance/first_wave/batch10_cold_eval_honesty_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch10_cold_eval_honesty_capsule",
   "scope_limit": "verified cold-eval source body import only, not a live benchmark, navigation truth, source authority, external model access, private-system equivalence, public sharing, or launch-scope decision",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/31",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "batch8_validator_checker_capsule",
   "label": "Validator Checker Bundle",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Runs the real validator code over public examples so its safety checks stay inspectable.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch8-validator-checker-capsule run --input fixtures/first_wave/batch8_validator_checker_capsule/input --out receipts/first_wave/batch8_validator_checker_capsule --acceptance-out receipts/acceptance/first_wave/batch8_validator_checker_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch8_validator_checker_capsule",
   "scope_limit": "It validates only the imported validators.py source body and its checker membrane. It does not claim source authority, a full validator-suite proof, private-system equivalence, launch, hosted-public status, public sharing, external model access, or source-file changes.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/32",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "agent_monitor_redteam_falsification_replay",
   "label": "Agent Monitor Redteam Falsification Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Replays honest and deceptive agent runs and flags any verdict missing its declared backing evidence.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm agent-monitor-redteam-falsification-replay run-monitor-bundle --input examples/agent_monitor_redteam_falsification_replay/exported_monitor_redteam_bundle --out receipts/runtime_shell/demo_project/organs/agent_monitor_redteam_falsification_replay",
   "relative_href": "docs/components.html#component-agent_monitor_redteam_falsification_replay",
   "scope_limit": "Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed monitor-verdict spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live agent execution, monitor product performance, control-eval score, safety-validation, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/33",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "agent_sabotage_scheming_monitor_replay",
   "label": "Agent Sabotage Scheming Monitor Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Audits a hidden-goal catch claim for the steps, suspicion scores, and counterfactual it needs.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm agent-sabotage-scheming-monitor-replay run-sabotage-bundle --input examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle --out receipts/runtime_shell/demo_project/organs/agent_sabotage_scheming_monitor_replay",
   "relative_href": "docs/components.html#component-agent_sabotage_scheming_monitor_replay",
   "scope_limit": "Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed sabotage/scheming monitor spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live sabotage, live agent execution, exploit instruction, account secret/account, private-reasoning, harmful-payload, monitor-product-performance, deployment-risk, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/34",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "agent_memory_temporal_conflict_replay",
   "label": "Agent Memory Temporal Conflict Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Replays a memory edit-and-delete to show stale facts get flagged before they sway an answer.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.agent_memory_temporal_conflict_replay run --input fixtures/first_wave/agent_memory_temporal_conflict_replay/input --out /tmp/agent_memory_temporal_conflict_replay_out",
   "relative_href": "docs/components.html#component-agent_memory_temporal_conflict_replay",
   "scope_limit": "It validates the projection mechanics of a synthetic memory fixture only \u2014 that the required refs, decisions, paired replays, negative cases, and secret-exclusion scan line up and that result records are metadata-only. It does not claim live-memory product quality, judge whether memory decisions were domain-correct, treat memory recall as source authority, adopt active injection, export private transcripts, use external model services, change source files, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/35",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority"
   ]
  },
  {
   "id": "sleeper_memory_poisoning_quarantine_replay",
   "label": "Sleeper Memory Poisoning Quarantine Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Replays a recorded memory-tamper case, checking its declared quarantine, block, and delete steps line up.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.sleeper_memory_poisoning_quarantine_replay run --input fixtures/first_wave/sleeper_memory_poisoning_quarantine_replay/input --out receipts/first_wave/sleeper_memory_poisoning_quarantine_replay --acceptance-out receipts/acceptance/first_wave/sleeper_memory_poisoning_quarantine_replay_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-sleeper_memory_poisoning_quarantine_replay",
   "scope_limit": "It only checks the structural shape and internal consistency of a synthetic memory-security policy projection recorded as JSON. It does not run or validate any real memory store, does not itself quarantine, delete, or re-run anything, and does not establish that any system actually resists poisoning. It exports no private memory bodies or transcripts, calls no providers, mutates no source, produces no benchmark claims, and excludes launch (all scope limit flags are hardcoded false).",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/36",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "mcp_tool_authority_replay",
   "label": "MCP Tool Authority Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Audits a recorded tool-use log to confirm each action was scoped, approved, undoable, and fenced.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.mcp_tool_authority_replay run --input fixtures/first_wave/mcp_tool_authority_replay/input --out receipts/first_wave/mcp_tool_authority_replay",
   "relative_href": "docs/components.html#component-mcp_tool_authority_replay",
   "scope_limit": "It only checks that the tool-authority evidence in a recorded bundle (scopes, approvals, rollbacks, instruction/data splits, cold replays, redaction, and the expected abuse-case failures) is present and internally consistent. It does not run tools or authorize live MCP/account access, account secret or payload export, treating tool output as instruction, source-file changes, benchmark safety scores, or launch, and it makes no claim that the underlying tool-use policy is domain-correct.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/37",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "belief_state_process_reward_replay",
   "label": "Belief State Process Reward Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Checks that each step reward in a recorded run cites a declared verifier-feedback row, not a trick.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.belief_state_process_reward_replay run --input fixtures/first_wave/belief_state_process_reward_replay/input --out .microcosm/belief_state_process_reward_replay",
   "relative_href": "docs/components.html#component-belief_state_process_reward_replay",
   "scope_limit": "It only checks that the projection's accounting lines up under its own schema rules over recorded synthetic fixtures; it excludes hidden-reasoning export, RL training, hidden gold or neural-judge-only labels, benchmark-performance claims, external model access, source-file changes, or launch, and proves nothing about real-world reward, live agent behavior, or domain-level conclusions.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/38",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "agent_sandbox_policy_escape_replay",
   "label": "Agent Sandbox Policy Escape Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Maps sandboxed agent actions to show each was approved or blocked before running, then rolled back.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.cli agent-sandbox-policy-escape-replay run-sandbox-bundle --input examples/agent_sandbox_policy_escape_replay/exported_sandbox_policy_escape_bundle --out receipts/runtime_shell/demo_project/organs/agent_sandbox_policy_escape_replay",
   "relative_href": "docs/components.html#component-agent_sandbox_policy_escape_replay",
   "scope_limit": "It validates the projection / trace-refactor mechanics over a synthetic fixture only; it excludes live sandbox escape, secret or account secret handling, live network access, host filesystem mutation, executable payload export, raw environment export, external model access, security benchmark claims, source-file changes, or launch. A pass proves the projection boundary and trace-refactor mechanics for this contract, not real sandbox security, exploit resistance, or whole-system safety.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/39",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "indirect_prompt_injection_information_flow_policy_replay",
   "label": "Indirect Prompt Injection Information Flow Policy Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Replays an agent run to show untrusted text was gated before any sensitive action, leaking no secret.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm indirect-prompt-injection-information-flow-policy-replay run-prompt-injection-bundle --input examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle --out receipts/runtime_shell/demo_project/organs/indirect_prompt_injection_information_flow_policy_replay",
   "relative_href": "docs/components.html#component-indirect_prompt_injection_information_flow_policy_replay",
   "scope_limit": "Passing result records only show this projection satisfies the named information-flow contract over synthetic, redacted, metadata-only rows; they do not prove general prompt-injection robustness, benchmark performance, live account/tool/provider safety, hidden-message handling in a real system, source-file changes, or launch-scope decision.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/40",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "agentic_vulnerability_discovery_patch_proof_replay",
   "label": "Agentic Vulnerability Discovery Patch Proof Replay",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Checks a fixed-bug evidence chain and re-runs three small real security checks; no real attack material.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.agentic_vulnerability_discovery_patch_proof_replay run --input fixtures/first_wave/agentic_vulnerability_discovery_patch_proof_replay/input --out receipts/first_wave/agentic_vulnerability_discovery_patch_proof_replay --acceptance-out receipts/acceptance/first_wave/agentic_vulnerability_discovery_patch_proof_replay_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-agentic_vulnerability_discovery_patch_proof_replay",
   "scope_limit": "It validates only the projection/evidence-chain mechanics of a synthetic replay: structural presence, cross-reference consistency, declared boolean flags, and the secret/live-access exclusion scan. It executes small regression witnesses but performs no real vulnerability discovery and makes no judgment of real-world security or fix correctness. It excludes live-target testing, real CVE exploitation, weaponized payloads, account secret handling, network exfiltration, actionable exploit steps, external model access, source-file changes, benchmark security scores, launch, or any whole-system security claim.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/41",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "agent_route_observability_runtime",
   "label": "Agent Route Observability Runtime",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Recomputes an agent run's route-compliance score and anti-pattern flags with real trace-analytics code.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.agent_route_observability_runtime run --input fixtures/first_wave/agent_route_observability_runtime/input --out receipts/first_wave/agent_route_observability_runtime",
   "relative_href": "docs/components.html#component-agent_route_observability_runtime",
   "scope_limit": "It validates only public, recorded trace-feedback metadata and regression fixtures; it does not inspect live operator state, certify or prove runtime behavior, read model-output data, mutate the work log, authorize pattern assimilation, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 15,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/42",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority"
   ]
  },
  {
   "id": "provider_context_recipe_budget_policy",
   "label": "Provider Context Recipe Budget Policy",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Runs the real context harness to measure assembled byte sizes and check each bundle fits its budget.",
   "rank": 4,
   "evidence_kind": "Bounded runtime computation",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.provider_context_recipe_budget_policy run --input fixtures/first_wave/provider_context_recipe_budget_policy/input --out receipts/first_wave/provider_context_recipe_budget_policy",
   "relative_href": "docs/components.html#component-provider_context_recipe_budget_policy",
   "scope_limit": "It validates context-budget projection mechanics (byte ceilings, ordered section fill, omitted-section manifests, deliverable routing, and digest-checked source-body imports) only. It excludes provider/API calls, run Lean/Lake, expose or carry proof or oracle truth-side material, assert theorem or domain-level conclusions, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/43",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_theorem_or_proof_authority"
   ]
  },
  {
   "id": "agent_closeout_faithfulness_audit",
   "label": "Agent Completion Faithfulness Audit",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Runs real git and pytest on a sample repo so wrap-up claims state only what the evidence proves.",
   "rank": 4,
   "evidence_kind": "External tool run",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "microcosm agent-closeout-faithfulness-audit run --input fixtures/first_wave/agent_closeout_faithfulness_audit/input --out receipts/first_wave/agent_closeout_faithfulness_audit",
   "relative_href": "docs/components.html#component-agent_closeout_faithfulness_audit",
   "scope_limit": "verified means the referenced evidence object exists or a pytest span ran; it does not imply the span passed unless exit-zero status was explicitly checked",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/44",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "bounded_autonomy_campaign_packet",
   "label": "Bounded Autonomy Campaign Packet",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Drafts proposed work from coverage gaps and proves it cannot repair or rewrite the code itself.",
   "rank": 4,
   "evidence_kind": "External tool run",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "microcosm bounded-autonomy-campaign-packet run --input fixtures/first_wave/bounded_autonomy_campaign_packet/input --out receipts/first_wave/bounded_autonomy_campaign_packet",
   "relative_href": "docs/components.html#component-bounded_autonomy_campaign_packet",
   "scope_limit": "self-proposal campaign packet only; no self-repair or unsupervised source-file changes",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "ai-safety",
    "agent-evaluation",
    "red-teaming"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/45",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "batch7_secondary_runtime_capsule",
   "label": "Secondary Runtime Source Bundle",
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "summary_line": "Runs eight trace, graph, and market engines on test rows without fetching live markets.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch7-secondary-runtime-capsule run --input fixtures/first_wave/batch7_secondary_runtime_capsule/input --out receipts/first_wave/batch7_secondary_runtime_capsule --acceptance-out receipts/acceptance/first_wave/batch7_secondary_runtime_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch7_secondary_runtime_capsule",
   "scope_limit": "verified source body import only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, source-file changes, private-system equivalence, public sharing, launch, semantic-truth, or whole-system correctness claim",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/46",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_live_market_data"
   ]
  },
  {
   "id": "research_replication_rubric_artifact_replay",
   "label": "Research Replication Rubric Artifact Replay",
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "summary_line": "Audits whether a paper-replication claim carries the full evidence trail.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.research_replication_rubric_artifact_replay run --input fixtures/first_wave/research_replication_rubric_artifact_replay/input --out receipts/first_wave/research_replication_rubric_artifact_replay",
   "relative_href": "docs/components.html#component-research_replication_rubric_artifact_replay",
   "scope_limit": "It validates the shape and presence of synthetic replay metadata and result record references only - it does not run any experiment, metric script, or rerun, excludes any claim that a paper was actually replicated, that a benchmark claims was achieved, or that the underlying science is correct, and it never calls providers, exposes private paper/data bodies, or authorizes public sharing or launch.",
   "source_link_count": 2,
   "links_to_count": 5,
   "tags": [
    "research-workflows",
    "forecasting",
    "provider operations"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/47",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "spatial_world_model_counterfactual_simulation_replay",
   "label": "Spatial World Model Counterfactual Simulation Replay",
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "summary_line": "Replays six what-if robotics scenes to show what a spatial prediction claim is built from.",
   "rank": 4,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm spatial-world-model-counterfactual-simulation-replay run-simulation-bundle --input examples/spatial_world_model_counterfactual_simulation_replay/exported_spatial_world_model_simulation_bundle --out receipts/runtime_shell/demo_project/organs/spatial_world_model_counterfactual_simulation_replay",
   "relative_href": "docs/components.html#component-spatial_world_model_counterfactual_simulation_replay",
   "scope_limit": "It validates only the declared public contract of synthetic spatial counterfactual-replay metadata rows. It is evidence for inspectable replay rows and limitation labels, not for real-world spatial accuracy, simulator-product validity, media-only authority, operational deployment, service distribution, or scope decisions.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "research-workflows",
    "forecasting"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/48",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "materials_chemistry_closed_loop_lab_safety_replay",
   "label": "Materials Chemistry Closed Loop Lab Safety Replay",
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "summary_line": "Replays a self-driving lab loop as records, with safety gates and no real chemicals, robot, or lab.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm materials-chemistry-closed-loop-lab-safety-replay run-lab-bundle --input examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle --out receipts/runtime_shell/demo_project/organs/materials_chemistry_closed_loop_lab_safety_replay",
   "relative_href": "docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay",
   "scope_limit": "It documents projection and replay mechanics only and excludes wetlab protocols, hazardous synthesis steps, reagent amounts, controlled/bioactive targets, robot commands, live assay data, discovery claims, benchmark claims, external model access, or any judgment of domain/chemical correctness.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "research-workflows",
    "forecasting"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/49",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "mechanistic_interpretability_circuit_attribution_replay",
   "label": "Mechanistic Interpretability Circuit Attribution Replay",
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "summary_line": "Records which model features drove an answer, each tied to checkable evidence.",
   "rank": 4,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm mechanistic-interpretability-circuit-attribution-replay run-attribution-bundle --input examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle --out receipts/runtime_shell/demo_project/organs/mechanistic_interpretability_circuit_attribution_replay",
   "relative_href": "docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay",
   "scope_limit": "It validates only the declared public circuit-attribution runtime-result record contract. It excludes model-transparency product claims, live model access, export of private weights/raw activations/proprietary prompts/hidden chain-of-thought, external model access, benchmark claims, or public sharing/launch.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "research-workflows",
    "forecasting",
    "provider operations"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/50",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_benchmark_claim"
   ]
  },
  {
   "id": "prediction_oracle_reconciliation",
   "label": "Prediction Oracle Reconciliation",
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "summary_line": "Replays a forecast against the discipline a careful predictor would have to defend.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.prediction_oracle_reconciliation run --input fixtures/first_wave/prediction_oracle_reconciliation/input --out receipts/first_wave/prediction_oracle_reconciliation",
   "relative_href": "docs/components.html#component-prediction_oracle_reconciliation",
   "scope_limit": "It exercises projection mechanics on a synthetic, invented packet only. It does not establish forecasting correctness or accuracy, give trading/financial/investment-related actions, call live market data or providers, publish predictions, claim any performance or track record, import non-public data, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 3,
   "tags": [
    "research-workflows",
    "forecasting",
    "provider operations"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/51",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_live_market_data"
   ]
  },
  {
   "id": "finance_forecast_evaluation_spine",
   "label": "Finance Forecast Evaluation Spine",
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "summary_line": "Replays synthetic forecast tests through copied finance stats, recording p-values with no advice.",
   "rank": 4,
   "evidence_kind": "External tool run",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "microcosm finance-forecast-evaluation-spine run --input fixtures/first_wave/finance_forecast_evaluation_spine/input --out receipts/first_wave/finance_forecast_evaluation_spine",
   "relative_href": "docs/components.html#component-finance_forecast_evaluation_spine",
   "scope_limit": "synthetic fixture forecast-evaluation statistics only; no investment-related actions, live market data, track record, or performance claim",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "research-workflows",
    "forecasting",
    "finance"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/52",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_live_market_data"
   ]
  },
  {
   "id": "batch12_market_dashboard_read_model_capsule",
   "label": "Market Dashboard Read-Model Bundle",
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "summary_line": "Runs a copied market-dashboard reader to catch broken links, stale feeds, and trading overclaims.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch12-market-dashboard-read-model-capsule run-market-dashboard-bundle --input examples/batch12_market_dashboard_read_model_capsule/exported_batch12_market_dashboard_read_model_capsule_bundle --out receipts/runtime_shell/demo_project/organs/batch12_market_dashboard_read_model_capsule",
   "relative_href": "docs/components.html#component-batch12_market_dashboard_read_model_capsule",
   "scope_limit": "This is fixture-bound read-model, freshness, and relation-grouping evidence only; it is not live market-level conclusions, not investment-related actions, not external model access, not launch-scope decision, and not whole-system correctness.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "research-workflows",
    "forecasting",
    "finance"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/53",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_live_market_data"
   ]
  },
  {
   "id": "batch12_prediction_market_board_capsule",
   "label": "Prediction Market Board Bundle",
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "summary_line": "Replays imported quant market math on test rows, with duplicate retention and seven refusals.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch12-prediction-market-board-capsule run-prediction-market-board-bundle --input examples/batch12_prediction_market_board_capsule/exported_batch12_prediction_market_board_capsule_bundle --out receipts/runtime_shell/demo_project/organs/batch12_prediction_market_board_capsule",
   "relative_href": "docs/components.html#component-batch12_prediction_market_board_capsule",
   "scope_limit": "This is deterministic fixture evidence for copied quant helpers only; it is not live prediction-market-level conclusions, not provider truth, not forecast correctness, not investment-related actions, not external model access, and not launch-scope decision.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "research-workflows",
    "forecasting",
    "finance"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/54",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority"
   ]
  },
  {
   "id": "macro_projection_import_protocol",
   "label": "Source Projection Import Protocol",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Gates private-to-public imports, accepting only files with matching fingerprints and sources.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm macro-projection-import-protocol plan --input examples/macro_projection_import_protocol/exported_projection_import_bundle",
   "relative_href": "docs/components.html#component-macro_projection_import_protocol",
   "scope_limit": "It authorizes only verified source body import with provenance and content-digest checks; it does not grant source authority, private-system equivalence, launch, hosted deployment, public sharing, recipient work, provider or Lean/Lake execution, secret or private-source-body export, or any whole-system correctness claim.",
   "source_link_count": 2,
   "links_to_count": 23,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/55",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "world_model_projection_drift_control_room",
   "label": "World Model Projection Drift Control Room",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Pinpoints where a projected world-model copy drifted from its real source, with repair routes.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm world-model-projection-drift-control-room run-drift-control-bundle --input examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle --out receipts/runtime_shell/demo_project/organs/world_model_projection_drift_control_room",
   "relative_href": "docs/components.html#component-world_model_projection_drift_control_room",
   "scope_limit": "It only validates the declared public, metadata-only drift-result record contract. It supports inspection of recorded drift rows and source-linked refs; live repair, source control, doctrine changes, model-output export, public sharing, and launch are outside the fixture. It does not claim complete drift coverage or live repair control.",
   "source_link_count": 2,
   "links_to_count": 7,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/56",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch6_unsurfaced_primitives_capsule",
   "label": "Unsurfaced Source Primitives Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Exposes eleven real but under-surfaced parts and rejects non-public-state and overclaim cases.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch6-unsurfaced-primitives-capsule run --input fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input --out receipts/first_wave/batch6_unsurfaced_primitives_capsule --acceptance-out receipts/acceptance/first_wave/batch6_unsurfaced_primitives_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch6_unsurfaced_primitives_capsule",
   "scope_limit": "It validates only a public source-open bundle and bounded public exercises; it is not raw operator memory, not prompt-shelf capture authority, not live market data, not provider/browser state, not media launch, and not public sharing or launch-scope decision.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/57",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_live_market_data"
   ]
  },
  {
   "id": "batch5_authority_systems_capsule",
   "label": "Authority Systems Source Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Replays eight authority and systems checks, rejecting provider, proof, and launch overclaims.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.batch5_authority_systems_capsule run --input fixtures/first_wave/batch5_authority_systems_capsule/input --out receipts/first_wave/batch5_authority_systems_capsule --acceptance-out receipts/acceptance/first_wave/batch5_authority_systems_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch5_authority_systems_capsule",
   "scope_limit": "It validates only copied Set 5 authority-system source bodies and bounded deterministic exercises; it does not dispatch providers, prove Lean success, send live process signals, mutate generated state, change source files, authorize public sharing, include launch operations, or claim private-system equivalence.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "authority-boundary"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/58",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch7_macro_engines_capsule",
   "label": "Trace, Code-Map & Scheduling Engines Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Runs fifteen trace, code-map, and scheduling engines on test data, blocking truth overclaims.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch7-macro-engines-capsule run --input fixtures/first_wave/batch7_macro_engines_capsule/input --out receipts/first_wave/batch7_macro_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch7_macro_engines_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch7_macro_engines_capsule",
   "scope_limit": "It validates only a public source-open bundle and bounded exercises; it is not live source authority, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, public sharing, or launch-scope decision.",
   "source_link_count": 2,
   "links_to_count": 3,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/59",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch7_oracle_sibling_capsule",
   "label": "Oracle Sibling Source Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Replays subject-index and truth-diff logic on copied code, rejecting reasoning overclaims.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.batch7_oracle_sibling_capsule run --input fixtures/first_wave/batch7_oracle_sibling_capsule/input --out receipts/first_wave/batch7_oracle_sibling_capsule --acceptance-out receipts/acceptance/first_wave/batch7_oracle_sibling_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch7_oracle_sibling_capsule",
   "scope_limit": "It validates only Oracle sibling copied source bodies and bounded deterministic exercises; it does not run Oracle reasoning, dispatch providers or bridges, invoke private orchestration engine, change source files, prove semantic truth, prove all Oracle paths are covered, authorize public sharing, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/60",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch7_demo_take_console_capsule",
   "label": "Demo Take Console Source Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Replays the recording console's Swift logic without launching the app or capturing audio.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "PYTHONPATH=src python3 -m microcosm_core.organs.batch7_demo_take_console_capsule run --input fixtures/first_wave/batch7_demo_take_console_capsule/input --out receipts/first_wave/batch7_demo_take_console_capsule --acceptance-out receipts/acceptance/first_wave/batch7_demo_take_console_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch7_demo_take_console_capsule",
   "scope_limit": "It validates only Demo Take Console copied Swift source bodies and bounded deterministic exercises; it does not launch the app, authorize screen or microphone capture, export recording sessions, execute FFmpeg, dispatch WhisperKit or other models, change source files, prove complete UI coverage, authorize public sharing, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/61",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch8_tools_tail_primitives_capsule",
   "label": "Tools-Tail Primitives Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Exercises four copied helper tools over fixed inputs without touching live systems or data.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch8-tools-tail-primitives-capsule run --input fixtures/first_wave/batch8_tools_tail_primitives_capsule/input --out receipts/first_wave/batch8_tools_tail_primitives_capsule --acceptance-out receipts/acceptance/first_wave/batch8_tools_tail_primitives_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch8_tools_tail_primitives_capsule",
   "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/62",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch8_policy_engines_capsule",
   "label": "Policy Engines Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Maps three policy engines over test data without model calls or live campaign execution.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch8-policy-engines-capsule run --input fixtures/first_wave/batch8_policy_engines_capsule/input --out receipts/first_wave/batch8_policy_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch8_policy_engines_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch8_policy_engines_capsule",
   "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/63",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch8_audio_level_rms_port",
   "label": "Audio Level RMS Port",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Computes the audio loudness math on test arrays without opening a microphone or capturing input.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch8-audio-level-rms-port run --input fixtures/first_wave/batch8_audio_level_rms_port/input --out receipts/first_wave/batch8_audio_level_rms_port --acceptance-out receipts/acceptance/first_wave/batch8_audio_level_rms_port_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch8_audio_level_rms_port",
   "scope_limit": "projection mechanics only, not domain-level conclusions",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/64",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "batch8_structural_theses_capsule",
   "label": "Structural Theses Finance Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Runs a copied finance-thesis model through dated test cases with no live market data or advice.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch8-structural-theses-capsule run --input fixtures/first_wave/batch8_structural_theses_capsule/input --out receipts/first_wave/batch8_structural_theses_capsule --acceptance-out receipts/acceptance/first_wave/batch8_structural_theses_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch8_structural_theses_capsule",
   "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/65",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "engine_room_demo",
   "label": "Engine Room Demo",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Runs proof, runtime, security, and routing demos through bounded public examples with stated limits.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm engine-room-demo run --input fixtures/first_wave/engine_room_demo/input --out receipts/first_wave/engine_room_demo --acceptance-out receipts/acceptance/first_wave/engine_room_demo_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-engine_room_demo",
   "scope_limit": "It validates only the public Engine Room composition contract; it is not deployment posture, private-system equivalence, frontier theorem proving, complete security proof, public sharing, or launch-scope decision.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/66",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority",
    "not_security_proof",
    "not_theorem_or_proof_authority"
   ]
  },
  {
   "id": "batch9_macro_engines_capsule",
   "label": "Backend & Governance Engines Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Exercises thirteen copied backend and governance engines over fixed public test cases.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch9-macro-engines-capsule run --input fixtures/first_wave/batch9_macro_engines_capsule/input --out receipts/first_wave/batch9_macro_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch9_macro_engines_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch9_macro_engines_capsule",
   "scope_limit": "It validates only a public source-open bundle and bounded synthetic exercises; it is not live lineage truth, human approval authority, market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/67",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch10_governance_compilers_capsule",
   "label": "Governance & Compiler Mechanisms Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Checks thirteen copied governance and compiler routines against the code they were copied from.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch10-governance-compilers-capsule run --input fixtures/first_wave/batch10_governance_compilers_capsule/input --out receipts/first_wave/batch10_governance_compilers_capsule --acceptance-out receipts/acceptance/first_wave/batch10_governance_compilers_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch10_governance_compilers_capsule",
   "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live ledger control, or source-file changes.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/68",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch11_saturation_engines_capsule",
   "label": "Saturation Engines Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Verifies twelve copied engine routines and computes each failure probe from inputs, not echoes.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch11-saturation-engines-capsule run --input fixtures/first_wave/batch11_saturation_engines_capsule/input --out receipts/first_wave/batch11_saturation_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch11_saturation_engines_capsule",
   "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live runtime control, or source-file changes.",
   "source_link_count": 2,
   "links_to_count": 4,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/69",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "tool_server_pressure_inventory",
   "label": "Tool Server Pressure Inventory",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Flags detached helper processes and launch pressure from synthetic rows, not live hosts.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm tool-server-pressure-inventory run --input fixtures/first_wave/tool_server_pressure_inventory/input --out receipts/first_wave/tool_server_pressure_inventory --acceptance-out receipts/acceptance/first_wave/tool_server_pressure_inventory_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-tool_server_pressure_inventory",
   "scope_limit": "validates declared public helper-process pressure inventory contract only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, non-public data equivalence, or whole-system correctness",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/70",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority"
   ]
  },
  {
   "id": "batch8_compliance_pipeline_capsule",
   "label": "Compliance Pipeline Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Confirms six copied compliance source files carry their functions; runs one helper on sample text.",
   "rank": 3,
   "evidence_kind": "Computed projection",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch8-compliance-pipeline-capsule validate-bundle --input examples/batch8_compliance_pipeline_capsule/exported_batch8_compliance_pipeline_capsule_bundle --out /tmp/microcosm-batch8-compliance-pipeline-capsule",
   "relative_href": "docs/components.html#component-batch8_compliance_pipeline_capsule",
   "scope_limit": "validates declared public Set 8 compliance pipeline bundle contract only; no full compliance-ledger freshness, external model access, model dispatch, source-file changes, source note mutation, launch, public sharing, non-public data equivalence, or whole-system correctness",
   "source_link_count": 2,
   "links_to_count": 4,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/71",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch10_live_source_drift_capsule",
   "label": "Live Source Drift Bundle",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Compares four copied router and landing routines against current code to surface stale copies.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch10-live-source-drift-capsule run --input fixtures/first_wave/batch10_live_source_drift_capsule/input --out receipts/first_wave/batch10_live_source_drift_capsule --acceptance-out receipts/acceptance/first_wave/batch10_live_source_drift_capsule_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-batch10_live_source_drift_capsule",
   "scope_limit": "verified source body import only, not route authority, work log or work log mutation authority, mission-transaction execution, git staging or commit approval, source-file changes, non-public runtime export, launch, or public sharing",
   "source_link_count": 2,
   "links_to_count": 1,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/72",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  },
  {
   "id": "batch12_release_claim_language_gate",
   "label": "Release Public Wording Gate",
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "summary_line": "Flags affirmative open-source and deployment-posture wording while allowing safe boundary notes.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm batch12-release-claim-language-gate run-release-claim-language-gate-bundle --input examples/batch12_release_claim_language_gate/exported_batch12_release_claim_language_gate_bundle --out receipts/runtime_shell/demo_project/organs/batch12_release_claim_language_gate",
   "relative_href": "docs/components.html#component-batch12_release_claim_language_gate",
   "scope_limit": "This is lexical fixture evidence only; it is not launch-scope decision, not public sharing decision, not semantic NLP truth, not secret-scan coverage, and not whole-system correctness.",
   "source_link_count": 2,
   "links_to_count": 0,
   "tags": [
    "source intake",
    "provenance",
    "drift-control"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/73",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_whole_system_correctness",
    "not_launch_authority"
   ]
  },
  {
   "id": "mission_transaction_work_spine",
   "label": "Mission Transaction Work Spine",
   "family_id": "work_landing_and_continuity",
   "family_label": "Work & continuity",
   "summary_line": "Runs the real work-ledger engine on a sanitised snapshot to re-derive each change's verdict.",
   "rank": 4,
   "evidence_kind": "Bounded runtime computation",
   "runs_real_tools": true,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": true,
    "intrinsic_populated_source_runs_real_tools": true,
    "source_population_required": false
   },
   "command": "microcosm mission-transaction-work-spine run --input fixtures/first_wave/mission_transaction_work_spine/input --out receipts/first_wave/mission_transaction_work_spine",
   "relative_href": "docs/components.html#component-mission_transaction_work_spine",
   "scope_limit": "It validates work-landing, claim, checkpoint-lane, and dependency metadata projections over fixed fixtures only; it does not mutate live ledgers or git, certify real completion, authorize broad staging without operator intent, or prove any change is actually correct or complete.",
   "source_link_count": 2,
   "links_to_count": 9,
   "tags": [
    "agent-concurrency",
    "workflow-engineering",
    "continuity"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/74",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "durable_agent_work_landing_replay",
   "label": "Durable Agent Work Landing Replay",
   "family_id": "work_landing_and_continuity",
   "family_label": "Work & continuity",
   "summary_line": "Audits recorded work-claims so each cites files, validates before commit, and proves HEAD moved.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm durable-agent-work-landing-replay run-work-landing-bundle",
   "relative_href": "docs/components.html#component-durable_agent_work_landing_replay",
   "scope_limit": "It validates only the declared public work-landing contract over recorded rows. It is evidence for fixture-local completion mechanics, not for live Git side effects, unrelated-path staging, non-public body export, service operation, or distribution clearance.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "workflow-engineering",
    "continuity"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/75",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes"
   ]
  },
  {
   "id": "bridge_phase_continuity_runtime",
   "label": "Bridge Phase Continuity Runtime",
   "family_id": "work_landing_and_continuity",
   "family_label": "Work & continuity",
   "summary_line": "Replays a paused job to prove the rules for safely resuming it hold and reject duplicate resumes.",
   "rank": 5,
   "evidence_kind": "Contract validator",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm bridge-phase-continuity-runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity",
   "relative_href": "docs/components.html#component-bridge_phase_continuity_runtime",
   "scope_limit": "It validates only the declared public continuity contract over synthetic fixtures; it does not run live bridge transport, use external model services, read operator HUD/browser/phase-runtime or private-memory state, prove provider or UI uptime, land work, change source files, or include launch operations.",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "workflow-engineering",
    "continuity"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/76",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority"
   ]
  },
  {
   "id": "concurrency_mission_control",
   "label": "Concurrency Mission Control",
   "family_id": "work_landing_and_continuity",
   "family_label": "Work & continuity",
   "summary_line": "Runs copied claim-coordination code so duplicate, stale, and conflicting claims get blocked.",
   "rank": 5,
   "evidence_kind": "Verified source import",
   "runs_real_tools": false,
   "runs_real_tools_meaning": "current_public_component_command_invokes_external_machinery",
   "public_runtime": {
    "release_mode": "populated_source_release",
    "runnable_from_current_public_artifact": true,
    "runs_real_tools_now_from_current_public_artifact": false,
    "intrinsic_populated_source_runs_real_tools": false,
    "source_population_required": false
   },
   "command": "microcosm concurrency-mission-control run --input fixtures/first_wave/concurrency_mission_control/input --out receipts/first_wave/concurrency_mission_control --acceptance-out receipts/acceptance/first_wave/concurrency_mission_control_fixture_acceptance.json",
   "relative_href": "docs/components.html#component-concurrency_mission_control",
   "scope_limit": "verified concurrency mission-control source body import only, not a live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, public sharing, or launch-scope decision",
   "source_link_count": 2,
   "links_to_count": 2,
   "tags": [
    "agent-concurrency",
    "workflow-engineering",
    "continuity"
   ],
   "full_record_pointer": "/visible_text_index/logical_records/components/77",
   "claim_ceiling_tags": [
    "public_evidence_only",
    "not_hosted_service",
    "no_external_model_access",
    "no_source_file_changes",
    "not_launch_authority",
    "not_public_sharing_authority"
   ]
  }
 ],
 "family_digest": [
  {
   "family_id": "entry_and_reveal",
   "family_label": "Entry & orientation",
   "component_count": 2,
   "relative_href": "docs/area-entry.html",
   "component_ids": [
    "cold_reader_route_map",
    "public_reveal_walkthrough"
   ],
   "representative_component_ids": [
    "public_reveal_walkthrough",
    "cold_reader_route_map"
   ],
   "evidence_mix": {
    "rank_5": 1,
    "rank_4": 1,
    "rank_3_or_below": 0,
    "runs_real_tools": 1
   }
  },
  {
   "family_id": "architecture_and_navigation",
   "family_label": "Architecture & navigation",
   "component_count": 10,
   "relative_href": "docs/area-architecture.html",
   "component_ids": [
    "pattern_binding_contract",
    "pattern_assimilation_step",
    "executable_doctrine_grammar",
    "navigation_hologram_route_plane",
    "standards_meta_diagnostics",
    "voice_to_doctrine_self_improvement_loop",
    "cognitive_operator_registry",
    "routing_anti_patterns_registry",
    "doctrine_fact_claim_audit",
    "self_ignorance_coverage_ledger"
   ],
   "representative_component_ids": [
    "pattern_binding_contract",
    "pattern_assimilation_step",
    "executable_doctrine_grammar"
   ],
   "evidence_mix": {
    "rank_5": 9,
    "rank_4": 0,
    "rank_3_or_below": 1,
    "runs_real_tools": 0
   }
  },
  {
   "family_id": "formal_math_and_proof",
   "family_label": "Formal math & proof",
   "component_count": 18,
   "relative_href": "docs/area-formal-math.html",
   "component_ids": [
    "proof_diagnostic_evidence_spine",
    "formal_math_readiness_gate",
    "corpus_readiness_mathlib_absence_gate",
    "mathematical_strategy_atlas_hypothesis_scorer",
    "tactic_portfolio_availability_probe",
    "target_shape_tactic_routing_gate",
    "lean_std_premise_index",
    "formal_math_premise_retrieval",
    "formal_math_verifier_trace_repair_loop",
    "formal_evidence_cell_anchor_resolver",
    "undeclared_library_prior_symbol_classifier",
    "ring2_premise_retrieval_precision_recall_harness",
    "formal_math_lean_proof_witness",
    "verifier_lab_kernel",
    "verifier_lab_execution_spine",
    "certificate_kernel_execution_lab",
    "batch4_proof_authority_runtime",
    "proof_derived_governed_mutation_authorization"
   ],
   "representative_component_ids": [
    "corpus_readiness_mathlib_absence_gate",
    "formal_math_lean_proof_witness",
    "verifier_lab_execution_spine"
   ],
   "evidence_mix": {
    "rank_5": 3,
    "rank_4": 4,
    "rank_3_or_below": 11,
    "runs_real_tools": 4
   }
  },
  {
   "family_id": "agent_reliability_and_safety",
   "family_label": "Agent reliability & safety",
   "component_count": 17,
   "relative_href": "docs/area-agent-reliability.html",
   "component_ids": [
    "agent_benchmark_integrity_anti_gaming_replay",
    "batch10_cold_eval_honesty_capsule",
    "batch8_validator_checker_capsule",
    "agent_monitor_redteam_falsification_replay",
    "agent_sabotage_scheming_monitor_replay",
    "agent_memory_temporal_conflict_replay",
    "sleeper_memory_poisoning_quarantine_replay",
    "mcp_tool_authority_replay",
    "belief_state_process_reward_replay",
    "agent_sandbox_policy_escape_replay",
    "indirect_prompt_injection_information_flow_policy_replay",
    "agentic_vulnerability_discovery_patch_proof_replay",
    "agent_route_observability_runtime",
    "provider_context_recipe_budget_policy",
    "agent_closeout_faithfulness_audit",
    "bounded_autonomy_campaign_packet",
    "batch7_secondary_runtime_capsule"
   ],
   "representative_component_ids": [
    "provider_context_recipe_budget_policy",
    "agent_closeout_faithfulness_audit",
    "bounded_autonomy_campaign_packet"
   ],
   "evidence_mix": {
    "rank_5": 4,
    "rank_4": 3,
    "rank_3_or_below": 10,
    "runs_real_tools": 3
   }
  },
  {
   "family_id": "research_and_science_replays",
   "family_label": "Research & science",
   "component_count": 8,
   "relative_href": "docs/area-research.html",
   "component_ids": [
    "research_replication_rubric_artifact_replay",
    "spatial_world_model_counterfactual_simulation_replay",
    "materials_chemistry_closed_loop_lab_safety_replay",
    "mechanistic_interpretability_circuit_attribution_replay",
    "prediction_oracle_reconciliation",
    "finance_forecast_evaluation_spine",
    "batch12_market_dashboard_read_model_capsule",
    "batch12_prediction_market_board_capsule"
   ],
   "representative_component_ids": [
    "finance_forecast_evaluation_spine",
    "batch12_market_dashboard_read_model_capsule",
    "batch12_prediction_market_board_capsule"
   ],
   "evidence_mix": {
    "rank_5": 2,
    "rank_4": 3,
    "rank_3_or_below": 3,
    "runs_real_tools": 1
   }
  },
  {
   "family_id": "import_projection_and_drift",
   "family_label": "Import & drift control",
   "component_count": 19,
   "relative_href": "docs/area-import-drift.html",
   "component_ids": [
    "macro_projection_import_protocol",
    "world_model_projection_drift_control_room",
    "batch6_unsurfaced_primitives_capsule",
    "batch5_authority_systems_capsule",
    "batch7_macro_engines_capsule",
    "batch7_oracle_sibling_capsule",
    "batch7_demo_take_console_capsule",
    "batch8_tools_tail_primitives_capsule",
    "batch8_policy_engines_capsule",
    "batch8_audio_level_rms_port",
    "batch8_structural_theses_capsule",
    "engine_room_demo",
    "batch9_macro_engines_capsule",
    "batch10_governance_compilers_capsule",
    "batch11_saturation_engines_capsule",
    "tool_server_pressure_inventory",
    "batch8_compliance_pipeline_capsule",
    "batch10_live_source_drift_capsule",
    "batch12_release_claim_language_gate"
   ],
   "representative_component_ids": [
    "macro_projection_import_protocol",
    "world_model_projection_drift_control_room",
    "batch6_unsurfaced_primitives_capsule"
   ],
   "evidence_mix": {
    "rank_5": 17,
    "rank_4": 0,
    "rank_3_or_below": 2,
    "runs_real_tools": 0
   }
  },
  {
   "family_id": "work_landing_and_continuity",
   "family_label": "Work & continuity",
   "component_count": 4,
   "relative_href": "docs/area-continuity.html",
   "component_ids": [
    "mission_transaction_work_spine",
    "durable_agent_work_landing_replay",
    "bridge_phase_continuity_runtime",
    "concurrency_mission_control"
   ],
   "representative_component_ids": [
    "mission_transaction_work_spine",
    "durable_agent_work_landing_replay",
    "bridge_phase_continuity_runtime"
   ],
   "evidence_mix": {
    "rank_5": 3,
    "rank_4": 1,
    "rank_3_or_below": 0,
    "runs_real_tools": 1
   }
  }
 ],
 "family_depth_facts": {
  "how_to_read": "Mass, not merit: these rows say how much authored, source-linked material stands behind each area (write-up bytes, prior-art references, diagrams), not that the area is good. Before calling an area thin or 'bookkeeping', open one of its largest paper-module records; before calling it strong, read what its checks actually ran.",
  "join_rule": "a paper module belongs to the family of the first component it documents",
  "families": [
   {
    "family_id": "entry_and_reveal",
    "family_label": "Entry & orientation",
    "component_count": 2,
    "rank_distribution": {
     "rank_5": 1,
     "rank_4": 1,
     "rank_3_or_below": 0
    },
    "runs_real_tools_count": 1,
    "evidence_modes": {
     "Bounded runtime computation": 1,
     "Contract validator": 1
    },
    "paper_module_count": 2,
    "paper_module_text_bytes": 32053,
    "prior_art_reference_count": 10,
    "diagram_count": 2,
    "components_without_paper_module": [],
    "largest_paper_modules": [
     {
      "id": "paper_module.public_reveal_walkthrough",
      "title": "Public Reveal Walkthrough",
      "body_markdown_byte_count": 19691,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.cold_reader_route_map",
      "title": "Cold-Reader Route Map",
      "body_markdown_byte_count": 12362,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     }
    ]
   },
   {
    "family_id": "architecture_and_navigation",
    "family_label": "Architecture & navigation",
    "component_count": 10,
    "rank_distribution": {
     "rank_5": 9,
     "rank_4": 0,
     "rank_3_or_below": 1
    },
    "runs_real_tools_count": 0,
    "evidence_modes": {
     "Contract validator": 9,
     "Computed projection": 1
    },
    "paper_module_count": 10,
    "paper_module_text_bytes": 137028,
    "prior_art_reference_count": 44,
    "diagram_count": 10,
    "components_without_paper_module": [],
    "largest_paper_modules": [
     {
      "id": "paper_module.self_ignorance_coverage_ledger",
      "title": "Self-Ignorance Coverage Ledger",
      "body_markdown_byte_count": 20798,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.doctrine_fact_claim_audit",
      "title": "Doctrine Fact Claim Audit",
      "body_markdown_byte_count": 17198,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.navigation_hologram_route_plane",
      "title": "Navigation Hologram Route Plane",
      "body_markdown_byte_count": 15356,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     }
    ]
   },
   {
    "family_id": "formal_math_and_proof",
    "family_label": "Formal math & proof",
    "component_count": 18,
    "rank_distribution": {
     "rank_5": 3,
     "rank_4": 4,
     "rank_3_or_below": 11
    },
    "runs_real_tools_count": 4,
    "evidence_modes": {
     "Computed projection": 11,
     "External tool run": 4,
     "Contract validator": 2,
     "Verified source import": 1
    },
    "paper_module_count": 18,
    "paper_module_text_bytes": 272577,
    "prior_art_reference_count": 75,
    "diagram_count": 18,
    "components_without_paper_module": [],
    "largest_paper_modules": [
     {
      "id": "paper_module.undeclared_library_prior_classifier",
      "title": "Undeclared Library Prior Classifier",
      "body_markdown_byte_count": 21647,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.formal_math_readiness_gate",
      "title": "Formal Math Readiness Gate",
      "body_markdown_byte_count": 20970,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.certificate_kernel_execution_lab",
      "title": "Certificate Kernel Execution Lab",
      "body_markdown_byte_count": 20515,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     }
    ]
   },
   {
    "family_id": "agent_reliability_and_safety",
    "family_label": "Agent reliability & safety",
    "component_count": 17,
    "rank_distribution": {
     "rank_5": 4,
     "rank_4": 3,
     "rank_3_or_below": 10
    },
    "runs_real_tools_count": 3,
    "evidence_modes": {
     "Computed projection": 10,
     "Verified source import": 3,
     "External tool run": 2,
     "Bounded runtime computation": 1,
     "Contract validator": 1
    },
    "paper_module_count": 18,
    "paper_module_text_bytes": 284662,
    "prior_art_reference_count": 91,
    "diagram_count": 18,
    "components_without_paper_module": [],
    "largest_paper_modules": [
     {
      "id": "paper_module.agent_route_observability_runtime",
      "title": "Agent Route Observability Runtime",
      "body_markdown_byte_count": 23597,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.indirect_prompt_injection_information_flow_policy_replay",
      "title": "Indirect Prompt-Injection Information-Flow Policy Replay",
      "body_markdown_byte_count": 22095,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.agent_memory_temporal_conflict_replay",
      "title": "Agent Memory Temporal-Conflict Replay",
      "body_markdown_byte_count": 22017,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     }
    ]
   },
   {
    "family_id": "research_and_science_replays",
    "family_label": "Research & science",
    "component_count": 8,
    "rank_distribution": {
     "rank_5": 2,
     "rank_4": 3,
     "rank_3_or_below": 3
    },
    "runs_real_tools_count": 1,
    "evidence_modes": {
     "Computed projection": 3,
     "Contract validator": 2,
     "Verified source import": 2,
     "External tool run": 1
    },
    "paper_module_count": 8,
    "paper_module_text_bytes": 124626,
    "prior_art_reference_count": 32,
    "diagram_count": 8,
    "components_without_paper_module": [],
    "largest_paper_modules": [
     {
      "id": "paper_module.mechanistic_interpretability_circuit_attribution_replay",
      "title": "Mechanistic Interpretability Circuit Attribution Replay",
      "body_markdown_byte_count": 26061,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.research_replication_rubric_artifact_replay",
      "title": "Research Replication Rubric Artifact Replay",
      "body_markdown_byte_count": 20116,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.prediction_oracle_reconciliation",
      "title": "Prediction Oracle Reconciliation",
      "body_markdown_byte_count": 18733,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     }
    ]
   },
   {
    "family_id": "import_projection_and_drift",
    "family_label": "Import & drift control",
    "component_count": 19,
    "rank_distribution": {
     "rank_5": 17,
     "rank_4": 0,
     "rank_3_or_below": 2
    },
    "runs_real_tools_count": 0,
    "evidence_modes": {
     "Verified source import": 14,
     "Contract validator": 3,
     "Computed projection": 2
    },
    "paper_module_count": 18,
    "paper_module_text_bytes": 236973,
    "prior_art_reference_count": 78,
    "diagram_count": 18,
    "components_without_paper_module": [
     "batch7_demo_take_console_capsule",
     "batch7_oracle_sibling_capsule"
    ],
    "largest_paper_modules": [
     {
      "id": "paper_module.macro_projection_import_protocol",
      "title": "Source Projection Import Protocol",
      "body_markdown_byte_count": 18520,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.batch6_unsurfaced_primitives_capsule",
      "title": "Set 6 Unsurfaced Primitives Bundle",
      "body_markdown_byte_count": 17095,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.batch12_release_claim_language_gate",
      "title": "Set 12 launch claim-Language Gate",
      "body_markdown_byte_count": 16565,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     }
    ]
   },
   {
    "family_id": "work_landing_and_continuity",
    "family_label": "Work & continuity",
    "component_count": 4,
    "rank_distribution": {
     "rank_5": 3,
     "rank_4": 1,
     "rank_3_or_below": 0
    },
    "runs_real_tools_count": 1,
    "evidence_modes": {
     "Contract validator": 2,
     "Bounded runtime computation": 1,
     "Verified source import": 1
    },
    "paper_module_count": 4,
    "paper_module_text_bytes": 52326,
    "prior_art_reference_count": 18,
    "diagram_count": 4,
    "components_without_paper_module": [],
    "largest_paper_modules": [
     {
      "id": "paper_module.bridge_phase_continuity_runtime",
      "title": "Bridge Phase Continuity Runtime",
      "body_markdown_byte_count": 13707,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.mission_transaction_work_spine",
      "title": "Mission Transaction Work Spine",
      "body_markdown_byte_count": 13542,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     },
     {
      "id": "paper_module.durable_agent_work_landing_replay",
      "title": "Durable Agent Work-Landing Replay",
      "body_markdown_byte_count": 12686,
      "open_via": "visible_text_index.logical_records.paper_modules[] by id"
     }
    ]
   }
  ],
  "unjoined_paper_modules": {
   "count": 15,
   "paper_module_text_bytes": 175151,
   "note": "cross-cutting modules not joined to one family; same records, same depth"
  }
 },
 "claim_ceiling_index": {
  "schema": "microcosm_public_claim_ceiling_index_v0",
  "source_basis": "derived from component scope_limit text plus global public-slice invariants",
  "warning": "Tags are reader aids; the component scope_limit prose and the linked source remain authority.",
  "tag_count": 11,
  "entries": [
   {
    "tag": "public_evidence_only",
    "description": "Use only Microcosm's public files, records, and source links for this claim; the public artifact does not stand in for any other system.",
    "global_or_local": "global",
    "component_count": 78,
    "component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "executable_doctrine_grammar",
     "navigation_hologram_route_plane",
     "standards_meta_diagnostics",
     "voice_to_doctrine_self_improvement_loop",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "doctrine_fact_claim_audit",
     "self_ignorance_coverage_ledger",
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization",
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "agent_memory_temporal_conflict_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "agent_route_observability_runtime",
     "provider_context_recipe_budget_policy",
     "agent_closeout_faithfulness_audit",
     "bounded_autonomy_campaign_packet",
     "batch7_secondary_runtime_capsule",
     "research_replication_rubric_artifact_replay",
     "spatial_world_model_counterfactual_simulation_replay",
     "materials_chemistry_closed_loop_lab_safety_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine",
     "batch12_market_dashboard_read_model_capsule",
     "batch12_prediction_market_board_capsule",
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_audio_level_rms_port",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "batch12_release_claim_language_gate",
     "mission_transaction_work_spine",
     "durable_agent_work_landing_replay",
     "bridge_phase_continuity_runtime",
     "concurrency_mission_control"
    ],
    "example_component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract"
    ]
   },
   {
    "tag": "not_hosted_service",
    "description": "Microcosm is not a hosted service; you run it locally.",
    "global_or_local": "global",
    "component_count": 78,
    "component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "executable_doctrine_grammar",
     "navigation_hologram_route_plane",
     "standards_meta_diagnostics",
     "voice_to_doctrine_self_improvement_loop",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "doctrine_fact_claim_audit",
     "self_ignorance_coverage_ledger",
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization",
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "agent_memory_temporal_conflict_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "agent_route_observability_runtime",
     "provider_context_recipe_budget_policy",
     "agent_closeout_faithfulness_audit",
     "bounded_autonomy_campaign_packet",
     "batch7_secondary_runtime_capsule",
     "research_replication_rubric_artifact_replay",
     "spatial_world_model_counterfactual_simulation_replay",
     "materials_chemistry_closed_loop_lab_safety_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine",
     "batch12_market_dashboard_read_model_capsule",
     "batch12_prediction_market_board_capsule",
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_audio_level_rms_port",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "batch12_release_claim_language_gate",
     "mission_transaction_work_spine",
     "durable_agent_work_landing_replay",
     "bridge_phase_continuity_runtime",
     "concurrency_mission_control"
    ],
    "example_component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract"
    ]
   },
   {
    "tag": "no_external_model_access",
    "description": "Runs locally without external model access.",
    "global_or_local": "global",
    "component_count": 78,
    "component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "executable_doctrine_grammar",
     "navigation_hologram_route_plane",
     "standards_meta_diagnostics",
     "voice_to_doctrine_self_improvement_loop",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "doctrine_fact_claim_audit",
     "self_ignorance_coverage_ledger",
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization",
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "agent_memory_temporal_conflict_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "agent_route_observability_runtime",
     "provider_context_recipe_budget_policy",
     "agent_closeout_faithfulness_audit",
     "bounded_autonomy_campaign_packet",
     "batch7_secondary_runtime_capsule",
     "research_replication_rubric_artifact_replay",
     "spatial_world_model_counterfactual_simulation_replay",
     "materials_chemistry_closed_loop_lab_safety_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine",
     "batch12_market_dashboard_read_model_capsule",
     "batch12_prediction_market_board_capsule",
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_audio_level_rms_port",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "batch12_release_claim_language_gate",
     "mission_transaction_work_spine",
     "durable_agent_work_landing_replay",
     "bridge_phase_continuity_runtime",
     "concurrency_mission_control"
    ],
    "example_component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract"
    ]
   },
   {
    "tag": "no_source_file_changes",
    "description": "Running it writes into a .microcosm/ folder and does not change your source files.",
    "global_or_local": "global",
    "component_count": 78,
    "component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "executable_doctrine_grammar",
     "navigation_hologram_route_plane",
     "standards_meta_diagnostics",
     "voice_to_doctrine_self_improvement_loop",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "doctrine_fact_claim_audit",
     "self_ignorance_coverage_ledger",
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization",
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "agent_memory_temporal_conflict_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "agent_route_observability_runtime",
     "provider_context_recipe_budget_policy",
     "agent_closeout_faithfulness_audit",
     "bounded_autonomy_campaign_packet",
     "batch7_secondary_runtime_capsule",
     "research_replication_rubric_artifact_replay",
     "spatial_world_model_counterfactual_simulation_replay",
     "materials_chemistry_closed_loop_lab_safety_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine",
     "batch12_market_dashboard_read_model_capsule",
     "batch12_prediction_market_board_capsule",
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_audio_level_rms_port",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "batch12_release_claim_language_gate",
     "mission_transaction_work_spine",
     "durable_agent_work_landing_replay",
     "bridge_phase_continuity_runtime",
     "concurrency_mission_control"
    ],
    "example_component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract"
    ]
   },
   {
    "tag": "not_whole_system_correctness",
    "description": "A pass checks the component's declared public contract, not whole-system correctness.",
    "global_or_local": "local",
    "component_count": 17,
    "component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "executable_doctrine_grammar",
     "standards_meta_diagnostics",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "proof_diagnostic_evidence_spine",
     "formal_math_lean_proof_witness",
     "agent_sandbox_policy_escape_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "batch7_secondary_runtime_capsule",
     "batch12_market_dashboard_read_model_capsule",
     "macro_projection_import_protocol",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch12_release_claim_language_gate"
    ],
    "example_component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract"
    ]
   },
   {
    "tag": "not_launch_authority",
    "description": "Use it as evidence-scope metadata, not as a launch decision.",
    "global_or_local": "local",
    "component_count": 65,
    "component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "executable_doctrine_grammar",
     "standards_meta_diagnostics",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "proof_diagnostic_evidence_spine",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization",
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "agent_memory_temporal_conflict_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "agent_route_observability_runtime",
     "provider_context_recipe_budget_policy",
     "batch7_secondary_runtime_capsule",
     "research_replication_rubric_artifact_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "prediction_oracle_reconciliation",
     "batch12_market_dashboard_read_model_capsule",
     "batch12_prediction_market_board_capsule",
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "batch12_release_claim_language_gate",
     "bridge_phase_continuity_runtime",
     "concurrency_mission_control"
    ],
    "example_component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract"
    ]
   },
   {
    "tag": "not_public_sharing_authority",
    "description": "Public sharing stays limited to the declared public source refs and fixtures.",
    "global_or_local": "local",
    "component_count": 34,
    "component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "proof_diagnostic_evidence_spine",
     "corpus_readiness_mathlib_absence_gate",
     "formal_evidence_cell_anchor_resolver",
     "formal_math_lean_proof_witness",
     "verifier_lab_execution_spine",
     "batch4_proof_authority_runtime",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "batch7_secondary_runtime_capsule",
     "research_replication_rubric_artifact_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "concurrency_mission_control"
    ],
    "example_component_ids": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract"
    ]
   },
   {
    "tag": "not_theorem_or_proof_authority",
    "description": "Use its bounded witness as local evidence, not theorem or proof-system correctness.",
    "global_or_local": "local",
    "component_count": 15,
    "component_ids": [
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "provider_context_recipe_budget_policy",
     "engine_room_demo"
    ],
    "example_component_ids": [
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate"
    ]
   },
   {
    "tag": "not_benchmark_claim",
    "description": "Benchmark-like rows are fixture evidence, not product performance.",
    "global_or_local": "local",
    "component_count": 26,
    "component_ids": [
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization",
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "research_replication_rubric_artifact_replay",
     "materials_chemistry_closed_loop_lab_safety_replay",
     "mechanistic_interpretability_circuit_attribution_replay"
    ],
    "example_component_ids": [
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "tactic_portfolio_availability_probe"
    ]
   },
   {
    "tag": "not_live_market_data",
    "description": "Uses synthetic or declared fixture data rather than live market data.",
    "global_or_local": "local",
    "component_count": 5,
    "component_ids": [
     "batch7_secondary_runtime_capsule",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine",
     "batch12_market_dashboard_read_model_capsule",
     "batch6_unsurfaced_primitives_capsule"
    ],
    "example_component_ids": [
     "batch7_secondary_runtime_capsule",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine"
    ]
   },
   {
    "tag": "not_security_proof",
    "description": "Security-related rows are bounded replays or checks, not product-grade security guarantees.",
    "global_or_local": "local",
    "component_count": 1,
    "component_ids": [
     "engine_room_demo"
    ],
    "example_component_ids": [
     "engine_room_demo"
    ]
   }
  ]
 },
 "route_index": {
  "schema": "microcosm_public_ai_orientation_route_index_v1",
  "url_resolution": {
   "base_url": "https://wcook04.github.io/microcosm-substrate/",
   "relative_href_rule": "Resolve relative_href against the Microcosm public site root. If no public base URL is present, keep the relative_href and ask the visitor for the site URL if an absolute URL is required."
  },
  "start_here": [
   {
    "label": "Run one local witness",
    "relative_href": "docs/quickstart.html"
   },
   {
    "label": "What the pass proves",
    "relative_href": "docs/evidence.html"
   },
   {
    "label": "What Microcosm is",
    "relative_href": "docs/tour.html"
   },
   {
    "label": "Whole-system map",
    "relative_href": "docs/architecture.html#whole-system-map"
   },
   {
    "label": "Source and provenance",
    "relative_href": "docs/source.html#provenance"
   }
  ],
  "machine_readable": [
   {
    "label": "LLM doorway",
    "relative_href": "llms.txt",
    "schema": "microcosm_public_llms_doorway_v1"
   },
   {
    "label": "Object map",
    "relative_href": "object-map.json",
    "schema": "microcosm_public_object_map_v1"
   },
   {
    "label": "Content graph",
    "relative_href": "content-graph.json",
    "schema": "microcosm_public_content_graph_v1"
   }
  ],
  "pages": [
   {
    "id": "page:overview",
    "title": "Microcosm",
    "nav_group": "Landing",
    "nav_label": "Front door",
    "relative_href": "index.html",
    "generated": false,
    "source_refs": [
     "sites/microcosm/index.html",
     "microcosm-substrate/README.md",
     "microcosm-substrate/core/organ_families.json"
    ]
   },
   {
    "id": "page:docs-overview",
    "title": "Overview",
    "nav_group": "Getting started",
    "nav_label": "Overview",
    "relative_href": "docs/index.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/README.md",
     "microcosm-substrate/core/organ_families.json"
    ]
   },
   {
    "id": "page:tour",
    "title": "What Microcosm is",
    "nav_group": "Getting started",
    "nav_label": "What it is (full tour)",
    "relative_href": "docs/tour.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:quickstart",
    "title": "Quickstart",
    "nav_group": "Getting started",
    "nav_label": "Quickstart",
    "relative_href": "docs/quickstart.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/QUICKSTART.md",
     "microcosm-substrate/SOURCE_STATUS.md"
    ]
   },
   {
    "id": "page:coding-agents",
    "title": "Working with a coding agent",
    "nav_group": "Getting started",
    "nav_label": "With a coding agent",
    "relative_href": "docs/coding-agents.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/AGENTS.md",
     "microcosm-substrate/README.md"
    ]
   },
   {
    "id": "page:architecture",
    "title": "How it fits together",
    "nav_group": "The system",
    "nav_label": "How it fits together",
    "relative_href": "docs/architecture.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/ARCHITECTURE.md",
     "microcosm-substrate/core/architecture_kernel.json",
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:doctrine",
    "title": "Doctrine",
    "nav_group": "The system",
    "nav_label": "Doctrine",
    "relative_href": "docs/doctrine.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/axioms/AX-1.json",
     "microcosm-substrate/principles/P-1.json",
     "microcosm-substrate/anti_principles/AP-1.json",
     "microcosm-substrate/core/doctrine_lattice_coverage.json"
    ]
   },
   {
    "id": "page:area-entry",
    "title": "Entry & orientation",
    "nav_group": "Areas",
    "nav_label": "Entry & orientation",
    "relative_href": "docs/area-entry.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:area-architecture",
    "title": "Architecture & navigation",
    "nav_group": "Areas",
    "nav_label": "Architecture & navigation",
    "relative_href": "docs/area-architecture.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:area-formal-math",
    "title": "Formal math & proof",
    "nav_group": "Areas",
    "nav_label": "Formal math & proof",
    "relative_href": "docs/area-formal-math.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:area-agent-reliability",
    "title": "Agent reliability & safety",
    "nav_group": "Areas",
    "nav_label": "Agent reliability & safety",
    "relative_href": "docs/area-agent-reliability.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:area-research",
    "title": "Research & science",
    "nav_group": "Areas",
    "nav_label": "Research & science",
    "relative_href": "docs/area-research.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:area-import-drift",
    "title": "Import & drift control",
    "nav_group": "Areas",
    "nav_label": "Import & drift control",
    "relative_href": "docs/area-import-drift.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:area-continuity",
    "title": "Work & continuity",
    "nav_group": "Areas",
    "nav_label": "Work & continuity",
    "relative_href": "docs/area-continuity.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:components",
    "title": "Components",
    "nav_group": "Reference",
    "nav_label": "Components",
    "relative_href": "docs/components.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:field-guide",
    "title": "Field guide",
    "nav_group": "Reference",
    "nav_label": "Field guide",
    "relative_href": "docs/field-guide.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/anti_principles/AP-1.json",
     "microcosm-substrate/anti_principles/AP-10.json",
     "microcosm-substrate/anti_principles/AP-11.json",
     "microcosm-substrate/anti_principles/AP-12.json",
     "microcosm-substrate/anti_principles/AP-13.json",
     "microcosm-substrate/anti_principles/AP-14.json",
     "microcosm-substrate/anti_principles/AP-15.json",
     "microcosm-substrate/anti_principles/AP-16.json",
     "microcosm-substrate/anti_principles/AP-17.json",
     "microcosm-substrate/anti_principles/AP-2.json",
     "microcosm-substrate/anti_principles/AP-3.json",
     "microcosm-substrate/anti_principles/AP-4.json",
     "microcosm-substrate/anti_principles/AP-5.json",
     "microcosm-substrate/anti_principles/AP-6.json",
     "microcosm-substrate/anti_principles/AP-7.json",
     "microcosm-substrate/anti_principles/AP-8.json",
     "microcosm-substrate/anti_principles/AP-9.json",
     "microcosm-substrate/atlas/entry_packet.json",
     "microcosm-substrate/axioms/AX-1.json",
     "microcosm-substrate/axioms/AX-10.json",
     "microcosm-substrate/axioms/AX-11.json",
     "microcosm-substrate/axioms/AX-12.json",
     "microcosm-substrate/axioms/AX-2.json",
     "microcosm-substrate/axioms/AX-3.json",
     "microcosm-substrate/axioms/AX-4.json",
     "microcosm-substrate/axioms/AX-5.json",
     "microcosm-substrate/axioms/AX-6.json",
     "microcosm-substrate/axioms/AX-7.json",
     "microcosm-substrate/axioms/AX-8.json",
     "microcosm-substrate/axioms/AX-9.json",
     "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
     "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
     "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
     "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "microcosm-substrate/core/doctrine_lattice_coverage.json",
     "microcosm-substrate/core/doctrine_lattice_relations.json",
     "microcosm-substrate/core/mechanism_sources.json",
     "microcosm-substrate/core/organ_atlas.json",
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/paper_module_capsules.json",
     "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "microcosm-substrate/principles/P-1.json",
     "microcosm-substrate/principles/P-10.json",
     "microcosm-substrate/principles/P-11.json",
     "microcosm-substrate/principles/P-12.json",
     "microcosm-substrate/principles/P-13.json",
     "microcosm-substrate/principles/P-14.json",
     "microcosm-substrate/principles/P-15.json",
     "microcosm-substrate/principles/P-16.json",
     "microcosm-substrate/principles/P-17.json",
     "microcosm-substrate/principles/P-18.json",
     "microcosm-substrate/principles/P-19.json",
     "microcosm-substrate/principles/P-2.json",
     "microcosm-substrate/principles/P-20.json",
     "microcosm-substrate/principles/P-3.json",
     "microcosm-substrate/principles/P-4.json",
     "microcosm-substrate/principles/P-5.json",
     "microcosm-substrate/principles/P-6.json",
     "microcosm-substrate/principles/P-7.json",
     "microcosm-substrate/principles/P-8.json",
     "microcosm-substrate/principles/P-9.json"
    ]
   },
   {
    "id": "page:rules-and-ideas",
    "title": "Doctrine reference",
    "nav_group": "Reference",
    "nav_label": "Doctrine reference",
    "relative_href": "docs/rules-and-ideas.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/anti_principles/AP-1.json",
     "microcosm-substrate/anti_principles/AP-10.json",
     "microcosm-substrate/anti_principles/AP-11.json",
     "microcosm-substrate/anti_principles/AP-12.json",
     "microcosm-substrate/anti_principles/AP-13.json",
     "microcosm-substrate/anti_principles/AP-14.json",
     "microcosm-substrate/anti_principles/AP-15.json",
     "microcosm-substrate/anti_principles/AP-16.json",
     "microcosm-substrate/anti_principles/AP-17.json",
     "microcosm-substrate/anti_principles/AP-2.json",
     "microcosm-substrate/anti_principles/AP-3.json",
     "microcosm-substrate/anti_principles/AP-4.json",
     "microcosm-substrate/anti_principles/AP-5.json",
     "microcosm-substrate/anti_principles/AP-6.json",
     "microcosm-substrate/anti_principles/AP-7.json",
     "microcosm-substrate/anti_principles/AP-8.json",
     "microcosm-substrate/anti_principles/AP-9.json",
     "microcosm-substrate/atlas/entry_packet.json",
     "microcosm-substrate/axioms/AX-1.json",
     "microcosm-substrate/axioms/AX-10.json",
     "microcosm-substrate/axioms/AX-11.json",
     "microcosm-substrate/axioms/AX-12.json",
     "microcosm-substrate/axioms/AX-2.json",
     "microcosm-substrate/axioms/AX-3.json",
     "microcosm-substrate/axioms/AX-4.json",
     "microcosm-substrate/axioms/AX-5.json",
     "microcosm-substrate/axioms/AX-6.json",
     "microcosm-substrate/axioms/AX-7.json",
     "microcosm-substrate/axioms/AX-8.json",
     "microcosm-substrate/axioms/AX-9.json",
     "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
     "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
     "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
     "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "microcosm-substrate/core/doctrine_lattice_coverage.json",
     "microcosm-substrate/core/doctrine_lattice_relations.json",
     "microcosm-substrate/core/mechanism_sources.json",
     "microcosm-substrate/core/paper_module_capsules.json",
     "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "microcosm-substrate/principles/P-1.json",
     "microcosm-substrate/principles/P-10.json",
     "microcosm-substrate/principles/P-11.json",
     "microcosm-substrate/principles/P-12.json",
     "microcosm-substrate/principles/P-13.json",
     "microcosm-substrate/principles/P-14.json",
     "microcosm-substrate/principles/P-15.json",
     "microcosm-substrate/principles/P-16.json",
     "microcosm-substrate/principles/P-17.json",
     "microcosm-substrate/principles/P-18.json",
     "microcosm-substrate/principles/P-19.json",
     "microcosm-substrate/principles/P-2.json",
     "microcosm-substrate/principles/P-20.json",
     "microcosm-substrate/principles/P-3.json",
     "microcosm-substrate/principles/P-4.json",
     "microcosm-substrate/principles/P-5.json",
     "microcosm-substrate/principles/P-6.json",
     "microcosm-substrate/principles/P-7.json",
     "microcosm-substrate/principles/P-8.json",
     "microcosm-substrate/principles/P-9.json"
    ]
   },
   {
    "id": "page:paper-modules",
    "title": "Paper modules",
    "nav_group": "Reference",
    "nav_label": "Paper modules",
    "relative_href": "docs/paper-modules.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/anti_principles/AP-1.json",
     "microcosm-substrate/anti_principles/AP-10.json",
     "microcosm-substrate/anti_principles/AP-11.json",
     "microcosm-substrate/anti_principles/AP-12.json",
     "microcosm-substrate/anti_principles/AP-13.json",
     "microcosm-substrate/anti_principles/AP-14.json",
     "microcosm-substrate/anti_principles/AP-15.json",
     "microcosm-substrate/anti_principles/AP-16.json",
     "microcosm-substrate/anti_principles/AP-17.json",
     "microcosm-substrate/anti_principles/AP-2.json",
     "microcosm-substrate/anti_principles/AP-3.json",
     "microcosm-substrate/anti_principles/AP-4.json",
     "microcosm-substrate/anti_principles/AP-5.json",
     "microcosm-substrate/anti_principles/AP-6.json",
     "microcosm-substrate/anti_principles/AP-7.json",
     "microcosm-substrate/anti_principles/AP-8.json",
     "microcosm-substrate/anti_principles/AP-9.json",
     "microcosm-substrate/atlas/entry_packet.json",
     "microcosm-substrate/axioms/AX-1.json",
     "microcosm-substrate/axioms/AX-10.json",
     "microcosm-substrate/axioms/AX-11.json",
     "microcosm-substrate/axioms/AX-12.json",
     "microcosm-substrate/axioms/AX-2.json",
     "microcosm-substrate/axioms/AX-3.json",
     "microcosm-substrate/axioms/AX-4.json",
     "microcosm-substrate/axioms/AX-5.json",
     "microcosm-substrate/axioms/AX-6.json",
     "microcosm-substrate/axioms/AX-7.json",
     "microcosm-substrate/axioms/AX-8.json",
     "microcosm-substrate/axioms/AX-9.json",
     "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
     "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
     "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
     "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "microcosm-substrate/core/doctrine_lattice_coverage.json",
     "microcosm-substrate/core/doctrine_lattice_relations.json",
     "microcosm-substrate/core/mechanism_sources.json",
     "microcosm-substrate/core/paper_module_capsules.json",
     "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "microcosm-substrate/principles/P-1.json",
     "microcosm-substrate/principles/P-10.json",
     "microcosm-substrate/principles/P-11.json",
     "microcosm-substrate/principles/P-12.json",
     "microcosm-substrate/principles/P-13.json",
     "microcosm-substrate/principles/P-14.json",
     "microcosm-substrate/principles/P-15.json",
     "microcosm-substrate/principles/P-16.json",
     "microcosm-substrate/principles/P-17.json",
     "microcosm-substrate/principles/P-18.json",
     "microcosm-substrate/principles/P-19.json",
     "microcosm-substrate/principles/P-2.json",
     "microcosm-substrate/principles/P-20.json",
     "microcosm-substrate/principles/P-3.json",
     "microcosm-substrate/principles/P-4.json",
     "microcosm-substrate/principles/P-5.json",
     "microcosm-substrate/principles/P-6.json",
     "microcosm-substrate/principles/P-7.json",
     "microcosm-substrate/principles/P-8.json",
     "microcosm-substrate/principles/P-9.json"
    ]
   },
   {
    "id": "page:evidence",
    "title": "What the pass proves",
    "nav_group": "Reference",
    "nav_label": "What the pass proves",
    "relative_href": "docs/evidence.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/organ_atlas.json"
    ]
   },
   {
    "id": "page:source",
    "title": "Source & license",
    "nav_group": "Reference",
    "nav_label": "Source & license",
    "relative_href": "docs/source.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/README.md",
     "microcosm-substrate/QUICKSTART.md",
     "microcosm-substrate/ARCHITECTURE.md",
     "microcosm-substrate/ORGANS.md",
     "microcosm-substrate/LICENSE",
     "microcosm-substrate/NOTICE",
     "microcosm-substrate/PROVENANCE.md"
    ]
   },
   {
    "id": "page:contact",
    "title": "Contact",
    "nav_group": "Reference",
    "nav_label": "Contact",
    "relative_href": "docs/contact.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/PROVENANCE.md",
     "microcosm-substrate/README.md"
    ]
   },
   {
    "id": "page:vulnerability-disclosure",
    "title": "Vulnerability disclosure",
    "nav_group": "Reference",
    "nav_label": "Vulnerability disclosure",
    "relative_href": "docs/vulnerability-disclosure.html",
    "generated": true,
    "source_refs": [
     "microcosm-substrate/SECURITY.md",
     "microcosm-substrate/README.md"
    ]
   }
  ]
 },
 "source_map": {
  "schema": "microcosm_public_ai_orientation_source_map_ref_v1",
  "source": "object-map.json::objects",
  "object_count": 812,
  "object_map_path": "object-map.json",
  "object_map_script_path": "assets/object-map.js",
  "objects_embedded": false,
  "sample_object_count": 12,
  "sample_objects": [
   {
    "object_id": "page:overview",
    "kind": "page",
    "label": "Overview",
    "relative_href": "index.html"
   },
   {
    "object_id": "page:quickstart",
    "kind": "page",
    "label": "Quickstart",
    "relative_href": "docs/quickstart.html"
   },
   {
    "object_id": "page:architecture",
    "kind": "page",
    "label": "How it fits together",
    "relative_href": "docs/architecture.html"
   },
   {
    "object_id": "page:doctrine",
    "kind": "page",
    "label": "Doctrine",
    "relative_href": "docs/doctrine.html"
   },
   {
    "object_id": "page:components",
    "kind": "page",
    "label": "Components",
    "relative_href": "docs/components.html"
   },
   {
    "object_id": "page:field-guide",
    "kind": "page",
    "label": "Field guide",
    "relative_href": "docs/field-guide.html"
   },
   {
    "object_id": "page:rules-and-ideas",
    "kind": "page",
    "label": "Doctrine reference",
    "relative_href": "docs/rules-and-ideas.html"
   },
   {
    "object_id": "page:paper-modules",
    "kind": "page",
    "label": "Paper modules",
    "relative_href": "docs/paper-modules.html"
   },
   {
    "object_id": "page:evidence",
    "kind": "page",
    "label": "What the pass proves",
    "relative_href": "docs/evidence.html"
   },
   {
    "object_id": "page:source",
    "kind": "page",
    "label": "Source & license",
    "relative_href": "docs/source.html"
   },
   {
    "object_id": "page:vulnerability-disclosure",
    "kind": "page",
    "label": "Vulnerability disclosure",
    "relative_href": "docs/vulnerability-disclosure.html"
   },
   {
    "object_id": "area:entry_and_reveal",
    "kind": "area",
    "label": "Entry & orientation",
    "relative_href": "docs/area-entry.html"
   }
  ],
  "link_return_rule": "Use object-map.json::objects[].route or route_contract.href to cite exact public views. site-packet.js intentionally carries only a bounded sample so export controls do not load the full object map."
 },
 "source_ref_summary": {
  "source_ref_count": 175,
  "source_hash_count": 173,
  "source_refs_path": "content-graph.json::source_refs",
  "source_hashes_path": "content-manifest.json::source_hashes",
  "curated_source_refs": [
   "sites/microcosm/index.html",
   "microcosm-substrate/README.md",
   "microcosm-substrate/core/organ_families.json"
  ],
  "curated_source_hashes": {
   "sites/microcosm/index.html": "sha256:1fd0d6f87e954cf50cd13d02b7418f72b2d1e2982afa8b294c7b0e38b4410dd8",
   "microcosm-substrate/README.md": "sha256:9e3dd28ade2328d63e83227fbb5845561bd46bf74a3558d796423ea43f4459e2",
   "microcosm-substrate/core/organ_families.json": "sha256:da9fdfae54a88fa3f9620d222b1fe5c74c221de30d36db24d639b51bd7bb8d08"
  }
 },
 "counts": {
  "page_count": 22,
  "family_count": 7,
  "component_count": 78,
  "relation_count": 208,
  "surface_sync_derived_view_count": 7,
  "paper_module_count": 93,
  "diagram_asset_count": 93,
  "math_latex_asset_count": 0,
  "paper_module_availability_gap_count": 0,
  "paper_module_doctrine_feed_link_count": 1350,
  "paper_module_doctrine_feed_link_counts": {
   "axiom": 374,
   "concept": 97,
   "mechanism": 108,
   "organ": 78,
   "paper_module": 223,
   "principle": 470
  },
  "coverage_deficit_count": 2,
  "coverage_deficit_total_count": 51,
  "evidence_profile_count": 328,
  "relation_grammar_relation_count": 37,
  "relation_grammar_verb_count": 44,
  "rules_and_ideas_count": 248,
  "doctrine_entity_body_record_count": 155,
  "rules_and_ideas_group_counts": {
   "principle": 20,
   "axiom": 12,
   "anti_principle": 17,
   "concept": 11,
   "mechanism": 95,
   "paper_module": 93
  },
  "roster_object_count": 326,
  "roster_projection_row_count": 419
 },
 "site": {
  "title": "Microcosm",
  "source_of_record": "https://github.com/wcook04/microcosm-substrate",
  "runtime_backend": "none",
  "browser_connect_src": "none"
 },
 "reader_contract": {
  "schema": "microcosm_public_ai_orientation_reader_contract_v1",
  "source_authority": "pages/components/paper_modules/source_refs plus linked public repository files",
  "navigation_authority": "route_index and source_map are navigation projections over public site objects",
  "read_order": [
   "read_me_first",
   "public_export_egress_posture",
   "coverage_scope",
   "quick_path",
   "question_router",
   "component_digest",
   "claim_ceiling_index",
   "family_digest",
   "route_index",
   "source_map",
   "visible_text_index",
   "pages",
   "content_graph_sections",
   "sidecar_refs",
   "projection",
   "source_ref_summary"
  ],
  "answer_behavior": {
   "plain_language": true,
   "cite_public_views_when_available": true,
   "derive_answers_from_routes_not_templates": true,
   "prefer_exact_relative_href": "Use the relative_href on the record you cite. Component records and component_digest[] rows carry relative_href directly; pages carry relative_href directly and also resolve through route_index.pages[]. object-map.json is the fuller authority when you have it, but it is a sidecar and is not embedded here.",
   "link_fallback_order": [
    "<cited_record>.relative_href",
    "component_digest[].relative_href",
    "visible_text_index.logical_records.components[].relative_href",
    "route_index.pages[].relative_href",
    "source_map.sample_objects[].relative_href",
    "projection.object_map_path",
    "projection.llms_path"
   ],
   "boundary_rule": "Answer only from Microcosm's public repository, public site pages, component cards, generated packets, and linked public source refs. When those records do not support a claim, say the public evidence does not show it."
  }
 },
 "coverage_scope": {
  "included": [
   "landing page visible text",
   "generated docs pages",
   "public component cards",
   "public paper-module summaries",
   "public relation rows",
   "machine-readable public maps"
  ],
  "omitted": [
   "anything not present in the public repository, public site pages, or generated public packets",
   "non-public account, browser, and model payload data",
   "claims beyond the public website and source-linked Microcosm repository"
  ],
  "authority_boundary": "This packet is a public-site projection and orientation aid. The Microcosm repository and the public source refs remain source authority; answers stop where those public records stop."
 },
 "sidecar_embedding_policy": {
  "artifact_role": "single-file review capsule: everything a cold review needs is embedded; the heavier canonical sidecars are routed, not embedded",
  "embedded": [
   "public page text (pages, visible_text_index)",
   "full component records and paper-module reader text",
   "doctrine records and evidence profiles",
   "roster one-liner rows",
   "the concise guide stratum",
   "the declared license text (legal_manifest)"
  ],
  "routed_not_embedded": [
   {
    "name": "object-map.json",
    "why": "canonical object and identity sidecar",
    "follow": "sidecar_refs.object_map"
   },
   {
    "name": "content-graph.json",
    "why": "canonical kernel with the full relation, roster, and rules rows",
    "follow": "content_graph_sections"
   },
   {
    "name": "projection-status.json",
    "why": "build and projection status sidecar",
    "follow": "sidecar_refs.projection_status"
   }
  ],
  "offline_answer_rule": "If a question needs a routed sidecar, say the packet routes to it but does not embed it; that is a declared packaging decision, not a defect."
 },
 "legal_manifest": {
  "declared_license": "Apache-2.0",
  "spdx_id": "Apache-2.0",
  "scope": "The license belongs to the public Microcosm repository; this packet embeds the text so an offline reviewer can verify it without the repository.",
  "answer_rule": "If the repository and this embedded copy disagree, the repository wins.",
  "present_packet_and_docs_reuse_terms": {
   "status": "repository_license_active_for_published_material",
   "default_rule": "Published repository files follow the repository license and notices.",
   "withheld_source_bodies": "Material not present in the public repository is not licensed by this packet."
  },
  "license_file": "LICENSE",
  "license_file_sha256": "5f73f0aafc768cc7c7f5da786dc7614296ee891a456faf175ab07456d3c35046",
  "license_text": "Apache License\nVersion 2.0, January 2004\nhttp://www.apache.org/licenses/\n\nTERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION\n\n1. Definitions.\n\n\"License\" shall mean the terms and conditions for use, reproduction,\nand distribution as defined by Sections 1 through 9 of this document.\n\n\"Licensor\" shall mean the copyright owner or entity authorized by\nthe copyright owner that is granting the License.\n\n\"Legal Entity\" shall mean the union of the acting entity and all\nother entities that control, are controlled by, or are under common\ncontrol with that entity. For the purposes of this definition,\n\"control\" means (i) the power, direct or indirect, to cause the\ndirection or management of such entity, whether by contract or\notherwise, or (ii) ownership of fifty percent (50%) or more of the\noutstanding shares, or (iii) beneficial ownership of such entity.\n\n\"You\" (or \"Your\") shall mean an individual or Legal Entity\nexercising permissions granted by this License.\n\n\"Source\" form shall mean the preferred form for making modifications,\nincluding but not limited to software source code, documentation\nsource, and configuration files.\n\n\"Object\" form shall mean any form resulting from mechanical\ntransformation or translation of a Source form, including but\nnot limited to compiled object code, generated documentation,\nand conversions to other media types.\n\n\"Work\" shall mean the work of authorship, whether in Source or\nObject form, made available under the License, as indicated by a\ncopyright notice that is included in or attached to the work\n(an example is provided in the Appendix below).\n\n\"Derivative Works\" shall mean any work, whether in Source or Object\nform, that is based on (or derived from) the Work and for which the\neditorial revisions, annotations, elaborations, or other modifications\nrepresent, as a whole, an original work of authorship. For the purposes\nof this License, Derivative Works shall not include works that remain\nseparable from, or merely link (or bind by name) to the interfaces of,\nthe Work and Derivative Works thereof.\n\n\"Contribution\" shall mean any work of authorship, including\nthe original version of the Work and any modifications or additions\nto that Work or Derivative Works thereof, that is intentionally\nsubmitted to Licensor for inclusion in the Work by the copyright owner\nor by an individual or Legal Entity authorized to submit on behalf of\nthe copyright owner. For the purposes of this definition, \"submitted\"\nmeans any form of electronic, verbal, or written communication sent\nto the Licensor or its representatives, including but not limited to\ncommunication on electronic mailing lists, source code control systems,\nand issue tracking systems that are managed by, or on behalf of, the\nLicensor for the purpose of discussing and improving the Work, but\nexcluding communication that is conspicuously marked or otherwise\ndesignated in writing by the copyright owner as \"Not a Contribution.\"\n\n\"Contributor\" shall mean Licensor and any individual or Legal Entity\non behalf of whom a Contribution has been received by Licensor and\nsubsequently incorporated within the Work.\n\n2. Grant of Copyright License. Subject to the terms and conditions of\nthis License, each Contributor hereby grants to You a perpetual,\nworldwide, non-exclusive, no-charge, royalty-free, irrevocable\ncopyright license to reproduce, prepare Derivative Works of,\npublicly display, publicly perform, sublicense, and distribute the\nWork and such Derivative Works in Source or Object form.\n\n3. Grant of Patent License. Subject to the terms and conditions of\nthis License, each Contributor hereby grants to You a perpetual,\nworldwide, non-exclusive, no-charge, royalty-free, irrevocable\n(except as stated in this section) patent license to make, have made,\nuse, offer to sell, sell, import, and otherwise transfer the Work,\nwhere such license applies only to those patent claims licensable\nby such Contributor that are necessarily infringed by their\nContribution(s) alone or by combination of their Contribution(s)\nwith the Work to which such Contribution(s) was submitted. If You\ninstitute patent litigation against any entity (including a cross-claim\nor counterclaim in a lawsuit) alleging that the Work or a Contribution\nincorporated within the Work constitutes direct or contributory patent\ninfringement, then any patent licenses granted to You under this\nLicense for that Work shall terminate as of the date such litigation\nis filed.\n\n4. Redistribution. You may reproduce and distribute copies of the\nWork or Derivative Works thereof in any medium, with or without\nmodifications, and in Source or Object form, provided that You\nmeet the following conditions:\n\n(a) You must give any other recipients of the Work or\n    Derivative Works a copy of this License; and\n\n(b) You must cause any modified files to carry prominent notices\n    stating that You changed the files; and\n\n(c) You must retain, in the Source form of any Derivative Works\n    that You distribute, all copyright, patent, trademark, and\n    attribution notices from the Source form of the Work,\n    excluding those notices that do not pertain to any part of\n    the Derivative Works; and\n\n(d) If the Work includes a \"NOTICE\" text file as part of its\n    distribution, then any Derivative Works that You distribute must\n    include a readable copy of the attribution notices contained\n    within such NOTICE file, excluding those notices that do not\n    pertain to any part of the Derivative Works, in at least one\n    of the following places: within a NOTICE text file distributed\n    as part of the Derivative Works; within the Source form or\n    documentation, if provided along with the Derivative Works; or,\n    within a display generated by the Derivative Works, if and\n    wherever such third-party notices normally appear. The contents\n    of the NOTICE file are for informational purposes only and\n    do not modify the License. You may add Your own attribution\n    notices within Derivative Works that You distribute, alongside\n    or as an addendum to the NOTICE text from the Work, provided\n    that such additional attribution notices cannot be construed\n    as modifying the License.\n\nYou may add Your own copyright statement to Your modifications and\nmay provide additional or different license terms and conditions\nfor use, reproduction, or distribution of Your modifications, or\nfor any such Derivative Works as a whole, provided Your use,\nreproduction, and distribution of the Work otherwise complies with\nthe conditions stated in this License.\n\n5. Submission of Contributions. Unless You explicitly state otherwise,\nany Contribution intentionally submitted for inclusion in the Work\nby You to the Licensor shall be under the terms and conditions of\nthis License, without any additional terms or conditions.\nNotwithstanding the above, nothing herein shall supersede or modify\nthe terms of any separate license agreement you may have executed\nwith Licensor regarding such Contributions.\n\n6. Trademarks. This License does not grant permission to use the trade\nnames, trademarks, service marks, or product names of the Licensor,\nexcept as required for reasonable and customary use in describing the\norigin of the Work and reproducing the content of the NOTICE file.\n\n7. Disclaimer of Warranty. Unless required by applicable law or\nagreed to in writing, Licensor provides the Work (and each\nContributor provides its Contributions) on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or\nimplied, including, without limitation, any warranties or conditions\nof TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A\nPARTICULAR PURPOSE. You are solely responsible for determining the\nappropriateness of using or redistributing the Work and assume any\nrisks associated with Your exercise of permissions under this License.\n\n8. Limitation of Liability. In no event and under no legal theory,\nwhether in tort (including negligence), contract, or otherwise,\nunless required by applicable law (such as deliberate and grossly\nnegligent acts) or agreed to in writing, shall any Contributor be\nliable to You for damages, including any direct, indirect, special,\nincidental, or consequential damages of any character arising as a\nresult of this License or out of the use or inability to use the\nWork (including but not limited to damages for loss of goodwill,\nwork stoppage, computer failure or malfunction, or any and all\nother commercial damages or losses), even if such Contributor\nhas been advised of the possibility of such damages.\n\n9. Accepting Warranty or Additional Liability. While redistributing\nthe Work or Derivative Works thereof, You may choose to offer,\nand charge a fee for, acceptance of support, warranty, indemnity,\nor other liability obligations and/or rights consistent with this\nLicense. However, in accepting such obligations, You may act only\non Your own behalf and on Your sole responsibility, not on behalf\nof any other Contributor, and only if You agree to indemnify,\ndefend, and hold each Contributor harmless for any liability\nincurred by, or claims asserted against, such Contributor by reason\nof your accepting any such warranty or additional liability.\n\nEND OF TERMS AND CONDITIONS\n\nAPPENDIX: How to apply the Apache License to your work.\n\nTo apply the Apache License to your work, attach the following\nboilerplate notice, with the fields enclosed by brackets \"[]\"\nreplaced with your own identifying information. (Don't include\nthe brackets!)  The text should be enclosed in the appropriate\ncomment syntax for the file format. We also recommend that a\nfile or class name and description of purpose be included on the\nsame \"printed page\" as the copyright notice for easier\nidentification within third-party archives.\n\nCopyright [yyyy] [name of copyright owner]\n\nLicensed under the Apache License, Version 2.0 (the \"License\");\nyou may not use this file except in compliance with the License.\nYou may obtain a copy of the License at\n\n    http://www.apache.org/licenses/LICENSE-2.0\n\nUnless required by applicable law or agreed to in writing, software\ndistributed under the License is distributed on an \"AS IS\" BASIS,\nWITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.\nSee the License for the specific language governing permissions and\nlimitations under the License.\n",
  "notice_file": "NOTICE",
  "notice_file_sha256": "4f3ed86d156889dc1d73c63aca2fe08fc011e572599a6da65b5b2387bee7346f",
  "notice_text": "Microcosm Substrate\nCopyright 2026 William Cook\n\nThis product includes software developed by William Cook.\nThis project was developed with AI-assisted coding and research tools.\nNo endorsement by OpenAI, Anthropic, Anysphere/Cursor, the University of\nBristol, or any other third-party tool or institution is implied.\n"
 },
 "concise_guide_markdown": "# Microcosm concise AI guide\n\nYou are helping a visitor review Microcosm from its public evidence. Microcosm is a local, source-linked public artifact: clone the repository, run a bounded command, inspect the `.microcosm/` result record, follow the evidence to the source links, and stop at the stated scope limit. Use this as a routing-and-explanation guide, not a script.\n\nWhen answering:\n- Explain in plain language, from the public routes, component cards, result records, and evidence lines below.\n- Distinguish public evidence from inference; when the public records do not show something, say that directly.\n- Link back to the relevant relative_href when useful.\n- For first-time readers, route to the local witness first: quickstart -> result record -> evidence line -> source link -> scope limit.\n- Do not reduce the project to its fixtures; fixtures are one evidence form among several, there to show a mechanism in an inspectable bounded form.\n- When discussing how a component is checked, use its 1-5 rank: the rank measures verdict independence (how independently a check can fail), not how much machinery runs or how mature the component is. 'Runs real tools' and a high rank are separate signals; a bounded real-tool run is capped at 4 on purpose.\n\nDefault answer shape: what Microcosm is in one sentence; the public source or route behind it; what to run or inspect next; what the public evidence does and does not show.\n\n## How to use this guide\n\nThis is the paste-size orientation. Upload `microcosm-ai-reader-digest.json` by default; use `microcosm-ai-review-packet.json` only when you need full page text. First route: quickstart -> result record -> evidence line -> source link -> scope limit.\n\nFor automation, the raw layers exist separately: `microcosm-ai-reader-digest.json` (the medium digest) and `microcosm-site-map.json` (the full map, no instruction layers).\n\nThis is a snapshot: `generated_at` is a fixed placeholder, not a freshness timestamp; the source fingerprint and linked repository refs are the version handle.\n\nIf a repository file uses a different internal name for one of these records, treat it as the same public component.\n\n## What this packet contains\n\nSelected public website content from:\n- Overview - docs/index.html\n- What Microcosm is - docs/tour.html\n- Quickstart - docs/quickstart.html\n- How it fits together - docs/architecture.html\n- Doctrine - docs/doctrine.html\n\nThe one-file AI handoff is `microcosm-ai-review-packet.json`; the raw map for automation is `microcosm-site-map.json`.\n\n---\n\n## How Microcosm is organised\n\nThe components are grouped into seven areas. The areas are seven ways in, not a scoreboard:\n- Entry & orientation - the first-run route and the guided public reveal.\n- Architecture & navigation - the shared path, pattern rules, routing, doctrine grammar, and map surfaces.\n- Formal math & proof - premise retrieval, tactic routing, verifier-trace repair, and bounded Lean/Lake witnesses.\n- Agent reliability & safety - inspectable agent-failure replays such as sabotage, sandbox-escape, prompt-injection, memory-poisoning, tool-authority, and benchmark-gaming cases.\n- Research & science - scientific and forecasting replays over synthetic fixtures, including finance evaluation and replication rubrics.\n- Import & drift control - source import, copied-public-material boundaries, drift checks, and release wording.\n- Work & continuity - transaction records, landing replay, concurrency, and resuming work across sessions.\n\nMost components bind to one shared path: project \u2192 catalog \u2192 pattern \u2192 standard \u2192 route \u2192 work \u2192 event \u2192 evidence \u2192 explanation \u2192 assimilation. A direct link between two components is a source-declared neighbour, not a proof, a ranking, or a maturity score.\n\nUnderneath the site is a small doctrine layer. Axioms are root constraints: what must be true before a claim can count. Principles are those constraints turned into operating habits at a boundary. Anti-principles are the shortcuts the system refuses. Concepts name vocabulary boundaries; mechanisms name checkable transformations; paper modules explain components and mechanisms in longer form. None of those words raises evidence by itself; the source, validator, evidence class, and scope boundary decide the claim.\n\nThe operating check runs: claim \u2192 basis \u2192 checker \u2192 ceiling \u2192 authority \u2192 provenance \u2192 freshness \u2192 effect \u2192 projection \u2192 pass or typed refusal. The useful thing to watch is the refusal: a missing basis, a stale value, a private-source leak, or an overclaim should become a typed boundary, not a confident-looking answer.\n\n## How a check is ranked\n\nRank is verdict independence, not maturity:\n- 1 means the fixture mostly supplies the answer.\n- 2-3 means the check derives part of the verdict but stays fixture-shaped.\n- 4 means a bounded real computation or real-tool witness ran, but only inside a small scope.\n- 5 means the checker derives the public-contract verdict without being handed the answer.\n'Runs real tools' is a separate signal. A rank-5 contract validator may run no external tool; a Lean/Lake witness may run real tools but stay rank 4 because the run is deliberately bounded.\n\nWorked example - Cold Reader Route Map. It checks that the first-run guided path names a real command, public doc route, and evidence record at every step. Command: `microcosm cold-reader-route-map run-route-map-bundle ...`. Evidence: contract validator, rank 5, runs real tools: no. Scope boundary: projection-only metadata over the declared public route contract, not route-registry control or whole-system correctness. Route: `docs/components.html#component-cold_reader_route_map`. That is the point of the rank: it measures how independently the check reaches its verdict, not how much machinery is involved.\n\n---\n\n## 1. Overview\nSource: docs/index.html\nSource refs: microcosm-substrate/README.md, microcosm-substrate/core/organ_families.json\n\nGetting started\n\n### Overview\n\nMicrocosm is a runnable public inspection surface for an AI-native workflow system. You run bounded components locally and read what they produced; every component declares the evidence behind it and a plain boundary showing where its scope stops.\n\n#### [What it is \u2192](docs/tour.html)\n\nMicrocosm is the part of a larger working system that can stand on its own in public: components that are runnable, readable, and checkable against their own source. The rest stays private: parts of it are live and handle private data, so the whole thing is not online.\n\nIt is not a hosted service and makes no external model calls. When you run it locally, it writes its state into a folder beside your project so you can follow what it did and trace each step back to the source behind it.\n\n#### What you can do here\n- [**Run one local witness**](docs/quickstart.html) by cloning the repository and running the first component against a folder.\n- **Read the result record** in the local `.microcosm/` state, then open the component card it points to.\n- [**Check the evidence line**](docs/evidence.html): evidence kind, independence rank, real-tool marker, and the scope limit.\n- [**Open the whole-system map**](docs/architecture.html#whole-system-map) after the first loop is concrete.\n- **Browse the seven areas**, the system's components grouped by what they do.\n- **Open the sou\n\n[Section compacted from a longer source page. Open the source route for the full public page.]\n\n---\n\n## 2. What Microcosm is\nSource: docs/tour.html\nSource refs: microcosm-substrate/core/organ_families.json, microcosm-substrate/core/organ_registry.json, microcosm-substrate/core/organ_atlas.json\n\nGetting started\n\n### What Microcosm is\n\nA plain walk through what Microcosm publishes today: a source-linked public map of a working local system, the [components](docs/components.html) you can inspect from public records, the [evidence](docs/evidence.html) each one names, and the line where every claim stops.\n\n#### What it is\n\nMicrocosm is the public map of a larger working system. The larger system is AI-native: software where the ideas come from a person and AI agents execute the building and the upkeep, structured so that an agent's work is stored as evidence a separate check can read. Most of that system stays private. What is open here today is the public source slice: component cards, evidence classes, source paths, synthetic-fixture boundaries, scope limits, source files, and pages that say plainly how far each claim goes. The live public repository carries the runnable standalone slice, not the private working root behind it.\n\nStart with the [Quickstart](docs/quickstart.html) or the repository `README.md`. A coding agent can clone the repository, read `AGENTS.md`, run the bounded quickstart check, and inspect the `.microcosm/` result record. The public slice stays local: it writes beside your files, does not call a model provider, and keeps each claim tied to the source, evidence record, and scope limit that support it.\n\n#### [What a component is, and how to read one \u2192](docs/components.html)\n\nThe public map contains seventy-eight [components](docs/components.html) grouped into seven areas. Each one takes a single job and turns it into a public contract: what the component is for, what evidence class backs it, which source path owns it, and where the claim stops. Some contracts run over bounded public files; others are fixture-bound, card-only, or evidence records. Every component carries a card that says what it does, which class of evidence backs it, the command or route associated with it, and the line that matters most, the thing it refuses to claim. The [evidence rank](docs/evidence.html) is how independently the check can fail, not a maturity badge: a high rank means the result is hard to fake, and even the strongest check stops at the scope its card declares. One card read this way carries the idea; the full map comes easier after it.\n\n#### [Doctrine \u2192](docs/doctrine.html)\n\n[Section compacted from a longer source page. Open the source route for the full public page.]\n\n---\n\n## 3. Quickstart\nSource: docs/quickstart.html\nSource refs: microcosm-substrate/QUICKSTART.md, microcosm-substrate/SOURCE_STATUS.md\n\nGetting started\n\n### Quickstart\n\nMicrocosm runs locally against a folder. The shortest path is a clone, a clean check, and the first screen.\n\nA coding agent (Claude Code, Codex, Cursor) can run this whole page for you; [working with a coding agent](docs/coding-agents.html) is that path.\n\n#### 1. Clone the repository\n\n```text\ngit clone https://github.com/wcook04/microcosm-substrate\ncd microcosm-substrate\n```\n\n#### 2. Run the one-command check\n\nA single command confirms the local slice is runnable on your machine before you install anything:\n\n```text\n./bootstrap.sh\n```\n\nIt runs against a small built-in example and writes its output into an ignored `.microcosm/` folder beside the project. Nothing leaves your machine.\n\n#### 3. Open the first screen\n\nFrom a source checkout, run the behavior-first card first, then inspect status, boundaries, and the optional map:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core tour --card .\nPYTHONPATH=src python3 -m microcosm_core status --card .\nPYTHONPATH=src python3 -m microcosm_core authority --card\nPYTHONPATH=src python3 -m microcosm_core workingness --card\nPYTHONPATH=src python3 -m microcosm_core hello .\nPYTHONPATH=src python3 -m microcosm_core first-screen --card .\nPYTHONPATH=src python3 -m microcosm_core legibility-scorecard\n```\n\nOr, after installing the local command:\n\n```text\nmicrocosm tour --card .\nmicrocosm status --card .\nmicrocosm authority --card\nmicrocosm workingness --card\nmicrocosm hello .\nmicrocosm first-screen --card .\nmicrocosm legibility-scorecard\n```\n\n`tour --card` writes the local witness; `hello` prints the non-writing map; `status` and the boundary cards show what the run recorded and where it stops.\n\nThe [Overview](docs/index.html) is the gentler first read. The full first-run guide and command reference live in the repository's README.\n\n---\n\n## 4. How it fits together\nSource: docs/architecture.html\nSource refs: microcosm-substrate/ARCHITECTURE.md, microcosm-substrate/core/architecture_kernel.json, microcosm-substrate/core/organ_families.json, microcosm-substrate/core/organ_atlas.json\n\nThe system\n\n### How it fits together\n\nMost components are standalone. What holds them together is one shared path and a clear line between the public slice and the private system.\n\n#### A slice, not the whole\n\nMicrocosm is a cross-section of a larger system. What's here runs on its own; the larger working environment stays out of the public tree. Each component is chosen because it can be understood and run without that context.\n\n#### The shared path\n\nHowever different the areas look, most components bind to one shared path. It runs from a project on disk through to an explanation you can read and an assimilation loop that feeds the next pass:\n\nproject \u2192 catalog \u2192 pattern \u2192 standard \u2192 route \u2192 work \u2192 event \u2192 evidence \u2192 explanation \u2192 assimilation\n\nA component reads a **project**, finds the right **pattern** and the **standard** it answers to, follows a **route** to do some **work**, records the **events** and the **evidence** they produced, reaches a plain **explanation**, and feeds **assimilation** back into the system. That repetition is what makes a large system navigable.\n\n#### Standalone by default\n\nMost components don't call each other. They're independent specimens that share the path above. A few are wired to named neighbours, and each one says which.\n\n#### Local and self-contained\n\nRunning a component writes into a `.microcosm/` folder beside your project. It doesn't change your source files and doesn't make external calls. The output is something you can open and trace.\n\nThis is the public overview map of the areas and the path most components share.\n\n---\n\n## 5. Doctrine\nSource: docs/doctrine.html\nSource refs: microcosm-substrate/axioms/AX-1.json, microcosm-substrate/principles/P-1.json, microcosm-substrate/anti_principles/AP-1.json, microcosm-substrate/core/doctrine_lattice_coverage.json\n\nThe system\n\n### Doctrine\n\nThe laws Microcosm is built under and held to: what a result must carry before it counts, what permits a change, how long a fact stays current, and what a page like this one may inherit from the source beneath it.\n\nDoctrine is how Microcosm keeps its behaviour inside what its evidence can carry. Each law exists because some shortcut once looked reasonable: trusting a label because it was written down, a key because it was held, a cached answer because its name had not changed, a quiet dashboard because nothing reported red. The doctrine is those lessons made binding, and it runs in both directions; the components are written under the laws, and the laws are revised against what the components turn out to do. A result counts only when the material it came from is named and a separate check can rebuild it, and what the result may claim stops where that check stops. The deciding check stays small enough to read and rerun, while the thing that produced the answer, however capable, waits outside. Missing evidence blocks; an unsearched space stays unknown, and unknown is a different verdict from refuted. A number describing live state carries the time it was read, the basis it was read from, and the route to read it again. A stored result may be reused while the content beneath it is unchanged; once that content moves, a familiar name earns nothing. Permission is derived for each specific action from policy, proof, and the present state of the world. A change lands once its way back is declared, or its point of no return is stated in advance. Origin and travel limits ride with material across every boundary, so nothing becomes publishable merely by reaching a public page. Generated views, this page among them, sit below the source they are drawn from; and what Microcosm says about Microcosm is held to the same floor, which is why the cards below spend as many words on limits as on laws.\n\n#### What doctrine contains\n\nDoctrine decides what everything else is allowed to assert. A standard constrains, a validator runs, a page projects; doctrine sits before all three and fixes what each may claim in the first place. It carries no executable authority of its own, and that is deliberate: a law binds only through the grammars, checks, and records downstream that enforce it. The layer is built from six kinds of object, three that govern what the system may say and three that explain and compress it.\n\n##### Governing expanded below\n\nDecide what the system may say.\n\n[Section compacted from a longer source page. Open the source route for the full public page.]\n\n---\n\n## Essential routes\n\n- Run one local witness: docs/quickstart.html - Start here when the visitor asks what to do first or wants the runnable evidence loop.\n- What the pass proves: docs/evidence.html - Use this when a question asks what is proven, checked, or still only bounded evidence.\n- Overview: docs/index.html - Use this when the visitor asks for the broad map after the first local witness is concrete.\n- What it is: docs/tour.html - Use this for a plain-language tour before deep implementation questions.\n- How it fits together: docs/architecture.html#whole-system-map - Use this for architecture, component relationships, and map questions.\n- Doctrine: docs/doctrine.html - Use this for the principles, boundaries, and anti-overclaim posture.\n- Source and provenance: docs/source.html#provenance - Use this when the answer needs source-of-record or license context.\n\n## Pressure-test this\n\nIf you want to pressure-test this, pick one component, read its evidence rank and scope boundary, follow its source link, and tell me both directions: where the wording claims more than the linked evidence shows, and where it undersells what the component actually demonstrates.\n",
 "visible_text_index": {
  "schema": "microcosm_public_site_visible_text_index_v1",
  "purpose": "Carry the public text a reader can view from the static site in the downloadable JSON map, while packaging repeated generated cards as logical records and diagrams as compressed assets.",
  "packaging_policy": {
   "page_text": "main public page content as Markdown, excluding repeated global navigation and export chrome",
   "logical_records": "component cards, paper modules, doctrine entity bodies, doctrine reference rows, evidence profiles, and rosters carried once",
   "diagram_assets": "rendered SVG/HTML omitted; Mermaid source, source hashes, graph labels, and route refs retained",
   "source_authority": "public repository source refs remain authority; this is a generated public-site projection"
  },
  "counts": {
   "page_count": 22,
   "page_text_byte_count": 1390730,
   "component_record_count": 78,
   "paper_module_record_count": 93,
   "doctrine_entity_record_count": 155,
   "rules_and_ideas_record_count": 248,
   "evidence_profile_record_count": 328,
   "roster_section_count": 3,
   "logical_text_byte_count": 2766730
  },
  "pages": [
   {
    "id": "page:overview",
    "path": "index.html",
    "title": "Microcosm",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 22957,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   },
   {
    "id": "page:docs-overview",
    "path": "docs/index.html",
    "title": "Overview",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 3353,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   },
   {
    "id": "page:tour",
    "path": "docs/tour.html",
    "title": "What Microcosm is",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 7569,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   },
   {
    "id": "page:quickstart",
    "path": "docs/quickstart.html",
    "title": "Quickstart",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 1823,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   },
   {
    "id": "page:coding-agents",
    "path": "docs/coding-agents.html",
    "title": "Working with a coding agent",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 2243,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   },
   {
    "id": "page:architecture",
    "path": "docs/architecture.html",
    "title": "How it fits together",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 5825,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   },
   {
    "id": "page:doctrine",
    "path": "docs/doctrine.html",
    "title": "Doctrine",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 355,
    "content_refs": {
     "doctrine_entity_refs": [
      "principle:P-1",
      "principle:P-2",
      "principle:P-3",
      "principle:P-4",
      "principle:P-5",
      "principle:P-6",
      "principle:P-7",
      "principle:P-8",
      "principle:P-9",
      "principle:P-10",
      "principle:P-11",
      "principle:P-12",
      "principle:P-13",
      "principle:P-14",
      "principle:P-15",
      "principle:P-16",
      "principle:P-17",
      "principle:P-18",
      "principle:P-19",
      "principle:P-20",
      "axiom:AX-1",
      "axiom:AX-2",
      "axiom:AX-3",
      "axiom:AX-4",
      "axiom:AX-5",
      "axiom:AX-6",
      "axiom:AX-7",
      "axiom:AX-8",
      "axiom:AX-9",
      "axiom:AX-10",
      "axiom:AX-11",
      "axiom:AX-12",
      "anti_principle:AP-1",
      "anti_principle:AP-2",
      "anti_principle:AP-3",
      "anti_principle:AP-4",
      "anti_principle:AP-5",
      "anti_principle:AP-6",
      "anti_principle:AP-7",
      "anti_principle:AP-8",
      "anti_principle:AP-9",
      "anti_principle:AP-10",
      "anti_principle:AP-11",
      "anti_principle:AP-12",
      "anti_principle:AP-13",
      "anti_principle:AP-14",
      "anti_principle:AP-15",
      "anti_principle:AP-16",
      "anti_principle:AP-17",
      "concept:concept.agent_reliability_and_safety_validator_bundle",
      "concept:concept.architecture_and_navigation_route_contract_bundle",
      "concept:concept.entry_and_reveal_route_readiness_bundle",
      "concept:concept.executable_doctrine_grammar_standard_bundle",
      "concept:concept.first_screen_doctrine_effect_frame",
      "concept:concept.formal_math_and_proof_witness_bundle",
      "concept:concept.import_projection_and_drift_control_bundle",
      "concept:concept.research_and_science_replay_evidence_bundle",
      "concept:concept.standards_meta_diagnostics_bundle",
      "concept:concept.voice_to_doctrine_self_improvement_loop_bundle",
      "concept:concept.work_landing_and_continuity_control_bundle",
      "mechanism:mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
      "mechanism:mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
      "mechanism:mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
      "mechanism:mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
      "mechanism:mechanism.agent_route_observability_runtime.validates_public_route_feedback",
      "mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
      "mechanism:mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
      "mechanism:mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
      "mechanism:mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
      "mechanism:mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
      "mechanism:mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
      "mechanism:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
      "mechanism:mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
      "mechanism:mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
      "mechanism:mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
      "mechanism:mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
      "mechanism:mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
      "mechanism:mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
      "mechanism:mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
      "mechanism:mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
      "mechanism:mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
      "mechanism:mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
      "mechanism:mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
      "mechanism:mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
      "mechanism:mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
      "mechanism:mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
      "mechanism:mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
      "mechanism:mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
      "mechanism:mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
      "mechanism:mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
      "mechanism:mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
      "mechanism:mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
      "mechanism:mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
      "mechanism:mechanism.cognitive_operator_registry.validates_public_operator_contract",
      "mechanism:mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
      "mechanism:mechanism.cold_reader_route_map.validates_public_first_run_route_map",
      "mechanism:mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
      "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
      "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
      "mechanism:mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
      "mechanism:mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
      "mechanism:mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
      "mechanism:mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
      "mechanism:mechanism.engine_room_demo.validates_public_engine_room_demo",
      "mechanism:mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
      "mechanism:mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
      "mechanism:mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
      "mechanism:mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
      "mechanism:mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
      "mechanism:mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
      "mechanism:mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
      "mechanism:mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
      "mechanism:mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
      "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
      "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
      "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
      "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
      "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
      "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
      "mechanism:mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
      "mechanism:mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
      "mechanism:mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
      "mechanism:mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
      "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
      "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
      "mechanism:mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
      "mechanism:mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
      "mechanism:mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
      "mechanism:mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
      "mechanism:mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
      "mechanism:mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
      "mechanism:mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
      "mechanism:mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
      "mechanism:mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
      "mechanism:mechanism.pattern_binding_contract.validates_public_pattern_bindings",
      "mechanism:mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
      "mechanism:mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
      "mechanism:mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
      "mechanism:mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
      "mechanism:mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
      "mechanism:mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
      "mechanism:mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
      "mechanism:mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
      "mechanism:mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
      "mechanism:mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
      "mechanism:mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
      "mechanism:mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
      "mechanism:mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
      "mechanism:mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
      "mechanism:mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
      "mechanism:mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
      "mechanism:mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
      "mechanism:mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
      "mechanism:mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
      "mechanism:mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary"
     ],
     "rules_and_ideas_refs": [
      "P-1",
      "P-2",
      "P-3",
      "P-4",
      "P-5",
      "P-6",
      "P-7",
      "P-8",
      "P-9",
      "P-10",
      "P-11",
      "P-12",
      "P-13",
      "P-14",
      "P-15",
      "P-16",
      "P-17",
      "P-18",
      "P-19",
      "P-20",
      "AX-1",
      "AX-2",
      "AX-3",
      "AX-4",
      "AX-5",
      "AX-6",
      "AX-7",
      "AX-8",
      "AX-9",
      "AX-10",
      "AX-11",
      "AX-12",
      "AP-1",
      "AP-2",
      "AP-3",
      "AP-4",
      "AP-5",
      "AP-6",
      "AP-7",
      "AP-8",
      "AP-9",
      "AP-10",
      "AP-11",
      "AP-12",
      "AP-13",
      "AP-14",
      "AP-15",
      "AP-16",
      "AP-17",
      "concept.agent_reliability_and_safety_validator_bundle",
      "concept.architecture_and_navigation_route_contract_bundle",
      "concept.entry_and_reveal_route_readiness_bundle",
      "concept.executable_doctrine_grammar_standard_bundle",
      "concept.first_screen_doctrine_effect_frame",
      "concept.formal_math_and_proof_witness_bundle",
      "concept.import_projection_and_drift_control_bundle",
      "concept.research_and_science_replay_evidence_bundle",
      "concept.standards_meta_diagnostics_bundle",
      "concept.voice_to_doctrine_self_improvement_loop_bundle",
      "concept.work_landing_and_continuity_control_bundle",
      "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
      "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
      "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
      "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
      "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
      "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
      "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
      "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
      "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
      "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
      "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
      "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
      "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
      "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
      "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
      "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
      "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
      "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
      "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
      "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
      "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
      "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
      "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
      "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
      "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
      "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
      "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
      "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
      "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
      "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
      "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
      "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
      "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
      "mechanism.cognitive_operator_registry.validates_public_operator_contract",
      "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
      "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
      "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
      "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
      "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
      "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
      "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
      "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
      "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
      "mechanism.engine_room_demo.validates_public_engine_room_demo",
      "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
      "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
      "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
      "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
      "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
      "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
      "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
      "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
      "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
      "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
      "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
      "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
      "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
      "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
      "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
      "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
      "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
      "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
      "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
      "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
      "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
      "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
      "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
      "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
      "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
      "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
      "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
      "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
      "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
      "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
      "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
      "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
      "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
      "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
      "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
      "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
      "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
      "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
      "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
      "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
      "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
      "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
      "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
      "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
      "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
      "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
      "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
      "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
      "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
      "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
      "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
      "paper_module.verifier_lab_kernel",
      "paper_module.navigation_hologram_route_plane",
      "paper_module.agent_route_observability_runtime",
      "paper_module.agent_benchmark_integrity_anti_gaming_replay",
      "paper_module.research_replication_rubric_artifact_replay",
      "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
      "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
      "paper_module.certificate_kernel_execution_lab",
      "paper_module.corpus_readiness_mathlib_absence_gate",
      "paper_module.pattern_binding_contract",
      "paper_module.bridge_phase_continuity_runtime",
      "paper_module.cognitive_operator_registry",
      "paper_module.agent_closeout_faithfulness_audit",
      "paper_module.cold_reader_route_map",
      "paper_module.proof_diagnostic_evidence_spine",
      "paper_module.proof_derived_governed_mutation_authorization",
      "paper_module.durable_agent_work_landing_replay",
      "paper_module.work_landing_control_spine",
      "paper_module.executable_doctrine_grammar",
      "paper_module.macro_projection_import_protocol",
      "paper_module.mission_transaction_work_spine",
      "paper_module.formal_math_readiness_gate",
      "paper_module.formal_math_lean_proof_witness",
      "paper_module.formal_math_verifier_trace_repair_loop",
      "paper_module.formal_evidence_cell_anchor_resolver",
      "paper_module.formal_math_premise_retrieval",
      "paper_module.lean_std_premise_index",
      "paper_module.world_model_projection_drift_control_room",
      "paper_module.public_reveal_walkthrough",
      "paper_module.standards_meta_diagnostics",
      "paper_module.finance_forecast_evaluation_spine",
      "paper_module.engine_room_demo",
      "paper_module.agent_memory_temporal_conflict_replay",
      "paper_module.agent_monitor_redteam_falsification_replay",
      "paper_module.agent_sabotage_scheming_monitor_replay",
      "paper_module.agent_sandbox_policy_escape_replay",
      "paper_module.belief_state_process_reward_replay",
      "paper_module.sleeper_memory_poisoning_quarantine_replay",
      "paper_module.indirect_prompt_injection_information_flow_policy_replay",
      "paper_module.mcp_tool_authority_replay",
      "paper_module.tactic_portfolio_availability",
      "paper_module.target_shape_tactic_routing",
      "paper_module.ring2_premise_precision_recall",
      "paper_module.mathematical_strategy_atlas",
      "paper_module.verifier_lab_execution_spine",
      "paper_module.bounded_autonomy_campaign_packet",
      "paper_module.computer_use_action_trace_replay",
      "paper_module.concurrency_mission_control",
      "paper_module.doctrine_fact_claim_audit",
      "paper_module.self_ignorance_coverage_ledger",
      "paper_module.tool_server_pressure_inventory",
      "paper_module.mechanistic_interpretability_circuit_attribution_replay",
      "paper_module.spatial_world_model_counterfactual_simulation_replay",
      "paper_module.prediction_oracle_reconciliation",
      "paper_module.provider_context_recipe_budget",
      "paper_module.undeclared_library_prior_classifier",
      "paper_module.voice_to_doctrine_self_improvement_loop",
      "paper_module.routing_anti_patterns_registry",
      "paper_module.batch8_audio_level_rms_port",
      "paper_module.batch8_compliance_pipeline_capsule",
      "paper_module.batch8_policy_engines_capsule",
      "paper_module.batch8_structural_theses_capsule",
      "paper_module.batch8_tools_tail_primitives_capsule",
      "paper_module.batch8_validator_checker_capsule",
      "paper_module.batch12_market_dashboard_read_model_capsule",
      "paper_module.batch12_prediction_market_board_capsule",
      "paper_module.batch12_release_claim_language_gate",
      "paper_module.batch10_cold_eval_honesty_capsule",
      "paper_module.batch10_live_source_drift_capsule",
      "paper_module.batch7_macro_engines_capsule",
      "paper_module.batch9_macro_engines_capsule",
      "paper_module.pattern_assimilation",
      "paper_module.batch10_governance_compilers_capsule",
      "paper_module.batch11_saturation_engines_capsule",
      "paper_module.batch4_proof_authority_runtime",
      "paper_module.batch6_unsurfaced_primitives_capsule",
      "paper_module.engine_room_public_projection_leak_gate",
      "paper_module.batch5_authority_systems_capsule",
      "paper_module.batch7_oracle_sibling_capsule",
      "paper_module.batch7_demo_take_console_capsule",
      "paper_module.engine_room_generated_projection_drift_gate",
      "paper_module.engine_room_command_run_singleflight",
      "paper_module.engine_room_metabolism_runtime",
      "paper_module.engine_room_bridge_campaign_dag",
      "paper_module.engine_room_annex_knowledge_router",
      "paper_module.engine_room_derived_fact_provider_engine",
      "paper_module.engine_room_egress_self_compliance_gate",
      "paper_module.engine_room_lean_proof_search_lab",
      "paper_module.engine_room_navigation_fitness_benchmark",
      "paper_module.cold_clone_probe",
      "paper_module.first_screen_composition_root",
      "paper_module.batch7_secondary_runtime_capsule",
      "paper_module.microcosm_axiom_substrate"
     ],
     "family_id": null
    }
   },
   {
    "id": "page:area-entry",
    "path": "docs/area-entry.html",
    "title": "Entry & orientation",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 38345,
    "content_refs": {
     "component_refs": [
      "cold_reader_route_map",
      "public_reveal_walkthrough"
     ],
     "family_id": "entry_and_reveal"
    }
   },
   {
    "id": "page:area-architecture",
    "path": "docs/area-architecture.html",
    "title": "Architecture & navigation",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 163739,
    "content_refs": {
     "component_refs": [
      "pattern_binding_contract",
      "pattern_assimilation_step",
      "executable_doctrine_grammar",
      "navigation_hologram_route_plane",
      "standards_meta_diagnostics",
      "voice_to_doctrine_self_improvement_loop",
      "cognitive_operator_registry",
      "routing_anti_patterns_registry",
      "doctrine_fact_claim_audit",
      "self_ignorance_coverage_ledger"
     ],
     "family_id": "architecture_and_navigation"
    }
   },
   {
    "id": "page:area-formal-math",
    "path": "docs/area-formal-math.html",
    "title": "Formal math & proof",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 327859,
    "content_refs": {
     "component_refs": [
      "proof_diagnostic_evidence_spine",
      "formal_math_readiness_gate",
      "corpus_readiness_mathlib_absence_gate",
      "mathematical_strategy_atlas_hypothesis_scorer",
      "tactic_portfolio_availability_probe",
      "target_shape_tactic_routing_gate",
      "lean_std_premise_index",
      "formal_math_premise_retrieval",
      "formal_math_verifier_trace_repair_loop",
      "formal_evidence_cell_anchor_resolver",
      "undeclared_library_prior_symbol_classifier",
      "ring2_premise_retrieval_precision_recall_harness",
      "formal_math_lean_proof_witness",
      "verifier_lab_kernel",
      "verifier_lab_execution_spine",
      "certificate_kernel_execution_lab",
      "batch4_proof_authority_runtime",
      "proof_derived_governed_mutation_authorization"
     ],
     "family_id": "formal_math_and_proof"
    }
   },
   {
    "id": "page:area-agent-reliability",
    "path": "docs/area-agent-reliability.html",
    "title": "Agent reliability & safety",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 309097,
    "content_refs": {
     "component_refs": [
      "agent_benchmark_integrity_anti_gaming_replay",
      "batch10_cold_eval_honesty_capsule",
      "batch8_validator_checker_capsule",
      "agent_monitor_redteam_falsification_replay",
      "agent_sabotage_scheming_monitor_replay",
      "agent_memory_temporal_conflict_replay",
      "sleeper_memory_poisoning_quarantine_replay",
      "mcp_tool_authority_replay",
      "belief_state_process_reward_replay",
      "agent_sandbox_policy_escape_replay",
      "indirect_prompt_injection_information_flow_policy_replay",
      "agentic_vulnerability_discovery_patch_proof_replay",
      "agent_route_observability_runtime",
      "provider_context_recipe_budget_policy",
      "agent_closeout_faithfulness_audit",
      "bounded_autonomy_campaign_packet",
      "batch7_secondary_runtime_capsule"
     ],
     "family_id": "agent_reliability_and_safety"
    }
   },
   {
    "id": "page:area-research",
    "path": "docs/area-research.html",
    "title": "Research & science",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 147829,
    "content_refs": {
     "component_refs": [
      "research_replication_rubric_artifact_replay",
      "spatial_world_model_counterfactual_simulation_replay",
      "materials_chemistry_closed_loop_lab_safety_replay",
      "mechanistic_interpretability_circuit_attribution_replay",
      "prediction_oracle_reconciliation",
      "finance_forecast_evaluation_spine",
      "batch12_market_dashboard_read_model_capsule",
      "batch12_prediction_market_board_capsule"
     ],
     "family_id": "research_and_science_replays"
    }
   },
   {
    "id": "page:area-import-drift",
    "path": "docs/area-import-drift.html",
    "title": "Import & drift control",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 272587,
    "content_refs": {
     "component_refs": [
      "macro_projection_import_protocol",
      "world_model_projection_drift_control_room",
      "batch6_unsurfaced_primitives_capsule",
      "batch5_authority_systems_capsule",
      "batch7_macro_engines_capsule",
      "batch7_oracle_sibling_capsule",
      "batch7_demo_take_console_capsule",
      "batch8_tools_tail_primitives_capsule",
      "batch8_policy_engines_capsule",
      "batch8_audio_level_rms_port",
      "batch8_structural_theses_capsule",
      "engine_room_demo",
      "batch9_macro_engines_capsule",
      "batch10_governance_compilers_capsule",
      "batch11_saturation_engines_capsule",
      "tool_server_pressure_inventory",
      "batch8_compliance_pipeline_capsule",
      "batch10_live_source_drift_capsule",
      "batch12_release_claim_language_gate"
     ],
     "family_id": "import_projection_and_drift"
    }
   },
   {
    "id": "page:area-continuity",
    "path": "docs/area-continuity.html",
    "title": "Work & continuity",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 64334,
    "content_refs": {
     "component_refs": [
      "mission_transaction_work_spine",
      "durable_agent_work_landing_replay",
      "bridge_phase_continuity_runtime",
      "concurrency_mission_control"
     ],
     "family_id": "work_landing_and_continuity"
    }
   },
   {
    "id": "page:components",
    "path": "docs/components.html",
    "title": "Components",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 154,
    "content_refs": {
     "component_refs": [
      "cold_reader_route_map",
      "public_reveal_walkthrough",
      "pattern_binding_contract",
      "pattern_assimilation_step",
      "executable_doctrine_grammar",
      "navigation_hologram_route_plane",
      "standards_meta_diagnostics",
      "voice_to_doctrine_self_improvement_loop",
      "cognitive_operator_registry",
      "routing_anti_patterns_registry",
      "doctrine_fact_claim_audit",
      "self_ignorance_coverage_ledger",
      "proof_diagnostic_evidence_spine",
      "formal_math_readiness_gate",
      "corpus_readiness_mathlib_absence_gate",
      "mathematical_strategy_atlas_hypothesis_scorer",
      "tactic_portfolio_availability_probe",
      "target_shape_tactic_routing_gate",
      "lean_std_premise_index",
      "formal_math_premise_retrieval",
      "formal_math_verifier_trace_repair_loop",
      "formal_evidence_cell_anchor_resolver",
      "undeclared_library_prior_symbol_classifier",
      "ring2_premise_retrieval_precision_recall_harness",
      "formal_math_lean_proof_witness",
      "verifier_lab_kernel",
      "verifier_lab_execution_spine",
      "certificate_kernel_execution_lab",
      "batch4_proof_authority_runtime",
      "proof_derived_governed_mutation_authorization",
      "agent_benchmark_integrity_anti_gaming_replay",
      "batch10_cold_eval_honesty_capsule",
      "batch8_validator_checker_capsule",
      "agent_monitor_redteam_falsification_replay",
      "agent_sabotage_scheming_monitor_replay",
      "agent_memory_temporal_conflict_replay",
      "sleeper_memory_poisoning_quarantine_replay",
      "mcp_tool_authority_replay",
      "belief_state_process_reward_replay",
      "agent_sandbox_policy_escape_replay",
      "indirect_prompt_injection_information_flow_policy_replay",
      "agentic_vulnerability_discovery_patch_proof_replay",
      "agent_route_observability_runtime",
      "provider_context_recipe_budget_policy",
      "agent_closeout_faithfulness_audit",
      "bounded_autonomy_campaign_packet",
      "batch7_secondary_runtime_capsule",
      "research_replication_rubric_artifact_replay",
      "spatial_world_model_counterfactual_simulation_replay",
      "materials_chemistry_closed_loop_lab_safety_replay",
      "mechanistic_interpretability_circuit_attribution_replay",
      "prediction_oracle_reconciliation",
      "finance_forecast_evaluation_spine",
      "batch12_market_dashboard_read_model_capsule",
      "batch12_prediction_market_board_capsule",
      "macro_projection_import_protocol",
      "world_model_projection_drift_control_room",
      "batch6_unsurfaced_primitives_capsule",
      "batch5_authority_systems_capsule",
      "batch7_macro_engines_capsule",
      "batch7_oracle_sibling_capsule",
      "batch7_demo_take_console_capsule",
      "batch8_tools_tail_primitives_capsule",
      "batch8_policy_engines_capsule",
      "batch8_audio_level_rms_port",
      "batch8_structural_theses_capsule",
      "engine_room_demo",
      "batch9_macro_engines_capsule",
      "batch10_governance_compilers_capsule",
      "batch11_saturation_engines_capsule",
      "tool_server_pressure_inventory",
      "batch8_compliance_pipeline_capsule",
      "batch10_live_source_drift_capsule",
      "batch12_release_claim_language_gate",
      "mission_transaction_work_spine",
      "durable_agent_work_landing_replay",
      "bridge_phase_continuity_runtime",
      "concurrency_mission_control"
     ],
     "family_id": null
    }
   },
   {
    "id": "page:field-guide",
    "path": "docs/field-guide.html",
    "title": "Field guide",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 184,
    "content_refs": {
     "component_refs": [
      "cold_reader_route_map",
      "public_reveal_walkthrough",
      "pattern_binding_contract",
      "pattern_assimilation_step",
      "executable_doctrine_grammar",
      "navigation_hologram_route_plane",
      "standards_meta_diagnostics",
      "voice_to_doctrine_self_improvement_loop",
      "cognitive_operator_registry",
      "routing_anti_patterns_registry",
      "doctrine_fact_claim_audit",
      "self_ignorance_coverage_ledger",
      "proof_diagnostic_evidence_spine",
      "formal_math_readiness_gate",
      "corpus_readiness_mathlib_absence_gate",
      "mathematical_strategy_atlas_hypothesis_scorer",
      "tactic_portfolio_availability_probe",
      "target_shape_tactic_routing_gate",
      "lean_std_premise_index",
      "formal_math_premise_retrieval",
      "formal_math_verifier_trace_repair_loop",
      "formal_evidence_cell_anchor_resolver",
      "undeclared_library_prior_symbol_classifier",
      "ring2_premise_retrieval_precision_recall_harness",
      "formal_math_lean_proof_witness",
      "verifier_lab_kernel",
      "verifier_lab_execution_spine",
      "certificate_kernel_execution_lab",
      "batch4_proof_authority_runtime",
      "proof_derived_governed_mutation_authorization",
      "agent_benchmark_integrity_anti_gaming_replay",
      "batch10_cold_eval_honesty_capsule",
      "batch8_validator_checker_capsule",
      "agent_monitor_redteam_falsification_replay",
      "agent_sabotage_scheming_monitor_replay",
      "agent_memory_temporal_conflict_replay",
      "sleeper_memory_poisoning_quarantine_replay",
      "mcp_tool_authority_replay",
      "belief_state_process_reward_replay",
      "agent_sandbox_policy_escape_replay",
      "indirect_prompt_injection_information_flow_policy_replay",
      "agentic_vulnerability_discovery_patch_proof_replay",
      "agent_route_observability_runtime",
      "provider_context_recipe_budget_policy",
      "agent_closeout_faithfulness_audit",
      "bounded_autonomy_campaign_packet",
      "batch7_secondary_runtime_capsule",
      "research_replication_rubric_artifact_replay",
      "spatial_world_model_counterfactual_simulation_replay",
      "materials_chemistry_closed_loop_lab_safety_replay",
      "mechanistic_interpretability_circuit_attribution_replay",
      "prediction_oracle_reconciliation",
      "finance_forecast_evaluation_spine",
      "batch12_market_dashboard_read_model_capsule",
      "batch12_prediction_market_board_capsule",
      "macro_projection_import_protocol",
      "world_model_projection_drift_control_room",
      "batch6_unsurfaced_primitives_capsule",
      "batch5_authority_systems_capsule",
      "batch7_macro_engines_capsule",
      "batch7_oracle_sibling_capsule",
      "batch7_demo_take_console_capsule",
      "batch8_tools_tail_primitives_capsule",
      "batch8_policy_engines_capsule",
      "batch8_audio_level_rms_port",
      "batch8_structural_theses_capsule",
      "engine_room_demo",
      "batch9_macro_engines_capsule",
      "batch10_governance_compilers_capsule",
      "batch11_saturation_engines_capsule",
      "tool_server_pressure_inventory",
      "batch8_compliance_pipeline_capsule",
      "batch10_live_source_drift_capsule",
      "batch12_release_claim_language_gate",
      "mission_transaction_work_spine",
      "durable_agent_work_landing_replay",
      "bridge_phase_continuity_runtime",
      "concurrency_mission_control"
     ],
     "paper_module_refs": [
      "paper_module.verifier_lab_kernel",
      "paper_module.navigation_hologram_route_plane",
      "paper_module.agent_route_observability_runtime",
      "paper_module.agent_benchmark_integrity_anti_gaming_replay",
      "paper_module.research_replication_rubric_artifact_replay",
      "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
      "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
      "paper_module.certificate_kernel_execution_lab",
      "paper_module.corpus_readiness_mathlib_absence_gate",
      "paper_module.pattern_binding_contract",
      "paper_module.bridge_phase_continuity_runtime",
      "paper_module.cognitive_operator_registry",
      "paper_module.agent_closeout_faithfulness_audit",
      "paper_module.cold_reader_route_map",
      "paper_module.proof_diagnostic_evidence_spine",
      "paper_module.proof_derived_governed_mutation_authorization",
      "paper_module.durable_agent_work_landing_replay",
      "paper_module.work_landing_control_spine",
      "paper_module.executable_doctrine_grammar",
      "paper_module.macro_projection_import_protocol",
      "paper_module.mission_transaction_work_spine",
      "paper_module.formal_math_readiness_gate",
      "paper_module.formal_math_lean_proof_witness",
      "paper_module.formal_math_verifier_trace_repair_loop",
      "paper_module.formal_evidence_cell_anchor_resolver",
      "paper_module.formal_math_premise_retrieval",
      "paper_module.lean_std_premise_index",
      "paper_module.world_model_projection_drift_control_room",
      "paper_module.public_reveal_walkthrough",
      "paper_module.standards_meta_diagnostics",
      "paper_module.finance_forecast_evaluation_spine",
      "paper_module.engine_room_demo",
      "paper_module.agent_memory_temporal_conflict_replay",
      "paper_module.agent_monitor_redteam_falsification_replay",
      "paper_module.agent_sabotage_scheming_monitor_replay",
      "paper_module.agent_sandbox_policy_escape_replay",
      "paper_module.belief_state_process_reward_replay",
      "paper_module.sleeper_memory_poisoning_quarantine_replay",
      "paper_module.indirect_prompt_injection_information_flow_policy_replay",
      "paper_module.mcp_tool_authority_replay",
      "paper_module.tactic_portfolio_availability",
      "paper_module.target_shape_tactic_routing",
      "paper_module.ring2_premise_precision_recall",
      "paper_module.mathematical_strategy_atlas",
      "paper_module.verifier_lab_execution_spine",
      "paper_module.bounded_autonomy_campaign_packet",
      "paper_module.computer_use_action_trace_replay",
      "paper_module.concurrency_mission_control",
      "paper_module.doctrine_fact_claim_audit",
      "paper_module.self_ignorance_coverage_ledger",
      "paper_module.tool_server_pressure_inventory",
      "paper_module.mechanistic_interpretability_circuit_attribution_replay",
      "paper_module.spatial_world_model_counterfactual_simulation_replay",
      "paper_module.prediction_oracle_reconciliation",
      "paper_module.provider_context_recipe_budget",
      "paper_module.undeclared_library_prior_classifier",
      "paper_module.voice_to_doctrine_self_improvement_loop",
      "paper_module.routing_anti_patterns_registry",
      "paper_module.batch8_audio_level_rms_port",
      "paper_module.batch8_compliance_pipeline_capsule",
      "paper_module.batch8_policy_engines_capsule",
      "paper_module.batch8_structural_theses_capsule",
      "paper_module.batch8_tools_tail_primitives_capsule",
      "paper_module.batch8_validator_checker_capsule",
      "paper_module.batch12_market_dashboard_read_model_capsule",
      "paper_module.batch12_prediction_market_board_capsule",
      "paper_module.batch12_release_claim_language_gate",
      "paper_module.batch10_cold_eval_honesty_capsule",
      "paper_module.batch10_live_source_drift_capsule",
      "paper_module.batch7_macro_engines_capsule",
      "paper_module.batch9_macro_engines_capsule",
      "paper_module.pattern_assimilation",
      "paper_module.batch10_governance_compilers_capsule",
      "paper_module.batch11_saturation_engines_capsule",
      "paper_module.batch4_proof_authority_runtime",
      "paper_module.batch6_unsurfaced_primitives_capsule",
      "paper_module.engine_room_public_projection_leak_gate",
      "paper_module.batch5_authority_systems_capsule",
      "paper_module.batch7_oracle_sibling_capsule",
      "paper_module.batch7_demo_take_console_capsule",
      "paper_module.engine_room_generated_projection_drift_gate",
      "paper_module.engine_room_command_run_singleflight",
      "paper_module.engine_room_metabolism_runtime",
      "paper_module.engine_room_bridge_campaign_dag",
      "paper_module.engine_room_annex_knowledge_router",
      "paper_module.engine_room_derived_fact_provider_engine",
      "paper_module.engine_room_egress_self_compliance_gate",
      "paper_module.engine_room_lean_proof_search_lab",
      "paper_module.engine_room_navigation_fitness_benchmark",
      "paper_module.cold_clone_probe",
      "paper_module.first_screen_composition_root",
      "paper_module.batch7_secondary_runtime_capsule",
      "paper_module.microcosm_axiom_substrate"
     ],
     "rules_and_ideas_refs": [
      "P-1",
      "P-2",
      "P-3",
      "P-4",
      "P-5",
      "P-6",
      "P-7",
      "P-8",
      "P-9",
      "P-10",
      "P-11",
      "P-12",
      "P-13",
      "P-14",
      "P-15",
      "P-16",
      "P-17",
      "P-18",
      "P-19",
      "P-20",
      "AX-1",
      "AX-2",
      "AX-3",
      "AX-4",
      "AX-5",
      "AX-6",
      "AX-7",
      "AX-8",
      "AX-9",
      "AX-10",
      "AX-11",
      "AX-12",
      "AP-1",
      "AP-2",
      "AP-3",
      "AP-4",
      "AP-5",
      "AP-6",
      "AP-7",
      "AP-8",
      "AP-9",
      "AP-10",
      "AP-11",
      "AP-12",
      "AP-13",
      "AP-14",
      "AP-15",
      "AP-16",
      "AP-17",
      "concept.agent_reliability_and_safety_validator_bundle",
      "concept.architecture_and_navigation_route_contract_bundle",
      "concept.entry_and_reveal_route_readiness_bundle",
      "concept.executable_doctrine_grammar_standard_bundle",
      "concept.first_screen_doctrine_effect_frame",
      "concept.formal_math_and_proof_witness_bundle",
      "concept.import_projection_and_drift_control_bundle",
      "concept.research_and_science_replay_evidence_bundle",
      "concept.standards_meta_diagnostics_bundle",
      "concept.voice_to_doctrine_self_improvement_loop_bundle",
      "concept.work_landing_and_continuity_control_bundle",
      "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
      "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
      "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
      "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
      "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
      "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
      "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
      "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
      "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
      "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
      "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
      "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
      "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
      "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
      "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
      "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
      "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
      "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
      "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
      "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
      "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
      "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
      "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
      "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
      "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
      "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
      "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
      "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
      "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
      "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
      "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
      "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
      "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
      "mechanism.cognitive_operator_registry.validates_public_operator_contract",
      "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
      "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
      "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
      "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
      "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
      "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
      "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
      "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
      "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
      "mechanism.engine_room_demo.validates_public_engine_room_demo",
      "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
      "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
      "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
      "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
      "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
      "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
      "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
      "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
      "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
      "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
      "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
      "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
      "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
      "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
      "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
      "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
      "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
      "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
      "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
      "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
      "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
      "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
      "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
      "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
      "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
      "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
      "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
      "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
      "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
      "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
      "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
      "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
      "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
      "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
      "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
      "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
      "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
      "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
      "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
      "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
      "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
      "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
      "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
      "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
      "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
      "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
      "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
      "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
      "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
      "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
      "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
      "paper_module.verifier_lab_kernel",
      "paper_module.navigation_hologram_route_plane",
      "paper_module.agent_route_observability_runtime",
      "paper_module.agent_benchmark_integrity_anti_gaming_replay",
      "paper_module.research_replication_rubric_artifact_replay",
      "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
      "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
      "paper_module.certificate_kernel_execution_lab",
      "paper_module.corpus_readiness_mathlib_absence_gate",
      "paper_module.pattern_binding_contract",
      "paper_module.bridge_phase_continuity_runtime",
      "paper_module.cognitive_operator_registry",
      "paper_module.agent_closeout_faithfulness_audit",
      "paper_module.cold_reader_route_map",
      "paper_module.proof_diagnostic_evidence_spine",
      "paper_module.proof_derived_governed_mutation_authorization",
      "paper_module.durable_agent_work_landing_replay",
      "paper_module.work_landing_control_spine",
      "paper_module.executable_doctrine_grammar",
      "paper_module.macro_projection_import_protocol",
      "paper_module.mission_transaction_work_spine",
      "paper_module.formal_math_readiness_gate",
      "paper_module.formal_math_lean_proof_witness",
      "paper_module.formal_math_verifier_trace_repair_loop",
      "paper_module.formal_evidence_cell_anchor_resolver",
      "paper_module.formal_math_premise_retrieval",
      "paper_module.lean_std_premise_index",
      "paper_module.world_model_projection_drift_control_room",
      "paper_module.public_reveal_walkthrough",
      "paper_module.standards_meta_diagnostics",
      "paper_module.finance_forecast_evaluation_spine",
      "paper_module.engine_room_demo",
      "paper_module.agent_memory_temporal_conflict_replay",
      "paper_module.agent_monitor_redteam_falsification_replay",
      "paper_module.agent_sabotage_scheming_monitor_replay",
      "paper_module.agent_sandbox_policy_escape_replay",
      "paper_module.belief_state_process_reward_replay",
      "paper_module.sleeper_memory_poisoning_quarantine_replay",
      "paper_module.indirect_prompt_injection_information_flow_policy_replay",
      "paper_module.mcp_tool_authority_replay",
      "paper_module.tactic_portfolio_availability",
      "paper_module.target_shape_tactic_routing",
      "paper_module.ring2_premise_precision_recall",
      "paper_module.mathematical_strategy_atlas",
      "paper_module.verifier_lab_execution_spine",
      "paper_module.bounded_autonomy_campaign_packet",
      "paper_module.computer_use_action_trace_replay",
      "paper_module.concurrency_mission_control",
      "paper_module.doctrine_fact_claim_audit",
      "paper_module.self_ignorance_coverage_ledger",
      "paper_module.tool_server_pressure_inventory",
      "paper_module.mechanistic_interpretability_circuit_attribution_replay",
      "paper_module.spatial_world_model_counterfactual_simulation_replay",
      "paper_module.prediction_oracle_reconciliation",
      "paper_module.provider_context_recipe_budget",
      "paper_module.undeclared_library_prior_classifier",
      "paper_module.voice_to_doctrine_self_improvement_loop",
      "paper_module.routing_anti_patterns_registry",
      "paper_module.batch8_audio_level_rms_port",
      "paper_module.batch8_compliance_pipeline_capsule",
      "paper_module.batch8_policy_engines_capsule",
      "paper_module.batch8_structural_theses_capsule",
      "paper_module.batch8_tools_tail_primitives_capsule",
      "paper_module.batch8_validator_checker_capsule",
      "paper_module.batch12_market_dashboard_read_model_capsule",
      "paper_module.batch12_prediction_market_board_capsule",
      "paper_module.batch12_release_claim_language_gate",
      "paper_module.batch10_cold_eval_honesty_capsule",
      "paper_module.batch10_live_source_drift_capsule",
      "paper_module.batch7_macro_engines_capsule",
      "paper_module.batch9_macro_engines_capsule",
      "paper_module.pattern_assimilation",
      "paper_module.batch10_governance_compilers_capsule",
      "paper_module.batch11_saturation_engines_capsule",
      "paper_module.batch4_proof_authority_runtime",
      "paper_module.batch6_unsurfaced_primitives_capsule",
      "paper_module.engine_room_public_projection_leak_gate",
      "paper_module.batch5_authority_systems_capsule",
      "paper_module.batch7_oracle_sibling_capsule",
      "paper_module.batch7_demo_take_console_capsule",
      "paper_module.engine_room_generated_projection_drift_gate",
      "paper_module.engine_room_command_run_singleflight",
      "paper_module.engine_room_metabolism_runtime",
      "paper_module.engine_room_bridge_campaign_dag",
      "paper_module.engine_room_annex_knowledge_router",
      "paper_module.engine_room_derived_fact_provider_engine",
      "paper_module.engine_room_egress_self_compliance_gate",
      "paper_module.engine_room_lean_proof_search_lab",
      "paper_module.engine_room_navigation_fitness_benchmark",
      "paper_module.cold_clone_probe",
      "paper_module.first_screen_composition_root",
      "paper_module.batch7_secondary_runtime_capsule",
      "paper_module.microcosm_axiom_substrate"
     ],
     "family_id": null
    }
   },
   {
    "id": "page:rules-and-ideas",
    "path": "docs/rules-and-ideas.html",
    "title": "Doctrine reference",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 269,
    "content_refs": {
     "rules_and_ideas_refs": [
      "P-1",
      "P-2",
      "P-3",
      "P-4",
      "P-5",
      "P-6",
      "P-7",
      "P-8",
      "P-9",
      "P-10",
      "P-11",
      "P-12",
      "P-13",
      "P-14",
      "P-15",
      "P-16",
      "P-17",
      "P-18",
      "P-19",
      "P-20",
      "AX-1",
      "AX-2",
      "AX-3",
      "AX-4",
      "AX-5",
      "AX-6",
      "AX-7",
      "AX-8",
      "AX-9",
      "AX-10",
      "AX-11",
      "AX-12",
      "AP-1",
      "AP-2",
      "AP-3",
      "AP-4",
      "AP-5",
      "AP-6",
      "AP-7",
      "AP-8",
      "AP-9",
      "AP-10",
      "AP-11",
      "AP-12",
      "AP-13",
      "AP-14",
      "AP-15",
      "AP-16",
      "AP-17",
      "concept.agent_reliability_and_safety_validator_bundle",
      "concept.architecture_and_navigation_route_contract_bundle",
      "concept.entry_and_reveal_route_readiness_bundle",
      "concept.executable_doctrine_grammar_standard_bundle",
      "concept.first_screen_doctrine_effect_frame",
      "concept.formal_math_and_proof_witness_bundle",
      "concept.import_projection_and_drift_control_bundle",
      "concept.research_and_science_replay_evidence_bundle",
      "concept.standards_meta_diagnostics_bundle",
      "concept.voice_to_doctrine_self_improvement_loop_bundle",
      "concept.work_landing_and_continuity_control_bundle",
      "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
      "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
      "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
      "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
      "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
      "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
      "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
      "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
      "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
      "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
      "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
      "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
      "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
      "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
      "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
      "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
      "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
      "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
      "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
      "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
      "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
      "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
      "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
      "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
      "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
      "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
      "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
      "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
      "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
      "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
      "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
      "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
      "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
      "mechanism.cognitive_operator_registry.validates_public_operator_contract",
      "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
      "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
      "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
      "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
      "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
      "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
      "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
      "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
      "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
      "mechanism.engine_room_demo.validates_public_engine_room_demo",
      "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
      "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
      "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
      "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
      "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
      "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
      "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
      "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
      "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
      "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
      "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
      "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
      "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
      "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
      "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
      "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
      "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
      "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
      "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
      "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
      "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
      "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
      "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
      "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
      "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
      "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
      "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
      "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
      "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
      "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
      "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
      "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
      "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
      "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
      "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
      "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
      "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
      "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
      "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
      "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
      "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
      "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
      "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
      "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
      "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
      "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
      "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
      "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
      "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
      "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
      "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
      "paper_module.verifier_lab_kernel",
      "paper_module.navigation_hologram_route_plane",
      "paper_module.agent_route_observability_runtime",
      "paper_module.agent_benchmark_integrity_anti_gaming_replay",
      "paper_module.research_replication_rubric_artifact_replay",
      "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
      "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
      "paper_module.certificate_kernel_execution_lab",
      "paper_module.corpus_readiness_mathlib_absence_gate",
      "paper_module.pattern_binding_contract",
      "paper_module.bridge_phase_continuity_runtime",
      "paper_module.cognitive_operator_registry",
      "paper_module.agent_closeout_faithfulness_audit",
      "paper_module.cold_reader_route_map",
      "paper_module.proof_diagnostic_evidence_spine",
      "paper_module.proof_derived_governed_mutation_authorization",
      "paper_module.durable_agent_work_landing_replay",
      "paper_module.work_landing_control_spine",
      "paper_module.executable_doctrine_grammar",
      "paper_module.macro_projection_import_protocol",
      "paper_module.mission_transaction_work_spine",
      "paper_module.formal_math_readiness_gate",
      "paper_module.formal_math_lean_proof_witness",
      "paper_module.formal_math_verifier_trace_repair_loop",
      "paper_module.formal_evidence_cell_anchor_resolver",
      "paper_module.formal_math_premise_retrieval",
      "paper_module.lean_std_premise_index",
      "paper_module.world_model_projection_drift_control_room",
      "paper_module.public_reveal_walkthrough",
      "paper_module.standards_meta_diagnostics",
      "paper_module.finance_forecast_evaluation_spine",
      "paper_module.engine_room_demo",
      "paper_module.agent_memory_temporal_conflict_replay",
      "paper_module.agent_monitor_redteam_falsification_replay",
      "paper_module.agent_sabotage_scheming_monitor_replay",
      "paper_module.agent_sandbox_policy_escape_replay",
      "paper_module.belief_state_process_reward_replay",
      "paper_module.sleeper_memory_poisoning_quarantine_replay",
      "paper_module.indirect_prompt_injection_information_flow_policy_replay",
      "paper_module.mcp_tool_authority_replay",
      "paper_module.tactic_portfolio_availability",
      "paper_module.target_shape_tactic_routing",
      "paper_module.ring2_premise_precision_recall",
      "paper_module.mathematical_strategy_atlas",
      "paper_module.verifier_lab_execution_spine",
      "paper_module.bounded_autonomy_campaign_packet",
      "paper_module.computer_use_action_trace_replay",
      "paper_module.concurrency_mission_control",
      "paper_module.doctrine_fact_claim_audit",
      "paper_module.self_ignorance_coverage_ledger",
      "paper_module.tool_server_pressure_inventory",
      "paper_module.mechanistic_interpretability_circuit_attribution_replay",
      "paper_module.spatial_world_model_counterfactual_simulation_replay",
      "paper_module.prediction_oracle_reconciliation",
      "paper_module.provider_context_recipe_budget",
      "paper_module.undeclared_library_prior_classifier",
      "paper_module.voice_to_doctrine_self_improvement_loop",
      "paper_module.routing_anti_patterns_registry",
      "paper_module.batch8_audio_level_rms_port",
      "paper_module.batch8_compliance_pipeline_capsule",
      "paper_module.batch8_policy_engines_capsule",
      "paper_module.batch8_structural_theses_capsule",
      "paper_module.batch8_tools_tail_primitives_capsule",
      "paper_module.batch8_validator_checker_capsule",
      "paper_module.batch12_market_dashboard_read_model_capsule",
      "paper_module.batch12_prediction_market_board_capsule",
      "paper_module.batch12_release_claim_language_gate",
      "paper_module.batch10_cold_eval_honesty_capsule",
      "paper_module.batch10_live_source_drift_capsule",
      "paper_module.batch7_macro_engines_capsule",
      "paper_module.batch9_macro_engines_capsule",
      "paper_module.pattern_assimilation",
      "paper_module.batch10_governance_compilers_capsule",
      "paper_module.batch11_saturation_engines_capsule",
      "paper_module.batch4_proof_authority_runtime",
      "paper_module.batch6_unsurfaced_primitives_capsule",
      "paper_module.engine_room_public_projection_leak_gate",
      "paper_module.batch5_authority_systems_capsule",
      "paper_module.batch7_oracle_sibling_capsule",
      "paper_module.batch7_demo_take_console_capsule",
      "paper_module.engine_room_generated_projection_drift_gate",
      "paper_module.engine_room_command_run_singleflight",
      "paper_module.engine_room_metabolism_runtime",
      "paper_module.engine_room_bridge_campaign_dag",
      "paper_module.engine_room_annex_knowledge_router",
      "paper_module.engine_room_derived_fact_provider_engine",
      "paper_module.engine_room_egress_self_compliance_gate",
      "paper_module.engine_room_lean_proof_search_lab",
      "paper_module.engine_room_navigation_fitness_benchmark",
      "paper_module.cold_clone_probe",
      "paper_module.first_screen_composition_root",
      "paper_module.batch7_secondary_runtime_capsule",
      "paper_module.microcosm_axiom_substrate"
     ],
     "family_id": null
    }
   },
   {
    "id": "page:paper-modules",
    "path": "docs/paper-modules.html",
    "title": "Paper modules",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 404,
    "content_refs": {
     "paper_module_refs": [
      "paper_module.verifier_lab_kernel",
      "paper_module.navigation_hologram_route_plane",
      "paper_module.agent_route_observability_runtime",
      "paper_module.agent_benchmark_integrity_anti_gaming_replay",
      "paper_module.research_replication_rubric_artifact_replay",
      "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
      "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
      "paper_module.certificate_kernel_execution_lab",
      "paper_module.corpus_readiness_mathlib_absence_gate",
      "paper_module.pattern_binding_contract",
      "paper_module.bridge_phase_continuity_runtime",
      "paper_module.cognitive_operator_registry",
      "paper_module.agent_closeout_faithfulness_audit",
      "paper_module.cold_reader_route_map",
      "paper_module.proof_diagnostic_evidence_spine",
      "paper_module.proof_derived_governed_mutation_authorization",
      "paper_module.durable_agent_work_landing_replay",
      "paper_module.work_landing_control_spine",
      "paper_module.executable_doctrine_grammar",
      "paper_module.macro_projection_import_protocol",
      "paper_module.mission_transaction_work_spine",
      "paper_module.formal_math_readiness_gate",
      "paper_module.formal_math_lean_proof_witness",
      "paper_module.formal_math_verifier_trace_repair_loop",
      "paper_module.formal_evidence_cell_anchor_resolver",
      "paper_module.formal_math_premise_retrieval",
      "paper_module.lean_std_premise_index",
      "paper_module.world_model_projection_drift_control_room",
      "paper_module.public_reveal_walkthrough",
      "paper_module.standards_meta_diagnostics",
      "paper_module.finance_forecast_evaluation_spine",
      "paper_module.engine_room_demo",
      "paper_module.agent_memory_temporal_conflict_replay",
      "paper_module.agent_monitor_redteam_falsification_replay",
      "paper_module.agent_sabotage_scheming_monitor_replay",
      "paper_module.agent_sandbox_policy_escape_replay",
      "paper_module.belief_state_process_reward_replay",
      "paper_module.sleeper_memory_poisoning_quarantine_replay",
      "paper_module.indirect_prompt_injection_information_flow_policy_replay",
      "paper_module.mcp_tool_authority_replay",
      "paper_module.tactic_portfolio_availability",
      "paper_module.target_shape_tactic_routing",
      "paper_module.ring2_premise_precision_recall",
      "paper_module.mathematical_strategy_atlas",
      "paper_module.verifier_lab_execution_spine",
      "paper_module.bounded_autonomy_campaign_packet",
      "paper_module.computer_use_action_trace_replay",
      "paper_module.concurrency_mission_control",
      "paper_module.doctrine_fact_claim_audit",
      "paper_module.self_ignorance_coverage_ledger",
      "paper_module.tool_server_pressure_inventory",
      "paper_module.mechanistic_interpretability_circuit_attribution_replay",
      "paper_module.spatial_world_model_counterfactual_simulation_replay",
      "paper_module.prediction_oracle_reconciliation",
      "paper_module.provider_context_recipe_budget",
      "paper_module.undeclared_library_prior_classifier",
      "paper_module.voice_to_doctrine_self_improvement_loop",
      "paper_module.routing_anti_patterns_registry",
      "paper_module.batch8_audio_level_rms_port",
      "paper_module.batch8_compliance_pipeline_capsule",
      "paper_module.batch8_policy_engines_capsule",
      "paper_module.batch8_structural_theses_capsule",
      "paper_module.batch8_tools_tail_primitives_capsule",
      "paper_module.batch8_validator_checker_capsule",
      "paper_module.batch12_market_dashboard_read_model_capsule",
      "paper_module.batch12_prediction_market_board_capsule",
      "paper_module.batch12_release_claim_language_gate",
      "paper_module.batch10_cold_eval_honesty_capsule",
      "paper_module.batch10_live_source_drift_capsule",
      "paper_module.batch7_macro_engines_capsule",
      "paper_module.batch9_macro_engines_capsule",
      "paper_module.pattern_assimilation",
      "paper_module.batch10_governance_compilers_capsule",
      "paper_module.batch11_saturation_engines_capsule",
      "paper_module.batch4_proof_authority_runtime",
      "paper_module.batch6_unsurfaced_primitives_capsule",
      "paper_module.engine_room_public_projection_leak_gate",
      "paper_module.batch5_authority_systems_capsule",
      "paper_module.batch7_oracle_sibling_capsule",
      "paper_module.batch7_demo_take_console_capsule",
      "paper_module.engine_room_generated_projection_drift_gate",
      "paper_module.engine_room_command_run_singleflight",
      "paper_module.engine_room_metabolism_runtime",
      "paper_module.engine_room_bridge_campaign_dag",
      "paper_module.engine_room_annex_knowledge_router",
      "paper_module.engine_room_derived_fact_provider_engine",
      "paper_module.engine_room_egress_self_compliance_gate",
      "paper_module.engine_room_lean_proof_search_lab",
      "paper_module.engine_room_navigation_fitness_benchmark",
      "paper_module.cold_clone_probe",
      "paper_module.first_screen_composition_root",
      "paper_module.batch7_secondary_runtime_capsule",
      "paper_module.microcosm_axiom_substrate"
     ],
     "family_id": null
    }
   },
   {
    "id": "page:evidence",
    "path": "docs/evidence.html",
    "title": "What the pass proves",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 13254,
    "content_refs": {
     "evidence_profile_refs": [
      "evidence_profile:anti_principle:AP-1",
      "evidence_profile:anti_principle:AP-10",
      "evidence_profile:anti_principle:AP-11",
      "evidence_profile:anti_principle:AP-12",
      "evidence_profile:anti_principle:AP-13",
      "evidence_profile:anti_principle:AP-14",
      "evidence_profile:anti_principle:AP-15",
      "evidence_profile:anti_principle:AP-16",
      "evidence_profile:anti_principle:AP-17",
      "evidence_profile:anti_principle:AP-2",
      "evidence_profile:anti_principle:AP-3",
      "evidence_profile:anti_principle:AP-4",
      "evidence_profile:anti_principle:AP-5",
      "evidence_profile:anti_principle:AP-6",
      "evidence_profile:anti_principle:AP-7",
      "evidence_profile:anti_principle:AP-8",
      "evidence_profile:anti_principle:AP-9",
      "evidence_profile:axiom:AX-1",
      "evidence_profile:axiom:AX-10",
      "evidence_profile:axiom:AX-11",
      "evidence_profile:axiom:AX-12",
      "evidence_profile:axiom:AX-2",
      "evidence_profile:axiom:AX-3",
      "evidence_profile:axiom:AX-4",
      "evidence_profile:axiom:AX-5",
      "evidence_profile:axiom:AX-6",
      "evidence_profile:axiom:AX-7",
      "evidence_profile:axiom:AX-8",
      "evidence_profile:axiom:AX-9",
      "evidence_profile:component:agent_benchmark_integrity_anti_gaming_replay",
      "evidence_profile:component:agent_closeout_faithfulness_audit",
      "evidence_profile:component:agent_memory_temporal_conflict_replay",
      "evidence_profile:component:agent_monitor_redteam_falsification_replay",
      "evidence_profile:component:agent_route_observability_runtime",
      "evidence_profile:component:agent_sabotage_scheming_monitor_replay",
      "evidence_profile:component:agent_sandbox_policy_escape_replay",
      "evidence_profile:component:agentic_vulnerability_discovery_patch_proof_replay",
      "evidence_profile:component:batch10_cold_eval_honesty_capsule",
      "evidence_profile:component:batch10_governance_compilers_capsule",
      "evidence_profile:component:batch10_live_source_drift_capsule",
      "evidence_profile:component:batch11_saturation_engines_capsule",
      "evidence_profile:component:batch12_market_dashboard_read_model_capsule",
      "evidence_profile:component:batch12_prediction_market_board_capsule",
      "evidence_profile:component:batch12_release_claim_language_gate",
      "evidence_profile:component:batch4_proof_authority_runtime",
      "evidence_profile:component:batch5_authority_systems_capsule",
      "evidence_profile:component:batch6_unsurfaced_primitives_capsule",
      "evidence_profile:component:batch7_demo_take_console_capsule",
      "evidence_profile:component:batch7_macro_engines_capsule",
      "evidence_profile:component:batch7_oracle_sibling_capsule",
      "evidence_profile:component:batch7_secondary_runtime_capsule",
      "evidence_profile:component:batch8_audio_level_rms_port",
      "evidence_profile:component:batch8_compliance_pipeline_capsule",
      "evidence_profile:component:batch8_policy_engines_capsule",
      "evidence_profile:component:batch8_structural_theses_capsule",
      "evidence_profile:component:batch8_tools_tail_primitives_capsule",
      "evidence_profile:component:batch8_validator_checker_capsule",
      "evidence_profile:component:batch9_macro_engines_capsule",
      "evidence_profile:component:belief_state_process_reward_replay",
      "evidence_profile:component:bounded_autonomy_campaign_packet",
      "evidence_profile:component:bridge_phase_continuity_runtime",
      "evidence_profile:component:certificate_kernel_execution_lab",
      "evidence_profile:component:cognitive_operator_registry",
      "evidence_profile:component:cold_reader_route_map",
      "evidence_profile:component:concurrency_mission_control",
      "evidence_profile:component:corpus_readiness_mathlib_absence_gate",
      "evidence_profile:component:doctrine_fact_claim_audit",
      "evidence_profile:component:durable_agent_work_landing_replay",
      "evidence_profile:component:engine_room_demo",
      "evidence_profile:component:executable_doctrine_grammar",
      "evidence_profile:component:finance_forecast_evaluation_spine",
      "evidence_profile:component:formal_evidence_cell_anchor_resolver",
      "evidence_profile:component:formal_math_lean_proof_witness",
      "evidence_profile:component:formal_math_premise_retrieval",
      "evidence_profile:component:formal_math_readiness_gate",
      "evidence_profile:component:formal_math_verifier_trace_repair_loop",
      "evidence_profile:component:indirect_prompt_injection_information_flow_policy_replay",
      "evidence_profile:component:lean_std_premise_index",
      "evidence_profile:component:macro_projection_import_protocol",
      "evidence_profile:component:materials_chemistry_closed_loop_lab_safety_replay",
      "evidence_profile:component:mathematical_strategy_atlas_hypothesis_scorer",
      "evidence_profile:component:mcp_tool_authority_replay",
      "evidence_profile:component:mechanistic_interpretability_circuit_attribution_replay",
      "evidence_profile:component:mission_transaction_work_spine",
      "evidence_profile:component:navigation_hologram_route_plane",
      "evidence_profile:component:pattern_assimilation_step",
      "evidence_profile:component:pattern_binding_contract",
      "evidence_profile:component:prediction_oracle_reconciliation",
      "evidence_profile:component:proof_derived_governed_mutation_authorization",
      "evidence_profile:component:proof_diagnostic_evidence_spine",
      "evidence_profile:component:provider_context_recipe_budget_policy",
      "evidence_profile:component:public_reveal_walkthrough",
      "evidence_profile:component:research_replication_rubric_artifact_replay",
      "evidence_profile:component:ring2_premise_retrieval_precision_recall_harness",
      "evidence_profile:component:routing_anti_patterns_registry",
      "evidence_profile:component:self_ignorance_coverage_ledger",
      "evidence_profile:component:sleeper_memory_poisoning_quarantine_replay",
      "evidence_profile:component:spatial_world_model_counterfactual_simulation_replay",
      "evidence_profile:component:standards_meta_diagnostics",
      "evidence_profile:component:tactic_portfolio_availability_probe",
      "evidence_profile:component:target_shape_tactic_routing_gate",
      "evidence_profile:component:tool_server_pressure_inventory",
      "evidence_profile:component:undeclared_library_prior_symbol_classifier",
      "evidence_profile:component:verifier_lab_execution_spine",
      "evidence_profile:component:verifier_lab_kernel",
      "evidence_profile:component:voice_to_doctrine_self_improvement_loop",
      "evidence_profile:component:world_model_projection_drift_control_room",
      "evidence_profile:concept:concept.agent_reliability_and_safety_validator_bundle",
      "evidence_profile:concept:concept.architecture_and_navigation_route_contract_bundle",
      "evidence_profile:concept:concept.entry_and_reveal_route_readiness_bundle",
      "evidence_profile:concept:concept.executable_doctrine_grammar_standard_bundle",
      "evidence_profile:concept:concept.first_screen_doctrine_effect_frame",
      "evidence_profile:concept:concept.formal_math_and_proof_witness_bundle",
      "evidence_profile:concept:concept.import_projection_and_drift_control_bundle",
      "evidence_profile:concept:concept.research_and_science_replay_evidence_bundle",
      "evidence_profile:concept:concept.standards_meta_diagnostics_bundle",
      "evidence_profile:concept:concept.voice_to_doctrine_self_improvement_loop_bundle",
      "evidence_profile:concept:concept.work_landing_and_continuity_control_bundle",
      "evidence_profile:coverage_gap:component_relation_fill_gap",
      "evidence_profile:coverage_gap:mechanism_relation_fill_gap",
      "evidence_profile:mechanism:mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
      "evidence_profile:mechanism:mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
      "evidence_profile:mechanism:mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
      "evidence_profile:mechanism:mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
      "evidence_profile:mechanism:mechanism.agent_route_observability_runtime.validates_public_route_feedback",
      "evidence_profile:mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
      "evidence_profile:mechanism:mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
      "evidence_profile:mechanism:mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
      "evidence_profile:mechanism:mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
      "evidence_profile:mechanism:mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
      "evidence_profile:mechanism:mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
      "evidence_profile:mechanism:mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
      "evidence_profile:mechanism:mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
      "evidence_profile:mechanism:mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
      "evidence_profile:mechanism:mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
      "evidence_profile:mechanism:mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
      "evidence_profile:mechanism:mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
      "evidence_profile:mechanism:mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
      "evidence_profile:mechanism:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
      "evidence_profile:mechanism:mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
      "evidence_profile:mechanism:mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
      "evidence_profile:mechanism:mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
      "evidence_profile:mechanism:mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
      "evidence_profile:mechanism:mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
      "evidence_profile:mechanism:mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
      "evidence_profile:mechanism:mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
      "evidence_profile:mechanism:mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
      "evidence_profile:mechanism:mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
      "evidence_profile:mechanism:mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
      "evidence_profile:mechanism:mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
      "evidence_profile:mechanism:mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
      "evidence_profile:mechanism:mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
      "evidence_profile:mechanism:mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
      "evidence_profile:mechanism:mechanism.cognitive_operator_registry.validates_public_operator_contract",
      "evidence_profile:mechanism:mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
      "evidence_profile:mechanism:mechanism.cold_reader_route_map.validates_public_first_run_route_map",
      "evidence_profile:mechanism:mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
      "evidence_profile:mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
      "evidence_profile:mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
      "evidence_profile:mechanism:mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
      "evidence_profile:mechanism:mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
      "evidence_profile:mechanism:mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
      "evidence_profile:mechanism:mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
      "evidence_profile:mechanism:mechanism.engine_room_demo.validates_public_engine_room_demo",
      "evidence_profile:mechanism:mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
      "evidence_profile:mechanism:mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
      "evidence_profile:mechanism:mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
      "evidence_profile:mechanism:mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
      "evidence_profile:mechanism:mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
      "evidence_profile:mechanism:mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
      "evidence_profile:mechanism:mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
      "evidence_profile:mechanism:mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
      "evidence_profile:mechanism:mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
      "evidence_profile:mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
      "evidence_profile:mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
      "evidence_profile:mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
      "evidence_profile:mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
      "evidence_profile:mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
      "evidence_profile:mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
      "evidence_profile:mechanism:mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
      "evidence_profile:mechanism:mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
      "evidence_profile:mechanism:mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
      "evidence_profile:mechanism:mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
      "evidence_profile:mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
      "evidence_profile:mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
      "evidence_profile:mechanism:mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
      "evidence_profile:mechanism:mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
      "evidence_profile:mechanism:mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
      "evidence_profile:mechanism:mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
      "evidence_profile:mechanism:mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
      "evidence_profile:mechanism:mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
      "evidence_profile:mechanism:mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
      "evidence_profile:mechanism:mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
      "evidence_profile:mechanism:mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
      "evidence_profile:mechanism:mechanism.pattern_binding_contract.validates_public_pattern_bindings",
      "evidence_profile:mechanism:mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
      "evidence_profile:mechanism:mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
      "evidence_profile:mechanism:mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
      "evidence_profile:mechanism:mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
      "evidence_profile:mechanism:mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
      "evidence_profile:mechanism:mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
      "evidence_profile:mechanism:mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
      "evidence_profile:mechanism:mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
      "evidence_profile:mechanism:mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
      "evidence_profile:mechanism:mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
      "evidence_profile:mechanism:mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
      "evidence_profile:mechanism:mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
      "evidence_profile:mechanism:mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
      "evidence_profile:mechanism:mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
      "evidence_profile:mechanism:mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
      "evidence_profile:mechanism:mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
      "evidence_profile:mechanism:mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
      "evidence_profile:mechanism:mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
      "evidence_profile:mechanism:mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
      "evidence_profile:mechanism:mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
      "evidence_profile:paper_module:paper_module.agent_benchmark_integrity_anti_gaming_replay",
      "evidence_profile:paper_module:paper_module.agent_closeout_faithfulness_audit",
      "evidence_profile:paper_module:paper_module.agent_memory_temporal_conflict_replay",
      "evidence_profile:paper_module:paper_module.agent_monitor_redteam_falsification_replay",
      "evidence_profile:paper_module:paper_module.agent_route_observability_runtime",
      "evidence_profile:paper_module:paper_module.agent_sabotage_scheming_monitor_replay",
      "evidence_profile:paper_module:paper_module.agent_sandbox_policy_escape_replay",
      "evidence_profile:paper_module:paper_module.agentic_vulnerability_discovery_patch_proof_replay",
      "evidence_profile:paper_module:paper_module.batch10_cold_eval_honesty_capsule",
      "evidence_profile:paper_module:paper_module.batch10_governance_compilers_capsule",
      "evidence_profile:paper_module:paper_module.batch10_live_source_drift_capsule",
      "evidence_profile:paper_module:paper_module.batch11_saturation_engines_capsule",
      "evidence_profile:paper_module:paper_module.batch12_market_dashboard_read_model_capsule",
      "evidence_profile:paper_module:paper_module.batch12_prediction_market_board_capsule",
      "evidence_profile:paper_module:paper_module.batch12_release_claim_language_gate",
      "evidence_profile:paper_module:paper_module.batch4_proof_authority_runtime",
      "evidence_profile:paper_module:paper_module.batch5_authority_systems_capsule",
      "evidence_profile:paper_module:paper_module.batch6_unsurfaced_primitives_capsule",
      "evidence_profile:paper_module:paper_module.batch7_demo_take_console_capsule",
      "evidence_profile:paper_module:paper_module.batch7_macro_engines_capsule",
      "evidence_profile:paper_module:paper_module.batch7_oracle_sibling_capsule",
      "evidence_profile:paper_module:paper_module.batch7_secondary_runtime_capsule",
      "evidence_profile:paper_module:paper_module.batch8_audio_level_rms_port",
      "evidence_profile:paper_module:paper_module.batch8_compliance_pipeline_capsule",
      "evidence_profile:paper_module:paper_module.batch8_policy_engines_capsule",
      "evidence_profile:paper_module:paper_module.batch8_structural_theses_capsule",
      "evidence_profile:paper_module:paper_module.batch8_tools_tail_primitives_capsule",
      "evidence_profile:paper_module:paper_module.batch8_validator_checker_capsule",
      "evidence_profile:paper_module:paper_module.batch9_macro_engines_capsule",
      "evidence_profile:paper_module:paper_module.belief_state_process_reward_replay",
      "evidence_profile:paper_module:paper_module.bounded_autonomy_campaign_packet",
      "evidence_profile:paper_module:paper_module.bridge_phase_continuity_runtime",
      "evidence_profile:paper_module:paper_module.certificate_kernel_execution_lab",
      "evidence_profile:paper_module:paper_module.cognitive_operator_registry",
      "evidence_profile:paper_module:paper_module.cold_clone_probe",
      "evidence_profile:paper_module:paper_module.cold_reader_route_map",
      "evidence_profile:paper_module:paper_module.computer_use_action_trace_replay",
      "evidence_profile:paper_module:paper_module.concurrency_mission_control",
      "evidence_profile:paper_module:paper_module.corpus_readiness_mathlib_absence_gate",
      "evidence_profile:paper_module:paper_module.doctrine_fact_claim_audit",
      "evidence_profile:paper_module:paper_module.durable_agent_work_landing_replay",
      "evidence_profile:paper_module:paper_module.engine_room_annex_knowledge_router",
      "evidence_profile:paper_module:paper_module.engine_room_bridge_campaign_dag",
      "evidence_profile:paper_module:paper_module.engine_room_command_run_singleflight",
      "evidence_profile:paper_module:paper_module.engine_room_demo",
      "evidence_profile:paper_module:paper_module.engine_room_derived_fact_provider_engine",
      "evidence_profile:paper_module:paper_module.engine_room_egress_self_compliance_gate",
      "evidence_profile:paper_module:paper_module.engine_room_generated_projection_drift_gate",
      "evidence_profile:paper_module:paper_module.engine_room_lean_proof_search_lab",
      "evidence_profile:paper_module:paper_module.engine_room_metabolism_runtime",
      "evidence_profile:paper_module:paper_module.engine_room_navigation_fitness_benchmark",
      "evidence_profile:paper_module:paper_module.engine_room_public_projection_leak_gate",
      "evidence_profile:paper_module:paper_module.executable_doctrine_grammar",
      "evidence_profile:paper_module:paper_module.finance_forecast_evaluation_spine",
      "evidence_profile:paper_module:paper_module.first_screen_composition_root",
      "evidence_profile:paper_module:paper_module.formal_evidence_cell_anchor_resolver",
      "evidence_profile:paper_module:paper_module.formal_math_lean_proof_witness",
      "evidence_profile:paper_module:paper_module.formal_math_premise_retrieval",
      "evidence_profile:paper_module:paper_module.formal_math_readiness_gate",
      "evidence_profile:paper_module:paper_module.formal_math_verifier_trace_repair_loop",
      "evidence_profile:paper_module:paper_module.indirect_prompt_injection_information_flow_policy_replay",
      "evidence_profile:paper_module:paper_module.lean_std_premise_index",
      "evidence_profile:paper_module:paper_module.macro_projection_import_protocol",
      "evidence_profile:paper_module:paper_module.materials_chemistry_closed_loop_lab_safety_replay",
      "evidence_profile:paper_module:paper_module.mathematical_strategy_atlas",
      "evidence_profile:paper_module:paper_module.mcp_tool_authority_replay",
      "evidence_profile:paper_module:paper_module.mechanistic_interpretability_circuit_attribution_replay",
      "evidence_profile:paper_module:paper_module.microcosm_axiom_substrate",
      "evidence_profile:paper_module:paper_module.mission_transaction_work_spine",
      "evidence_profile:paper_module:paper_module.navigation_hologram_route_plane",
      "evidence_profile:paper_module:paper_module.pattern_assimilation",
      "evidence_profile:paper_module:paper_module.pattern_binding_contract",
      "evidence_profile:paper_module:paper_module.prediction_oracle_reconciliation",
      "evidence_profile:paper_module:paper_module.proof_derived_governed_mutation_authorization",
      "evidence_profile:paper_module:paper_module.proof_diagnostic_evidence_spine",
      "evidence_profile:paper_module:paper_module.provider_context_recipe_budget",
      "evidence_profile:paper_module:paper_module.public_reveal_walkthrough",
      "evidence_profile:paper_module:paper_module.research_replication_rubric_artifact_replay",
      "evidence_profile:paper_module:paper_module.ring2_premise_precision_recall",
      "evidence_profile:paper_module:paper_module.routing_anti_patterns_registry",
      "evidence_profile:paper_module:paper_module.self_ignorance_coverage_ledger",
      "evidence_profile:paper_module:paper_module.sleeper_memory_poisoning_quarantine_replay",
      "evidence_profile:paper_module:paper_module.spatial_world_model_counterfactual_simulation_replay",
      "evidence_profile:paper_module:paper_module.standards_meta_diagnostics",
      "evidence_profile:paper_module:paper_module.tactic_portfolio_availability",
      "evidence_profile:paper_module:paper_module.target_shape_tactic_routing",
      "evidence_profile:paper_module:paper_module.tool_server_pressure_inventory",
      "evidence_profile:paper_module:paper_module.undeclared_library_prior_classifier",
      "evidence_profile:paper_module:paper_module.verifier_lab_execution_spine",
      "evidence_profile:paper_module:paper_module.verifier_lab_kernel",
      "evidence_profile:paper_module:paper_module.voice_to_doctrine_self_improvement_loop",
      "evidence_profile:paper_module:paper_module.work_landing_control_spine",
      "evidence_profile:paper_module:paper_module.world_model_projection_drift_control_room",
      "evidence_profile:principle:P-1",
      "evidence_profile:principle:P-10",
      "evidence_profile:principle:P-11",
      "evidence_profile:principle:P-12",
      "evidence_profile:principle:P-13",
      "evidence_profile:principle:P-14",
      "evidence_profile:principle:P-15",
      "evidence_profile:principle:P-16",
      "evidence_profile:principle:P-17",
      "evidence_profile:principle:P-18",
      "evidence_profile:principle:P-19",
      "evidence_profile:principle:P-2",
      "evidence_profile:principle:P-20",
      "evidence_profile:principle:P-3",
      "evidence_profile:principle:P-4",
      "evidence_profile:principle:P-5",
      "evidence_profile:principle:P-6",
      "evidence_profile:principle:P-7",
      "evidence_profile:principle:P-8",
      "evidence_profile:principle:P-9"
     ],
     "family_id": null
    }
   },
   {
    "id": "page:source",
    "path": "docs/source.html",
    "title": "Source & license",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 3360,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   },
   {
    "id": "page:contact",
    "path": "docs/contact.html",
    "title": "Contact",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 2295,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   },
   {
    "id": "page:vulnerability-disclosure",
    "path": "docs/vulnerability-disclosure.html",
    "title": "Vulnerability disclosure",
    "text_ref": "pages[].visible_text.text",
    "byte_count": 2895,
    "content_refs": {
     "component_refs": [],
     "family_id": null
    }
   }
  ],
  "logical_records": {
   "components": [
    {
     "id": "cold_reader_route_map",
     "label": "Cold Reader Route Map",
     "family_id": "entry_and_reveal",
     "family_label": "Entry & orientation",
     "relative_href": "docs/components.html#component-cold_reader_route_map",
     "summary_line": "Verifies the first-run guided path so every step names a real command, doc, and evidence.",
     "what_it_does": "It checks Microcosm's \"what do I run first\" guided path so that every step on the cold-reader route map is backed by a real command, a public doc reference, and an evidence result record instead of just prose promises. A newcomer can therefore trust that the suggested ten-minute first-run tour is actually wired and honestly labeled, with small verified counts shown as plain accounting rather than success badges.",
     "scope_limit": "It is projection-only metadata that validates the declared public route contract; it is not route registry control and excludes source-file changes, external model access, launch/public sharing, financial decisions, private-data equivalence, or whole-system correctness.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm cold-reader-route-map run-route-map-bundle --input examples/cold_reader_route_map/exported_cold_reader_route_map_bundle --out receipts/runtime_shell/demo_project/organs/cold_reader_route_map --card",
     "tags": [
      "agent-entry",
      "getting-started",
      "interesting-parts"
     ],
     "links_to": [
      {
       "component_id": "navigation_hologram_route_plane",
       "label": "Navigation Hologram Route Plane",
       "relative_href": "docs/components.html#component-navigation_hologram_route_plane"
      },
      {
       "component_id": "agent_route_observability_runtime",
       "label": "Agent Route Observability Runtime",
       "relative_href": "docs/components.html#component-agent_route_observability_runtime"
      },
      {
       "component_id": "pattern_binding_contract",
       "label": "Pattern Binding Contract",
       "relative_href": "docs/components.html#component-pattern_binding_contract"
      },
      {
       "component_id": "doctrine_fact_claim_audit",
       "label": "Doctrine Fact Claim Audit",
       "relative_href": "docs/components.html#component-doctrine_fact_claim_audit"
      },
      {
       "component_id": "pattern_assimilation_step",
       "label": "Pattern Assimilation Step",
       "relative_href": "docs/components.html#component-pattern_assimilation_step"
      },
      {
       "component_id": "routing_anti_patterns_registry",
       "label": "Routing Anti Patterns Registry",
       "relative_href": "docs/components.html#component-routing_anti_patterns_registry"
      },
      {
       "component_id": "self_ignorance_coverage_ledger",
       "label": "Self Ignorance Coverage Ledger",
       "relative_href": "docs/components.html#component-self_ignorance_coverage_ledger"
      },
      {
       "component_id": "voice_to_doctrine_self_improvement_loop",
       "label": "Voice To Doctrine Self Improvement Loop",
       "relative_href": "docs/components.html#component-voice_to_doctrine_self_improvement_loop"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.cold_reader_route_map"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1006
    },
    {
     "id": "public_reveal_walkthrough",
     "label": "Public Reveal Walkthrough",
     "family_id": "entry_and_reveal",
     "family_label": "Entry & orientation",
     "relative_href": "docs/components.html#component-public_reveal_walkthrough",
     "summary_line": "Binds the first-time reader tour to evidence so each count leads to a source.",
     "what_it_does": "This checks the short guided tour Microcosm advertises for a first-time reader and binds it to real public evidence: the declared route through patterns, work, events, and evidence must still point to result records, and the exported reveal bundle must carry digest-verified copies of the public source bodies that back the walkthrough. The card remains bounded, but each impressive-looking count leads to a source-body witness instead of stopping at marketing copy.",
     "scope_limit": "It authorizes only bounded public reveal runtime behavior and a digest-verified public body-import witness; it excludes launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-data equivalence, Lean/Lake execution, whole-system correctness, or general product authority.",
     "evidence": {
      "kind": "Bounded runtime computation",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.public_reveal_walkthrough run --input fixtures/first_wave/public_reveal_walkthrough/input --out receipts/first_wave/public_reveal_walkthrough",
     "tags": [
      "getting-started",
      "interesting-parts",
      "evaluation"
     ],
     "links_to": [
      {
       "component_id": "batch12_release_claim_language_gate",
       "label": "Release Public Wording Gate",
       "relative_href": "docs/components.html#component-batch12_release_claim_language_gate"
      },
      {
       "component_id": "mechanistic_interpretability_circuit_attribution_replay",
       "label": "Mechanistic Interpretability Circuit Attribution Replay",
       "relative_href": "docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay"
      },
      {
       "component_id": "batch8_audio_level_rms_port",
       "label": "Audio Level RMS Port",
       "relative_href": "docs/components.html#component-batch8_audio_level_rms_port"
      },
      {
       "component_id": "batch8_validator_checker_capsule",
       "label": "Validator Checker Bundle",
       "relative_href": "docs/components.html#component-batch8_validator_checker_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/public_reveal_walkthrough.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1080
    },
    {
     "id": "pattern_binding_contract",
     "label": "Pattern Binding Contract",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-pattern_binding_contract",
     "summary_line": "Checks a real pattern catalog for digest, cross-reference, and dependency-cycle integrity.",
     "what_it_does": "It checks that each declared \"pattern\" (a reusable bit of system structure) is properly hooked up: it has the required fields, points at real source material by reference, names the rule it answers to and what it explicitly does NOT claim, has no duplicate pattern IDs, and leaks no secrets or private bodies into the public record. It produces a written result record showing the overall pass/fail, which pattern rows are accepted versus rejected and why, and what each row is forbidden from claiming.",
     "scope_limit": "It validates only the declared public pattern-binding/route-readiness contract; it does not certify the private pattern ledger, public launch or hosted-public posture, public sharing, external model access, private-data equivalence, or whole-system correctness, and it does not turn any mined pattern row into a standalone public leaf (selection stays component-first and fixture-bound).",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm pattern-route-readiness validate-bundle --input examples/pattern_binding_contract/exported_route_readiness_bundle --out /tmp/microcosm-pattern-route-readiness",
     "tags": [
      "architecture",
      "navigation",
      "doctrine"
     ],
     "links_to": [
      {
       "component_id": "navigation_hologram_route_plane",
       "label": "Navigation Hologram Route Plane",
       "relative_href": "docs/components.html#component-navigation_hologram_route_plane"
      },
      {
       "component_id": "agent_route_observability_runtime",
       "label": "Agent Route Observability Runtime",
       "relative_href": "docs/components.html#component-agent_route_observability_runtime"
      },
      {
       "component_id": "cold_reader_route_map",
       "label": "Cold Reader Route Map",
       "relative_href": "docs/components.html#component-cold_reader_route_map"
      },
      {
       "component_id": "macro_projection_import_protocol",
       "label": "Source Projection Import Protocol",
       "relative_href": "docs/components.html#component-macro_projection_import_protocol"
      },
      {
       "component_id": "pattern_assimilation_step",
       "label": "Pattern Assimilation Step",
       "relative_href": "docs/components.html#component-pattern_assimilation_step"
      },
      {
       "component_id": "voice_to_doctrine_self_improvement_loop",
       "label": "Voice To Doctrine Self Improvement Loop",
       "relative_href": "docs/components.html#component-voice_to_doctrine_self_improvement_loop"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_binding_contract.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1175
    },
    {
     "id": "pattern_assimilation_step",
     "label": "Pattern Assimilation Step",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-pattern_assimilation_step",
     "summary_line": "Verifies each landed task filed exactly one learning record naming what it changed.",
     "what_it_does": "When a piece of work lands in the local system, this component checks the completion records for it \u2014 confirming that exactly one same-lane \"what did we learn from this\" decision was filed per landed item, that any claimed refinement names an owner-visible surface and the artifact it changed, that a \"nothing to refine\" entry carries its required typed fields, and that there are no duplicate or off-lane entries. It runs over fixture data and makes the completion bookkeeping inspectable, showing whether the recorded completions conform to the system's stated learning-from-landed-work rules, rather than leaving that on faith.",
     "scope_limit": "It validates only the declared public completion contract over synthetic fixture data; it does not ingest private lessons, mutate live ledgers, promote global doctrine, include launch operations or public sharing, make external model access, claim private-data equivalence, or certify public runtime behavior.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.validators.acceptance --only pattern_assimilation_step --input fixtures/first_wave/pattern_assimilation_step/input --out receipts/first_wave/pattern_assimilation_acceptance.json",
     "tags": [
      "architecture",
      "navigation",
      "doctrine"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_assimilation.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1271
    },
    {
     "id": "executable_doctrine_grammar",
     "label": "Executable Doctrine Grammar",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-executable_doctrine_grammar",
     "summary_line": "Checks that example standards files declare their purpose, rule, records, and what they do not claim.",
     "what_it_does": "It checks that a folder of example \"doctrine\" files (toy public standards and write-ups that describe how the system is supposed to behave) actually have the required parts: a stated purpose, the rule that governs them, the result records they are expected to produce, and an honest statement of what they do NOT claim. It reports, file by file, which entries are well-formed and which ones fail a required check, including ones that overclaim (saying a passing grammar check proves the doctrine is complete) or that try to treat plain advice as enforceable authority.",
     "scope_limit": "It validates an exported public executable-grammar metabolism bundle with exact copied-body digests and redacted result records, plus fixture regressions for standards/paper-module shape. It does not publish source doctrine bodies in result records, prove doctrine completeness, export a private standards engine, authorize later components, or claim external model access, private-data equivalence, launch-scope decision, or whole-system correctness.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate-executable-grammar-metabolism-bundle --input examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle --out receipts/first_wave/executable_doctrine_grammar --card",
     "tags": [
      "architecture",
      "navigation",
      "doctrine"
     ],
     "links_to": [
      {
       "component_id": "doctrine_fact_claim_audit",
       "label": "Doctrine Fact Claim Audit",
       "relative_href": "docs/components.html#component-doctrine_fact_claim_audit"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.executable_doctrine_grammar"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1424
    },
    {
     "id": "navigation_hologram_route_plane",
     "label": "Navigation Hologram Route Plane",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-navigation_hologram_route_plane",
     "summary_line": "Audits a folder's navigation so browse rows never pose as the source of truth.",
     "what_it_does": "This checks that a folder's local \"how to get around\" surface behaves: the path starts from one control entry, then drills into browsable lists of routes and cards, and those browse rows are never allowed to pose as the source of truth. It makes visible, in plain result record files, that stale or mislabeled navigation is caught, that compressed cards keep a note of what they left out, and that nothing private or secret leaks into the navigation material while moving around. It only inspects toy fixture files and exact copied-but-navigation source modules; it does not touch any live system.",
     "scope_limit": "It validates only the declared public toy route-plane contract and its regression fixtures (plus exact copied navigation source modules in the bundle path); it does not establish live route freshness, grant source authority, authorize any later component, run any provider/live-kernel call, or certify the whole wave.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out receipts/first_wave/navigation_hologram_route_plane",
     "tags": [
      "agent-entry",
      "architecture",
      "navigation"
     ],
     "links_to": [
      {
       "component_id": "cold_reader_route_map",
       "label": "Cold Reader Route Map",
       "relative_href": "docs/components.html#component-cold_reader_route_map"
      },
      {
       "component_id": "agent_route_observability_runtime",
       "label": "Agent Route Observability Runtime",
       "relative_href": "docs/components.html#component-agent_route_observability_runtime"
      },
      {
       "component_id": "routing_anti_patterns_registry",
       "label": "Routing Anti Patterns Registry",
       "relative_href": "docs/components.html#component-routing_anti_patterns_registry"
      },
      {
       "component_id": "pattern_binding_contract",
       "label": "Pattern Binding Contract",
       "relative_href": "docs/components.html#component-pattern_binding_contract"
      },
      {
       "component_id": "doctrine_fact_claim_audit",
       "label": "Doctrine Fact Claim Audit",
       "relative_href": "docs/components.html#component-doctrine_fact_claim_audit"
      },
      {
       "component_id": "macro_projection_import_protocol",
       "label": "Source Projection Import Protocol",
       "relative_href": "docs/components.html#component-macro_projection_import_protocol"
      },
      {
       "component_id": "self_ignorance_coverage_ledger",
       "label": "Self Ignorance Coverage Ledger",
       "relative_href": "docs/components.html#component-self_ignorance_coverage_ledger"
      },
      {
       "component_id": "voice_to_doctrine_self_improvement_loop",
       "label": "Voice To Doctrine Self Improvement Loop",
       "relative_href": "docs/components.html#component-voice_to_doctrine_self_improvement_loop"
      },
      {
       "component_id": "engine_room_demo",
       "label": "Engine Room Demo",
       "relative_href": "docs/components.html#component-engine_room_demo"
      },
      {
       "component_id": "batch11_saturation_engines_capsule",
       "label": "Saturation Engines Bundle",
       "relative_href": "docs/components.html#component-batch11_saturation_engines_capsule"
      },
      {
       "component_id": "batch8_compliance_pipeline_capsule",
       "label": "Compliance Pipeline Bundle",
       "relative_href": "docs/components.html#component-batch8_compliance_pipeline_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.navigation_hologram_route_plane"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1234
    },
    {
     "id": "standards_meta_diagnostics",
     "label": "Standards Meta Diagnostics",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-standards_meta_diagnostics",
     "summary_line": "Confirms every accepted part still ties to a written rule, a run command, and a saved proof.",
     "what_it_does": "This is a coverage checker that reads the project's public catalogs and confirms every accepted part is still tied to a written standard, a documented way to run it, and a saved proof-of-run, while flagging any claim that overreaches (like \"ready to launch\") or any leaked private text. It makes the system's own bookkeeping inspectable: whether the pieces are accounted for is visible rather than taken on trust.",
     "scope_limit": "It validates only the declared public coverage contract and never becomes source authority for the registries, mutates source, exposes private material, or authorizes launch, external model access, or any whole-system-correctness claim.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.standards_meta_diagnostics run --input fixtures/first_wave/standards_meta_diagnostics/input --out /tmp/standards_meta_diagnostics_out",
     "tags": [
      "agent-entry",
      "architecture",
      "navigation"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/standards_meta_diagnostics.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 952
    },
    {
     "id": "voice_to_doctrine_self_improvement_loop",
     "label": "Voice To Doctrine Self Improvement Loop",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-voice_to_doctrine_self_improvement_loop",
     "summary_line": "Verifies each lesson changed a named owner page with evidence before the loop closes.",
     "what_it_does": "It makes the system's \"learn from a lesson, then improve\" cycle inspectable on a folder. Each local lesson is shown being assigned to a specific owner surface (a skill, a doctrine page, a standard, or a tracked to-do capture), then changed or captured there, then validated, then closed out with a concrete reason to revisit later. Using local files only, the result records confirm that improvements are tied to real owner-surface changes and evidence rather than just asserted.",
     "scope_limit": "It validates only the declared contract of the loop on fixtures; it does not export source notes or private bodies, grant source/doctrine edits, global-promotion, live work log mutation, or publishing-scope decision, make external model access, prove correctness, or claim private-system equivalence.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.voice_to_doctrine_self_improvement_loop run --input fixtures/first_wave/voice_to_doctrine_self_improvement_loop/input --out receipts/first_wave/voice_to_doctrine_self_improvement_loop",
     "tags": [
      "agent-entry",
      "architecture",
      "navigation"
     ],
     "links_to": [
      {
       "component_id": "pattern_assimilation_step",
       "label": "Pattern Assimilation Step",
       "relative_href": "docs/components.html#component-pattern_assimilation_step"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/voice_to_doctrine_self_improvement_loop.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1138
    },
    {
     "id": "cognitive_operator_registry",
     "label": "Cognitive Operator Registry",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-cognitive_operator_registry",
     "summary_line": "Checks the catalog of named thinking-moves so each is fully described and backed by evidence.",
     "what_it_does": "This is a checker for the system's catalogue of named thinking-moves (operators like \"reduce competing pressure to one bounded action\" or \"compile a handoff packet when validated work cannot be committed\"). It confirms every operator in the public catalogue is fully described (how it is triggered, used, and checked) and that every operator marked active carries a real result record proving it once changed a live decision, while rejecting any operator that claims to speak with the owner's voice or overreaches into \"ready to launch.\" It matters because it shows the system treats reasoning itself as inspectable typed system instead of ad-hoc prompt lore.",
     "scope_limit": "It validates only the declared public registry contract and copied source bodies; it never becomes registry source authority, mutates operators, proves operator correctness, exposes source notes, or authorizes launch, external model access, or any whole-system-correctness claim.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.cognitive_operator_registry run --input fixtures/first_wave/cognitive_operator_registry/input --out /tmp/cognitive_operator_registry_out",
     "tags": [
      "architecture",
      "navigation",
      "doctrine"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.cognitive_operator_registry"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1246
    },
    {
     "id": "routing_anti_patterns_registry",
     "label": "Routing Anti Patterns Registry",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-routing_anti_patterns_registry",
     "summary_line": "Indexes the navigation mistakes agents repeat and guards the public list.",
     "what_it_does": "This is a checker for the system's public list of navigation mistakes agents keep making, such as grepping before asking the kernel for a route or sending work to a bridge before scope is chosen. It confirms each anti-pattern row has a stable id and explanation, rejects duplicate or body-leaking rows, and proves the public bundle carries the actual source registry body copied byte-for-byte instead of a synthetic paraphrase.",
     "scope_limit": "It validates only the declared public routing anti-pattern registry contract and copied source body; it never becomes route source authority, mutates routes, exposes private routing notes, calls providers, authorizes launch, or proves whole-system correctness.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.routing_anti_patterns_registry run --input fixtures/first_wave/routing_anti_patterns_registry/input --out /tmp/routing_anti_patterns_registry_out",
     "tags": [
      "architecture",
      "navigation",
      "doctrine"
     ],
     "links_to": [
      {
       "component_id": "navigation_hologram_route_plane",
       "label": "Navigation Hologram Route Plane",
       "relative_href": "docs/components.html#component-navigation_hologram_route_plane"
      },
      {
       "component_id": "agent_route_observability_runtime",
       "label": "Agent Route Observability Runtime",
       "relative_href": "docs/components.html#component-agent_route_observability_runtime"
      },
      {
       "component_id": "cold_reader_route_map",
       "label": "Cold Reader Route Map",
       "relative_href": "docs/components.html#component-cold_reader_route_map"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/routing_anti_patterns_registry.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 987
    },
    {
     "id": "doctrine_fact_claim_audit",
     "label": "Doctrine Fact Claim Audit",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-doctrine_fact_claim_audit",
     "summary_line": "Checks that public fact rows state the right count and point at live, anchored code.",
     "what_it_does": "Checks that public fact rows state the expected count, point at live copied code loci, preserve anchors, and only reference facts that exist in the fixture DAG.",
     "scope_limit": "fact assertion, code-loci, and DAG fixture truth gate only; it is not a comprehension engine and does not establish a minimum read graph",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm doctrine-fact-claim-audit run --input fixtures/first_wave/doctrine_fact_claim_audit/input --out receipts/first_wave/doctrine_fact_claim_audit",
     "tags": [
      "architecture",
      "navigation",
      "doctrine"
     ],
     "links_to": [
      {
       "component_id": "engine_room_demo",
       "label": "Engine Room Demo",
       "relative_href": "docs/components.html#component-engine_room_demo"
      },
      {
       "component_id": "self_ignorance_coverage_ledger",
       "label": "Self Ignorance Coverage Ledger",
       "relative_href": "docs/components.html#component-self_ignorance_coverage_ledger"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/doctrine_fact_claim_audit.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 560
    },
    {
     "id": "self_ignorance_coverage_ledger",
     "label": "Self Ignorance Coverage Ledger",
     "family_id": "architecture_and_navigation",
     "family_label": "Architecture & navigation",
     "relative_href": "docs/components.html#component-self_ignorance_coverage_ledger",
     "summary_line": "Compares expected against built entities to report known coverage gaps.",
     "what_it_does": "Compares declared Kind Atlas expectations against materialized entities and reports the known coverage debt that falls out of that public fixture comparison.",
     "scope_limit": "known Kind Atlas coverage debt projection only; it does not claim literal unknown-unknown omniscience or absence proof",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm self-ignorance-coverage-ledger run --input fixtures/first_wave/self_ignorance_coverage_ledger/input --out receipts/first_wave/self_ignorance_coverage_ledger",
     "tags": [
      "architecture",
      "navigation",
      "doctrine"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/self_ignorance_coverage_ledger.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 546
    },
    {
     "id": "proof_diagnostic_evidence_spine",
     "label": "Proof Diagnostic Evidence Spine",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-proof_diagnostic_evidence_spine",
     "summary_line": "Sorts proof-pipeline checks into accepted or rejected without inflating a pass.",
     "what_it_does": "An evidence checkpoint that sits in front of formal-proof work. It reads the diagnostic records left by earlier proof-pipeline steps and writes a \"diagnostic board\" listing which checks were accepted, which were rejected, and why. The board shows exactly what evidence was kept, and refuses to let raw model output, a stale record, or a merely-passing check get inflated into a claim that the math is actually correct. It only arranges and judges existing records; it never runs a proof checker itself.",
     "scope_limit": "It records proof/evidence diagnostics over existing result record references only. It does not run Lean, use external model services, expose proof bodies, turn a passing check into formal-proof or theorem authority, prove runtime or whole-system correctness, authorize later components, certify public launch, authorize public sharing or recipient work, or establish secret export.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm proof-diagnostic-evidence-spine run --input fixtures/first_wave/proof_diagnostic_evidence_spine/input --out receipts/first_wave/proof_diagnostic_evidence_spine --card",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "formal_math_verifier_trace_repair_loop",
       "label": "Formal Math Verifier Trace Repair Loop",
       "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "component_id": "formal_evidence_cell_anchor_resolver",
       "label": "Formal Evidence Cell Anchor Resolver",
       "relative_href": "docs/components.html#component-formal_evidence_cell_anchor_resolver"
      },
      {
       "component_id": "formal_math_lean_proof_witness",
       "label": "Formal Math Lean Proof Witness",
       "relative_href": "docs/components.html#component-formal_math_lean_proof_witness"
      },
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      },
      {
       "component_id": "ring2_premise_retrieval_precision_recall_harness",
       "label": "Ring2 Premise Retrieval Precision Recall Harness",
       "relative_href": "docs/components.html#component-ring2_premise_retrieval_precision_recall_harness"
      },
      {
       "component_id": "target_shape_tactic_routing_gate",
       "label": "Target Shape Tactic Routing Gate",
       "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.proof_diagnostic_evidence_spine"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1173
    },
    {
     "id": "formal_math_readiness_gate",
     "label": "Formal Math Readiness Gate",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-formal_math_readiness_gate",
     "summary_line": "Reads declared math setups and lists which proof tactics may be attempted versus blocked.",
     "what_it_does": "Before anyone tries to prove a math theorem with the Lean prover, this gate reads simple description files that declare what a math setup is supposed to have \u2014 which math library is claimed to be present, which proof tactics are reported as already probed, which lemmas may be looked up, and which limits apply to the text budgets handed to AI providers \u2014 and writes a plain checklist of what is allowed to be attempted versus blocked. It works only from those declared description files; it does not inspect the real toolchain or run anything. Its guards keep the claims honest and checkable: it refuses to let a library be marked available unless a probe result backs that up, blocks routing a proof tactic that was not probed, and refuses to let any real proof text sneak into the lemma-lookup tables or provider budgets.",
     "scope_limit": "It only validates and projects declared readiness metadata; it does not run Lean/Lake, inspect the real toolchain, use external model services, prove any theorem correct, produce benchmark claims, or authorize Mathlib-dependent proof attempts.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm formal-math-readiness-gate run --input fixtures/first_wave/formal_math_readiness_gate/input --out receipts/first_wave/formal_math_readiness_gate",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "formal_math_lean_proof_witness",
       "label": "Formal Math Lean Proof Witness",
       "relative_href": "docs/components.html#component-formal_math_lean_proof_witness"
      },
      {
       "component_id": "macro_projection_import_protocol",
       "label": "Source Projection Import Protocol",
       "relative_href": "docs/components.html#component-macro_projection_import_protocol"
      },
      {
       "component_id": "batch4_proof_authority_runtime",
       "label": "Proof / Control / Runtime Import Bundle",
       "relative_href": "docs/components.html#component-batch4_proof_authority_runtime"
      },
      {
       "component_id": "provider_context_recipe_budget_policy",
       "label": "Provider Context Recipe Budget Policy",
       "relative_href": "docs/components.html#component-provider_context_recipe_budget_policy"
      },
      {
       "component_id": "tactic_portfolio_availability_probe",
       "label": "Tactic Portfolio Availability Probe",
       "relative_href": "docs/components.html#component-tactic_portfolio_availability_probe"
      },
      {
       "component_id": "target_shape_tactic_routing_gate",
       "label": "Target Shape Tactic Routing Gate",
       "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_readiness_gate.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1344
    },
    {
     "id": "corpus_readiness_mathlib_absence_gate",
     "label": "Corpus Readiness Mathlib Absence Gate",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-corpus_readiness_mathlib_absence_gate",
     "summary_line": "Runs the real Lean toolchain to confirm the math library is absent, then gates proof tasks.",
     "what_it_does": "It reads a recorded readiness report from a Lean math toolchain run and makes one fact inspectable: when the report was captured, the Mathlib library was not importable (its import probe failed). From that, it lists which math corpora are absent or usable only for translation smoke tests, and which downstream tasks must be blocked before any Mathlib-dependent proof work is attempted. It also re-checks that the recorded source files match their recorded SHA-256 digests and that no proof bodies, provider outputs, or non-public paths leaked into the public output. The result shows exactly where the proof pipeline draws a hard \"not ready, do not proceed\" line, with provenance, instead of quietly assuming the environment is fine.",
     "scope_limit": "It only projects and gate-checks recorded corpus/toolchain readiness accounting, re-verifies recorded source digests and leakage guards, and runs a bounded Lean/Lake import probe when a toolchain is present. It does not run a full Lake build, prove formal-result correctness, claim Mathlib is available beyond the probe result, benchmark corpora, score model performance, use external model services, or include launch operations or public sharing.",
     "evidence": {
      "kind": "External tool run",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run --input fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input --out receipts/first_wave/corpus_readiness_mathlib_absence_gate",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      },
      {
       "component_id": "tactic_portfolio_availability_probe",
       "label": "Tactic Portfolio Availability Probe",
       "relative_href": "docs/components.html#component-tactic_portfolio_availability_probe"
      },
      {
       "component_id": "undeclared_library_prior_symbol_classifier",
       "label": "Undeclared Library Prior Symbol Classifier",
       "relative_href": "docs/components.html#component-undeclared_library_prior_symbol_classifier"
      },
      {
       "component_id": "formal_math_lean_proof_witness",
       "label": "Formal Math Lean Proof Witness",
       "relative_href": "docs/components.html#component-formal_math_lean_proof_witness"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/corpus_readiness_mathlib_absence.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1539
    },
    {
     "id": "mathematical_strategy_atlas_hypothesis_scorer",
     "label": "Mathematical Strategy Atlas Hypothesis Scorer",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer",
     "summary_line": "Picks a first-guess proof strategy from a problem's tags and flags any it cannot map.",
     "what_it_does": "Before any proof is attempted, this component looks at a math problem's feature tags and writes down its first-guess strategy (for example, \"this looks like an if-and-only-if, so split it both ways\"), and flags anything it cannot map as an explicit \"no strategy matched\" instead of a silent failure. The chosen opening move, why it was chosen, and the cases it could not map are all recorded in machine-readable result records.",
     "scope_limit": "It only projects pre-oracle strategy-hypothesis and retrieval mechanics; it does not run Lean/Lake, prove theorems, establish domain or formal-result correctness, reveal oracle labels, expose proof bodies, use external model services, tune on test answers, or include launch operations.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.mathematical_strategy_atlas_hypothesis_scorer run --input fixtures/first_wave/mathematical_strategy_atlas_hypothesis_scorer/input --out receipts/first_wave/mathematical_strategy_atlas_hypothesis_scorer",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mathematical_strategy_atlas.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1096
    },
    {
     "id": "tactic_portfolio_availability_probe",
     "label": "Tactic Portfolio Availability Probe",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-tactic_portfolio_availability_probe",
     "summary_line": "Maps which Lean proof tactics a recorded run marked usable before any code relies on one.",
     "what_it_does": "It turns one captured Lean run's results into an inspectable list of which proof shortcuts (\"tactics\" like `rfl`, `simp`, `omega`, `aesop`) were recorded as compiling, showing at a glance which are usable and which are off before anything treats a tactic as available. In this fixture seven tactics are marked usable and `aesop` is marked failed (its recorded run hit a missing-Mathlib error). The tool reads pre-recorded status rows and checks them for honesty; it does not run Lean itself.",
     "scope_limit": "It only projects and validates which tactics were recorded as compiling in one captured environment; it does not run Lean/Lake at all, prove any goal, certify domain-level conclusions, use external model services, claim benchmark performance, or include launch operations.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.tactic_portfolio_availability_probe run --input fixtures/first_wave/tactic_portfolio_availability_probe/input --out receipts/first_wave/tactic_portfolio_availability_probe --acceptance-out receipts/acceptance/first_wave/tactic_portfolio_availability_probe_fixture_acceptance.json",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "corpus_readiness_mathlib_absence_gate",
       "label": "Corpus Readiness Mathlib Absence Gate",
       "relative_href": "docs/components.html#component-corpus_readiness_mathlib_absence_gate"
      },
      {
       "component_id": "formal_math_verifier_trace_repair_loop",
       "label": "Formal Math Verifier Trace Repair Loop",
       "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "component_id": "target_shape_tactic_routing_gate",
       "label": "Target Shape Tactic Routing Gate",
       "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate"
      },
      {
       "component_id": "undeclared_library_prior_symbol_classifier",
       "label": "Undeclared Library Prior Symbol Classifier",
       "relative_href": "docs/components.html#component-undeclared_library_prior_symbol_classifier"
      },
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tactic_portfolio_availability.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1218
    },
    {
     "id": "target_shape_tactic_routing_gate",
     "label": "Target Shape Tactic Routing Gate",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate",
     "summary_line": "Records an allow-or-reject decision and reason for each proof tactic before any proof runs.",
     "what_it_does": "Before a proof is attempted, this component checks a list of candidate proof tactics for a given goal and writes down an allow-or-reject decision, with a plain reason, for each one. Rejections fall into three kinds: the tactic isn't actually available in the declared environment, it was never listed in the environment's tested set of tactics, or it simply doesn't fit the kind of goal being proved. The resulting record shows, tactic by tactic, exactly what was admitted or blocked and why, instead of an opaque \"we tried these\" claim. It only inspects and records the routing decision over references that already exist; it never runs a prover or proves anything itself.",
     "scope_limit": "It only inspects and records the projection mechanics of pre-execution tactic-routing references \u2014 emitting per-tactic allow/reject decisions with reasons. It does not run Lean/Lake, does not establish or judge the correctness of any goal, emits no proof bodies, makes no external model access, performs no post-execution route selection, reports no benchmark claims or maturity, and excludes launch.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.cli target-shape-tactic-routing-gate run-routing-bundle --input examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle --out receipts/runtime_shell/demo_project/organs/target_shape_tactic_routing_gate",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "formal_math_verifier_trace_repair_loop",
       "label": "Formal Math Verifier Trace Repair Loop",
       "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "component_id": "formal_evidence_cell_anchor_resolver",
       "label": "Formal Evidence Cell Anchor Resolver",
       "relative_href": "docs/components.html#component-formal_evidence_cell_anchor_resolver"
      },
      {
       "component_id": "proof_diagnostic_evidence_spine",
       "label": "Proof Diagnostic Evidence Spine",
       "relative_href": "docs/components.html#component-proof_diagnostic_evidence_spine"
      },
      {
       "component_id": "tactic_portfolio_availability_probe",
       "label": "Tactic Portfolio Availability Probe",
       "relative_href": "docs/components.html#component-tactic_portfolio_availability_probe"
      },
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/target_shape_tactic_routing.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1474
    },
    {
     "id": "lean_std_premise_index",
     "label": "Lean Std Premise Index",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-lean_std_premise_index",
     "summary_line": "Lists a fixed catalog of public Lean building blocks and confirms none hides proof text or test answers.",
     "what_it_does": "Presents a small, fixed catalog of Lean standard-library \"premises\" (named building blocks like facts about numbers, booleans, lists, and basic logic) along with the labels and source references that say where each one comes from. It shows what proof ingredients are on the table and that they were copied from public Lean sources, with no hidden proof text, no Mathlib, and nothing that secretly gives away test answers. It only checks and displays this catalog; it does not run Lean or prove anything.",
     "scope_limit": "It only validates the projection of premise metadata and copied source bodies; it does not run Lean or Lake, prove any theorem correct, expose proof bodies or oracle-needed ids, use external model services, produce benchmark claims, or include launch operations.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.lean_std_premise_index run --input fixtures/first_wave/lean_std_premise_index/input --out receipts/first_wave/lean_std_premise_index --acceptance-out receipts/acceptance/first_wave/lean_std_premise_index_fixture_acceptance.json",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "formal_math_verifier_trace_repair_loop",
       "label": "Formal Math Verifier Trace Repair Loop",
       "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      },
      {
       "component_id": "mathematical_strategy_atlas_hypothesis_scorer",
       "label": "Mathematical Strategy Atlas Hypothesis Scorer",
       "relative_href": "docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer"
      },
      {
       "component_id": "undeclared_library_prior_symbol_classifier",
       "label": "Undeclared Library Prior Symbol Classifier",
       "relative_href": "docs/components.html#component-undeclared_library_prior_symbol_classifier"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/lean_std_premise_index.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1170
    },
    {
     "id": "formal_math_premise_retrieval",
     "label": "Formal Math Premise Retrieval",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-formal_math_premise_retrieval",
     "summary_line": "Shows which lemmas a plain search surfaces per query, and never leaks proof text or answer keys.",
     "what_it_does": "Given a small copied set of Lean/Std math-lemma descriptions plus some search queries, this component shows which lemmas a plain term-matching search would surface for each query, how it keeps each assembled context within a fixed size budget, and that it never exposes proof text or \"answer-key\" hints (the premise ids a solver would only get to see after the fact). On the bundled first-wave fixture, the result record shows the retrieval mechanism working in miniature alongside deliberate bad inputs (a leaked proof body, leaked answer-key ids, a budget overflow, an attempt to peek at test answers, and an unknown strategy) that the component catches; the leak and budget guards actually fire.",
     "scope_limit": "It only checks that public retrieval metadata is internally coherent, term-scored over a copied index, budget-bounded, and leakage-clean; it does not run Lean/Lake, use external model services, prove any theorem or its own correctness, claim benchmark performance, or include launch operations.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python -m microcosm_core.organs.formal_math_premise_retrieval run --input fixtures/first_wave/formal_math_premise_retrieval/input --out receipts/first_wave/formal_math_premise_retrieval",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "formal_math_lean_proof_witness",
       "label": "Formal Math Lean Proof Witness",
       "relative_href": "docs/components.html#component-formal_math_lean_proof_witness"
      },
      {
       "component_id": "formal_math_verifier_trace_repair_loop",
       "label": "Formal Math Verifier Trace Repair Loop",
       "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "component_id": "lean_std_premise_index",
       "label": "Lean Std Premise Index",
       "relative_href": "docs/components.html#component-lean_std_premise_index"
      },
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      },
      {
       "component_id": "mathematical_strategy_atlas_hypothesis_scorer",
       "label": "Mathematical Strategy Atlas Hypothesis Scorer",
       "relative_href": "docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer"
      },
      {
       "component_id": "ring2_premise_retrieval_precision_recall_harness",
       "label": "Ring2 Premise Retrieval Precision Recall Harness",
       "relative_href": "docs/components.html#component-ring2_premise_retrieval_precision_recall_harness"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_premise_retrieval.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1321
    },
    {
     "id": "formal_math_verifier_trace_repair_loop",
     "label": "Formal Math Verifier Trace Repair Loop",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop",
     "summary_line": "Replays how a proof lab turns verifier failures into fixes, with no promotion without a fresh re-run.",
     "what_it_does": "It replays how a proof-lab turns a verifier's failure feedback into a teaching signal, working from copied (non-secret) run data so the failure categories, the repair action tied to each failure, and the rule that nothing gets promoted without a fresh re-run result record are all inspectable. Actual proofs, answer keys, and model outputs are deliberately kept out, so the whole correction loop is visible without exposing any of them.",
     "scope_limit": "It demonstrates control-loop projection mechanics over copied Ring2 run rows only; it does not run Lean/Lake, use external model services, expose proof bodies or oracle premise ids, treat human or provider advice as correctness, prove any theorem, or include launch operations.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm formal-math-verifier-trace-repair-loop run-loop-bundle --input examples/formal_math_verifier_trace_repair_loop/exported_verifier_trace_repair_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_verifier_trace_repair_loop",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "formal_evidence_cell_anchor_resolver",
       "label": "Formal Evidence Cell Anchor Resolver",
       "relative_href": "docs/components.html#component-formal_evidence_cell_anchor_resolver"
      },
      {
       "component_id": "proof_diagnostic_evidence_spine",
       "label": "Proof Diagnostic Evidence Spine",
       "relative_href": "docs/components.html#component-proof_diagnostic_evidence_spine"
      },
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      },
      {
       "component_id": "target_shape_tactic_routing_gate",
       "label": "Target Shape Tactic Routing Gate",
       "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate"
      },
      {
       "component_id": "verifier_lab_execution_spine",
       "label": "Verifier Lab Execution Spine",
       "relative_href": "docs/components.html#component-verifier_lab_execution_spine"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.formal_math_verifier_trace_repair_loop"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1102
    },
    {
     "id": "formal_evidence_cell_anchor_resolver",
     "label": "Formal Evidence Cell Anchor Resolver",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-formal_evidence_cell_anchor_resolver",
     "summary_line": "Resolves each proof-flavored math claim to named evidence and flags ones that overreach or lack backing.",
     "what_it_does": "When the project's writeups make proof-flavored claims about its formal-math work, this component checks each claim against a named piece of recorded evidence and the public reference files in the repo, confirms the claim is no stronger than that evidence allows, and flags claims that have no backing or that overreach. The record shows which claims are anchored to evidence and which are just words, while proof contents and any private file references are kept out of the output.",
     "scope_limit": "It validates claim-to-evidence anchoring mechanics only: claim-to-cell resolution, source-anchor presence, permitted claim strength, copied-source-module digest checks, and leakage refusals. It does not run Lean/Lake, certify theorem or mathematical correctness, expose proof bodies or non-public source refs, use external model services, or include launch operations/public sharing.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm formal-evidence-cell-anchor-resolver run-anchor-bundle --input examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle --out receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "formal_math_verifier_trace_repair_loop",
       "label": "Formal Math Verifier Trace Repair Loop",
       "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "component_id": "proof_diagnostic_evidence_spine",
       "label": "Proof Diagnostic Evidence Spine",
       "relative_href": "docs/components.html#component-proof_diagnostic_evidence_spine"
      },
      {
       "component_id": "target_shape_tactic_routing_gate",
       "label": "Target Shape Tactic Routing Gate",
       "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_evidence_cell_anchor_resolver.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1250
    },
    {
     "id": "undeclared_library_prior_symbol_classifier",
     "label": "Undeclared Library Prior Symbol Classifier",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-undeclared_library_prior_symbol_classifier",
     "summary_line": "Detects when a checked Lean proof cites a library result outside its approved set.",
     "what_it_does": "It checks whether a Lean proof cites a library result (a lemma or definition) that was never on its approved list. Even after a prover accepts a proof, that proof can still quietly use a library symbol it wasn't allowed to, and this component surfaces those out-of-bounds uses as an inspectable record that names each symbol and where the rule came from. It matters because \"the proof checked\" does not mean \"the proof stayed within the allowed set of building blocks,\" and this makes that gap visible without ever reading the proof's own steps.",
     "scope_limit": "It only projects the symbol-boundary classification mechanic over copied Lean/Std premise rows and pre-extracted symbol observations; it does not read proof source, run Lean or Lake, prove formal-result correctness, treat the whole standard library as an implicit allowlist, claim Mathlib availability, use external model services, or include launch operations.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.undeclared_library_prior_symbol_classifier run --input fixtures/first_wave/undeclared_library_prior_symbol_classifier/input --out receipts/first_wave/undeclared_library_prior_symbol_classifier",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "corpus_readiness_mathlib_absence_gate",
       "label": "Corpus Readiness Mathlib Absence Gate",
       "relative_href": "docs/components.html#component-corpus_readiness_mathlib_absence_gate"
      },
      {
       "component_id": "tactic_portfolio_availability_probe",
       "label": "Tactic Portfolio Availability Probe",
       "relative_href": "docs/components.html#component-tactic_portfolio_availability_probe"
      },
      {
       "component_id": "provider_context_recipe_budget_policy",
       "label": "Provider Context Recipe Budget Policy",
       "relative_href": "docs/components.html#component-provider_context_recipe_budget_policy"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/undeclared_library_prior_classifier.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1274
    },
    {
     "id": "ring2_premise_retrieval_precision_recall_harness",
     "label": "Ring2 Premise Retrieval Precision Recall Harness",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-ring2_premise_retrieval_precision_recall_harness",
     "summary_line": "Scores how much proof support a premise search found, problem by problem.",
     "what_it_does": "When a math-proving system searches for the supporting facts (\"premises\") a proof will need, this component replays saved records of that search and reports, problem by problem, how much of the needed support the search actually turned up. Per problem it labels one of four outcomes: the search found everything needed and the proof went through; it found everything needed but the proof still failed; it found only some of the needed support; or it found none of it. Separating \"the proof failed even though every needed premise was found\" from \"the proof failed because the search missed a needed premise\" shows which part to fix. It also runs as a regression guard that refuses inputs which try to slip the answer into the search itself (the known-correct premises planted in the ranked results), leak proof text, tune on the test answers, or claim more than retrieval-quality numbers.",
     "scope_limit": "These are after-the-fact retrieval-attribution labels and precision/recall counts over copied run records only. The component does not run Lean or Lake, call any provider, expose proof bodies, tune on test answers, claim benchmark performance, prove formal-result correctness, or include launch operations, and its labels are explicitly forbidden from flowing into provider context. The aggregate numbers describe only the copied fixture/bundle replayed, not any benchmark claims.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.ring2_premise_retrieval_precision_recall_harness run --input fixtures/first_wave/ring2_premise_retrieval_precision_recall_harness/input --out receipts/first_wave/ring2_premise_retrieval_precision_recall_harness",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "mathematical_strategy_atlas_hypothesis_scorer",
       "label": "Mathematical Strategy Atlas Hypothesis Scorer",
       "relative_href": "docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer"
      },
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/ring2_premise_precision_recall.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1751
    },
    {
     "id": "formal_math_lean_proof_witness",
     "label": "Formal Math Lean Proof Witness",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-formal_math_lean_proof_witness",
     "summary_line": "Compiles a tiny Lean example with the real prover and records whether it built, leaking no proof text.",
     "what_it_does": "This takes a small, purpose-built Lean math file (a handful of toy theorems written just for this demo) and a tiny project setup, copies them into a throwaway scratch folder, and actually tries to compile them with the installed Lean theorem-prover and its Lake build tool. It then writes down exactly what happened: whether the Lean and Lake tools were found, whether the build passed, fingerprints (hashes) of the source files, the names of the theorems it defined, and how many lines each file had. It also deliberately feeds in a broken proof and a couple of off-limits files to confirm they get rejected. The point is to show real proof-checking machinery run on a small example, while keeping the written records honest and redacted: no proof text or internal logs leak out, and it states plainly that this is a narrow toy check on one fixture, not a general-purpose proof system.",
     "scope_limit": "It authorizes only a witness that a tiny declared public toy proof compiled under the locally installed Lean/Lake toolchain in a temporary workspace, plus confirmation that its leakage guardrails fired. It excludes Mathlib/Aesop/Batteries-dependent or general proof or theorem-program authority, external model access, private proof import, benchmark or performance claims, whole-system correctness, or any launch, hosted deployment, or public sharing.",
     "evidence": {
      "kind": "External tool run",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.formal_math_lean_proof_witness run --input fixtures/first_wave/formal_math_lean_proof_witness/input --out receipts/first_wave/formal_math_lean_proof_witness",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "formal_math_premise_retrieval",
       "label": "Formal Math Premise Retrieval",
       "relative_href": "docs/components.html#component-formal_math_premise_retrieval"
      },
      {
       "component_id": "formal_math_readiness_gate",
       "label": "Formal Math Readiness Gate",
       "relative_href": "docs/components.html#component-formal_math_readiness_gate"
      },
      {
       "component_id": "proof_diagnostic_evidence_spine",
       "label": "Proof Diagnostic Evidence Spine",
       "relative_href": "docs/components.html#component-proof_diagnostic_evidence_spine"
      },
      {
       "component_id": "verifier_lab_kernel",
       "label": "Verifier Lab Kernel",
       "relative_href": "docs/components.html#component-verifier_lab_kernel"
      },
      {
       "component_id": "verifier_lab_execution_spine",
       "label": "Verifier Lab Execution Spine",
       "relative_href": "docs/components.html#component-verifier_lab_execution_spine"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_lean_proof_witness.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1678
    },
    {
     "id": "verifier_lab_kernel",
     "label": "Verifier Lab Kernel",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-verifier_lab_kernel",
     "summary_line": "Folds nine proof checks into one report labeling each line by which source actually backs it.",
     "what_it_does": "This assembly point for the Lean/proof toolkit runs nine smaller formal-math pipeline checkers together and folds their results into one leak-proof report that labels every line by where it came from: a Lean verifier, an answer-key (oracle) comparator, an AI suggestion, a retrieval miss, or a row thrown out for breaking the rules. The report carries only references, hashes, counts, and verdicts, never the actual proof text, AI output, or answer-key bodies. One result record shows which claims a Lean verifier actually backed versus which are just hints or were rejected, instead of leaving a pile of separate outputs to be taken on faith.",
     "scope_limit": "It validates the declared public contract shape of the proof packet and component result records only; it does not establish anything correct, count oracle/provider output as forward proof success, import private or Mathlib-dependent proof bodies, use external model services, change source files, or claim benchmark solve rates, launch, or maturity.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.verifier_lab_kernel run --input fixtures/first_wave/verifier_lab_kernel/input --out receipts/first_wave/verifier_lab_kernel",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "corpus_readiness_mathlib_absence_gate",
       "label": "Corpus Readiness Mathlib Absence Gate",
       "relative_href": "docs/components.html#component-corpus_readiness_mathlib_absence_gate"
      },
      {
       "component_id": "lean_std_premise_index",
       "label": "Lean Std Premise Index",
       "relative_href": "docs/components.html#component-lean_std_premise_index"
      },
      {
       "component_id": "formal_math_premise_retrieval",
       "label": "Formal Math Premise Retrieval",
       "relative_href": "docs/components.html#component-formal_math_premise_retrieval"
      },
      {
       "component_id": "tactic_portfolio_availability_probe",
       "label": "Tactic Portfolio Availability Probe",
       "relative_href": "docs/components.html#component-tactic_portfolio_availability_probe"
      },
      {
       "component_id": "target_shape_tactic_routing_gate",
       "label": "Target Shape Tactic Routing Gate",
       "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate"
      },
      {
       "component_id": "ring2_premise_retrieval_precision_recall_harness",
       "label": "Ring2 Premise Retrieval Precision Recall Harness",
       "relative_href": "docs/components.html#component-ring2_premise_retrieval_precision_recall_harness"
      },
      {
       "component_id": "formal_math_verifier_trace_repair_loop",
       "label": "Formal Math Verifier Trace Repair Loop",
       "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "component_id": "proof_diagnostic_evidence_spine",
       "label": "Proof Diagnostic Evidence Spine",
       "relative_href": "docs/components.html#component-proof_diagnostic_evidence_spine"
      },
      {
       "component_id": "formal_math_lean_proof_witness",
       "label": "Formal Math Lean Proof Witness",
       "relative_href": "docs/components.html#component-formal_math_lean_proof_witness"
      },
      {
       "component_id": "verifier_lab_execution_spine",
       "label": "Verifier Lab Execution Spine",
       "relative_href": "docs/components.html#component-verifier_lab_execution_spine"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_kernel.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1280
    },
    {
     "id": "verifier_lab_execution_spine",
     "label": "Verifier Lab Execution Spine",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-verifier_lab_execution_spine",
     "summary_line": "Runs Lean on small bounded proof attempts in a temp copy and records what passed or failed.",
     "what_it_does": "It copies a small public Lean math project into a throwaway temporary workspace and actually runs the Lean/Lake checker on a handful of small, bounded proof-step attempts the tool builds itself. It then writes down what the checker said: which attempts were accepted, which failed, and the failure category for each, plus safety counts (for example, how many attempts tried to sneak in forbidden content and were rejected). The pass/fail facts and the safety counts are readable directly, while the tool never shows the underlying proof text, never calls any outside service, and never modifies the original project or any existing source files.",
     "scope_limit": "It is a tool-witness result record for bounded public Lean transition rows only: it does not establish general proof authority, count oracle/provider output as proof, export proof bodies or tactic scripts, use external model services, change source files, claim benchmark solve-rates, or include launch operations/public sharing.",
     "evidence": {
      "kind": "External tool run",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.verifier_lab_execution_spine run --input fixtures/first_wave/verifier_lab_execution_spine/input --out .microcosm/verifier_lab_execution_spine",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "certificate_kernel_execution_lab",
       "label": "Certificate Kernel Execution Lab",
       "relative_href": "docs/components.html#component-certificate_kernel_execution_lab"
      },
      {
       "component_id": "engine_room_demo",
       "label": "Engine Room Demo",
       "relative_href": "docs/components.html#component-engine_room_demo"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_execution_spine.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1286
    },
    {
     "id": "certificate_kernel_execution_lab",
     "label": "Certificate Kernel Execution Lab",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-certificate_kernel_execution_lab",
     "summary_line": "Runs the Lean verifier over a small public proof project and reports which rows it accepted.",
     "what_it_does": "It builds a small public Lean/Lake project, then runs the Lean verifier over declared \"transition\" rows that reference a set of generated \"certificate\" declarations, and writes a structured result record showing which rows the verifier accepted, which it left unresolved or rejected, plus the exact build command, return code, and file hashes. The result record is honest, inspectable evidence that a real Lean verifier ran on public material, with proof text, provider/oracle output, and private source deliberately excluded from the result record and that exclusion recorded (not silently dropped) rather than passed off as evidence.",
     "scope_limit": "It is a local tool-witness that the declared public fixture rows compiled and were adjudicated by the local Lean verifier; it excludes general proof authority, count oracle/provider output as proof, expose proof text, change source files, claim a benchmark solve-rate, or include launch operations.",
     "evidence": {
      "kind": "External tool run",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "microcosm certificate-kernel-execution-lab run --input fixtures/first_wave/certificate_kernel_execution_lab/input --out receipts/first_wave/certificate_kernel_execution_lab",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/certificate_kernel_execution_lab.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1233
    },
    {
     "id": "batch4_proof_authority_runtime",
     "label": "Proof / Control / Runtime Import Bundle",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-batch4_proof_authority_runtime",
     "summary_line": "Checks fourteen proof, control, and runtime parts as one unit that rejects every overclaim.",
     "what_it_does": "This bundle imports the Set-4 proof/control/runtime source modules and checks them as one inspectable unit. It surfaces the 14 mechanisms, the copied module manifest, the digest/anchor evidence, and the negative cases that reject proof, benchmark, launch, runtime, and non-public-state overclaims without exposing source bodies in result records.",
     "scope_limit": "It validates only a public source-open bundle and bounded negative fixtures; it is not an Erdos #257 solution, not benchmark evidence, not public sharing or launch-scope decision, not live Codex/browser/runtime authority, and not private-system equivalence.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch4-proof-authority-runtime run --input fixtures/first_wave/batch4_proof_authority_runtime/input --out receipts/first_wave/batch4_proof_authority_runtime --acceptance-out receipts/acceptance/first_wave/batch4_proof_authority_runtime_fixture_acceptance.json",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch4_proof_authority_runtime.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1006
    },
    {
     "id": "proof_derived_governed_mutation_authorization",
     "label": "Proof Derived Governed Mutation Authorization",
     "family_id": "formal_math_and_proof",
     "family_label": "Formal math & proof",
     "relative_href": "docs/components.html#component-proof_derived_governed_mutation_authorization",
     "summary_line": "Checks a synthetic change-authorization record for its proof-and-approval chain, bound to a real commit.",
     "what_it_does": "Replays a make-believe example of \"should this change be allowed to run?\" and shows, step by step, why each proposed action was permitted. All three actions (a look-only inspection, a small config write, and an undo of that write) had to carry proof evidence and two visible policy approvals before anything was admitted; on top of that, the two actions that actually change something (the config write and the undo) also had to show a logged record of the change and a matching undo result record. Just holding a password or account secret is never treated as permission, and nothing here touches a real account or makes any real change.",
     "scope_limit": "It validates only a declared, synthetic governed-mutation contract and excludes live cloud/account action, standing account secrets, source or irreversible mutation, policy-after-execution, hidden votes, external model access, benchmark-score claims, or launch.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.proof_derived_governed_mutation_authorization run --input fixtures/first_wave/proof_derived_governed_mutation_authorization/input --out receipts/first_wave/proof_derived_governed_mutation_authorization --acceptance-out receipts/acceptance/first_wave/proof_derived_governed_mutation_authorization_fixture_acceptance.json",
     "tags": [
      "formal-methods",
      "theorem-proving",
      "lean"
     ],
     "links_to": [
      {
       "component_id": "batch12_release_claim_language_gate",
       "label": "Release Public Wording Gate",
       "relative_href": "docs/components.html#component-batch12_release_claim_language_gate"
      },
      {
       "component_id": "batch4_proof_authority_runtime",
       "label": "Proof / Control / Runtime Import Bundle",
       "relative_href": "docs/components.html#component-batch4_proof_authority_runtime"
      },
      {
       "component_id": "batch8_policy_engines_capsule",
       "label": "Policy Engines Bundle",
       "relative_href": "docs/components.html#component-batch8_policy_engines_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.proof_derived_governed_mutation_authorization"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1419
    },
    {
     "id": "agent_benchmark_integrity_anti_gaming_replay",
     "label": "Agent Benchmark Integrity Anti Gaming Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-agent_benchmark_integrity_anti_gaming_replay",
     "summary_line": "Validates a synthetic benchmark-integrity record and flags the contamination cases it declares.",
     "what_it_does": "Checks a public benchmark-integrity example bundle that contains three copied source pattern provenance bodies under source_artifacts. The component verifies the source-module manifest digests, requires each replay row to cite those copied source artifacts, recomputes pass/quarantine verdicts from contamination, file-access, and locked-evaluator spans, and rejects common gaming attempts such as peeking at hidden answers, training on the test set, exposing the oracle patch, cherry-picking the best of many tries, or asserting a score. It still does not run real bug fixes or claim any benchmark claims.",
     "scope_limit": "It authorizes only bounded public runtime validation over copied source-open pattern provenance bodies and metadata-only benchmark-integrity replay rows; it does not establish any benchmark or SWE-bench score, agent capability, external model service, live-repo mutation, private/oracle/hidden-gold body access, product progress, or launch-scope decision.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm agent-benchmark-integrity-anti-gaming-replay run-benchmark-integrity-bundle --input examples/agent_benchmark_integrity_anti_gaming_replay/exported_benchmark_integrity_bundle --out .microcosm/agent_benchmark_integrity_anti_gaming_replay",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [
      {
       "component_id": "research_replication_rubric_artifact_replay",
       "label": "Research Replication Rubric Artifact Replay",
       "relative_href": "docs/components.html#component-research_replication_rubric_artifact_replay"
      },
      {
       "component_id": "batch10_cold_eval_honesty_capsule",
       "label": "Cold Evaluation Honesty Bundle",
       "relative_href": "docs/components.html#component-batch10_cold_eval_honesty_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1349
    },
    {
     "id": "batch10_cold_eval_honesty_capsule",
     "label": "Cold Evaluation Honesty Bundle",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-batch10_cold_eval_honesty_capsule",
     "summary_line": "Runs a copied route-quality simulator and checks its all-B scorecard against the original code.",
     "what_it_does": "This component imports the real cold_eval.py route-quality simulator as an exact source copy. Running it over a synthetic workspace inspects the all-B scorecard shape, source-module digest evidence, and scope limit checks without exporting body text in result records or turning the fixture into benchmark truth.",
     "scope_limit": "verified cold-eval source body import only, not a live benchmark, navigation truth, source authority, external model access, private-system equivalence, public sharing, or launch-scope decision",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch10-cold-eval-honesty-capsule run --input fixtures/first_wave/batch10_cold_eval_honesty_capsule/input --out receipts/first_wave/batch10_cold_eval_honesty_capsule --acceptance-out receipts/acceptance/first_wave/batch10_cold_eval_honesty_capsule_fixture_acceptance.json",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_cold_eval_honesty_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 915
    },
    {
     "id": "batch8_validator_checker_capsule",
     "label": "Validator Checker Bundle",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-batch8_validator_checker_capsule",
     "summary_line": "Runs the real validator code over public examples so its safety checks stay inspectable.",
     "what_it_does": "This component imports the real idea_microcosm validators.py body as an exact source copy. Running it shows status-policy judging, private-boundary scans, specimen checks, launch-gate checks, and the validate entrypoint exercised against public fixtures and negative cases.",
     "scope_limit": "It validates only the imported validators.py source body and its checker membrane. It does not claim source authority, a full validator-suite proof, private-system equivalence, launch, hosted-public status, public sharing, external model access, or source-file changes.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch8-validator-checker-capsule run --input fixtures/first_wave/batch8_validator_checker_capsule/input --out receipts/first_wave/batch8_validator_checker_capsule --acceptance-out receipts/acceptance/first_wave/batch8_validator_checker_capsule_fixture_acceptance.json",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [
      {
       "component_id": "batch10_cold_eval_honesty_capsule",
       "label": "Cold Evaluation Honesty Bundle",
       "relative_href": "docs/components.html#component-batch10_cold_eval_honesty_capsule"
      },
      {
       "component_id": "batch12_release_claim_language_gate",
       "label": "Release Public Wording Gate",
       "relative_href": "docs/components.html#component-batch12_release_claim_language_gate"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_validator_checker_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 935
    },
    {
     "id": "agent_monitor_redteam_falsification_replay",
     "label": "Agent Monitor Redteam Falsification Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-agent_monitor_redteam_falsification_replay",
     "summary_line": "Replays honest and deceptive agent runs and flags any verdict missing its declared backing evidence.",
     "what_it_does": "It replays three made-up agent trajectories (a normal one, one trying to hide a failure, and one overstepping a tool's permissions) and checks that every monitor verdict \u2014 including a clean \"pass\" \u2014 comes with the result records needed to re-run and verify it. The result records show exactly which checks each verdict depends on, and any verdict missing its backing evidence gets quarantined instead of trusted. It is a demo over fictional data, not a measurement of how well a real monitor catches anything.",
     "scope_limit": "Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed monitor-verdict spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live agent execution, monitor product performance, control-eval score, safety-validation, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm agent-monitor-redteam-falsification-replay run-monitor-bundle --input examples/agent_monitor_redteam_falsification_replay/exported_monitor_redteam_bundle --out receipts/runtime_shell/demo_project/organs/agent_monitor_redteam_falsification_replay",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [
      {
       "component_id": "agent_sabotage_scheming_monitor_replay",
       "label": "Agent Sabotage Scheming Monitor Replay",
       "relative_href": "docs/components.html#component-agent_sabotage_scheming_monitor_replay"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_monitor_redteam_falsification_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1335
    },
    {
     "id": "agent_sabotage_scheming_monitor_replay",
     "label": "Agent Sabotage Scheming Monitor Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-agent_sabotage_scheming_monitor_replay",
     "summary_line": "Audits a hidden-goal catch claim for the steps, suspicion scores, and counterfactual it needs.",
     "what_it_does": "This inspects whether a write-up that claims an AI agent was caught secretly working a hidden side-goal actually carries the supporting structure a reader would need: the step-by-step actions, a per-step \"how suspicious did the monitor find this?\" score, and a stated counterfactual saying that removing the sneaky steps would drop the hidden goal while keeping the real task working. It runs only on synthetic, scrubbed example data, so it shows what the skeleton of such a safety claim should look like and checks the pieces line up with each other. It does not run a real agent, does not detect real scheming, and proves nothing about how any deployed monitor performs.",
     "scope_limit": "Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed sabotage/scheming monitor spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live sabotage, live agent execution, exploit instruction, account secret/account, private-reasoning, harmful-payload, monitor-product-performance, deployment-risk, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm agent-sabotage-scheming-monitor-replay run-sabotage-bundle --input examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle --out receipts/runtime_shell/demo_project/organs/agent_sabotage_scheming_monitor_replay",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sabotage_scheming_monitor_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1558
    },
    {
     "id": "agent_memory_temporal_conflict_replay",
     "label": "Agent Memory Temporal Conflict Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-agent_memory_temporal_conflict_replay",
     "summary_line": "Replays a memory edit-and-delete to show stale facts get flagged before they sway an answer.",
     "what_it_does": "Replays a canned three-step story: an agent's memory first records two facts (a preference and a tool result), then learns one is out of date and edits the preference and deletes the stale fact, then re-runs the same task once with memory on and once with memory off. From plain result records, it shows that the update and deletion each carry a \"conflict\" and \"downgrade\" result record before the memory is allowed to affect the answer, that the memory-on vs memory-off runs are compared through logged evidence rather than just the final wording, and that private-thread content stays in the record only as metadata pointers, never as copied text. It checks the bookkeeping of this synthetic example; it does not judge whether the agent's memory decisions were the right ones.",
     "scope_limit": "It validates the projection mechanics of a synthetic memory fixture only \u2014 that the required refs, decisions, paired replays, negative cases, and secret-exclusion scan line up and that result records are metadata-only. It does not claim live-memory product quality, judge whether memory decisions were domain-correct, treat memory recall as source authority, adopt active injection, export private transcripts, use external model services, change source files, or include launch operations.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.agent_memory_temporal_conflict_replay run --input fixtures/first_wave/agent_memory_temporal_conflict_replay/input --out /tmp/agent_memory_temporal_conflict_replay_out",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [
      {
       "component_id": "sleeper_memory_poisoning_quarantine_replay",
       "label": "Sleeper Memory Poisoning Quarantine Replay",
       "relative_href": "docs/components.html#component-sleeper_memory_poisoning_quarantine_replay"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_memory_temporal_conflict_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1617
    },
    {
     "id": "sleeper_memory_poisoning_quarantine_replay",
     "label": "Sleeper Memory Poisoning Quarantine Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-sleeper_memory_poisoning_quarantine_replay",
     "summary_line": "Replays a recorded memory-tamper case, checking its declared quarantine, block, and delete steps line up.",
     "what_it_does": "This is a worked, made-up example of how an agent should handle a tampered \"memory\": a poisoned note gets spotted, held in quarantine, blocked from being used in any later action, and finally deleted-with-an-audit, with a clean re-run recorded showing the bad memory is no longer there. The component does not actually delete anything or perform the re-run; it reads the on-disk record of that whole guard-and-cleanup sequence and checks that every required step and result record lines up, so exactly which checks must hold is visible. It works entirely from synthetic refs and metadata, with no private memory or transcripts exposed.",
     "scope_limit": "It only checks the structural shape and internal consistency of a synthetic memory-security policy projection recorded as JSON. It does not run or validate any real memory store, does not itself quarantine, delete, or re-run anything, and does not establish that any system actually resists poisoning. It exports no private memory bodies or transcripts, calls no providers, mutates no source, produces no benchmark claims, and excludes launch (all scope limit flags are hardcoded false).",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.sleeper_memory_poisoning_quarantine_replay run --input fixtures/first_wave/sleeper_memory_poisoning_quarantine_replay/input --out receipts/first_wave/sleeper_memory_poisoning_quarantine_replay --acceptance-out receipts/acceptance/first_wave/sleeper_memory_poisoning_quarantine_replay_fixture_acceptance.json",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/sleeper_memory_poisoning_quarantine_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1628
    },
    {
     "id": "mcp_tool_authority_replay",
     "label": "MCP Tool Authority Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-mcp_tool_authority_replay",
     "summary_line": "Audits a recorded tool-use log to confirm each action was scoped, approved, undoable, and fenced.",
     "what_it_does": "When an AI agent uses outside tools (look something up, change a ticket, read a result from an untrusted source), this checks a recorded log of that tool use to confirm each action was properly fenced: bound to a narrow permission, approved before it changed anything, given a way to undo it, and kept from letting untrusted tool output boss the agent around. It runs on a small built-in make-believe example that carries only labels and references (no real accounts, secrets, or tool contents), so the safety checks an agent's tool use is supposed to pass are inspectable without anything touching a live account.",
     "scope_limit": "It only checks that the tool-authority evidence in a recorded bundle (scopes, approvals, rollbacks, instruction/data splits, cold replays, redaction, and the expected abuse-case failures) is present and internally consistent. It does not run tools or authorize live MCP/account access, account secret or payload export, treating tool output as instruction, source-file changes, benchmark safety scores, or launch, and it makes no claim that the underlying tool-use policy is domain-correct.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.mcp_tool_authority_replay run --input fixtures/first_wave/mcp_tool_authority_replay/input --out receipts/first_wave/mcp_tool_authority_replay",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [
      {
       "component_id": "agent_sandbox_policy_escape_replay",
       "label": "Agent Sandbox Policy Escape Replay",
       "relative_href": "docs/components.html#component-agent_sandbox_policy_escape_replay"
      },
      {
       "component_id": "sleeper_memory_poisoning_quarantine_replay",
       "label": "Sleeper Memory Poisoning Quarantine Replay",
       "relative_href": "docs/components.html#component-sleeper_memory_poisoning_quarantine_replay"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mcp_tool_authority_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1419
    },
    {
     "id": "belief_state_process_reward_replay",
     "label": "Belief State Process Reward Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-belief_state_process_reward_replay",
     "summary_line": "Checks that each step reward in a recorded run cites a declared verifier-feedback row, not a trick.",
     "what_it_does": "Takes a recorded, synthetic bundle of agent steps on three partially-observable toy tasks (a terminal investigation, a mock purchase, a small planner) and checks that every \"the agent did the right step\" reward is actually backed by a checkable verifier or observed feedback reference, not by hidden reasoning, formatting tricks, a smuggled answer key, or a final-answer-only score. It does not run or watch a live agent; it validates pre-recorded files. The resulting result record files show, per step, the belief summary, the reward, and whether the reward-hacking and replay checks passed, so it is inspectable why each reward was or was not allowed.",
     "scope_limit": "It only checks that the projection's accounting lines up under its own schema rules over recorded synthetic fixtures; it excludes hidden-reasoning export, RL training, hidden gold or neural-judge-only labels, benchmark-performance claims, external model access, source-file changes, or launch, and proves nothing about real-world reward, live agent behavior, or domain-level conclusions.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.belief_state_process_reward_replay run --input fixtures/first_wave/belief_state_process_reward_replay/input --out .microcosm/belief_state_process_reward_replay",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/belief_state_process_reward_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1385
    },
    {
     "id": "agent_sandbox_policy_escape_replay",
     "label": "Agent Sandbox Policy Escape Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-agent_sandbox_policy_escape_replay",
     "summary_line": "Maps sandboxed agent actions to show each was approved or blocked before running, then rolled back.",
     "what_it_does": "This takes a synthetic record of an agent attempting risky actions inside a sandbox and lays out, step by step, what each action requested, whether a safety policy approved or blocked it before it would have run, what (if anything) changed afterward, and for the actions that did run, whether the change was rolled back and could be re-checked. The record shows exactly how each containment decision is captured: every blocked attempt is still logged as a traced step but is marked as never executed with no resulting change, all from local files with no real secrets, network, or live agent involved.",
     "scope_limit": "It validates the projection / trace-refactor mechanics over a synthetic fixture only; it excludes live sandbox escape, secret or account secret handling, live network access, host filesystem mutation, executable payload export, raw environment export, external model access, security benchmark claims, source-file changes, or launch. A pass proves the projection boundary and trace-refactor mechanics for this contract, not real sandbox security, exploit resistance, or whole-system safety.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.cli agent-sandbox-policy-escape-replay run-sandbox-bundle --input examples/agent_sandbox_policy_escape_replay/exported_sandbox_policy_escape_bundle --out receipts/runtime_shell/demo_project/organs/agent_sandbox_policy_escape_replay",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [
      {
       "component_id": "sleeper_memory_poisoning_quarantine_replay",
       "label": "Sleeper Memory Poisoning Quarantine Replay",
       "relative_href": "docs/components.html#component-sleeper_memory_poisoning_quarantine_replay"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sandbox_policy_escape_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1500
    },
    {
     "id": "indirect_prompt_injection_information_flow_policy_replay",
     "label": "Indirect Prompt Injection Information Flow Policy Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-indirect_prompt_injection_information_flow_policy_replay",
     "summary_line": "Replays an agent run to show untrusted text was gated before any sensitive action, leaking no secret.",
     "what_it_does": "Replays a recorded sample agent episode (built from synthetic, metadata-only rows) and makes visible whether the instructions the agent treated as trusted were kept separate from untrusted web, tool, or browser text before any sensitive action was taken. Row by row, the record shows where untrusted text flowed, what the policy decided for each flow (allow / warn / block / review) before the action, and that the recorded outcome leaked no secret and disclosed no trusted context. It also bundles deliberately-bad cases it must reject (e.g. untrusted text reaching a sensitive action ungated, or a account secret being exfiltrated).",
     "scope_limit": "Passing result records only show this projection satisfies the named information-flow contract over synthetic, redacted, metadata-only rows; they do not prove general prompt-injection robustness, benchmark performance, live account/tool/provider safety, hidden-message handling in a real system, source-file changes, or launch-scope decision.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm indirect-prompt-injection-information-flow-policy-replay run-prompt-injection-bundle --input examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle --out receipts/runtime_shell/demo_project/organs/indirect_prompt_injection_information_flow_policy_replay",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1449
    },
    {
     "id": "agentic_vulnerability_discovery_patch_proof_replay",
     "label": "Agentic Vulnerability Discovery Patch Proof Replay",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-agentic_vulnerability_discovery_patch_proof_replay",
     "summary_line": "Checks a fixed-bug evidence chain and re-runs three small real security checks; no real attack material.",
     "what_it_does": "Takes a claim that an AI agent \"found and fixed a security bug\" and lays it out as a local, inspectable chain of made-up (synthetic) evidence: the imagined target, the suspected issue, the trace pointed to as backing, a reference to an abstract exploitability argument, the patch, and regression tests the fixture says fail before the fix and pass after it. The component checks only that these pieces are all present, refer to each other consistently, and carry no real targets, exploits, payloads, account secrets, or attack steps; it does not run the tests or judge whether the bug or fix is actually real. The result record shows whether the declared chain holds together, with no real attack material ever present.",
     "scope_limit": "It validates only the projection/evidence-chain mechanics of a synthetic replay: structural presence, cross-reference consistency, declared boolean flags, and the secret/live-access exclusion scan. It executes small regression witnesses but performs no real vulnerability discovery and makes no judgment of real-world security or fix correctness. It excludes live-target testing, real CVE exploitation, weaponized payloads, account secret handling, network exfiltration, actionable exploit steps, external model access, source-file changes, benchmark security scores, launch, or any whole-system security claim.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.agentic_vulnerability_discovery_patch_proof_replay run --input fixtures/first_wave/agentic_vulnerability_discovery_patch_proof_replay/input --out receipts/first_wave/agentic_vulnerability_discovery_patch_proof_replay --acceptance-out receipts/acceptance/first_wave/agentic_vulnerability_discovery_patch_proof_replay_fixture_acceptance.json",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1875
    },
    {
     "id": "agent_route_observability_runtime",
     "label": "Agent Route Observability Runtime",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-agent_route_observability_runtime",
     "summary_line": "Recomputes an agent run's route-compliance score and anti-pattern flags with real trace-analytics code.",
     "what_it_does": "This validator takes a sample (synthetic, not live) record of an agent's local run \u2014 the route it picked, the work it did, the events it logged, the evidence it pointed to, and the authority limit it declared \u2014 and checks that this recorded trail is well-formed and self-consistent, instead of leaving raw log JSON to be read by hand. The record is built to state, up front, where the agent's authority was supposed to stop, so the limits are written down and checkable rather than taken on faith. It checks the recorded evidence; it does not watch a live agent or prove one actually stayed in bounds.",
     "scope_limit": "It validates only public, recorded trace-feedback metadata and regression fixtures; it does not inspect live operator state, certify or prove runtime behavior, read model-output data, mutate the work log, authorize pattern assimilation, or include launch operations.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.agent_route_observability_runtime run --input fixtures/first_wave/agent_route_observability_runtime/input --out receipts/first_wave/agent_route_observability_runtime",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [
      {
       "component_id": "navigation_hologram_route_plane",
       "label": "Navigation Hologram Route Plane",
       "relative_href": "docs/components.html#component-navigation_hologram_route_plane"
      },
      {
       "component_id": "cold_reader_route_map",
       "label": "Cold Reader Route Map",
       "relative_href": "docs/components.html#component-cold_reader_route_map"
      },
      {
       "component_id": "routing_anti_patterns_registry",
       "label": "Routing Anti Patterns Registry",
       "relative_href": "docs/components.html#component-routing_anti_patterns_registry"
      },
      {
       "component_id": "pattern_binding_contract",
       "label": "Pattern Binding Contract",
       "relative_href": "docs/components.html#component-pattern_binding_contract"
      },
      {
       "component_id": "macro_projection_import_protocol",
       "label": "Source Projection Import Protocol",
       "relative_href": "docs/components.html#component-macro_projection_import_protocol"
      },
      {
       "component_id": "bounded_autonomy_campaign_packet",
       "label": "Bounded Autonomy Campaign Packet",
       "relative_href": "docs/components.html#component-bounded_autonomy_campaign_packet"
      },
      {
       "component_id": "batch11_saturation_engines_capsule",
       "label": "Saturation Engines Bundle",
       "relative_href": "docs/components.html#component-batch11_saturation_engines_capsule"
      },
      {
       "component_id": "batch4_proof_authority_runtime",
       "label": "Proof / Control / Runtime Import Bundle",
       "relative_href": "docs/components.html#component-batch4_proof_authority_runtime"
      },
      {
       "component_id": "batch6_unsurfaced_primitives_capsule",
       "label": "Unsurfaced Source Primitives Bundle",
       "relative_href": "docs/components.html#component-batch6_unsurfaced_primitives_capsule"
      },
      {
       "component_id": "batch7_macro_engines_capsule",
       "label": "Trace, Code-Map & Scheduling Engines Bundle",
       "relative_href": "docs/components.html#component-batch7_macro_engines_capsule"
      },
      {
       "component_id": "batch8_compliance_pipeline_capsule",
       "label": "Compliance Pipeline Bundle",
       "relative_href": "docs/components.html#component-batch8_compliance_pipeline_capsule"
      },
      {
       "component_id": "agent_memory_temporal_conflict_replay",
       "label": "Agent Memory Temporal Conflict Replay",
       "relative_href": "docs/components.html#component-agent_memory_temporal_conflict_replay"
      },
      {
       "component_id": "agent_sandbox_policy_escape_replay",
       "label": "Agent Sandbox Policy Escape Replay",
       "relative_href": "docs/components.html#component-agent_sandbox_policy_escape_replay"
      },
      {
       "component_id": "provider_context_recipe_budget_policy",
       "label": "Provider Context Recipe Budget Policy",
       "relative_href": "docs/components.html#component-provider_context_recipe_budget_policy"
      },
      {
       "component_id": "belief_state_process_reward_replay",
       "label": "Belief State Process Reward Replay",
       "relative_href": "docs/components.html#component-belief_state_process_reward_replay"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_route_observability_runtime.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1224
    },
    {
     "id": "provider_context_recipe_budget_policy",
     "label": "Provider Context Recipe Budget Policy",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-provider_context_recipe_budget_policy",
     "summary_line": "Runs the real context harness to measure assembled byte sizes and check each bundle fits its budget.",
     "what_it_does": "This component checks that the bundles of context an AI agent would assemble before calling an outside model provider stay inside fixed size limits (in bytes), fill their sections in the declared order until the budget runs out, list any section that was dropped for not fitting, and never carry answer keys, proof solutions, or other \"correct answer\" material. The record shows the exact size ceilings for each recipe, which sections fit versus got left out, and which output each recipe is allowed to produce, so the context boundary is inspectable as plain accounting before any external model access or answer authority is ever in play. It only validates this metadata; it does not itself call any provider.",
     "scope_limit": "It validates context-budget projection mechanics (byte ceilings, ordered section fill, omitted-section manifests, deliverable routing, and digest-checked source-body imports) only. It excludes provider/API calls, run Lean/Lake, expose or carry proof or oracle truth-side material, assert theorem or domain-level conclusions, or include launch operations.",
     "evidence": {
      "kind": "Bounded runtime computation",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.provider_context_recipe_budget_policy run --input fixtures/first_wave/provider_context_recipe_budget_policy/input --out receipts/first_wave/provider_context_recipe_budget_policy",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [
      {
       "component_id": "bounded_autonomy_campaign_packet",
       "label": "Bounded Autonomy Campaign Packet",
       "relative_href": "docs/components.html#component-bounded_autonomy_campaign_packet"
      },
      {
       "component_id": "tool_server_pressure_inventory",
       "label": "Tool Server Pressure Inventory",
       "relative_href": "docs/components.html#component-tool_server_pressure_inventory"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/provider_context_recipe_budget.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1431
    },
    {
     "id": "agent_closeout_faithfulness_audit",
     "label": "Agent Completion Faithfulness Audit",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-agent_closeout_faithfulness_audit",
     "summary_line": "Runs real git and pytest on a sample repo so wrap-up claims state only what the evidence proves.",
     "what_it_does": "Runs a public fixture repo through real git and pytest subprocesses, then checks that completion claims only say what the evidence supports: commit object exists, ledger cap exists, and pytest pass is claimed only after exit-zero status was checked.",
     "scope_limit": "verified means the referenced evidence object exists or a pytest span ran; it does not imply the span passed unless exit-zero status was explicitly checked",
     "evidence": {
      "kind": "External tool run",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "microcosm agent-closeout-faithfulness-audit run --input fixtures/first_wave/agent_closeout_faithfulness_audit/input --out receipts/first_wave/agent_closeout_faithfulness_audit",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.agent_closeout_faithfulness_audit"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 714
    },
    {
     "id": "bounded_autonomy_campaign_packet",
     "label": "Bounded Autonomy Campaign Packet",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-bounded_autonomy_campaign_packet",
     "summary_line": "Drafts proposed work from coverage gaps and proves it cannot repair or rewrite the code itself.",
     "what_it_does": "Turns synthetic coverage gaps into a draft candidate packet in a subprocess and records the boundary that it proposes work but cannot repair itself or write source.",
     "scope_limit": "self-proposal campaign packet only; no self-repair or unsupervised source-file changes",
     "evidence": {
      "kind": "External tool run",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "microcosm bounded-autonomy-campaign-packet run --input fixtures/first_wave/bounded_autonomy_campaign_packet/input --out receipts/first_wave/bounded_autonomy_campaign_packet",
     "tags": [
      "ai-safety",
      "agent-evaluation",
      "red-teaming"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bounded_autonomy_campaign_packet.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 553
    },
    {
     "id": "batch7_secondary_runtime_capsule",
     "label": "Secondary Runtime Source Bundle",
     "family_id": "agent_reliability_and_safety",
     "family_label": "Agent reliability & safety",
     "relative_href": "docs/components.html#component-batch7_secondary_runtime_capsule",
     "summary_line": "Runs eight trace, graph, and market engines on test rows without fetching live markets.",
     "what_it_does": "This bundle imports a second Set 7 runtime slice as public runnable system. It checks agent trace view-model trust classes, lane-progress state normalization, graph-lens focus roles, graph projection summaries, observe-only cartography rendering, stockgrid payload terms, Polymarket CLOB microstructure, and four-lens market scanning over synthetic public fixtures without exporting sessions, fetching live markets, or giving trading decisions.",
     "scope_limit": "verified source body import only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, source-file changes, private-system equivalence, public sharing, launch, semantic-truth, or whole-system correctness claim",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch7-secondary-runtime-capsule run --input fixtures/first_wave/batch7_secondary_runtime_capsule/input --out receipts/first_wave/batch7_secondary_runtime_capsule --acceptance-out receipts/acceptance/first_wave/batch7_secondary_runtime_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_secondary_runtime_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1113
    },
    {
     "id": "research_replication_rubric_artifact_replay",
     "label": "Research Replication Rubric Artifact Replay",
     "family_id": "research_and_science_replays",
     "family_label": "Research & science",
     "relative_href": "docs/components.html#component-research_replication_rubric_artifact_replay",
     "summary_line": "Audits whether a paper-replication claim carries the full evidence trail.",
     "what_it_does": "It checks whether a claim that an AI agent \"replicated a research paper\" comes with the paper trail real replication would leave behind. It re-runs nothing; instead it confirms the bundle names every required piece of evidence: a breakdown of the paper's contributions, a grading rubric, the list of allowed public inputs, a from-scratch repo scaffold, an experiment plan, the metric scripts, a roster of declared file-hashes for the outputs plus hashes that all stay inside that roster, a grader report, a capped compute/runtime budget, an ablation diff, a failure list, and a cold-rerun result record. It also catches eight ways a claim can cheat: reusing the original authors' code, leaking a hidden rubric, calling a run a \"success\" when only a write-up backs it, asserting a benchmark claims, leaking a private paper or dataset body, using unbounded compute, grading only the final answer, or pointing at a file-hash that was never declared. The work runs on two made-up sample papers (one machine-learning method, one computational-science study), and the generated result record shows which of the eight cheats each test case triggered, rather than taking \"it was replicated\" on trust.",
     "scope_limit": "It validates the shape and presence of synthetic replay metadata and result record references only - it does not run any experiment, metric script, or rerun, excludes any claim that a paper was actually replicated, that a benchmark claims was achieved, or that the underlying science is correct, and it never calls providers, exposes private paper/data bodies, or authorizes public sharing or launch.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.research_replication_rubric_artifact_replay run --input fixtures/first_wave/research_replication_rubric_artifact_replay/input --out receipts/first_wave/research_replication_rubric_artifact_replay",
     "tags": [
      "research-workflows",
      "forecasting",
      "provider operations"
     ],
     "links_to": [
      {
       "component_id": "materials_chemistry_closed_loop_lab_safety_replay",
       "label": "Materials Chemistry Closed Loop Lab Safety Replay",
       "relative_href": "docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay"
      },
      {
       "component_id": "mechanistic_interpretability_circuit_attribution_replay",
       "label": "Mechanistic Interpretability Circuit Attribution Replay",
       "relative_href": "docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay"
      },
      {
       "component_id": "prediction_oracle_reconciliation",
       "label": "Prediction Oracle Reconciliation",
       "relative_href": "docs/components.html#component-prediction_oracle_reconciliation"
      },
      {
       "component_id": "spatial_world_model_counterfactual_simulation_replay",
       "label": "Spatial World Model Counterfactual Simulation Replay",
       "relative_href": "docs/components.html#component-spatial_world_model_counterfactual_simulation_replay"
      },
      {
       "component_id": "batch10_cold_eval_honesty_capsule",
       "label": "Cold Evaluation Honesty Bundle",
       "relative_href": "docs/components.html#component-batch10_cold_eval_honesty_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/research_replication_rubric_artifact_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1955
    },
    {
     "id": "spatial_world_model_counterfactual_simulation_replay",
     "label": "Spatial World Model Counterfactual Simulation Replay",
     "family_id": "research_and_science_replays",
     "family_label": "Research & science",
     "relative_href": "docs/components.html#component-spatial_world_model_counterfactual_simulation_replay",
     "summary_line": "Replays six what-if robotics scenes to show what a spatial prediction claim is built from.",
     "what_it_does": "This replay takes six made-up \"what if\" spatial scenes from robotics and self-driving-style settings (a forklift appears from behind an occlusion, a small pedestrian steps into a crosswalk, a gust pushes a drone off course, a shiny floor fools a robot into seeing free space, a stacked load shifts into a lane, and an oncoming car turns late) and shows each one as inspectable rows: the starting scene, the action taken, the predicted next scene, what changed between them, a sanity check, and honest notes on its limits (it is synthetic, not real-world ground truth). The rows show exactly what a spatial \"world model\" claim is built from, plus a checklist of dangerous claims it deliberately refuses to make.",
     "scope_limit": "It validates only the declared public contract of synthetic spatial counterfactual-replay metadata rows. It is evidence for inspectable replay rows and limitation labels, not for real-world spatial accuracy, simulator-product validity, media-only authority, operational deployment, service distribution, or scope decisions.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": false
     },
     "command": "microcosm spatial-world-model-counterfactual-simulation-replay run-simulation-bundle --input examples/spatial_world_model_counterfactual_simulation_replay/exported_spatial_world_model_simulation_bundle --out receipts/runtime_shell/demo_project/organs/spatial_world_model_counterfactual_simulation_replay",
     "tags": [
      "research-workflows",
      "forecasting"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/spatial_world_model_counterfactual_simulation_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1482
    },
    {
     "id": "materials_chemistry_closed_loop_lab_safety_replay",
     "label": "Materials Chemistry Closed Loop Lab Safety Replay",
     "family_id": "research_and_science_replays",
     "family_label": "Research & science",
     "relative_href": "docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay",
     "summary_line": "Replays a self-driving lab loop as records, with safety gates and no real chemicals, robot, or lab.",
     "what_it_does": "Takes the pattern of a \"self-driving materials lab\" (propose a candidate material, run safety screens, simulate an assay, then decide what to try next) and replays it locally as inspectable records: every step, its safety gate, its simulated result, and the decision that followed, plus the pre-recorded points where such a loop would fail and where it would restart. It makes the workflow's structure visible, all on a simulator-only fixture, so how the loop is wired is traceable without any real lab, real chemicals, or real robot ever being involved.",
     "scope_limit": "It documents projection and replay mechanics only and excludes wetlab protocols, hazardous synthesis steps, reagent amounts, controlled/bioactive targets, robot commands, live assay data, discovery claims, benchmark claims, external model access, or any judgment of domain/chemical correctness.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm materials-chemistry-closed-loop-lab-safety-replay run-lab-bundle --input examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle --out receipts/runtime_shell/demo_project/organs/materials_chemistry_closed_loop_lab_safety_replay",
     "tags": [
      "research-workflows",
      "forecasting"
     ],
     "links_to": [
      {
       "component_id": "spatial_world_model_counterfactual_simulation_replay",
       "label": "Spatial World Model Counterfactual Simulation Replay",
       "relative_href": "docs/components.html#component-spatial_world_model_counterfactual_simulation_replay"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1277
    },
    {
     "id": "mechanistic_interpretability_circuit_attribution_replay",
     "label": "Mechanistic Interpretability Circuit Attribution Replay",
     "family_id": "research_and_science_replays",
     "family_label": "Research & science",
     "relative_href": "docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay",
     "summary_line": "Records which model features drove an answer, each tied to checkable evidence.",
     "what_it_does": "This takes the workflow of \"tracing which internal features inside a model drove an answer\" and turns it into inspectable local records. Each row links feature ids to a machine-readable graph of connections, records the before/after results of poking those features (the causal-intervention deltas), notes how far the explanation can be trusted (its faithfulness limit), and points to where the underlying evidence lives. The records show that every interpretability claim is backed by checkable evidence, and that they deliberately hold no model weights, no raw activations, no prompts, and no hidden reasoning \u2014 they carry only refs, digests, counts, and verdicts.",
     "scope_limit": "It validates only the declared public circuit-attribution runtime-result record contract. It excludes model-transparency product claims, live model access, export of private weights/raw activations/proprietary prompts/hidden chain-of-thought, external model access, benchmark claims, or public sharing/launch.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": false
     },
     "command": "microcosm mechanistic-interpretability-circuit-attribution-replay run-attribution-bundle --input examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle --out receipts/runtime_shell/demo_project/organs/mechanistic_interpretability_circuit_attribution_replay",
     "tags": [
      "research-workflows",
      "forecasting",
      "provider operations"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1416
    },
    {
     "id": "prediction_oracle_reconciliation",
     "label": "Prediction Oracle Reconciliation",
     "family_id": "research_and_science_replays",
     "family_label": "Research & science",
     "relative_href": "docs/components.html#component-prediction_oracle_reconciliation",
     "summary_line": "Replays a forecast against the discipline a careful predictor would have to defend.",
     "what_it_does": "Runs a made-up forecasting case through the discipline a careful predictor would have to defend: which way a fork was called and why the losing side was ruled out, whether each prediction stayed inside the pre-declared list of allowed outcomes, that no \"after the fact\" evidence got used as if it were known in advance, how the guesses compared to a synthetic \"what actually happened\" result, and that any edits to the running record were small, allowed changes rather than rewrites. The reasoning is laid out as inspectable records rather than a single handed-down verdict. Everything is invented test data \u2014 it makes no real forecast and claims no track record.",
     "scope_limit": "It exercises projection mechanics on a synthetic, invented packet only. It does not establish forecasting correctness or accuracy, give trading/financial/investment-related actions, call live market data or providers, publish predictions, claim any performance or track record, import non-public data, or include launch operations.",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.prediction_oracle_reconciliation run --input fixtures/first_wave/prediction_oracle_reconciliation/input --out receipts/first_wave/prediction_oracle_reconciliation",
     "tags": [
      "research-workflows",
      "forecasting",
      "provider operations"
     ],
     "links_to": [
      {
       "component_id": "batch12_market_dashboard_read_model_capsule",
       "label": "Market Dashboard Read-Model Bundle",
       "relative_href": "docs/components.html#component-batch12_market_dashboard_read_model_capsule"
      },
      {
       "component_id": "batch12_prediction_market_board_capsule",
       "label": "Prediction Market Board Bundle",
       "relative_href": "docs/components.html#component-batch12_prediction_market_board_capsule"
      },
      {
       "component_id": "batch8_structural_theses_capsule",
       "label": "Structural Theses Finance Bundle",
       "relative_href": "docs/components.html#component-batch8_structural_theses_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/prediction_oracle_reconciliation.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1325
    },
    {
     "id": "finance_forecast_evaluation_spine",
     "label": "Finance Forecast Evaluation Spine",
     "family_id": "research_and_science_replays",
     "family_label": "Research & science",
     "relative_href": "docs/components.html#component-finance_forecast_evaluation_spine",
     "summary_line": "Replays synthetic forecast tests through copied finance stats, recording p-values with no advice.",
     "what_it_does": "Runs public synthetic forecast-evaluation fixtures through copied finance statistics modules and records p-value/refusal behavior without live market data or advice claims.",
     "scope_limit": "synthetic fixture forecast-evaluation statistics only; no investment-related actions, live market data, track record, or performance claim",
     "evidence": {
      "kind": "External tool run",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "microcosm finance-forecast-evaluation-spine run --input fixtures/first_wave/finance_forecast_evaluation_spine/input --out receipts/first_wave/finance_forecast_evaluation_spine",
     "tags": [
      "research-workflows",
      "forecasting",
      "finance"
     ],
     "links_to": [
      {
       "component_id": "batch12_prediction_market_board_capsule",
       "label": "Prediction Market Board Bundle",
       "relative_href": "docs/components.html#component-batch12_prediction_market_board_capsule"
      },
      {
       "component_id": "prediction_oracle_reconciliation",
       "label": "Prediction Oracle Reconciliation",
       "relative_href": "docs/components.html#component-prediction_oracle_reconciliation"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/finance_forecast_evaluation_spine.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 619
    },
    {
     "id": "batch12_market_dashboard_read_model_capsule",
     "label": "Market Dashboard Read-Model Bundle",
     "family_id": "research_and_science_replays",
     "family_label": "Research & science",
     "relative_href": "docs/components.html#component-batch12_market_dashboard_read_model_capsule",
     "summary_line": "Runs a copied market-dashboard reader to catch broken links, stale feeds, and trading overclaims.",
     "what_it_does": "This bundle imports the market dashboard read-model source as public runnable system. Running it over synthetic market-dashboard rows shows how structural read-model checks, feed freshness classification, and related-situation grouping catch dangling graph edges, unsafe route refs, auto-apply overclaims, trading-language overclaims, silent omissions, stale or missing readiness, and no-overlap relation cases.",
     "scope_limit": "This is fixture-bound read-model, freshness, and relation-grouping evidence only; it is not live market-level conclusions, not investment-related actions, not external model access, not launch-scope decision, and not whole-system correctness.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch12-market-dashboard-read-model-capsule run-market-dashboard-bundle --input examples/batch12_market_dashboard_read_model_capsule/exported_batch12_market_dashboard_read_model_capsule_bundle --out receipts/runtime_shell/demo_project/organs/batch12_market_dashboard_read_model_capsule",
     "tags": [
      "research-workflows",
      "forecasting",
      "finance"
     ],
     "links_to": [
      {
       "component_id": "batch6_unsurfaced_primitives_capsule",
       "label": "Unsurfaced Source Primitives Bundle",
       "relative_href": "docs/components.html#component-batch6_unsurfaced_primitives_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_market_dashboard_read_model_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1083
    },
    {
     "id": "batch12_prediction_market_board_capsule",
     "label": "Prediction Market Board Bundle",
     "family_id": "research_and_science_replays",
     "family_label": "Research & science",
     "relative_href": "docs/components.html#component-batch12_prediction_market_board_capsule",
     "summary_line": "Replays imported quant market math on test rows, with duplicate retention and seven refusals.",
     "what_it_does": "This bundle imports the quant presentation mart source as public runnable system. Running it over synthetic prediction-market and feed-diagnostic rows shows event identity joining, duplicate-market retention by volume, orphan identity refusal, provider drift flags, missingness rows, unavailable previous-green deltas, and source lifecycle vintage enrichment.",
     "scope_limit": "This is deterministic fixture evidence for copied quant helpers only; it is not live prediction-market-level conclusions, not provider truth, not forecast correctness, not investment-related actions, not external model access, and not launch-scope decision.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch12-prediction-market-board-capsule run-prediction-market-board-bundle --input examples/batch12_prediction_market_board_capsule/exported_batch12_prediction_market_board_capsule_bundle --out receipts/runtime_shell/demo_project/organs/batch12_prediction_market_board_capsule",
     "tags": [
      "research-workflows",
      "forecasting",
      "finance"
     ],
     "links_to": [
      {
       "component_id": "batch8_structural_theses_capsule",
       "label": "Structural Theses Finance Bundle",
       "relative_href": "docs/components.html#component-batch8_structural_theses_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_prediction_market_board_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1029
    },
    {
     "id": "macro_projection_import_protocol",
     "label": "Source Projection Import Protocol",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-macro_projection_import_protocol",
     "summary_line": "Gates private-to-public imports, accepting only files with matching fingerprints and sources.",
     "what_it_does": "This is the checkpoint that handles bringing material from the larger private project into the public Microcosm folder. When someone proposes a set of files to import, it verifies each one: it only accepts material, and only when the destination file, a content fingerprint (to confirm the copy matches), a record of where it came from, and the supporting checks all line up. Anything held back as private or secret has to come with a written note saying so, and attempts to claim more authority than allowed are rejected. The record shows exactly what was imported, what was deliberately left out, and what was refused, so the public copy stays honest about its limits instead of quietly leaking private source or pretending to be more than it is.",
     "scope_limit": "It authorizes only verified source body import with provenance and content-digest checks; it does not grant source authority, private-system equivalence, launch, hosted deployment, public sharing, recipient work, provider or Lean/Lake execution, secret or private-source-body export, or any whole-system correctness claim.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm macro-projection-import-protocol plan --input examples/macro_projection_import_protocol/exported_projection_import_bundle",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "formal_math_readiness_gate",
       "label": "Formal Math Readiness Gate",
       "relative_href": "docs/components.html#component-formal_math_readiness_gate"
      },
      {
       "component_id": "agent_route_observability_runtime",
       "label": "Agent Route Observability Runtime",
       "relative_href": "docs/components.html#component-agent_route_observability_runtime"
      },
      {
       "component_id": "mission_transaction_work_spine",
       "label": "Mission Transaction Work Spine",
       "relative_href": "docs/components.html#component-mission_transaction_work_spine"
      },
      {
       "component_id": "navigation_hologram_route_plane",
       "label": "Navigation Hologram Route Plane",
       "relative_href": "docs/components.html#component-navigation_hologram_route_plane"
      },
      {
       "component_id": "pattern_binding_contract",
       "label": "Pattern Binding Contract",
       "relative_href": "docs/components.html#component-pattern_binding_contract"
      },
      {
       "component_id": "materials_chemistry_closed_loop_lab_safety_replay",
       "label": "Materials Chemistry Closed Loop Lab Safety Replay",
       "relative_href": "docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay"
      },
      {
       "component_id": "batch11_saturation_engines_capsule",
       "label": "Saturation Engines Bundle",
       "relative_href": "docs/components.html#component-batch11_saturation_engines_capsule"
      },
      {
       "component_id": "batch8_compliance_pipeline_capsule",
       "label": "Compliance Pipeline Bundle",
       "relative_href": "docs/components.html#component-batch8_compliance_pipeline_capsule"
      },
      {
       "component_id": "batch10_governance_compilers_capsule",
       "label": "Governance & Compiler Mechanisms Bundle",
       "relative_href": "docs/components.html#component-batch10_governance_compilers_capsule"
      },
      {
       "component_id": "batch10_live_source_drift_capsule",
       "label": "Live Source Drift Bundle",
       "relative_href": "docs/components.html#component-batch10_live_source_drift_capsule"
      },
      {
       "component_id": "batch4_proof_authority_runtime",
       "label": "Proof / Control / Runtime Import Bundle",
       "relative_href": "docs/components.html#component-batch4_proof_authority_runtime"
      },
      {
       "component_id": "batch5_authority_systems_capsule",
       "label": "Authority Systems Source Bundle",
       "relative_href": "docs/components.html#component-batch5_authority_systems_capsule"
      },
      {
       "component_id": "batch6_unsurfaced_primitives_capsule",
       "label": "Unsurfaced Source Primitives Bundle",
       "relative_href": "docs/components.html#component-batch6_unsurfaced_primitives_capsule"
      },
      {
       "component_id": "batch7_macro_engines_capsule",
       "label": "Trace, Code-Map & Scheduling Engines Bundle",
       "relative_href": "docs/components.html#component-batch7_macro_engines_capsule"
      },
      {
       "component_id": "batch7_demo_take_console_capsule",
       "label": "Demo Take Console Source Bundle",
       "relative_href": "docs/components.html#component-batch7_demo_take_console_capsule"
      },
      {
       "component_id": "batch7_oracle_sibling_capsule",
       "label": "Oracle Sibling Source Bundle",
       "relative_href": "docs/components.html#component-batch7_oracle_sibling_capsule"
      },
      {
       "component_id": "batch7_secondary_runtime_capsule",
       "label": "Secondary Runtime Source Bundle",
       "relative_href": "docs/components.html#component-batch7_secondary_runtime_capsule"
      },
      {
       "component_id": "batch8_audio_level_rms_port",
       "label": "Audio Level RMS Port",
       "relative_href": "docs/components.html#component-batch8_audio_level_rms_port"
      },
      {
       "component_id": "batch8_policy_engines_capsule",
       "label": "Policy Engines Bundle",
       "relative_href": "docs/components.html#component-batch8_policy_engines_capsule"
      },
      {
       "component_id": "batch9_macro_engines_capsule",
       "label": "Backend & Governance Engines Bundle",
       "relative_href": "docs/components.html#component-batch9_macro_engines_capsule"
      },
      {
       "component_id": "concurrency_mission_control",
       "label": "Concurrency Mission Control",
       "relative_href": "docs/components.html#component-concurrency_mission_control"
      },
      {
       "component_id": "engine_room_demo",
       "label": "Engine Room Demo",
       "relative_href": "docs/components.html#component-engine_room_demo"
      },
      {
       "component_id": "executable_doctrine_grammar",
       "label": "Executable Doctrine Grammar",
       "relative_href": "docs/components.html#component-executable_doctrine_grammar"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/macro_projection_import_protocol.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1331
    },
    {
     "id": "world_model_projection_drift_control_room",
     "label": "World Model Projection Drift Control Room",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-world_model_projection_drift_control_room",
     "summary_line": "Pinpoints where a projected world-model copy drifted from its real source, with repair routes.",
     "what_it_does": "This component shows, in plain result records, where a projected copy of a world model has drifted from its real source. For each drift it names the signal, points to where the real source lives, gives a suggested repair route, and cites the test that would confirm the fix. The result records show the drift is being flagged honestly: the projection never claims to be the source of truth, and the result records deliberately leave out any non-public or secret-backed data.",
     "scope_limit": "It only validates the declared public, metadata-only drift-result record contract. It supports inspection of recorded drift rows and source-linked refs; live repair, source control, doctrine changes, model-output export, public sharing, and launch are outside the fixture. It does not claim complete drift coverage or live repair control.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm world-model-projection-drift-control-room run-drift-control-bundle --input examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle --out receipts/runtime_shell/demo_project/organs/world_model_projection_drift_control_room",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "materials_chemistry_closed_loop_lab_safety_replay",
       "label": "Materials Chemistry Closed Loop Lab Safety Replay",
       "relative_href": "docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay"
      },
      {
       "component_id": "mechanistic_interpretability_circuit_attribution_replay",
       "label": "Mechanistic Interpretability Circuit Attribution Replay",
       "relative_href": "docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay"
      },
      {
       "component_id": "prediction_oracle_reconciliation",
       "label": "Prediction Oracle Reconciliation",
       "relative_href": "docs/components.html#component-prediction_oracle_reconciliation"
      },
      {
       "component_id": "spatial_world_model_counterfactual_simulation_replay",
       "label": "Spatial World Model Counterfactual Simulation Replay",
       "relative_href": "docs/components.html#component-spatial_world_model_counterfactual_simulation_replay"
      },
      {
       "component_id": "tool_server_pressure_inventory",
       "label": "Tool Server Pressure Inventory",
       "relative_href": "docs/components.html#component-tool_server_pressure_inventory"
      },
      {
       "component_id": "batch12_market_dashboard_read_model_capsule",
       "label": "Market Dashboard Read-Model Bundle",
       "relative_href": "docs/components.html#component-batch12_market_dashboard_read_model_capsule"
      },
      {
       "component_id": "batch8_structural_theses_capsule",
       "label": "Structural Theses Finance Bundle",
       "relative_href": "docs/components.html#component-batch8_structural_theses_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.world_model_projection_drift_control_room"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1218
    },
    {
     "id": "batch6_unsurfaced_primitives_capsule",
     "label": "Unsurfaced Source Primitives Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch6_unsurfaced_primitives_capsule",
     "summary_line": "Exposes eleven real but under-surfaced parts and rejects non-public-state and overclaim cases.",
     "what_it_does": "This bundle imports the Set-6 source primitives that were real but under-surfaced. It exposes the 11 mechanisms, exact source-module manifest, source execution outcomes, and negative cases without exposing copied body text, raw operator transcripts, prompt-shelf private logs, provider/browser state, live market data, or media assets in result records.",
     "scope_limit": "It validates only a public source-open bundle and bounded public exercises; it is not raw operator memory, not prompt-shelf capture authority, not live market data, not provider/browser state, not media launch, and not public sharing or launch-scope decision.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch6-unsurfaced-primitives-capsule run --input fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input --out receipts/first_wave/batch6_unsurfaced_primitives_capsule --acceptance-out receipts/acceptance/first_wave/batch6_unsurfaced_primitives_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch6_unsurfaced_primitives_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1038
    },
    {
     "id": "batch5_authority_systems_capsule",
     "label": "Authority Systems Source Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch5_authority_systems_capsule",
     "summary_line": "Replays eight authority and systems checks, rejecting provider, proof, and launch overclaims.",
     "what_it_does": "This bundle imports Set 5 public authority and systems source bodies as a bounded source-open replay. It checks post-execution result record validation, reasoning replay scope and lineage, proof-contract gating, process orphan classification, generated-state fixpoint settlement, trace-tape compaction, code blast radius, and doctrine graph compilation, with negative cases that prevent live provider, proof-success, process-signal, generated-state-mutation, source-file changes, public sharing, or launch overclaims.",
     "scope_limit": "It validates only copied Set 5 authority-system source bodies and bounded deterministic exercises; it does not dispatch providers, prove Lean success, send live process signals, mutate generated state, change source files, authorize public sharing, include launch operations, or claim private-system equivalence.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.batch5_authority_systems_capsule run --input fixtures/first_wave/batch5_authority_systems_capsule/input --out receipts/first_wave/batch5_authority_systems_capsule --acceptance-out receipts/acceptance/first_wave/batch5_authority_systems_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "authority-boundary"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch5_authority_systems_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1272
    },
    {
     "id": "batch7_macro_engines_capsule",
     "label": "Trace, Code-Map & Scheduling Engines Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch7_macro_engines_capsule",
     "summary_line": "Runs fifteen trace, code-map, and scheduling engines on test data, blocking truth overclaims.",
     "what_it_does": "This bundle imports the Set-7 source engines as exact copied source bodies plus deterministic public exercises. It exposes fifteen JS, TS, and Python engine bodies for trace parsing, code-map layout, DAG scheduling, source indexing, patch validation, hermetic clean-clone execution, robust numeric scoring, personalized PageRank routing, and regression-test selection, with negative cases that prevent launch, private-system, semantic-truth, or test-sufficiency overclaims.",
     "scope_limit": "It validates only a public source-open bundle and bounded exercises; it is not live source authority, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, public sharing, or launch-scope decision.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch7-macro-engines-capsule run --input fixtures/first_wave/batch7_macro_engines_capsule/input --out receipts/first_wave/batch7_macro_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch7_macro_engines_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "batch8_policy_engines_capsule",
       "label": "Policy Engines Bundle",
       "relative_href": "docs/components.html#component-batch8_policy_engines_capsule"
      },
      {
       "component_id": "batch8_tools_tail_primitives_capsule",
       "label": "Tools-Tail Primitives Bundle",
       "relative_href": "docs/components.html#component-batch8_tools_tail_primitives_capsule"
      },
      {
       "component_id": "batch9_macro_engines_capsule",
       "label": "Backend & Governance Engines Bundle",
       "relative_href": "docs/components.html#component-batch9_macro_engines_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_macro_engines_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1146
    },
    {
     "id": "batch7_oracle_sibling_capsule",
     "label": "Oracle Sibling Source Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch7_oracle_sibling_capsule",
     "summary_line": "Replays subject-index and truth-diff logic on copied code, rejecting reasoning overclaims.",
     "what_it_does": "This bundle imports the Set 7 public Oracle sibling source bodies as a bounded, source-open replay. It checks subject-index grounding, subject-snapshot hydration, source truth-diff deltas, quartet repair alias planning, and original pytest witness evidence, with negative cases that prevent Oracle reasoning, external model access, source-file changes, semantic-truth, coverage, public sharing, or launch overclaims.",
     "scope_limit": "It validates only Oracle sibling copied source bodies and bounded deterministic exercises; it does not run Oracle reasoning, dispatch providers or bridges, invoke private orchestration engine, change source files, prove semantic truth, prove all Oracle paths are covered, authorize public sharing, or include launch operations.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.batch7_oracle_sibling_capsule run --input fixtures/first_wave/batch7_oracle_sibling_capsule/input --out receipts/first_wave/batch7_oracle_sibling_capsule --acceptance-out receipts/acceptance/first_wave/batch7_oracle_sibling_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "batch8_tools_tail_primitives_capsule",
       "label": "Tools-Tail Primitives Bundle",
       "relative_href": "docs/components.html#component-batch8_tools_tail_primitives_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_oracle_sibling_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1168
    },
    {
     "id": "batch7_demo_take_console_capsule",
     "label": "Demo Take Console Source Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch7_demo_take_console_capsule",
     "summary_line": "Replays the recording console's Swift logic without launching the app or capturing audio.",
     "what_it_does": "This bundle imports the Set 7 Demo Take Console public Swift source bodies as a bounded source-open replay. It checks SwiftPM build-witness posture, recording-state control, capture-helper bridge contracts, recorder-store capture FSM boundaries, hotkey/audio-meter behavior, and transcribe-payload construction, with negative cases that prevent app-launch, capture, model-dispatch, source-file changes, UI-coverage, public sharing, or launch overclaims.",
     "scope_limit": "It validates only Demo Take Console copied Swift source bodies and bounded deterministic exercises; it does not launch the app, authorize screen or microphone capture, export recording sessions, execute FFmpeg, dispatch WhisperKit or other models, change source files, prove complete UI coverage, authorize public sharing, or include launch operations.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "PYTHONPATH=src python3 -m microcosm_core.organs.batch7_demo_take_console_capsule run --input fixtures/first_wave/batch7_demo_take_console_capsule/input --out receipts/first_wave/batch7_demo_take_console_capsule --acceptance-out receipts/acceptance/first_wave/batch7_demo_take_console_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "batch8_audio_level_rms_port",
       "label": "Audio Level RMS Port",
       "relative_href": "docs/components.html#component-batch8_audio_level_rms_port"
      },
      {
       "component_id": "batch6_unsurfaced_primitives_capsule",
       "label": "Unsurfaced Source Primitives Bundle",
       "relative_href": "docs/components.html#component-batch6_unsurfaced_primitives_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_demo_take_console_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1244
    },
    {
     "id": "batch8_tools_tail_primitives_capsule",
     "label": "Tools-Tail Primitives Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch8_tools_tail_primitives_capsule",
     "summary_line": "Exercises four copied helper tools over fixed inputs without touching live systems or data.",
     "what_it_does": "This bundle imports four Set-8 tools-tail primitives as copied public source bodies with deterministic fixture exercises. It exposes observer set diffs, JSON patch interpretation, stable ledger-id hashing, and shadow envelope parsing without invoking live oracles, repository mutation, external model access, public sharing, or launch-scope decision.",
     "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch8-tools-tail-primitives-capsule run --input fixtures/first_wave/batch8_tools_tail_primitives_capsule/input --out receipts/first_wave/batch8_tools_tail_primitives_capsule --acceptance-out receipts/acceptance/first_wave/batch8_tools_tail_primitives_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_tools_tail_primitives_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 900
    },
    {
     "id": "batch8_policy_engines_capsule",
     "label": "Policy Engines Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch8_policy_engines_capsule",
     "summary_line": "Maps three policy engines over test data without model calls or live campaign execution.",
     "what_it_does": "This bundle imports three Set-8 policy-engine bodies as copied public source modules with deterministic fixture exercises. It exposes lab contract audit, market fusion readiness, and campaign transition adjudication mechanics without model dispatch, live campaign execution, public sharing, or launch-scope decision.",
     "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch8-policy-engines-capsule run --input fixtures/first_wave/batch8_policy_engines_capsule/input --out receipts/first_wave/batch8_policy_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch8_policy_engines_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_policy_engines_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 828
    },
    {
     "id": "batch8_audio_level_rms_port",
     "label": "Audio Level RMS Port",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch8_audio_level_rms_port",
     "summary_line": "Computes the audio loudness math on test arrays without opening a microphone or capturing input.",
     "what_it_does": "This port projects the pure AudioLevelMonitor normalized-level RMS math into a runnable Python fixture over synthetic sample arrays. It exposes the normalization behavior without starting an audio session, requesting microphone permission, capturing device input, publishing, or granting launch control.",
     "scope_limit": "projection mechanics only, not domain-level conclusions",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm batch8-audio-level-rms-port run --input fixtures/first_wave/batch8_audio_level_rms_port/input --out receipts/first_wave/batch8_audio_level_rms_port --acceptance-out receipts/acceptance/first_wave/batch8_audio_level_rms_port_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_audio_level_rms_port.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 735
    },
    {
     "id": "batch8_structural_theses_capsule",
     "label": "Structural Theses Finance Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch8_structural_theses_capsule",
     "summary_line": "Runs a copied finance-thesis model through dated test cases with no live market data or advice.",
     "what_it_does": "This bundle imports the structural_theses finance spine as a copied public source body with synthetic dated thesis-card exercises. The exercises run the lifecycle/backtest mechanics without live market data, investment-related actions, portfolio action, external model access, public sharing, or launch-scope decision.",
     "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch8-structural-theses-capsule run --input fixtures/first_wave/batch8_structural_theses_capsule/input --out receipts/first_wave/batch8_structural_theses_capsule --acceptance-out receipts/acceptance/first_wave/batch8_structural_theses_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "batch12_prediction_market_board_capsule",
       "label": "Prediction Market Board Bundle",
       "relative_href": "docs/components.html#component-batch12_prediction_market_board_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_structural_theses_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 860
    },
    {
     "id": "engine_room_demo",
     "label": "Engine Room Demo",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-engine_room_demo",
     "summary_line": "Runs proof, runtime, security, and routing demos through bounded public examples with stated limits.",
     "what_it_does": "This component turns the staged Engine Room bundles into one accepted public demo surface. It exercises the proof-search, runtime, integrity, security, navigation, orchestration, and reference-routing bundles through bounded public fixtures with explicit scope boundaries.",
     "scope_limit": "It validates only the public Engine Room composition contract; it is not deployment posture, private-system equivalence, frontier theorem proving, complete security proof, public sharing, or launch-scope decision.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm engine-room-demo run --input fixtures/first_wave/engine_room_demo/input --out receipts/first_wave/engine_room_demo --acceptance-out receipts/acceptance/first_wave/engine_room_demo_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "batch8_compliance_pipeline_capsule",
       "label": "Compliance Pipeline Bundle",
       "relative_href": "docs/components.html#component-batch8_compliance_pipeline_capsule"
      },
      {
       "component_id": "batch8_validator_checker_capsule",
       "label": "Validator Checker Bundle",
       "relative_href": "docs/components.html#component-batch8_validator_checker_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_demo.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 818
    },
    {
     "id": "batch9_macro_engines_capsule",
     "label": "Backend & Governance Engines Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch9_macro_engines_capsule",
     "summary_line": "Exercises thirteen copied backend and governance engines over fixed public test cases.",
     "what_it_does": "This bundle imports the Set-9 source engines as exact copied source bodies plus deterministic public exercises. The exercises inspect thirteen backend, governance, projection, frontend data-shaping, worker-gate, and quality-accounting mechanisms, their source-module digest evidence, and the negative cases that prevent live-authority or result record-only overclaims.",
     "scope_limit": "It validates only a public source-open bundle and bounded synthetic exercises; it is not live lineage truth, human approval authority, market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch9-macro-engines-capsule run --input fixtures/first_wave/batch9_macro_engines_capsule/input --out receipts/first_wave/batch9_macro_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch9_macro_engines_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "batch10_governance_compilers_capsule",
       "label": "Governance & Compiler Mechanisms Bundle",
       "relative_href": "docs/components.html#component-batch10_governance_compilers_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch9_macro_engines_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1055
    },
    {
     "id": "batch10_governance_compilers_capsule",
     "label": "Governance & Compiler Mechanisms Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch10_governance_compilers_capsule",
     "summary_line": "Checks thirteen copied governance and compiler routines against the code they were copied from.",
     "what_it_does": "This bundle imports the Set-10 governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source mechanisms as source-open system. It exposes for inspection the exact source-module digest evidence, the source-faithful public refactor for public sharing-manifest selector checks, the deterministic exercises, and the planted negative cases without exposing non-public paths, copied body text in result records, live ledgers, or launch-scope decision.",
     "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live ledger control, or source-file changes.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch10-governance-compilers-capsule run --input fixtures/first_wave/batch10_governance_compilers_capsule/input --out receipts/first_wave/batch10_governance_compilers_capsule --acceptance-out receipts/acceptance/first_wave/batch10_governance_compilers_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_governance_compilers_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1089
    },
    {
     "id": "batch11_saturation_engines_capsule",
     "label": "Saturation Engines Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch11_saturation_engines_capsule",
     "summary_line": "Verifies twelve copied engine routines and computes each failure probe from inputs, not echoes.",
     "what_it_does": "This bundle imports twelve Set-11 saturation-engine mechanisms as source-open system. It exposes for inspection exact source-module digest evidence, source-faithful computed exercises, and computed negative-case probes without exposing non-public paths, copied body text in result records, live runtime state, source-file changes, public sharing, or launch-scope decision.",
     "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live runtime control, or source-file changes.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch11-saturation-engines-capsule run --input fixtures/first_wave/batch11_saturation_engines_capsule/input --out receipts/first_wave/batch11_saturation_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "macro_projection_import_protocol",
       "label": "Source Projection Import Protocol",
       "relative_href": "docs/components.html#component-macro_projection_import_protocol"
      },
      {
       "component_id": "batch8_compliance_pipeline_capsule",
       "label": "Compliance Pipeline Bundle",
       "relative_href": "docs/components.html#component-batch8_compliance_pipeline_capsule"
      },
      {
       "component_id": "navigation_hologram_route_plane",
       "label": "Navigation Hologram Route Plane",
       "relative_href": "docs/components.html#component-navigation_hologram_route_plane"
      },
      {
       "component_id": "agent_route_observability_runtime",
       "label": "Agent Route Observability Runtime",
       "relative_href": "docs/components.html#component-agent_route_observability_runtime"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch11_saturation_engines_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 958
    },
    {
     "id": "tool_server_pressure_inventory",
     "label": "Tool Server Pressure Inventory",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-tool_server_pressure_inventory",
     "summary_line": "Flags detached helper processes and launch pressure from synthetic rows, not live hosts.",
     "what_it_does": "This component imports the source helper-process pressure inventory pattern as a public-safe, read-only validator. Over synthetic ps-shaped process rows it surfaces detached helper candidates, active-owner descendants, keep runtimes, and owner-launch pressure groups without reading live host processes or exposing command bodies.",
     "scope_limit": "validates declared public helper-process pressure inventory contract only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, non-public data equivalence, or whole-system correctness",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm tool-server-pressure-inventory run --input fixtures/first_wave/tool_server_pressure_inventory/input --out receipts/first_wave/tool_server_pressure_inventory --acceptance-out receipts/acceptance/first_wave/tool_server_pressure_inventory_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tool_server_pressure_inventory.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 956
    },
    {
     "id": "batch8_compliance_pipeline_capsule",
     "label": "Compliance Pipeline Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch8_compliance_pipeline_capsule",
     "summary_line": "Confirms six copied compliance source files carry their functions; runs one helper on sample text.",
     "what_it_does": "This component imports the compliance adapter registry, compliance coverage and baseline scanners, Microcosm compliance adapter, bounded compliance-ledger builder, and observe pipeline stages as public runnable system. Running it shows how registered compliance adapters, bounded no-write checks, baseline companion scans, digest normalization, observe-plan helper selection, and dispatch/process boundaries fit together without refreshing the live ledger or dispatching providers.",
     "scope_limit": "validates declared public Set 8 compliance pipeline bundle contract only; no full compliance-ledger freshness, external model access, model dispatch, source-file changes, source note mutation, launch, public sharing, non-public data equivalence, or whole-system correctness",
     "evidence": {
      "kind": "Computed projection",
      "basis": "Source-faithful refactor",
      "rank": 3,
      "runs_real_tools": false
     },
     "command": "microcosm batch8-compliance-pipeline-capsule validate-bundle --input examples/batch8_compliance_pipeline_capsule/exported_batch8_compliance_pipeline_capsule_bundle --out /tmp/microcosm-batch8-compliance-pipeline-capsule",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "macro_projection_import_protocol",
       "label": "Source Projection Import Protocol",
       "relative_href": "docs/components.html#component-macro_projection_import_protocol"
      },
      {
       "component_id": "batch11_saturation_engines_capsule",
       "label": "Saturation Engines Bundle",
       "relative_href": "docs/components.html#component-batch11_saturation_engines_capsule"
      },
      {
       "component_id": "navigation_hologram_route_plane",
       "label": "Navigation Hologram Route Plane",
       "relative_href": "docs/components.html#component-navigation_hologram_route_plane"
      },
      {
       "component_id": "agent_route_observability_runtime",
       "label": "Agent Route Observability Runtime",
       "relative_href": "docs/components.html#component-agent_route_observability_runtime"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_compliance_pipeline_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1101
    },
    {
     "id": "batch10_live_source_drift_capsule",
     "label": "Live Source Drift Bundle",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch10_live_source_drift_capsule",
     "summary_line": "Compares four copied router and landing routines against current code to surface stale copies.",
     "what_it_does": "This component imports exact current public source bodies for the option-surface router, mission-transaction landing preflight, work landing controller, and work log controller. Running it inspects stale-versus-current digest repair, source anchors, and compile-only validation without reading private runtime state or granting live mutation authority.",
     "scope_limit": "verified source body import only, not route authority, work log or work log mutation authority, mission-transaction execution, git staging or commit approval, source-file changes, non-public runtime export, launch, or public sharing",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch10-live-source-drift-capsule run --input fixtures/first_wave/batch10_live_source_drift_capsule/input --out receipts/first_wave/batch10_live_source_drift_capsule --acceptance-out receipts/acceptance/first_wave/batch10_live_source_drift_capsule_fixture_acceptance.json",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [
      {
       "component_id": "batch10_governance_compilers_capsule",
       "label": "Governance & Compiler Mechanisms Bundle",
       "relative_href": "docs/components.html#component-batch10_governance_compilers_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_live_source_drift_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 987
    },
    {
     "id": "batch12_release_claim_language_gate",
     "label": "Release Public Wording Gate",
     "family_id": "import_projection_and_drift",
     "family_label": "Import & drift control",
     "relative_href": "docs/components.html#component-batch12_release_claim_language_gate",
     "summary_line": "Flags affirmative open-source and deployment-posture wording while allowing safe boundary notes.",
     "what_it_does": "This component imports the launch claim-language gate as public runnable system. Running it over small public sharing-manifest fixtures shows boundary-only warnings allowed while affirmative open-source and production-readiness wording is classified as active claim language and blocked by the assert-clear contract.",
     "scope_limit": "This is lexical fixture evidence only; it is not launch-scope decision, not publishing-scope decision, not semantic NLP truth, not secret-scan coverage, and not whole-system correctness.",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm batch12-release-claim-language-gate run-release-claim-language-gate-bundle --input examples/batch12_release_claim_language_gate/exported_batch12_release_claim_language_gate_bundle --out receipts/runtime_shell/demo_project/organs/batch12_release_claim_language_gate",
     "tags": [
      "source intake",
      "provenance",
      "drift-control"
     ],
     "links_to": [],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_release_claim_language_gate.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 903
    },
    {
     "id": "mission_transaction_work_spine",
     "label": "Mission Transaction Work Spine",
     "family_id": "work_landing_and_continuity",
     "family_label": "Work & continuity",
     "relative_href": "docs/components.html#component-mission_transaction_work_spine",
     "summary_line": "Runs the real work-ledger engine on a sanitised snapshot to re-derive each change's verdict.",
     "what_it_does": "Replays a fixed set of pre-recorded work-landing situations against a toy repository and shows when a change would be allowed to \"land\" versus blocked: two claims competing on the same file, a claim built on a stale parent commit, a claim missing its owned path, a clean preflight check that wrongly says the work is already finished, and which commit lane (a narrow scoped commit vs a broad checkpoint) a dirty working tree is permitted to use. Its exported bundle also anchors the public work log seed-speed source imports for session heartbeat, mutation-check, active-claim snapshot, and path-collision handling. The resulting result records show exactly why each situation was permitted or refused, instead of an opaque \"it's done\" message.",
     "scope_limit": "It validates work-landing, claim, checkpoint-lane, and dependency metadata projections over fixed fixtures only; it does not mutate live ledgers or git, certify real completion, authorize broad staging without operator intent, or prove any change is actually correct or complete.",
     "evidence": {
      "kind": "Bounded runtime computation",
      "basis": "Real runtime result",
      "rank": 4,
      "runs_real_tools": true
     },
     "command": "microcosm mission-transaction-work-spine run --input fixtures/first_wave/mission_transaction_work_spine/input --out receipts/first_wave/mission_transaction_work_spine",
     "tags": [
      "agent-concurrency",
      "workflow-engineering",
      "continuity"
     ],
     "links_to": [
      {
       "component_id": "bounded_autonomy_campaign_packet",
       "label": "Bounded Autonomy Campaign Packet",
       "relative_href": "docs/components.html#component-bounded_autonomy_campaign_packet"
      },
      {
       "component_id": "concurrency_mission_control",
       "label": "Concurrency Mission Control",
       "relative_href": "docs/components.html#component-concurrency_mission_control"
      },
      {
       "component_id": "macro_projection_import_protocol",
       "label": "Source Projection Import Protocol",
       "relative_href": "docs/components.html#component-macro_projection_import_protocol"
      },
      {
       "component_id": "tool_server_pressure_inventory",
       "label": "Tool Server Pressure Inventory",
       "relative_href": "docs/components.html#component-tool_server_pressure_inventory"
      },
      {
       "component_id": "batch10_live_source_drift_capsule",
       "label": "Live Source Drift Bundle",
       "relative_href": "docs/components.html#component-batch10_live_source_drift_capsule"
      },
      {
       "component_id": "batch4_proof_authority_runtime",
       "label": "Proof / Control / Runtime Import Bundle",
       "relative_href": "docs/components.html#component-batch4_proof_authority_runtime"
      },
      {
       "component_id": "batch8_tools_tail_primitives_capsule",
       "label": "Tools-Tail Primitives Bundle",
       "relative_href": "docs/components.html#component-batch8_tools_tail_primitives_capsule"
      },
      {
       "component_id": "agent_benchmark_integrity_anti_gaming_replay",
       "label": "Agent Benchmark Integrity Anti Gaming Replay",
       "relative_href": "docs/components.html#component-agent_benchmark_integrity_anti_gaming_replay"
      },
      {
       "component_id": "agentic_vulnerability_discovery_patch_proof_replay",
       "label": "Agentic Vulnerability Discovery Patch Proof Replay",
       "relative_href": "docs/components.html#component-agentic_vulnerability_discovery_patch_proof_replay"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.mission_transaction_work_spine"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1315
    },
    {
     "id": "durable_agent_work_landing_replay",
     "label": "Durable Agent Work Landing Replay",
     "family_id": "work_landing_and_continuity",
     "family_label": "Work & continuity",
     "relative_href": "docs/components.html#component-durable_agent_work_landing_replay",
     "summary_line": "Audits recorded work-claims so each cites files, validates before commit, and proves HEAD moved.",
     "what_it_does": "This checks recorded examples of an agent finishing a piece of work the careful way: each example must name the exact files it claims to have touched, show that validation was recorded before any commit was attempted, and only label itself \"committed\" if the example also records the repository's HEAD moving. It also checks that blockers and ledger completion were captured. The check shows whether each recorded work-claim carries the required evidence and ordering, rather than being an unbacked chat boast. It judges the recorded claims against the contract; it does not run Git or prove that any commit truly landed in a real repository.",
     "scope_limit": "It validates only the declared public work-landing contract over recorded rows. It is evidence for fixture-local completion mechanics, not for live Git side effects, unrelated-path staging, non-public body export, service operation, or distribution clearance.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm durable-agent-work-landing-replay run-work-landing-bundle",
     "tags": [
      "workflow-engineering",
      "continuity"
     ],
     "links_to": [
      {
       "component_id": "agent_closeout_faithfulness_audit",
       "label": "Agent Completion Faithfulness Audit",
       "relative_href": "docs/components.html#component-agent_closeout_faithfulness_audit"
      },
      {
       "component_id": "macro_projection_import_protocol",
       "label": "Source Projection Import Protocol",
       "relative_href": "docs/components.html#component-macro_projection_import_protocol"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.durable_agent_work_landing_replay"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1101
    },
    {
     "id": "bridge_phase_continuity_runtime",
     "label": "Bridge Phase Continuity Runtime",
     "family_id": "work_landing_and_continuity",
     "family_label": "Work & continuity",
     "relative_href": "docs/components.html#component-bridge_phase_continuity_runtime",
     "summary_line": "Replays a paused job to prove the rules for safely resuming it hold and reject duplicate resumes.",
     "what_it_does": "Replays a small synthetic record of a paused background job to check that the rules for safely resuming it hold. It confirms the job left behind a real resume note, that trying to resume the same job twice is refused, that \"still alive\" pings can never count as permission to resume (and a long-stale ping can't be passed off as proof the job is still healthy), and that only a proper completion result record is allowed to claim the work actually finished. It also includes deliberately broken cases to prove each rule rejects them. These continuity rules are inspectable in plain result records without any live job, network call, or non-public data ever being touched.",
     "scope_limit": "It validates only the declared public continuity contract over synthetic fixtures; it does not run live bridge transport, use external model services, read operator HUD/browser/phase-runtime or private-memory state, prove provider or UI uptime, land work, change source files, or include launch operations.",
     "evidence": {
      "kind": "Contract validator",
      "basis": "Import validation",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm bridge-phase-continuity-runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity",
     "tags": [
      "workflow-engineering",
      "continuity"
     ],
     "links_to": [
      {
       "component_id": "agent_memory_temporal_conflict_replay",
       "label": "Agent Memory Temporal Conflict Replay",
       "relative_href": "docs/components.html#component-agent_memory_temporal_conflict_replay"
      },
      {
       "component_id": "concurrency_mission_control",
       "label": "Concurrency Mission Control",
       "relative_href": "docs/components.html#component-concurrency_mission_control"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.bridge_phase_continuity_runtime"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1260
    },
    {
     "id": "concurrency_mission_control",
     "label": "Concurrency Mission Control",
     "family_id": "work_landing_and_continuity",
     "family_label": "Work & continuity",
     "relative_href": "docs/components.html#component-concurrency_mission_control",
     "summary_line": "Runs copied claim-coordination code so duplicate, stale, and conflicting claims get blocked.",
     "what_it_does": "This component imports the real concurrency mission-control specimen builder plus public provider and work log bridge artifacts as exact copies. Running it shows duplicate claims, dependency conflicts, stale leases, missing result records, supervised finalizers, and misanchored claims blocked through repair rows while authority-collapse counters stay at zero.",
     "scope_limit": "verified concurrency mission-control source body import only, not a live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, public sharing, or launch-scope decision",
     "evidence": {
      "kind": "Verified source import",
      "basis": "Copied source body",
      "rank": 5,
      "runs_real_tools": false
     },
     "command": "microcosm concurrency-mission-control run --input fixtures/first_wave/concurrency_mission_control/input --out receipts/first_wave/concurrency_mission_control --acceptance-out receipts/acceptance/first_wave/concurrency_mission_control_fixture_acceptance.json",
     "tags": [
      "agent-concurrency",
      "workflow-engineering",
      "continuity"
     ],
     "links_to": [
      {
       "component_id": "mission_transaction_work_spine",
       "label": "Mission Transaction Work Spine",
       "relative_href": "docs/components.html#component-mission_transaction_work_spine"
      },
      {
       "component_id": "batch10_live_source_drift_capsule",
       "label": "Live Source Drift Bundle",
       "relative_href": "docs/components.html#component-batch10_live_source_drift_capsule"
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/concurrency_mission_control.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 993
    }
   ],
   "paper_modules": [
    {
     "id": "paper_module.verifier_lab_kernel",
     "title": "Verifier Lab Kernel",
     "relative_href": "docs/paper-modules.html#paper-module-verifier-lab-kernel",
     "read_href": "docs/paper-modules.html#paper-module-verifier-lab-kernel",
     "context_href": "docs/rules-and-ideas.html#paper-module-verifier-lab-kernel",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public verifier-lab composition root folds bounded formal-math component result records into one leak-proof result record while separating verifier-backed, oracle-compared, provider-suggested, retrieval-miss, CP2, Evolve, and contract-rejected rows.",
     "summary": "Verifier Lab Kernel is the public result record compiler for the formal-math fixture cohort. It runs or consumes named component result records, classifies proof-lab rows by authority class, preserves scope boundaries, and excludes proof/provider/oracle bodies from exported result records.",
     "authority_ceiling": "Public fixture and exported-bundle result records only; no theorem-prover authority, Mathlib import authority, oracle-to-forward success, provider proof authority, benchmark solve-rate claim, launch-scope decision, publishing-scope decision, source-file changes, or secret export.",
     "abstract": "The public verifier-lab composition root folds bounded formal-math component result records into one leak-proof result record while separating verifier-backed, oracle-compared, provider-suggested, retrieval-miss, CP2, Evolve, and contract-rejected rows.",
     "teleology": {
      "section_id": "",
      "text": "The public verifier-lab composition root folds bounded formal-math component result records into one leak-proof result record while separating verifier-backed, oracle-compared, provider-suggested, retrieval-miss, CP2, Evolve, and contract-rejected rows.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`verifier_lab_kernel` is the public composition root for the formal-math verifier lab. It is not a theorem prover, a benchmark runner, a private Lean import, or a frontend surface. It composes already-public Microcosm components into one leak-proof result record so a reader can see which claim came from a verifier, which claim came from an oracle comparator, which claim came from a provider hypothesis, and which rows were rejected by contract.\n\nThe component consumes:\n- a public `ForwardProblem` packet with target shape, statement summary, public input hash, and allowed premise ids;\n- an `OracleSidecar` packet that may compare against hidden or hindsight knowledge but never increments forward success;\n- verifier attempts and verifier result classes;\n- provider/NIM hypotheses as advisory residual diagnoses only;\n- CP2 typed action candidates, bounded evidence bodies or raw tactic scripts;\n- bounded Evolve candidates over policy artifacts only.\n\nThe runnable fixture also calls the existing public components:\n- `tactic_portfolio_availability_probe`;\n- `target_shape_tactic_routing_gate`;\n- `formal_math_verifier_trace_repair_loop`;\n- `formal_math_lean_proof_witness`.\n\n###### Purpose\n\nIn a formal-math agent loop, several different things can look like progress. A Lean checker can accept a term. An oracle holding a hindsight answer can say a candidate matches. A provider model can offer a plausible next tactic. A retrieval step can return a premise. Treated loosely, all of these blur into a single sense of \"it worked\", and oracle or provider success quietly inflates the count of theorems actually proved. This component exists to stop that blur. The one question it answers is: for each row of evidence, which authority class does it belong to, and what may that class claim?\n\nThe composition root runs or consumes nine named component components (corpus readiness, Lean Std premise indexing, premise retrieval, tactic availability, target-shape routing, Ring2 precision and recall, verifier trace repair, proof diagnostics, and the Lean proof witness) and sorts every result into seven separate buckets: verifier-checked, provider-suggested, oracle-compared, retrieval-miss, CP2-translated, Evolve-candidate, and contract-rejected. Each bucket keeps its own authority. A passing component cannot lend its standing to a different bucket.\n\nThe unusual part is how the boundary is enforced rather than merely described. The kernel keeps two counters, `oracle_forward_success_increment_count` and `provider_results_counted`, and they must read zero. An oracle that marks itself as forward success, or a provider hypothesis that claims proof authority, is recorded as a contract violation, not as a result. The same discipline applies to data: forward problems and CP2 actions are scanned for fields that would smuggle in a proof body, an ideal answer, or an oracle's needed premise ids, and CP2 and Evolve outputs are confined to a fixed vocabulary of action classes and policy artifacts. What the reader receives is a single aggregate result record that carries references, digests, counts, and verdicts, with the proof, provider, oracle, and stdout bodies left out.\n\n###### Shape\n\nRead the verifier lab kernel as a public result record composition route, not as a proof oracle. The local path spine is the bundle and structured source record (`core/paper_module_capsules.json::paper_modules[0:paper_module.verifier_lab_kernel]`, `paper_modules/verifier_lab_kernel.json`), the runtime composition root (`src/microcosm_core/organs/verifier_lab_kernel.py`), the public packet (`fixtures/first_wave/verifier_lab_kernel/input/verifier_lab_packet.json`), and the emitted public result records under `receipts/first_wave/verifier_lab_kernel/`.\n\nSource refs\n\nBundle and structured source record `core/paper_module_capsules.json` `paper_modules/verifier_lab_kernel.json` Public verifier packet `fixtures/first_wave/verifier_lab_kernel/input/verifier_lab_packet.json` Composition root `src/microcosm_core/organs/verifier_lab_kernel.py` Public board/result/validation result records `receipts/first_wave/verifier_lab_kernel/*.json` Diagram source\n\n```text\nflowchart TD bundle[\"Bundle and structured source record core/paper_module_capsules.json paper_modules/verifier_lab_kernel.json\"] packet[\"Public verifier packet fixtures/first_wave/verifier_lab_kernel/input/verifier_lab_packet.json\"] kernel[\"Composition root src/microcosm_core/components/verifier_lab_kernel.py\"] components[\"Public component result records tactic portfolio / target shape / trace repair / Lean witness\"] buckets[\"Separated claim buckets lean_verified | oracle_compared | provider_suggested | retrieval_miss | cp2_translated | evolve_candidate | contract_rejected\"] result records[\"Public board/result/validation result records result records/first_wave/verifier_lab_kernel/*.json\"] ceiling[\"Scope limit no proof-body import; no oracle/provider forward success; no launch claim\"] bundle --> packet --> kernel kernel --> components --> buckets --> result records kernel --> ceiling buckets --> ceiling\n```\n\n###### Prior Art Grounding\n\nThis component is grounded in small-kernel theorem-proving and proof-certificate composition patterns. The [LCF approach](https://www.research.ed.ac.uk/en/publications/lcf-a-way-of-doing-proofs-with-a-machine/) and [HOL Light](https://www.cl.cam.ac.uk/~jrh13/papers/hollight.html) anchor the idea that a verifier lab should distinguish trusted checked results from heuristics and automation. Lean-oriented work such as [LeanDojo](https://arxiv.org/abs/2306.15626) adds the modern agent context: retrieval, provider hypotheses, and proof-state interaction need explicit boundaries before they can influence proof claims.\n\nMicrocosm borrows the composition discipline: verifier success, oracle comparison, provider hypothesis, CP2 translation, and Evolve candidate rows are separate buckets with separate authority. It does not count oracle or provider success as forward proof success.\n\nThe sign-off result record must separate these buckets:\n- `lean_verified`;\n- `provider_suggested`;\n- `oracle_compared`;\n- `contract_rejected`;\n- `retrieval_miss`;\n- `cp2_translated`;\n- `evolve_candidate`.\n\nThe kernel rejects five contract failures:\n- forward problems that carry candidate, ideal, repair, oracle, source proof, proof body, or base-index fields;\n- oracle comparator success counted as forward success;\n- provider hypotheses claiming proof authority;\n- CP2 candidates carrying proof bodies, raw tactic scripts, provider bodies, or oracle templates;\n- Evolve candidates mutating anything outside the bounded policy-artifact set.\n\n###### Reader Evidence Routing\n\nCold-reader audit starts with the generated structured source record for this module, not with a broad theorem-proving claim. The structured source record must confirm that verifier and mechanism subjects resolve and that a diagram view and atlas card are available for this module.\n\nEvidence should be read in this order:\n- Module definition: `core/paper_module_capsules.json::paper_module.verifier_lab_kernel` and `paper_modules/verifier_lab_kernel.json`.\n- Runtime proof: `src/microcosm_core/organs/verifier_lab_kernel.py`, the fixture input packet, and the public component calls listed above.\n- Bucket-separation proof: result record rows for `lean_verified`, `provider_suggested`, `oracle_compared`, `contract_rejected`, `retrieval_miss`, `cp2_translated`, and `evolve_candidate`.\n- Negative boundary proof: rejection of private proof bodies, oracle-to-forward success, provider proof authority, CP2 proof bodies, arbitrary Evolve mutation, source-file changes, benchmark solve-rate claims, launch claims, hosted-deployment claims, and secret export.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_verifier_lab_kernel.py -q --basetemp=/tmp/microcosm_verifier_lab_kernel_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module describes public fixture and exported bundle result records only. It excludes private proof-body import, Mathlib-dependent proof authority, oracle-to-forward success, provider proof authority, CP2 proof bodies, arbitrary Evolve mutation, source-file changes, benchmark solve-rate claims, launch, public sharing, hosted deployment, or secret export.\n\n###### Limitations\n\nThe verifier lab kernel is a composition and result record-boundary mechanism. It does not establish formal-result correctness beyond the public component result records it consumes or emits, and it does not create Mathlib import authority when the corpus-readiness gate reports only bounded fixture evidence. A Lean/Lake return code or compiled declaration count is evidence for the corresponding public fixture or exported bundle, not a license to generalize to arbitrary formal math benchmarks.\n\nOracle structured source record remain hindsight or comparator evidence. They can diagnose a forward problem but cannot increment `forward_success`; the runtime authority counters must keep `oracle_forward_success_increment_count` at zero. Provider or NIM hypotheses remain residual diagnoses until a verifier result record or other system effect exists, so `provider_results_counted` must also remain zero.\n\nCP2 rows are limited to typed action candidates from the bounded action-class vocabulary, with disconfirmation tests before rerun promotion. They are bounded evidence bodies, raw tactic scripts, provider output bodies, or oracle templates. Evolve rows are limited to the named policy-artifact set and must cite baseline or rerun result records; they do not authorize arbitrary source-file changes. Public result records must keep proof, provider, oracle, stdout/stderr, and private-source bodies out of exported evidence.\n\nCoverage is finite: the present proof consumer exercises the first-wave fixture and exported-bundle contracts, the five named negative cases, and the component-stack result record shape. New claim classes, new fixture packets, or new launch/public sharing language need a fresh proof consumer and negative cases before this module can carry them.\n\n###### Scope limit\n\nThis paper module can claim reader wiring for the verifier lab kernel composition root: verifier and mechanism subjects resolve, the runtime source locus is named, a diagram view and atlas card are generated for this module. It cannot claim private proof-body import, Mathlib-dependent proof authority, oracle-to-forward success, provider proof authority, CP2 proof bodies, arbitrary Evolve mutation, source-file changes, benchmark solve-rate claims, publishing-scope decision, hosted deployment, launch-scope decision, secret export, or whole-system correctness.\n\nFixture result records, exported-bundle result records, focused tests, and public component composition can support only bucket separation across verifier, oracle, provider, CP2, and Evolve rows. The diagram view and atlas card are navigation aids; they do not convert oracle or provider success into forward proof success, and they do not authorize benchmark or launch claims.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing lattice should be read as a claim-separation contract. The concept edge to `concept.formal_math_and_proof_witness_bundle` says the reader is looking at a proof-witness bundle, not a single proof oracle. The mechanism edge to `mechanism.verifier_lab_kernel.composes_public_formal_math_receipts` narrows that concept to one public operation: compose formal-math component result records into a leak-proof aggregate while keeping verifier, oracle, provider, retrieval, CP2, Evolve, and contract-rejected buckets distinct.\n\nThe code-locus edge is the runtime authority boundary. `run` and `run_kernel_bundle` select fixture or exported-bundle mode, `_build_result` loads the public packet and negative cases, validates the proof-lab route, runs or consumes the component stack, scans for forbidden classes, builds `claim_separation`, and records authority counters. `_write_receipts` then emits the board, result, validation, and sign-off result records with `body_in_receipt: false`, the result record-transparency contract, and the same scope boundary.\n\nThe nine `depends_on` paper-module edges are not a loose bibliography. They are the proof-lab dependency spine: corpus readiness, Lean Std premise indexing, premise retrieval, tactic availability, target-shape routing, Ring2 precision and recall, verifier trace repair, proof diagnostic evidence, and the Lean proof witness each remain separately bounded before the kernel aggregates their result records. This prevents a successful component from lending authority to a different bucket. The principle refs `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-15`, plus axiom refs `AX-1`, `AX-2`, `AX-5`, and `AX-7`, are therefore read as ceiling law: public result record evidence may be composed, but hidden bodies, provider/oracle success, source-file changes, launch-scope decision, and whole-system correctness cannot cross the lattice boundary.\n\nFocused test evidence checks the same relation. The verifier-lab test asserts that all expected negative cases are observed, all component statuses pass, `claim_separation` contains exactly the seven public buckets, oracle/provider authority counters stay at zero, `body_in_receipt` is false, public result record paths do not leak local roots, and legacy redaction fields do not survive result record normalization. Those checks make the lattice relation concrete for this module: the public aggregate result record is evidence of separation and containment, not of unbounded proof authority.\n\nEvidence binding:\n- JSON bundle authority: `core/paper_module_capsules.json#paper_module.verifier_lab_kernel`.\n- Mechanism source: `core/mechanism_sources.json#mechanism.verifier_lab_kernel.composes_public_formal_math_receipts`.\n- Component atlas edge: `core/organ_atlas.json#verifier_lab_kernel`.\n- Runtime source: `src/microcosm_core/organs/verifier_lab_kernel.py`.\n- First command: `PYTHONPATH=src python3 -m microcosm_core.organs.verifier_lab_kernel run --input fixtures/first_wave/verifier_lab_kernel/input --out receipts/first_wave/verifier_lab_kernel`.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 14270,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "In a formal-math agent loop, several different things can look like progress. A Lean checker can accept a term. An oracle holding a hindsight answer can say a candidate matches. A provider model can offer a plausible next tactic. A retrieval step can return a premise. Treated loosely, all of these blur into a single sense of \"it worked\", and oracle or provider success quietly inflates the count of theorems actually proved. This component exists to stop that blur. The one question it answers is: for each row of evidence, which authority class does it belong to, and what may that class claim? The composition root runs or consumes nine named component components (corpus readiness, Lean Std pre\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Read the verifier lab kernel as a public result record composition route, not as a proof oracle. The local path spine is the bundle and structured source record (core/papermodulecapsules.json::papermodules[0:papermodule.verifierlabkernel], papermodules/verifierlab_kernel.json), the runtime composition root (src/microcosmcore/components/verifierlab_kernel.py), the public packet (fixtures/firstwave/verifierlabkernel/input/verifierlab_packet.json), and the emitted public result records under result records/firstwave/verifierlab_kernel/.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in small-kernel theorem-proving and proof-certificate composition patterns. The LCF approach and HOL Light anchor the idea that a verifier lab should distinguish trusted checked results from heuristics and automation. Lean-oriented work such as LeanDojo adds the modern agent context: retrieval, provider hypotheses, and proof-state interaction need explicit boundaries before they can influence proof claims. Microcosm borrows the composition discipline: verifier success, oracle comparison, provider hypothesis, CP2 translation, and Evolve candidate rows are separate buckets with separate authority. It does not count oracle or provider success as forward proof success\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module describes public fixture and exported bundle result records only. It excludes private proof-body import, Mathlib-dependent proof authority, oracle-to-forward success, provider proof authority, CP2 proof bodies, arbitrary Evolve mutation, source-file changes, benchmark solve-rate claims, launch, public sharing, hosted deployment, or secret export.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The verifier lab kernel is a composition and result record-boundary mechanism. It does not establish formal-result correctness beyond the public component result records it consumes or emits, and it does not create Mathlib import authority when the corpus-readiness gate reports only bounded fixture evidence. A Lean/Lake return code or compiled declaration count is evidence for the corresponding public fixture or exported bundle, not a license to generalize to arbitrary formal math benchmarks. Oracle structured source record remain hindsight or comparator evidence. They can diagnose a forward problem but cannot increment forward_success; the runtime authority counters must keep oracleforward\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim reader wiring for the verifier lab kernel composition root: verifier and mechanism subjects resolve, the runtime source locus is named, a diagram view and atlas card are generated for this module. It cannot claim private proof-body import, Mathlib-dependent proof authority, oracle-to-forward success, provider proof authority, CP2 proof bodies, arbitrary Evolve mutation, source-file changes, benchmark solve-rate claims, public sharing approval, hosted deployment, launch-scope decision, secret export, or whole-system correctness. Fixture result records, exported-bundle result records, focused tests, and public component composition can support only bucket separatio\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The governing lattice should be read as a claim-separation contract. The concept edge to concept.formalmathandproofwitness_bundle says the reader is looking at a proof-witness bundle, not a single proof oracle. The mechanism edge to mechanism.verifierlabkernel.composespublicformalmathreceipts narrows that concept to one public operation: compose formal-math component result records into a leak-proof aggregate while keeping verifier, oracle, provider, retrieval, CP2, Evolve, and contract-rejected buckets distinct. The code-locus edge is the runtime authority boundary. run and runkernelbundle select fixture or exported-bundle mode, buildresult loads the public packet and negative cases, valid\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Cold-reader audit starts with the generated structured source record for this module, not with a broad theorem-proving claim. The structured source record must confirm that verifier and mechanism subjects resolve and that a diagram view and atlas card are available for this module. Evidence should be read in this order: Module definition: core/papermodulecapsules.json::papermodule.verifierlab_kernel and papermodules/verifierlab_kernel.json. Runtime proof: src/microcosmcore/components/verifierlab_kernel.py, the fixture input packet, and the public component calls listed above. Bucket-separation proof: result record rows for leanverified, providersuggested, oracle_compared, contractrejected,\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.verifier_lab_kernel.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"Bundle and structured source record core/paper_module_capsules.json paper_modules/verifier_lab_kernel.json\"] packet[\"Public verifier packet fixtures/first_wave/verifier_lab_kernel/input/verifier_lab_packet.json\"] kernel[\"Composition root src/microcosm_core/components/verifier_lab_kernel.py\"] components[\"Public component result records tactic portfolio / target shape / trace repair / Lean witness\"] buckets[\"Separated claim buckets lean_verified | oracle_compared | provider_suggested | retrieval_miss | cp2_translated | evolve_candidate | contract_rejected\"] result records[\"Public board/result/validation result records result records/first_wave/verifier_lab_kernel/*.json\"] ceiling[\"Scope limit no proof-body import; no oracle/provider forward success; no launch claim\"] bundle --> packet --> kernel kernel --> components --> buckets --> result records kernel --> ceiling buckets --> ceiling",
       "source_hash": "sha256:c0465b97735952c184c22b412df96069d9ee44648ab2722ae3d6e0a487c00254",
       "html_url": "docs/paper-modules.html#paper-module-verifier-lab-kernel-diagram-1",
       "html_anchor": "paper-module-verifier-lab-kernel-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_kernel.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "LCF approach",
       "url": "https://www.research.ed.ac.uk/en/publications/lcf-a-way-of-doing-proofs-with-a-machine/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "HOL Light",
       "url": "https://www.cl.cam.ac.uk/~jrh13/papers/hollight.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "LeanDojo",
       "url": "https://arxiv.org/abs/2306.15626",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 9,
       "links": [
        {
         "id": "paper_module.corpus_readiness_mathlib_absence_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Corpus Readiness Mathlib Absence Gate",
         "url": "paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate"
        },
        {
         "id": "paper_module.lean_std_premise_index",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Lean/Std Premise Index",
         "url": "paper-modules.html#paper-module-lean-std-premise-index"
        },
        {
         "id": "paper_module.formal_math_premise_retrieval",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Premise Retrieval",
         "url": "paper-modules.html#paper-module-formal-math-premise-retrieval"
        },
        {
         "id": "paper_module.tactic_portfolio_availability",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Tactic Portfolio Availability",
         "url": "paper-modules.html#paper-module-tactic-portfolio-availability"
        },
        {
         "id": "paper_module.target_shape_tactic_routing",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Target Shape Tactic Routing",
         "url": "paper-modules.html#paper-module-target-shape-tactic-routing"
        },
        {
         "id": "paper_module.ring2_premise_precision_recall",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Ring-2 Premise Precision Recall",
         "url": "paper-modules.html#paper-module-ring2-premise-precision-recall"
        },
        {
         "id": "paper_module.formal_math_verifier_trace_repair_loop",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Verifier Trace Repair Loop",
         "url": "paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop"
        },
        {
         "id": "paper_module.proof_diagnostic_evidence_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Proof Diagnostic Evidence Spine",
         "url": "paper-modules.html#paper-module-proof-diagnostic-evidence-spine"
        },
        {
         "id": "paper_module.formal_math_lean_proof_witness",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Lean Proof Witness",
         "url": "paper-modules.html#paper-module-formal-math-lean-proof-witness"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "verifier_lab_kernel",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Verifier Lab Kernel",
         "url": "components.html#component-verifier_lab_kernel"
        },
        {
         "id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "composes public formal math result records",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_kernel.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 15370
    },
    {
     "id": "paper_module.navigation_hologram_route_plane",
     "title": "Navigation Hologram Route Plane",
     "relative_href": "docs/paper-modules.html#paper-module-navigation-hologram-route-plane",
     "read_href": "docs/paper-modules.html#paper-module-navigation-hologram-route-plane",
     "context_href": "docs/rules-and-ideas.html#paper-module-navigation-hologram-route-plane",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public navigation route-plane fixture validates bounded route projections, source-coupling gates, entry floors, affordance passports, and copied navigation source-module digests without treating browse rows as authority.",
     "summary": "Navigation Hologram Route Plane is the public route-surface validator for moving from a Microcosm-local control entry into browsable route projections. It checks route rows, source-coupling fingerprints, copied source-module anchors and hashes, route-lease policy, entry-packet floors, affordance-passport selection, and code-architecture projection packets while keeping full source bodies out of result records.",
     "authority_ceiling": "Public fixture and exported-bundle result records only; no live route freshness, source authority, provider/live-kernel execution, private operator state, later-component authorization, launch-scope decision, or whole-wave certification.",
     "abstract": "The public navigation route-plane fixture validates bounded route projections, source-coupling gates, entry floors, affordance passports, and copied navigation source-module digests without treating browse rows as authority.",
     "teleology": {
      "section_id": "teleology",
      "text": "The navigation route plane gives a public clone a typed way to move from a control entry to browseable route projections without treating browse rows as authority.",
      "source": "markdown_section"
     },
     "body_markdown": "###### Purpose\n\nA large codebase has a recurring failure: the agent or reader that lands in it starts from whatever browse surface is nearest to hand, treats that surface as the authority, and acts on a stale or partial view. The route plane exists to make the first move legible and to stop a browse row from being mistaken for the thing it describes. It answers one question: given a control entry, what is the safe ordered path into the browsable route projections, and what proof says that path is wired rather than asserted?\n\nThe unusual part is that the component never asserts a route is correct from prose. It treats every browse row as a projection and demands a coupling result record before that projection is allowed any authority. Source coupling is a plain SHA-256 over the route rows: the manifest carries an expected fingerprint and an expected row count, and if either disagrees with the rows on disk the projection is denied current authority. A route summary that claims to be current while its coupling is stale is rejected outright.\n\nThe other half of the design is what it refuses to do. First contact must begin at the control entry, not at a drilldown projection, so a request that tries to start from a browse row is replaced with the entry route. Compaction of the entry packet may not drop a required control field. An affordance row whose passport carries an anti-trigger is demoted before similarity search can ever select it. None of these are stylistic preferences; each is a named negative case the fixture must keep catching, so the route plane is defined as much by the eight things it blocks as by the path it permits.\n\n###### Teleology\n\nThe navigation route plane gives a public clone a typed way to move from a control entry to browseable route projections without treating browse rows as authority.\n\n###### Public Contract\n\nThe component runs in two modes against the same checks. The fixture mode loads a set of synthetic inputs, builds a toy option-surface from the rows (a cluster-flag summary plus one selected card), and then runs the negative-case validators that prove each guard still fires. The exported-bundle mode runs the same kind of checks against a real copied bundle: it validates the route rows, the source-coupling fingerprint, the source-module manifest, the route-lease policy, the entry-packet floor, the affordance passports, and the code-architecture projection packet, and only reports a pass when the secret scan is clean, a card row is selected, and every component validator passes.\n\nThe source-coupling gate is the spine. It hashes the route rows with SHA-256 and compares that against the fingerprint and row count declared in the manifest; a mismatch denies the projection any current authority, and a summary that claims current authority while coupling is stale is recorded as an overclaim. The source-module manifest names five exact copies of source route and control bodies. Each is checked by digest and by required navigation anchors, and each must declare that its body is copied but never written into the result record, so the evidence is reproducible without exposing the source text.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Entry[\"Control entry first browse row that claims first contact is replaced with the entry route\"] subgraph Gates[\"Route-plane gates\"] Couple[\"Source coupling SHA-256 over route rows vs manifest fingerprint + row count\"] Rows[\"Route rows surface role, actionable command, no source-authority claim, omission result record when required\"] Modules[\"Source-module manifest 5 copied source bodies digest + required anchors, body never in result record\"] Lease[\"Route-lease policy selected lane, permitted actions, source authority rejected\"] Floor[\"Entry-packet floor required control fields survive compaction\"] Pass[\"Affordance passports anti-trigger rows demoted before similarity can select them\"] end Verdict{\"Coupling current, all gates pass, card row selected?\"} Entry --> Couple Couple --> Rows --> Modules --> Lease --> Floor --> Pass --> Verdict Verdict -->|yes| Result records[\"metadata-only result records cluster flag, card, coupling, route lease, entry admission, affordance, code-architecture packet\"] Verdict -->|no| Blocked[\"Blocked stable error codes, findings, bodies redacted\"] Negative[\"Negative-case floor BANNED_FIRST_CONTACT_ROUTE, SOURCE_COUPLING_STALE, and 7 more\"] -.-> Gates Result records --> Ceiling[\"Scope limit projection evidence only; no live route freshness, source authority, or launch\"] Blocked --> Ceiling\n```\n\n###### Source-Backed Doctrine Packet\n- `core/organ_registry.json::implemented_organs[navigation_hologram_route_plane]` is the accepted component authority. It records status `accepted_current_authority`, evidence class `semantic_validator`, evidence strength rank `5`, scope limit `validates declared public contract only`, and validator command `python -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out receipts/first_wave/navigation_hologram_route_plane`.\n- `core/organ_atlas.json::organs[navigation_hologram_route_plane]` gives the cold-reader gloss: control entry comes first, browse rows stay projections, eight route-plane negative cases are detected, exact copied navigation source modules validate, and result records omit body text.\n- `standards/std_microcosm_navigation_hologram_route_plane.json` governs the standard authority boundary `public_navigation_route_plane_runtime_and_copied_source_body_validator_not_live_source_authority`. It requires route rows, option-surface contracts, source coupling, source-module manifests, route leases, entry-packet floors, affordance passports, code-architecture packets, body-import verification, scope limit, and scope boundary.\n- `src/microcosm_core/organs/navigation_hologram_route_plane.py` is the runtime source for fixture validation, route-plane bundle validation, secret-exclusion scan, route-lease checks, entry-admission floor checks, affordance-passport demotion, code-architecture packet result records, and source-module digest/anchor validation.\n- `core/fixture_manifests/navigation_hologram_route_plane.fixture_manifest.json` binds fixture expectations: `body_copied_material_count=5`, `body_material_status=copied_non_secret_macro_route_substrate_with_provenance`, `body_in_receipt=false`, and negative cases tied to stable error codes.\n- `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_module_manifest.json` names five exact copied source route-control bodies: `navigation_route_plane_intervention_source_body_import`, `navigation_route_plane_context_pack_source_body_import`, `navigation_route_plane_entry_packet_source_body_import`, `navigation_route_plane_option_surface_source_body_import`, and `navigation_route_plane_navigation_contract_source_body_import`.\n- `tests/test_navigation_hologram_route_plane.py` is the regression floor for fixture result records, exact source-source digest matches, source-module anchors, result record redaction, exported bundle validation, digest-mismatch rejection, and this source-backed paper-module packet.\n- `receipts/first_wave/navigation_hologram_route_plane/*.json` carries public result records for cluster/card output, source coupling, route lease, entry-payload admission, affordance-passport selection, code-architecture packet, and exported bundle validation.\n\nSource-module body floor:\n\nModule id Source source Public copied target `navigation_route_plane_intervention_source_body_import` `system/lib/navigation_route_intervention.py` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/system/lib/navigation_route_intervention.py` `navigation_route_plane_context_pack_source_body_import` `system/lib/navigation_context_pack.py` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/system/lib/navigation_context_pack.py` `navigation_route_plane_entry_packet_source_body_import` `system/lib/kernel/commands/comprehension_snapshot.py` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/system/lib/kernel/commands/comprehension_snapshot.py` `navigation_route_plane_option_surface_source_body_import` `system/lib/standard_option_surface.py` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/system/lib/standard_option_surface.py` `navigation_route_plane_navigation_contract_source_body_import` `codex/standards/std_navigation_contract.json` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/codex/standards/std_navigation_contract.json`\n\nRegistry result record refs:\n- `receipts/first_wave/navigation_hologram_route_plane/affordance_passport_selection_receipt.json`\n- `receipts/first_wave/navigation_hologram_route_plane/code_architecture_projection_packet_receipt.json`\n- `receipts/first_wave/navigation_hologram_route_plane/entry_payload_admission_receipt.json`\n- `receipts/first_wave/navigation_hologram_route_plane/route_lease.json`\n- `receipts/first_wave/navigation_hologram_route_plane/source_coupling_result.json`\n- `receipts/first_wave/navigation_hologram_route_plane/toy_kind_card.json`\n- `receipts/first_wave/navigation_hologram_route_plane/toy_kind_cluster_flag.json`\n\nFirst command from `microcosm-substrate/`:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out receipts/first_wave/navigation_hologram_route_plane\n```\n\nRuntime bundle command from `microcosm-substrate/`:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.navigation_hologram_route_plane validate-route-plane-bundle --input examples/navigation_hologram_route_plane/exported_route_plane_bundle --out receipts/runtime_shell/demo_project/organs/navigation_hologram_route_plane\n```\n\nStandard-declared runtime bundle validator: `python -m microcosm_core.organs.navigation_hologram_route_plane validate-route-plane-bundle --input examples/navigation_hologram_route_plane/exported_route_plane_bundle --out receipts/runtime_shell/demo_project/organs/navigation_hologram_route_plane`.\n\nAtlas scope limit restated: It validates only the declared public toy route-plane contract and its regression fixtures (plus exact copied navigation source modules in the bundle path); it does not establish live route freshness, grant source authority, authorize any later component, run any provider/live-kernel call, or certify the whole wave.\n\nThe negative-case floor is part of the doctrine, not incidental test trivia. Across the eight negative cases, the fixture must keep detecting these stable error codes (one case carries two codes, so the list runs to nine):\n- `BANNED_FIRST_CONTACT_ROUTE`\n- `SOURCE_COUPLING_STALE`\n- `MISSING_OMISSION_RECEIPT`\n- `ATLAS_PROJECTION_NOT_CONTROL_ENTRY`\n- `ROUTE_CARD_PRIVATE_BODY_LEAK`\n- `ROUTE_SUMMARY_OVERCLAIMS_FRESHNESS`\n- `DUPLICATE_ROUTE_ID_CONFLICT`\n- `ENTRY_ADMISSION_CONTROL_FLOOR_DROPPED`\n- `AFFORDANCE_PASSPORT_ANTITRIGGER_IGNORED`\n\n###### Reader Evidence Routing\n\nReader evidence starts at the generated JSON instance, then routes through the route-plane runtime, fixture manifest, source-module manifest, public result records, and focused regression. The browse rows, Mermaid diagram, and Atlas card are derived projections; they are not control-entry or source authority.\n\n###### Prior Art Grounding\n\nThe route plane is grounded in information-architecture and graph-navigation patterns. The first-contact rule follows the same usability pressure as [progressive disclosure](https://www.nngroup.com/articles/progressive-disclosure/): show the control entry and immediate affordances before deeper browse rows. The CLI-facing surface is also informed by the [Command Line Interface Guidelines](https://clig.dev/), especially the emphasis on discoverable commands, examples, and clear next actions.\n\nThe graph side maps to established directed-graph tooling. NetworkX documents [topological sorting](https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.dag.topological_sort.html) as an ordering over dependency edges, and graph-ranking algorithms such as [PageRank](https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.link_analysis.pagerank_alg.pagerank.html) show the older pattern of computing route salience from graph structure. Microcosm keeps those ideas below authority: route cards, leases, and browse rows are projections unless source-coupling and entry-admission result records agree.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out /tmp/microcosm-navigation-hologram-route-plane\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.navigation_hologram_route_plane validate-route-plane-bundle --input examples/navigation_hologram_route_plane/exported_route_plane_bundle --out /tmp/microcosm-navigation-hologram-route-plane-bundle\n../repo-pytest tests/test_navigation_hologram_route_plane.py\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThese checks validate the public fixture and exported route-plane bundle only; they do not grant live route freshness, source authority, provider/live-kernel execution, later-component authorization, launch-scope decision, or whole-wave certification.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can be cited as evidence that the public fixture and exported route-plane bundle validate their declared contract. It does not establish live route freshness, grant live source-kernel authority, authorize source-file changes, authorize external model access, export account or browser state, expose browser UI live access, authorize recipient work, authorize public sharing or launch, prove whole-system correctness, or certify private-system equivalence.\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the route-plane rows, exported bundle, copied navigation source modules, source manifests, negative cases, and validation result records agree on the declared public route-plane contract. It may also claim that the generated JSON row resolves the accepted component subject, resolved mechanism subject, runtime source locus, governed concept, and the full set of declared principles, axioms, dependency modules, and relationship bindings.\n\nThis module may not claim live route freshness, live source-kernel authority, provider or browser UI access, source-file changes, recipient work authorization, hosted-public posture, launch-scope decision, publishing-scope decision, private-system equivalence, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope boundary\n\nThis module documents a public route-plane fixture and exported source-body bundle. It does not certify live corpus freshness, later public components, launch operations, provider/account or browser access, private root equivalence, whole-system correctness, or secret export.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 15356,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A large codebase has a recurring failure: the agent or reader that lands in it starts from whatever browse surface is nearest to hand, treats that surface as the authority, and acts on a stale or partial view. The route plane exists to make the first move legible and to stop a browse row from being mistaken for the thing it describes. It answers one question: given a control entry, what is the safe ordered path into the browsable route projections, and what proof says that path is wired rather than asserted? The unusual part is that the component never asserts a route is correct from prose. It treats every browse row as a projection and demands a coupling result record before that projectio\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "teleology",
       "title": "Teleology",
       "level": 2,
       "excerpt": "The navigation route plane gives a public clone a typed way to move from a control entry to browseable route projections without treating browse rows as authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The component runs in two modes against the same checks. The fixture mode loads a set of synthetic inputs, builds a toy option-surface from the rows (a cluster-flag summary plus one selected card), and then runs the negative-case validators that prove each guard still fires. The exported-bundle mode runs the same kind of checks against a real copied bundle: it validates the route rows, the source-coupling fingerprint, the source-module manifest, the route-lease policy, the entry-packet floor, the affordance passports, and the code-architecture projection packet, and only reports a pass when the secret scan is clean, a card row is selected, and every component validator passes. The source-co\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "source-backed-doctrine-packet",
       "title": "Source-Backed Doctrine Packet",
       "level": 2,
       "excerpt": "core/organregistry.json::implementedorgans[navigationhologramroute_plane] is the accepted component authority. It records status acceptedcurrentauthority, evidence class semantic_validator, evidence strength rank 5, scope limit validates declared public contract only, and validator command python -m microcosmcore.components.navigationhologramrouteplane run --input fixtures/firstwave/navigationhologramrouteplane/input --out result records/firstwave/navigationhologramrouteplane. core/organatlas.json::components[navigationhologramrouteplane] gives the cold-reader gloss: control entry comes first, browse rows stay projections, eight route-plane negative cases are detected, exact copied navigati\u2026",
       "block_kinds": [
        "code",
        "list",
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module can be cited as evidence that the public fixture and exported route-plane bundle validate their declared contract. It does not establish live route freshness, grant live source-kernel authority, authorize source-file changes, authorize external model access, export account or browser state, expose browser UI live access, authorize recipient work, authorize public sharing or launch, prove whole-system correctness, or certify private-system equivalence.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that the route-plane rows, exported bundle, copied navigation source modules, source manifests, negative cases, and validation result records agree on the declared public route-plane contract. It may also claim that the generated JSON row resolves the accepted component subject, resolved mechanism subject, runtime source locus, governed concept, and the full set of declared principles, axioms, dependency modules, and relationship bindings. This module may not claim live route freshness, live source-kernel authority, provider or browser UI access, source-file changes, recipient work authorization, hosted-public posture, launch-scope decision, pub\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Reader evidence starts at the generated JSON instance, then routes through the route-plane runtime, fixture manifest, source-module manifest, public result records, and focused regression. The browse rows, Mermaid diagram, and Atlas card are derived projections; they are not control-entry or source authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate/, reproduce this page's proof boundary with temporary result records: These checks validate the public fixture and exported route-plane bundle only; they do not grant live route freshness, source authority, provider/live-kernel execution, later-component authorization, launch-scope decision, or whole-wave certification.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The route plane is grounded in information-architecture and graph-navigation patterns. The first-contact rule follows the same usability pressure as progressive disclosure: show the control entry and immediate affordances before deeper browse rows. The CLI-facing surface is also informed by the Command Line Interface Guidelines, especially the emphasis on discoverable commands, examples, and clear next actions. The graph side maps to established directed-graph tooling. NetworkX documents topological sorting as an ordering over dependency edges, and graph-ranking algorithms such as PageRank show the older pattern of computing route salience from graph structure. Microcosm keeps those ideas b\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module documents a public route-plane fixture and exported source-body bundle. It does not certify live corpus freshness, later public components, launch operations, provider/account or browser access, private root equivalence, whole-system correctness, or secret export.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.navigation_hologram_route_plane.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Entry[\"Control entry first browse row that claims first contact is replaced with the entry route\"] subgraph Gates[\"Route-plane gates\"] Couple[\"Source coupling SHA-256 over route rows vs manifest fingerprint + row count\"] Rows[\"Route rows surface role, actionable command, no source-authority claim, omission result record when required\"] Modules[\"Source-module manifest 5 copied source bodies digest + required anchors, body never in result record\"] Lease[\"Route-lease policy selected lane, permitted actions, source authority rejected\"] Floor[\"Entry-packet floor required control fields survive compaction\"] Pass[\"Affordance passports anti-trigger rows demoted before similarity can select them\"] end Verdict{\"Coupling current, all gates pass, card row selected?\"} Entry --> Couple Couple --> Rows --> Modules --> Lease --> Floor --> Pass --> Verdict Verdict -->|yes| Result records[\"metadata-only result records cluster flag, card, coupling, route lease, entry admission, affordance, code-architecture packet\"] Verdict -->|no| Blocked[\"Blocked stable error codes, findings, bodies redacted\"] Negative[\"Negative-case floor BANNED_FIRST_CONTACT_ROUTE, SOURCE_COUPLING_STALE, and 7 more\"] -.-> Gates Result records --> Ceiling[\"Scope limit projection evidence only; no live route freshness, source authority, or launch\"] Blocked --> Ceiling",
       "source_hash": "sha256:b8e7ac526413104febca3cdab5da666ed6408a55d0cc0bcc46dd107f58c7e734",
       "html_url": "docs/paper-modules.html#paper-module-navigation-hologram-route-plane-diagram-1",
       "html_anchor": "paper-module-navigation-hologram-route-plane-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/navigation_hologram_route_plane.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "progressive disclosure",
       "url": "https://www.nngroup.com/articles/progressive-disclosure/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Command Line Interface Guidelines",
       "url": "https://clig.dev/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "topological sorting",
       "url": "https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.dag.topological_sort.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "PageRank",
       "url": "https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.link_analysis.pagerank_alg.pagerank.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 4,
       "links": [
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.routing_anti_patterns_registry",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Routing Anti-Patterns Registry",
         "url": "paper-modules.html#paper-module-routing-anti-patterns-registry"
        },
        {
         "id": "paper_module.pattern_binding_contract",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Pattern Binding Contract",
         "url": "paper-modules.html#paper-module-pattern-binding-contract"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "navigation_hologram_route_plane",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Navigation Hologram Route Plane",
         "url": "components.html#component-navigation_hologram_route_plane"
        },
        {
         "id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public route plane bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/navigation_hologram_route_plane.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 16490
    },
    {
     "id": "paper_module.agent_route_observability_runtime",
     "title": "Agent Route Observability Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-agent-route-observability-runtime",
     "read_href": "docs/paper-modules.html#paper-module-agent-route-observability-runtime",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-route-observability-runtime",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public route-observability fixture validates synthetic route feedback, route leases, hook-shadow advisory rows, anti-pattern debt, copied source trace manifests, and metadata-only result records without claiming live session authority.",
     "summary": "Agent Route Observability Runtime is the public evidence membrane for recorded agent route feedback. It checks actor-axis boundaries, selected and replacement routes, route-lease consumption, duplicate trace ids, hook-shadow advisory status, anti-pattern debt retirement, agent-principle-lens admission, egress-mirror boundaries, source-module manifests, and non-public-state exclusion while keeping transcript, provider, browser, HUD, account, account secret, and live-hook bodies out of result records.",
     "authority_ceiling": "Public synthetic route-observability fixtures, copied source body digests, and exported-bundle result records only; no live session introspection, provider/browser UI/account authority, live hook control, benchmark-performance proof, source-file changes, launch-scope decision, or whole-system correctness.",
     "abstract": "The public route-observability fixture validates synthetic route feedback, route leases, hook-shadow advisory rows, anti-pattern debt, copied source trace manifests, and metadata-only result records without claiming live session authority.",
     "teleology": {
      "section_id": "",
      "text": "The public route-observability fixture validates synthetic route feedback, route leases, hook-shadow advisory rows, anti-pattern debt, copied source trace manifests, and metadata-only result records without claiming live session authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This public slice validates synthetic route-feedback fixtures for the agent observability component.\n\nIt checks actor-axis authority boundaries, route-lease consumption, duplicate trace ids, hook-shadow advisory status, anti-pattern debt retirement, and behavior-change evidence gates.\n\n###### Purpose\n\nThe observability surface is the place where a cold reader should see that a local run produced a route, work transaction, event trail, evidence ref, and authority boundary. It should not force that reader to start from raw JSON, and it should not replace command-backed evidence with motion or dashboard style.\n\nThe useful first artifact is therefore a compact causal board: one command, one selected route, one work/event/evidence chain, one result record or validator handle, and one scope limit. Browser views, screenshots, and videos are allowed projections of that board, not separate claims.\n\nUnderneath the board, the component is a replay validator rather than a live tap. It reads recorded trace rows and turns them into paper-visible evidence only after a set of authority-boundary checks agree, and the choice that does the real work is the actor axis. A row tagged as an advisory actor cannot also claim live mutation authority, and a behaviour-change claim is blocked unless it names the trace ids that evidence it. This guards the specific failure mode of observability that reads as proof: a trace that asserts it changed how an agent behaved, with nothing recorded that a reader can check. Here the assertion is rejected, the private transcript body it might carry is redacted, and the run is marked blocked rather than green.\n\n###### Shape\n\nThe reader path starts at the source record, then follows the governed standard into the runtime component, public fixture inputs, source-open manifests, result records, and regression checks. The path is local and inspectable: `core/paper_module_capsules.json::paper_modules[2:paper_module.agent_route_observability_runtime]` points to `standards/std_microcosm_agent_route_observability_runtime.json` and `src/microcosm_core/organs/agent_route_observability_runtime.py`; the runtime then writes bounded public result records under `receipts/first_wave/agent_route_observability_runtime/`.\n\nSource refs\n\nJSON bundle `core/paper_module_capsules.json::paper_modules[2]` Authority boundary `standards/std_microcosm_agent_route_observability_runtime.json` Runtime component `src/microcosm_core/organs/agent_route_observability_runtime.py` Public fixture input `fixtures/first_wave/agent_route_observability_runtime/input` Source-open manifests `examples/agent_route_observability_runtime/*/source_module_manifest.json` metadata-only result records `receipts/first_wave/agent_route_observability_runtime/` Focused checks `tests/test_agent_route_observability_runtime.py` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle core/paper_module_capsules.json::paper_modules[2]\"] Standard[\"Authority boundary standards/std_microcosm_agent_route_observability_runtime.json\"] Runtime[\"Runtime component src/microcosm_core/components/agent_route_observability_runtime.py\"] Fixtures[\"Public fixture input fixtures/first_wave/agent_route_observability_runtime/input\"] Manifests[\"Source-open manifests examples/agent_route_observability_runtime/*/source_module_manifest.json\"] Negatives[\"Required negative cases actor axis, route lease, hook shadow, non-public-state floors\"] Bundles[\"10 exported bundle validators 31 source-module rows\"] Card[\"Compact result card large/private payloads omitted\"] Result records[\"metadata-only result records result records/first_wave/agent_route_observability_runtime/\"] Tests[\"Focused checks tests/test_agent_route_observability_runtime.py\"] Ceiling[\"Scope limit public route-observability fixtures only\"] Bundle --> Standard --> Runtime Runtime --> Fixtures --> Negatives --> Result records Runtime --> Manifests --> Bundles --> Result records Result records --> Card Result records --> Tests --> Ceiling\n```\n\n###### Technical Mechanism\n\nThe component is a route-feedback replay validator, not a live observability tap. `run` loads the first-wave fixture, streams JSONL trace rows without materializing the whole file, scans public inputs for forbidden non-public-state classes, and then composes six validation gates: route compliance, hook-shadow coverage, anti-pattern debt retirement, route-lease mode control, agent-principle-lens admission, and egress mirror boundaries. The result only passes when the expected negative-case set is complete, the non-public-state scan passes, hook-shadow coverage passes, agent-principle-lens rows do not mint principles or promote candidate axioms, and the egress mirror keeps private state, model-output data, and browser UI/operator UI state false.\n\nThe first-wave fixture is deliberately small but adversarial. The focused test expects 10 trace rows, one actor-axis mismatch, one authority rejection, one route-miss replacement, six hook-shadow cases, six egress cases, one anti-pattern debt retirement, and two route-lease control failures (`KERNEL_BLOAT_BEFORE_DIRECT_ACTION` and `ROUTE_LEASE_NOT_CONSUMED`). The negative-case floor covers wrong actor axis, missing route lease, private transcript body, duplicate trace id, route-compliance overclaim, route miss replacement, hook-shadow missing authority, banned-route intervention, command displacement, live-state read attempt, and hook-shadow budget overrun.\n\nThe exported-bundle side is the source-open body floor. Ten `source_module_manifest.json` files under `examples/agent_route_observability_runtime/` declare 31 copied or sanitized public source-module rows with `body_in_receipt=false`. Most rows are copied source bodies; the route-compliance-audit bundle is a mixed manifest with one public-reference sanitized row and copied body rows. Bundle validators check source-target digests, line counts, byte counts where declared, required anchors, validation refs, and non-public-state scans. A manifest digest mismatch or synthetic non-public-state regression token blocks the bundle and still keeps result record bodies redacted.\n\nResult records are generated as public-relative JSON proof surfaces. `write_receipts` emits route-compliance, hook-shadow, debt-retirement, route-lease, agent-principle-lens, and egress-mirror result records with common fields: validator id, command, status, expected and observed negative cases, findings, scope boundary, non-public-state scan, scope limit, source pattern ids, and result record paths. `result_card` then exposes a compact card while omitting large or private payload classes such as findings, private scans, source body imports, and scope limit bodies.\n\n###### Named Proof Consumers\n- `run` is the first-wave fixture consumer. It proves the public trace-row, hook-shadow, route-lease, agent-principle-lens, egress, negative-case, and metadata-only result record boundary for the local fixture.\n- `run_observability_bundle` is the main exported-bundle consumer. It validates public route events, agent-path observations, session diagnostics, hook-shadow rows, actor-axis checks, debt rows, process-audit rows, observability policy, source-module manifest integrity, and result record-card reuse for the exported observability bundle.\n- The companion bundle consumers `run_route_compliance_audit_bundle`, `run_session_attribution_bundle`, `run_harness_configuration_audit_bundle`, `run_multi_agent_fanin_bundle`, `run_bridge_dispatch_yield_resume_bundle`, `run_controller_heartbeat_bundle`, `run_agent_trace_route_repair_bundle`, `run_agent_observability_store_bundle`, and `run_computer_use_action_trace_bundle` prove the same route-observability membrane across adjacent public route, session, bridge, controller, store, and computer-use evidence slices.\n- `tests/test_agent_route_observability_runtime.py` is the focused regression consumer. It asserts source-module manifest body-copy contracts, digest and line-count checks, sanitized-row handling, duplicate-key rejection, streaming loaders, required negative cases, public-relative redacted result records, bundle blocking on digest mismatch/non-public-state hits, and compact card omission of private scans.\n- `tests/test_macro_projection_import_protocol.py::test_agent_execution_trace_body_import_is_unified_under_macro_projection_spine` is the cross-module consumer that keeps the route-observability body import under the source projection import spine rather than a local-only copy story.\n\n###### Prior Art Grounding\n\nThis component is grounded in distributed tracing and agent trajectory work. The [W3C Trace Context](https://www.w3.org/TR/trace-context/) recommendation and [OpenTelemetry](https://opentelemetry.io/docs/reference/specification/overview/) show the established observability pattern: propagate trace identity, collect events, and preserve enough context to debug a distributed transaction. Agent work such as [ReAct](https://arxiv.org/abs/2210.03629) also made the interleaved reasoning/action trajectory a first-class object for interpreting agent behavior.\n\nMicrocosm borrows the traceability shape for route feedback: selected route, route lease, trace id, work/event/evidence chain, validator ref, and scope limit are exposed together. It does not read live operator traces, model-output data, browser HUD state, or certify runtime behavior outside the public fixture.\n\n###### Source-Backed Doctrine Packet\n\nThis module is source-backed only when a reader can move from the public doctrine claim to the runtime component, standard, source-module manifests, result records, and negative cases without guessing. The compact packet is:\n\nComponent authority:\n- `core/organ_registry.json::implemented_organs[organ_id=agent_route_observability_runtime]`\n- `core/organ_evidence_classes.json::organ_evidence_classes[agent_route_observability_runtime]`\n- These rows declare `status=accepted_current_authority`, `evidence_class=semantic_validator`, evidence strength rank 5, and the exact scope limit below.\n\nStandard authority:\n- `standards/std_microcosm_agent_route_observability_runtime.json`\n- This governs the public route-observability schema, body import posture, authority boundary `public_route_observability_runtime_metadata_and_copied_macro_trace_bodies_not_live_session_provider_browser_hud_or_hook_authority`, and scope boundary language.\n\nBundle and mechanism authority:\n- `core/paper_module_capsules.json#paper_module.agent_route_observability_runtime`\n- `core/mechanism_sources.json#mechanism.agent_route_observability_runtime.validates_public_route_feedback`\n- These bind the authored Markdown projection to the accepted component, mechanism row, code locus, generated projection hooks, result record refs, guardrails, and focused regression command without treating this prose as source authority.\n\nRuntime and manifest evidence:\n- `src/microcosm_core/organs/agent_route_observability_runtime.py`\n- See the body-floor manifest list below.\n- The runtime builds public fixture result records, exported bundle validators, observability cards, source-manifest checks, non-public-state scans, and typed negative-case results. The manifests bind the copied route/observability source body materials recorded by `microcosm workingness::agent_route_observability_runtime.source_open_body_imports` while preserving `body_in_receipt=false`.\n\nFocused regression and result records:\n- `tests/test_agent_route_observability_runtime.py`\n- `tests/test_macro_projection_import_protocol.py::test_agent_execution_trace_body_import_is_unified_under_macro_projection_spine`\n- `receipts/first_wave/agent_route_observability_runtime/`\n- These pin streaming loaders, digest helpers, bundle validators, source-module manifests, scope limits, source-body import coupling, route compliance, hook-shadow advisory status, debt retirement, route-lease mode control, principle lensing, and egress mirror boundaries.\n\n###### Reader Evidence Routing\n\nReader evidence starts at the JSON source record, then follows the accepted component and mechanism refs into the runtime source, fixture manifests, result record set, and focused regression. The route is intentionally source-backed but not source-authoritative: this Markdown helps a cold reader find the proof surfaces, while the bundle, registry, standard, mechanism row, runtime source, and result records remain the authority.\n\n###### Observable First Artifact Contract\n\nThe first observable artifact must fit a single browser or terminal viewport and preserve this order:\n\nRequired cues:\n- Local action: show the exact command, normally `microcosm hello <project>` or `microcosm tour --card <project>`. A visual board cannot be the first proof if the producing command is hidden.\n- Selected route: show `selected_route_id` plus a short reason. Route explanation stays tied to the local project, not whole-system capability.\n- Work transaction: show work id, state, and result record ref when present. State changes are local system events, not source-file changes or external model service.\n- Event and evidence chain: show event ids, evidence class, proof surface, and scope boundary. Counts remain accounting fields, not progress or launch scores.\n- Authority boundary: place the scope limit beside the positive claim. The board rejects hosted launch, private-data equivalence, external model access, and whole-system correctness.\n- Structural scale bridge: name the larger system surface exercised by this run. Scale is a drilldown path, not an implied proof upgrade.\n\nIf a renderer cannot show all slots in one viewport, it should show the command, route, evidence class, result record ref, and scope limit first, then link to the full route model as drilldown.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\n```text\nPYTHONPATH=src ../repo-python \\\n  -m microcosm_core.organs.agent_route_observability_runtime \\\n  run \\\n  --input fixtures/first_wave/agent_route_observability_runtime/input \\\n  --out /tmp/microcosm-agent-route-observability-runtime\nPYTHONPATH=src ../repo-python \\\n  -m microcosm_core.organs.agent_route_observability_runtime \\\n  validate-observability-bundle \\\n  --input examples/agent_route_observability_runtime/exported_observability_bundle \\\n  --out /tmp/microcosm-agent-route-observability-bundle\n../repo-pytest \\\n  tests/test_agent_route_observability_runtime.py \\\n  tests/test_macro_projection_import_protocol.py::test_agent_execution_trace_body_import_is_unified_under_macro_projection_spine\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe focused regression file is the proof consumer for this result record section. Its 51 tests cover the Markdown source-backed packet, streaming JSONL loaders, duplicate-key rejection, source-module manifest contracts, digest and line count helpers, exported observability and companion bundles, public-relative redacted result records, field-floor ratchets, card reuse, private-scan blockers, exact or source body imports, and computer-use action-trace boundaries. The source-projection focused test keeps the agent execution trace body import under the shared source projection spine.\n\nThat result record path validates declared public metadata and writes bounded result records. It does not inspect live sessions, export transcript/provider bodies, read browser HUD state, expose account secrets or browser state, control accounts, send recipients, change source files, prove benchmark performance, authorize public sharing, claim hosted readiness, or include launch operations.\n\nThe negative-case floor is part of the doctrine, not an implementation detail. Keep these cases visible when strengthening the module: actor-axis mismatch, missing route lease, private transcript body, duplicate trace id, route-compliance overclaim, kernel bloat before direct action, reusable-lease metadata without trace feedback, route miss replacement, hook-shadow missing authority, hook-shadow banned-route intervention, command displacement, live-state read attempt, and hook-shadow budget overrun.\n\n###### Validation Shape\n\nFixture validation should continue to require actor-axis boundaries, route-lease consumption, duplicate trace-id detection, hook-shadow advisory status, anti-pattern debt retirement, and behavior-change evidence gates. When an observable-first board or endpoint is present, validation should also prefer fields that prove the compact causal order:\n- command ref before visual state;\n- selected route before full route graph;\n- work/event/evidence refs before explanation prose;\n- evidence class and scope boundary beside any counter;\n- scope limit before hosted, launch, provider, or correctness language;\n- compact endpoint or board ref before raw JSON drilldown.\n\nScope boundary: this module does not inspect live operator traces, prompt/provider bodies, HUD/browser/operator UI state, live work log rows, model-output data, private source bodies, or runtime behavior. It only defines the public fixture and projection boundary for observable route evidence.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe positive claim is limited to public recorded route-feedback and observability metadata fixtures. The runtime can validate fixture result records, copied body refs, route-lease consumption, trace attribution, hook-shadow advisory posture, debt retirement, and behavior-change evidence gates. It does not read live sessions, mutate routes or source, install hooks, authorize providers, or turn observability into launch-scope decision.\n\nExact `claim_ceiling` from `core/organ_registry.json::implemented_organs[organ_id=agent_route_observability_runtime]`:\n\n```text\nvalidates only public recorded route-feedback and observability metadata fixtures, including route-lease consumption, trace attribution, hook-shadow advisory status, anti-pattern debt retirement, behavior-change evidence gates, and public source body import refs; does not read live operator/provider/browser UI/account state, mutate work log or source, install hooks, certify runtime behavior, authorize pattern assimilation, private-system equivalence, launch, public sharing, or whole-system correctness\n```\n\nResult record refs:\n- `receipts/first_wave/agent_route_observability_runtime/route_compliance_audit.json`\n- `receipts/first_wave/agent_route_observability_runtime/hook_shadow_coverage.json`\n- `receipts/first_wave/agent_route_observability_runtime/debt_retirement_receipt.json`\n- `receipts/first_wave/agent_route_observability_runtime/route_lease_mode_control_receipt.json`\n- `receipts/first_wave/agent_route_observability_runtime/agent_principle_lens_receipt.json`\n- `receipts/first_wave/agent_route_observability_runtime/egress_mirror_receipt.json`\n\n###### Presentation Boundary\n\nThe observatory can be made browser-first or video-friendly only by projecting the same compact causal board. It may animate route selection, highlight event edges, or show a result record reveal, but it must keep the command, result record/evidence ref, scope boundary, and scope limit visible before any decorative motion.\n\nIt must not expose live operator traces, model-output data, account or browser state, private source bodies, HUD/browser/cockpit internals, or hosted-product claims. It may point to public fixtures, exported public bundles, generated result records, and public-root card emitters.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe bundle binds this page to `mechanism.agent_route_observability_runtime.validates_public_route_feedback`, the `agent_reliability_and_safety_validator_bundle` concept, principles `P-1` and `P-2`, axiom `AX-1`, and five dependency modules that supply route-plane, cold-reader, anti-pattern, pattern-binding, and source-import context. Within that lattice, the mechanism is an evidence membrane: route feedback becomes paper-visible only after trace rows, route leases, hook-shadow rows, anti-pattern debt, egress boundaries, source manifests, non-public-state scans, and result record fields agree.\n\nThe governing relation is deliberately narrower than live observability. A green run can show that a public fixture or exported bundle carries coherent route feedback and metadata-only proof surfaces; it cannot infer live session state, mutate a route, install hooks, authorize provider/browser UI access, promote candidate axioms, prove benchmark behavior, or approve launch.\n\n###### Source-Open Body Floor\n\nThe source-open body floor is the copied public route/observability body import set plus its manifests and result records, not live operator/provider/browser state. The materials below must stay inspectable through `source_module_manifest.json` refs, source-module digests, bundle validators, and metadata-only result records.\n\nVerified source-open body materials:\n- `agent_execution_trace_body_import`\n- `agent_trace_route_repair_body_import`\n- `agent_observability_store_body_import`\n- `route_compliance_audit_body_import`\n- `agent_session_attribution_body_import`\n- `agent_harness_configuration_audit_body_import`\n- `continuation_packet_body_import`\n- `bridge_resume_body_import`\n- `controller_heartbeat_body_import`\n- `computer_use_action_trace_body_import`\n\nBody-floor manifest list:\n- `examples/agent_route_observability_runtime/exported_observability_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_agent_trace_route_repair_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_agent_observability_store_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_route_compliance_audit_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_session_attribution_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_harness_configuration_audit_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_multi_agent_fanin_replay_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_bridge_dispatch_yield_resume_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_controller_heartbeat_bundle/source_module_manifest.json`\n- `examples/agent_route_observability_runtime/exported_computer_use_action_trace_bundle/source_module_manifest.json`\n\nSource-projection companion body-floor manifests that feed the same shared spine:\n- `examples/macro_projection_import_protocol/exported_projection_import_bundle/agent_execution_trace_source_module_manifest.json`\n- `examples/macro_projection_import_protocol/exported_projection_import_bundle/agent_observability_source_module_manifest.json`\n\nFirst command from `microcosm-substrate/`:\n\n```text\nPYTHONPATH=src python3 \\\n  -m microcosm_core.organs.agent_route_observability_runtime \\\n  run \\\n  --input fixtures/first_wave/agent_route_observability_runtime/input \\\n  --out receipts/first_wave/agent_route_observability_runtime\n```\n\nRegistry-declared validator command:\n\n```text\npython \\\n  -m microcosm_core.organs.agent_route_observability_runtime \\\n  run \\\n  --input fixtures/first_wave/agent_route_observability_runtime/input \\\n  --out receipts/first_wave/agent_route_observability_runtime\n```\n\nExact registry command literal:\n\n`python -m microcosm_core.organs.agent_route_observability_runtime run --input fixtures/first_wave/agent_route_observability_runtime/input --out receipts/first_wave/agent_route_observability_runtime`",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 23597,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The observability surface is the place where a cold reader should see that a local run produced a route, work transaction, event trail, evidence ref, and authority boundary. It should not force that reader to start from raw JSON, and it should not replace command-backed evidence with motion or dashboard style. The useful first artifact is therefore a compact causal board: one command, one selected route, one work/event/evidence chain, one result record or validator handle, and one scope limit. Browser views, screenshots, and videos are allowed projections of that board, not separate claims. Underneath the board, the component is a replay validator rather than a live tap. It reads recorded t\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The reader path starts at the source record, then follows the governed standard into the runtime component, public fixture inputs, source-open manifests, result records, and regression checks. The path is local and inspectable: core/papermodulecapsules.json::papermodules[2:papermodule.agentrouteobservability_runtime] points to standards/stdmicrocosmagentrouteobservability_runtime.json and src/microcosmcore/components/agentrouteobservabilityruntime.py; the runtime then writes bounded public result records under result records/firstwave/agentrouteobservabilityruntime/.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The component is a route-feedback replay validator, not a live observability tap. run loads the first-wave fixture, streams JSONL trace rows without materializing the whole file, scans public inputs for forbidden non-public-state classes, and then composes six validation gates: route compliance, hook-shadow coverage, anti-pattern debt retirement, route-lease mode control, agent-principle-lens admission, and egress mirror boundaries. The result only passes when the expected negative-case set is complete, the non-public-state scan passes, hook-shadow coverage passes, agent-principle-lens rows do not mint principles or promote candidate axioms, and the egress mirror keeps private state, model-\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "run is the first-wave fixture consumer. It proves the public trace-row, hook-shadow, route-lease, agent-principle-lens, egress, negative-case, and metadata-only result record boundary for the local fixture. runobservabilitybundle is the main exported-bundle consumer. It validates public route events, agent-path observations, session diagnostics, hook-shadow rows, actor-axis checks, debt rows, process-audit rows, observability policy, source-module manifest integrity, and result record-card reuse for the exported observability bundle. The companion bundle consumers runroutecomplianceauditbundle, runsessionattribution_bundle, runharnessconfigurationauditbundle, runmultiagentfaninbundle, runbr\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The bundle binds this page to mechanism.agentrouteobservabilityruntime.validatespublicroutefeedback, the agentreliabilityandsafetyvalidator_bundle concept, principles P-1 and P-2, axiom AX-1, and five dependency modules that supply route-plane, cold-reader, anti-pattern, pattern-binding, and source-import context. Within that lattice, the mechanism is an evidence membrane: route feedback becomes paper-visible only after trace rows, route leases, hook-shadow rows, anti-pattern debt, egress boundaries, source manifests, non-public-state scans, and result record fields agree. The governing relation is deliberately narrower than live observability. A green run can show that a public fixture or\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in distributed tracing and agent trajectory work. The W3C Trace Context recommendation and OpenTelemetry show the established observability pattern: propagate trace identity, collect events, and preserve enough context to debug a distributed transaction. Agent work such as ReAct also made the interleaved reasoning/action trajectory a first-class object for interpreting agent behavior. Microcosm borrows the traceability shape for route feedback: selected route, route lease, trace id, work/event/evidence chain, validator ref, and scope limit are exposed together. It does not read live operator traces, model-output data, browser HUD state, or certify runtime behavior\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-doctrine-packet",
       "title": "Source-Backed Doctrine Packet",
       "level": 2,
       "excerpt": "This module is source-backed only when a reader can move from the public doctrine claim to the runtime component, standard, source-module manifests, result records, and negative cases without guessing. The compact packet is: Component authority: core/organregistry.json::implementedorgans[organid=agentrouteobservabilityruntime] core/organevidenceclasses.json::organevidenceclasses[agentrouteobservability_runtime] These rows declare status=acceptedcurrentauthority, evidenceclass=semanticvalidator, evidence strength rank 5, and the exact scope limit below. Standard authority: standards/stdmicrocosmagentrouteobservability_runtime.json This governs the public route-observability schema, body impo\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Reader evidence starts at the JSON source record, then follows the accepted component and mechanism refs into the runtime source, fixture manifests, result record set, and focused regression. The route is intentionally source-backed but not source-authoritative: this Markdown helps a cold reader find the proof surfaces, while the bundle, registry, standard, mechanism row, runtime source, and result records remain the authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The positive claim is limited to public recorded route-feedback and observability metadata fixtures. The runtime can validate fixture result records, copied body refs, route-lease consumption, trace attribution, hook-shadow advisory posture, debt retirement, and behavior-change evidence gates. It does not read live sessions, mutate routes or source, install hooks, authorize providers, or turn observability into launch-scope decision. Exact claim_ceiling from core/organregistry.json::implementedorgans[organid=agentrouteobservabilityruntime]: Result record refs: result records/firstwave/agentrouteobservabilityruntime/routecomplianceaudit.json result records/firstwave/agentrouteobservabilityru\u2026",
       "block_kinds": [
        "code",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open body floor is the copied public route/observability body import set plus its manifests and result records, not live operator/provider/browser state. The materials below must stay inspectable through sourcemodulemanifest.json refs, source-module digests, bundle validators, and metadata-only result records. Verified source-open body materials: agentexecutiontracebodyimport agenttracerouterepairbody_import agentobservabilitystorebodyimport routecomplianceauditbodyimport agentsessionattributionbodyimport agentharnessconfigurationauditbody_import continuationpacketbody_import bridgeresumebody_import controllerheartbeatbody_import computeruseactiontracebody_import Body-floor manif\u2026",
       "block_kinds": [
        "code",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate/, reproduce this page's proof boundary with temporary result records: The focused regression file is the proof consumer for this result record section. Its 51 tests cover the Markdown source-backed packet, streaming JSONL loaders, duplicate-key rejection, source-module manifest contracts, digest and line count helpers, exported observability and companion bundles, public-relative redacted result records, field-floor ratchets, card reuse, private-scan blockers, exact or source body imports, and computer-use action-trace boundaries. The source-projection focused test keeps the agent execution trace body import under the shared source projection spine. That result reco\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "observable-first-artifact-contract",
       "title": "Observable First Artifact Contract",
       "level": 2,
       "excerpt": "The first observable artifact must fit a single browser or terminal viewport and preserve this order: Required cues: Local action: show the exact command, normally microcosm hello <project> or microcosm tour --card <project>. A visual board cannot be the first proof if the producing command is hidden. Selected route: show selectedrouteid plus a short reason. Route explanation stays tied to the local project, not whole-system capability. Work transaction: show work id, state, and result record ref when present. State changes are local system events, not source-file changes or external model service. Event and evidence chain: show event ids, evidence class, proof surface, and scope boundary.\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "presentation-boundary",
       "title": "Presentation Boundary",
       "level": 2,
       "excerpt": "The observatory can be made browser-first or video-friendly only by projecting the same compact causal board. It may animate route selection, highlight event edges, or show a result record reveal, but it must keep the command, result record/evidence ref, scope boundary, and scope limit visible before any decorative motion. It must not expose live operator traces, model-output data, account or browser state, private source bodies, HUD/browser/cockpit internals, or hosted-product claims. It may point to public fixtures, exported public bundles, generated result records, and public-root card emitters.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-shape",
       "title": "Validation Shape",
       "level": 2,
       "excerpt": "Fixture validation should continue to require actor-axis boundaries, route-lease consumption, duplicate trace-id detection, hook-shadow advisory status, anti-pattern debt retirement, and behavior-change evidence gates. When an observable-first board or endpoint is present, validation should also prefer fields that prove the compact causal order: command ref before visual state; selected route before full route graph; work/event/evidence refs before explanation prose; evidence class and scope boundary beside any counter; scope limit before hosted, launch, provider, or correctness language; compact endpoint or board ref before raw JSON drilldown. Scope boundary: this module does not inspect l\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.agent_route_observability_runtime.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"JSON bundle core/paper_module_capsules.json::paper_modules[2]\"] Standard[\"Authority boundary standards/std_microcosm_agent_route_observability_runtime.json\"] Runtime[\"Runtime component src/microcosm_core/components/agent_route_observability_runtime.py\"] Fixtures[\"Public fixture input fixtures/first_wave/agent_route_observability_runtime/input\"] Manifests[\"Source-open manifests examples/agent_route_observability_runtime/*/source_module_manifest.json\"] Negatives[\"Required negative cases actor axis, route lease, hook shadow, non-public-state floors\"] Bundles[\"10 exported bundle validators 31 source-module rows\"] Card[\"Compact result card large/private payloads omitted\"] Result records[\"metadata-only result records result records/first_wave/agent_route_observability_runtime/\"] Tests[\"Focused checks tests/test_agent_route_observability_runtime.py\"] Ceiling[\"Scope limit public route-observability fixtures only\"] Bundle --> Standard --> Runtime Runtime --> Fixtures --> Negatives --> Result records Runtime --> Manifests --> Bundles --> Result records Result records --> Card Result records --> Tests --> Ceiling",
       "source_hash": "sha256:e9248e3cd123736ef227618daf296ec030383d96e7a468a9e1c331291518de6f",
       "html_url": "docs/paper-modules.html#paper-module-agent-route-observability-runtime-diagram-1",
       "html_anchor": "paper-module-agent-route-observability-runtime-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_route_observability_runtime.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "W3C Trace Context",
       "url": "https://www.w3.org/TR/trace-context/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "OpenTelemetry",
       "url": "https://opentelemetry.io/docs/reference/specification/overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "ReAct",
       "url": "https://arxiv.org/abs/2210.03629",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 5,
       "links": [
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        },
        {
         "id": "paper_module.routing_anti_patterns_registry",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Routing Anti-Patterns Registry",
         "url": "paper-modules.html#paper-module-routing-anti-patterns-registry"
        },
        {
         "id": "paper_module.pattern_binding_contract",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Pattern Binding Contract",
         "url": "paper-modules.html#paper-module-pattern-binding-contract"
        },
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agent_route_observability_runtime",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agent Route Observability Runtime",
         "url": "components.html#component-agent_route_observability_runtime"
        },
        {
         "id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public route feedback",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_route_observability_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 24923
    },
    {
     "id": "paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "title": "Agent Benchmark Integrity Anti-Gaming Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-benchmark-integrity-anti-gaming-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The agent benchmark integrity anti-gaming replay validates copied public source pattern provenance bodies and metadata-only benchmark replay rows before any score-like language is allowed.",
     "summary": "Agent Benchmark Integrity Anti-Gaming Replay is the public benchmark-claim boundary for Microcosm. It checks locked evaluator ids and config hashes, declared benchmark case rosters, replay rows, file-access and contamination refs, trusted-reference score refs, output-replay refs, computed-vs-declared integrity verdicts, three copied source pattern provenance bodies, and eleven anti-gaming negative cases while keeping private issue, oracle patch, hidden-gold, provider, raw patch, and score payload bodies out of result records.",
     "authority_ceiling": "Copied public source pattern provenance bodies and metadata-only synthetic benchmark-integrity replay result records only; no benchmark claims, SWE-bench performance claim, hidden-gold access, oracle patch body export, private issue body export, external model access, live repository mutation, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.",
     "abstract": "The agent benchmark integrity anti-gaming replay validates copied public source pattern provenance bodies and metadata-only benchmark replay rows before any score-like language is allowed.",
     "teleology": {
      "section_id": "",
      "text": "The agent benchmark integrity anti-gaming replay validates copied public source pattern provenance bodies and metadata-only benchmark replay rows before any score-like language is allowed.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This module is the public Microcosm projection of the rule that agent benchmark claims must be replay-backed before they are score-backed. It carries copied source-open source pattern provenance bodies for the benchmark-integrity pattern row and reconstruction state, plus a metadata-only regression integrity component. It is not a benchmark runner or product-progress claim.\n\nThe fixture models a repository repair benchmark with public case ids, task and patch hashes, locked evaluator ids, evaluator config hashes, file-access log refs, contamination-check refs, trusted-reference score refs, output-replay refs, held-out guard ids, and `body_in_receipt=false` rows. It deliberately keeps issue bodies, oracle patch bodies, hidden-gold answers, model-output data, and live repository paths out of the public boundary.\n\nThe exported bundle includes `source_module_manifest.json` and `source_artifacts/` copies of the source pattern provenance rows from `state/microcosm_portfolio`. The validator verifies those copied bodies by manifest digest and keeps body text out of result records.\n\n###### Purpose\n\nAgent benchmark numbers are easy to state and hard to trust. A single headline like \"passes N percent of repository repair tasks\" hides every decision that produced it: which evaluator ran, whether its configuration was frozen, whether the agent could see held-out answers, whether the test cases leaked into training, and whether one lucky attempt was promoted as the score. This component exists to answer one question before any of that language is allowed: can each claimed pass be replayed from public refs that name their evaluator, their configuration hash, and the evidence that the run was not gamed?\n\nA positive result cannot be asserted. A replay row that simply declares `integrity_pass` is recomputed from scratch. The validator checks that the evaluator id is on a locked list, that the configuration hash is one the policy declared in advance, that file-access, contamination, and output-replay evidence artifacts exist and pass, and that the case id was registered up front. If any of those is missing or contradicted, the row is recomputed as `quarantine` regardless of what it declared. Declaring success is treated as the thing to be checked, not as the proof.\n\nThere is a further floor: an `integrity_pass` must be backed by a sanitised real command-run trace, not only by hand-written replay refs. Each row cites a `real_benchmark_trace_ref` that has to resolve to a copied artifact carrying a passing focused pytest run for this component, with sha256 digests bound to the recorded command-run id and an explicit list of omitted live material (model-output data, account secrets, private issue bodies, oracle patch bodies). The point is to stop a benchmark claim from resting on prose. The evidence has to trace back to a command that actually ran and is reproducible from public refs, while the private and live material that command touched stays out of the public boundary.\n\nThis is a discipline fixture, not a leaderboard. It proves that a metadata-only replay respected an anti-gaming boundary over public case ids and locked evaluator refs. It never reports a score, a SWE-bench result, or a capability claim, and the eleven negative cases below are there to demonstrate the boundary holding rather than to advertise a number.\n\n###### Technical Mechanism\n\nThe component turns a benchmark claim into a replay-verification problem. Its inputs are the projection protocol, locked evaluator policy, benchmark case roster, replay observations, exported bundle manifest, source-module manifest, and copied `source_artifacts/` rows. `_build_result` loads those inputs, validates source-module imports, scans public inputs and copied source bodies against the non-public-state forbidden-class policy, checks projection protocol density, validates the locked evaluator policy, validates the case roster, and then validates each replay row against the same public boundary.\n\nA positive replay cannot pass by declaring success. The replay row must name a case id present in `benchmark_cases.json`, cite a locked evaluator id, carry an evaluator config hash allowed by `locked_evaluator_policy.json`, expose file-access, contamination-check, trusted-reference, and output-replay refs, and cite source-artifact evidence refs that match the exported source-module manifest targets. Each of those evidence refs must resolve to a metadata-only `benchmark_integrity_evidence_artifact_v1` artifact bound to the same replay, case, evaluator, and config hash, with file-access marked passed, contamination flags clear, a trusted reference present without a claimed score, and an output replay that is not final-answer-only grading. The validator recomputes whether each row is `integrity_pass` or `quarantine`; missing refs, unregistered cases, unlocked or mutated evaluators, score authorization, private issue bodies, oracle patch bodies, hidden-gold access, model-output data, pass-k cherry-picking, and misleading tests force quarantine or a blocking finding.\n\nA further gate is the real-trace floor. Every positive replay row also cites a `real_benchmark_trace_ref`, and that ref must resolve to a copied source-module artifact whose `material_class` is `public_sanitized_real_benchmark_trace`. The validator opens that artifact and checks that it records a completed, exit-zero command run of the focused pytest for this component, carries a passing pytest summary, binds sha256 digests for the command metadata, stdout, and stderr to a declared command-run id, cites `state/command_runs/` source refs for that id, and declares the omission of model-output data, account secrets, private issue bodies, and oracle patch bodies. A replay whose `real_benchmark_trace_ref` is missing, unverified, or not also listed in the source-artifact evidence refs cannot stand as a pass. This is what stops a benchmark claim from resting on hand-authored refs alone: the integrity verdict has to trace back to a command that actually ran and is reproducible from public refs.\n\nThe copied body floor is verified separately from the public result record. The source-module manifest must declare `copied_non_secret_macro_body` material, public source pattern body classes, `body_in_receipt=false`, and digest-stable targets. `validate_source_module_imports` checks that each manifest row points to an existing copied artifact and that its recorded SHA-256 digest matches disk. Result records and command cards then omit the bodies and carry only ids, refs, digests, classes, counts, verdicts, findings, and scope limits.\n\nThe public trace is a second proof pass rather than a display copy of replay rows. `build_public_benchmark_integrity_anti_gaming_trace` recomputes each span from locked-evaluator status, contamination signals, file-access refs, contamination-check refs, trusted-reference refs, and declared quarantine reasons. The expected public fixture has three spans: two recompute as `integrity_pass`, one recomputes as `quarantine`, and the trace must agree with the declared replay verdicts before the component can return `status=pass`.\n\n###### Named Proof Consumers\n- `run` consumes the first-wave fixture and writes the result, board, validation result record, sign-off result record, and metadata-only command card. It is the proof consumer for the canonical fixture boundary and required negative-case floor.\n- `run-benchmark-integrity-bundle` consumes the exported public bundle and proves that source-open body imports, bundle shape, manifest digests, and metadata-only result record/card rules survive outside the fixture directory.\n- `tests/test_agent_benchmark_integrity_anti_gaming_replay.py` is the focused regression consumer. It asserts negative-case observation, digest verification, source-artifact evidence refs, public trace verdict recomputation, positive/negative verdict handling, metadata-only result records, bundle runtime shape, and command-card reuse of a fresh result record.\n- A cold reader consumes this Markdown only after checking the JSON bundle, generated JSON instance, exported source manifest, case roster, replay observations, focused test path, and scope limit. The reader may verify the replay boundary but must not infer a benchmark claims, provider behavior, product-progress state, public sharing state, or launch-scope decision.\n\n###### Shape\n\nSource refs\n\nProtocol `projection_protocol.json` Manifest `source_module_manifest.json` Diagram source\n\n```text\nflowchart LR Bundle[\"JSON bundle authority\"] --> Markdown[\"Reader projection\"] Protocol[\"projection_protocol.json\"] --> ProtocolGate[\"source refs and result record density\"] Manifest[\"source_module_manifest.json\"] --> DigestGate[\"material class and digest gate\"] DigestGate --> Bodies[\"copied public source provenance bodies\"] DigestGate --> RealTrace[\"sanitised real command-run trace passing pytest, sha256 digests, declared omissions\"] Cases[\"3 public case ids\"] --> ReplayGate[\"case roster and required replay refs\"] Policy[\"locked evaluator policy\"] --> EvaluatorGate[\"locked ids and config hashes\"] Replays[\"3 replay observations\"] --> ReplayGate EvaluatorGate --> ReplayGate ProtocolGate --> ReplayGate ReplayGate --> EvidenceGate[\"per-ref evidence artifacts file-access, contamination, trusted reference, output replay\"] EvidenceGate --> Recompute[\"recompute integrity_pass or quarantine\"] RealTrace --> Recompute Recompute --> Trace[\"public trace verdict recomputation\"] Trace --> Verdicts[\"2 integrity_pass and 1 quarantine\"] Negatives[\"11 anti-gaming fixtures\"] --> Quarantine[\"quarantine or blocking finding\"] Bodies --> PrivateScan[\"metadata-only non-public-state scan\"] RealTrace --> PrivateScan Verdicts --> Result record[\"metadata-only integrity result record\"] Quarantine --> Result record PrivateScan --> Result record Result record --> Ceiling[\"anti-score scope limit\"]\n```\n\nThe page shape is a bounded replay spine, not a benchmark leaderboard. A reader starts at the JSON bundle, follows the source-open manifest into three copied public source provenance bodies, then checks the public case roster, locked evaluator policy, replay observations, recomputed trace verdicts, and metadata-only result records. The output is an integrity-boundary verdict: two public case replays pass the boundary, one public case replay is quarantined, and no score or hidden-gold authority is created.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[3]`, then the generated JSON instance, before treating this Markdown as explanatory projection.\n- Bundle route: read `examples/agent_benchmark_integrity_anti_gaming_replay/exported_benchmark_integrity_bundle/source_module_manifest.json` for `module_count=3`, `body_in_receipt=false`, copied body refs, digest refs, and the explicit secret-exclusion boundary.\n- Case route: read `benchmark_cases.json` for `repo_issue_public_001`, `repo_issue_public_002`, and `repo_issue_public_003`; the rows expose ids, hashes, splits, and held-out guard ids, not issue bodies or oracle patches.\n- Replay route: read `replay_observations.json` for the locked evaluator ids, config hashes, file-access refs, contamination refs, trusted-reference refs, output-replay refs, and the two `integrity_pass` plus one `quarantine` verdict pattern.\n- Runtime route: run `tests/test_agent_benchmark_integrity_anti_gaming_replay.py` when the reader needs recomputation evidence. The focused tests assert source-module digest verification, public trace verdict recomputation, required negative cases, and metadata-only result record boundaries.\n\n###### Public Mechanics\n- A replay cannot pass unless the evaluator id and config hash are locked.\n- A replay row cannot pass unless its case id appears in the declared `benchmark_cases.json` roster.\n- File-access logs, contamination checks, trusted references, and output replay refs are required before any benchmark-style language can be considered.\n- Train/test leakage, hidden-gold access, oracle patch bodies, model-output data, final-answer-only grading, pass-k cherry-picking, misleading tests, private issue bodies, unregistered case replays, and score overclaims are quarantine cases.\n- `integrity_pass` is evidence that a metadata-only regression replay respected the boundary, not evidence of a SWE-bench score, live agent capability, or product-spine system progress.\n- Result records expose ids, refs, verdicts, counts, negative cases, and scope limits only.\n- Source body imports expose source pattern provenance artifacts in the bundle, with result records limited to refs, digests, classes, and validation status.\n\n###### Prior Art Grounding\n\nThis component is grounded in the long-running observation that optimized metrics can become targets and lose evidential force, plus the AI-safety literature on reward hacking and specification gaming. [Concrete Problems in AI Safety](https://arxiv.org/abs/1606.06565) frames reward hacking as a practical accident-risk problem, DeepMind's [specification-gaming survey](https://deepmind.google/blog/specification-gaming-the-flip-side-of-ai-ingenuity/) collects concrete examples of agents satisfying a proxy in the wrong way, and benchmark-contamination work such as [Benchmarking Benchmark Leakage in Large Language Models](https://arxiv.org/abs/2404.18824) motivates explicit leakage and benchmark-use documentation.\n\nMicrocosm borrows the anti-gaming accounting pattern: evaluator ids, config hashes, case rosters, file-access logs, contamination checks, trusted-reference refs, and replay refs must be present before benchmark-style language is allowed. It does not report or imply a model score.\n\n###### Validation Result records\n\nThe focused proof consumer is `tests/test_agent_benchmark_integrity_anti_gaming_replay.py`. A passing result record has to show that the fixture and exported-bundle validators recompute benchmark-integrity replay from public case ids, locked evaluator ids, config hashes, file-access refs, contamination-check refs, trusted-reference refs, output-replay refs, source-module manifest digests, and negative-case rows rather than trusting declared benchmark language.\n\n```text\nPYTHONDONTWRITEBYTECODE=1 ./repo-pytest \\\n  tests/test_agent_benchmark_integrity_anti_gaming_replay.py \\\n  -p no:cacheprovider\n./repo-python scripts/build_doctrine_projection.py \\\n  --check-paper-module-corpus\n```\n\nFor the focused test, the result record boundary is the asserted shape: three public case ids, three replay rows, two recomputed `integrity_pass` rows, one `quarantine` row, three public trace spans, locked-evaluator and config-hash coverage, three copied source-module imports, nine source-artifact evidence refs, three verified source-artifact evidence refs, `body_in_receipt=false`, and negative cases for verdict mismatch, invalid declared verdict, evaluator config hash swaps, missing replay/source evidence, digest mismatches, manifest boundary violations, hidden-gold/oracle/provider/score overclaims, and unsafe command-card body reuse. For the corpus check, the result record only proves bundle/instance parity; it does not create benchmark claims, product-progress, provider, public sharing, or launch-scope decision.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.agent_benchmark_integrity_anti_gaming_replay run-benchmark-integrity-bundle --input examples/agent_benchmark_integrity_anti_gaming_replay/exported_benchmark_integrity_bundle --out /tmp/agent_benchmark_integrity_bundle_receipt --card > /tmp/agent_benchmark_integrity_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && ../repo-pytest tests/test_agent_benchmark_integrity_anti_gaming_replay.py\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim only that the public fixture and exported bundle preserve a metadata-only benchmark-integrity replay boundary: public case ids, locked evaluator refs, config hashes, contamination refs, output-replay refs, manifest digests, negative cases, and scope limits are recomputed or checked.\n\nIt must not claim benchmark performance, SWE-bench score, provider capability, hidden-gold access, oracle patch access, private issue access, live repository mutation, publishing-scope decision, product-progress evidence, or launch-scope decision.\n\n###### Scope boundary\n\nThis module does not claim benchmark performance, run providers, expose private issue or oracle patch bodies, access hidden-gold answers, mutate live repositories, publish results, host a benchmark, or include launch operations.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe standard treats the bundle `source_module_manifest.json` as the body-row authority for three copied source pattern provenance bodies: `benchmark_integrity_extracted_pattern_ledger_row_body_import`, `benchmark_integrity_high_novelty_growth_receipt_body_import`, and `benchmark_integrity_deterministic_pattern_order_body_import`.\n\nThose rows stay in `source_artifacts/`; result records and workingness/status cards carry refs, digests, classes, counts, and scope limits only. The body floor is accepted as regression-negative fixture evidence, not as a benchmark claims, SWE-bench performance claim, hidden-gold export, provider authority, live repository mutation authority, product-progress evidence, public sharing, or launch-scope decision.\n\n###### Governing Lattice Relation\n\nThe bundle binds this page to `mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay`, the `agent_reliability_and_safety_validator_bundle` concept, provisional principles `P-1` and `P-2`, provisional axiom `AX-1`, and the `paper_module.mission_transaction_work_spine` dependency. Within that lattice, the mechanism is an evidence-before-score gate: benchmark-style language has no paper authority unless the source record, copied-source manifest, locked policy, case roster, replay observations, public trace, negative-case floor, and metadata-only result records agree.\n\nThe governing concept is accountability for validator bundles, not public leaderboard construction. The principle/axiom ceiling is enforced as a refusal surface: private issue bodies, hidden-gold answers, oracle patch bodies, model-output data, source-file changes, live repository mutation, publishing-scope decision, product-progress evidence, and launch-scope decision remain false even when the replay fixture passes.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 18815,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Agent benchmark numbers are easy to state and hard to trust. A single headline like \"passes N percent of repository repair tasks\" hides every decision that produced it: which evaluator ran, whether its configuration was frozen, whether the agent could see held-out answers, whether the test cases leaked into training, and whether one lucky attempt was promoted as the score. This component exists to answer one question before any of that language is allowed: can each claimed pass be replayed from public refs that name their evaluator, their configuration hash, and the evidence that the run was not gamed? A positive result cannot be asserted. A replay row that simply declares integrity_pass is\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The component turns a benchmark claim into a replay-verification problem. Its inputs are the projection protocol, locked evaluator policy, benchmark case roster, replay observations, exported bundle manifest, source-module manifest, and copied sourceartifacts/ rows. build_result loads those inputs, validates source-module imports, scans public inputs and copied source bodies against the non-public-state forbidden-class policy, checks projection protocol density, validates the locked evaluator policy, validates the case roster, and then validates each replay row against the same public boundary. A positive replay cannot pass by declaring success. The replay row must name a case id present in\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "run consumes the first-wave fixture and writes the result, board, validation result record, sign-off result record, and metadata-only command card. It is the proof consumer for the canonical fixture boundary and required negative-case floor. run-benchmark-integrity-bundle consumes the exported public bundle and proves that source-open body imports, bundle shape, manifest digests, and metadata-only result record/card rules survive outside the fixture directory. tests/testagentbenchmarkintegrityantigamingreplay.py is the focused regression consumer. It asserts negative-case observation, digest verification, source-artifact evidence refs, public trace verdict recomputation, positive/negative v\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipts",
       "title": "Validation Result records",
       "level": 2,
       "excerpt": "The focused proof consumer is tests/testagentbenchmarkintegrityantigamingreplay.py. A passing result record has to show that the fixture and exported-bundle validators recompute benchmark-integrity replay from public case ids, locked evaluator ids, config hashes, file-access refs, contamination-check refs, trusted-reference refs, output-replay refs, source-module manifest digests, and negative-case rows rather than trusting declared benchmark language. For the focused test, the result record boundary is the asserted shape: three public case ids, three replay rows, two recomputed integrity_pass rows, one quarantine row, three public trace spans, locked-evaluator and config-hash coverage, thr\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The page shape is a bounded replay spine, not a benchmark leaderboard. A reader starts at the JSON bundle, follows the source-open manifest into three copied public source provenance bodies, then checks the public case roster, locked evaluator policy, replay observations, recomputed trace verdicts, and metadata-only result records. The output is an integrity-boundary verdict: two public case replays pass the boundary, one public case replay is quarantined, and no score or hidden-gold authority is created.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The standard treats the bundle sourcemodulemanifest.json as the body-row authority for three copied source pattern provenance bodies: benchmarkintegrityextractedpatternledgerrowbody_import, benchmarkintegrityhighnoveltygrowthreceiptbody_import, and benchmarkintegritydeterministicpatternorderbodyimport. Those rows stay in source_artifacts/; result records and workingness/status cards carry refs, digests, classes, counts, and scope limits only. The body floor is accepted as regression-negative fixture evidence, not as a benchmark claims, SWE-bench performance claim, hidden-gold export, provider authority, live repository mutation authority, product-progress evidence, public sharing, or launch\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim only that the public fixture and exported bundle preserve a metadata-only benchmark-integrity replay boundary: public case ids, locked evaluator refs, config hashes, contamination refs, output-replay refs, manifest digests, negative cases, and scope limits are recomputed or checked. It must not claim benchmark performance, SWE-bench score, provider capability, hidden-gold access, oracle patch access, private issue access, live repository mutation, public sharing decision, product-progress evidence, or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: read core/papermodulecapsules.json::paper_modules[3], then the generated JSON instance, before treating this Markdown as explanatory projection. Bundle route: read examples/agentbenchmarkintegrityantigamingreplay/exportedbenchmarkintegritybundle/sourcemodulemanifest.json for modulecount=3, bodyin_receipt=false, copied body refs, digest refs, and the explicit secret-exclusion boundary. Case route: read benchmarkcases.json for repoissuepublic001, repoissuepublic002, and repoissuepublic003; the rows expose ids, hashes, splits, and held-out guard ids, not issue bodies or oracle patches. Replay route: read replay_observations.json for the locked evaluator ids, config hashes, file-a\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-mechanics",
       "title": "Public Mechanics",
       "level": 2,
       "excerpt": "A replay cannot pass unless the evaluator id and config hash are locked. A replay row cannot pass unless its case id appears in the declared benchmark_cases.json roster. File-access logs, contamination checks, trusted references, and output replay refs are required before any benchmark-style language can be considered. Train/test leakage, hidden-gold access, oracle patch bodies, model-output data, final-answer-only grading, pass-k cherry-picking, misleading tests, private issue bodies, unregistered case replays, and score overclaims are quarantine cases. integrity_pass is evidence that a metadata-only regression replay respected the boundary, not evidence of a SWE-bench score, live agent ca\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in the long-running observation that optimized metrics can become targets and lose evidential force, plus the AI-safety literature on reward hacking and specification gaming. Concrete Problems in AI Safety frames reward hacking as a practical accident-risk problem, DeepMind's specification-gaming survey collects concrete examples of agents satisfying a proxy in the wrong way, and benchmark-contamination work such as Benchmarking Benchmark Leakage in Large Language Models motivates explicit leakage and benchmark-use documentation. Microcosm borrows the anti-gaming accounting pattern: evaluator ids, config hashes, case rosters, file-access logs, contamination checks\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The bundle binds this page to mechanism.agentbenchmarkintegrityantigamingreplay.validatespublicbenchmarkintegrity_replay, the agentreliabilityandsafetyvalidator_bundle concept, provisional principles P-1 and P-2, provisional axiom AX-1, and the papermodule.missiontransactionworkspine dependency. Within that lattice, the mechanism is an evidence-before-score gate: benchmark-style language has no paper authority unless the source record, copied-source manifest, locked policy, case roster, replay observations, public trace, negative-case floor, and metadata-only result records agree. The governing concept is accountability for validator bundles, not public leaderboard construction. The princip\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture validator from the repo root and write its result record outside the repo working tree: Then run the exported bundle validator: The focused regression test and corpus projection checks are:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not claim benchmark performance, run providers, expose private issue or oracle patch bodies, access hidden-gold answers, mutate live repositories, publish results, host a benchmark, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.agent_benchmark_integrity_anti_gaming_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Bundle[\"JSON bundle authority\"] --> Markdown[\"Reader projection\"] Protocol[\"projection_protocol.json\"] --> ProtocolGate[\"source refs and result record density\"] Manifest[\"source_module_manifest.json\"] --> DigestGate[\"material class and digest gate\"] DigestGate --> Bodies[\"copied public source provenance bodies\"] DigestGate --> RealTrace[\"sanitised real command-run trace passing pytest, sha256 digests, declared omissions\"] Cases[\"3 public case ids\"] --> ReplayGate[\"case roster and required replay refs\"] Policy[\"locked evaluator policy\"] --> EvaluatorGate[\"locked ids and config hashes\"] Replays[\"3 replay observations\"] --> ReplayGate EvaluatorGate --> ReplayGate ProtocolGate --> ReplayGate ReplayGate --> EvidenceGate[\"per-ref evidence artifacts file-access, contamination, trusted reference, output replay\"] EvidenceGate --> Recompute[\"recompute integrity_pass or quarantine\"] RealTrace --> Recompute Recompute --> Trace[\"public trace verdict recomputation\"] Trace --> Verdicts[\"2 integrity_pass and 1 quarantine\"] Negatives[\"11 anti-gaming fixtures\"] --> Quarantine[\"quarantine or blocking finding\"] Bodies --> PrivateScan[\"metadata-only non-public-state scan\"] RealTrace --> PrivateScan Verdicts --> Result record[\"metadata-only integrity result record\"] Quarantine --> Result record PrivateScan --> Result record Result record --> Ceiling[\"anti-score scope limit\"]",
       "source_hash": "sha256:77dd79c09a231262e26cb18014deab3fa1b79f13aa3a2546ffae6c8b5c9726ee",
       "html_url": "docs/paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay-diagram-1",
       "html_anchor": "paper-module-agent-benchmark-integrity-anti-gaming-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Concrete Problems in AI Safety",
       "url": "https://arxiv.org/abs/1606.06565",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "specification-gaming survey",
       "url": "https://deepmind.google/blog/specification-gaming-the-flip-side-of-ai-ingenuity/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Benchmarking Benchmark Leakage in Large Language Models",
       "url": "https://arxiv.org/abs/2404.18824",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agent_benchmark_integrity_anti_gaming_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agent Benchmark Integrity Anti Gaming Replay",
         "url": "components.html#component-agent_benchmark_integrity_anti_gaming_replay"
        },
        {
         "id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public benchmark integrity replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 20166
    },
    {
     "id": "paper_module.research_replication_rubric_artifact_replay",
     "title": "Research Replication Rubric Artifact Replay",
     "relative_href": "docs/paper-modules.html#paper-module-research-replication-rubric-artifact-replay",
     "read_href": "docs/paper-modules.html#paper-module-research-replication-rubric-artifact-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-research-replication-rubric-artifact-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The research replication rubric-artifact replay validates source-backed public replication bundles before any paper-replication language is allowed.",
     "summary": "Research Replication Rubric Artifact Replay is the public research-replication claim boundary for Microcosm. It checks contribution decomposition refs, rubric trees, allowed public inputs, scratch repo scaffolds, experiment DAG refs, metric scripts, declared artifact-hash rosters, artifact hashes, grader reports, compute/runtime budgets, ablation diffs, failure taxonomies, cold-rerun result records, public agent-execution trace spans, four copied source modules, and eight replication-overclaim negative cases while keeping private paper/data bodies, hidden rubrics, model-output data, original-author code bodies, benchmark claims, and public-sharing claims out of result records.",
     "authority_ceiling": "Copied public source pattern provenance bodies, exact-copy public Python internal control body, metadata-only research-replication replay result records, public agent-execution trace spans, and fixture validation only; no actual paper replication success, benchmark performance claim, private paper/data body export, hidden-rubric export, external model access, unbounded compute search, original-author code reuse, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.",
     "abstract": "The research replication rubric-artifact replay validates source-backed public replication bundles before any paper-replication language is allowed.",
     "teleology": {
      "section_id": "",
      "text": "The research replication rubric-artifact replay validates source-backed public replication bundles before any paper-replication language is allowed.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Abstract\n\n`research_replication_rubric_artifact_replay` is a public Microcosm component that turns \"an agent replicated a paper\" into a replayable evidence contract. It does not rerun a real paper, use external model services, certify benchmark performance, or grant publishing-scope decision. It checks whether a public replay bundle exposes the objects a replication claim must cite before its authority can rise: contribution decomposition refs, rubric-tree refs, allowed input refs, scratch-scaffold refs, experiment-DAG refs, metric-script refs, declared artifact hashes, grader reports, runtime budgets, ablation diffs, failure taxonomies, cold-rerun refs, public execution-trace spans, and source-module digests.\n\nThe technical result is an R3 local artifact replay: one public metric script is executed over one allowed public input table, the produced output is compared with a declared output artifact, and the declared hash file is checked against that artifact. A successful run says the replay packet is structurally accountable, digest-bound, redaction-aware, and negative-case tested. It does not say that a real paper was independently replicated.\n\n###### Purpose\n\nThe single question this component answers is narrow: before an agent is allowed to say it replicated a paper, can the claim be forced into a bundle that a cold runtime can check without trusting any prose? The interesting move is that the component refuses to treat \"replicated\" as one fact. It pulls the claim apart into the objects a real replication would have left behind, a contribution decomposition, a grading rubric tree, the allowed public inputs, an experiment DAG, metric scripts, declared artifact hashes, a grader report, a runtime budget, an ablation diff, a failure taxonomy, and a cold-rerun result record, and it asks for each one by name.\n\nWhat keeps this from being a checklist linter is the small executable core. The exported bundle does not just assert that an artifact hash exists. The runtime reads one public metric script, runs it over one allowed public input table, produces an output, and then checks that output against both the declared output artifact and the declared hash file. A replay row can name all the right refs and still fail here if the numbers do not reproduce. The negative-case fixtures attack exactly the gap a plausible fake would exploit: report-only success, benchmark-performance language, final-answer-only grading, undeclared hashes, and reuse of the original author's code.\n\nThe deliberately modest part is the subject matter. The two paper bundles are public synthetic examples, and the metric is a single sum over a small table. The component's value is the boundary, not the science. It does not run a real paper, call a provider, search compute without bound, or grant any launch or publishing-scope decision. It only makes a replication claim accountable enough that an independent reader can see where the evidence stops.\n\n###### Telos\n\nResearch-agent demos often collapse four objects into one sentence: the paper, the runnable artifact, the grading rubric, and the evidence that an independent rerun happened. This component keeps those objects separate. A replay is admissible only when it names each evidence object and when the local runtime can check the public artifact replay without touching private paper bodies, non-public data bodies, hidden rubrics, model-output data, original-author code bodies, or launch/publishing-scope decision.\n\nThe central bet is modest and technical: before any replication claim is made, the system can force the claim into a falsifiable bundle with declared hashes, bounded metric execution, metadata-only result records, and explicit scope boundaries.\n\n###### Mechanism\n\nThe mechanism row is `mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay`. It runs in `src/microcosm_core/organs/research_replication_rubric_artifact_replay.py` and is backed by the functions `run`, `run_replication_bundle`, `validate_source_module_imports`, `validate_projection_protocol`, `validate_replication_policy`, `validate_research_replays`, `_build_result`, `_freshness_basis`, and the constants `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_REF`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n\nThe runtime has two modes:\n- Fixture mode reads `fixtures/first_wave/research_replication_rubric_artifact_replay/input`, includes positive replay rows plus eight negative-case fixtures, and writes first-wave result, board, validation, and sign-off result records.\n- Exported-bundle mode reads `examples/research_replication_rubric_artifact_replay/exported_research_replication_bundle`, validates the public runtime example, checks the source-module manifest, and writes `receipts/runtime_shell/demo_project/organs/research_replication_rubric_artifact_replay/exported_research_replication_bundle_validation_result.json`.\n\nThe proof object is the tuple:\n1. `replication_policy.json`, which states required replay fields, rubric axes, and forbidden claims.\n2. `research_replays.json`, which supplies two synthetic paper bundles that cite public inputs, metrics, artifact hashes, grader reports, budgets, failures, and cold-rerun result records.\n3. `execution_artifacts/execution_artifact_manifest.json`, which authorizes the replayable artifact relation.\n4. `source_module_manifest.json`, which names copied source bodies and digest obligations.\n5. Runtime result records, which expose refs, counts, digests, trace spans, and scope boundaries without embedding private bodies.\n\n###### Metric-Script and Artifact Evidence\n\nThe exported bundle includes a small but real artifact-replay loop:\n\nRole Public artifact Input body `execution_artifacts/inputs/public_synthetic_table.json` Input hash `execution_artifacts/inputs/public_synthetic_table.sha256.json` Metric script `execution_artifacts/metrics/public_sum_metric.json` Metric hash `execution_artifacts/metrics/public_sum_metric.sha256.json` Declared output `execution_artifacts/artifacts/result_table.json` Declared output hash `execution_artifacts/artifacts/result_table.sha256.json`\n\n`run_replication_bundle` reads `execution_artifacts/execution_artifact_manifest.json`, executes the `public_sum_metric` over the allowed public input, compares the produced payload with `execution_artifacts/artifacts/result_table.json`, and verifies the declared hash in `execution_artifacts/artifacts/result_table.sha256.json`. The focused tests mutate each side of that relation, so the pass is not just a field-presence check.\n\n###### Pipeline\n\nSource refs\n\nJSON bundle authority `paper_module.research_replication_rubric_artifact_replay` Diagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority paper_module.research_replication_rubric_artifact_replay\"] policy[\"Replication policy required fields + rubric axes + forbidden claims\"] replay[\"Research replay rows 2 synthetic paper bundles\"] artifacts[\"Execution artifacts allowed input + metric spec + declared hash\"] metric[\"Local metric replay public_sum_metric over allowed input\"] source_manifest[\"Source-module manifest 3 source pattern slices + 1 exact-copy component body\"] trace[\"Public execution trace 2 metadata-only spans\"] negatives[\"Negative fixtures 8 overclaim cases\"] result records[\"metadata-only result records counts, refs, digests, scope boundaries\"] ceiling[\"Scope limit no replication-success or publishing-scope decision\"] bundle --> policy policy --> replay replay --> artifacts artifacts --> metric source_manifest --> result records metric --> result records trace --> result records negatives --> result records result records --> ceiling\n```\n\n###### Evidence Contract\n\nThe policy file requires fourteen replay fields: `paper_id`, `contribution_decomposition_ref`, `rubric_tree_ref`, `allowed_public_input_refs`, `scratch_repo_scaffold_ref`, `experiment_dag_ref`, `metric_script_refs`, `artifact_hash_refs`, `declared_artifact_hash_refs`, `grader_report_ref`, `cost_runtime_budget_ref`, `ablation_diff_ref`, `failure_taxonomy_ref`, and `cold_rerun_receipt_ref`.\n\nThe policy also requires eight rubric axes: contribution decomposition, artifact replay, experiment DAG, metric script, grader alignment, budget boundary, failure taxonomy, and cold rerun. A replay row can therefore pass only as a structured evidence packet, not as a final answer or narrative report.\n\nThe exported runtime result record currently records the following evidence floor: two synthetic paper bundles, two replay rows, two artifact replay rows, two cold-rerun refs, two public execution-trace spans, four copied source modules, no findings, no error codes, source-module status `pass`, and `input_mode: exported_research_replication_bundle`. The fixture result record records all eight negative cases as observed.\n\n###### Failure Modes and Guardrails\n\nThe expected negative cases are:\n- original-author code reuse\n- hidden-rubric leakage\n- report-only success\n- benchmark-performance overclaim\n- private paper or data body leakage\n- unbounded compute search\n- final-answer-only grading\n- undeclared artifact hash refs\n\nThe tests also cover source-module digest mismatch, local bundle body tamper, rehashing a swapped source module, wrong execution-artifact hashes, wrong artifact refs with matching hashes, report-only exported replays, metric perturbation, replay metric-script ref tamper, input perturbation, output body tamper, baked output swaps, and self-consistent input/output/hash rewrites. These cases make the component stronger than a field-presence linter: it rejects common ways to produce plausible but unaccountable replication prose.\n\n###### Test Matrix\n\nThe focused regression file `tests/test_research_replication_rubric_artifact_replay.py` carries the source proof for this module.\n\nClass Examples What it proves Real-good `test_research_replication_replay_observes_negative_cases`, `test_research_replication_exported_bundle_validates_runtime_shape`, `test_public_agent_execution_trace_refactor_builds_research_replay_spans` The fixture and exported bundle produce metadata-only result records, observe the required negative cases, execute the local metric replay, and build two public trace spans. Real-bad `test_research_replication_rejects_source_module_digest_mismatch`, `test_research_replication_rejects_bundle_local_source_module_body_tamper`, `test_research_replication_rejects_rehashed_source_module_body_swap`, `test_research_replication_rejects_metadata_only_bundle` The validator rejects broken source-module provenance, local bundle tamper, self-consistent source swaps, and metadata-only replay packets. Perturbation `test_research_replication_rejects_wrong_execution_artifact_hash`, `test_research_replication_rejects_wrong_artifact_ref_with_matching_hash`, `test_research_replication_rejects_metric_perturbation`, `test_research_replication_rejects_valid_metric_script_body_swap`, `test_research_replication_rejects_replay_metric_script_ref_tamper`, `test_research_replication_rejects_replay_allowed_input_ref_tamper`, `test_research_replication_rejects_input_perturbation`, `test_research_replication_rejects_output_artifact_body_tamper`, `test_research_replication_rejects_output_artifact_baked_swap`, `test_research_replication_rejects_self_consistent_input_output_hash_rewrite` Metric, input, output, hash, and replay-row mutations stay blocked even when the tampered bundle tries to preserve self-consistency. Label forgery `test_research_replication_ignores_forged_negative_case_labels`, `test_research_replication_negative_case_id_follows_semantics_not_filename`, `test_research_replication_exported_bundle_ignores_self_declared_pass_labels` Verdicts are derived from semantic replay-row fields, not filenames, declared status labels, or expected error-code labels. Result record economy `test_research_replication_receipts_are_public_relative_and_secret_excluded`, `test_research_replication_bundle_card_reuses_fresh_receipt`, `test_research_replication_bundle_card_rejects_stale_receipt_after_input_mutation` Result records remain public-relative and secret-excluded; command cards reuse fresh result records and reject stale ones after input mutation.\n\n###### Realness Rungs\n\nThis module's realness is intentionally runged:\n1. **Synthetic replay subjects.** The two paper bundles are public synthetic examples, one ML-method replay and one computational-science replay.\n2. **Real schema pressure.** The required fields, rubric axes, declared hash roster, source-module manifest, and non-public-state exclusions are enforced by runtime code and focused tests.\n3. **Local artifact replay.** The exported bundle executes a local metric over allowed public input and compares produced output against declared artifact hashes.\n4. **Source-open provenance.** Three public source pattern bodies and one exact Python internal control body are copied into the bundle and digest-checked.\n5. **metadata-only public result records.** Result records carry counts, refs, digests, verdicts, trace spans, and scope boundaries while excluding private/live/provider material.\n\nThe rung contract matters: the component is more than generic documentation polish, but it is still not paper-replication authority.\n\n###### Relation to Concepts, Principles, and Axioms\n\nThe JSON bundle binds the module to `concept.research_and_science_replay_evidence_bundle`. That concept is instantiated by the mechanism above and abides by `AX-1`, `AX-6`, `AX-8`, and `AX-12` at the concept layer. The bundle's direct axiom refs are `AX-1`, `AX-2`, `AX-5`, and `AX-7`.\n\nThe bundle's principle refs are `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-15`. For this component, the important principle pressure is:\n- Evidence must be structured and replayable before authority rises.\n- Result records and scope boundaries are part of the artifact, not commentary after it.\n- Projections stay below source authority; a readable paper module does not outrank the JSON bundle, mechanism row, runtime code, source-module manifest, or result records.\n- Typed refusal is part of the mechanism: benchmark, provider, public sharing, private-body, original-code, and unbounded-compute claims remain false unless another authority surface actually grants them.\n\nThe module depends on `paper_module.agent_benchmark_integrity_anti_gaming_replay`. Benchmark performance overclaim controls stay routed through that sibling instead of being reinvented here.\n\n###### Reader Evidence Routing\n\nOpen evidence in this order:\n1. `core/paper_module_capsules.json#paper_module.research_replication_rubric_artifact_replay` for the source-authority bundle, scope limit, doctrine refs, generated projection statuses, and code loci.\n2. `core/mechanism_sources.json#mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay` for the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and upstream mechanisms.\n3. `standards/std_microcosm_research_replication_rubric_artifact_replay.json` for the first-wave standard, public/private boundary, source-body floor, and hard launch/public sharing/provider/source-file changes flags.\n4. `examples/research_replication_rubric_artifact_replay/exported_research_replication_bundle/source_module_manifest.json` for source-open body-floor counts and digest obligations.\n5. `receipts/runtime_shell/demo_project/organs/research_replication_rubric_artifact_replay/exported_research_replication_bundle_validation_result.json` for the current exported-bundle validation result.\n6. `tests/test_research_replication_rubric_artifact_replay.py` for negative cases, digest tamper tests, metric replay tests, public-relative result record tests, command-card economy, and source-body exclusion.\n\n###### Prior Art Grounding\n\nThis replay scores a research artifact against a replication rubric. It follows artifact-evaluation practice from systems and machine-learning venues ( [ACM Artifact Review and Badging](https://www.acm.org/publications/policies/artifact-review-and-badging-current)), which separates 'available' from 'functional' from 'reproduced'. Microcosm borrows the rubric-over-artifact shape; the result is fixture-bound replay evidence, not a reproducibility guarantee or a peer-review verdict.\n\n###### Validation Result record Path\n\nFocused runtime validation:\n\n```text\n./repo-pytest tests/test_research_replication_rubric_artifact_replay.py -q --basetemp=/tmp/microcosm_research_replication_rubric_artifact_replay_pytest\n```\n\nPaper-module corpus validation:\n\n```text\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe runtime commands behind the result records are:\n\n###### Scope boundary\n\n###### Limitations\n- The two replay subjects are synthetic public paper bundles, not real external paper replications.\n- The metric replay is intentionally small: one public metric spec over one public input table with one declared output artifact. Its value is boundary enforcement, not benchmark substance.\n- Source-open proof is limited to three public source pattern body slices and one exact-copy public Python internal control body. It does not expose private source-root bodies, source notes, model-output data, account or browser state, browser UI state, or original-author code bodies.\n- A green run does not establish research truth, paper novelty, formal-result correctness, benchmark performance, external model service, launch-scope decision, or publishing-scope decision.\n\n###### Authority Boundary\n\nThis component validates synthetic public replay metadata, local public artifact replay, source-module digest boundaries, public trace spans, negative-case coverage, and metadata-only result record shape. It does not claim actual paper replication success, benchmark performance, external model service, hidden-rubric access, original-author-code reuse, private paper/data export, unbounded compute search, final-answer-only grading, launch-scope decision, publishing-scope decision, source-file changes, product progress, or whole-system correctness.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Copied public source pattern provenance bodies, exact-copy public Python internal control body, metadata-only research-replication replay result records, public agent-execution trace spans, and fixture validation only; no actual paper replication success, benchmark performance claim, private paper/data body export, hidden-rubric export, external model access, unbounded compute search, original-author code reuse, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-module manifest at `examples/research_replication_rubric_artifact_replay/exported_research_replication_bundle/source_module_manifest.json` is the source-open body floor. It declares four copied modules:\n- `research_replication_extracted_pattern_ledger_row_body_import`, a public source pattern body slice.\n- `research_replication_high_novelty_growth_receipt_body_import`, a public source reconstruction result record slice.\n- `research_replication_deterministic_pattern_order_body_import`, a public deterministic pattern-order slice.\n- `research_replication_replay_control_plane_source_body_import`, an exact-copy public Python internal control body for this component.\n\nEach row carries a source ref, target ref, material class, copied-body flag, result record-body exclusion flag, line count or byte count, and sha256 digest. The runtime verifies target digests; for the exact-copy Python row it also checks source currentness and source-target byte equality. Result records expose refs, counts, digests, and verdicts only. They do not embed source bodies.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 20116,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "researchreplicationrubricartifactreplay is a public Microcosm component that turns \"an agent replicated a paper\" into a replayable evidence contract. It does not rerun a real paper, use external model services, certify benchmark performance, or grant public sharing decision. It checks whether a public replay bundle exposes the objects a replication claim must cite before its authority can rise: contribution decomposition refs, rubric-tree refs, allowed input refs, scratch-scaffold refs, experiment-DAG refs, metric-script refs, declared artifact hashes, grader reports, runtime budgets, ablation diffs, failure taxonomies, cold-rerun refs, public execution-trace spans, and source-module digest\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The single question this component answers is narrow: before an agent is allowed to say it replicated a paper, can the claim be forced into a bundle that a cold runtime can check without trusting any prose? The interesting move is that the component refuses to treat \"replicated\" as one fact. It pulls the claim apart into the objects a real replication would have left behind, a contribution decomposition, a grading rubric tree, the allowed public inputs, an experiment DAG, metric scripts, declared artifact hashes, a grader report, a runtime budget, an ablation diff, a failure taxonomy, and a cold-rerun result record, and it asks for each one by name. What keeps this from being a checklist li\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "telos",
       "title": "Telos",
       "level": 2,
       "excerpt": "Research-agent demos often collapse four objects into one sentence: the paper, the runnable artifact, the grading rubric, and the evidence that an independent rerun happened. This component keeps those objects separate. A replay is admissible only when it names each evidence object and when the local runtime can check the public artifact replay without touching private paper bodies, non-public data bodies, hidden rubrics, model-output data, original-author code bodies, or launch/public sharing decision. The central bet is modest and technical: before any replication claim is made, the system can force the claim into a falsifiable bundle with declared hashes, bounded metric execution, metada\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism",
       "title": "Mechanism",
       "level": 2,
       "excerpt": "The mechanism row is mechanism.researchreplicationrubricartifactreplay.validatespublicresearchreplicationreplay. It runs in src/microcosmcore/components/researchreplicationrubricartifact_replay.py and is backed by the functions run, runreplicationbundle, validatesourcemoduleimports, validateprojection_protocol, validatereplicationpolicy, validateresearchreplays, buildresult, freshnessbasis, and the constants EXPECTEDNEGATIVECASES, AUTHORITYCEILING, SOURCEMODULEMANIFESTREF, BUNDLERESULTNAME, and CARDSCHEMAVERSION. The runtime has two modes: Fixture mode reads fixtures/firstwave/researchreplicationrubricartifact_replay/input, includes positive replay rows plus eight negative-case fixtures, an\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "metric-script-and-artifact-evidence",
       "title": "Metric-Script and Artifact Evidence",
       "level": 2,
       "excerpt": "The exported bundle includes a small but real artifact-replay loop: runreplicationbundle reads executionartifacts/executionartifact_manifest.json, executes the publicsummetric over the allowed public input, compares the produced payload with executionartifacts/artifacts/resulttable.json, and verifies the declared hash in executionartifacts/artifacts/resulttable.sha256.json. The focused tests mutate each side of that relation, so the pass is not just a field-presence check.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "pipeline",
       "title": "Pipeline",
       "level": 2,
       "excerpt": "The generated projection remains blocked until the component-atlas owner lane binds the atlas row.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-contract",
       "title": "Evidence Contract",
       "level": 2,
       "excerpt": "The policy file requires fourteen replay fields: paper_id, contributiondecompositionref, rubrictreeref, allowedpublicinputrefs, scratchreposcaffoldref, experimentdagref, metricscriptrefs, artifacthashrefs, declaredartifacthashrefs, graderreport_ref, costruntimebudgetref, ablationdiffref, failuretaxonomy_ref, and coldrerunreceipt_ref. The policy also requires eight rubric axes: contribution decomposition, artifact replay, experiment DAG, metric script, grader alignment, budget boundary, failure taxonomy, and cold rerun. A replay row can therefore pass only as a structured evidence packet, not as a final answer or narrative report. The exported runtime result record currently records the foll\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-module manifest at examples/researchreplicationrubricartifactreplay/exportedresearchreplicationbundle/sourcemodule_manifest.json is the source-open body floor. It declares four copied modules: researchreplicationextractedpatternledgerrowbody_import, a public source pattern body slice. researchreplicationhighnoveltygrowthreceiptbody_import, a public source reconstruction result record slice. researchreplicationdeterministicpatternorderbodyimport, a public deterministic pattern-order slice. researchreplicationreplaycontrolplanesourcebody_import, an exact-copy public Python internal control body for this component. Each row carries a source ref, target ref, material class, copied-bo\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "failure-modes-and-guardrails",
       "title": "Failure Modes and Guardrails",
       "level": 2,
       "excerpt": "The expected negative cases are: original-author code reuse hidden-rubric leakage report-only success benchmark-performance overclaim private paper or data body leakage unbounded compute search final-answer-only grading undeclared artifact hash refs The tests also cover source-module digest mismatch, local bundle body tamper, rehashing a swapped source module, wrong execution-artifact hashes, wrong artifact refs with matching hashes, report-only exported replays, metric perturbation, replay metric-script ref tamper, input perturbation, output body tamper, baked output swaps, and self-consistent input/output/hash rewrites. These cases make the component stronger than a field-presence linter:\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "test-matrix",
       "title": "Test Matrix",
       "level": 2,
       "excerpt": "The focused regression file tests/testresearchreplicationrubricartifact_replay.py carries the source proof for this module.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "realness-rungs",
       "title": "Realness Rungs",
       "level": 2,
       "excerpt": "This module's realness is intentionally runged: Synthetic replay subjects. The two paper bundles are public synthetic examples, one ML-method replay and one computational-science replay. Real schema pressure. The required fields, rubric axes, declared hash roster, source-module manifest, and non-public-state exclusions are enforced by runtime code and focused tests. Local artifact replay. The exported bundle executes a local metric over allowed public input and compares produced output against declared artifact hashes. Source-open provenance. Three public source pattern bodies and one exact Python internal control body are copied into the bundle and digest-checked. metadata-only public resu\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "relation-to-concepts-principles-and-axioms",
       "title": "Relation to Concepts, Principles, and Axioms",
       "level": 2,
       "excerpt": "The JSON bundle binds the module to concept.researchandsciencereplayevidence_bundle. That concept is instantiated by the mechanism above and abides by AX-1, AX-6, AX-8, and AX-12 at the concept layer. The bundle's direct axiom refs are AX-1, AX-2, AX-5, and AX-7. The bundle's principle refs are P-1, P-2, P-3, P-6, P-8, and P-15. For this component, the important principle pressure is: Evidence must be structured and replayable before authority rises. Result records and scope boundaries are part of the artifact, not commentary after it. Projections stay below source authority; a readable paper module does not outrank the JSON bundle, mechanism row, runtime code, source-module manifest, or re\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The two replay subjects are synthetic public paper bundles, not real external paper replications. The metric replay is intentionally small: one public metric spec over one public input table with one declared output artifact. Its value is boundary enforcement, not benchmark substance. Source-open proof is limited to three public source pattern body slices and one exact-copy public Python internal control body. It does not expose private source-root bodies, source notes, model-output data, account or browser state, browser UI state, or original-author code bodies. binds the atlas row. A green run does not establish research truth, paper novelty, formal-result correctness, benchmark performan\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Open evidence in this order: core/papermodulecapsules.json#papermodule.researchreplicationrubricartifact_replay for the source-authority bundle, scope limit, doctrine refs, generated projection statuses, and code loci. core/mechanismsources.json#mechanism.researchreplicationrubricartifactreplay.validatespublicresearchreplication_replay for the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and upstream mechanisms. standards/stdmicrocosmresearchreplicationrubricartifactreplay.json for the first-wave standard, public/private boundary, source-body floor, and hard launch/public sharing/provider/source-file changes flags. exa\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Focused runtime validation: Paper-module corpus validation: The runtime commands behind the result records are:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-boundary",
       "title": "Authority Boundary",
       "level": 2,
       "excerpt": "This component validates synthetic public replay metadata, local public artifact replay, source-module digest boundaries, public trace spans, negative-case coverage, and metadata-only result record shape. It does not claim actual paper replication success, benchmark performance, external model service, hidden-rubric access, original-author-code reuse, private paper/data export, unbounded compute search, final-answer-only grading, launch-scope decision, public sharing approval, source-file changes, product progress, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page. It may not claim more than its bundle scope limit allows: Copied public source pattern provenance bodies, exact-copy public Python internal control body, metadata-only research-replication replay result records, public agent-execution trace spans, and fixture validation only; no actual paper replication success, benchmark performance claim, private paper/data body export, hidden-rubric export, external model access, unbounded compute search, original-author code reuse,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This replay scores a research artifact against a replication rubric. It follows artifact-evaluation practice from systems and machine-learning venues (ACM Artifact Review and Badging), which separates 'available' from 'functional' from 'reproduced'. Microcosm borrows the rubric-over-artifact shape; the result is fixture-bound replay evidence, not a reproducibility guarantee or a peer-review verdict.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.research_replication_rubric_artifact_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON bundle authority paper_module.research_replication_rubric_artifact_replay\"] policy[\"Replication policy required fields + rubric axes + forbidden claims\"] replay[\"Research replay rows 2 synthetic paper bundles\"] artifacts[\"Execution artifacts allowed input + metric spec + declared hash\"] metric[\"Local metric replay public_sum_metric over allowed input\"] source_manifest[\"Source-module manifest 3 source pattern slices + 1 exact-copy component body\"] trace[\"Public execution trace 2 metadata-only spans\"] negatives[\"Negative fixtures 8 overclaim cases\"] result records[\"metadata-only result records counts, refs, digests, scope boundaries\"] ceiling[\"Scope limit no replication-success or publishing-scope decision\"] bundle --> policy policy --> replay replay --> artifacts artifacts --> metric source_manifest --> result records metric --> result records trace --> result records negatives --> result records result records --> ceiling",
       "source_hash": "sha256:7c3328476b88327bd6c7b253eb41e3e204f07b6a9e0248854a09beae228dd703",
       "html_url": "docs/paper-modules.html#paper-module-research-replication-rubric-artifact-replay-diagram-1",
       "html_anchor": "paper-module-research-replication-rubric-artifact-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/research_replication_rubric_artifact_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "ACM Artifact Review and Badging",
       "url": "https://www.acm.org/publications/policies/artifact-review-and-badging-current",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.agent_benchmark_integrity_anti_gaming_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Benchmark Integrity Anti-Gaming Replay",
         "url": "paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "research_replication_rubric_artifact_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Research Replication Rubric Artifact Replay",
         "url": "components.html#component-research_replication_rubric_artifact_replay"
        },
        {
         "id": "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public research replication replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.research_and_science_replay_evidence_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "research and science replay validators as reproducibility scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/research_replication_rubric_artifact_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 21661
    },
    {
     "id": "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "title": "Agentic Vulnerability Discovery Patch-Proof Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay",
     "read_href": "docs/paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The agentic vulnerability discovery patch-proof replay validates metadata-only synthetic vulnerability evidence chains before any found-and-fixed security language is allowed.",
     "summary": "Agentic Vulnerability Discovery Patch-Proof Replay is the public security-claim boundary for Microcosm. It checks projection protocol, vulnerability policy, synthetic target refs, issue hypotheses, trace evidence, abstract exploitability refs, patch diff refs, regression tests, verifier result records, sandbox verdicts, false-positive triage, cold replay, public agent-execution trace spans, secret-exclusion scan, nine copied source/control/standard/tool bodies, source-module manifest digests, metadata-only result record policy, and eight security-overclaim negative cases while keeping live targets, real CVE exploitation, weaponized payloads, account secrets, network exfiltration steps, actionable exploit instructions, model-output data, raw issue or patch bodies, benchmark claims, and source-file changes out of result records.",
     "authority_ceiling": "Copied public source/control/standard/tool bodies, metadata-only synthetic patch-proof replay result records, public agent-execution trace spans, and fixture validation only; no live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, external model access, source-file changes, benchmark security score, launch-scope decision, publishing-scope decision, whole-system security claim, or product-progress evidence.",
     "abstract": "The agentic vulnerability discovery patch-proof replay validates metadata-only synthetic vulnerability evidence chains before any found-and-fixed security language is allowed.",
     "teleology": {
      "section_id": "",
      "text": "The agentic vulnerability discovery patch-proof replay validates metadata-only synthetic vulnerability evidence chains before any found-and-fixed security language is allowed.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This module documents the source-available claim contract for `agentic_vulnerability_discovery_patch_proof_replay`. It turns an agentic vulnerability-discovery claim into a public trace-backed local replay: synthetic metadata-only targets, issue hypotheses, trace evidence, abstract exploitability refs, patch diffs, regression tests, verifier result records, sandbox policy verdicts, false-positive triage, cold replay, negative cases, and scope limits.\n\n###### Purpose\n\nAn agent that says it found and fixed a security bug is making a claim that is easy to assert and hard to check. The phrase \"found and fixed\" can stand for a real, tested repair, or for a plausible-looking patch that was never run, a false positive promoted to a finding, or a benchmark number with no evidence behind it. This component exists to refuse that ambiguity. It answers one question: before any \"found and fixed\" language is allowed, does a complete evidence chain line up, from a synthetic target through a hypothesis, a trace, an abstract exploitability ref, a patch diff, a regression test, and a verifier result record?\n\nThe part worth noticing is that two of those checks are not field checks. They recompute the thing the fixture is claiming. Each executable regression witness names one of three small, public mini-targets, a webhook redirect allowlist, a notebook log redactor, and a scheduler path normaliser. The validator runs that function twice, once in its unpatched form and once patched, and compares the results it computes against the `expected_pre_patch` and `expected_post_patch` values the fixture declared. A witness whose declared output does not match the computed output is rejected. In the same spirit, each verifier result record has its `pass` or `false_positive` verdict recomputed from the joined proof, patch, test, and witness evidence; the row's own label and result record filename are not taken on trust. The failure mode this guards against is a fixture that asserts a green result without the work behind it ever having run.\n\nThis is a synthetic, metadata-only replay, not live security work. The synthetic overclaim fixtures, live targets, real CVE exploitation, weaponised payloads, exploit steps, patch-without-test claims, benchmark claims, are regression boundaries the runtime must reject, not capabilities it offers. The useful claim is narrow and is stated plainly below: Microcosm can hold an agentic security story to a checked evidence chain before it admits patch-proof language.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"patch-proof replay runtime\"] fixture[\"first-wave fixture\"] bundle[\"exported patch-proof bundle\"] targets[\"synthetic target refs\"] hypotheses[\"issue hypotheses\"] traces[\"trace evidence refs\"] proofs[\"abstract exploitability refs\"] patches[\"patch diff refs\"] regressions[\"regression test refs\"] executable[\"executable regression witnesses\"] verifiers[\"verifier result records\"] sandbox[\"sandbox verdicts\"] negative[\"negative-case fixtures\"] secret_scan[\"secret-exclusion scan\"] replay[\"cold replay rows\"] public_trace[\"public trace spans\"] source_modules[\"source-module body floor\"] result records[\"metadata-only result records\"] consumer[\"focused proof-consumer tests\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle fixture --> targets bundle --> targets targets --> hypotheses hypotheses --> traces traces --> proofs proofs --> patches patches --> regressions regressions --> executable executable --> verifiers verifiers --> sandbox negative --> result records secret_scan --> result records sandbox --> replay replay --> public_trace source_modules --> secret_scan source_modules --> public_trace public_trace --> result records result records --> consumer result records --> ceiling\n```\n\nThe module shape is a metadata-only synthetic patch-proof replay, not a live vulnerability discovery or fix-correctness claim. The runtime forces target refs, hypotheses, trace refs, abstract exploitability refs, patch diff refs, regression test refs, verifier result records, sandbox verdicts, false-positive triage, cold replay, public trace spans, source-module digests, negative cases, and scope boundaries to line up before bounded patch-proof language is admitted.\n\n###### Technical Mechanism\n\nThe mechanism is an evidence join, not a scanner. The JSON bundle names the component and mechanism row, and the component resolves every claim through `_build_result` in `src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py`. That function loads the projection protocol and vulnerability policy, then validates targets, issue hypotheses, trace evidence, exploitability refs, patch diffs, regression tests, executable regression witnesses, verifier result records, sandbox verdicts, false-positive triage, cold replay rows, optional negative-case fixtures, the public trace builder, and the source-module manifest. A result can pass only when those validators agree, the secret-exclusion scan has zero blocking hits, the public trace status is `pass`, all positive validators are `pass`, and the exported bundle's manifest digests match copied source bodies.\n\nTwo of those validators do work the others do not. The executable regression witness check runs each declared mini-target function in both its unpatched and patched form and compares the computed pre/post outputs against the values the fixture declared, so a witness cannot pass on a label alone. The verifier result record check recomputes each `pass` or `false_positive` verdict from the joined hypothesis, proof, patch, test, and witness evidence, and also requires the result record-ref filename to match that recomputed verdict, so a row cannot claim a result its own evidence does not support. The other validators are stricter joins: every hypothesis must resolve to a synthetic target, every patch-required hypothesis must carry both an abstract exploitability ref and a metadata-only patch diff, and every patch must pair with a regression test that fails before the patch and passes after it. A patch without a paired test, or a false positive promoted to a finding, blocks the result.\n\nThe runtime deliberately keeps two evidence modes separate. The first-wave fixture includes the negative-case authority, so it must observe the expected overclaim failures such as live target material, real CVE exploitation, weaponized payload export, exploit steps, patch-without-test claims, and benchmark claims claims. The exported bundle is the public runtime example, so its `expected_negative_cases` can be empty while it still proves the body floor, public trace, digest checks, regression witnesses, and scope limit. Both modes write metadata-only result records; copied bodies stay behind the `source_module_manifest.json` refs and hashes.\n\n###### Named Proof Consumers\n- `tests/test_agentic_vulnerability_discovery_patch_proof_replay.py::test_agentic_vulnerability_patch_proof_replay_observes_negative_cases` consumes the first-wave fixture and checks the expected counts, negative-case coverage, public trace status, body-import boundary, secret-exclusion scan, and scope limit booleans.\n- `tests/test_agentic_vulnerability_discovery_patch_proof_replay.py::test_agentic_vulnerability_exported_bundle_validates_runtime_shape` consumes the exported bundle and checks runtime mode, target/hypothesis/patch counts, executable regression witnesses, source-module manifest status, copied-body count, metadata-only import summary, secret-exclusion status, and public trace span count.\n- The rejection tests in the same file are the scope limit in executable form: they mutate false-positive promotion, remove regression tests, tamper executable witnesses, omit exploitability proof, cross-wire verifier result records, and alter source-module digests, then require `blocked` results and specific error codes instead of allowing patch-proof language.\n\n###### What It Admits\n\nThe validator admits only metadata-only patch-proof evidence where trace refs, abstract proof refs, patch diff refs, regression tests, verifier result records, sandbox verdicts, and cold replay line up.\n\nThe result record fields to inspect first are `target_count`, `issue_hypothesis_count`, `patch_diff_count`, `regression_test_count`, `verifier_receipt_count`, `observed_negative_cases`, `secret_exclusion_scan`, `public_agent_execution_trace`, `body_import_verification`, and `authority_ceiling`.\n\n###### Prior Art Grounding\n\nThis component is grounded in the recent line of agentic software-engineering and security-evaluation work that treats code repair as an executable, test-backed claim rather than a prose claim. [SWE-bench](https://arxiv.org/abs/2310.06770) popularized repository issue resolution as an LLM task with real codebases and test-based patch evaluation, while [SWE-agent](https://arxiv.org/abs/2405.15793) made the agent-computer interface itself part of the repair system. Security benchmarks such as [CyberSecEval 2](https://arxiv.org/abs/2404.13161) and [SecCodePLT](https://arxiv.org/abs/2410.11096) motivate separating secure-code or vulnerability capability claims from uninspected generated patches.\n\nMicrocosm borrows the accountability pattern: issue hypotheses, trace evidence, patch diffs, regression tests, verifier result records, and negative cases must line up before patch-proof language is allowed. It does not import live targets, CVE exploitation authority, weaponized payloads, or benchmark performance claims.\n\n###### Source-Backed Doctrine Binding\n- Component: `src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py`\n- Bundle: `core/paper_module_capsules.json#paper_module.agentic_vulnerability_discovery_patch_proof_replay`\n- Mechanism: `core/mechanism_sources.json#mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay`\n- Standard: `standards/std_microcosm_agentic_vulnerability_discovery_patch_proof_replay.json`\n- Evidence class: `core/organ_evidence_classes.json::agentic_vulnerability_discovery_patch_proof_replay` records `algorithmic_projection` at rank 3.\n- Source-module manifest: `examples/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle/source_module_manifest.json` declares nine copied source/control/standard/tool bodies, including `strict_json_source_body_import`.\n- Runtime result record: `receipts/runtime_shell/demo_project/organs/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle_validation_result.json`\n- Sign-off result records: `receipts/first_wave/agentic_vulnerability_discovery_patch_proof_replay/*` and result records/sign-off/first_wave/agentic_vulnerability_discovery_patch_proof_replay_fixture_acceptance.json\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[5:paper_module.agentic_vulnerability_discovery_patch_proof_replay]` is the JSON authority row. A diagram view is generated for this module; the Atlas card view is a staged exercise pending the component-atlas lane.\n- Mechanism route: `core/mechanism_sources.json::mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay` binds the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and runtime code locus.\n- Runtime route: `src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py` owns `run`, `run_patch_proof_bundle`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `_build_result`, `_freshness_basis`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_NAME`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n- Exported-bundle route: `examples/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle` is the public runtime bundle for the synthetic patch-proof replay. Open `source_module_manifest.json` before trusting copied-body counts, then inspect the runtime validation result record.\n- Focused-test route: `tests/test_agentic_vulnerability_discovery_patch_proof_replay.py` verifies negative cases, public-relative metadata-only result records, exported-bundle runtime shape, exact copied source modules, digest mismatch rejection, command-card result record reuse, and public trace construction.\n\n###### Cold-Agent Use\n\nOpen the source-module manifest first, then the runtime result record, then the component source. The useful claim is not that a real vulnerability was discovered or fixed.\n\nThe useful claim is that Microcosm can force an agentic security story to expose synthetic target refs, issue hypotheses, trace evidence, abstract exploitability refs, patch diffs, regression tests, verifier result records, sandbox verdicts, false-positive triage, cold replay, public trace spans, secret-exclusion scan, negative-case result records, and scope limits before patch-proof language is allowed.\n\nRe-entry condition: after the sibling `organ_atlas.json` lane releases, bind this paper-module bundle, mechanism ref, and code locus into the atlas row and rerun `python -m microcosm_core.doctrine_lattice --check`.\n\n###### Negative Cases\n\nThe contract rejects `live_target_material`, `real_cve_exploitation`, `weaponized_payload_export`, `account_secret_material`, `network_exfiltration`, `exploit_instruction_steps`, `patch_without_tests`, and `benchmark_score_claim`. These are falsification fixtures, not product evidence.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.agentic_vulnerability_discovery_patch_proof_replay \\\n  run-patch-proof-bundle \\\n  --input examples/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle \\\n  --out /tmp/agentic_vulnerability_patch_proof_bundle_receipt \\\n  --card > /tmp/agentic_vulnerability_patch_proof_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_agentic_vulnerability_discovery_patch_proof_replay.py\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py \\\n  --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThe result records do not authorize live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, external model access, source-file changes, benchmark security scores, launch, or any whole-system security claim.\n\n###### Scope limit\n\nThis module may claim public fixture evidence that synthetic target refs, issue hypotheses, trace-evidence refs, abstract exploitability refs, patch diff refs, regression-test refs, verifier result records, sandbox verdicts, false-positive triage rows, cold replay rows, public trace spans, source-module digest checks, secret-exclusion scans, negative-case labels, and metadata-only validation result records are checked by the listed runtime witnesses.\n\nThis module may not claim live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, live provider behavior, benchmark security scores, patch correctness on real repositories, source-file changes, publishing-scope decision, launch-scope decision, product-progress evidence, or whole-system security.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing row is `mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay`. It binds this reader module to `concept.agent_reliability_and_safety_validator_bundle`, `P-1`, `P-2`, `AX-1`, and the upstream `paper_module.mission_transaction_work_spine` dependency. The relation matters because the mechanism is a public safety validator bundle: the paper module can claim that Microcosm checks a source-open, synthetic patch-proof evidence chain, but the lattice ceiling prevents that claim from becoming live vulnerability discovery, exploit proof, benchmark claims, source-file changes, or launch-scope decision.\n\n###### Source-Open Body Floor\n\nThe exported bundle carries nine exact copied source/control/standard/tool bodies under `examples/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle/source_modules/`. The body floor is governed by `source_module_manifest.json`, which records digest-verified copies of:\n- the source pattern ledger\n- the high-novelty reconstruction result record\n- the component projection IR\n- the agent-execution trace runtime and standard\n- the extracted-pattern route-readiness standard\n- the mission-transaction preflight wrapper\n- the mission-transaction landing preflight runtime\n- the strict JSON helper\n\nResult records and cards do not duplicate those bodies. They carry `source_module_manifest_ref`, `source_open_body_import_refs`, `source_open_body_imports`, `body_material_status`, and `body_copied_material_count` so a cold reader can open the real bodies.\n\nThe public result record surface stays free of account secrets, account or browser state, browser state, model-output data bodies, browser UI live access, recipient-send state, weaponized payloads, live targets, exploit steps, and account secret-equivalent material.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 17745,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "An agent that says it found and fixed a security bug is making a claim that is easy to assert and hard to check. The phrase \"found and fixed\" can stand for a real, tested repair, or for a plausible-looking patch that was never run, a false positive promoted to a finding, or a benchmark number with no evidence behind it. This component exists to refuse that ambiguity. It answers one question: before any \"found and fixed\" language is allowed, does a complete evidence chain line up, from a synthetic target through a hypothesis, a trace, an abstract exploitability ref, a patch diff, a regression test, and a verifier result record? The part worth noticing is that two of those checks are not fiel\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module shape is a metadata-only synthetic patch-proof replay, not a live vulnerability discovery or fix-correctness claim. The runtime forces target refs, hypotheses, trace refs, abstract exploitability refs, patch diff refs, regression test refs, verifier result records, sandbox verdicts, false-positive triage, cold replay, public trace spans, source-module digests, negative cases, and scope boundaries to line up before bounded patch-proof language is admitted.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The mechanism is an evidence join, not a scanner. The JSON bundle names the component and mechanism row, and the component resolves every claim through buildresult in src/microcosmcore/components/agenticvulnerabilitydiscoverypatchproofreplay.py. That function loads the projection protocol and vulnerability policy, then validates targets, issue hypotheses, trace evidence, exploitability refs, patch diffs, regression tests, executable regression witnesses, verifier result records, sandbox verdicts, false-positive triage, cold replay rows, optional negative-case fixtures, the public trace builder, and the source-module manifest. A result can pass only when those validators agree, the secret-ex\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "tests/testagenticvulnerabilitydiscoverypatchproofreplay.py::testagenticvulnerabilitypatchproofreplayobservesnegativecases consumes the first-wave fixture and checks the expected counts, negative-case coverage, public trace status, body-import boundary, secret-exclusion scan, and scope limit booleans. tests/testagenticvulnerabilitydiscoverypatchproofreplay.py::testagenticvulnerabilityexportedbundlevalidatesruntime_shape consumes the exported bundle and checks runtime mode, target/hypothesis/patch counts, executable regression witnesses, source-module manifest status, copied-body count, metadata-only import summary, secret-exclusion status, and public trace span count. The rejection tests in\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The governing row is mechanism.agenticvulnerabilitydiscoverypatchproofreplay.validatespublicagenticvulnerabilitypatchproof_replay. It binds this reader module to concept.agentreliabilityandsafetyvalidator_bundle, P-1, P-2, AX-1, and the upstream papermodule.missiontransactionworkspine dependency. The relation matters because the mechanism is a public safety validator bundle: the paper module can claim that Microcosm checks a source-open, synthetic patch-proof evidence chain, but the lattice ceiling prevents that claim from becoming live vulnerability discovery, exploit proof, benchmark claims, source-file changes, or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "cold-reader-path",
       "title": "Cold-Reader Path",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "what-it-admits",
       "title": "What It Admits",
       "level": 2,
       "excerpt": "The validator admits only metadata-only patch-proof evidence where trace refs, abstract proof refs, patch diff refs, regression tests, verifier result records, sandbox verdicts, and cold replay line up. The result record fields to inspect first are target_count, issuehypothesiscount, patchdiffcount, regressiontestcount, verifierreceiptcount, observednegativecases, secretexclusionscan, publicagentexecutiontrace, bodyimport_verification, and scope_limit.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in the recent line of agentic software-engineering and security-evaluation work that treats code repair as an executable, test-backed claim rather than a prose claim. SWE-bench popularized repository issue resolution as an LLM task with real codebases and test-based patch evaluation, while SWE-agent made the agent-computer interface itself part of the repair system. Security benchmarks such as CyberSecEval 2 and SecCodePLT motivate separating secure-code or vulnerability capability claims from uninspected generated patches. Microcosm borrows the accountability pattern: issue hypotheses, trace evidence, patch diffs, regression tests, verifier result records, and ne\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The exported bundle carries nine exact copied source/control/standard/tool bodies under examples/agenticvulnerabilitydiscoverypatchproofreplay/exportedpatchproofbundle/source_modules/. The body floor is governed by sourcemodulemanifest.json, which records digest-verified copies of: the source pattern ledger the high-novelty reconstruction result record the component projection IR the agent-execution trace runtime and standard the extracted-pattern route-readiness standard the mission-transaction preflight wrapper the mission-transaction landing preflight runtime the strict JSON helper Result records and cards do not duplicate those bodies. They carry sourcemodulemanifestref, sourceopenbodyi\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-doctrine-binding",
       "title": "Source-Backed Doctrine Binding",
       "level": 2,
       "excerpt": "Component: src/microcosmcore/components/agenticvulnerabilitydiscoverypatchproofreplay.py Bundle: core/papermodulecapsules.json#papermodule.agenticvulnerabilitydiscoverypatchproofreplay Mechanism: core/mechanismsources.json#mechanism.agenticvulnerabilitydiscoverypatchproofreplay.validatespublicagenticvulnerabilitypatchproofreplay Standard: standards/stdmicrocosmagenticvulnerabilitydiscoverypatchproof_replay.json Evidence class: core/organevidenceclasses.json::agenticvulnerabilitydiscoverypatchproof_replay records algorithmic_projection at rank 3. Source-module manifest: examples/agenticvulnerabilitydiscoverypatchproofreplay/exportedpatchproofbundle/sourcemodulemanifest.json declares nine cop\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: core/papermodulecapsules.json::papermodules[5:papermodule.agenticvulnerabilitydiscoverypatchproof_replay] is the JSON authority row. A diagram view is generated for this module; the Atlas card view is a staged exercise pending the component-atlas lane. Mechanism route: core/mechanismsources.json::mechanism.agenticvulnerabilitydiscoverypatchproofreplay.validatespublicagenticvulnerabilitypatchproofreplay binds the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and runtime code locus. Runtime route: src/microcosmcore/components/agenticvulnerabilitydiscoverypatchproofreplay.py owns run, runpatchproofbundle, sou\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "cold-agent-use",
       "title": "Cold-Agent Use",
       "level": 2,
       "excerpt": "Open the source-module manifest first, then the runtime result record, then the component source. The useful claim is not that a real vulnerability was discovered or fixed. The useful claim is that Microcosm can force an agentic security story to expose synthetic target refs, issue hypotheses, trace evidence, abstract exploitability refs, patch diffs, regression tests, verifier result records, sandbox verdicts, false-positive triage, cold replay, public trace spans, secret-exclusion scan, negative-case result records, and scope limits before patch-proof language is allowed. Re-entry condition: after the sibling organ_atlas.json lane releases, bind this paper-module bundle, mechanism ref, an\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The contract rejects livetargetmaterial, realcveexploitation, weaponizedpayloadexport, accountsecretmaterial, network_exfiltration, exploitinstructionsteps, patchwithouttests, and benchmarkscoreclaim. These are falsification fixtures, not product evidence.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The result records do not authorize live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, external model access, source-file changes, benchmark security scores, launch, or any whole-system security claim.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that synthetic target refs, issue hypotheses, trace-evidence refs, abstract exploitability refs, patch diff refs, regression-test refs, verifier result records, sandbox verdicts, false-positive triage rows, cold replay rows, public trace spans, source-module digest checks, secret-exclusion scans, negative-case labels, and metadata-only validation result records are checked by the listed runtime witnesses. This module may not claim live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, live provider behavior, benchmark security scores, patch correctnes\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture validator from the repo root and write its result record outside the repo working tree: Then run the exported bundle validator: The focused regression test and corpus projection checks are:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.agentic_vulnerability_discovery_patch_proof_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"patch-proof replay runtime\"] fixture[\"first-wave fixture\"] bundle[\"exported patch-proof bundle\"] targets[\"synthetic target refs\"] hypotheses[\"issue hypotheses\"] traces[\"trace evidence refs\"] proofs[\"abstract exploitability refs\"] patches[\"patch diff refs\"] regressions[\"regression test refs\"] executable[\"executable regression witnesses\"] verifiers[\"verifier result records\"] sandbox[\"sandbox verdicts\"] negative[\"negative-case fixtures\"] secret_scan[\"secret-exclusion scan\"] replay[\"cold replay rows\"] public_trace[\"public trace spans\"] source_modules[\"source-module body floor\"] result records[\"metadata-only result records\"] consumer[\"focused proof-consumer tests\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle fixture --> targets bundle --> targets targets --> hypotheses hypotheses --> traces traces --> proofs proofs --> patches patches --> regressions regressions --> executable executable --> verifiers verifiers --> sandbox negative --> result records secret_scan --> result records sandbox --> replay replay --> public_trace source_modules --> secret_scan source_modules --> public_trace public_trace --> result records result records --> consumer result records --> ceiling",
       "source_hash": "sha256:b3838dc2fa8bbc7e833961f555039129a9b60cd4878c714e07c1b63e8da81e03",
       "html_url": "docs/paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay-diagram-1",
       "html_anchor": "paper-module-agentic-vulnerability-discovery-patch-proof-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "SWE-bench",
       "url": "https://arxiv.org/abs/2310.06770",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SWE-agent",
       "url": "https://arxiv.org/abs/2405.15793",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "CyberSecEval 2",
       "url": "https://arxiv.org/abs/2404.13161",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SecCodePLT",
       "url": "https://arxiv.org/abs/2410.11096",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agentic_vulnerability_discovery_patch_proof_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agentic Vulnerability Discovery Patch Proof Replay",
         "url": "components.html#component-agentic_vulnerability_discovery_patch_proof_replay"
        },
        {
         "id": "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public agentic vulnerability patch proof replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 19495
    },
    {
     "id": "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "title": "Materials Chemistry Closed-Loop Lab-Safety Replay",
     "relative_href": "docs/paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay",
     "read_href": "docs/paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The materials chemistry lab-safety replay validates metadata-only simulator-only closed-loop rows before any materials-lab or discovery language is allowed.",
     "summary": "Materials Chemistry Closed-Loop Lab-Safety Replay is the public lab-safety claim boundary for Microcosm. It checks candidate material refs, safety-screen refs, simulator-only assay refs, active-learning decisions, failure taxonomy refs, cold replay refs, source bundle hashes, Lab/Evolve replay graph evidence, copied source/control/result record/standard bodies, metadata-only result record policy, and eight lab-safety overclaim negative cases while keeping wetlab protocols, hazardous synthesis steps, reagent quantities, controlled or bioactive targets, live lab account secrets, robot commands, private lab notebook bodies, live assay data, discovery claims, benchmark claims, model-output data, source notes, and launch-scope decision out of result records.",
     "authority_ceiling": "Copied public Lab/Evolve source/control/result record/standard bodies, metadata-only simulator-only fixture result records, runtime bundle result records, and artifact safety/refusal validation only; no wetlab execution, hazardous synthesis guidance, reagent quantity, controlled or bioactive target, live assay, robot command, private lab notebook, external model access, discovery claim, benchmark claims, launch-scope decision, publishing-scope decision, or product-progress evidence.",
     "abstract": "The materials chemistry lab-safety replay validates metadata-only simulator-only closed-loop rows before any materials-lab or discovery language is allowed.",
     "teleology": {
      "section_id": "",
      "text": "The materials chemistry lab-safety replay validates metadata-only simulator-only closed-loop rows before any materials-lab or discovery language is allowed.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\n\"Closed-loop materials lab\" is one of the easier phrases to overclaim. A fixture can look like an autonomous discovery loop while carrying nothing that should be spoken aloud: wetlab steps, reagent quantities, a controlled or bioactive target, robot commands, or a flat assertion that some material was discovered. This component exists to sit in front of that language and answer one question: is a closed-loop-lab-shaped fixture safe and grounded enough to be talked about at all, in a simulator-only frame, before any lab claim is allowed?\n\nIts real name inside the runtime is the `materials_chemistry_artifact_safety_refusal_validator`. The public-promise name \"closed-loop replay\" was deliberately reframed because nothing here executes a wetlab loop or commands a robot. The unusual part is that the component does not trust the fixture's own conclusion. A normal replay would read a declared \"selected candidate\" label and report it. This validator instead recomputes the winner from public numbers, weighting an assay proxy, an active-learning score, and a safety gate, then treats a mismatch between that recomputed pick and the declared label as a failure rather than a footnote. A stale or flattering label cannot pass.\n\nThe second discipline is refusal as a first-class result. Eight categories of dangerous or overclaiming content each have a named forbidden code, and a fixture that smuggles one in is expected to be refused, not quietly accepted. The verdict is computed from public simulator rows, safety fields, source-module manifests, replay-graph status, negative-case coverage, and a sentinel scan, and it stays inside a simulator-only ceiling. It is a safety and refusal check, not a laboratory.\n\n###### Abstract\n\n`materials_chemistry_closed_loop_lab_safety_replay` is a public, simulator-only replay validator for materials-lab language. It does not claim a material discovery, a wetlab protocol, a robot loop, or a benchmark. It checks whether a closed-loop-lab shaped public fixture has enough evidence to be talked about at all: candidate material refs, safety-screen refs, simulator-only assay rows, active-learning decisions, a Lab/Evolve replay graph, source-module manifest digests, negative-case refusals, metadata-only result records, and an explicit scope limit.\n\nThe technical claim is a numeric verdict proof boundary. A passing run must recompute the selected candidate from score-backed fixture rows rather than trusting a declared label. The baseline fixture contains four candidates and selects `mat_polymer_membrane_001` with score `0.917`; perturbation tests prove that stale labels, missing score rows, out-of-range scores, and safety-gate failures block the verdict.\n\n###### Mechanism\n\nThe runtime locus is `src/microcosm_core/organs/materials_chemistry_closed_loop_lab_safety_replay.py`. The relevant entrypoints are `run` for first-wave fixture validation and `run_lab_bundle` for exported-bundle validation. The validator loads a replay policy, candidate rows, experiment DAG rows, simulator assays, active-learning decisions, optional source-module manifests, and eight forbidden negative-case fixtures.\n\nThe sign-off rule is deliberately small:\n1. Positive rows must link candidates, experiments, assays, safety screens, active-learning decisions, failure taxonomy refs, and cold replay refs.\n2. Negative cases must be observed and refused.\n3. Numeric replay must recompute the selected candidate from public numbers.\n4. Source-module imports must verify copied bodies without putting bodies into result records.\n5. The safety verdict must remain inside the simulator-only scope limit.\n\nSource refs\n\nnumeric policy + expected label `replay_policy.json` 4 candidate refs + safety gates `candidate_materials.json` 4 public assay proxy values `simulator_assays.json` 4 active-learning scores `active_learning_decisions.json` 4 copied public body modules `source_module_manifest.json` Accepted `public_safe_simulator_replay_accepted` Blocked `blocked_public_safety_boundary` Diagram source\n\n```text\nflowchart TD policy[\"replay_policy.json numeric policy + expected label\"] candidates[\"candidate_materials.json 4 candidate refs + safety gates\"] assays[\"simulator_assays.json 4 public assay proxy values\"] decisions[\"active_learning_decisions.json 4 active-learning scores\"] numeric[\"numeric replay weighted recompute of the winner\"] labelcheck{\"recomputed pick == declared label? safety gate >= 0.70?\"} negatives[\"negative-case fixtures 8 forbidden lab classes\"] refuse{\"any forbidden MATERIALS_*_FORBIDDEN observed?\"} manifest[\"source_module_manifest.json 4 copied public body modules\"] replay[\"Lab/Evolve replay graph replay cases\"] verdict[\"safety verdict\"] accepted[\"public_safe_simulator_replay_accepted\"] blocked[\"blocked_public_safety_boundary\"] result record[\"metadata-only result records counts, digests, findings\"] ceiling[\"scope limit no wetlab / no discovery / no launch\"] policy --> numeric candidates --> numeric assays --> numeric decisions --> numeric numeric --> labelcheck labelcheck -->|stale label or gate fail| blocked labelcheck -->|match| verdict negatives --> refuse refuse -->|yes| blocked refuse -->|no| verdict manifest --> replay replay --> verdict verdict --> accepted accepted --> result record blocked --> result record result record --> ceiling\n```\n\n###### Numeric Assay And Verdict Evidence\n\nThe replay policy declares:\n- selection rule: `max_weighted_public_assay_active_learning_and_safety_gate_score`\n- minimum safety gate: `0.70`\n- expected selected candidate: `mat_polymer_membrane_001`\n- weighted score: `0.45 * public_assay_proxy_value + 0.35 * public_active_learning_score + 0.20 * public_safety_gate_score`\n\nThe source fixture binds four score-backed rows:\n\nCandidate Safety gate Assay proxy Active-learning Weighted score Decision / action `mat_polymer_membrane_001` `0.94` `0.92` `0.90` `0.917` `decision_membrane_001` / `simulate_assay` `mat_solid_electrolyte_002` `0.91` `0.84` `0.81` `0.8445` `decision_electrolyte_002` / `update_surrogate_model` `mat_catalyst_support_003` `0.85` `0.78` `0.74` `0.780` `decision_support_003` / `choose_next_simulation` `mat_sorbent_surface_004` `0.88` `0.70` `0.66` `0.722` `decision_sorbent_004` / `screen_candidate`\n\nThe focused regression `test_materials_chemistry_numeric_replay_recomputes_verdict_from_fixture_numbers` proves the pass case: status `pass`, `verified_numeric_row_count == 4`, selected candidate `mat_polymer_membrane_001`, selected decision `decision_membrane_001`, selected next action `simulate_assay`, score `0.917`, realness rung `R3`, and verdict basis `recomputed_from_public_assay_active_learning_and_safety_gate_fixture_numbers`.\n\nThe verifier does not use expected labels for selection. Expected labels are checked only after the selected row is recomputed from candidate, assay, and decision content.\n\n###### Test Matrix\n\nClass Evidence Expected verdict Real-good fixture Baseline first-wave fixture with four candidate, assay, and decision rows `public_safe_simulator_replay_accepted`; numeric replay `pass`; selected candidate `mat_polymer_membrane_001`; score `0.917` Real-good source body floor Exported bundle manifest with four copied modules and zero manifest findings `source_module_manifest_status: pass`; `verified_module_count: 4`; result records remain metadata-only; current checked-in bundle still needs refreshed numeric rows before it is a full exported-bundle pass Real-bad lab safety Controlled/bioactive targets, hazardous synthesis flags, mismatched safety refs, robot command, account secrets, private notebooks, or discovery claims `blocked_public_safety_boundary` with the relevant `MATERIALS_*_FORBIDDEN` or positive-linkage finding Real-bad numeric missingness Score-backed rows removed while numeric policy is active `MATERIALS_NUMERIC_REPLAY_POLICY_REQUIRES_SCORE_BACKED_ROWS`; `verified_numeric_row_count: 0` Real-bad numeric required Numeric policy removed and score rows absent `MATERIALS_NUMERIC_REPLAY_REQUIRED`; realness rung `blocked` Real-bad stale label Policy declares `mat_catalyst_support_003` while recomputation selects `mat_polymer_membrane_001` `MATERIALS_NUMERIC_REPLAY_EXPECTED_LABEL_STALE` Real-bad score range Safety, assay, or active-learning score outside `[0, 1]` `MATERIALS_NUMERIC_REPLAY_SCORE_OUT_OF_RANGE` Perturbation, low safety gate Membrane safety gate lowered to `0.52` Computed pick moves to `mat_solid_electrolyte_002`, verdict blocks, and findings include stale label plus `MATERIALS_NUMERIC_REPLAY_SAFETY_GATE_FAILED` Perturbation, moved valid pick Sorbent raised to safety `0.93`, assay `0.98`, active learning `0.98`, and policy expectation updated Numeric replay passes, selected candidate `mat_sorbent_surface_004`, selected action `screen_candidate`, score `0.970` Perturbation, moved pick without expectation update Exported bundle recomputes sorbent as the winner while policy still expects membrane Source manifest stays `pass`, but numeric replay blocks with `MATERIALS_NUMERIC_REPLAY_EXPECTED_LABEL_STALE`\n\nThese cases are source/test-backed by `tests/test_materials_chemistry_closed_loop_lab_safety_replay.py`. Fresh local first-wave result record output is the authority for current numeric replay; older archived first-wave result records and the checked-in exported bundle predate the numeric replay rows and should not be read as the numeric proof. The exported bundle still needs refreshed numeric rows before it is a full exported-bundle pass.\n\n###### Evidence Routes\n- JSON bundle: `core/paper_module_capsules.json::paper_module.materials_chemistry_closed_loop_lab_safety_replay`\n- Generated JSON instance: `paper_modules/materials_chemistry_closed_loop_lab_safety_replay.json`\n- Mechanism source: `core/mechanism_sources.json::mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay`\n- Runtime: `src/microcosm_core/organs/materials_chemistry_closed_loop_lab_safety_replay.py`\n- Domain standard: `standards/std_microcosm_materials_chemistry_closed_loop_lab_safety_replay.json`\n- Paper-module standard: `standards/std_microcosm_paper_module.json`\n- Fixture input: `fixtures/first_wave/materials_chemistry_closed_loop_lab_safety_replay/input`\n- Exported bundle: `examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle`\n- Focused tests: `tests/test_materials_chemistry_closed_loop_lab_safety_replay.py`\n\n###### Prior Art Grounding\n\nThis replay exercises a closed-loop materials and chemistry lab controller with a safety gate over synthetic experiments. It is grounded in the [self-driving laboratory](https://en.wikipedia.org/wiki/Self-driving_laboratory) literature, where a propose-run-measure loop is paired with safety interlocks that can refuse an unsafe experiment. Microcosm borrows the loop-plus-safety-gate shape on a simulator; the result is metadata-only simulator evidence, not a real laboratory controller, chemical-safety authority, or launch.\n\n###### Validation Result record Path\n\nRun the current runtime proof from the Microcosm root:\n\nInspect the exported source-body bundle. Until the exported fixture is refreshed with score-backed numeric rows, this command may return a blocked numeric verdict while still proving the manifest/body-floor boundary:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.materials_chemistry_closed_loop_lab_safety_replay run-lab-bundle --input examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle --out /tmp/microcosm_materials_chemistry_lab_safety_bundle\n```\n\nRun the focused regression suite:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-pytest tests/test_materials_chemistry_closed_loop_lab_safety_replay.py -q\n```\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThis lane intentionally does not run `scripts/build_doctrine_projection.py --write`; generated projections, atlas cards, and shared bundle surfaces belong to their owner lanes.\n\n###### Scope boundary\n\n###### Limitations\n\nThis module is a replay validator, not a laboratory. It does not synthesize materials, provide wetlab instructions, control robots, rank real compounds, validate live assay data, authorize external model access, or establish a discovery benchmark. Fixture numbers are public replay coordinates for a safety-gated contract; they are not experimental measurements.\n\nThe validator can prove local consistency across fixture rows, exported source-module manifests, replay graph records, negative-case checks, sentinel scans, numeric recomputation, and metadata-only result records. It cannot prove chemical safety, regulatory suitability, lab readiness, deployment readiness, public-site freshness, publishing-scope decision, or launch-scope decision.\n\n###### Scope limit\n\nThis module may claim that Microcosm has a public, source-faithful, simulator-only replay contract that checks candidate refs, safety-screen refs, simulator-only assay rows, active-learning decisions, numeric replay, failure-taxonomy refs, cold replay refs, replay cases, source bundle hashes, copied source-module digests, negative-case result records, metadata-only result record policy, and scope limits.\n\nIt must not claim wetlab operation, material synthesis, robot control, hazardous synthesis guidance, reagent quantities, controlled or bioactive targeting, live assay data, private lab notebook export, live account secrets, external model service, material discovery, benchmark performance, safety certification, public sharing, hosting, launch-scope decision, source-file changes, or product-progress authority.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Copied public Lab/Evolve source/control/result record/standard bodies, metadata-only simulator-only fixture result records, runtime bundle result records, and artifact safety/refusal validation only; no wetlab execution, hazardous synthesis guidance, reagent quantity, controlled or bioactive target, live assay, robot command, private lab notebook, external model access, discovery claim, benchmark claims, launch-scope decision, publishing-scope decision, or product-progress evidence.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe exported bundle at `examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle` contains a `source_module_manifest.json` with four copied bodies:\n\nModule id Material class Role `materials_lab_evolve_failure_replay_specimen_body_import` `public_macro_tool_body` deterministic replay graph construction, failure classification, restart-point selection, source-bundle hashing, and result record boundaries `materials_lab_evolve_replay_graph_body_import` `public_macro_control_plane_body` replay graph body, restart points, source bundles, global teachings, and public claim boundary `materials_lab_evolve_receipt_body_import` `public_macro_receipt_body` replay result record body proving the source evidence shape without moving private material into result records `laboratory_standard_body_import` `public_standard_body` public laboratory standard floor for the replay\n\nThe bundle validator checks `module_count: 4`, `verified_module_count: 4`, `source_module_manifest_status: pass`, metadata-only result record policy, and zero source module findings. The current checked-in exported bundle is still a source-body floor, not the final numeric exported-bundle proof: `run_lab_bundle` requires refreshed score-backed numeric rows before it can pass as a full exported-bundle verdict. Focused tests inject those rows to prove the exported-bundle numeric path. The remaining bundle and result record refresh is tracked as outstanding work.\n\nThe validator also records the blocked source-open boundary for `codex/doctrine/paper_modules/lab_oracle_evolve_pipeline.md`: that source paper module cannot be imported as an exact body while raw operator-anchor language remains in scope.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 16314,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "\"Closed-loop materials lab\" is one of the easier phrases to overclaim. A fixture can look like an autonomous discovery loop while carrying nothing that should be spoken aloud: wetlab steps, reagent quantities, a controlled or bioactive target, robot commands, or a flat assertion that some material was discovered. This component exists to sit in front of that language and answer one question: is a closed-loop-lab-shaped fixture safe and grounded enough to be talked about at all, in a simulator-only frame, before any lab claim is allowed? Its real name inside the runtime is the materialschemistryartifactsafetyrefusal_validator. The public-promise name \"closed-loop replay\" was deliberately ref\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "materialschemistryclosedlooplabsafetyreplay is a public, simulator-only replay validator for materials-lab language. It does not claim a material discovery, a wetlab protocol, a robot loop, or a benchmark. It checks whether a closed-loop-lab shaped public fixture has enough evidence to be talked about at all: candidate material refs, safety-screen refs, simulator-only assay rows, active-learning decisions, a Lab/Evolve replay graph, source-module manifest digests, negative-case refusals, metadata-only result records, and an explicit scope limit. The technical claim is a numeric verdict proof boundary. A passing run must recompute the selected candidate from score-backed fixture rows rather\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism",
       "title": "Mechanism",
       "level": 2,
       "excerpt": "The runtime locus is src/microcosmcore/components/materialschemistryclosedlooplabsafety_replay.py. The relevant entrypoints are run for first-wave fixture validation and runlabbundle for exported-bundle validation. The validator loads a replay policy, candidate rows, experiment DAG rows, simulator assays, active-learning decisions, optional source-module manifests, and eight forbidden negative-case fixtures. The sign-off rule is deliberately small: Positive rows must link candidates, experiments, assays, safety screens, active-learning decisions, failure taxonomy refs, and cold replay refs. Negative cases must be observed and refused. Numeric replay must recompute the selected candidate fro\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "numeric-assay-and-verdict-evidence",
       "title": "Numeric Assay And Verdict Evidence",
       "level": 2,
       "excerpt": "The replay policy declares: selection rule: maxweightedpublicassayactivelearningandsafetygate_score minimum safety gate: 0.70 expected selected candidate: matpolymermembrane_001 weighted score: 0.45 publicassayproxyvalue + 0.35 publicactivelearningscore + 0.20 publicsafetygatescore The source fixture binds four score-backed rows: The focused regression testmaterialschemistrynumericreplayrecomputesverdictfromfixture_numbers proves the pass case: status pass, verifiednumericrow_count == 4, selected candidate matpolymermembrane_001, selected decision decisionmembrane001, selected next action simulate_assay, score 0.917, realness rung R3, and verdict basis recomputedfrompublicassayactivelearnin\u2026",
       "block_kinds": [
        "list",
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "test-matrix",
       "title": "Test Matrix",
       "level": 2,
       "excerpt": "These cases are source/test-backed by tests/testmaterialschemistryclosedlooplabsafety_replay.py. Fresh local first-wave result record output is the authority for current numeric replay; older archived first-wave result records and the checked-in exported bundle predate the numeric replay rows and should not be read as the numeric proof. The exported bundle still needs refreshed numeric rows before it is a full exported-bundle pass.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The exported bundle at examples/materialschemistryclosedlooplabsafetyreplay/exportedmaterialslabsafetybundle contains a sourcemodulemanifest.json with four copied bodies: The bundle validator checks modulecount: 4, verifiedmodule_count: 4, sourcemodulemanifest_status: pass, metadata-only result record policy, and zero source module findings. The current checked-in exported bundle is still a source-body floor, not the final numeric exported-bundle proof: runlabbundle requires refreshed score-backed numeric rows before it can pass as a full exported-bundle verdict. Focused tests inject those rows to prove the exported-bundle numeric path. The remaining bundle and result record refresh is trac\u2026",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the current runtime proof from the Microcosm root: Inspect the exported source-body bundle. Until the exported fixture is refreshed with score-backed numeric rows, this command may return a blocked numeric verdict while still proving the manifest/body-floor boundary: Run the focused regression suite: projections: This lane intentionally does not run `scripts/builddoctrineprojection.py --write`; generated projections, atlas cards, and shared bundle surfaces belong to their owner lanes.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-routes",
       "title": "Evidence Routes",
       "level": 2,
       "excerpt": "papermodules/materialschemistryclosedlooplabsafety_replay.md JSON bundle: core/papermodulecapsules.json::papermodule.materialschemistryclosedlooplabsafety_replay Generated JSON instance: papermodules/materialschemistryclosedlooplabsafety_replay.json Mechanism source: core/mechanismsources.json::mechanism.materialschemistryclosedlooplabsafetyreplay.validatespublicmaterialslabsafetyreplay Runtime: src/microcosmcore/components/materialschemistryclosedlooplabsafety_replay.py Domain standard: standards/stdmicrocosmmaterialschemistryclosedlooplabsafetyreplay.json Paper-module standard: standards/stdmicrocosmpaper_module.json Fixture input: fixtures/firstwave/materialschemistryclosedlooplabsafety_\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "This module is a replay validator, not a laboratory. It does not synthesize materials, provide wetlab instructions, control robots, rank real compounds, validate live assay data, authorize external model access, or establish a discovery benchmark. Fixture numbers are public replay coordinates for a safety-gated contract; they are not experimental measurements. The validator can prove local consistency across fixture rows, exported source-module manifests, replay graph records, negative-case checks, sentinel scans, numeric recomputation, and metadata-only result records. It cannot prove chemical safety, regulatory suitability, lab readiness, deployment readiness, public-site freshness, publi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim that Microcosm has a public, source-faithful, simulator-only replay contract that checks candidate refs, safety-screen refs, simulator-only assay rows, active-learning decisions, numeric replay, failure-taxonomy refs, cold replay refs, replay cases, source bundle hashes, copied source-module digests, negative-case result records, metadata-only result record policy, and scope limits. It must not claim wetlab operation, material synthesis, robot control, hazardous synthesis guidance, reagent quantities, controlled or bioactive targeting, live assay data, private lab notebook export, live account secrets, external model service, material discovery, benchmark performance,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page. It may not claim more than its bundle scope limit allows: Copied public Lab/Evolve source/control/result record/standard bodies, metadata-only simulator-only fixture result records, runtime bundle result records, and artifact safety/refusal validation only; no wetlab execution, hazardous synthesis guidance, reagent quantity, controlled or bioactive target, live assay, robot command, private lab notebook, external model access, discovery claim, benchmark claims, launch-\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This replay exercises a closed-loop materials and chemistry lab controller with a safety gate over synthetic experiments. It is grounded in the self-driving laboratory literature, where a propose-run-measure loop is paired with safety interlocks that can refuse an unsafe experiment. Microcosm borrows the loop-plus-safety-gate shape on a simulator; the result is metadata-only simulator evidence, not a real laboratory controller, chemical-safety authority, or launch.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.materials_chemistry_closed_loop_lab_safety_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD policy[\"replay_policy.json numeric policy + expected label\"] candidates[\"candidate_materials.json 4 candidate refs + safety gates\"] assays[\"simulator_assays.json 4 public assay proxy values\"] decisions[\"active_learning_decisions.json 4 active-learning scores\"] numeric[\"numeric replay weighted recompute of the winner\"] labelcheck{\"recomputed pick == declared label? safety gate >= 0.70?\"} negatives[\"negative-case fixtures 8 forbidden lab classes\"] refuse{\"any forbidden MATERIALS_*_FORBIDDEN observed?\"} manifest[\"source_module_manifest.json 4 copied public body modules\"] replay[\"Lab/Evolve replay graph replay cases\"] verdict[\"safety verdict\"] accepted[\"public_safe_simulator_replay_accepted\"] blocked[\"blocked_public_safety_boundary\"] result record[\"metadata-only result records counts, digests, findings\"] ceiling[\"scope limit no wetlab / no discovery / no launch\"] policy --> numeric candidates --> numeric assays --> numeric decisions --> numeric numeric --> labelcheck labelcheck -->|stale label or gate fail| blocked labelcheck -->|match| verdict negatives --> refuse refuse -->|yes| blocked refuse -->|no| verdict manifest --> replay replay --> verdict verdict --> accepted accepted --> result record blocked --> result record result record --> ceiling",
       "source_hash": "sha256:96d895bbcbf9d091aa63d8d4667f34ecc2b6b30659390c26a2010438277aa967",
       "html_url": "docs/paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay-diagram-1",
       "html_anchor": "paper-module-materials-chemistry-closed-loop-lab-safety-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "self-driving laboratory",
       "url": "https://en.wikipedia.org/wiki/Self-driving_laboratory",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.research_replication_rubric_artifact_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Research Replication Rubric Artifact Replay",
         "url": "paper-modules.html#paper-module-research-replication-rubric-artifact-replay"
        },
        {
         "id": "paper_module.world_model_projection_drift_control_room",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "World-Model Projection Drift Control Room",
         "url": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
        },
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "materials_chemistry_closed_loop_lab_safety_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Materials Chemistry Closed Loop Lab Safety Replay",
         "url": "components.html#component-materials_chemistry_closed_loop_lab_safety_replay"
        },
        {
         "id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public materials lab safety replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.research_and_science_replay_evidence_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "research and science replay validators as reproducibility scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 17930
    },
    {
     "id": "paper_module.certificate_kernel_execution_lab",
     "title": "Certificate Kernel Execution Lab",
     "relative_href": "docs/paper-modules.html#paper-module-certificate-kernel-execution-lab",
     "read_href": "docs/paper-modules.html#paper-module-certificate-kernel-execution-lab",
     "context_href": "docs/rules-and-ideas.html#paper-module-certificate-kernel-execution-lab",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The certificate kernel execution lab validates bounded public Lean/Lake certificate-kernel rows before any proof-adjacent claim is allowed.",
     "summary": "Certificate Kernel Execution Lab is the public proof-adjacent execution boundary for Microcosm. It checks a Lean/Lake certificate-kernel fixture, generated certificate rows, analyzer metadata, transition traces, typed CP2 action translations, bounded Evolve reruns, source-module manifest digests, copied Lean/tool/profile bodies, metadata-only result record policy, and four negative cases while keeping proof bodies, raw tactic scripts, model-output data, oracle ideal answers, oracle-needed premise ids, private source paths, stdout/stderr bodies, account secrets, private Erdos #257 proof bodies, launch-scope decision, benchmark solve-rate, and general theorem-proof authority out of result records.",
     "authority_ceiling": "Public Lean/Lake subprocess witness, copied source proof/tool/profile bodies, first-wave fixture result records, and exported bundle result records only; no general formal-result correctness, private proof body export, external model access, oracle authority, source-file changes, benchmark solve-rate, launch-scope decision, publishing-scope decision, or whole-system proof claim.",
     "abstract": "The certificate kernel execution lab validates bounded public Lean/Lake certificate-kernel rows before any proof-adjacent claim is allowed.",
     "teleology": {
      "section_id": "",
      "text": "The certificate kernel execution lab validates bounded public Lean/Lake certificate-kernel rows before any proof-adjacent claim is allowed.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Abstract\n\n`certificate_kernel_execution_lab` is a source-available public runtime refactor of the source certificate-kernel pattern. It runs a small Lean/Lake certificate kernel, generated certificate rows, analyzer metadata, CP2 typed-action reruns, and bounded Evolve policy reruns without importing private proof bodies. The exported bundle also carries copied source body modules from the real Erdos #257 certificate-kernel system: Lean kernel files, generated certificates, the strike runner, toolchain files, and Lean profile result records. The v2 fixture carries both a simple `NatSumCertificate` row family and a miniature `BoundedOrderCertificate` family so the public lab is no longer only a single-shape arithmetic result record.\n\n###### Purpose\n\nThis component exists to stop a proof-adjacent claim from resting on prose. The single question it answers is narrow: did a small Lean kernel actually compile and accept the declared certificate rows, here and now, with the command, the return code, and the source hashes on record? Everything else in the page is accounting that keeps the answer honest.\n\nThe reduction it relies on is the interesting part. A large class of proof-adjacent facts can be expressed as a finite certificate plus a decidable Boolean checker shaped like `validate : Cert -> Bool`. The agent is never asked to write a human proof. It is asked to supply the right certificate rows, and Lean decides. The fixture carries two checker families, `NatSumCertificate` over arithmetic and `BoundedOrderCertificate` over a bounded modular order, so the sign-off is not a single hard-coded shape. A row counts as accepted only when the runner shells out to `lake env lean` over a temporary copy of the public project and receives exit code 0.\n\nWhat is unusual is the weight placed on rejection. Deliberately wrong rows, a missing certificate, a bad arithmetic certificate, a bad bounded-order certificate, must fail through the same real Lean route, in the residual class the fixture predicted. A bundle that can show only green sign-off is treated as a replay artifact, not as certificate-kernel evidence. The runner also keeps the proof channel separate from the language model channel: a transition that can see oracle structured source record or provider hypothesis text is rejected before execution, so a model's confidence can never be quietly counted as a proof. The result record records command identity, counts, and verdicts, and never the proof bodies themselves.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"certificate-kernel runtime\"] fixture[\"first-wave Lean fixture\"] bundle[\"exported certificate bundle\"] manifest[\"certificate manifest\"] lake[\"Lean/Lake subprocess\"] analyzer[\"Lean analyzer metadata\"] transitions[\"transition trace rows\"] cp2[\"CP2 typed-action reruns\"] evolve[\"bounded Evolve reruns\"] source_modules[\"source-module body floor\"] readout[\"public readout\"] result records[\"metadata-only result records\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle fixture --> manifest bundle --> manifest manifest --> lake lake --> analyzer lake --> transitions transitions --> cp2 cp2 --> evolve source_modules --> analyzer analyzer --> readout evolve --> result records readout --> result records result records --> ceiling\n```\n\nThe module shape is a bounded public certificate-kernel execution witness, not general theorem authority. This page points at the mechanism and runtime component; the runtime validates Lean/Lake command identity, source hashes, generated certificate rows, analyzer metadata, transition traces, CP2 typed-action reruns, bounded Evolve reruns, source-module manifest digests, negative cases, public readout, metadata-only result records, and an scope limit.\n\n###### Mechanism\n\nThe mechanism is a finite-certificate execution reducer. The public entrypoints `run` and `run_certificate_bundle` both call `_build_result`, which loads the certificate lab packet, certificate manifest, Lean project, optional negative fixtures, and optional exported-bundle source manifest before any claim is recorded. The fixture path may run Lean/Lake in a temporary public workspace; the exported-bundle path validates the standalone runtime contract and copied body floor without rerunning private source machinery.\n\nThe reducer first establishes source and result record boundaries. `_input_paths` enumerates the public Lean files and JSON inputs, then `scan_paths` checks them against `core/private_state_forbidden_classes.json`. `_source_module_manifest_result` verifies the exported bundle's nine copied source bodies by material class, target presence, required anchors, and SHA-256 equality; `_source_open_body_import_summary` turns that manifest into the body floor that result records can cite without carrying proof bodies.\n\nExecution evidence is split into three layers. `_build_lake_project` runs `lake build MicrocosmCertificateLab` for the fixture path, while `_analyze_lean_project` records public Lean imports, declarations, line counts, and hashes with `body_in_receipt: false`. `_execute_transitions` then sets certificate transition rows through Lean: accepted rows must return zero, missing or bad certificate rows must fail in the expected residual class, and CP2/Evolve rows must rerun within allowed action and artifact classes instead of mutating arbitrary source.\n\nThe negative cases are part of the proof consumer, not examples around it. `EXPECTED_NEGATIVE_CASES` requires rejection of provider/oracle-visible transition rows, CP2 proof-body leakage, Evolve source-file changes, and non-public source refs in the manifest. The focused regression test `tests/test_certificate_kernel_execution_lab.py` exercises those refusals, digest mismatch handling, cached command-card economy, public readout generation, and the counters that keep oracle/provider/proof-body/source-file changes at zero.\n\n`AUTHORITY_CEILING` and `RECEIPT_TRANSPARENCY_CONTRACT` bind the mechanism back to the lattice relation. The module can claim bounded public fixture and bundle evidence over Lean/Lake command identity, certificate rows, analyzer metadata, transition outcomes, CP2/Evolve reruns, source manifest digests, and metadata-only result records. It cannot claim general theorem authority, provider proof authority, benchmark solve rate, private-body equivalence, source-file changes, launch, or whole-system correctness.\n\n###### Public Surfaces\n- Component runner: `python -m microcosm_core.organs.certificate_kernel_execution_lab run --input fixtures/first_wave/certificate_kernel_execution_lab/input --out receipts/first_wave/certificate_kernel_execution_lab`\n- Exported bundle runner: `python -m microcosm_core.organs.certificate_kernel_execution_lab run-certificate-bundle --input examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle --out receipts/runtime_shell/demo_project/organs/certificate_kernel_execution_lab`\n- CLI: `microcosm certificate-kernel-execution-lab run --input fixtures/first_wave/certificate_kernel_execution_lab/input --out receipts/first_wave/certificate_kernel_execution_lab`\n- Standard: `standards/std_microcosm_certificate_kernel_execution_lab.json`\n- Fixture manifest: `core/fixture_manifests/certificate_kernel_execution_lab.fixture_manifest.json`\n- Source-module manifest: `examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle/source_module_manifest.json`\n\n###### Prior Art Grounding\n\nThis component is grounded in proof-carrying and proof-assistant traditions. Necula's [Proof-Carrying Code](https://www.usenix.org/legacy/publications/library/proceedings/osdi96/full_papers/necula/html/node2.html) anchors the idea that an untrusted producer can supply a certificate checked by a small trusted verifier. The [Lean theorem prover](https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/) continues the small-kernel proof-assistant lineage, and [LeanDojo](https://arxiv.org/abs/2306.15626) shows why reproducible Lean environments, premise access, and programmatic proof-state interaction matter for theorem-proving agents.\n\nMicrocosm borrows the certificate-kernel discipline: certificate rows, Lean/Lake command identity, return codes, source hashes, transition traces, negative rows, and metadata-only result records must be visible before proof-adjacent language is allowed. It does not claim general theorem proof authority.\n\n###### Research Bet\n\nThis component is the certificate-kernel bet in runnable form: a large class of proof-adjacent facts can be reduced to a finite certificate plus a decidable Boolean checker. The public lab keeps the agent task narrow. It does not ask the agent to synthesize a human proof; it asks for the right certificate rows, then lets Lean/Lake decide whether the checker accepts them.\n\nThe toy path uses a Lean certificate kernel shaped like `validate : Cert -> Bool` and accepts only when Lean can compile and run the declared check. The source-body import path carries the real Erdos #257 source floor: Lean kernel files, generated certificate shards, toolchain files, and profile result records from the Mathlib formalization family. The result record may say \"accepted\" only when the public runner shells out to Lean/Lake and receives exit code 0 for the declared bundle.\n\nThe negative floor is part of the proof, not decoration. Deliberately wrong certificate rows must be rejected by the real Lean route, including arithmetic and bounded-order failures. A bundle that cannot show genuine rejection cases is only a replay artifact, not certificate-kernel evidence.\n\n###### Source-Backed Doctrine Binding\n- Component: `src/microcosm_core/organs/certificate_kernel_execution_lab.py`\n- Bundle: `core/paper_module_capsules.json#paper_module.certificate_kernel_execution_lab`\n- Mechanism: `core/mechanism_sources.json#mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution`\n- Standard: `standards/std_microcosm_certificate_kernel_execution_lab.json`\n- Evidence class: `core/organ_evidence_classes.json::certificate_kernel_execution_lab` records `external_subprocess_witness` at rank 4.\n- Source-module manifest: `examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle/source_module_manifest.json` declares nine copied Lean/tool/profile body modules.\n- Runtime result record: `receipts/runtime_shell/demo_project/organs/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle_validation_result.json`\n- Sign-off result records: `receipts/first_wave/certificate_kernel_execution_lab/*` and result records/sign-off/first_wave/certificate_kernel_execution_lab_fixture_acceptance.json\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[7:paper_module.certificate_kernel_execution_lab]` is the JSON authority row. A diagram view is generated for this module; the Atlas card for this module is staged and will appear once the component-atlas lane completes its binding pass.\n- Mechanism route: `core/mechanism_sources.json::mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution` binds the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and runtime code locus.\n- Runtime route: `src/microcosm_core/organs/certificate_kernel_execution_lab.py` owns `run`, `run_certificate_bundle`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `_build_result`, `_receipt_freshness`, `build_public_readout`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_NAME`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n- Exported-bundle route: `examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle` is the public runtime bundle. Open `source_module_manifest.json` before using copied-body counts, then inspect the runtime validation result record and public readout.\n- Focused-test route: `tests/test_certificate_kernel_execution_lab.py` verifies Lean/Lake execution, analyzer output, transition batching, CP2/Evolve counters, public structured bundle shape, digest mismatch rejection, exact copied source modules, cached command-card economy, transparent metadata-only result records, and the cold-reader public readout.\n\n###### Cold-Agent Use\n\nOpen the source-module manifest first, then the runtime result record, then the component source. The useful claim is not that Microcosm proved the Erdos #257 theorem, solved a benchmark, imported private proof bodies, or gained provider/oracle authority. The useful claim is that Microcosm can force a proof-adjacent story to expose Lean/Lake command identity, return codes, source hashes, declaration counts, certificate rows, transition traces, typed CP2 actions, bounded Evolve reruns, source-module body refs, negative-case result records, and authority counters before certificate-kernel language is allowed.\n\nRe-entry condition: after the sibling `organ_atlas.json` lane releases, bind this paper-module bundle, mechanism ref, and code locus into the atlas row and rerun `python -m microcosm_core.doctrine_lattice --check`.\n\n###### Validation Result record Path\n\nRun the first-wave fixture into disposable result records from the Microcosm root:\n\nRun the exported bundle through the same component:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.certificate_kernel_execution_lab run-certificate-bundle --input examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle --out /tmp/microcosm_certificate_kernel_execution_lab_bundle\n```\n\n```text\ncd microcosm-substrate\n../repo-pytest tests/test_certificate_kernel_execution_lab.py -q\ncd ..\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Authority Boundary\n\nThe lab proves only that the declared public Lean fixture compiled and that the declared transition rows were accepted, rejected, or left residual under the local verifier. The copied source body modules are public source-open body material, but result records cite them only by manifest row, hash, class, count, and required anchor. It does not expose proof text through result records, count oracle/provider output as proof authority, change source files, claim benchmark solve-rate, or include launch operations.\n\n###### Result record Shape\n\nResult records are public evidence. The lab exposes structured theorem/declaration names, Lean/Lake command identity, return codes, hashes, declaration counts, accepted/residual counts, negative-case ids, CP2 action classes, Evolve policy artifact ids, source-module manifest status, copied body-material counts, authority counters, scope limit, and scope boundary. It omits only proof, provider, oracle-answer, private-source, and stdout/stderr payload bodies, and records that omission through `secret_exclusion_scan` and `body_in_receipt: false` rather than treating absence as product evidence.\n- Lean/Lake build result record for `MicrocosmCertificateLab`.\n- Analyzer metadata for public Lean files: imports, declarations, hashes, and line counts with proof bodies omitted from JSON result records.\n- Transition rows for valid certificates, missing certificate rows, bad generated certificate rows, and bounded order-certificate rows.\n- CP2 typed-action translations over missing-certificate residuals, with Lean reruns proving downstream effect.\n- Bounded Evolve mutations over certificate row selection policy, accepted only after reruns and no leakage regression.\n- Source-open body import rows for the real source certificate-kernel body floor: exact copied targets under `source_modules/ai_workflow`, source/target hashes, material classes, and provenance anchors, with result record body text forbidden.\n\n###### Scope boundary\n\nThis is a source-available certificate-kernel laboratory with copied source body material, not a private source dump and not general proof authority beyond the declared fixture rows and source-module body refs.\n\n###### Scope limit\n\nThis paper module can claim a certificate-kernel laboratory backed by a structured doctrine row, with a diagram view generated from that row. The Atlas card for this module is staged pending the component-atlas lane's binding pass; that is honest coordination state, not a content gap.\n\nIt cannot claim formal-result correctness, benchmark solve rate, private proof body export, provider or oracle authority, source-file changes, publishing-scope decision, launch-scope decision, or whole-system proof authority. The Atlas card must be completed by the owning component-atlas/bundle route and builder regeneration, not by hand-editing Markdown.\n\n###### Limitations\n\nThis module is a bounded public execution witness, not a theorem-proving authority. Its evidence depends on the shipped public Lean/Lake fixture, generated certificate rows, analyzer metadata, CP2 typed-action reruns, bounded Evolve reruns, and copied source-module manifest. A green run proves that this certificate-kernel bundle follows those constraints; it does not establish the Erdos #257 theorem, Mathlib coverage, benchmark solve rate, or correctness of private source proof bodies.\n\nThe source-open body floor is intentionally narrow. The exported bundle carries nine copied Lean/tool/profile bodies under `source_modules/`, and the result records may cite only refs, hashes, material classes, counts, required anchors, and verdicts. Proof bodies, raw tactic scripts, model-output data, oracle answers, private source paths, stdout/stderr bodies, account secrets, and private source-root material remain outside the public result record surface.\n\nThe focused regression covers the declared fixture and exported bundle shape. It checks Lean/Lake execution boundaries, analyzer output, transition batching, CP2/Evolve counters, digest mismatch rejection, exact copied source modules, cached command-card economy, transparent metadata-only result records, and public readout shape. It excludes future certificate families, generated Atlas/site public sharing, source-file changes, or public launch without the owning builder and launch lanes.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe bundle places this module under `concept.formal_math_and_proof_witness_bundle`: proof-adjacent public claims must be reduced to explicit witness artifacts before a reader is allowed to treat them as evidence. In this module, the witness artifacts are the public Lean/Lake subprocess result, generated certificate rows, analyzer metadata, transition traces, CP2/Evolve rerun evidence, copied source-module manifest, and metadata-only result records. Markdown explains that lattice; it does not replace the JSON bundle or the validator result records.\n\n`P-3` is the governing principle edge for the module's claim discipline. The runtime does not ask whether a proof story is persuasive; it requires a finite certificate family, a named verifier route, visible command identity, explicit return codes, public-relative refs, and result record transparency. That is why the mechanism row binds `run`, `run_certificate_bundle`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `_build_result`, `_receipt_freshness`, and `build_public_readout` as the code locus instead of treating the paper module as independent proof evidence.\n\n`AX-2` is the hard boundary: public proof language must remain inside the declared certificate-kernel execution evidence. The standard's scope limit keeps `formal_proof_authority` limited to bounded public fixture rows and keeps external model access, oracle success, source-file changes, private-system equivalence, launch-scope decision, runtime correctness, and whole-system correctness false.\n\nThe dependency on `paper_module.verifier_lab_execution_spine` tells a reader how to interpret the lab. The certificate kernel is one proof-adjacent execution cell inside the verifier-lab spine: it can show accepted/residual transition rows and rerun effects, but it cannot promote those rows into launch, public sharing, benchmark, or theorem-authority claims without the sibling verifier and launch lanes.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 20515,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "certificatekernelexecution_lab is a source-available public runtime refactor of the source certificate-kernel pattern. It runs a small Lean/Lake certificate kernel, generated certificate rows, analyzer metadata, CP2 typed-action reruns, and bounded Evolve policy reruns without importing private proof bodies. The exported bundle also carries copied source body modules from the real Erdos #257 certificate-kernel system: Lean kernel files, generated certificates, the strike runner, toolchain files, and Lean profile result records. The v2 fixture carries both a simple NatSumCertificate row family and a miniature BoundedOrderCertificate family so the public lab is no longer only a single-shape a\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This component exists to stop a proof-adjacent claim from resting on prose. The single question it answers is narrow: did a small Lean kernel actually compile and accept the declared certificate rows, here and now, with the command, the return code, and the source hashes on record? Everything else in the page is accounting that keeps the answer honest. The reduction it relies on is the interesting part. A large class of proof-adjacent facts can be expressed as a finite certificate plus a decidable Boolean checker shaped like validate : Cert -> Bool. The agent is never asked to write a human proof. It is asked to supply the right certificate rows, and Lean decides. The fixture carries two ch\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module shape is a bounded public certificate-kernel execution witness, not general theorem authority. This page points at the mechanism and runtime component; the runtime validates Lean/Lake command identity, source hashes, generated certificate rows, analyzer metadata, transition traces, CP2 typed-action reruns, bounded Evolve reruns, source-module manifest digests, negative cases, public readout, metadata-only result records, and an scope limit.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism",
       "title": "Mechanism",
       "level": 2,
       "excerpt": "The mechanism is a finite-certificate execution reducer. The public entrypoints run and runcertificatebundle both call buildresult, which loads the certificate lab packet, certificate manifest, Lean project, optional negative fixtures, and optional exported-bundle source manifest before any claim is recorded. The fixture path may run Lean/Lake in a temporary public workspace; the exported-bundle path validates the standalone runtime contract and copied body floor without rerunning private source machinery. The reducer first establishes source and result record boundaries. inputpaths enumerates the public Lean files and JSON inputs, then scan_paths checks them against core/privatestateforbid\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-surfaces",
       "title": "Public Surfaces",
       "level": 2,
       "excerpt": "Component runner: python -m microcosmcore.components.certificatekernelexecutionlab run --input fixtures/firstwave/certificatekernelexecutionlab/input --out result records/firstwave/certificatekernelexecutionlab Exported bundle runner: python -m microcosmcore.components.certificatekernelexecutionlab run-certificate-bundle --input examples/certificatekernelexecutionlab/exportedcertificatekernelexecutionlabbundle --out result records/runtimeshell/demoproject/components/certificatekernelexecution_lab CLI: microcosm certificate-kernel-execution-lab run --input fixtures/firstwave/certificatekernelexecutionlab/input --out result records/firstwave/certificatekernelexecutionlab Standard: standards/s\u2026",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "authority-boundary",
       "title": "Authority Boundary",
       "level": 2,
       "excerpt": "The lab proves only that the declared public Lean fixture compiled and that the declared transition rows were accepted, rejected, or left residual under the local verifier. The copied source body modules are public source-open body material, but result records cite them only by manifest row, hash, class, count, and required anchor. It does not expose proof text through result records, count oracle/provider output as proof authority, change source files, claim benchmark solve-rate, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in proof-carrying and proof-assistant traditions. Necula's Proof-Carrying Code anchors the idea that an untrusted producer can supply a certificate checked by a small trusted verifier. The Lean theorem prover continues the small-kernel proof-assistant lineage, and LeanDojo shows why reproducible Lean environments, premise access, and programmatic proof-state interaction matter for theorem-proving agents. Microcosm borrows the certificate-kernel discipline: certificate rows, Lean/Lake command identity, return codes, source hashes, transition traces, negative rows, and metadata-only result records must be visible before proof-adjacent language is allowed. It does no\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "research-bet",
       "title": "Research Bet",
       "level": 2,
       "excerpt": "This component is the certificate-kernel bet in runnable form: a large class of proof-adjacent facts can be reduced to a finite certificate plus a decidable Boolean checker. The public lab keeps the agent task narrow. It does not ask the agent to synthesize a human proof; it asks for the right certificate rows, then lets Lean/Lake decide whether the checker accepts them. The toy path uses a Lean certificate kernel shaped like `validate : Cert -> Bool` and accepts only when Lean can compile and run the declared check. The source-body import path carries the real Erdos #257 source floor: Lean kernel files, generated certificate shards, toolchain files, and profile result records from the Math\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "receipt-shape",
       "title": "Result record Shape",
       "level": 2,
       "excerpt": "Result records are public evidence. The lab exposes structured theorem/declaration names, Lean/Lake command identity, return codes, hashes, declaration counts, accepted/residual counts, negative-case ids, CP2 action classes, Evolve policy artifact ids, source-module manifest status, copied body-material counts, authority counters, scope limit, and scope boundary. It omits only proof, provider, oracle-answer, private-source, and stdout/stderr payload bodies, and records that omission through secretexclusionscan and bodyinreceipt: false rather than treating absence as product evidence. Lean/Lake build result record for MicrocosmCertificateLab. Analyzer metadata for public Lean files: imports,\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-doctrine-binding",
       "title": "Source-Backed Doctrine Binding",
       "level": 2,
       "excerpt": "Component: src/microcosmcore/components/certificatekernelexecutionlab.py Bundle: core/papermodulecapsules.json#papermodule.certificatekernelexecutionlab Mechanism: core/mechanismsources.json#mechanism.certificatekernelexecutionlab.validatespubliccertificatekernelexecution Standard: standards/stdmicrocosmcertificatekernelexecution_lab.json Evidence class: core/organevidenceclasses.json::certificatekernelexecutionlab records externalsubprocess_witness at rank 4. Source-module manifest: examples/certificatekernelexecutionlab/exportedcertificatekernelexecutionlabbundle/sourcemodulemanifest.json declares nine copied Lean/tool/profile body modules. Runtime result record: result records/runtimeshe\u2026",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: core/papermodulecapsules.json::papermodules[7:papermodule.certificatekernelexecution_lab] is the JSON authority row. A diagram view is generated for this module; the Atlas card for this module is staged and will appear once the component-atlas lane completes its binding pass. Mechanism route: core/mechanismsources.json::mechanism.certificatekernelexecutionlab.validatespubliccertificatekernelexecution binds the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and runtime code locus. Runtime route: src/microcosmcore/components/certificatekernelexecutionlab.py owns run, runcertificatebundle, sourcemodulemanifest\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The bundle places this module under concept.formalmathandproofwitness_bundle: proof-adjacent public claims must be reduced to explicit witness artifacts before a reader is allowed to treat them as evidence. In this module, the witness artifacts are the public Lean/Lake subprocess result, generated certificate rows, analyzer metadata, transition traces, CP2/Evolve rerun evidence, copied source-module manifest, and metadata-only result records. Markdown explains that lattice; it does not replace the JSON bundle or the validator result records. P-3 is the governing principle edge for the module's claim discipline. The runtime does not ask whether a proof story is persuasive; it requires a fini\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture into disposable result records from the Microcosm root: Run the exported bundle through the same component:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "cold-agent-use",
       "title": "Cold-Agent Use",
       "level": 2,
       "excerpt": "Open the source-module manifest first, then the runtime result record, then the component source. The useful claim is not that Microcosm proved the Erdos #257 theorem, solved a benchmark, imported private proof bodies, or gained provider/oracle authority. The useful claim is that Microcosm can force a proof-adjacent story to expose Lean/Lake command identity, return codes, source hashes, declaration counts, certificate rows, transition traces, typed CP2 actions, bounded Evolve reruns, source-module body refs, negative-case result records, and authority counters before certificate-kernel language is allowed. Re-entry condition: after the sibling organ_atlas.json lane releases, bind this pape\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This is a source-available certificate-kernel laboratory with copied source body material, not a private source dump and not general proof authority beyond the declared fixture rows and source-module body refs.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim a certificate-kernel laboratory backed by a structured doctrine row, with a diagram view generated from that row. The Atlas card for this module is staged pending the component-atlas lane's binding pass; that is honest coordination state, not a content gap. It cannot claim formal-result correctness, benchmark solve rate, private proof body export, provider or oracle authority, source-file changes, public sharing decision, launch-scope decision, or whole-system proof authority. The Atlas card must be completed by the owning component-atlas/bundle route and builder regeneration, not by hand-editing Markdown.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "This module is a bounded public execution witness, not a theorem-proving authority. Its evidence depends on the shipped public Lean/Lake fixture, generated certificate rows, analyzer metadata, CP2 typed-action reruns, bounded Evolve reruns, and copied source-module manifest. A green run proves that this certificate-kernel bundle follows those constraints; it does not establish the Erdos #257 theorem, Mathlib coverage, benchmark solve rate, or correctness of private source proof bodies. The source-open body floor is intentionally narrow. The exported bundle carries nine copied Lean/tool/profile bodies under source_modules/, and the result records may cite only refs, hashes, material classes,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.certificate_kernel_execution_lab.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"certificate-kernel runtime\"] fixture[\"first-wave Lean fixture\"] bundle[\"exported certificate bundle\"] manifest[\"certificate manifest\"] lake[\"Lean/Lake subprocess\"] analyzer[\"Lean analyzer metadata\"] transitions[\"transition trace rows\"] cp2[\"CP2 typed-action reruns\"] evolve[\"bounded Evolve reruns\"] source_modules[\"source-module body floor\"] readout[\"public readout\"] result records[\"metadata-only result records\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle fixture --> manifest bundle --> manifest manifest --> lake lake --> analyzer lake --> transitions transitions --> cp2 cp2 --> evolve source_modules --> analyzer analyzer --> readout evolve --> result records readout --> result records result records --> ceiling",
       "source_hash": "sha256:5435e99374c51f35788c6a5b94839236aa282205838b6030bc348fef9e2890ba",
       "html_url": "docs/paper-modules.html#paper-module-certificate-kernel-execution-lab-diagram-1",
       "html_anchor": "paper-module-certificate-kernel-execution-lab-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/certificate_kernel_execution_lab.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Proof-Carrying Code",
       "url": "https://www.usenix.org/legacy/publications/library/proceedings/osdi96/full_papers/necula/html/node2.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Lean theorem prover",
       "url": "https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "LeanDojo",
       "url": "https://arxiv.org/abs/2306.15626",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.verifier_lab_execution_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Verifier Lab Execution Spine",
         "url": "paper-modules.html#paper-module-verifier-lab-execution-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "certificate_kernel_execution_lab",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Certificate Kernel Execution Lab",
         "url": "components.html#component-certificate_kernel_execution_lab"
        },
        {
         "id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public certificate kernel execution",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 2,
       "links": [
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/certificate_kernel_execution_lab.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 21915
    },
    {
     "id": "paper_module.corpus_readiness_mathlib_absence_gate",
     "title": "Corpus Readiness Mathlib Absence Gate",
     "relative_href": "docs/paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate",
     "read_href": "docs/paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-corpus-readiness-mathlib-absence-gate",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The corpus readiness Mathlib absence gate validates copied corpus/toolchain readiness bodies before any Mathlib-dependent proof or retrieval claim is allowed.",
     "summary": "Corpus Readiness Mathlib Absence Gate is the public formal-math corpus readiness boundary for Microcosm. It checks copied PROVER smoke-run corpus readiness rows, Lean/Std toolchain probe rows, Mathlib absence status, consumer-gate decisions, absent corpus blocking, source-module manifest digests, metadata-only result record policy, and five negative cases while keeping proof bodies, model-output data, non-public source refs, benchmark-completeness claims, launch-scope decision, and Mathlib proof authority out of result records.",
     "authority_ceiling": "Public algorithmic projection over copied corpus/toolchain readiness system, first-wave fixture result records, and exported bundle result records only; no Lean/Lake rerun, Mathlib availability claim, formal-result correctness, proof body export, external model access, benchmark/corpus completeness, launch-scope decision, publishing-scope decision, or whole-system proof claim.",
     "abstract": "The corpus readiness Mathlib absence gate validates copied corpus/toolchain readiness bodies before any Mathlib-dependent proof or retrieval claim is allowed.",
     "teleology": {
      "section_id": "",
      "text": "The corpus readiness Mathlib absence gate validates copied corpus/toolchain readiness bodies before any Mathlib-dependent proof or retrieval claim is allowed.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Abstract\n\n`corpus_readiness_mathlib_absence_gate` is the public formal-math corpus readiness boundary for Microcosm. It carries copied corpus/toolchain rows from the 2026-05-11 proof-state curriculum smoke run and forces Mathlib absence, absent-corpus blocking, consumer gate decisions, and source-module digest coupling to be visible before any downstream retrieval, tactic-routing, or proof-witness language is allowed.\n\n###### Purpose\n\nFormal-math agents fail in a specific way: they treat \"there is a corpus\" as if it meant \"this corpus is usable for the proof route I am about to take\". A roster lists miniF2F, PutnamBench, ProofNet, LeanDojo and Mathlib, the agent assumes the libraries are present, and the failure only surfaces later as a broken import or a tactic that needs a premise the host cannot resolve. This component answers one question before that happens: for each corpus, is it actually present on this host, and is the Mathlib import lane actually available, or not?\n\nThe unusual part is that the gate does not take the answer on trust. It runs a bounded Lean/Lake import probe in a temporary directory: one small file that imports `Std` and is expected to compile, and one that imports `Mathlib` and is expected to be rejected with the toolchain's own `unknown module prefix 'Mathlib'` error. A corpus is only marked usable for Mathlib-dependent work when the runtime evidence agrees the corpus exists, carries a Lake file, and the Mathlib lane probe passes. In the current system the Mathlib probe stays false, so every Mathlib-dependent consumer is blocked, and the one consumer that passes is the Lean3 translation smoke, which needs no Mathlib project at all.\n\nThis closes the most common way a readiness claim drifts. Stale alias fields such as `mathlib_available`, or a `PASS` lean status, cannot turn the gate green on their own; they must agree with the live probe or the row is flagged. The probe is deliberately narrow. It checks that imports resolve and that Mathlib is genuinely absent. It does not run a `lake build`, prove any theorem, or claim Mathlib is installed. The output is a readiness board and a set of blocked consumer verdicts, bounded evidence.\n\n###### Shape\n\nSource refs\n\nlake env lean: Std compiles, Mathlib import rejected `runtime_lean_import_probe` check SHA-256 digests, parse probe JSON `validate_runtime_source_artifacts` 7 corpus rows, alias fields must agree with probe `validate_corpus_readiness` derive verdicts from readiness facts `validate_consumer_gate_cases` 4 copied source artifacts, digest match `validate_source_module_imports` Diagram source\n\n```text\nflowchart TD fixture[\"Fixture or exported bundle input corpus readiness rows + consumer gate cases\"] probe[\"runtime_lean_import_probe lake env lean: Std compiles, Mathlib import rejected\"] artifacts[\"validate_runtime_source_artifacts check SHA-256 digests, parse probe JSON\"] mathlib{\"Mathlib lane available? corpus exists + Lake file + probe passes\"} corpus[\"validate_corpus_readiness 7 corpus rows, alias fields must agree with probe\"] gates[\"validate_consumer_gate_cases derive verdicts from readiness facts\"] imports[\"validate_source_module_imports 4 copied source artifacts, digest match\"] allowed[\"Allowed: Lean3 translation smoke (needs no Mathlib project)\"] blocked[\"Blocked: Mathlib-dependent and absent-corpus consumers\"] result records[\"metadata-only result records result, board, validation, sign-off, bundle\"] ceiling[\"Scope limit no Mathlib availability, proof, provider, launch\"] fixture --> artifacts artifacts --> probe probe --> mathlib mathlib -->|no, probe false| corpus corpus --> gates gates --> allowed gates --> blocked fixture --> imports corpus --> result records gates --> result records imports --> result records result records --> ceiling\n```\n\nThis reader diagram is intentionally smaller than the generated doctrine-lattice graph.\n\n###### Mechanism\n\nThe mechanism is a readiness reducer, not a theorem-proving backend. The runtime entrypoints `run` and `run_projection_bundle` both call `_build_result`, which loads public fixture or exported-bundle inputs, scans those inputs against the non-public-state exclusion policy, verifies copied source artifacts, and then combines corpus readiness, consumer gate, source-module import, negative-case, and scope limit fields into one metadata-only result.\n\n`validate_runtime_source_artifacts` anchors the reducer to four source refs: the corpus readiness rows, tactic-affordance probe, Mathlib import probe Lean file, and tactic portfolio availability JSON. It checks expected SHA-256 digests, parses the JSON source artifacts, and runs a bounded Lean/Lake import probe that can show Std imports and Mathlib remains absent without running a Lake build or exporting Lean bodies.\n\n`validate_corpus_readiness` normalizes seven corpus rows against those runtime source artifacts. A corpus is usable for Mathlib-dependent work only when the runtime evidence says the corpus exists, has a Lake file, and `mathlib_lake_project_import_available` is true. In the current fixture and bundle evidence that field remains false, so Mathlib-dependent capabilities are blocked, absent corpora are recorded, and stale alias fields such as `mathlib_available` cannot turn the gate green.\n\n`validate_consumer_gate_cases` then derives consumer verdicts from the normalized readiness facts instead of trusting expected-decision labels. The translation smoke consumer can pass because it does not require a Mathlib Lake project and names an available Lean3 reference corpus; Mathlib-dependent or absent-corpus consumers stay blocked. `validate_source_module_imports` adds the exported bundle floor by requiring the manifest class `copied_non_secret_macro_body`, material classes, target/source digest agreement, and no body material in result records.\n\nThe proof consumers are the two component commands, the focused regression test `tests/test_corpus_readiness_mathlib_absence_gate.py`, the paper-module corpus check, and the command-card surfaces emitted by `result_card`. Together they exercise the success path, contradictory Mathlib claims, consumer-gate skips, source digest tampering, private-path rewrites, runtime-probe blocks, and result record body exclusion. The resulting evidence relates the bundle's two mechanisms to `concept.formal_math_and_proof_witness_bundle`, `P-8`, and `AX-7` by making readiness visibility a precondition for downstream formal-math claims while keeping the scope limit below theorem, provider, benchmark, or launch-scope decision.\n\n###### Public Surfaces\n- Component runner: `python -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run --input fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input --out receipts/first_wave/corpus_readiness_mathlib_absence_gate`\n- Exported bundle runner: `python -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run-projection-bundle --input examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle --out receipts/runtime_shell/demo_project/organs/corpus_readiness_mathlib_absence_gate`\n- Standard: `standards/std_microcosm_corpus_readiness_mathlib_absence_gate.json`\n- Source-module manifest: `examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle/source_module_manifest.json`\n- Runtime result record: `receipts/runtime_shell/demo_project/organs/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle_validation_result.json`\n\n###### Reader Evidence Routing\n\nRead this module in five passes:\n1. Start with the source record at `core/paper_module_capsules.json::paper_modules[8:paper_module.corpus_readiness_mathlib_absence_gate]`. It is the source authority that names `source_authority: json_capsule`, the component subject, two mechanism subjects, the resolved runtime code locus, the concept `concept.formal_math_and_proof_witness_bundle`, the dependency `paper_module.tactic_portfolio_availability`, `P-8`, and `AX-7`.\n2. The reader proof is the current row shape: eight generated relationship edges, Mermaid `available_from_capsule_edges`, Atlas `blocked_until_organ_atlas_owner_lane_binds_edges`, and no unpopulated paper-module selective dependency residual for the tactic-portfolio edge. The structured source record is wiring evidence, not theorem-correctness, runtime-correctness, launch, provider, or production authority.\n3. Inspect the runtime locus `src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py`. The load-bearing symbols are `run`, `run_projection_bundle`, `validate_corpus_readiness`, `validate_consumer_gate_cases`, `validate_source_module_imports`, `_build_result`, `write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_NAME`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n4. For fixture evidence, use `fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input` and the result records under `receipts/first_wave/corpus_readiness_mathlib_absence_gate/` plus result records/sign-off/first_wave/corpus_readiness_mathlib_absence_gate_fixture_acceptance.json. The first-wave result result record records seven corpus rows, seven consumer cases, one allowed Lean3 translation-smoke case, six blocked absent or Mathlib-dependent cases, `mathlib_lake_project_import_available: false`, `body_in_receipt: false`, and the five negative cases `mathlib_available_without_probe`, `consumer_skips_readiness_gate`, `private_corpus_source_ref`, `proof_body_leakage`, and `release_overclaim`.\n5. For exported-bundle evidence, use `examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle/source_module_manifest.json` and `receipts/runtime_shell/demo_project/organs/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle_validation_result.json`. The manifest verifies four copied source artifacts: corpus readiness JSON, tactic-affordance probe JSON, the Mathlib import probe Lean file, and tactic portfolio availability JSON. The exported result record records `source_module_import_count: 4`, `copied_source_artifact_count: 4`, `source_modules_pass: true`, `body_in_receipt: false`, and three blocked absent or Mathlib-dependent bundle consumer cases.\n\nIf a reader needs validation result records rather than prose, run the commands in ## Validation Result record Path, including the focused regression test and paper-module corpus check. Treat every result record as corpus-readiness boundary evidence only; it does not create Lean/Lake execution authority, Mathlib availability, theorem-proof authority, provider authority, private-system equivalence, or launch-scope decision.\n\n###### Prior Art Grounding\n\nThis component is grounded in Lean corpus and neural theorem-proving work where library availability, premise access, and benchmark splits are part of the claim. The [Lean mathematical library](https://arxiv.org/abs/1910.09336) establishes Mathlib as a large community-maintained formal mathematics corpus, [miniF2F](https://arxiv.org/abs/2109.00110) gives a cross-system benchmark for formal Olympiad statements, and [LeanDojo](https://arxiv.org/abs/2306.15626) shows why reproducible corpus extraction and accessible-premise metadata matter for theorem-proving agents.\n\nMicrocosm borrows the readiness gate: corpus rows, Mathlib availability probes, blocked consumer cases, source-module digests, and negative leakage guards must be visible before retrieval, tactic-routing, or proof-witness language is allowed. It does not claim Mathlib is present or that any theorem was proved.\n\n###### Research Bet\n\nFormal-math agents fail when they treat \"there is a corpus\" as equivalent to \"this corpus is usable for this proof route.\" This component makes that boundary runnable. It records seven corpus rows, blocks six absent or Mathlib-dependent consumer cases, allows only the Lean3 translation-smoke case, and keeps the Mathlib probe false until an actual passing probe is present.\n\nThe exported bundle carries four copied body artifacts: corpus readiness JSON, tactic-affordance probe JSON, the Mathlib import probe Lean file, and tactic portfolio availability JSON. Two rows are exact copies and two use a verified private-path rewrite. The result record records the manifest status, counts, material classes, digests, and metadata-only policy; the copied bodies stay under `source_artifacts/`, not inside result records.\n\n###### Source-Backed Doctrine Binding\n- Component: `src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py`\n- Bundle: `core/paper_module_capsules.json#paper_module.corpus_readiness_mathlib_absence_gate`\n- Mechanism: `core/mechanism_sources.json#mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary`\n- Standard: `standards/std_microcosm_corpus_readiness_mathlib_absence_gate.json`\n- Evidence class: `core/organ_evidence_classes.json::corpus_readiness_mathlib_absence_gate` records `algorithmic_projection` at rank 3.\n- Source-module manifest: `examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle/source_module_manifest.json`\n- Sign-off result records: `receipts/first_wave/corpus_readiness_mathlib_absence_gate/*` and result records/sign-off/first_wave/corpus_readiness_mathlib_absence_gate_fixture_acceptance.json\n\n###### Cold-Agent Use\n\nOpen the source-module manifest first, then the runtime bundle result record, then the first-wave result result record. The useful claim is not that Microcosm has Mathlib or can prove downstream theorems. The useful claim is that Microcosm can force a formal-math route to expose corpus availability, Mathlib absence, consumer gating, source-module digest evidence, copied-body boundaries, negative-case result records, and an explicit scope boundary before any proof route is treated as usable.\n\nRe-entry condition: the current atlas row already points at this paper module. After the sibling `organ_atlas.json` lane releases, bind this bundle's mechanism ref and code locus into the atlas row and rerun `python -m microcosm_core.doctrine_lattice --check`.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run \\\n  --input fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input \\\n  --out /tmp/microcosm-corpus-readiness-mathlib-absence-vrp\nPYTHONPATH=src python3 -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run-projection-bundle \\\n  --input examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle \\\n  --out /tmp/microcosm-corpus-readiness-mathlib-absence-bundle-vrp\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\nPYTHONPATH=src .venv/bin/python -m pytest -p no:cacheprovider --basetemp=/tmp/microcosm-corpus-readiness-mathlib-absence-tests -q tests/test_corpus_readiness_mathlib_absence_gate.py\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.paper_module_payload.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/corpus_readiness_mathlib_absence_gate.json\n```\n\nThe fixture command writes the public corpus-readiness board, result result record, and validation result record. The bundle command validates the exported source-module manifest and metadata-only runtime result record. The corpus check and `jq` structured source record query prove the bundle-derived projection currentness without hand-editing generated JSON. The focused test keeps the Mathlib absence boundary, consumer gate cases, source-module digest checks, non-public paths rewrite policy, and scope boundary behavior from regressing.\n\nPassing these commands does not establish Mathlib is installed, rerun Lean/Lake, validate downstream formal-result correctness, benchmark a corpus, authorize external model access, or approve launch; it only proves the bounded fixture and exported bundle result records preserve the declared readiness boundary.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component is algorithmic projection over copied source system, not a Lean/Lake rerun and not Mathlib proof authority. Its strongest public claim is that a fixture and exported bundle agree about corpus readiness, Mathlib absence, blocked consumers, copied source-module digests, metadata-only result records, and negative leakage guards. It does not establish formal-result correctness, claim Mathlib is available, benchmark a corpus, expose proof/provider/private bodies, call a provider, change source files, or include launch operations.\n\n###### Scope limit\n\nThe JSON bundle proves a public corpus-readiness boundary only: copied corpus/toolchain rows, absent-Mathlib blocking, consumer gate decisions, source-module digest coupling, metadata-only result records, and negative leakage guards. Mermaid availability reflects bundle edges, while the Atlas row still waits on the component-atlas owner lane. This module does not establish Mathlib is installed, rerun Lean or Lake, validate formal-result correctness, benchmark corpus quality, authorize retrieval or tactic routing, use external model services, expose private proof bodies, change source records, or approve launch.\n\n###### Result record Shape\n\nThe first-wave result result record records `corpus_count: 7`, `consumer_case_count: 7`, `allowed_case_ids`, `blocked_case_ids`, `absent_corpus_ids`, `mathlib_lake_project_import_available: false`, `body_in_receipt: false`, the scope limit, and five observed negative cases:\n- `mathlib_available_without_probe`\n- `consumer_skips_readiness_gate`\n- `private_corpus_source_ref`\n- `proof_body_leakage`\n- `release_overclaim`\n\nThe exported runtime result record records `source_module_import_count: 4`, `copied_source_artifact_count: 4`, `source_modules_pass: true`, and the same metadata-only result record boundary.\n\n###### Scope boundary\n\nThis is a source-backed corpus readiness boundary with copied source corpus/toolchain material, not Lean/Lake execution, Mathlib availability, theorem-proof authority, corpus benchmark authority, provider authority, or launch-scope decision.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 18384,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "corpusreadinessmathlibabsencegate is the public formal-math corpus readiness boundary for Microcosm. It carries copied corpus/toolchain rows from the 2026-05-11 proof-state curriculum smoke run and forces Mathlib absence, absent-corpus blocking, consumer gate decisions, and source-module digest coupling to be visible before any downstream retrieval, tactic-routing, or proof-witness language is allowed.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Formal-math agents fail in a specific way: they treat \"there is a corpus\" as if it meant \"this corpus is usable for the proof route I am about to take\". A roster lists miniF2F, PutnamBench, ProofNet, LeanDojo and Mathlib, the agent assumes the libraries are present, and the failure only surfaces later as a broken import or a tactic that needs a premise the host cannot resolve. This component answers one question before that happens: for each corpus, is it actually present on this host, and is the Mathlib import lane actually available, or not? The unusual part is that the gate does not take the answer on trust. It runs a bounded Lean/Lake import probe in a temporary directory: one small fil\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This reader diagram is intentionally smaller than the generated doctrine-lattice graph. resolving component, mechanism, law, concept, and code-locus edges; the flow above shows the evidence path a cold reader should inspect before any formal-math consumer treats a corpus, Mathlib-dependent route, tactic route, or proof witness as usable.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism",
       "title": "Mechanism",
       "level": 2,
       "excerpt": "The mechanism is a readiness reducer, not a theorem-proving backend. The runtime entrypoints run and runprojectionbundle both call buildresult, which loads public fixture or exported-bundle inputs, scans those inputs against the non-public-state exclusion policy, verifies copied source artifacts, and then combines corpus readiness, consumer gate, source-module import, negative-case, and scope limit fields into one metadata-only result. validateruntimesource_artifacts anchors the reducer to four source refs: the corpus readiness rows, tactic-affordance probe, Mathlib import probe Lean file, and tactic portfolio availability JSON. It checks expected SHA-256 digests, parses the JSON source art\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-surfaces",
       "title": "Public Surfaces",
       "level": 2,
       "excerpt": "Component runner: python -m microcosmcore.components.corpusreadinessmathlibabsencegate run --input fixtures/firstwave/corpusreadinessmathlibabsencegate/input --out result records/firstwave/corpusreadinessmathlibabsence_gate Exported bundle runner: python -m microcosmcore.components.corpusreadinessmathlibabsencegate run-projection-bundle --input examples/corpusreadinessmathlibabsencegate/exportedcorpusreadinessbundle --out result records/runtimeshell/demoproject/components/corpusreadinessmathlibabsencegate Standard: standards/stdmicrocosmcorpusreadinessmathlibabsencegate.json Source-module manifest: examples/corpusreadinessmathlibabsencegate/exportedcorpusreadinessbundle/sourcemodule_manifes\u2026",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module in five passes: Start with the source record at core/papermodulecapsules.json::papermodules[8:papermodule.corpusreadinessmathlibabsencegate]. It is the source authority that names sourceauthority: jsoncapsule, the component subject, two mechanism subjects, the resolved runtime code locus, the concept concept.formalmathandproofwitness_bundle, the dependency papermodule.tacticportfolio_availability, P-8, and AX-7. Open the structured source record papermodules/corpusreadinessmathlibabsence_gate.json as a The reader proof is the current row shape: eight generated relationship edges, Mermaid availablefromcapsule_edges, Atlas blockeduntilorganatlasownerlanebinds_edges, and no un\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the public corpus-readiness board, result result record, and validation result record. The bundle command validates the exported source-module manifest and metadata-only runtime result record. The corpus check and jq structured source record query prove the bundle-derived projection currentness without hand-editing generated JSON. The focused test keeps the Mathlib absence boundary, consumer gate cases, source-module digest checks, non-public paths rewrite policy, and scope boundary behavior from regressing. Passing these commands does not establish Mathlib is installed, rerun Lean/Lake, va\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component is algorithmic projection over copied source system, not a Lean/Lake rerun and not Mathlib proof authority. Its strongest public claim is that a fixture and exported bundle agree about corpus readiness, Mathlib absence, blocked consumers, copied source-module digests, metadata-only result records, and negative leakage guards. It does not establish formal-result correctness, claim Mathlib is available, benchmark a corpus, expose proof/provider/private bodies, call a provider, change source files, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The JSON bundle proves a public corpus-readiness boundary only: copied corpus/toolchain rows, absent-Mathlib blocking, consumer gate decisions, source-module digest coupling, metadata-only result records, and negative leakage guards. Mermaid availability reflects bundle edges, while the Atlas row still waits on the component-atlas owner lane. This module does not establish Mathlib is installed, rerun Lean or Lake, validate formal-result correctness, benchmark corpus quality, authorize retrieval or tactic routing, use external model services, expose private proof bodies, change source records, or approve launch.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in Lean corpus and neural theorem-proving work where library availability, premise access, and benchmark splits are part of the claim. The Lean mathematical library establishes Mathlib as a large community-maintained formal mathematics corpus, miniF2F gives a cross-system benchmark for formal Olympiad statements, and LeanDojo shows why reproducible corpus extraction and accessible-premise metadata matter for theorem-proving agents. Microcosm borrows the readiness gate: corpus rows, Mathlib availability probes, blocked consumer cases, source-module digests, and negative leakage guards must be visible before retrieval, tactic-routing, or proof-witness language is al\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "research-bet",
       "title": "Research Bet",
       "level": 2,
       "excerpt": "Formal-math agents fail when they treat \"there is a corpus\" as equivalent to \"this corpus is usable for this proof route.\" This component makes that boundary runnable. It records seven corpus rows, blocks six absent or Mathlib-dependent consumer cases, allows only the Lean3 translation-smoke case, and keeps the Mathlib probe false until an actual passing probe is present. The exported bundle carries four copied body artifacts: corpus readiness JSON, tactic-affordance probe JSON, the Mathlib import probe Lean file, and tactic portfolio availability JSON. Two rows are exact copies and two use a verified private-path rewrite. The result record records the manifest status, counts, material clas\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "receipt-shape",
       "title": "Result record Shape",
       "level": 2,
       "excerpt": "The first-wave result result record records corpus_count: 7, consumercasecount: 7, allowedcaseids, blockedcaseids, absentcorpusids, mathliblakeprojectimportavailable: false, bodyinreceipt: false, the scope limit, and five observed negative cases: mathlibavailablewithout_probe consumerskipsreadiness_gate privatecorpussource_ref proofbodyleakage release_overclaim The exported runtime result record records sourcemoduleimport_count: 4, copiedsourceartifactcount: 4, sourcemodules_pass: true, and the same metadata-only result record boundary.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-doctrine-binding",
       "title": "Source-Backed Doctrine Binding",
       "level": 2,
       "excerpt": "Component: src/microcosmcore/components/corpusreadinessmathlibabsence_gate.py Bundle: core/papermodulecapsules.json#papermodule.corpusreadinessmathlibabsence_gate Mechanism: core/mechanismsources.json#mechanism.corpusreadinessmathlibabsencegate.validatespubliccorpusreadiness_boundary Standard: standards/stdmicrocosmcorpusreadinessmathlibabsencegate.json Evidence class: core/organevidenceclasses.json::corpusreadinessmathlibabsencegate records algorithmic_projection at rank 3. Source-module manifest: examples/corpusreadinessmathlibabsencegate/exportedcorpusreadinessbundle/sourcemodule_manifest.json Sign-off result records: result records/firstwave/corpusreadinessmathlibabsencegate/ and result\u2026",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "cold-agent-use",
       "title": "Cold-Agent Use",
       "level": 2,
       "excerpt": "Open the source-module manifest first, then the runtime bundle result record, then the first-wave result result record. The useful claim is not that Microcosm has Mathlib or can prove downstream theorems. The useful claim is that Microcosm can force a formal-math route to expose corpus availability, Mathlib absence, consumer gating, source-module digest evidence, copied-body boundaries, negative-case result records, and an explicit scope boundary before any proof route is treated as usable. Re-entry condition: the current atlas row already points at this paper module. After the sibling organ_atlas.json lane releases, bind this bundle's mechanism ref and code locus into the atlas row and rer\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This is a source-backed corpus readiness boundary with copied source corpus/toolchain material, not Lean/Lake execution, Mathlib availability, theorem-proof authority, corpus benchmark authority, provider authority, or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.corpus_readiness_mathlib_absence_gate.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD fixture[\"Fixture or exported bundle input corpus readiness rows + consumer gate cases\"] probe[\"runtime_lean_import_probe lake env lean: Std compiles, Mathlib import rejected\"] artifacts[\"validate_runtime_source_artifacts check SHA-256 digests, parse probe JSON\"] mathlib{\"Mathlib lane available? corpus exists + Lake file + probe passes\"} corpus[\"validate_corpus_readiness 7 corpus rows, alias fields must agree with probe\"] gates[\"validate_consumer_gate_cases derive verdicts from readiness facts\"] imports[\"validate_source_module_imports 4 copied source artifacts, digest match\"] allowed[\"Allowed: Lean3 translation smoke (needs no Mathlib project)\"] blocked[\"Blocked: Mathlib-dependent and absent-corpus consumers\"] result records[\"metadata-only result records result, board, validation, sign-off, bundle\"] ceiling[\"Scope limit no Mathlib availability, proof, provider, launch\"] fixture --> artifacts artifacts --> probe probe --> mathlib mathlib -->|no, probe false| corpus corpus --> gates gates --> allowed gates --> blocked fixture --> imports corpus --> result records gates --> result records imports --> result records result records --> ceiling",
       "source_hash": "sha256:312d385e007fd2fcba60c7acd8e7bb4fb29702481e519d116f78a07e9186d784",
       "html_url": "docs/paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate-diagram-1",
       "html_anchor": "paper-module-corpus-readiness-mathlib-absence-gate-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/corpus_readiness_mathlib_absence.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Lean mathematical library",
       "url": "https://arxiv.org/abs/1910.09336",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "miniF2F",
       "url": "https://arxiv.org/abs/2109.00110",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "LeanDojo",
       "url": "https://arxiv.org/abs/2306.15626",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.tactic_portfolio_availability",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Tactic Portfolio Availability",
         "url": "paper-modules.html#paper-module-tactic-portfolio-availability"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 3,
       "links": [
        {
         "id": "corpus_readiness_mathlib_absence_gate",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Corpus Readiness Mathlib Absence Gate",
         "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
        },
        {
         "id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public corpus readiness boundary",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary"
        },
        {
         "id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public mathlib absence boundary",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 2,
       "links": [
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/corpus_readiness_mathlib_absence.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 19654
    },
    {
     "id": "paper_module.pattern_binding_contract",
     "title": "Pattern Binding Contract",
     "relative_href": "docs/paper-modules.html#paper-module-pattern-binding-contract",
     "read_href": "docs/paper-modules.html#paper-module-pattern-binding-contract",
     "context_href": "docs/rules-and-ideas.html#paper-module-pattern-binding-contract",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public pattern-binding component validates pattern rows, source bundles, authority handles, exported system bundles, and route-readiness selector overlays while keeping mined rows component-first and fixture-bound.",
     "summary": "Pattern Binding Contract is the public system membrane for mined pattern rows. It validates binding fields, source bundles, reference bundles, authority-chain handles, secret-exclusion scans, exported system bundles, and route-readiness selector overlays, then writes bounded result records that keep private bodies out and prevent individual pattern rows from becoming standalone public leaves.",
     "authority_ceiling": "Public pattern-binding fixtures, exported system bundles, route-readiness selector bundles, source-bundle refs, and metadata-only result records only; no private pattern-ledger certification, launch-scope decision, external model access, hosted-public posture, recipient work, private-data equivalence, source-file changes, or whole-system correctness.",
     "abstract": "The public pattern-binding component validates pattern rows, source bundles, authority handles, exported system bundles, and route-readiness selector overlays while keeping mined rows component-first and fixture-bound.",
     "teleology": {
      "section_id": "teleology",
      "text": "patternbindingcontract is the public root component that binds pattern rows to source-available source bundles, public runtime refs, authority-chain handles, scope boundaries, and secret-exclusion result records. Synthetic rows are allowed only as regression controls or negative cases; they are not product evidence.",
      "source": "markdown_section"
     },
     "body_markdown": "###### Teleology\n\n`pattern_binding_contract` is the public root component that binds pattern rows to source-available source bundles, public runtime refs, authority-chain handles, scope boundaries, and secret-exclusion result records. Synthetic rows are allowed only as regression controls or negative cases; they are not product evidence.\n\n###### Purpose\n\nA mined engineering pattern is a tempting thing to publish on its own. It reads like a self-contained insight, so it is easy to lift a single row out of a private ledger and present it as a finished public claim. This component exists to stop that. It answers one question: can a given pattern row be admitted to the public surface, and if so, under exactly what evidence and what ceiling?\n\nThe check is binding rather than display. Every pattern row must name a source bundle that points at a real public runtime ref or regression-harness ref, a governing standard, and an scope boundary. A row that lacks any of these, duplicates another row's id, or claims to be a standalone public leaf is rejected. The same validator runs deliberate negative cases alongside the positive control, so the result record proves not only that good rows pass but that each known failure mode is still caught.\n\nThe less obvious idea is truth accounting. When an exported bundle is validated, the component separates rows that merely describe runtime metadata from rows that represent a real pattern-ledger import, and records that a high accepted-row count is not the same as system progress. This guards against the quiet inflation where counting accepted rows starts to read like a measure of how much real work has landed. The route-readiness layer closes the matching gap on the selector side: a row can look selectable in isolation, but it is only admitted through the component that owns it, its fixture contract, and a gate that refuses to let hard no-standalone rows appear as selectable targets.\n\n###### Public Contract\n\nThe validator checks required binding fields, duplicate pattern conflicts, unsupported authority-chain handles, unresolved reference bundles, secret/provider/operator body sentinels, and public-leaf overclaim failures. It emits command-owned result records under `receipts/first_wave/pattern_binding_contract/`.\n\nThe exported system bundle also carries the source route-readiness selector overlays as public source-open bodies: `examples/pattern_binding_contract/exported_route_readiness_bundle/`. The validator recomputes the selector contract against the imported pattern ledger, route-readiness audit, row-to-component router, route cards, fixture specs, decision matrix, dependency DAG, internal routing graph, and copied source validation report. This closes the old gap where a mined pattern row could look selectable without opening the component bundle that owns it.\n\nCold readers should use `microcosm pattern-route-readiness validate-bundle` against `examples/pattern_binding_contract/exported_route_readiness_bundle/` when the question is selector admission rather than generic pattern binding. The older `pattern-binding validate-route-readiness-bundle` action remains a compatibility route to the same validator.\n\n###### Shape\n\nSource refs\n\nrequired fields, duplicate ids, bundle resolution, secret-exclusion scan `pattern_binding_contract` Diagram source\n\n```text\nflowchart LR subgraph Inputs[\"Pattern-binding inputs\"] Patterns[\"Pattern rows id, governing standard, scope boundary, source refs, projection posture\"] Bundles[\"Source bundles metadata-only refs to public runtime or regression harness\"] Handles[\"Authority-chain handles resolver result records\"] end Validator[\"pattern_binding_contract required fields, duplicate ids, bundle resolution, secret-exclusion scan\"] subgraph Negative[\"Refusal floor\"] Dup[\"Duplicate id rejected\"] Leak[\"Private body leak rejected\"] Overclaim[\"Public-leaf overclaim rejected\"] Unsupported[\"Unsupported authority handle not upgraded\"] end subgraph Bundle[\"Exported-bundle path\"] Truth[\"Truth accounting runtime-metadata rows vs real pattern-ledger import\"] RouteReadiness[\"Route-readiness selector component-first admission, fixture contract, hard no-standalone gate\"] end Result records[\"Result records refs, digests, counts, verdicts; body text omitted\"] Patterns --> Validator Bundles --> Validator Handles --> Validator Validator --> Negative Validator --> Bundle Truth --> RouteReadiness Negative --> Result records Bundle --> Result records\n```\n\n###### Evidence Binding\n\nAccepted component row: `core/organ_registry.json::implemented_organs[pattern_binding_contract]`. Evidence class: `core/organ_evidence_classes.json::organ_evidence_classes[pattern_binding_contract]` with rank 5 semantic-validator authority. The runtime locus is `src/microcosm_core/organs/pattern_binding_contract.py`, with focused coverage in `tests/test_pattern_binding_contract.py`.\n\nPaper bundle authority: `core/paper_module_capsules.json#paper_module.pattern_binding_contract`. Mechanism source: `core/mechanism_sources.json#mechanism.pattern_binding_contract.validates_public_pattern_bindings`.\n\n###### Reader Evidence Routing\n\nRead this module as a public binding membrane for pattern rows, not as a private pattern-ledger certificate or a standalone public-leaf selector. Start with `paper_modules/pattern_binding_contract.json` for the bundle payload, then open `standards/std_microcosm_pattern_binding_contract.json` to check the required fields, public/private boundary, source-open body import floor, route-readiness rules, and result record expectations.\n\nUse `core/fixture_manifests/pattern_binding_contract.fixture_manifest.json` before inspecting fixtures or exported bundles. The manifest and the `source_module_manifest.json` files name the copied source body floor; result record payloads should carry source refs, digests, anchors, counts, verdicts, and omission result records rather than inlining body text.\n\nTreat route-readiness selection as component-first evidence. A mined pattern row can be selectable only through the route-readiness bundle, selector contract, and result records that keep duplicates, unknown refs, private leakage, missing fixture contracts, dependency cycles, hard no-standalone rows, and companion-overlay gaps rejected.\n\n###### Prior Art Grounding\n\nThis component follows the software pattern-language tradition of making reusable engineering structures explicit, named, and reviewable. The [Hillside patterns library](https://hillside.net/patterns/) is the direct prior-art family for treating patterns as shared vocabulary rather than loose implementation notes.\n\nThe binding layer also borrows from provenance and supply-chain attestation patterns. [W3C PROV](https://www.w3.org/TR/prov-overview/) motivates the source/ref/evidence relation shape, while [SLSA](https://slsa.dev/spec/) and [in-toto](https://in-toto.io/) motivate digest-bound artifact claims and step-level metadata. Microcosm applies those ideas to pattern rows and route-readiness selectors, not to launch certification.\n\nRe-entry condition: if copied source bodies, route-readiness overlays, or negative-case rules change, rerun the three first commands above and update this paper module plus `standards/std_microcosm_pattern_binding_contract.json` from the new result record fields. Do not raise the scope limit from selector and binding validation to launch, public sharing, private-data equivalence, or standalone public-leaf authority.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThese checks validate public pattern-binding fixtures, system-bundle result records, route-readiness selector result records, and metadata-only authority handles only; they do not certify the private pattern ledger, hosted readiness, launch, external model access, private-data equivalence, or whole-system correctness.\n\nThe current authority is the runtime result record set under `receipts/first_wave/pattern_binding_contract/`; do not cite a separate pattern-specific sign-off result record unless an sign-off-lane artifact is actually present. Cold readers should inspect result record fields rather than markdown constants: `status`, `secret_exclusion_scan`, `source_open_body_imports`, `truth_accounting`, `route_readiness_summary`, `selection_contract`, and `source_manifest`.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module covers public pattern-binding mechanics: source-bundle validation, reference-bundle validation, authority-handle validation, route-readiness selector admission, duplicate and unknown-ref rejection, private-leakage sentinel checks, and metadata-only result record shape. It is evidence for the `pattern_binding_contract` component and `mechanism.pattern_binding_contract.validates_public_pattern_bindings`.\n\nThe ceiling stops before private pattern-ledger authority, hosted or public launch-scope decision, deployment posture, standalone public-leaf selector status, private-data equivalence, external model access, recipient work, source-file changes, publishing-scope decision, or whole-system correctness.\n\n###### Scope boundary\n\nThis module documents public pattern-binding mechanics and regression harnesses. It does not certify the private pattern ledger, public launch operations, hosted-public posture, public sharing, recipient work, external model access, private-data equivalence, or whole-system correctness. Route-readiness import does not make any mined pattern row a standalone public leaf; selection remains component-first and fixture-bound.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open body floor is the imported public bundle, not the private pattern ledger. Cold readers can open `examples/pattern_binding_contract/exported_substrate_bundle/` and `examples/pattern_binding_contract/exported_route_readiness_bundle/` to inspect the copied source module manifests, source bundles, reference bundles, authority-chain handles, route-readiness overlays, selector contract inputs, and copied source validation report. The required body floor is named by each `source_module_manifest.json` plus `source_capsules.json`, `reference_capsules.json`, and `authority_chain_handles.json`.\n\nResult records and manifests must stay metadata-only where the standard requires it: they carry refs, digests, anchors, counts, verdicts, omission result records, and secret-exclusion results. They do not inline private source bodies, raw operator payloads, model-output data, recipient data, or hidden pattern-ledger material.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 10598,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "teleology",
       "title": "Teleology",
       "level": 2,
       "excerpt": "patternbindingcontract is the public root component that binds pattern rows to source-available source bundles, public runtime refs, authority-chain handles, scope boundaries, and secret-exclusion result records. Synthetic rows are allowed only as regression controls or negative cases; they are not product evidence.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A mined engineering pattern is a tempting thing to publish on its own. It reads like a self-contained insight, so it is easy to lift a single row out of a private ledger and present it as a finished public claim. This component exists to stop that. It answers one question: can a given pattern row be admitted to the public surface, and if so, under exactly what evidence and what ceiling? The check is binding rather than display. Every pattern row must name a source bundle that points at a real public runtime ref or regression-harness ref, a governing standard, and an scope boundary. A row that lacks any of these, duplicates another row's id, or claims to be a standalone public leaf is reject\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The validator checks required binding fields, duplicate pattern conflicts, unsupported authority-chain handles, unresolved reference bundles, secret/provider/operator body sentinels, and public-leaf overclaim failures. It emits command-owned result records under result records/firstwave/patternbinding_contract/. The exported system bundle also carries the source route-readiness selector overlays as public source-open bodies: examples/patternbindingcontract/exportedroutereadiness_bundle/. The validator recomputes the selector contract against the imported pattern ledger, route-readiness audit, row-to-component router, route cards, fixture specs, decision matrix, dependency DAG, internal rout\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open body floor is the imported public bundle, not the private pattern ledger. Cold readers can open examples/patternbindingcontract/exportedsubstratebundle/ and examples/patternbindingcontract/exportedroutereadiness_bundle/ to inspect the copied source module manifests, source bundles, reference bundles, authority-chain handles, route-readiness overlays, selector contract inputs, and copied source validation report. The required body floor is named by each sourcemodulemanifest.json plus source_capsules.json, referencecapsules.json, and authoritychain_handles.json. Result records and manifests must stay metadata-only where the standard requires it: they carry refs, digests, ancho\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module covers public pattern-binding mechanics: source-bundle validation, reference-bundle validation, authority-handle validation, route-readiness selector admission, duplicate and unknown-ref rejection, private-leakage sentinel checks, and metadata-only result record shape. It is evidence for the patternbindingcontract component and mechanism.patternbindingcontract.validatespublicpattern_bindings. The ceiling stops before private pattern-ledger authority, hosted or public launch-scope decision, deployment posture, standalone public-leaf selector status, private-data equivalence, external model access, recipient work, source-file changes, public sharing decision, or whole-system corre\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-binding",
       "title": "Evidence Binding",
       "level": 2,
       "excerpt": "Accepted component row: core/organregistry.json::implementedorgans[patternbindingcontract]. Evidence class: core/organevidenceclasses.json::organevidenceclasses[patternbindingcontract] with rank 5 semantic-validator authority. The runtime locus is src/microcosmcore/components/patternbinding_contract.py, with focused coverage in tests/testpatternbinding_contract.py. Paper bundle authority: core/papermodulecapsules.json#papermodule.patternbinding_contract. Mechanism source: core/mechanismsources.json#mechanism.patternbindingcontract.validatespublicpatternbindings.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module as a public binding membrane for pattern rows, not as a private pattern-ledger certificate or a standalone public-leaf selector. Start with papermodules/patternbinding_contract.json for the bundle payload, then open standards/stdmicrocosmpatternbindingcontract.json to check the required fields, public/private boundary, source-open body import floor, route-readiness rules, and result record expectations. Use core/fixturemanifests/patternbindingcontract.fixturemanifest.json before inspecting fixtures or exported bundles. The manifest and the sourcemodulemanifest.json files name the copied source body floor; result record payloads should carry source refs, digests, anchors, co\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate/, reproduce this page's proof boundary with temporary result records: These checks validate public pattern-binding fixtures, system-bundle result records, route-readiness selector result records, and metadata-only authority handles only; they do not certify the private pattern ledger, hosted readiness, launch, external model access, private-data equivalence, or whole-system correctness. The current authority is the runtime result record set under result records/firstwave/patternbinding_contract/; do not cite a separate pattern-specific sign-off result record unless an sign-off-lane artifact is actually present. Cold readers should inspect result record fields rather\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component follows the software pattern-language tradition of making reusable engineering structures explicit, named, and reviewable. The Hillside patterns library is the direct prior-art family for treating patterns as shared vocabulary rather than loose implementation notes. The binding layer also borrows from provenance and supply-chain attestation patterns. W3C PROV motivates the source/ref/evidence relation shape, while SLSA and in-toto motivate digest-bound artifact claims and step-level metadata. Microcosm applies those ideas to pattern rows and route-readiness selectors, not to launch certification. Re-entry condition: if copied source bodies, route-readiness overlays, or negati\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module documents public pattern-binding mechanics and regression harnesses. It does not certify the private pattern ledger, public launch operations, hosted-public posture, public sharing, recipient work, external model access, private-data equivalence, or whole-system correctness. Route-readiness import does not make any mined pattern row a standalone public leaf; selection remains component-first and fixture-bound.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.pattern_binding_contract.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR subgraph Inputs[\"Pattern-binding inputs\"] Patterns[\"Pattern rows id, governing standard, scope boundary, source refs, projection posture\"] Bundles[\"Source bundles metadata-only refs to public runtime or regression harness\"] Handles[\"Authority-chain handles resolver result records\"] end Validator[\"pattern_binding_contract required fields, duplicate ids, bundle resolution, secret-exclusion scan\"] subgraph Negative[\"Refusal floor\"] Dup[\"Duplicate id rejected\"] Leak[\"Private body leak rejected\"] Overclaim[\"Public-leaf overclaim rejected\"] Unsupported[\"Unsupported authority handle not upgraded\"] end subgraph Bundle[\"Exported-bundle path\"] Truth[\"Truth accounting runtime-metadata rows vs real pattern-ledger import\"] RouteReadiness[\"Route-readiness selector component-first admission, fixture contract, hard no-standalone gate\"] end Result records[\"Result records refs, digests, counts, verdicts; body text omitted\"] Patterns --> Validator Bundles --> Validator Handles --> Validator Validator --> Negative Validator --> Bundle Truth --> RouteReadiness Negative --> Result records Bundle --> Result records",
       "source_hash": "sha256:7ed1be41b0ac1acdc65e8f8646ce0f608773a1ec62c55f254e07027f6c399f80",
       "html_url": "docs/paper-modules.html#paper-module-pattern-binding-contract-diagram-1",
       "html_anchor": "paper-module-pattern-binding-contract-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_binding_contract.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Hillside patterns library",
       "url": "https://hillside.net/patterns/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SLSA",
       "url": "https://slsa.dev/spec/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "in-toto",
       "url": "https://in-toto.io/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "pattern_binding_contract",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Pattern Binding Contract",
         "url": "components.html#component-pattern_binding_contract"
        },
        {
         "id": "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public pattern bindings",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_binding_contract.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11810
    },
    {
     "id": "paper_module.bridge_phase_continuity_runtime",
     "title": "Bridge Phase Continuity Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-bridge-phase-continuity-runtime",
     "read_href": "docs/paper-modules.html#paper-module-bridge-phase-continuity-runtime",
     "context_href": "docs/rules-and-ideas.html#paper-module-bridge-phase-continuity-runtime",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public bridge-continuity fixture validates disk-first continuation packets, heartbeat/resource-pressure boundaries, resume-once semantics, worker-skip dedupe, tracked result record-write gates, and non-public-state exclusion without live bridge transport.",
     "summary": "Bridge Phase Continuity Runtime is the public observe/apply continuity membrane for detached work. It consumes synthetic transport fixtures, validates copied observe-runtime body digests, writes five metadata-only result records, checks seven negative-case classes, and keeps heartbeat/resume evidence below work-landing, provider, UI, source-file changes, and launch-scope decision.",
     "authority_ceiling": "Public synthetic observe/apply fixture and copied body digest evidence only; no live bridge transport, provider/UI uptime, operator HUD/browser state, live phase runtime, prompt-shelf/private-memory bodies, work landing, source-file changes, launch-scope decision, or whole-system correctness.",
     "abstract": "The public bridge-continuity fixture validates disk-first continuation packets, heartbeat/resource-pressure boundaries, resume-once semantics, worker-skip dedupe, tracked result record-write gates, and non-public-state exclusion without live bridge transport.",
     "teleology": {
      "section_id": "",
      "text": "The public bridge-continuity fixture validates disk-first continuation packets, heartbeat/resource-pressure boundaries, resume-once semantics, worker-skip dedupe, tracked result record-write gates, and non-public-state exclusion without live bridge transport.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Route Card\n\n`bridge_phase_continuity_runtime` is the public, executable synthetic transport continuity membrane for detached bridge work. It lets a cold agent validate the disk-first observe/apply handoff without opening live bridge transport, model-output data, operator HUD/browser state, prompt-shelf bodies, private memory, or active phase runtime state.\n\n###### Purpose\n\nThis paper module exists to make detached bridge continuity testable as a public fixture instead of a trust story about hidden agents or provider sessions. The component asks one bounded question: can a disk-first observe/apply handoff be represented by public synthetic transport inputs, validated through continuation, heartbeat, resource-pressure, resume, worker-skip, and completion result records, and kept below live bridge/provider/UI/source-file changes?\n\nThe important mechanism is not \"run a bridge.\" It is a continuity membrane: every claim must pass through explicit packet fields, negative-case checks, metadata-only result record writes, and an scope limit that says heartbeat is liveness evidence, resume is resume evidence, and neither is proof that work landed.\n\nFirst command:\n\n```text\nmicrocosm bridge-phase-continuity-runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity\n```\n\n###### Prior Art Grounding\n\nThis runtime borrows from durable execution, workflow orchestration, leases, and provenance practice. Useful anchors include:\n- [Temporal](https://docs.temporal.io/), whose durable-execution model keeps workflow state resumable across process failure and retries.\n- Apache Airflow [DAGs](https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/dags.html), which separate task ordering and retry/timeout policy from task internals.\n- Kubernetes [Lease-based leader election](https://kubernetes.io/docs/concepts/cluster-administration/coordinated-leader-election/), as a prior pattern for liveness evidence, lease renewal, and failover without confusing a heartbeat with work completion.\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), for provenance records that let readers evaluate how an output was produced.\n\nMicrocosm borrows the resumable-workflow, DAG, lease, and provenance shapes, but keeps the component to public synthetic observe/apply fixture sign-off. It does not run live bridge transport, use external model services, prove UI uptime, land work, change source files, or include launch operations.\n\nPrimary authority surfaces:\n- Runtime: `src/microcosm_core/organs/bridge_phase_continuity_runtime.py`\n- Standard: `standards/std_microcosm_bridge_phase_continuity_runtime.json`\n- Fixture manifest: `core/fixture_manifests/bridge_phase_continuity_runtime.fixture_manifest.json`\n- Source-module manifest: `examples/macro_projection_import_protocol/exported_projection_import_bundle/observe_runtime_source_module_manifest.json`\n- Result record set: `receipts/second_wave/bridge_phase_continuity_runtime/*.json`\n\n###### Shape\n\nSource refs\n\nBlocked `tracked_receipt_writes_blocked` Diagram source\n\n```text\nflowchart TD Inputs[\"Six synthetic transport inputs detached job, continuation packet, heartbeat rows, resource pressure, worker-skip result record, forbidden terms\"] --> Transport[\"_validate_synthetic_transport_contract\"] Transport --> Good{\"Valid job? yielded to disk, packet not consumed, fresh heartbeat, phase and continuity match\"} Good -->|\"yes\"| Accept[\"Positive path accepted\"] Good -->|\"no\"| Refuse[\"Refusal floor: missing packet, missing fields, duplicate resume, heartbeat claims resume, stale heartbeat overclaim, dispatch blocked\"] Refuse --> Codes[\"Concrete error codes\"] Accept --> Fixture[\"_validate_fixture_contract source digests, completion finalizer, apply-failure rollback, public boundary\"] Codes --> Fixture Fixture --> Scan[\"private_state scan fixture and transport inputs\"] Scan --> Result records[\"Five metadata-only result records continuation, heartbeat, resource pressure, resume, completion transition\"] Result records --> Gate{\"Tracked result record-write gate\"} Gate -->|\"env set\"| Written[\"Result records written\"] Gate -->|\"env absent\"| Blocked[\"tracked_receipt_writes_blocked\"] Written --> Ceiling[\"Scope limit: no live bridge transport, external model access, HUD/browser/private memory, source-file changes, launch, or whole-system proof\"] Blocked --> Ceiling\n```\n\nThe shape is the public continuity membrane: six synthetic transport inputs are checked for a single valid resumable job and against a refusal floor, the accepted and rejected paths both feed the fixture-contract and non-public-state checks, and only then are the five metadata-only result records written through the tracked-write gate. The result record roles delimit what a reader can trust.\n\n###### Mechanism Pipeline\n\nThe runtime source locus is `src/microcosm_core/organs/bridge_phase_continuity_runtime.py`. Its public entry point `run` reads the fixture manifest, resolves public-relative fixture paths, and validates six synthetic transport inputs: `detached_job.json`, `continuation_packet.json`, `heartbeat_rows.jsonl`, `resource_pressure.json`, `worker_skip_receipt.json`, and `private_state_forbidden_terms.json`. JSONL heartbeat rows are streamed by `_read_required_jsonl` so malformed rows are findings, not a reason to ingest a whole live heartbeat body.\n\nThe central validator is `_validate_synthetic_transport_contract`. It separates five result record roles: continuation packet, heartbeat, resource pressure, resume result record, and completion transition. The implementation then writes the canonical result record set only through the result record-write gate. When the requested output is a tracked result record path and `MICROCOSM_TRACKED_RECEIPT_WRITES=1` is absent, the component reports `tracked_receipt_writes_blocked` instead of silently refreshing tracked evidence.\n\nThe negative-case floor is source-declared in `EXPECTED_NEGATIVE_CASES` and validated from fixture contents. Missing continuation packets, missing required fields, duplicate resume attempts, heartbeat rows that claim resume authority, stale heartbeat overclaims, resource-pressure dispatch blocks, private HUD body leakage, resume-pass work-landing overclaims, and observe/apply validation rollback all become explicit error codes. A pass therefore means the fixture both accepted the positive path and observed the refusal floor.\n\n###### Reader Evidence Routing\n\nReader evidence routes from this module to the runtime source locus, fixture manifest, source-module manifest, public result records, and focused regression. A diagram view and an atlas card are generated for this module. This page explains what a reader can infer from them.\n\nEvidence class What it supports Proof consumer Positive synthetic fixture The runner consumes the observe/apply fixture, writes five metadata-only result record roles, keeps non-public-state scan clean, and preserves the scope limit. `tests/test_bridge_phase_continuity_runtime.py::test_bridge_phase_continuity_runner_consumes_observe_apply_fixture` JSONL input handling Heartbeat rows are streamed, invalid JSONL rows become findings, and non-object rows are rejected without reading live transport state. `test_bridge_phase_continuity_jsonl_reader_streams` Tracked result record gate Durable tracked result record paths are not refreshed unless the explicit tracked-write environment variable is present. `test_bridge_phase_continuity_runner_reports_tracked_receipt_write_gate` Public synthetic label Fixture inputs use `synthetic_transport` and do not carry stale legacy transport or expected-error-code labels. `test_bridge_phase_continuity_fixture_inputs_use_public_synthetic_transport_label` Negative floor The seven expected negative case classes are observed as concrete error codes rather than prose warnings. Focused bridge-continuity negative-case tests in `tests/test_bridge_phase_continuity_runtime.py` CLI card boundary Compact command cards can summarize status without leaking forbidden private/live body classes. Bridge-continuity CLI/card tests in `tests/test_bridge_phase_continuity_runtime.py`\n\n###### What It Proves\n\nThe component proves a bounded public fixture contract:\n- A yielded synthetic job can be resumed only through an explicit continuation packet.\n- Missing packets, missing packet fields, and already consumed packets are rejected.\n- Heartbeat rows stay liveness evidence only; fresh or stale heartbeat rows do not become resume authority or provider/UI uptime evidence.\n- Resource pressure can block dispatch and must be recorded as a blocked decision.\n- Resume success is resume-only; it does not establish work landed without the completion transition result record.\n- Worker-skip result records dedupe a no-op without silently closing the claim.\n- The fixture and result records stay metadata-only for private/live-state classes.\n\nThe reusable mechanism is not \"subagents are good.\" It is the concrete continuity membrane that future agents can run before relying on observe/apply bridge resumption claims.\n\n###### Source-Backed System\n\nThe runtime consumes seven public fixture inputs:\n- `observe_apply_session_fixture.json`\n- `detached_job.json`\n- `continuation_packet.json`\n- `heartbeat_rows.jsonl`\n- `resource_pressure.json`\n- `worker_skip_receipt.json`\n- `private_state_forbidden_terms.json`\n\nThe fixture manifest declares five copied source body imports: `codex_paths_body_import`, `markdown_routing_body_import`, `observe_memory_body_import`, `observe_surfaces_body_import`, and `observe_runtime_body_import`. The component validates the copied target digests from `observe_runtime_source_module_manifest.json`; result record output keeps those bodies out of result records and records digest verdicts instead.\n\n###### Result record Floor\n\nA passing run writes five canonical result record roles:\n- `continuation_packet.json`\n- `heartbeat.json`\n- `resource_pressure.json`\n- `resume_receipt.json`\n- `closeout_transition.json`\n\nEach result record carries `organ_id`, `fixture_id`, `validator_id`, `checker_id`, `status`, `continuation_packet_status`, `heartbeat_status`, `resource_pressure_decision`, `resume_once_status`, `duplicate_resume_rejection`, `worker_skip_receipt_status`, `private_state_scan`, `authority_ceiling`, anti_claim, and the full result record path set.\n\nThe runtime also enforces tracked result record-write gating. A direct run to tracked result record paths without `MICROCOSM_TRACKED_RECEIPT_WRITES=1` reports `tracked_receipt_writes_blocked` rather than mutating tracked evidence silently.\n\n###### Negative Cases\n\nThe expected negative-case floor is source-declared in the runtime and manifest:\n- `missing_packet_duplicate_resume_and_resource_block`\n- `continuation_packet_missing_required_fields`\n- `heartbeat_claims_resume_authority`\n- `bridge_packet_private_hud_body`\n- `stale_heartbeat_overclaims_liveness`\n- `resume_success_overclaims_work_landed`\n- `apply_validation_failure_rolls_back_observe_promotion`\n\nThe current result record error-code set includes `MISSING_CONTINUATION_PACKET`, `MISSING_CONTINUATION_PACKET_FIELDS`, `CONTINUATION_PACKET_ALREADY_CONSUMED`, `HEARTBEAT_NOT_RESUME_AUTHORITY`, `STALE_HEARTBEAT_LIVENESS_CLAIM`, `RESOURCE_PRESSURE_DISPATCH_BLOCKED`, `BRIDGE_PACKET_PRIVATE_HUD_BODY`, `RESUME_PASS_OVERCLAIMS_WORK_LANDED`, and `OBSERVE_APPLY_VALIDATION_FAILED`.\n\n###### Validation Anchors\n\nFocused tests:\n\n```text\n./repo-pytest --host-pressure-policy=warn tests/test_bridge_phase_continuity_runtime.py\n```\n\nSource-form runtime:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src python3 -m microcosm_core.organs.bridge_phase_continuity_runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity\n```\n\nCompact card:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src python3 -m microcosm_core.organs.bridge_phase_continuity_runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity --card\n```\n\n###### Validation Result record Path\n\n```text\n./repo-pytest --host-pressure-policy=warn tests/test_bridge_phase_continuity_runtime.py -q --basetemp=/tmp/microcosm_bridge_phase_continuity_runtime_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that synthetic observe/apply continuation packets, heartbeat rows, resource-pressure decisions, resume-once behavior, worker-skip result records, completion-transition result records, source-module manifests, negative cases, validation result records, and generated projections support the declared bridge-continuity fixture contract.\n\nThis module may not claim live bridge transport health, external model access, operator HUD/browser access, prompt-shelf or private-memory disclosure, live phase runtime truth, source-file changes, hosted-public posture, launch-scope decision, publishing-scope decision, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope limit\n\nThe component authorizes only public synthetic observe/apply fixture sign-off. It does not run live bridge transport, use external model services, read operator HUD/browser state, read live phase runtime state, read prompt-shelf or private-memory bodies, prove provider or UI uptime, land work, change source files, include launch operations, or certify whole-system correctness.\n\nRead the five result records as fixture evidence, not as a bridge-health statement. A pass means the declared public continuity contract held for the synthetic fixture and copied body floor.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13707,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "route-card",
       "title": "Route Card",
       "level": 2,
       "excerpt": "bridgephasecontinuity_runtime is the public, executable synthetic transport continuity membrane for detached bridge work. It lets a cold agent validate the disk-first observe/apply handoff without opening live bridge transport, model-output data, operator HUD/browser state, prompt-shelf bodies, private memory, or active phase runtime state.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This paper module exists to make detached bridge continuity testable as a public fixture instead of a trust story about hidden agents or provider sessions. The component asks one bounded question: can a disk-first observe/apply handoff be represented by public synthetic transport inputs, validated through continuation, heartbeat, resource-pressure, resume, worker-skip, and completion result records, and kept below live bridge/provider/UI/source-file changes? The important mechanism is not \"run a bridge.\" It is a continuity membrane: every claim must pass through explicit packet fields, negative-case checks, metadata-only result record writes, and an scope limit that says heartbeat is livene\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This runtime borrows from durable execution, workflow orchestration, leases, and provenance practice. Useful anchors include: Temporal, whose durable-execution model keeps workflow state resumable across process failure and retries. Apache Airflow DAGs, which separate task ordering and retry/timeout policy from task internals. Kubernetes Lease-based leader election, as a prior pattern for liveness evidence, lease renewal, and failover without confusing a heartbeat with work completion. W3C PROV, for provenance records that let readers evaluate how an output was produced. Microcosm borrows the resumable-workflow, DAG, lease, and provenance shapes, but keeps the component to public synthetic\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is the public continuity membrane: six synthetic transport inputs are checked for a single valid resumable job and against a refusal floor, the accepted and rejected paths both feed the fixture-contract and non-public-state checks, and only then are the five metadata-only result records written through the tracked-write gate. The result record roles delimit what a reader can trust. Generated heartbeat, resume, or completion result records into live bridge-health, provider, UI, source-file changes, launch, or whole-system authority.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-pipeline",
       "title": "Mechanism Pipeline",
       "level": 2,
       "excerpt": "The runtime source locus is src/microcosmcore/components/bridgephasecontinuityruntime.py. Its public entry point run reads the fixture manifest, resolves public-relative fixture paths, and validates six synthetic transport inputs: detachedjob.json, continuationpacket.json, heartbeat_rows.jsonl, resourcepressure.json, workerskip_receipt.json, and privatestateforbidden_terms.json. JSONL heartbeat rows are streamed by readrequired_jsonl so malformed rows are findings, not a reason to ingest a whole live heartbeat body. The central validator is validatesynthetictransportcontract. It separates five result record roles: continuation packet, heartbeat, resource pressure, resume result record, and\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that synthetic observe/apply continuation packets, heartbeat rows, resource-pressure decisions, resume-once behavior, worker-skip result records, completion-transition result records, source-module manifests, negative cases, validation result records, and generated projections support the declared bridge-continuity fixture contract. This module may not claim live bridge transport health, external model access, operator HUD/browser access, prompt-shelf or private-memory disclosure, live phase runtime truth, source-file changes, hosted-public posture, launch-scope decision, public sharing decision, implementation correctness beyond the listed witn\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Reader evidence routes from this module to the runtime source locus, fixture manifest, source-module manifest, public result records, and focused regression. A diagram view and an atlas card are generated for this module. This page explains what a reader can infer from them.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "what-it-proves",
       "title": "What It Proves",
       "level": 2,
       "excerpt": "The component proves a bounded public fixture contract: A yielded synthetic job can be resumed only through an explicit continuation packet. Missing packets, missing packet fields, and already consumed packets are rejected. Heartbeat rows stay liveness evidence only; fresh or stale heartbeat rows do not become resume authority or provider/UI uptime evidence. Resource pressure can block dispatch and must be recorded as a blocked decision. Resume success is resume-only; it does not establish work landed without the completion transition result record. Worker-skip result records dedupe a no-op without silently closing the claim. The fixture and result records stay metadata-only for private/liv\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-substrate",
       "title": "Source-Backed System",
       "level": 2,
       "excerpt": "The runtime consumes seven public fixture inputs: observeapplysession_fixture.json detached_job.json continuation_packet.json heartbeat_rows.jsonl resource_pressure.json workerskipreceipt.json privatestateforbidden_terms.json The fixture manifest declares five copied source body imports: codexpathsbodyimport, markdownroutingbodyimport, observememorybodyimport, observesurfacesbodyimport, and observeruntimebodyimport. The component validates the copied target digests from observeruntimesourcemodule_manifest.json; result record output keeps those bodies out of result records and records digest verdicts instead.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "receipt-floor",
       "title": "Result record Floor",
       "level": 2,
       "excerpt": "A passing run writes five canonical result record roles: continuation_packet.json heartbeat.json resource_pressure.json resume_receipt.json completion_transition.json Each result record carries organid, fixtureid, validatorid, checkerid, status, continuationpacketstatus, heartbeatstatus, resourcepressuredecision, resumeoncestatus, duplicateresumerejection, workerskipreceiptstatus, privatestatescan, authorityceiling, anticlaim, and the full result record path set. The runtime also enforces tracked result record-write gating. A direct run to tracked result record paths without MICROCOSMTRACKEDRECEIPTWRITES=1 reports trackedreceiptwritesblocked rather than mutating tracked evidence silently.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The expected negative-case floor is source-declared in the runtime and manifest: missingpacketduplicateresumeandresourceblock continuationpacketmissingrequiredfields heartbeatclaimsresume_authority bridgepacketprivatehudbody staleheartbeatoverclaims_liveness resumesuccessoverclaimsworklanded applyvalidationfailurerollsbackobservepromotion The current result record error-code set includes MISSINGCONTINUATIONPACKET, MISSINGCONTINUATIONPACKETFIELDS, CONTINUATIONPACKETALREADYCONSUMED, HEARTBEATNOTRESUMEAUTHORITY, STALEHEARTBEATLIVENESSCLAIM, RESOURCEPRESSUREDISPATCHBLOCKED, BRIDGEPACKETPRIVATEHUDBODY, RESUMEPASSOVERCLAIMSWORKLANDED, and OBSERVEAPPLYVALIDATIONFAILED.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The component authorizes only public synthetic observe/apply fixture sign-off. It does not run live bridge transport, use external model services, read operator HUD/browser state, read live phase runtime state, read prompt-shelf or private-memory bodies, prove provider or UI uptime, land work, change source files, include launch operations, or certify whole-system correctness. Read the five result records as fixture evidence, not as a bridge-health statement. A pass means the declared public continuity contract held for the synthetic fixture and copied body floor.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-anchors",
       "title": "Validation Anchors",
       "level": 2,
       "excerpt": "Focused tests: Source-form runtime: Compact card:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.bridge_phase_continuity_runtime.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Inputs[\"Six synthetic transport inputs detached job, continuation packet, heartbeat rows, resource pressure, worker-skip result record, forbidden terms\"] --> Transport[\"_validate_synthetic_transport_contract\"] Transport --> Good{\"Valid job? yielded to disk, packet not consumed, fresh heartbeat, phase and continuity match\"} Good -->|\"yes\"| Accept[\"Positive path accepted\"] Good -->|\"no\"| Refuse[\"Refusal floor: missing packet, missing fields, duplicate resume, heartbeat claims resume, stale heartbeat overclaim, dispatch blocked\"] Refuse --> Codes[\"Concrete error codes\"] Accept --> Fixture[\"_validate_fixture_contract source digests, completion finalizer, apply-failure rollback, public boundary\"] Codes --> Fixture Fixture --> Scan[\"private_state scan fixture and transport inputs\"] Scan --> Result records[\"Five metadata-only result records continuation, heartbeat, resource pressure, resume, completion transition\"] Result records --> Gate{\"Tracked result record-write gate\"} Gate -->|\"env set\"| Written[\"Result records written\"] Gate -->|\"env absent\"| Blocked[\"tracked_receipt_writes_blocked\"] Written --> Ceiling[\"Scope limit: no live bridge transport, external model access, HUD/browser/private memory, source-file changes, launch, or whole-system proof\"] Blocked --> Ceiling",
       "source_hash": "sha256:b824d70bb2e87ba950765ff90af8fe74534f4d9164dd40f75f62544fcd6050ac",
       "html_url": "docs/paper-modules.html#paper-module-bridge-phase-continuity-runtime-diagram-1",
       "html_anchor": "paper-module-bridge-phase-continuity-runtime-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bridge_phase_continuity_runtime.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Temporal",
       "url": "https://docs.temporal.io/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "DAGs",
       "url": "https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/dags.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Lease-based leader election",
       "url": "https://kubernetes.io/docs/concepts/cluster-administration/coordinated-leader-election/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "bridge_phase_continuity_runtime",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Bridge Phase Continuity Runtime",
         "url": "components.html#component-bridge_phase_continuity_runtime"
        },
        {
         "id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates synthetic bridge continuity",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.work_landing_and_continuity_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "work landing and continuity controls as transaction-scoped coordination evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bridge_phase_continuity_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14937
    },
    {
     "id": "paper_module.cognitive_operator_registry",
     "title": "Cognitive Operator Registry",
     "relative_href": "docs/paper-modules.html#paper-module-cognitive-operator-registry",
     "read_href": "docs/paper-modules.html#paper-module-cognitive-operator-registry",
     "context_href": "docs/rules-and-ideas.html#paper-module-cognitive-operator-registry",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public cognitive-operator registry fixture validates operator-shape rows, active-operator dogfood result records, anti-sprawl decisions, copied source registry/standard/tool bodies, and scope limits without becoming operator source authority.",
     "summary": "Cognitive Operator Registry is the public evidence membrane for reusable cognition as typed system. It validates public operator rows, dogfood result records with cognition-delta evidence, negative cases for missing fields, missing dogfood, sprawl, operator-voice claims, authority overclaims, and private-source leakage, then checks copied source registry, standard, and validator bodies by digest while keeping bodies out of result records.",
     "authority_ceiling": "Public registry-contract fixture and copied source body evidence only; no live operator execution, registry mutation, source-file changes, external model access, launch-scope decision, private-data equivalence, operator correctness proof, or whole-system correctness.",
     "abstract": "The public cognitive-operator registry fixture validates operator-shape rows, active-operator dogfood result records, anti-sprawl decisions, copied source registry/standard/tool bodies, and scope limits without becoming operator source authority.",
     "teleology": {
      "section_id": "",
      "text": "The public cognitive-operator registry fixture validates operator-shape rows, active-operator dogfood result records, anti-sprawl decisions, copied source registry/standard/tool bodies, and scope limits without becoming operator source authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`cognitive_operator_registry` is the public contract diagnostic for the source system's typed cognitive-operator system. It checks that each public operator row carries the required operator-shape fields, that every `active` operator is backed by a dogfood result record proving it changed a live decision, and that the registry policy declares explicit scope limits before a cold reader trusts the operators as real reusable cognition rather than inspirational prose.\n\n###### Purpose\n\nA team that writes down its reusable thinking moves as a registry tends to accumulate entries faster than it can prove any of them help. The single question this component answers is: which of these listed operators has actually changed a live decision, and which is just a tidy description of one? An entry may only call itself `active` if it points to a dogfood result record, and that result record must carry `cognition_delta_evidence` recording a concrete decision that came out differently because the operator was applied.\n\nThe unusual part is that the check refuses to take a row at its word. Where a result record cites evidence surfaces, command paths, or task-ledger handles, the validator resolves each one against the public system (see `_dogfood_receipt_ref_resolves` and `_record_dogfood_evidence_resolution_findings` in the source). A row whose prose says it was dogfooded but whose evidence does not resolve is recorded as a failure, not a pass. A second check, the anti-sprawl case, flags two operators that share a slug or a near-identical claim unless an accretion decision was recorded, so the registry cannot quietly grow two near copies of the same idea.\n\nThe evidence contract is source-open by default. The validator emits refs, hashes, counts, and verdicts; `secret_exclusion_scan` proves that secrets, account or session material, model-output data bodies, source notes, and account secret-equivalent access material are excluded. Operator bodies are never inlined into the JSON result record, so the positive evidence carries `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n\n###### Prior Art Grounding\n\nThis component borrows from cognitive work analysis, provenance, schema validation, and policy-gated registries. Useful anchors include:\n- Cognitive Work Analysis, summarized in this [information-systems design overview](https://files.eric.ed.gov/fulltext/EJ1082064.pdf), as prior art for analyzing cognitive work in complex sociotechnical systems.\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), for connecting operator claims to activities, agents, and evidence used to evaluate trustworthiness.\n- [JSON Schema](https://json-schema.org/), for the required-shape validation pattern behind public operator rows.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), as a precedent for policy evaluation that remains distinct from the registry data being evaluated.\n\nMicrocosm borrows the cognitive-work, provenance, shape-checking, and policy registry patterns, but keeps this component to a public contract diagnostic. It does not mutate operators, prove operator correctness, expose private operator bodies or source notes, authorize providers, or include launch operations.\n\nIt consumes public `operator_registry.json`, `operator_standard.json`, and `dogfood_index.json` inputs that project real source operator rows and dogfood result records. Its result record contract is source-open by default: `secret_exclusion_scan` proves that secrets, account or browser material, model-output data bodies, source notes, and account secret-equivalent live-access material are excluded, while `public_runtime_refs` point at the real standard, component, sign-off, fixture, bundle, and paper-module system. Bodies are not inlined into JSON result records, so the positive evidence uses `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n\nThe component rejects seven boundary failures:\n- operator rows missing required operator-shape fields\n- active operators with no backing dogfood result record\n- dogfood result records missing `cognition_delta_evidence`\n- near-duplicate operators (identical slug or near-identical claim) with no recorded accretion decision (the anti-sprawl governor case)\n- launch, provider, source-file changes, registry-mutation, or operator-correctness overclaims\n- operator rows that claim operator-voice or source note authority\n- private operator source bodies or model-output data bodies in public inputs\n\nThe exported bundle also imports three verbatim source bodies behind an import membrane: the cognitive-operator registry (`codex/doctrine/cognitive_operators.json`), the cognitive-operator standard (`codex/standards/std_cognitive_operator.json`), and the registry projection/validation tool (`system/lib/cognitive_operator_registry.py`). Each is copied byte-for-byte with a sha256 digest and required anchors; result records carry refs, hashes, counts, and verdicts only.\n\n###### Shape\n\nSource refs\n\nValidator `cognitive_operator_registry validator` Diagram source\n\n```text\nflowchart LR Registry[\"Public operator registry operator ids, roles, runtime refs\"] Standard[\"Operator standard required fields, scope limit\"] Dogfood[\"Dogfood result records cognition-delta evidence\"] Validator[\"cognitive_operator_registry validator\"] Source[\"Copied source bodies registry, standard, validator tool\"] Negative[\"Negative floor missing fields, no dogfood, sprawl, overclaim, private leakage\"] Result record[\"Result records refs, hashes, counts, verdicts; body text omitted\"] Registry --> Validator Standard --> Validator Dogfood --> Validator Source --> Validator Validator --> Negative Validator --> Result record\n```\n\n###### Reader Evidence Routing\n\nRead this module as a public contract diagnostic, not as a glossary of operators or a live execution surface. This page explains the shape a reader should verify; the structured data lives in the JSON files below.\n\nStart with `paper_modules/cognitive_operator_registry.json` for the full module record, then use `standards/std_microcosm_cognitive_operator_registry.json` to check required fields, forbidden authority, public/private boundary rules, and result record expectations. Open `core/fixture_manifests/cognitive_operator_registry.fixture_manifest.json` before inspecting fixtures or copied source modules, because the manifest names the source-open body floor and the body-omission contract.\n\nRead dogfood result records as evidence that an active operator changed a live decision; do not read them as proof that the operator is generally correct. Read negative cases as part of the positive claim: missing roles, missing dogfood, missing cognition-delta evidence, duplicate/sprawl pressure, operator-voice claims, authority overclaims, and private-source leakage must remain rejected.\n\n###### Technical Mechanism\n\nThe runtime mechanism lives in `src/microcosm_core/organs/cognitive_operator_registry.py`. `run()` loads the first-wave public fixture inputs: `operator_registry.json`, `operator_standard.json`, and `dogfood_index.json`. `_positive_findings()` checks that operator rows have required ids, slugs, roles, claims, runtime refs, evidence refs, and scope limits, then requires each active operator to resolve to a dogfood result record with cognition-delta evidence. The dogfood evidence resolver follows public fixture refs and copied bundle handles rather than accepting a row because its prose says it was dogfooded.\n\nNegative pressure is source-declared in `EXPECTED_NEGATIVE_CASES`. `_negative_findings()` exercises missing required fields, active operators without dogfood result records, dogfood rows without cognition-delta evidence, operator sprawl without accretion decisions, operator-voice authority claims, provider/source/launch/correctness overclaims, and private source or model-output data leakage. A pass is therefore not only \"the positive rows parsed\"; it also means the expected refusal classes were observed and recorded.\n\n`run_registry_bundle()` is the body-floor consumer. It executes the same registry contract against `examples/cognitive_operator_registry/exported_cognitive_operator_registry_bundle` and makes `_source_module_manifest_result()` mandatory. The manifest must prove exact copied source bodies for `codex/doctrine/cognitive_operators.json`, `codex/standards/std_cognitive_operator.json`, and `system/lib/cognitive_operator_registry.py`; `_source_open_body_import_summary()` then records body ids, classes, line counts, hashes, and `body_in_receipt: false`. `AUTHORITY_CEILING` keeps those result records below registry mutation, operator correctness, provider authority, source-file changes, launch, and whole-system correctness.\n\n###### Named Proof Consumers\n- `microcosm_core.organs.cognitive_operator_registry.run` is the first-wave fixture consumer. It reads the public registry, standard, and dogfood index, writes the result, board, validation, and sign-off result records, and checks the expected negative floor.\n- `microcosm_core.organs.cognitive_operator_registry.run_registry_bundle` is the exported-bundle consumer. It proves the copied source registry, standard, and validator bodies through source-module manifest equality while keeping copied body text out of result records.\n- `tests/test_cognitive_operator_registry.py::test_cognitive_operator_registry_observes_negative_cases` is the public-contract regression. It asserts that all expected negative cases are observed and that all fixture operators have dogfood result records.\n- `tests/test_cognitive_operator_registry.py::test_cognitive_operator_registry_bundle_validates_runtime_shape` is the bundle-shape regression. It checks operator counts, source-module manifest status, body-material ids, and the metadata-only result record boundary.\n- `tests/test_cognitive_operator_registry.py::test_cognitive_operator_registry_source_modules_are_exact_macro_body_imports` is the exact-copy proof consumer. It byte-compares every manifest source ref with the copied target and verifies the recorded sha256 digests.\n\n###### Validation Result record Path\n\nRun the first-wave fixture into disposable result records from the Microcosm root:\n\nRun the exported bundle through the same component:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.cognitive_operator_registry run-registry-bundle --input examples/cognitive_operator_registry/exported_cognitive_operator_registry_bundle --out /tmp/microcosm_cognitive_operator_registry_bundle\n```\n\n```text\ncd microcosm-substrate\n../repo-pytest tests/test_cognitive_operator_registry.py -q\ncd ..\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe source atlas row carries the matching `paper_module_ref`, `mechanism_refs`, and `code_loci` entries.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module can claim a public cognitive-operator registry contract fixture with source-backed operator-shape checks, active-operator dogfood result record checks, cognition-delta evidence resolution, anti-sprawl accretion checks, expected negative cases, exact copied source body manifest equality, metadata-only result records, and a generated diagram view derived from the module's structured bindings.\n\nIt cannot become source authority for the cognitive-operator registry, mutate operators, prove operator correctness, expose private operator bodies or source notes, authorize providers, change source files, include launch operations or public sharing, or certify whole-system correctness.\n\nIf focused validation reports an exact-copy source-module body mismatch, route that repair through `microcosm_exact_copy_refresh`; do not treat this Markdown projection as source authority for copied source bodies.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThat mechanism states the proof obligation in operational terms: operator rows must carry required shape fields, active operators must have dogfood result records, dogfood result records must include cognition-delta evidence, duplicate or near-duplicate operators must carry an accretion decision, and the exported bundle must prove copied registry, standard, and validator bodies by source module digest before any result record is trusted.\n\nThe generated JSON instance links this module to `concept.architecture_and_navigation_route_contract_bundle`, principles `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-12`, and `P-15`, and axioms `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, and `AX-11`. Those edges frame the module as an architecture-and-navigation contract validator. They do not make the Markdown or generated Atlas card source authority for operator definitions, live operator execution, or provider action.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12831,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A team that writes down its reusable thinking moves as a registry tends to accumulate entries faster than it can prove any of them help. The single question this component answers is: which of these listed operators has actually changed a live decision, and which is just a tidy description of one? An entry may only call itself active if it points to a dogfood result record, and that result record must carry cognitiondeltaevidence recording a concrete decision that came out differently because the operator was applied. The unusual part is that the check refuses to take a row at its word. Where a result record cites evidence surfaces, command paths, or task-ledger handles, the validator resol\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component borrows from cognitive work analysis, provenance, schema validation, and policy-gated registries. Useful anchors include: Cognitive Work Analysis, summarized in this information-systems design overview, as prior art for analyzing cognitive work in complex sociotechnical systems. W3C PROV, for connecting operator claims to activities, agents, and evidence used to evaluate trustworthiness. JSON Schema, for the required-shape validation pattern behind public operator rows. Open Policy Agent, as a precedent for policy evaluation that remains distinct from the registry data being evaluated. Microcosm borrows the cognitive-work, provenance, shape-checking, and policy registry patte\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module as a public contract diagnostic, not as a glossary of operators or a live execution surface. This page explains the shape a reader should verify; the structured data lives in the JSON files below. Start with papermodules/cognitiveoperator_registry.json for the full module record, then use standards/stdmicrocosmcognitiveoperatorregistry.json to check required fields, forbidden authority, public/private boundary rules, and result record expectations. Open core/fixturemanifests/cognitiveoperatorregistry.fixturemanifest.json before inspecting fixtures or copied source modules, because the manifest names the source-open body floor and the body-omission contract. Read dogfood res\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "component and to mechanism.cognitiveoperatorregistry.validatespublicoperator_contract. That mechanism states the proof obligation in operational terms: operator rows must carry required shape fields, active operators must have dogfood result records, dogfood result records must include cognition-delta evidence, duplicate or near-duplicate operators must carry an accretion decision, and the exported bundle must prove copied registry, standard, and validator bodies by source module digest before any result record is trusted. The generated JSON instance links this module to concept.architectureandnavigationroutecontract_bundle, principles P-1, P-2, P-3, P-5, P-6, P-12, and P-15, and axioms AX-\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism lives in src/microcosmcore/components/cognitiveoperator_registry.py. run() loads the first-wave public fixture inputs: operator_registry.json, operatorstandard.json, and dogfoodindex.json. positivefindings() checks that operator rows have required ids, slugs, roles, claims, runtime refs, evidence refs, and scope limits, then requires each active operator to resolve to a dogfood result record with cognition-delta evidence. The dogfood evidence resolver follows public fixture refs and copied bundle handles rather than accepting a row because its prose says it was dogfooded. Negative pressure is source-declared in EXPECTEDNEGATIVECASES. negativefindings() exercises missin\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "microcosmcore.components.cognitiveoperator_registry.run is the first-wave fixture consumer. It reads the public registry, standard, and dogfood index, writes the result, board, validation, and sign-off result records, and checks the expected negative floor. microcosmcore.components.cognitiveoperatorregistry.runregistry_bundle is the exported-bundle consumer. It proves the copied source registry, standard, and validator bodies through source-module manifest equality while keeping copied body text out of result records. tests/testcognitiveoperatorregistry.py::testcognitiveoperatorregistryobservesnegative_cases is the public-contract regression. It asserts that all expected negative cases are\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture into disposable result records from the Microcosm root: Run the exported bundle through the same component: The source atlas row carries the matching papermoduleref, mechanismrefs, and codeloci entries. Generated atlas docs still remain PYTHONPATH=src python3 scripts/buildorganatlas.py --write instead of editing Components.md, ARCHITECTURE.md, AGENT_ROUTES.md, or atlas/agenttaskroutes.json by hand.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim a public cognitive-operator registry contract fixture with source-backed operator-shape checks, active-operator dogfood result record checks, cognition-delta evidence resolution, anti-sprawl accretion checks, expected negative cases, exact copied source body manifest equality, metadata-only result records, and a generated diagram view derived from the module's structured bindings. It cannot become source authority for the cognitive-operator registry, mutate operators, prove operator correctness, expose private operator bodies or source notes, authorize providers, change source files, include launch operations or public sharing, or certify whole-system correctness\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.cognitive_operator_registry.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Registry[\"Public operator registry operator ids, roles, runtime refs\"] Standard[\"Operator standard required fields, scope limit\"] Dogfood[\"Dogfood result records cognition-delta evidence\"] Validator[\"cognitive_operator_registry validator\"] Source[\"Copied source bodies registry, standard, validator tool\"] Negative[\"Negative floor missing fields, no dogfood, sprawl, overclaim, private leakage\"] Result record[\"Result records refs, hashes, counts, verdicts; body text omitted\"] Registry --> Validator Standard --> Validator Dogfood --> Validator Source --> Validator Validator --> Negative Validator --> Result record",
       "source_hash": "sha256:1a21141d734dc88334c530e70d75cf7ca588f70ad7cfc7efce9aa4e906c9bfdf",
       "html_url": "docs/paper-modules.html#paper-module-cognitive-operator-registry-diagram-1",
       "html_anchor": "paper-module-cognitive-operator-registry-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cognitive_operator_registry.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "information-systems design overview",
       "url": "https://files.eric.ed.gov/fulltext/EJ1082064.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "JSON Schema",
       "url": "https://json-schema.org/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs/latest",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "cognitive_operator_registry",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Cognitive Operator Registry",
         "url": "components.html#component-cognitive_operator_registry"
        },
        {
         "id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public operator contract",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cognitive_operator_registry.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14064
    },
    {
     "id": "paper_module.agent_closeout_faithfulness_audit",
     "title": "Agent Completion Faithfulness Audit",
     "relative_href": "docs/paper-modules.html#paper-module-agent-closeout-faithfulness-audit",
     "read_href": "docs/paper-modules.html#paper-module-agent-closeout-faithfulness-audit",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-closeout-faithfulness-audit",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public completion-faithfulness fixture checks commit, ledger-cap, and pytest-span claims with real git/pytest subprocess witnesses while refusing unchecked pass overclaims.",
     "summary": "Agent Completion Faithfulness Audit is the public fixture witness for completion evidence language. It builds a fixture repo, verifies commit and HEAD evidence with git subprocesses, runs pytest for the declared span, checks cap claims against a fixture ledger, validates a copied source-module manifest for agent experience diagnostics, and writes bounded result records that keep source bodies out.",
     "authority_ceiling": "Public fixture and exported-bundle result records only; no arbitrary live commit proof, work log mutation or closure, live Git mutation, external model access, launch-scope decision, broad completion certification, or pytest-pass claim without explicit exit-zero status.",
     "abstract": "The public completion-faithfulness fixture checks commit, ledger-cap, and pytest-span claims with real git/pytest subprocess witnesses while refusing unchecked pass overclaims.",
     "teleology": {
      "section_id": "",
      "text": "The public completion-faithfulness fixture checks commit, ledger-cap, and pytest-span claims with real git/pytest subprocess witnesses while refusing unchecked pass overclaims.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`agent_closeout_faithfulness_audit` checks the kind of sentence an agent writes when it finishes a task: \"I committed the change, closed the ledger item, and the test passed.\" It runs the supplied public fixture evidence through real `git` and `pytest` subprocesses and refuses any claim that the evidence does not actually support.\n\n###### Purpose\n\nWhen an agent reports that work is done, the report is prose. The commit may or may not exist, the ledger row may or may not be there, and \"the test passed\" may mean the test ran, or it may mean nothing was checked at all. This component exists to answer one question over a fixed fixture: is each completion claim backed by an evidence object that genuinely exists, and is a \"passed\" claim backed by an explicit exit-zero status check rather than by the wording of the claim?\n\nThe approach is unusual in that it does not parse the completion prose or score it against a rubric. The fixture's `public_fixture_repo` is copied into a throwaway directory, initialised and committed with real `git` subprocesses, and its `HEAD` is read back with `git rev-parse`. A commit claim passes only when it points at that observed `HEAD`. A declared `pytest` span is run with `python -m pytest <nodeid>` inside that temporary repo, and only the exit code decides whether the span passed. The result record records the run as bytes of work that happened, not as a paraphrase of what the agent said.\n\nThe distinction the audit defends is narrow and easy to lose. \"The span ran\" and \"the span passed\" are separate facts, and a completion sentence that conflates them is the precise failure mode here. A pass claim is admitted only when `pass_status_checked` is true and the subprocess exited zero; a claim that expected a pass without that check is rejected with `CLOSEOUT_PYTEST_PASS_STATUS_NOT_CHECKED`. The same separation applies to commits and ledger caps, so a referenced commit object is not treated as a landed change and a named cap is not treated as closed work.\n\n###### Route Card\n- Component id: `agent_closeout_faithfulness_audit`\n- Accepted-component evidence class: `external_subprocess_witness`\n- Standard: `standards/std_microcosm_agent_closeout_faithfulness_audit.json`\n- Runner: `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py`\n- Fixture input: `fixtures/first_wave/agent_closeout_faithfulness_audit/input`\n- Runtime bundle: `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle`\n- Source manifest: `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle/source_module_manifest.json`\n- Primary result records: `receipts/first_wave/agent_closeout_faithfulness_audit/agent_closeout_faithfulness_audit_result.json`, `receipts/first_wave/agent_closeout_faithfulness_audit/agent_closeout_faithfulness_audit_board.json`, `receipts/first_wave/agent_closeout_faithfulness_audit/agent_closeout_faithfulness_audit_validation_receipt.json`, and result records/sign-off/first_wave/agent_completion_faithfulness_audit_fixture_acceptance.json\n- Generated posture: this paper module is authored doctrine. Refresh them through their owner commands instead of patching them by hand.\n\n###### Shape\n\nThis module is a completion-claim accounting fixture, not a completion oracle. Its single question is: did the supplied public fixture evidence support the completion claims, and did the result record refuse the overclaims that should not pass?\n\nSource refs\n\n3 fixture claims `closeout_claims.json` Audit `agent_closeout_faithfulness_audit.run` 2 cap rows `fixture_ledger.json` declared nodeid `tests/test_closeout_fixture.py` 1 exact-copy source body `source_module_manifest.json` Diagram source\n\n```text\nflowchart TD Claims[completion_claims.json 3 fixture claims] --> Audit[agent_completion_faithfulness_audit.run] Ledger[fixture_ledger.json 2 cap rows] --> Audit Repo[public_fixture_repo git fixture] --> Audit Pytest[tests/test_completion_fixture.py declared nodeid] --> Audit Manifest[source_module_manifest.json 1 exact-copy source body] --> Audit Audit --> Pass[pass result record 3 verified claims] Audit --> Neg[negative-case semantics 4 overclaim classes] Audit --> Ceiling[scope limit no live mutation or launch]\n```\n\nThe accounting is source-backed:\n\nEvidence input Runtime check Result record/accounting field `closeout_claims.json` carries `claim_public_head_exists`, `claim_cap_exists`, and `claim_pytest_span_passed` `evaluate()` loops over the three claim rows in `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py` `claim_count: 3`, `verified_claim_count: 3` `public_fixture_repo` is copied into a temporary git repo `_prepare_public_fixture_repo()` runs `git init`, config, add, commit, and `rev-parse HEAD` subprocesses `git_subprocess_count: 6`, `head_verified_by_subprocess: true` `fixture_ledger.json` names fixture cap rows task_ledger_cap claims must match task_ledger_caps[].cap_id `cap_fixture_closeout_receipt_exists` is accepted; missing caps emit `CLOSEOUT_FAKE_CAP_CLAIM` `tests/test_closeout_fixture.py::test_public_fixture_addition` is the declared pytest span `evaluate()` runs `python -m pytest <nodeid> -q` and records return code, `span_ran`, and explicit pass-status checking `pytest_subprocess_count: 1`, `pytest_span_ran_count: 1`, `pytest_pass_status_checked_count: 1` `source_module_manifest.json` names one copied source source body the bundle validator checks digest equality, line count, required anchors, and metadata-only result record posture `module_count: 1`, `line_count: 1703`, `sha256_match: true`, `body_in_receipt: false`\n\nNegative cases are part of the Shape rather than an appendix because they define the claim boundary. `EXPECTED_NEGATIVE_CASES` names fake commit, fake cap, fake pytest node, and unchecked-pytest-pass classes; the focused tests assert the first three directly against fixture mutation and assert unchecked pass rejection against `CLOSEOUT_PYTEST_PASS_STATUS_NOT_CHECKED`. The runtime-bundle result record observes all four classes, so a cold reader can distinguish \"the span ran\" from \"the pass claim had exit-zero evidence.\"\n\nThe source-body route is deliberately narrow. The exported bundle copies exactly `system/lib/agent_experience_diagnostics.py` to `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle/source_modules/system/lib/agent_experience_diagnostics.py`; the manifest carries the matching digest, `1703` lines, required anchors `Agent Experience Grand Rounds` and completion, and `body_in_receipt: false`. Result records carry refs, hashes, counts, verdicts, and scope boundaries only. They do not carry copied body text, private root paths, model-output data, account or browser state, live work log authority, live work log authority, source-file changes, launch-scope decision, or whole-system completion truth.\n\n###### Technical Mechanism\n\nThe fixture validator is centered on `evaluate()` in `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py`. It loads `closeout_claims.json` and `fixture_ledger.json`, copies `public_fixture_repo` into a temporary repository, initializes and commits that copy with real `git` subprocesses, and records the resulting HEAD through `git rev-parse HEAD`. Commit claims pass only when the claim ref is `HEAD` or the actual subprocess-observed HEAD; fixture cap claims pass only when the cap id appears in the fixture ledger.\n\nFor pytest claims, `evaluate()` runs `python -m pytest <nodeid> -q` inside the temporary public fixture repo. A span can be counted as observed when the nodeid runs, but a pass claim is accepted only when `pass_status_checked` is true and the pytest subprocess exits zero. The same source file carries `evaluate_negative_case()`, which mutates one claim row at a time to force the fake commit, fake cap, fake pytest node, and unchecked pass paths. The expected error codes are declared in `EXPECTED_NEGATIVE_CASES`, so the negative floor is source-bound rather than inferred from prose.\n\nThe exported-bundle path uses `run_agent_closeout_bundle()` against `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle`. That path reuses the same evaluator while making the source-module manifest floor mandatory: the copied diagnostic body must match the manifest digest, include required anchors, and remain absent from result records. `AUTHORITY_CEILING` then records the scope boundaries in machine-readable form: no live repo mutation, no launch-scope decision, no work log closure, and no pytest-pass claim without exit-zero evidence.\n\n###### Named Proof Consumers\n- `microcosm_core.organs.agent_closeout_faithfulness_audit.run` is the first-wave fixture consumer. It materializes the public fixture repo, ledger, completion-claim rows, semantic negative cases, validation result record, board, and sign-off result record.\n- `microcosm_core.organs.agent_closeout_faithfulness_audit.run_agent_closeout_bundle` is the exported-bundle consumer. It validates the source-open bundle and the copied diagnostic body manifest while preserving `body_in_receipt: false`.\n- `microcosm_core.organs.agent_closeout_faithfulness_audit.evaluate` is the subprocess witness consumer. It checks commit, cap, and pytest-span claims against actual fixture evidence instead of accepting completion prose.\n- `microcosm_core.organs.agent_closeout_faithfulness_audit.evaluate_negative_case` is the falsification consumer for fake commit, fake cap, fake nodeid, and unchecked pytest-pass overclaims.\n- `tests/test_agent_closeout_faithfulness_audit.py` is the focused regression consumer. It asserts the public subprocess witness path, fake-claim rejections, semantic negative-case evaluation, exported-bundle metadata-only source manifest behavior, digest-mismatch rejection, and pytest-capable interpreter selection.\n\n###### First Commands\n\nFrom `microcosm-substrate`:\n\nValidate the exported bundle when the question is whether the public source-open copy still matches the declared source body:\n\n###### What It Proves\n\nThis component checks completion claims against public fixture evidence instead of trusting completion prose. A positive run proves four things:\n- the fixture repo exists and the referenced commit object is visible to real `git` subprocesses;\n- fixture `HEAD` is checked by subprocess evidence rather than by prose;\n- the declared `pytest` span actually ran;\n- work log style cap claims only point at rows present in the fixture ledger.\n\nThe useful distinction is narrow: `verified` means the referenced evidence object exists or the pytest span ran. A claim that a pytest span passed is valid only when the result record checked an explicit exit-zero status. That is the reader value of this component: it separates \"I referenced a test\" from \"I proved the test passed.\"\n\n###### Prior Art Grounding\n\nThis component is grounded in claim-verification and reproducibility patterns rather than in trust of summary prose. [FEVER](https://arxiv.org/abs/1803.05355) popularized fact extraction and verification as a separate task over cited evidence, while [TruthfulQA](https://arxiv.org/abs/2109.07958) made explicit that fluent model answers can be misleading without a truthfulness check. The artifact-review tradition also motivates separating a claim, its artifact, and its validation evidence instead of treating a report as self-validating.\n\nMicrocosm borrows that verification posture for agent completion: commit refs, work log refs, pytest spans, subprocess witnesses, and pass-status checks must line up before completion language is admitted. It does not certify all live completion prose or turn a referenced test into a passed test without exit-zero evidence.\n\n###### Source-Backed System\n\nThe source-open body import is a single exact source body:\n- `system/lib/agent_experience_diagnostics.py`\n\nThe copied target is:\n- `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle/source_modules/system/lib/agent_experience_diagnostics.py`\n\nThe manifest records:\n- `source_to_target_relation: exact_copy`;\n- `body_copied: true`;\n- `body_in_receipt: false`;\n- a 1703-line body;\n- matching source and target sha256 digests;\n- required anchors `Agent Experience Grand Rounds` and completion.\n\nResult records carry refs, hashes, counts, verdicts, and scope boundaries only.\n\n###### Result record Floor\n\nA passing fixture run emits:\n- `agent_closeout_faithfulness_audit_result.json`\n- `agent_closeout_faithfulness_audit_board.json`\n- `agent_closeout_faithfulness_audit_validation_receipt.json`\n- `agent_closeout_faithfulness_audit_fixture_acceptance.json`\n\nA passing runtime-bundle run emits:\n- `exported_agent_closeout_faithfulness_audit_bundle_validation_result.json`\n- `agent_closeout_faithfulness_audit_board.json`\n- `agent_closeout_faithfulness_audit_validation_receipt.json`\n\nThe first-wave result must show:\n- `status: pass`;\n- `real_substrate_disposition: real_substrate_capsule`;\n- `body_in_receipt: false`;\n- `source_module_manifest.status: pass`;\n- `all_expected_digests_matched: true`;\n- `all_required_anchors_present: true`;\n- `secret_exclusion_scan.blocking_hit_count: 0`;\n- `receipt_body_scan.status: pass`.\n\nThe exercise floor is:\n- three verified completion claims;\n- six git subprocess witnesses;\n- one pytest subprocess witness;\n- one checked pass status;\n- one ran pytest span;\n- `head_verified_by_subprocess: true`.\n\n###### Negative Cases\n\nThe current negative-case floor is:\n- `fake_commit_claim` -> `CLOSEOUT_FAKE_COMMIT_CLAIM`\n- `fake_cap_claim` -> `CLOSEOUT_FAKE_CAP_CLAIM`\n- `fake_test_claim` -> `CLOSEOUT_FAKE_TEST_CLAIM`\n- `unchecked_pass_claim` -> `CLOSEOUT_PYTEST_PASS_STATUS_NOT_CHECKED`\n\nThese cases are the claim-language guardrail. If they stop appearing in observed negative cases, the component no longer proves that public completion result records reject fabricated commit, cap, test-node, or unchecked-pytest-pass claims.\n\n###### Evidence Binding\n- JSON bundle authority: `core/paper_module_capsules.json#paper_module.agent_closeout_faithfulness_audit`.\n- Mechanism source: `core/mechanism_sources.json#mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims`.\n- Component atlas edge: `core/organ_atlas.json#agent_closeout_faithfulness_audit`.\n- Runtime source: `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py`.\n- First command: PYTHONPATH=src python3 -m microcosm_core.components.agent_completion_faithfulness_audit run --input fixtures/first_wave/agent_completion_faithfulness_audit/input --out result records/first_wave/agent_completion_faithfulness_audit --sign-off-out result records/sign-off/first_wave/agent_completion_faithfulness_audit_fixture_acceptance.json.\n\n###### Reader Evidence Routing\n- Start with the Route Card and JSON Bundle Binding to identify the component, standard, source row, runner, fixture input, exported bundle, and result record surfaces.\n- For behavior questions, read `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py` and the focused tests before trusting this prose.\n- For source-open body questions, read the exported bundle's `source_module_manifest.json`; the manifest is the evidence for exact-copy relation, digest match, anchor match, and metadata-only result record posture.\n- For claim-language questions, read the Negative Cases and Result record Expectations together; the pass path only matters if the overclaim cases still fail.\n- Treat generated component Markdown, atlas cards, graphs, health files, and runtime result records as navigation or validation projections. They do not become source authority for broader completion truth.\n\n###### Validation Result record Path\n\nThe focused proof consumer is `tests/test_agent_closeout_faithfulness_audit.py`. A passing result record has to show that completion language was checked against public fixture evidence: referenced commit objects, fixture work log rows, `git` subprocess witnesses, `pytest` subprocess witnesses, explicit pass-status checks, negative completion cases, and the exported source-module manifest. It must not rely on completion prose as its own proof.\n\n```text\n./repo-pytest tests/test_agent_closeout_faithfulness_audit.py -q --basetemp=/tmp/microcosm_agent_closeout_faithfulness_audit_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nFor the focused test, the result record boundary is the asserted shape: three verified completion claims, at least five `git` subprocess witnesses, one `pytest` subprocess witness, one ran pytest span, one checked pass-status row, `head_verified_by_subprocess=true`, source-module digest and required-anchor matches, metadata-only result record posture, and semantic observation of the four negative completion classes. For the corpus check, the result record only proves bundle/instance parity; it does not close live work log work, mutate live work log state, certify arbitrary completion prose, prove launch-scope decision, or turn a referenced pytest span into a passed span without exit-zero evidence.\n\n###### Validation Anchors\n\nFocused coverage lives in `tests/test_agent_closeout_faithfulness_audit.py` and checks:\n- public git and pytest subprocess witness behavior;\n- fake commit rejection;\n- unchecked pytest pass rejection;\n- fake cap claim rejection;\n- fake pytest node id rejection;\n- metadata-only source manifest behavior in the exported bundle;\n- source-module digest mismatch rejection;\n- pytest-capable Python selection.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that completion claims are checked against referenced commit objects, fixture work log rows, pytest subprocess witnesses, explicit pass-status checks, negative completion cases, a copied diagnostic body, source-module manifest digest equality, metadata-only result record posture, and validation result records.\n\nThis module may not claim live completion truth, live work log mutation, live work log mutation, live Git mutation, external model access, source-file changes, launch-scope decision, publishing-scope decision, deployment posture, all-agent faithfulness, formal-result correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope limit\n\nThis component is a public fixture witness for completion evidence. It does not:\n- prove arbitrary live commits landed;\n- close or mutate work log work;\n- mutate Git state;\n- include launch operations;\n- use external model services;\n- certify all completion prose;\n- turn a ran pytest span into a passed span without an explicit exit-zero check.\n\nIts useful claim is narrower: over the supplied fixture repo, fixture ledger, completion claims, and copied diagnostic body, the component proves that completion evidence references are checked and that specific overclaims are refused.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThat mechanism is active in `core/mechanism_sources.json` and says the component validates public completion evidence claims through fixture commit objects, fixture HEAD evidence, `git` subprocesses, `pytest` span execution, explicit pass-status checks, fixture-ledger cap rows, copied source-module digests, and stable overclaim negative cases before writing metadata-only result records.\n\nThe doctrine edge is narrow and constructive. The JSON instance reports `concept.agent_reliability_and_safety_validator_bundle`, principles `P-1` and `P-2`, axiom `AX-1`, and dependency `paper_module.durable_agent_work_landing_replay`; those edges explain why this module is a validator-bundle proof instrument rather than a general completion truth oracle. The generated Mermaid and Atlas edges are navigation result records for that binding, not launch or correctness authority.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 19829,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "When an agent reports that work is done, the report is prose. The commit may or may not exist, the ledger row may or may not be there, and \"the test passed\" may mean the test ran, or it may mean nothing was checked at all. This component exists to answer one question over a fixed fixture: is each completion claim backed by an evidence object that genuinely exists, and is a \"passed\" claim backed by an explicit exit-zero status check rather than by the wording of the claim? The approach is unusual in that it does not parse the completion prose or score it against a rubric. The fixture's publicfixturerepo is copied into a throwaway directory, initialised and committed with real git subprocesse\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "route-card",
       "title": "Route Card",
       "level": 2,
       "excerpt": "Component id: agentcompletionfaithfulness_audit Accepted-component evidence class: externalsubprocesswitness Standard: standards/stdmicrocosmagentcompletionfaithfulness_audit.json Runner: src/microcosmcore/components/agentcompletionfaithfulnessaudit.py Fixture input: fixtures/firstwave/agentcompletionfaithfulnessaudit/input Runtime bundle: examples/agentcompletionfaithfulnessaudit/exportedagentcompletionfaithfulnessauditbundle Source manifest: examples/agentcompletionfaithfulnessaudit/exportedagentcompletionfaithfulnessauditbundle/sourcemodulemanifest.json Primary result records: result records/firstwave/agentcompletionfaithfulnessaudit/agentcompletionfaithfulnessauditresult.json, result re\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that completion claims are checked against referenced commit objects, fixture work log rows, pytest subprocess witnesses, explicit pass-status checks, negative completion cases, a copied diagnostic body, source-module manifest digest equality, metadata-only result record posture, and validation result records. This module may not claim live completion truth, live work log mutation, live work log mutation, live Git mutation, external model access, source-file changes, launch-scope decision, public sharing decision, deployment posture, all-agent faithfulness, formal-result correctness beyond the listed witnesses, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "agentcompletionfaithfulness_audit component and to mechanism.agentcompletionfaithfulnessaudit.validatescompletionevidenceclaims. That mechanism is active in core/mechanism_sources.json and says the component validates public completion evidence claims through fixture commit objects, fixture HEAD evidence, git subprocesses, pytest span execution, explicit pass-status checks, fixture-ledger cap rows, copied source-module digests, and stable overclaim negative cases before writing metadata-only result records. The doctrine edge is narrow and constructive. The JSON instance reports concept.agentreliabilityandsafetyvalidator_bundle, principles P-1 and P-2, axiom AX-1, and dependency papermodule.\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This module is a completion-claim accounting fixture, not a completion oracle. Its single question is: did the supplied public fixture evidence support the completion claims, and did the result record refuse the overclaims that should not pass? The accounting is source-backed: Negative cases are part of the Shape rather than an appendix because they define the claim boundary. EXPECTEDNEGATIVECASES names fake commit, fake cap, fake pytest node, and unchecked-pytest-pass classes; the focused tests assert the first three directly against fixture mutation and assert unchecked pass rejection against CompletionPYTESTPASSSTATUSNOT_CHECKED. The runtime-bundle result record observes all four classes\u2026",
       "block_kinds": [
        "diagram",
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The fixture validator is centered on evaluate() in src/microcosmcore/components/agentcompletionfaithfulnessaudit.py. It loads completionclaims.json and fixtureledger.json, copies publicfixturerepo into a temporary repository, initializes and commits that copy with real git subprocesses, and records the resulting HEAD through git rev-parse HEAD. Commit claims pass only when the claim ref is HEAD or the actual subprocess-observed HEAD; fixture cap claims pass only when the cap id appears in the fixture ledger. For pytest claims, evaluate() runs python -m pytest <nodeid> -q inside the temporary public fixture repo. A span can be counted as observed when the nodeid runs, but a pass claim is acc\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "microcosmcore.components.agentcompletionfaithfulnessaudit.run is the first-wave fixture consumer. It materializes the public fixture repo, ledger, completion-claim rows, semantic negative cases, validation result record, board, and sign-off result record. microcosmcore.components.agentcompletionfaithfulnessaudit.runagentcompletion_bundle is the exported-bundle consumer. It validates the source-open bundle and the copied diagnostic body manifest while preserving bodyinreceipt: false. microcosmcore.components.agentcompletionfaithfulnessaudit.evaluate is the subprocess witness consumer. It checks commit, cap, and pytest-span claims against actual fixture evidence instead of accepting completio\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "first-commands",
       "title": "First Commands",
       "level": 2,
       "excerpt": "From microcosm-substrate: Validate the exported bundle when the question is whether the public source-open copy still matches the declared source body:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-proves",
       "title": "What It Proves",
       "level": 2,
       "excerpt": "This component checks completion claims against public fixture evidence instead of trusting completion prose. A positive run proves four things: the fixture repo exists and the referenced commit object is visible to real git subprocesses; fixture HEAD is checked by subprocess evidence rather than by prose; the declared pytest span actually ran; work log style cap claims only point at rows present in the fixture ledger. The useful distinction is narrow: verified means the referenced evidence object exists or the pytest span ran. A claim that a pytest span passed is valid only when the result record checked an explicit exit-zero status. That is the reader value of this component: it separates\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in claim-verification and reproducibility patterns rather than in trust of summary prose. FEVER popularized fact extraction and verification as a separate task over cited evidence, while TruthfulQA made explicit that fluent model answers can be misleading without a truthfulness check. The artifact-review tradition also motivates separating a claim, its artifact, and its validation evidence instead of treating a report as self-validating. Microcosm borrows that verification posture for agent completion: commit refs, work log refs, pytest spans, subprocess witnesses, and pass-status checks must line up before completion language is admitted. It does not certify all\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-substrate",
       "title": "Source-Backed System",
       "level": 2,
       "excerpt": "The source-open body import is a single exact source body: system/lib/agentexperiencediagnostics.py The copied target is: examples/agentcompletionfaithfulnessaudit/exportedagentcompletionfaithfulnessauditbundle/sourcemodules/system/lib/agentexperience_diagnostics.py The manifest records: sourcetotargetrelation: exactcopy; body_copied: true; bodyinreceipt: false; a 1703-line body; matching source and target sha256 digests; required anchors Agent Experience Grand Rounds and completion. Result records carry refs, hashes, counts, verdicts, and scope boundaries only.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "receipt-floor",
       "title": "Result record Floor",
       "level": 2,
       "excerpt": "A passing fixture run emits: agentcompletionfaithfulnessauditresult.json agentcompletionfaithfulnessauditboard.json agentcompletionfaithfulnessauditvalidation_receipt.json agentcompletionfaithfulnessauditfixture_acceptance.json A passing runtime-bundle run emits: exportedagentcompletionfaithfulnessauditbundlevalidation_result.json agentcompletionfaithfulnessauditboard.json agentcompletionfaithfulnessauditvalidation_receipt.json The first-wave result must show: status: pass; realsubstratedisposition: realsubstratecapsule; bodyinreceipt: false; sourcemodulemanifest.status: pass; allexpecteddigests_matched: true; allrequiredanchors_present: true; secretexclusionscan.blockinghitcount: 0; receip\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The focused proof consumer is tests/testagentcompletionfaithfulnessaudit.py. A passing result record has to show that completion language was checked against public fixture evidence: referenced commit objects, fixture work log rows, git subprocess witnesses, pytest subprocess witnesses, explicit pass-status checks, negative completion cases, and the exported source-module manifest. It must not rely on completion prose as its own proof. result record or generated projection surfaces: For the focused test, the result record boundary is the asserted shape: three verified completion claims, at least five git subprocess witnesses, one pytest subprocess witness, one ran pytest span, one checked p\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The current negative-case floor is: fakecommitclaim -> CompletionFAKECOMMIT_CLAIM fakecapclaim -> CompletionFAKECAP_CLAIM faketestclaim -> CompletionFAKETEST_CLAIM uncheckedpassclaim -> CompletionPYTESTPASSSTATUSNOT_CHECKED These cases are the claim-language guardrail. If they stop appearing in observed negative cases, the component no longer proves that public completion result records reject fabricated commit, cap, test-node, or unchecked-pytest-pass claims.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component is a public fixture witness for completion evidence. It does not: prove arbitrary live commits landed; close or mutate work log work; mutate Git state; include launch operations; use external model services; certify all completion prose; turn a ran pytest span into a passed span without an explicit exit-zero check. Its useful claim is narrower: over the supplied fixture repo, fixture ledger, completion claims, and copied diagnostic body, the component proves that completion evidence references are checked and that specific overclaims are refused.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-anchors",
       "title": "Validation Anchors",
       "level": 2,
       "excerpt": "Focused coverage lives in tests/testagentcompletionfaithfulnessaudit.py and checks: public git and pytest subprocess witness behavior; fake commit rejection; unchecked pytest pass rejection; fake cap claim rejection; fake pytest node id rejection; metadata-only source manifest behavior in the exported bundle; source-module digest mismatch rejection; pytest-capable Python selection.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-binding",
       "title": "Evidence Binding",
       "level": 2,
       "excerpt": "JSON bundle authority: core/papermodulecapsules.json#papermodule.agentcompletionfaithfulnessaudit. Mechanism source: core/mechanismsources.json#mechanism.agentcompletionfaithfulnessaudit.validatescompletionevidence_claims. Component atlas edge: core/organatlas.json#agentcompletionfaithfulnessaudit. Runtime source: src/microcosmcore/components/agentcompletionfaithfulnessaudit.py. First command: PYTHONPATH=src python3 -m microcosmcore.components.agentcompletionfaithfulnessaudit run --input fixtures/firstwave/agentcompletionfaithfulnessaudit/input --out result records/firstwave/agentcompletionfaithfulnessaudit --sign-off-out result records/sign-off/firstwave/agentcompletionfaithfulnessauditfix\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with the Route Card and JSON Bundle Binding to identify the component, standard, source row, runner, fixture input, exported bundle, and result record surfaces. For behavior questions, read src/microcosmcore/components/agentcompletionfaithfulnessaudit.py and the focused tests before trusting this prose. For source-open body questions, read the exported bundle's sourcemodulemanifest.json; the manifest is the evidence for exact-copy relation, digest match, anchor match, and metadata-only result record posture. For claim-language questions, read the Negative Cases and Result record Expectations together; the pass path only matters if the overclaim cases still fail. Treat generated compon\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.agent_closeout_faithfulness_audit.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Claims[completion_claims.json 3 fixture claims] --> Audit[agent_completion_faithfulness_audit.run] Ledger[fixture_ledger.json 2 cap rows] --> Audit Repo[public_fixture_repo git fixture] --> Audit Pytest[tests/test_completion_fixture.py declared nodeid] --> Audit Manifest[source_module_manifest.json 1 exact-copy source body] --> Audit Audit --> Pass[pass result record 3 verified claims] Audit --> Neg[negative-case semantics 4 overclaim classes] Audit --> Ceiling[scope limit no live mutation or launch]",
       "source_hash": "sha256:7b7db3af29ea8c60ea00b4cf5b5d645d16537643456cde92cce96a2d85a2e046",
       "html_url": "docs/paper-modules.html#paper-module-agent-closeout-faithfulness-audit-diagram-1",
       "html_anchor": "paper-module-agent-closeout-faithfulness-audit-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_closeout_faithfulness_audit.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "FEVER",
       "url": "https://arxiv.org/abs/1803.05355",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "TruthfulQA",
       "url": "https://arxiv.org/abs/2109.07958",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.durable_agent_work_landing_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Durable Agent Work-Landing Replay",
         "url": "paper-modules.html#paper-module-durable-agent-work-landing-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agent_closeout_faithfulness_audit",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agent Completion Faithfulness Audit",
         "url": "components.html#component-agent_closeout_faithfulness_audit"
        },
        {
         "id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates completion evidence claims",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_closeout_faithfulness_audit.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 20891
    },
    {
     "id": "paper_module.cold_reader_route_map",
     "title": "Cold-Reader Route Map",
     "relative_href": "docs/paper-modules.html#paper-module-cold-reader-route-map",
     "read_href": "docs/paper-modules.html#paper-module-cold-reader-route-map",
     "context_href": "docs/rules-and-ideas.html#paper-module-cold-reader-route-map",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public cold-reader route-map fixture validates first-run command order, docs refs, result record refs, scope limits, copied cold-entry source-module digests, and non-public-state exclusion without becoming route registry control.",
     "summary": "Cold-Reader Route Map is the public first-run route membrane. It validates route rows, route-to-result record bindings, ordinal first-run sequencing, command/docs/result record refs, launch/provider/private-source overclaim rejection, exact copied source cold-entry source modules, and metadata-only result records so a cold agent can see what to run first and what proof bounds each row.",
     "authority_ceiling": "Public route-map fixture, exported-bundle result records, and copied source cold-entry body evidence only; no route registry control, external model access, source-file changes, launch-scope decision, private-data equivalence, trading or financial decisions, or whole-system correctness.",
     "abstract": "The public cold-reader route-map fixture validates first-run command order, docs refs, result record refs, scope limits, copied cold-entry source-module digests, and non-public-state exclusion without becoming route registry control.",
     "teleology": {
      "section_id": "",
      "text": "The public cold-reader route-map fixture validates first-run command order, docs refs, result record refs, scope limits, copied cold-entry source-module digests, and non-public-state exclusion without becoming route registry control.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`cold_reader_route_map` makes Microcosm's first ten minutes executable. It validates a public route map whose rows bind the first-run sequence to runnable commands, docs refs, result record refs, and scope limits.\n\n###### Purpose\n\nA cold technical reader should not have to infer the product path from a long README or raw result record tree. The route map answers one question: what should I run first, and what evidence proves that path is wired?\n\nThe unusual part is how the validator checks that proof. It does not merely confirm that each route row carries the right fields. It replays every route against real source: each row's command, its docs refs, its result record refs, and the human-readable signals it claims to show are matched against the actual text of copied source modules and public docs. A command whose material tokens do not appear anywhere in that source corpus is blocked, as is a docs ref that does not resolve to a real heading and a result record ref that does not open a pass-status result record. So a route cannot promise a command the system does not actually run, which is the failure mode a hand-written quick-start guide drifts into the moment the commands change underneath it.\n\nThe evidence contract is source-open by default: public route cards, route result record bindings, route policy, exported bundle refs, and generated result records carry the system, while `secret_exclusion_scan` excludes only private source bodies, model-output data, account or browser material, secrets, and account secret-equivalent live-access data. Result record bodies are not inlined; they are represented by `body_in_receipt: false` plus public runtime refs.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR subgraph Entry[\"First-screen entry\"] Project[\"Public project path repo -> .microcosm\"] First[\"First-screen card claim frame, first command, evidence legend, exit rule\"] end subgraph Accounting[\"Route-map accounting\"] Route[\"Ordered route rows command, result record ref, evidence class\"] Ceiling[\"Scope boundary and scope limit attached to each row\"] end subgraph ReaderBranch[\"Reader branch\"] Branch[\"Reader branch choose one first action\"] Safety[\"Safety/evals status, authority, workingness\"] Hiring[\"Hiring reviewer first-screen card, legibility scorecard\"] Developer[\"Peer developer tour, observe, explain or compile\"] end subgraph Boundary[\"Proof boundary\"] Drilldown[\"Drilldowns tour, status, explain, observe, compile, serve\"] Result record[\"Result records and route refs public refs only; body_in_receipt false\"] end Project --> First First --> Route Route --> Ceiling Route --> Branch Branch --> Safety Branch --> Hiring Branch --> Developer Safety --> Drilldown Hiring --> Drilldown Developer --> Drilldown Ceiling --> Result record Drilldown --> Result record\n```\n\n###### Reader Evidence Routing\n\nStart with `core/paper_module_capsules.json::paper_modules[13:paper_module.cold_reader_route_map]`, then read the generated JSON projection for the resolved relationships. A diagram view is generated for this module and an atlas card entry is available. The route-map fixture, exported bundle, source-module manifests, and temporary result records are evidence for replay shape. This Markdown gives cold readers the interpretation order, source-linked only.\n\n###### Prior Art Grounding\n\nThis component is grounded in documentation systems that treat reader state and task shape as first-class. [Diataxis](https://diataxis.fr/) separates tutorials, how-to guides, reference, and explanation so readers are not forced through one undifferentiated documentation pile. Knuth's [literate programming](https://cs.stanford.edu/~knuth/lp.html) is an older anchor for the idea that executable systems should be written for human comprehension as well as machine execution.\n\nMicrocosm borrows the reader-route pattern: first command, result record ref, evidence class, scope boundary, scope limit, and next drilldown are ordered for a cold reader. It does not make the route map source authority or substitute documentation sequence for validator evidence.\n\n###### Reader-Specific Evidence Routing\n\nThe route map should make the evidence-count frame visible before the reader chooses a drilldown. Honest counters are not progress badges:\n- A safety/evals engineer follows `microcosm status --card`, `microcosm authority --card`, and `microcosm workingness --card` first. The useful question is whether each claim names its evidence class, validator, failure mode, and scope limit.\n- A hiring reviewer follows the first-screen card and legibility scorecard first. The useful question is whether small verified counts are framed as honest proof boundaries instead of hidden or inflated.\n- A peer developer follows `microcosm tour --card`, `microcosm observe --card`, and then full `microcosm observe`, `microcosm compile`, or `microcosm explain` as drilldowns. The useful question is whether a fresh clone can reproduce the route/work/event/evidence chain locally without opening full event rows first.\n\nThe route map must therefore preserve both the command order and the evidence interpretation order: command, result record ref, evidence class, scope boundary, scope limit, then deeper route. Reader-specific branches may hide other branches, but they may not hide the accounting frame that prevents \"1 verified import\" from being read as either failure or marketing.\n\n###### One-Screen Handoff Contract\n\nThe route map consumes the first-screen card as the handoff, not as another route row. A cold reader should see this sequence:\n1. First-screen card: claim frame, `microcosm hello <project>`, shared proof, evidence legend, structural join, reader rail, and exit rule.\n2. Route map: the accepted command order, with result record refs and scope limits attached to each command.\n3. Reader branch: one audience-specific first action, one proof surface, one success criterion, and one next drilldown.\n\nThe handoff fails when the first screen turns into a complete route inventory, or when the route map assumes the reader already understands evidence classes. The first screen should compress; the route map should sequence; the reveal should demonstrate the path against public result records.\n\n###### Comparison-Backed Route Rows\n\nEach route row should make the unusual discipline visible by naming the normal failure mode it is avoiding. The route map is not just a command list; it is a sequence of claim-boundary checks:\n\nRoute row field Failure avoided Required reader cue `command_ref` Prose-only claims about what runs. Show the exact local command before the claim it supports. `receipt_ref` Trusting generated summaries as source authority. Point to the result record or validator that bounds the row. `evidence_class` Treating all evidence as equal proof. Label body import, subprocess witness, projection, validator, or fixture evidence. anti_claim Letting a successful demo imply launch, production, provider, or proof authority. State the forbidden read beside the positive claim. `failure_mode_ref` Governance looking like abstract ceremony. Name the concrete overclaim or missing-standard case this row catches.\n\nRows that omit the comparison cue are still technically navigable, but they make the rigor invisible to a cold reader. The validator should prefer a shorter row with command, result record, class, scope boundary, and failure mode over a longer row that lists more components without explaining what each boundary prevents.\n\n###### Observable Drilldown Order\n\nBrowser-first readers follow the same route map as terminal-first readers. The route order is compressed, not replaced:\n1. First-screen card or compact browser board.\n2. `microcosm tour --card <project>` as the shared behavior proof.\n3. Selected route plus work/event/evidence refs.\n4. Compact observatory view for the same route.\n5. Full route map, result records, standards, and raw JSON drilldowns.\n\nThe compact observatory row must carry the same command ref, result record ref, evidence class, scope boundary, and scope limit as the terminal route row. If the browser board cannot show those fields, it is a preview only and cannot serve as the cold-reader route handoff.\n\n`readme_onboarding_route` is the selected route only for projects with a README; folders without one still get a route/work/event/evidence path through the selected route emitted by `tour` and `compile`.\n\nEach route card must include a command and public docs refs. Each route id must also resolve to at least one result record ref. The sequence must be ordinal sorted so the public entry does not drift into a bag of impressive but unordered components.\n\n###### Validation\n\nThe fixture observes negative cases for missing command refs, missing result record refs, route sequence gaps, launch/provider overclaims, and private source body fields. The exported bundle omits negative cases and validates the real runtime shape used by `microcosm run`, with synthetic result record stand-ins explicitly disallowed as product evidence. If focused validation reports an exact-copy source-module body mismatch, route that repair through `microcosm_exact_copy_refresh`; do not treat this Markdown projection as the authority for copied source bodies.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThe focused pytest file is the proof consumer for this Markdown section. It asserts the fixture status, ten-route command and result record-ref counts, front-door route order, expected negative cases, route-source replay support, exported bundle shape, copied source-module digest and anchor matches, source-open fixture-manifest counts, no source bodies in public result records, streamed line-count and digest handling, and fresh exported-bundle card reuse. The corpus check verifies that this page remains in the 98-module paper-module set and that the JSON bundle, generated Mermaid, Atlas card, and Markdown projection stay mutually consistent.\n\nThese result records validate the route-map fixture, exported bundle result records, copied cold-entry evidence, and paper-module corpus membership only; they do not grant route registry control, external model service, source-file changes, launch-scope decision, private-data equivalence, financial decisions, publishing-scope decision, hosted readiness, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module covers public cold-reader route-map validation: command refs, result record refs, ordinal route sequencing, evidence classes, scope boundaries, scope limits, exported-bundle provenance, copied cold-entry evidence, and negative cases for missing refs, sequence gaps, overclaims, and private body fields.\n\nThe ceiling stops before route-registry source authority, live session inspection, external model service, source-file changes, hosted readiness, launch, public sharing, private-data equivalence, or whole-system correctness. The route map can tell a cold reader what to run first and which result record bounds that run; it cannot promote the docs sequence into proof beyond those public fixtures and result records.\n\n###### Scope limit\n\nThis component is projection-only metadata. It is not route registry control, it does not change source files projects, it does not use external model services, and it excludes launch, public sharing, trading or financial decisions, private-data equivalence, or whole-system correctness claims.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open body floor is the public route-map fixture, route card set, route policy, exported cold-reader route-map bundle, source-module manifests, and generated result records. It carries public refs, digests, route ids, result record refs, evidence classes, scope boundaries, scope limits, and `body_in_receipt: false` markers instead of inlining private source or live state.\n\nThe floor excludes private source bodies, model-output data, account or browser material, browser or HUD state, account secret-equivalent live-access data, recipient state, and route-registry mutation authority. A reader can inspect the route map and exported bundle to reproduce the first-run sequence, but the bundle remains evidence for public replay shape rather than launch or production authority.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12362,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A cold technical reader should not have to infer the product path from a long README or raw result record tree. The route map answers one question: what should I run first, and what evidence proves that path is wired? The unusual part is how the validator checks that proof. It does not merely confirm that each route row carries the right fields. It replays every route against real source: each row's command, its docs refs, its result record refs, and the human-readable signals it claims to show are matched against the actual text of copied source modules and public docs. A command whose material tokens do not appear anywhere in that source corpus is blocked, as is a docs ref that does not r\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open body floor is the public route-map fixture, route card set, route policy, exported cold-reader route-map bundle, source-module manifests, and generated result records. It carries public refs, digests, route ids, result record refs, evidence classes, scope boundaries, scope limits, and bodyinreceipt: false markers instead of inlining private source or live state. The floor excludes private source bodies, model-output data, account or browser material, browser or HUD state, account secret-equivalent live-access data, recipient state, and route-registry mutation authority. A reader can inspect the route map and exported bundle to reproduce the first-run sequence, but the bundle\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module covers public cold-reader route-map validation: command refs, result record refs, ordinal route sequencing, evidence classes, scope boundaries, scope limits, exported-bundle provenance, copied cold-entry evidence, and negative cases for missing refs, sequence gaps, overclaims, and private body fields. The ceiling stops before route-registry source authority, live session inspection, external model service, source-file changes, hosted readiness, launch, public sharing, private-data equivalence, or whole-system correctness. The route map can tell a cold reader what to run first and which result record bounds that run; it cannot promote the docs sequence into proof beyond those pub\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with core/papermodulecapsules.json::papermodules[13:papermodule.coldreaderroute_map], then read the generated JSON projection for the resolved relationships. A diagram view is generated for this module and an atlas card entry is available. The route-map fixture, exported bundle, source-module manifests, and temporary result records are evidence for replay shape. This Markdown gives cold readers the interpretation order, source-linked only.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in documentation systems that treat reader state and task shape as first-class. Diataxis separates tutorials, how-to guides, reference, and explanation so readers are not forced through one undifferentiated documentation pile. Knuth's literate programming is an older anchor for the idea that executable systems should be written for human comprehension as well as machine execution. Microcosm borrows the reader-route pattern: first command, result record ref, evidence class, scope boundary, scope limit, and next drilldown are ordered for a cold reader. It does not make the route map source authority or substitute documentation sequence for validator evidence.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-specific-evidence-routing",
       "title": "Reader-Specific Evidence Routing",
       "level": 2,
       "excerpt": "The route map should make the evidence-count frame visible before the reader chooses a drilldown. Honest counters are not progress badges: A safety/evals engineer follows microcosm status --card, microcosm authority --card, and microcosm workingness --card first. The useful question is whether each claim names its evidence class, validator, failure mode, and scope limit. A hiring reviewer follows the first-screen card and legibility scorecard first. The useful question is whether small verified counts are framed as honest proof boundaries instead of hidden or inflated. A peer developer follows microcosm tour --card, microcosm observe --card, and then full microcosm observe, microcosm compil\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "one-screen-handoff-contract",
       "title": "One-Screen Handoff Contract",
       "level": 2,
       "excerpt": "The route map consumes the first-screen card as the handoff, not as another route row. A cold reader should see this sequence: First-screen card: claim frame, microcosm hello <project>, shared proof, evidence legend, structural join, reader rail, and exit rule. Route map: the accepted command order, with result record refs and scope limits attached to each command. Reader branch: one audience-specific first action, one proof surface, one success criterion, and one next drilldown. The handoff fails when the first screen turns into a complete route inventory, or when the route map assumes the reader already understands evidence classes. The first screen should compress; the route map should s\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "comparison-backed-route-rows",
       "title": "Comparison-Backed Route Rows",
       "level": 2,
       "excerpt": "Each route row should make the unusual discipline visible by naming the normal failure mode it is avoiding. The route map is not just a command list; it is a sequence of claim-boundary checks: Rows that omit the comparison cue are still technically navigable, but they make the rigor invisible to a cold reader. The validator should prefer a shorter row with command, result record, class, scope boundary, and failure mode over a longer row that lists more components without explaining what each boundary prevents.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "observable-drilldown-order",
       "title": "Observable Drilldown Order",
       "level": 2,
       "excerpt": "Browser-first readers follow the same route map as terminal-first readers. The route order is compressed, not replaced: First-screen card or compact browser board. microcosm tour --card <project> as the shared behavior proof. Selected route plus work/event/evidence refs. Compact observatory view for the same route. Full route map, result records, standards, and raw JSON drilldowns. The compact observatory row must carry the same command ref, result record ref, evidence class, scope boundary, and scope limit as the terminal route row. If the browser board cannot show those fields, it is a preview only and cannot serve as the cold-reader route handoff. readmeonboardingroute is the selected ro\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation",
       "title": "Validation",
       "level": 2,
       "excerpt": "The fixture observes negative cases for missing command refs, missing result record refs, route sequence gaps, launch/provider overclaims, and private source body fields. The exported bundle omits negative cases and validates the real runtime shape used by microcosm run, with synthetic result record stand-ins explicitly disallowed as product evidence. If focused validation reports an exact-copy source-module body mismatch, route that repair through microcosmexactcopy_refresh; do not treat this Markdown projection as the authority for copied source bodies.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate/, reproduce this page's proof boundary with temporary result records: The focused pytest file is the proof consumer for this Markdown section. It asserts the fixture status, ten-route command and result record-ref counts, front-door route order, expected negative cases, route-source replay support, exported bundle shape, copied source-module digest and anchor matches, source-open fixture-manifest counts, no source bodies in public result records, streamed line-count and digest handling, and fresh exported-bundle card reuse. The corpus check verifies that this page remains in the 98-module paper-module set and that the JSON bundle, generated Mermaid, Atlas card, and\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component is projection-only metadata. It is not route registry control, it does not change source files projects, it does not use external model services, and it does not include launch operations, public sharing, trading or financial decisions, private-data equivalence, or whole-system correctness claims.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.cold_reader_route_map.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR subgraph Entry[\"First-screen entry\"] Project[\"Public project path repo -> .microcosm\"] First[\"First-screen card claim frame, first command, evidence legend, exit rule\"] end subgraph Accounting[\"Route-map accounting\"] Route[\"Ordered route rows command, result record ref, evidence class\"] Ceiling[\"Scope boundary and scope limit attached to each row\"] end subgraph ReaderBranch[\"Reader branch\"] Branch[\"Reader branch choose one first action\"] Safety[\"Safety/evals status, authority, workingness\"] Hiring[\"Hiring reviewer first-screen card, legibility scorecard\"] Developer[\"Peer developer tour, observe, explain or compile\"] end subgraph Boundary[\"Proof boundary\"] Drilldown[\"Drilldowns tour, status, explain, observe, compile, serve\"] Result record[\"Result records and route refs public refs only; body_in_receipt false\"] end Project --> First First --> Route Route --> Ceiling Route --> Branch Branch --> Safety Branch --> Hiring Branch --> Developer Safety --> Drilldown Hiring --> Drilldown Developer --> Drilldown Ceiling --> Result record Drilldown --> Result record",
       "source_hash": "sha256:3b14712addef3b322844ac4843018094e53087dcb279a8a4224c0822b4c78741",
       "html_url": "docs/paper-modules.html#paper-module-cold-reader-route-map-diagram-1",
       "html_anchor": "paper-module-cold-reader-route-map-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_reader_route_map.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Diataxis",
       "url": "https://diataxis.fr/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "literate programming",
       "url": "https://cs.stanford.edu/~knuth/lp.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.pattern_binding_contract",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Pattern Binding Contract",
         "url": "paper-modules.html#paper-module-pattern-binding-contract"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "cold_reader_route_map",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Cold Reader Route Map",
         "url": "components.html#component-cold_reader_route_map"
        },
        {
         "id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public first run route map",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.entry_and_reveal_route_readiness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "entry and reveal routes as bounded cold-reader readiness evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_reader_route_map.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 13529
    },
    {
     "id": "paper_module.proof_diagnostic_evidence_spine",
     "title": "Proof Diagnostic Evidence Spine",
     "relative_href": "docs/paper-modules.html#paper-module-proof-diagnostic-evidence-spine",
     "read_href": "docs/paper-modules.html#paper-module-proof-diagnostic-evidence-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-proof-diagnostic-evidence-spine",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public proof-diagnostic evidence spine fixture validates Ring2 diagnostic result record refs, copied runtime artifact digests, provider/proof-body exclusions, stale-coupling visibility, and scope limits without becoming formal proof authority.",
     "summary": "Proof Diagnostic Evidence Spine is the public evidence membrane before formal proof authority. It validates Ring2 failure-taxonomy and graph-update artifacts, verifier-trace repair and evidence-cell result record refs, copied runtime artifact digests, model-output data policy rows, negative cases, and a copied public component source-body floor while keeping proof bodies and provider output bodies out of public result records.",
     "authority_ceiling": "Public diagnostic result record refs, copied Ring2 runtime artifacts, and copied public component source body only; no Lean/Lake execution, formal proof authority, formal-result correctness, external model access authority, runtime correctness, launch-scope decision, publishing-scope decision, private-system equivalence, or whole-system correctness.",
     "abstract": "The public proof-diagnostic evidence spine fixture validates Ring2 diagnostic result record refs, copied runtime artifact digests, provider/proof-body exclusions, stale-coupling visibility, and scope limits without becoming formal proof authority.",
     "teleology": {
      "section_id": "teleology",
      "text": "proofdiagnosticevidence_spine is the body-safe evidence membrane before formal proof work. It records proof/evidence diagnostics while rejecting proof bodies, provider output bodies, source-authority upgrades, stale coupling, and runtime-correctness overclaims.",
      "source": "markdown_section"
     },
     "body_markdown": "`proof_diagnostic_evidence_spine` sits one step before formal proof authority. It holds diagnostic evidence from the formal-math evaluation and premise-retrieval pipeline as result record-backed cells, and refuses to let any of them be read as a proof.\n\n###### Purpose\n\nThe component answers a single question: does a diagnostic check that claims to be backed by real Ring2 runtime evidence actually recompute against that evidence, or is it asserting more than its refs support? Without this membrane, a check row could name a failure-taxonomy report or a graph-update candidate set, declare itself passing, and be trusted on its own word. The spine refuses that.\n\nWhat is unusual is that the validator does not trust the fixture's own pass label. It ignores the legacy `expected_result` field as a non-authoritative fixture label and rederives the verdict itself. For each check it resolves the named `source_ref` to a real file, re-hashes that file with sha256, and confirms the hash matches the expected digest. It then opens the named result record anchor and checks that the result record payload actually contains that source ref and digest. A check is accepted only when the source, the digest, and the result record all agree. The pass is a recomputation, not a claim copied from the fixture.\n\nThe second idea is that negative evidence is kept rather than hidden. A stale source fingerprint is recorded as `source_fingerprint_status: stale` and retained as diagnostic evidence; a provider advisory row is preserved as metadata while being rejected as authority; a forbidden proof-body field turns a row into a regression fixture rather than silently dropping it. The board shows what did not hold, which is the point of an evidence membrane.\n\n###### Teleology\n\n`proof_diagnostic_evidence_spine` is the body-safe evidence membrane before formal proof work. It records proof/evidence diagnostics while rejecting proof bodies, provider output bodies, source-authority upgrades, stale coupling, and runtime-correctness overclaims.\n\n###### Public Contract\n\nThe validator consumes failure-taxonomy records, graph-update traces, verifier-trace repair artifacts, and formal evidence-cell anchor result record refs from the formal-math evaluation and premise-retrieval pipeline, then emits diagnostic result records over those refs. Provider-advisory rows are bounded evidence authority. Passing diagnostic checks do not become formal proof authority or formal-result correctness.\n\n###### How a check is accepted\n\nA check row carries three lists: `source_refs`, `receipt_anchor_refs`, and `source_digest_refs`. The validator does not take the row's word for whether it passes. It recomputes the verdict from the system.\n\nFor each `source_ref` it resolves a real file, reads it, and hashes the bytes with sha256. That hash must equal the expected digest the component holds for the ref. It then opens each result record anchor and checks that the result record payload actually contains the source ref and its digest, so a check is only \"result record-backed\" if the result record it cites genuinely references it. On top of that the component applies a semantic floor: a check whose id mentions a failure taxonomy must point at a source file that carries a failure-taxonomy report with representative failures and at a result record that carries a failure-mode ledger; a graph-update check needs graph-update candidates with ids and a matching result record anchor. The check is accepted only when every source resolves, every digest matches, every cited result record backs the ref, the semantic floor is satisfied, and no expected-negative error code is declared.\n\nThe concrete failure mode this guards against is a plausible-looking row that names real artifact paths but does not actually recompute: a digest that has drifted, a result record that does not mention the ref it claims, or a check labelled as failure-taxonomy evidence while pointing at an unrelated file. Each of those becomes a rejection finding rather than a silent pass. The recompute is also why a passing check stays bounded. It establishes that the named evidence is present and coupled, not that the underlying runtime is correct, which is why a row that adds `claims_runtime_correctness` is rejected as an overclaim.\n\n###### Shape\n\nSource refs\n\nevidence accounting only `diagnostic_board.json` Diagram source\n\n```text\nflowchart TD Check[\"Diagnostic check row source_refs, receipt_anchor_refs, source_digest_refs\"] Resolve[\"Resolve source ref to real public file\"] Hash[\"Re-hash file (sha256) compare to expected digest\"] Result record[\"Open result record anchor does payload contain this ref and digest?\"] Floor[\"Semantic floor failure-taxonomy / graph-update source and result record match\"] Accept[\"Accepted check verdict = recomputed, body_in_receipt false\"] Reject[\"Rejected / retained as diagnostic evidence\"] Stale[\"Stale source fingerprint\"] Provider[\"Provider advisory payload\"] Proofbody[\"Forbidden proof-body field\"] Check --> Resolve --> Hash --> Result record --> Floor Floor -->|all agree| Accept Floor -->|any mismatch| Reject Stale -. retained as evidence .-> Reject Provider -. metadata kept, authority denied .-> Reject Proofbody -. scrubbed, kept as regression .-> Reject Accept --> Board[\"diagnostic_board.json evidence accounting only\"] Reject --> Board Board -. denies .-> Ceiling[\"no Lean/Lake run, no formal-result correctness, no provider authority, no launch\"]\n```\n\nEvidence/accounting refs:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[14]` sets `source_authority: json_capsule`, names subjects `proof_diagnostic_evidence_spine` and `mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane`, resolves `code_loci[0].path` to `src/microcosm_core/organs/proof_diagnostic_evidence_spine.py`, and keeps `generated_projections.markdown.generated: false`, `generated_projections.mermaid.status: available_from_capsule_edges`, and `generated_projections.atlas_card.status: linked_from_capsule_edges`.\n- Generated instance boundary: `paper_modules/proof_diagnostic_evidence_spine.json::paper_module_payload.projection_contract` records `authority_flip_status: not_flipped`, while `paper_modules/proof_diagnostic_evidence_spine.json::relationships.edges` carries source-justified links to the component, mechanism, concept, principles, axioms, dependencies, and code locus.\n- Component/source locus: `organs/proof_diagnostic_evidence_spine.json::organ_payload.source_atlas_row` names the first command, `claim_ceiling_restated`, `mechanism_refs[0]`, `wires_to`, and the same code-locus symbols implemented in `src/microcosm_core/organs/proof_diagnostic_evidence_spine.py` (`PROOF_AUTHORITY_CEILING`, `EXPECTED_NEGATIVE_CASES`, `validate_copied_macro_body_artifacts`, `validate_evidence_receipts`, `validate_provider_payload_policy`, `validate_authority_ceiling`, `run`, and `run_evidence_bundle`).\n- Standard contract: `standards/std_microcosm_proof_diagnostic_evidence_spine.json::authority_boundary_detail` limits the component to copied Ring2 diagnostic runtime artifacts, summary metrics, graph-variant metadata, and anchor result record refs. Its `body_import_verification.source_open_body_import_floor` records 13 copied artifact bodies, 10 exact copies, 3 public-light edits, and `body_text_exported_in_receipts: false`; its `body_import_verification.public_organ_source_body_floor` records one exact copied public component source body.\n- Bundle floor: `examples/proof_diagnostic_evidence_spine/exported_evidence_bundle/bundle_manifest.json` has `schema_version: proof_diagnostic_evidence_spine_exported_evidence_bundle_v1`, `bundle_id: ring2_proof_diagnostic_evidence_runtime_example`, `copied_macro_body_artifacts` count 13, and an scope limit of Ring2 diagnostic result record refs only, not formal proof authority.\n- Source-body floor: `examples/proof_diagnostic_evidence_spine/exported_evidence_bundle/source_body_floor/source_module_manifest.json::modules[0]` records source ref `src/microcosm_core/organs/proof_diagnostic_evidence_spine.py`, `source_to_target_relation: exact_copy`, `sha256_match: true`, `body_in_receipt: false`, and omitted material including model-output data bodies, account or browser state, browser UI live-access state, recipient-send state, private proof bodies, and oracle-needed premise ids.\n- Result record behavior: `receipts/first_wave/proof_diagnostic_evidence_spine/proof_evidence_validation_receipt.json` records `accepted_count: 2`, `rejected_count: 1`, `missing_negative_cases: []`, `body_in_receipt: false`, `source_fingerprint_status: stale`, and observed negative cases for source-authority upgrade, missing result record fields, runtime-correctness overclaim, provider/proof body rejection, and stale coupling. The sibling `provider_payload_policy_result.json::provider_payload_policy` preserves advisory metadata while rejecting the forbidden proof-body payload, and `diagnostic_board.json::authority_ceiling` rejects model-output data authority, source-authority upgrade, runtime-correctness claims, and formal prover execution.\n- Focused regression surface: `tests/test_proof_diagnostic_evidence_spine.py` asserts the observed negative cases match `EXPECTED_NEGATIVE_CASES` and checks the exported evidence bundle path. These tests support reader wiring and evidence accounting only; they do not establish formal-result correctness, provider authority, runtime correctness, publishing-scope decision, or launch-scope decision.\n\n###### Reader Evidence Routing\n\nRoute currentness questions through ## JSON Bundle Binding and the validation commands in ## Validation Result record Path. The tests and corpus check confirm reader wiring and projection health; they do not establish proof authority.\n\nRoute source/body-floor questions through `## Source-Open Body Floor` and the fixture/example paths named under `## Structured Lattice Bindings`. The diagnostic artifact copies from the formal-math evaluation pipeline, public component-source copy, manifests, and digest coupling are evidence-accounting inputs; they are bounded evidence bodies, model-output data bodies, runtime correctness claims, or source-authority upgrades.\n\nRoute claim-safety and public-copy questions through ## Scope limit, `## Evidence-As-Accounting Shape`, and ## Scope boundary, then pair this module with `batch12_release_claim_language_gate` when public wording is being checked. If the question is \"did the validator still enforce the membrane?\", use the focused pytest and corpus check in ## Validation Result record Path before citing the reader page.\n\n###### Evidence-As-Accounting Shape\n\nThis component is the proof-adjacent evidence membrane behind Microcosm's scope limits. It accepts diagnostic runtime artifacts, result record refs, source digests, and negative-case results as evidence cells, while refusing to treat any of them as theorem authority.\n\nThe accounting rule is two-sided. A copied artifact from the formal-math evaluation and premise-retrieval pipeline can strengthen only the diagnostic claim named by its result record, digest, and validator; it cannot upgrade itself into formal-result correctness, provider authority, launch-scope decision, or private-system equivalence. Stale source coupling is retained as diagnostic evidence instead of hidden, and provider-advisory rows remain metadata without payload bodies.\n\nUse this module with `batch12_release_claim_language_gate` when evaluating public copy: the evidence spine says what result record-backed cells exist, and the language gate decides whether a public sentence stays within that ceiling.\n\n###### Prior Art Grounding\n\nThe evidence spine is grounded in assurance-case practice: evidence should be connected to claims, assumptions, and limits before it is treated as support. NASA's Goal Structuring Notation example for spacecraft assurance is a useful public analogue because it frames assurance as model-structured evidence rather than document-level persuasion: [NTRS 20160005295](https://ntrs.nasa.gov/citations/20160005295).\n\nThe result record membrane also borrows from [W3C PROV](https://www.w3.org/TR/prov-overview/) and observability practice: diagnostic artifacts are evidence cells with provenance, not theorem authority. That is why the component accepts digest-coupled diagnostic refs and negative cases while rejecting proof bodies, model-output data bodies, and stale source-coupling overclaims.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_proof_diagnostic_evidence_spine.py -q --basetemp=/tmp/microcosm_proof_diagnostic_evidence_spine_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can claim reader wiring for the proof-diagnostic evidence membrane: the component and mechanism subject resolve, and the runtime source locus is named. It cannot claim Lean or Lake execution, formal proof authority, formal-result correctness, provider authority, runtime correctness of the imported systems, source-file changes, launch-scope decision, publishing-scope decision, hosted deployment, or whole-system correctness.\n\nDiagnostic result records, copied runtime artifacts from the formal-math evaluation pipeline, copied public component source, source digests, and focused tests can support only bounded evidence-accounting claims: which public refs, manifests, negative cases, and body-hygiene checks were validated. A diagram view and atlas entry are generated for this module; they do not convert diagnostics into formal-result correctness or provider/publishing-scope decision.\n\n###### Scope boundary\n\nThis module documents diagnostic result record anchors over real system from the formal-math evaluation and premise-retrieval pipeline, and keeps forbidden proof/provider body cases as regression-only guards. It does not run Lean, use external model services, expose proof bodies, prove runtime correctness, certify public launch operations, authorize public sharing or recipient work, establish secret export, or claim whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe public bundle carries two bounded body floors. The runtime-artifact floor copies thirteen diagnostic artifacts from the formal-math evaluation and premise-retrieval pipeline under `examples/proof_diagnostic_evidence_spine/exported_evidence_bundle/source_artifacts` and records their source/target digest coupling in `bundle_manifest.json`. Three rows are source-faithful public-light edits that redact operator absolute paths and retain both source and target digests.\n\nThe component-source floor copies the public source body for `src/microcosm_core/organs/proof_diagnostic_evidence_spine.py` under `source_body_floor/source_modules`. Generated `state/runs` JSON artifacts are evidence bodies, not source-body authority. Neither body floor places body text in result records or workingness cards, and neither imports proof bodies, model-output data bodies, account or browser state, browser UI live access, recipient-send state, account secrets, private proof bodies, or oracle-needed premise ids.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 15220,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The component answers a single question: does a diagnostic check that claims to be backed by real Ring2 runtime evidence actually recompute against that evidence, or is it asserting more than its refs support? Without this membrane, a check row could name a failure-taxonomy report or a graph-update candidate set, declare itself passing, and be trusted on its own word. The spine refuses that. What is unusual is that the validator does not trust the fixture's own pass label. It ignores the legacy expected_result field as a non-authoritative fixture label and rederives the verdict itself. For each check it resolves the named source_ref to a real file, re-hashes that file with sha256, and confi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "teleology",
       "title": "Teleology",
       "level": 2,
       "excerpt": "proofdiagnosticevidence_spine is the body-safe evidence membrane before formal proof work. It records proof/evidence diagnostics while rejecting proof bodies, provider output bodies, source-authority upgrades, stale coupling, and runtime-correctness overclaims.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The validator consumes failure-taxonomy records, graph-update traces, verifier-trace repair artifacts, and formal evidence-cell anchor result record refs from the formal-math evaluation and premise-retrieval pipeline, then emits diagnostic result records over those refs. Provider-advisory rows are bounded evidence authority. Passing diagnostic checks do not become formal proof authority or formal-result correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "how-a-check-is-accepted",
       "title": "How a check is accepted",
       "level": 2,
       "excerpt": "A check row carries three lists: sourcerefs, receiptanchor_refs, and sourcedigestrefs. The validator does not take the row's word for whether it passes. It recomputes the verdict from the system. For each source_ref it resolves a real file, reads it, and hashes the bytes with sha256. That hash must equal the expected digest the component holds for the ref. It then opens each result record anchor and checks that the result record payload actually contains the source ref and its digest, so a check is only \"result record-backed\" if the result record it cites genuinely references it. On top of that the component applies a semantic floor: a check whose id mentions a failure taxonomy must point a\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module can claim reader wiring for the proof-diagnostic evidence membrane: the component and mechanism subject resolve, and the runtime source locus is named. It cannot claim Lean or Lake execution, formal proof authority, formal-result correctness, provider authority, runtime correctness of the imported systems, source-file changes, launch-scope decision, public sharing decision, hosted deployment, or whole-system correctness. Diagnostic result records, copied runtime artifacts from the formal-math evaluation pipeline, copied public component source, source digests, and focused tests can support only bounded evidence-accounting claims: which public refs, manifests, negative cases, and\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The public bundle carries two bounded body floors. The runtime-artifact floor copies thirteen diagnostic artifacts from the formal-math evaluation and premise-retrieval pipeline under examples/proofdiagnosticevidencespine/exportedevidencebundle/sourceartifacts and records their source/target digest coupling in bundle_manifest.json. Three rows are source-faithful public-light edits that redact operator absolute paths and retain both source and target digests. The component-source floor copies the public source body for src/microcosmcore/components/proofdiagnosticevidencespine.py under sourcebodyfloor/source_modules. Generated state/runs JSON artifacts are evidence bodies, not source-body aut\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Evidence/accounting refs: Bundle authority: core/papermodulecapsules.json::paper_modules[14] sets sourceauthority: jsoncapsule, names subjects proofdiagnosticevidence_spine and mechanism.proofdiagnosticevidencespine.validatesring2diagnosticevidence_membrane, resolves code_loci[0].path to src/microcosmcore/components/proofdiagnosticevidencespine.py, and keeps generated_projections.markdown.generated: false, generatedprojections.mermaid.status: availablefromcapsuleedges, and generatedprojections.atlascard.status: linkedfromcapsule_edges. Generated instance boundary: papermodules/proofdiagnosticevidencespine.json::papermodulepayload.projection_contract records authorityflipstatus: not_flipped,\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Route currentness questions through ## JSON Bundle Binding and the validation commands in ## Validation Result record Path. The tests and corpus check confirm reader wiring and projection health; they do not establish proof authority. Route source/body-floor questions through ## Source-Open Body Floor and the fixture/example paths named under ## Structured Lattice Bindings. The diagnostic artifact copies from the formal-math evaluation pipeline, public component-source copy, manifests, and digest coupling are evidence-accounting inputs; they are bounded evidence bodies, model-output data bodies, runtime correctness claims, or source-authority upgrades. Route claim-safety and public-copy que\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-as-accounting-shape",
       "title": "Evidence-As-Accounting Shape",
       "level": 2,
       "excerpt": "This component is the proof-adjacent evidence membrane behind Microcosm's scope limits. It accepts diagnostic runtime artifacts, result record refs, source digests, and negative-case results as evidence cells, while refusing to treat any of them as theorem authority. The accounting rule is two-sided. A copied artifact from the formal-math evaluation and premise-retrieval pipeline can strengthen only the diagnostic claim named by its result record, digest, and validator; it cannot upgrade itself into formal-result correctness, provider authority, launch-scope decision, or private-system equivalence. Stale source coupling is retained as diagnostic evidence instead of hidden, and provider-advi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The evidence spine is grounded in assurance-case practice: evidence should be connected to claims, assumptions, and limits before it is treated as support. NASA's Goal Structuring Notation example for spacecraft assurance is a useful public analogue because it frames assurance as model-structured evidence rather than document-level persuasion: NTRS 20160005295. The result record membrane also borrows from W3C PROV and observability practice: diagnostic artifacts are evidence cells with provenance, not theorem authority. That is why the component accepts digest-coupled diagnostic refs and negative cases while rejecting proof bodies, model-output data bodies, and stale source-coupling overcla\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module documents diagnostic result record anchors over real system from the formal-math evaluation and premise-retrieval pipeline, and keeps forbidden proof/provider body cases as regression-only guards. It does not run Lean, use external model services, expose proof bodies, prove runtime correctness, certify public launch operations, authorize public sharing or recipient work, establish secret export, or claim whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.proof_diagnostic_evidence_spine.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Check[\"Diagnostic check row source_refs, receipt_anchor_refs, source_digest_refs\"] Resolve[\"Resolve source ref to real public file\"] Hash[\"Re-hash file (sha256) compare to expected digest\"] Result record[\"Open result record anchor does payload contain this ref and digest?\"] Floor[\"Semantic floor failure-taxonomy / graph-update source and result record match\"] Accept[\"Accepted check verdict = recomputed, body_in_receipt false\"] Reject[\"Rejected / retained as diagnostic evidence\"] Stale[\"Stale source fingerprint\"] Provider[\"Provider advisory payload\"] Proofbody[\"Forbidden proof-body field\"] Check --> Resolve --> Hash --> Result record --> Floor Floor -->|all agree| Accept Floor -->|any mismatch| Reject Stale -. retained as evidence .-> Reject Provider -. metadata kept, authority denied .-> Reject Proofbody -. scrubbed, kept as regression .-> Reject Accept --> Board[\"diagnostic_board.json evidence accounting only\"] Reject --> Board Board -. denies .-> Ceiling[\"no Lean/Lake run, no formal-result correctness, no provider authority, no launch\"]",
       "source_hash": "sha256:b5662673d460a8e63e45a9c43743d5730ee4e5c2d1623a9483d97d95699124e6",
       "html_url": "docs/paper-modules.html#paper-module-proof-diagnostic-evidence-spine-diagram-1",
       "html_anchor": "paper-module-proof-diagnostic-evidence-spine-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_diagnostic_evidence_spine.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "NTRS 20160005295",
       "url": "https://ntrs.nasa.gov/citations/20160005295",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.formal_math_verifier_trace_repair_loop",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Verifier Trace Repair Loop",
         "url": "paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop"
        },
        {
         "id": "paper_module.formal_evidence_cell_anchor_resolver",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Evidence Cell Anchor Resolver",
         "url": "paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver"
        },
        {
         "id": "paper_module.formal_math_lean_proof_witness",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Lean Proof Witness",
         "url": "paper-modules.html#paper-module-formal-math-lean-proof-witness"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "proof_diagnostic_evidence_spine",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Proof Diagnostic Evidence Spine",
         "url": "components.html#component-proof_diagnostic_evidence_spine"
        },
        {
         "id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates ring2 diagnostic evidence membrane",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_diagnostic_evidence_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 16531
    },
    {
     "id": "paper_module.proof_derived_governed_mutation_authorization",
     "title": "Proof-Derived Governed Mutation Authorization",
     "relative_href": "docs/paper-modules.html#paper-module-proof-derived-governed-mutation-authorization",
     "read_href": "docs/paper-modules.html#paper-module-proof-derived-governed-mutation-authorization",
     "context_href": "docs/rules-and-ideas.html#paper-module-proof-derived-governed-mutation-authorization",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public proof-derived governed-mutation fixture validates synthetic mutation proposals through proof cells, visible pre-execution policy verdicts, logged side effects, rollback result records, cold replay, negative cases, and copied source internal control bodies without granting live mutation authority.",
     "summary": "Proof-Derived Governed Mutation Authorization is the public mutation-authority replay contract. It checks three synthetic proposals, proof-cell validator refs, visible policy verdicts, side-effect logs, rollback result records, cold replay, eight negative cases, and six exact copied source pattern/result record/internal control bodies while keeping account secrets, proof bodies, model-output data, account refs, source-file changes, and launch-scope decision out of result records.",
     "authority_ceiling": "Public synthetic governed-mutation result records and copied source body digest evidence only; no standing account secret authority, live cloud/account mutation, source-file changes, external model access, hidden vote, policy-after-execution authority, benchmark security claim, launch-scope decision, public sharing, hosting, or whole-system correctness.",
     "abstract": "The public proof-derived governed-mutation fixture validates synthetic mutation proposals through proof cells, visible pre-execution policy verdicts, logged side effects, rollback result records, cold replay, negative cases, and copied source internal control bodies without granting live mutation authority.",
     "teleology": {
      "section_id": "",
      "text": "The public proof-derived governed-mutation fixture validates synthetic mutation proposals through proof cells, visible pre-execution policy verdicts, logged side effects, rollback result records, cold replay, negative cases, and copied source internal control bodies without granting live mutation authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`proof_derived_governed_mutation_authorization` is the public mutation-authority replay component for showing that a mutation proposal cannot grant itself authority. It validates a synthetic governed-mutation bundle where read-only inspection, scoped config write, and rollback proposals are admitted only when proof cells, visible pre-execution policy verdicts, side-effect logs, rollback result records, cold replay, negative cases, non-public-state scan, and scope limits line up.\n\nThis module is source-backed public doctrine, not the source of authority. The source rows are the JSON bundle, mechanism registry row, component atlas binding, standard contract, fixture, exported bundle, component source module, and result records named below. Markdown remains an authored projection over those rows.\n\n###### Purpose\n\nThe component answers one question: can a mutation proposal acquire the authority to change something just by asserting that it should? In an agent system the danger is an action that grants itself permission, for example by claiming a standing account secret, by recording a governance-vote nobody can see, or by reporting success after the fact. This fixture is the boundary that refuses each of those moves.\n\nAuthorisation here is derived, not asserted. A proposal is admitted only when an independent chain resolves: redacted proof cells that name validator result records, at least two visible policy verdicts evaluated before any execution identity is minted, a logged side-effect diff for write and rollback proposals, a paired rollback result record, and a cold-replay result record. The validator recomputes an evidence-chain hash from those resolved rows and rejects the proposal if the declared hash does not match. Impressive language, an admin-looking identity, or a final answer that says it worked all fail on their own.\n\nThe less obvious part is the anti-bake gate. Passing the synthetic chain is not enough: every authorised proposal must also bind to a real repository record, a concrete git commit that the validator resolves with a `git` subprocess and checks touched this component's own source or its focused test. The validator then re-derives the proof, policy, and rollback refs from the evidence indices and compares them to what the record declares. A fixture cannot pre-bake its answer, because the answer is reconstructed from real commit scope and the resolved rows rather than read from the file. The fixture admits exactly three synthetic proposals (read-only inspection, scoped config write, rollback) and rejects eight named overclaims; none of this grants any live mutation authority.\n\n###### Shape\n- Subject: `proof_derived_governed_mutation_authorization`, with mechanism `mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization`.\n- Runtime locus: `src/microcosm_core/organs/proof_derived_governed_mutation_authorization.py`, especially `run`, `run_authorization_bundle`, `validate_mutation_proposals`, `validate_proof_evidence_cells`, `validate_policy_verdicts`, `validate_side_effect_ledger`, `validate_rollback_receipts`, `validate_cold_replay`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- The positive fixture admits exactly three synthetic proposals: read-only inspection, scoped config write, and rollback.\n- Every admitted proposal must bind intent bundle refs, proof-cell validator result records, visible pre-execution policy verdicts, ephemeral execution identity refs, an evidence-chain hash, cold replay refs, and an scope limit.\n- Write and rollback proposals also need logged side-effect diff refs and a paired rollback result record before authorization.\n- The exported bundle imports six copied source bodies through `source_module_manifest.json` and validates them by exact-copy digest evidence without exporting source body text in result records.\n\nSource refs\n\n3 synthetic proposals: read-only, scoped write, rollback `mutation_proposals.json` validator-backed proof refs `proof_evidence_cells.json` 2+ visible verdicts before execution identity `policy_verdicts.json` logged diff for write / rollback `side_effect_ledger.json` paired rollback result record `rollback_receipts.json` cold rerun per proposal `cold_replay.json` real repo record + git commit ref `governed_mutation_records.json` 6 copied source bodies verified by digest `source_module_manifest.json` Diagram source\n\n```text\nflowchart TD Proposals[\"mutation_proposals.json 3 synthetic proposals: read-only, scoped write, rollback\"] subgraph Evidence[\"Resolved evidence chain\"] ProofCells[\"proof_evidence_cells.json validator-backed proof refs\"] Policies[\"policy_verdicts.json 2+ visible verdicts before execution identity\"] Effects[\"side_effect_ledger.json logged diff for write / rollback\"] Rollbacks[\"rollback_receipts.json paired rollback result record\"] Replay[\"cold_replay.json cold rerun per proposal\"] end Hash{\"Recompute evidence-chain hash declared == derived?\"} Records[\"governed_mutation_records.json real repo record + git commit ref\"] AntiBake{\"Anti-bake gate git commit touched this source/test? re-derived refs match declared?\"} SourceManifest[\"source_module_manifest.json 6 copied source bodies verified by digest\"] Negatives[\"8 negative cases standing account secret, hidden vote, policy-after-execution, ...\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"scope limit no account secrets, live mutation, provider, source-file changes, hosting, public sharing, or launch\"] Proposals --> Evidence Evidence --> Hash Hash -->|match| AntiBake Hash -->|mismatch| Negatives Records --> AntiBake AntiBake -->|real record bound| Result records AntiBake -->|unbound or baked| Negatives SourceManifest --> Result records Negatives --> Result records Result records --> Ceiling\n```\n\n###### How it works\n\nTake the scoped config write proposal. To be admitted it must carry the fourteen required fields, including `proof_cell_refs`, `policy_verdict_refs`, `policy_evaluated_before_execution`, `side_effect_class`, `evidence_chain_hash`, and `cold_replay_ref`. The validator then checks each one against the other input files rather than trusting the proposal's own summary.\n\nFor the proof refs it confirms each cell names the same proposal, carries evidence refs and validator-result record refs, is body-redacted, and does not export a proof body. For the policy refs it counts how many verdicts are visible to the result record, are not hidden votes, read allow or warn, and resolve back to a proof cell for that proposal. Fewer than two visible resolving verdicts blocks the proposal under `GOV_MUT_CONSENSUS_WITHOUT_EVIDENCE`. Because a scoped write has a reversible side effect, it also needs a logged diff ref in the side-effect ledger and a passing rollback result record for the same proposal. A write or rollback proposal with no rollback ref is rejected as an irreversible mutation.\n\nThe validator then recomputes the evidence-chain hash. It hashes the resolved proof digests, policy digests, side-effect ref, rollback ref, and cold-replay ref together and compares the result to the proposal's declared `evidence_chain_hash`. A mismatch fails the proposal, so the hash cannot be a hand-written constant. Only after the synthetic chain resolves does the real-record gate run. The governed-mutation record must declare a repo record class, a forty-character-or-shorter hex commit ref, and source refs covering git, mission-transaction, work-landing, and ledger material. The validator shells out to `git` to confirm the commit exists and that its changed files include this component's source module or its focused test, and it re-derives the proof, policy, and rollback refs from the indices so the record's claims must match independently computed values. An authorised proposal whose proposal id is not in the accepted real-record set is downgraded to blocked. The result is that a green result record requires three synthetic proposals, three real records bound to real commits, and a matching anti-bake status, none of which a static fixture can fake.\n\n###### Public Contract\n- The source pattern is `proof_derived_governed_mutation_authorization_compound`.\n- The fixture lives at `fixtures/first_wave/proof_derived_governed_mutation_authorization/input/`.\n- The runtime example lives at `examples/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle/`.\n- The validator is `microcosm_core.organs.proof_derived_governed_mutation_authorization`.\n- The governing standard is `standards/std_microcosm_proof_derived_governed_mutation_authorization.json`.\n- The component model row is `core/organ_atlas.json#proof_derived_governed_mutation_authorization`.\n- The sign-off row is `core/organ_registry.json#proof_derived_governed_mutation_authorization`.\n\nThe fixture has three positive proposals: read-only inspection, scoped config write, and rollback. Every admitted proposal must cite an intent bundle, scope limit, proof cell, visible policy verdicts, ephemeral execution identity, evidence-chain hash, and cold replay ref. Write and rollback proposals also require logged side-effect diff refs and a verified rollback result record paired before the mutation is admitted.\n\n###### Source-Backed Mechanism\n\nThe mechanism row `mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization` points at these runnable source loci:\n- `run` and `run_authorization_bundle` for fixture and exported-bundle entry.\n- `validate_mutation_proposals`, `validate_proof_evidence_cells`, `validate_policy_verdicts`, `validate_side_effect_ledger`, `validate_rollback_receipts`, and `validate_cold_replay` for the authorization predicate.\n- `_source_module_manifest_result` and `_source_open_body_import_summary` for digest-verified copied source-body evidence without body text in result records.\n- `EXPECTED_NEGATIVE_CASES` and `AUTHORITY_CEILING` for falsification and scope boundary enforcement.\n\nThe exported governed-mutation bundle imports six source bodies through `examples/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle/source_module_manifest.json`. Those bodies are copied into `source_modules/` with digest provenance:\n- `state/microcosm_portfolio/extracted_patterns_ledger.jsonl`\n- `state/microcosm_portfolio/reconstruction/high_novelty_substrate_gap_scout_v1.json`\n- `tools/meta/control/mission_transaction_preflight.py`\n- `tools/meta/control/scoped_commit.py`\n- tools/meta/factory/work_ledger.py\n- `system/lib/work_landing_status.py`\n\nResult records may report module ids, refs, counts, classes, hashes, and verdicts. They may not duplicate source body text, proof bodies, governance-vote bodies, model-output data, account secrets, account refs, or live access material.\n\n###### Reader Evidence Routing\n- Open `standards/std_microcosm_proof_derived_governed_mutation_authorization.json` for required witnesses, negative-floor classes, denied authority, result record expectations, validator contract, and source refs.\n- Open `core/fixture_manifests/proof_derived_governed_mutation_authorization.fixture_manifest.json` for positive fixture inputs, eight negative fixtures, body-import summary, durable result record refs, and source-open omission rules.\n- Open `examples/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle/source_module_manifest.json` before inspecting copied source modules; result records carry refs, hashes, counts, and verdicts, not copied source body text.\n- Open `tests/test_proof_derived_governed_mutation_authorization.py` for the focused assertions on proposal counts, negative cases, source-module digest mismatch, public-relative redaction, and card result record reuse.\n- Run the fixture or exported-bundle route from `microcosm-substrate/`. The CLI supports `--card`, but it does not expose a `--json` flag.\n- Use `scripts/build_doctrine_projection.py --check-paper-module-corpus` to verify this Markdown projection still satisfies the shared paper-module coverage contract.\n\n###### First Commands\n\nFrom `microcosm-substrate/`, a cold agent can refresh the fixture result records with:\n\nThe exported bundle validator proves the copied source-body floor without writing durable result records:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.proof_derived_governed_mutation_authorization run-authorization-bundle --input examples/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle --out /tmp/microcosm-proof-derived-governed-mutation --card\n```\n\n###### Evidence Result records\n- `receipts/first_wave/proof_derived_governed_mutation_authorization/proof_derived_governed_mutation_authorization_result.json`\n- `receipts/first_wave/proof_derived_governed_mutation_authorization/proof_derived_governed_mutation_authorization_board.json`\n- `receipts/first_wave/proof_derived_governed_mutation_authorization/proof_derived_governed_mutation_authorization_validation_receipt.json`\n- `receipts/first_wave/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle_validation_result.json`\n- `receipts/runtime_shell/demo_project/organs/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle_validation_result.json`\n- result records/sign-off/first_wave/proof_derived_governed_mutation_authorization_fixture_acceptance.json\n\nCurrent result record evidence records three proposals, three authorized synthetic mutations, three proof cells, six visible policy verdicts, two logged side effects, two rollback passes, three cold replay passes, no missing negative cases, `private_state_scan.status=pass`, and `body_in_receipt=false` for copied source source modules.\n\n###### Negative Cases\n\nThe fixture rejects the eight named negative cases in `core/fixture_manifests/proof_derived_governed_mutation_authorization.fixture_manifest.json`: standing account secret authority, policy-after-execution, hidden governance-vote, live cloud account secret, irreversible mutation, unlogged side effect, consensus without evidence, and final-answer-only success.\n\nThese negative fixtures are the security argument. A proposal with impressive language, an admin-looking identity, hidden votes, post-hoc approvals, or a final answer that says it succeeded still fails unless the public evidence tables resolve to the authorization predicate.\n\n###### Prior Art Grounding\n\nThe governed-mutation shape is grounded in admission-control and policy-as-code practice: a proposed state change is evaluated before it mutates the system, and the decision is separate from the actor's own assertion. The closest public anchors are [Open Policy Agent](https://www.openpolicyagent.org/docs), which separates policy decision-making from enforcement over structured input, and Kubernetes [admission controllers](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/), which validate or mutate API requests before persistence.\n\nThe rollback and side-effect portions are also adjacent to controlled rollout practice, including feature-flag and canary-launch patterns described by [Martin Fowler](https://martinfowler.com/articles/feature-toggles.html). Microcosm keeps the pattern synthetic and replay-only: the component validates visible policy verdicts, side-effect logs, rollback result records, and cold replay without granting live mutation authority.\n\n###### Public Scope\n\nThis component is a synthetic, public, source-open replay. It validates fixture and exported-bundle result records plus copied source bodies with digest provenance. The replay stays inside local files and does not use standing account secrets, access live cloud or account systems, use external model services, change source files, expose private proofs, expose policy-vote bodies, or claim benchmark safety.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_proof_derived_governed_mutation_authorization.py -q --basetemp=/tmp/microcosm_proof_derived_governed_mutation_authorization_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module can claim backed reader wiring for the synthetic governed-mutation replay: component and mechanism subjects resolve, the runtime source locus is named, and diagram and atlas views are generated for this module. It cannot claim live mutation authority, standing account secrets, cloud or account access, irreversible approval, source-file changes permission, provider authority, proof-body export, benchmark safety, launch-scope decision, hosted deployment, publishing-scope decision, or whole-system correctness.\n\nFixture result records, exported-bundle result records, focused tests, and source-copy digests can support only the bounded replay claim: synthetic proposal admission, proof-cell refs, visible policy verdicts, side-effect logs, rollback result records, cold replay refs, negative cases, and body-hygiene behavior. The diagram and atlas views are navigation aids derived from the module bindings; they do not expand the proof boundary.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 17321,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The component answers one question: can a mutation proposal acquire the authority to change something just by asserting that it should? In an agent system the danger is an action that grants itself permission, for example by claiming a standing account secret, by recording a governance-vote nobody can see, or by reporting success after the fact. This fixture is the boundary that refuses each of those moves. Authorisation here is derived, not asserted. A proposal is admitted only when an independent chain resolves: redacted proof cells that name validator result records, at least two visible policy verdicts evaluated before any execution identity is minted, a logged side-effect diff for writ\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Subject: proofderivedgovernedmutationauthorization, with mechanism mechanism.proofderivedgovernedmutationauthorization.validatessyntheticgovernedmutationauthorization. Runtime locus: src/microcosmcore/components/proofderivedgovernedmutation_authorization.py, especially run, runauthorizationbundle, validatemutationproposals, validateproofevidence_cells, validatepolicyverdicts, validatesideeffect_ledger, validaterollbackreceipts, validatecoldreplay, sourcemodulemanifestresult, sourceopenbodyimport_summary, EXPECTEDNEGATIVECASES, and scope_limit. The positive fixture admits exactly three synthetic proposals: read-only inspection, scoped config write, and rollback. Every admitted proposal must\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "Take the scoped config write proposal. To be admitted it must carry the fourteen required fields, including proofcellrefs, policyverdictrefs, policyevaluatedbeforeexecution, sideeffectclass, evidencechain_hash, and coldreplayref. The validator then checks each one against the other input files rather than trusting the proposal's own summary. For the proof refs it confirms each cell names the same proposal, carries evidence refs and validator-result record refs, is body-redacted, and does not export a proof body. For the policy refs it counts how many verdicts are visible to the result record, are not hidden votes, read allow or warn, and resolve back to a proof cell for that proposal. Fewer\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim backed reader wiring for the synthetic governed-mutation replay: component and mechanism subjects resolve, the runtime source locus is named, and diagram and atlas views are generated for this module. It cannot claim live mutation authority, standing account secrets, cloud or account access, irreversible approval, source-file changes permission, provider authority, proof-body export, benchmark safety, launch-scope decision, hosted deployment, public sharing decision, or whole-system correctness. Fixture result records, exported-bundle result records, focused tests, and source-copy digests can support only the bounded replay claim: synthetic proposal admission, pr\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The source pattern is proofderivedgovernedmutationauthorization_compound. The fixture lives at fixtures/firstwave/proofderivedgovernedmutation_authorization/input/. The runtime example lives at examples/proofderivedgovernedmutationauthorization/exportedgovernedmutationauthorizationbundle/. The validator is microcosmcore.components.proofderivedgovernedmutation_authorization. The governing standard is standards/stdmicrocosmproofderivedgovernedmutationauthorization.json. The component model row is core/organatlas.json#proofderivedgovernedmutation_authorization. The sign-off row is core/organregistry.json#proofderivedgovernedmutation_authorization. The fixture has three positive proposals: read\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-mechanism",
       "title": "Source-Backed Mechanism",
       "level": 2,
       "excerpt": "The mechanism row mechanism.proofderivedgovernedmutationauthorization.validatessyntheticgovernedmutationauthorization points at these runnable source loci: run and runauthorizationbundle for fixture and exported-bundle entry. validatemutationproposals, validateproofevidence_cells, validatepolicyverdicts, validatesideeffect_ledger, validaterollbackreceipts, and validatecoldreplay for the authorization predicate. sourcemodulemanifestresult and sourceopenbodyimport_summary for digest-verified copied source-body evidence without body text in result records. EXPECTEDNEGATIVECASES and scope_limit for falsification and scope boundary enforcement. The exported governed-mutation bundle imports six s\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with papermodules/proofderivedgovernedmutation_authorization.json for source Open standards/stdmicrocosmproofderivedgovernedmutationauthorization.json for required witnesses, negative-floor classes, denied authority, result record expectations, validator contract, and source refs. Open core/fixturemanifests/proofderivedgovernedmutationauthorization.fixturemanifest.json for positive fixture inputs, eight negative fixtures, body-import summary, durable result record refs, and source-open omission rules. Open examples/proofderivedgovernedmutationauthorization/exportedgovernedmutationauthorizationbundle/sourcemodulemanifest.json before inspecting copied source modules; result records carr\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "first-commands",
       "title": "First Commands",
       "level": 2,
       "excerpt": "From microcosm-substrate/, a cold agent can refresh the fixture result records with: The exported bundle validator proves the copied source-body floor without writing durable result records:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-receipts",
       "title": "Evidence Result records",
       "level": 2,
       "excerpt": "result records/firstwave/proofderivedgovernedmutationauthorization/proofderivedgovernedmutationauthorizationresult.json result records/firstwave/proofderivedgovernedmutationauthorization/proofderivedgovernedmutationauthorizationboard.json result records/firstwave/proofderivedgovernedmutationauthorization/proofderivedgovernedmutationauthorizationvalidation_receipt.json result records/firstwave/proofderivedgovernedmutationauthorization/exportedgovernedmutationauthorizationbundlevalidation_result.json result records/runtimeshell/demoproject/components/proofderivedgovernedmutationauthorization/exportedgovernedmutationauthorizationbundlevalidationresult.json result records/sign-off/firstwave/pro\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The fixture rejects the eight named negative cases in core/fixturemanifests/proofderivedgovernedmutationauthorization.fixturemanifest.json: standing account secret authority, policy-after-execution, hidden governance-vote, live cloud account secret, irreversible mutation, unlogged side effect, consensus without evidence, and final-answer-only success. These negative fixtures are the security argument. A proposal with impressive language, an admin-looking identity, hidden votes, post-hoc approvals, or a final answer that says it succeeded still fails unless the public evidence tables resolve to the authorization predicate.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The governed-mutation shape is grounded in admission-control and policy-as-code practice: a proposed state change is evaluated before it mutates the system, and the decision is separate from the actor's own assertion. The closest public anchors are Open Policy Agent, which separates policy decision-making from enforcement over structured input, and Kubernetes admission controllers, which validate or mutate API requests before persistence. The rollback and side-effect portions are also adjacent to controlled rollout practice, including feature-flag and canary-launch patterns described by Martin Fowler. Microcosm keeps the pattern synthetic and replay-only: the component validates visible pol\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-scope",
       "title": "Public Scope",
       "level": 2,
       "excerpt": "This component is a synthetic, public, source-open replay. It validates fixture and exported-bundle result records plus copied source bodies with digest provenance. The replay stays inside local files and does not use standing account secrets, access live cloud or account systems, use external model services, change source files, expose private proofs, expose policy-vote bodies, or claim benchmark safety.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.proof_derived_governed_mutation_authorization.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Proposals[\"mutation_proposals.json 3 synthetic proposals: read-only, scoped write, rollback\"] subgraph Evidence[\"Resolved evidence chain\"] ProofCells[\"proof_evidence_cells.json validator-backed proof refs\"] Policies[\"policy_verdicts.json 2+ visible verdicts before execution identity\"] Effects[\"side_effect_ledger.json logged diff for write / rollback\"] Rollbacks[\"rollback_receipts.json paired rollback result record\"] Replay[\"cold_replay.json cold rerun per proposal\"] end Hash{\"Recompute evidence-chain hash declared == derived?\"} Records[\"governed_mutation_records.json real repo record + git commit ref\"] AntiBake{\"Anti-bake gate git commit touched this source/test? re-derived refs match declared?\"} SourceManifest[\"source_module_manifest.json 6 copied source bodies verified by digest\"] Negatives[\"8 negative cases standing account secret, hidden vote, policy-after-execution, ...\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"scope limit no account secrets, live mutation, provider, source-file changes, hosting, public sharing, or launch\"] Proposals --> Evidence Evidence --> Hash Hash -->|match| AntiBake Hash -->|mismatch| Negatives Records --> AntiBake AntiBake -->|real record bound| Result records AntiBake -->|unbound or baked| Negatives SourceManifest --> Result records Negatives --> Result records Result records --> Ceiling",
       "source_hash": "sha256:b7d762590d361eee7f3a246ddc78f9cea86bb21436fb0abfc5c59d56ae9db882",
       "html_url": "docs/paper-modules.html#paper-module-proof-derived-governed-mutation-authorization-diagram-1",
       "html_anchor": "paper-module-proof-derived-governed-mutation-authorization-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_derived_governed_mutation_authorization.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "admission controllers",
       "url": "https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Martin Fowler",
       "url": "https://martinfowler.com/articles/feature-toggles.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-3",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Authority by derivation, not possession",
         "url": "doctrine.html#dcard-ax-3"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "proof_derived_governed_mutation_authorization",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Proof Derived Governed Mutation Authorization",
         "url": "components.html#component-proof_derived_governed_mutation_authorization"
        },
        {
         "id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates synthetic governed mutation authorization",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-16",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind authority to transaction scope",
         "url": "doctrine.html#dcard-p-16"
        },
        {
         "id": "P-4",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Possession is not permission",
         "url": "doctrine.html#dcard-p-4"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_derived_governed_mutation_authorization.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 18826
    },
    {
     "id": "paper_module.durable_agent_work_landing_replay",
     "title": "Durable Agent Work-Landing Replay",
     "relative_href": "docs/paper-modules.html#paper-module-durable-agent-work-landing-replay",
     "read_href": "docs/paper-modules.html#paper-module-durable-agent-work-landing-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-durable-agent-work-landing-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public durable work-landing replay fixture validates recorded agent landing rows, copied source internal control source bodies, validation-before-commit ordering, HEAD-advance evidence, blocker capture, and work log completion without performing live Git work.",
     "summary": "Durable Agent Work-Landing Replay is the public work-spine replay contract for agent landing claims. It checks claimed paths, owner-native validation refs, commit-attempt order, HEAD-before/after evidence, metadata-blocked rows, work log finalizer evidence, nine negative cases, and six exact copied source source bodies while keeping raw diffs, non-public paths, model-output data, and source bodies out of result records.",
     "authority_ceiling": "Public synthetic replay result records and copied source work-landing/internal control source bodies only; no live Git mutation, unrelated staging, broad checkpoint authority, arbitrary commit proof, external model access, non-public body export, public sharing, hosting, launch-scope decision, or whole-system correctness.",
     "abstract": "The public durable work-landing replay fixture validates recorded agent landing rows, copied source internal control source bodies, validation-before-commit ordering, HEAD-advance evidence, blocker capture, and work log completion without performing live Git work.",
     "teleology": {
      "section_id": "",
      "text": "The public durable work-landing replay fixture validates recorded agent landing rows, copied source internal control source bodies, validation-before-commit ordering, HEAD-advance evidence, blocker capture, and work log completion without performing live Git work.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "Durable agent work-landing replay is the public work-spine component for showing how Microcosm treats agent work as a transaction instead of a chat claim. It binds owned-path claims, owner-native validation, scoped commit attempts, protected Git-metadata blockers, work log capture, work log finalizers, and seed reentry into a source-available replay contract.\n\nThe component is useful to a cold agent because it turns a landing claim into an evidence checklist: a row is not \"landed\" unless claimed paths, validation refs, commit-attempt refs, HEAD-before/after evidence, blocker capture, and ledger completion all line up in the recorded replay. It validates the replay contract and the negative fixtures. It does not perform the live landing itself.\n\n###### Purpose\n\nThis component exists because an agent saying \"I committed the fix\" is cheap, and the claim is the part that tends to be wrong. The single question it answers is narrow: given a recorded landing attempt, does the evidence actually support the words used to describe it?\n\nThe approach worth noticing is that two ordinary-sounding rules are made into rejections rather than suggestions. A row that uses landed-commit language is rejected unless the recorded Git HEAD moved between before and after, so \"I landed it\" cannot stand on a HEAD that never advanced. A row on the commit path is rejected unless validation is recorded as preceding the commit attempt, so \"it passed\" cannot be back-filled after the fact. Those two checks, plus blocker capture for metadata-blocked rows and work log completion for every row, are what separate a transaction from a chat claim.\n\nThe replay is also source-backed rather than described from memory. The mechanics it checks rows against are not paraphrased; the actual source internal control files (work landing, mission preflight, scoped commit, the work log) are copied into the bundle by digest, so a reader can see which code the model was tested against. The component reads that evidence and rejects overclaims; it never runs Git, stages anything, or authorises a launch.\n\n###### Shape\n\nSource refs\n\nValidator `durable_agent_work_landing_replay validator` Diagram source\n\n```text\nflowchart LR Fixture[\"Public replay fixture claimed rows, validation refs, commit attempts, blocker rows\"] Source[\"Copied internal control source bodies work landing, preflight, scoped commit, work log\"] Validator[\"durable_agent_work_landing_replay validator\"] Mechanics[\"Replay mechanics claim before mutation, validate before commit, HEAD movement before landed language\"] Negative[\"Negative floor live Git authority, missing completion, uncaptured blocker, private leakage\"] Result record[\"Result records board, result, validation, sign-off; no live mutation authority\"] Fixture --> Validator Source --> Validator Validator --> Mechanics Validator --> Negative Mechanics --> Result record Negative --> Result record\n```\n\n###### Public Contract\n- The source pattern is `durable_agent_work_landing_replay_compound`.\n- The fixture lives at `fixtures/first_wave/durable_agent_work_landing_replay/input/`.\n- The runtime example lives at `examples/durable_agent_work_landing_replay/exported_work_landing_replay_bundle/`.\n- The validator is `microcosm_core.organs.durable_agent_work_landing_replay`.\n- The CLI command is `microcosm durable-agent-work-landing-replay run-work-landing-bundle`.\n- The governing standard is `standards/std_microcosm_durable_agent_work_landing_replay.json`.\n- The component model row is `core/organ_atlas.json#durable_agent_work_landing_replay`.\n- The sign-off row is `core/organ_registry.json#durable_agent_work_landing_replay`.\n\n###### Technical Mechanism\n\nThe replay fixture imports six source internal control bodies through `examples/durable_agent_work_landing_replay/exported_work_landing_replay_bundle/source_module_manifest.json`. Those bodies are copied into `source_modules/` with digest provenance instead of being summarized from memory:\n- `system/lib/workitem_runtime_entrypoint.py`\n- `system/lib/work_landing_status.py`\n- `tools/meta/control/work_landing.py`\n- `tools/meta/control/mission_transaction_preflight.py`\n- `tools/meta/control/scoped_commit.py`\n- tools/meta/factory/work_ledger.py\n\nThe validator checks the replay rows against those source-backed mechanics rather than accepting a prose landing claim. `validate_projection_protocol` requires source pattern refs, projection result record refs, and public runtime refs. `validate_landing_policy` requires the scoped-commit, broad-checkpoint, metadata-blocked patch-bundle, and hard-stop lanes, with broad checkpointing kept behind explicit operator authorization and launch-scope decision kept false. `validate_work_landing_runs` enforces claim-before-mutation evidence, validation before commit attempt, HEAD movement before landed language, blocker capture before metadata-blocked completion, dirty-tree boundary evidence, and work log finalizer evidence.\n\nThe source-open body floor is enforced separately by `validate_source_module_imports`. The manifest must declare `copied_non_secret_macro_body`, `body_in_receipt: false`, exact-copy source-to-target relations, allowed public source material classes, expected digests, and required anchors inside each copied source body. That check keeps the reader claim tied to actual source internal control files while result records carry only refs, digests, counts, and verdicts.\n\nThe result builder merges projection-protocol, landing-policy, work-run, source-module, source-open-body, and secret-exclusion checks into one metadata-only result record set. The board result record records three claimed-path rows, two validation-before-commit mechanics, one metadata-blocked row, one landed-commit row, nine observed negative cases for the first-wave fixture, and zero authority for live Git mutation or launch.\n\n###### Prior Art Grounding\n\nThis component is grounded in provenance and software supply-chain integrity patterns. The [W3C PROV](https://www.w3.org/TR/prov-overview/) family provides a general model for entities, activities, and agents involved in producing an artifact. [SLSA](https://slsa.dev/spec/) brings a similar concern to software builds: source, build process, provenance, and artifact integrity are tracked so consumers can reason about where an artifact came from and how it was produced.\n\nMicrocosm borrows that provenance posture for agent work landing: claimed paths, validation refs, commit attempts, HEAD-before/after evidence, blocker capture, Task/work log completion, and seed reentry are separate evidence fields. It does not perform a live Git landing or prove arbitrary commits outside the replay.\n\n###### Reader Evidence Routing\n\nRead the replay as an evidence-accounting component, not as a live landing controller. The board result record is the primary reader surface: it shows which claimed-path rows carried validation evidence, which rows were blocked by Git-metadata or dirty-tree constraints, and which rows had enough HEAD before/after evidence to use landed language.\n\nRead the source-module manifest as provenance evidence for the imported control plane, not as a permission slip to mutate those source files. The manifest binds the copied bodies by digest and line count so a cold agent can see which mechanics the replay model was checked against.\n\nRead negative cases as the authority floor. Rows that claim live Git mutation, broad checkpoint authority, missing work log completion, uncaptured blockers, launch-scope decision, or non-public paths/body export are supposed to fail. Passing those refusals is part of the positive claim.\n\n###### Evidence Result records\n- `receipts/first_wave/durable_agent_work_landing_replay/durable_agent_work_landing_replay_result.json`\n- `receipts/first_wave/durable_agent_work_landing_replay/durable_agent_work_landing_replay_board.json`\n- `receipts/first_wave/durable_agent_work_landing_replay/durable_agent_work_landing_replay_validation_receipt.json`\n- result records/sign-off/first_wave/durable_agent_work_landing_replay_fixture_acceptance.json\n\nRun the fixture result record refresh from `microcosm-substrate` with:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.durable_agent_work_landing_replay run --input fixtures/first_wave/durable_agent_work_landing_replay/input --out receipts/first_wave/durable_agent_work_landing_replay\n```\n\nRun the exported bundle validator without mutating durable result records with:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.durable_agent_work_landing_replay run-work-landing-bundle --input examples/durable_agent_work_landing_replay/exported_work_landing_replay_bundle --out /tmp/durable-agent-work-landing-replay\n```\n\n###### Named Proof Consumers\n- First-wave runtime consumer: `microcosm_core.organs.durable_agent_work_landing_replay run` consumes the fixture input, writes result, board, validation, and optional sign-off result records, and observes the nine negative cases declared in `EXPECTED_NEGATIVE_CASES`.\n- Exported-bundle consumer: `microcosm_core.organs.durable_agent_work_landing_replay run-work-landing-bundle` consumes the exported bundle without durable result record mutation, validates the source-module manifest, checks copied source-body digests and anchors, and emits the command card path used by runtime-shell demos.\n- Scope limit consumer: `standards/std_microcosm_durable_agent_work_landing_replay.json`, the component `AUTHORITY_CEILING`, and the fixture negative cases keep live Git mutation, broad checkpoint authority, unrelated dirty-path staging, live Task/work log mutation, external model access, source-file changes, public sharing, launch, non-public body export, and whole-system correctness outside this module.\n\n###### Negative Cases\n\nThe fixture rejects the nine named negative cases in `core/fixture_manifests/durable_agent_work_landing_replay.fixture_manifest.json`: missing validation evidence, validation recorded after a commit attempt, missing recorded completion, commit-landed language without a HEAD advance, live Git side-effect authority, missing dirty-tree boundary, uncaptured metadata blockers, overbroad distribution claims, and non-public path/body leakage.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_durable_agent_work_landing_replay.py -q --basetemp=/tmp/microcosm_durable_agent_work_landing_replay_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public replay evidence that claimed-path rows, validation-before-commit rows, HEAD before/after evidence, blocker-capture rows, work log finalizer evidence, copied internal control bodies, source manifests, metadata-only result records, and negative cases support the declared work-landing replay contract. The component, mechanism, code locus, governed concept, and principles are bound in the structured lattice bindings above.\n\nThis module may not claim live Git mutation, arbitrary commit-landed truth, live work log mutation, live work log mutation, external model access, broad checkpoint authority, source-file changes, hosted-public posture, launch-scope decision, publishing-scope decision, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope limit\n\nThis component is source-open replay evidence for synthetic result records and copied source bodies with digest provenance. It supports local inspection of recorded work-landing mechanics, while operational distribution and live Git side effects stay outside the public fixture.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe JSON bundle binds this module to mechanism `mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract`, component `durable_agent_work_landing_replay`, concept `concept.work_landing_and_continuity_control_bundle`, principles `P-5`, `P-10`, `P-14`, `P-15`, and `P-16`, axioms `AX-4` and `AX-9`, and the runtime code locus `src/microcosm_core/organs/durable_agent_work_landing_replay.py`. That lattice position makes the module a bounded work-landing accounting replay: it explains how evidence is recorded and rejected, not how to perform live Git mutation.\n\nThe concept edge is the scope limit. Broader work-continuity claims must route through sibling modules such as `bridge_phase_continuity_runtime` and `work_landing_control_spine`, while live landing behavior remains with the source internal control source files and work log/scoped-commit owner lanes. This module can cite their copied bodies as evidence, but it cannot promote itself into their live authority.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12686,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This component exists because an agent saying \"I committed the fix\" is cheap, and the claim is the part that tends to be wrong. The single question it answers is narrow: given a recorded landing attempt, does the evidence actually support the words used to describe it? The approach worth noticing is that two ordinary-sounding rules are made into rejections rather than suggestions. A row that uses landed-commit language is rejected unless the recorded Git HEAD moved between before and after, so \"I landed it\" cannot stand on a HEAD that never advanced. A row on the commit path is rejected unless validation is recorded as preceding the commit attempt, so \"it passed\" cannot be back-filled after\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The source pattern is durableagentworklandingreplay_compound. The fixture lives at fixtures/firstwave/durableagentworklanding_replay/input/. The runtime example lives at examples/durableagentworklandingreplay/exportedworklandingreplaybundle/. The validator is microcosmcore.components.durableagentworklanding_replay. The CLI command is microcosm durable-agent-work-landing-replay run-work-landing-bundle. The governing standard is standards/stdmicrocosmdurableagentworklandingreplay.json. The component model row is core/organatlas.json#durableagentworklanding_replay. The sign-off row is core/organregistry.json#durableagentworklanding_replay.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The replay fixture imports six source internal control bodies through examples/durableagentworklandingreplay/exportedworklandingreplaybundle/sourcemodulemanifest.json. Those bodies are copied into source_modules/ with digest provenance instead of being summarized from memory: system/lib/workitemruntimeentrypoint.py system/lib/worklandingstatus.py tools/meta/control/work_landing.py tools/meta/control/missiontransactionpreflight.py tools/meta/control/scoped_commit.py tools/meta/factory/work_ledger.py The validator checks the replay rows against those source-backed mechanics rather than accepting a prose landing claim. validateprojectionprotocol requires source pattern refs, projection result\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in provenance and software supply-chain integrity patterns. The W3C PROV family provides a general model for entities, activities, and agents involved in producing an artifact. SLSA brings a similar concern to software builds: source, build process, provenance, and artifact integrity are tracked so consumers can reason about where an artifact came from and how it was produced. Microcosm borrows that provenance posture for agent work landing: claimed paths, validation refs, commit attempts, HEAD-before/after evidence, blocker capture, Task/work log completion, and seed reentry are separate evidence fields. It does not perform a live Git landing or prove arbitrary c\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The JSON bundle binds this module to mechanism mechanism.durableagentworklandingreplay.validatespublicworklandingreplay_contract, component durableagentworklandingreplay, concept concept.worklandingandcontinuitycontrol_bundle, principles P-5, P-10, P-14, P-15, and P-16, axioms AX-4 and AX-9, and the runtime code locus src/microcosmcore/components/durableagentworklanding_replay.py. That lattice position makes the module a bounded work-landing accounting replay: it explains how evidence is recorded and rejected, not how to perform live Git mutation. The concept edge is the scope limit. Broader work-continuity claims must route through sibling modules such as bridgephasecontinuity_runtime and\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public replay evidence that claimed-path rows, validation-before-commit rows, HEAD before/after evidence, blocker-capture rows, work log finalizer evidence, copied internal control bodies, source manifests, metadata-only result records, and negative cases support the declared work-landing replay contract. The component, mechanism, code locus, governed concept, and principles are bound in the structured lattice bindings above. This module may not claim live Git mutation, arbitrary commit-landed truth, live work log mutation, live work log mutation, external model access, broad checkpoint authority, source-file changes, hosted-public posture, launch-scope decision, publi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read the replay as an evidence-accounting component, not as a live landing controller. The board result record is the primary reader surface: it shows which claimed-path rows carried validation evidence, which rows were blocked by Git-metadata or dirty-tree constraints, and which rows had enough HEAD before/after evidence to use landed language. Read the source-module manifest as provenance evidence for the imported control plane, not as a permission slip to mutate those source files. The manifest binds the copied bodies by digest and line count so a cold agent can see which mechanics the replay model was checked against. Read negative cases as the authority floor. Rows that claim live Git\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-receipts",
       "title": "Evidence Result records",
       "level": 2,
       "excerpt": "result records/firstwave/durableagentworklandingreplay/durableagentworklandingreplayresult.json result records/firstwave/durableagentworklandingreplay/durableagentworklandingreplayboard.json result records/firstwave/durableagentworklandingreplay/durableagentworklandingreplayvalidation_receipt.json result records/sign-off/firstwave/durableagentworklandingreplayfixture_acceptance.json Run the fixture result record refresh from microcosm-substrate with: Run the exported bundle validator without mutating durable result records with:",
       "block_kinds": [
        "code",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "First-wave runtime consumer: microcosmcore.components.durableagentworklanding_replay run consumes the fixture input, writes result, board, validation, and optional sign-off result records, and observes the nine negative cases declared in EXPECTEDNEGATIVECASES. Exported-bundle consumer: microcosmcore.components.durableagentworklanding_replay run-work-landing-bundle consumes the exported bundle without durable result record mutation, validates the source-module manifest, checks copied source-body digests and anchors, and emits the command card path used by runtime-shell demos. Focused pytest consumer: tests/testdurableagentworklanding_replay.py checks negative-case coverage, public-relative m\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The fixture rejects the nine named negative cases in core/fixturemanifests/durableagentworklandingreplay.fixturemanifest.json: missing validation evidence, validation recorded after a commit attempt, missing recorded completion, commit-landed language without a HEAD advance, live Git side-effect authority, missing dirty-tree boundary, uncaptured metadata blockers, overbroad distribution claims, and non-public path/body leakage.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component is source-open replay evidence for synthetic result records and copied source bodies with digest provenance. It supports local inspection of recorded work-landing mechanics, while operational distribution and live Git side effects stay outside the public fixture.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.durable_agent_work_landing_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Fixture[\"Public replay fixture claimed rows, validation refs, commit attempts, blocker rows\"] Source[\"Copied internal control source bodies work landing, preflight, scoped commit, work log\"] Validator[\"durable_agent_work_landing_replay validator\"] Mechanics[\"Replay mechanics claim before mutation, validate before commit, HEAD movement before landed language\"] Negative[\"Negative floor live Git authority, missing completion, uncaptured blocker, private leakage\"] Result record[\"Result records board, result, validation, sign-off; no live mutation authority\"] Fixture --> Validator Source --> Validator Validator --> Mechanics Validator --> Negative Mechanics --> Result record Negative --> Result record",
       "source_hash": "sha256:177786792f5e6e4cc481a835431ebae511d3ae060a9f1e0cbc14fad7055f9655",
       "html_url": "docs/paper-modules.html#paper-module-durable-agent-work-landing-replay-diagram-1",
       "html_anchor": "paper-module-durable-agent-work-landing-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/durable_agent_work_landing_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SLSA",
       "url": "https://slsa.dev/spec/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 2,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-9",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Compensable transactional effects",
         "url": "doctrine.html#dcard-ax-9"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.bridge_phase_continuity_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Bridge Phase Continuity Runtime",
         "url": "paper-modules.html#paper-module-bridge-phase-continuity-runtime"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "durable_agent_work_landing_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Durable Agent Work Landing Replay",
         "url": "components.html#component-durable_agent_work_landing_replay"
        },
        {
         "id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public work landing replay contract",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 6,
       "links": [
        {
         "id": "P-10",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Do not land effects without compensation",
         "url": "doctrine.html#dcard-p-10"
        },
        {
         "id": "P-14",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Carry basis and provenance together",
         "url": "doctrine.html#dcard-p-14"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "P-16",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind authority to transaction scope",
         "url": "doctrine.html#dcard-p-16"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "concept.work_landing_and_continuity_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "work landing and continuity controls as transaction-scoped coordination evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/durable_agent_work_landing_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 13998
    },
    {
     "id": "paper_module.work_landing_control_spine",
     "title": "Work Landing Control Spine",
     "relative_href": "docs/paper-modules.html#paper-module-work-landing-control-spine",
     "read_href": "docs/paper-modules.html#paper-module-work-landing-control-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-work-landing-control-spine",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public work-landing control spine validates copied work-landing internal control source bodies without authorizing live Git, ledger, claim-launch, private-index, public sharing, or launch operations.",
     "summary": "Work Landing Control Spine is the public source-open import for work-landing internal control bodies. It validates copied work_landing, work_landing_status, mission transaction preflight, landing preflight, and scoped-commit source modules by manifest digest, required anchors, no-live-mutation contract flags, secret-exclusion scan, and metadata-only result record policy while keeping live Git, work log, work log, claim launch, shared-index mutation, private-index execution, external model access, public sharing, and launch-scope decision out of scope.",
     "authority_ceiling": "Copied source internal control source bundle, validator result record, source-manifest digest evidence, required-anchor evidence, no-live-mutation contract flags, and secret-exclusion evidence only; no live Git mutation, live work log or work log mutation, claim launch, shared-index mutation, private-index commit execution, broad staging, external model access, account secret export, public sharing, launch-scope decision, or whole-system correctness.",
     "abstract": "The public work-landing control spine validates copied work-landing internal control source bodies without authorizing live Git, ledger, claim-launch, private-index, public sharing, or launch operations.",
     "teleology": {
      "section_id": "teleology",
      "text": "worklandingcontrol_spine makes the source work-landing control plane inspectable inside Microcosm by copying the command, reconcile, mission preflight, and private-index scoped commit source bodies into a public bundle. The point is not to let the public validator mutate Git or ledgers; it is to expose the real internal control mechanics that govern claims, owned paths, same-path conflicts, expected-parent checks, shared-index quarantine, finalizer ordering, and scoped commit discipline.",
      "source": "markdown_section"
     },
     "body_markdown": "###### Teleology\n\n`work_landing_control_spine` makes the source work-landing control plane inspectable inside Microcosm by copying the command, reconcile, mission preflight, and private-index scoped commit source bodies into a public bundle. The point is not to let the public validator mutate Git or ledgers; it is to expose the real internal control mechanics that govern claims, owned paths, same-path conflicts, expected-parent checks, shared-index quarantine, finalizer ordering, and scoped commit discipline.\n\n###### Purpose\n\nThe source repository this slice comes from is edited by several agents at once, so its hardest engineering problem is mundane: how does one agent land a small, finished commit without colliding with another agent's half-done work in the same files, and without claiming more than it actually did? The control plane that answers this lives in a handful of source modules. This module copies those bodies, non-secret, into a public bundle so a reader can inspect the real mechanics rather than take a description on trust.\n\nThe single question it answers is narrow: are these copied internal control bodies the genuine ones, with their load-bearing logic still present, and does the bundle keep within its stated limits? It is a witness over copied source, not a runner. It never touches Git, ledgers, or claims.\n\nTwo ideas in the copied source are worth a reader's attention. The first is the scoped commit. `scoped_commit.py` builds a throwaway Git index from the current `HEAD`, stages only the exact paths or hunks the agent declares it owns, writes a tree from that private index, and commits it against the captured parent with a compare-and-swap on the branch ref. The shared `.git/index` is never written. What was a three-step behavioural rule (add exact paths, check nothing else is staged, then commit) becomes an infrastructure invariant: an agent physically cannot sweep up a neighbour's dirty changes, because those changes were never in the index it committed from. The second is ordering. `work_landing_status.py` fixes a sequence of controller actions and a set of prerequisites, so that claims are only released after the work log session is finalised, and convergence is only recomputed after claims are released. The module checks that these anchors are still present in the copied bodies, which is what separates an honest copy from a stale hash bag.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR A[\"Copied source source bundle 5 internal control bodies + manifest + contract\"] --> B[\"Manifest digest and line-count check is the copy exact?\"] B --> C[\"Required anchor scan is the load-bearing logic still present?\"] C --> D[\"Runtime no-live-mutation contract are all authority flags false?\"] D --> E[\"Secret-exclusion scan any private/account secret material?\"] E --> F[\"Validation result record refs, hashes, counts, findings\"] B --> G[\"Reject stale or missing source body\"] C --> G D --> H[\"Reject authority overclaim\"] E --> I[\"Reject private payload leakage\"]\n```\n\nThe shape is a public validation spine for copied work-landing internal control source. It validates exact copied module bodies, required anchors, contract flags, and secret-exclusion posture, then writes a result record that contains metadata, hashes, counts, gates, and findings. It does not execute live Git mutation, mutate work log or work log, launch claims, stage broadly, or run private-index commits.\n\n###### Technical Mechanism\n\nThe validator in `src/microcosm_core/macro_tools/work_landing_control_spine.py` is a staged copied-source witness, not a live work-landing actuator. It loads `bundle_manifest.json`, `source_module_manifest.json`, and `work_landing_control_runtime_contract.json`; then it checks seven required inputs: five copied source source bodies plus the two manifest/contract JSON files. The source body rows must exist under `source_modules/`, keep the expected SHA-256 digests and line counts from the bundle manifest, stay inside the allowed material classes, and classify source modules as `copied_non_secret_macro_body`.\n\nAfter file parity, the validator scans required anchors for each copied source body: `work_landing.py` must still expose the parser and admission/begin/status anchors; `work_landing_status.py` must still expose controller action and reconcile/finalizer models; the mission-transaction preflight wrapper and kernel must still expose owned-path, session-id, shared-index quarantine, and private-index admission anchors; and `scoped_commit.py` must still carry the private-index scoped-commit and shared-index non-mutation anchors. These anchor checks make the copied bundle more than a hash bag: the result record shows that the specific internal control mechanisms readers care about are still present.\n\nThe final gates are authority and payload boundaries. The runtime contract must keep every live-mutation flag false, including live Git mutation, work log mutation, work log mutation, claim launch, shared-index mutation, private-index commit execution, broad staging, external model access, public sharing, and launch-scope decision. The secret-exclusion scan runs over the copied source bodies and manifest/contract inputs, while the output result record records refs, hashes, counts, anchor rows, authority rows, and findings with `body_in_receipt: false`. Focused tests pin the pass case, the live-mutation overclaim blocker, streaming line-count behavior, source-manifest exact-copy checks, and the CLI smoke path.\n\n###### Public Contract\n\nThe public command is:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.cli work-landing-control-spine \\\n  validate-control-bundle \\\n  --input examples/work_landing_control_spine/exported_work_landing_control_bundle \\\n  --out receipts/first_wave/work_landing_control_spine\n```\n\nThe validator checks copied module digests, line counts, required source anchors, the no-live-mutation runtime contract, the originating overclaim Work item reference, and a secret-exclusion scan over the copied bundle. Source bodies live in the bundle; result records carry refs, hashes, counts, gates, and findings.\n\n###### Governing Standard\n\n`standards/std_microcosm_work_landing_control_spine.json` owns the result record contract, source refs, allowed public inputs, forbidden private inputs, and scope limit for this import.\n\n###### Source System\n\nThe copied source bodies are:\n- `tools/meta/control/work_landing.py`\n- `system/lib/work_landing_status.py`\n- `tools/meta/control/mission_transaction_preflight.py`\n- `system/lib/mission_transaction_landing_preflight.py`\n- `tools/meta/control/scoped_commit.py`\n\nThis closes the old `work_landing_tool_body_import` overclaim by adding an exact copied-source bundle beneath the existing public dry-run refactor.\n\n###### Governing Doctrine Relations\n\nThe generated structured source record reports sixteen bundle-derived edges for this page and zero unresolved selective relations. Its subjects bind the paper module to `macro_projection_import_protocol` and `mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports`; its code-locus edges bind the reader page to `src/microcosm_core/macro_tools/work_landing_control_spine.py` and `src/microcosm_core/organs/macro_projection_import_protocol.py`. The mechanism claim is therefore narrow: Microcosm validates a public source-projection import bundle by copied-source parity, required anchors, no-live-mutation flags, and secret-exclusion evidence.\n\nThe concept edges are `concept.work_landing_and_continuity_control_bundle` and `concept.import_projection_and_drift_control_bundle`. The governing principles are `P-5`, `P-10`, `P-14`, `P-15`, and `P-16`; the governing axioms are `AX-4` and `AX-9`; and the declared paper-module dependencies are `paper_module.macro_projection_import_protocol`, `paper_module.durable_agent_work_landing_replay`, and `paper_module.mission_transaction_work_spine`. Together these relations explain why the validator treats source-copy fidelity, transaction preflight, private-index containment, and no-launch/no-live-mutation ceilings as one control mechanism rather than as separate prose claims.\n\n###### Reader Evidence Routing\n\nRead a passing control-bundle result record as \"the copied source bodies matched the manifest, required anchors were present, the no-live-mutation scope limit held, and no forbidden private material was found.\" Do not read it as a live landing operation or a proof that future work sessions are safe.\n\nRead digest and line-count failures as stale-copy evidence only.\n\nRead authority-overclaim failures as launch-boundary evidence. A contract that claims live Git, ledger mutation, claim launch, broad staging, private-index commit execution, external model access, or launch-scope decision must stay blocked.\n\n###### Named Proof Consumers\n- Bundle validator consumer: PYTHONPATH=src ../repo-python -m microcosm_core.cli work-landing-control-spine validate-control-bundle --input examples/work_landing_control_spine/exported_work_landing_control_bundle --out /tmp/microcosm-work-landing-control-spine/result record consumes the copied source bodies, bundle manifest, source-module manifest, runtime contract, anchor scan, scope limit flags, secret-exclusion scan, and metadata-only result record writer.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_work_landing_control_spine.py -q` pins the green bundle path, exact-copy source-manifest relation, digest and line-count checks, live-mutation overclaim rejection, result record body omission, streaming line-count behavior, and CLI argument order.\n- Corpus consumer: `PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus` verifies that this Markdown remains consistent with the structured source record and bundle-backed corpus. It is a read-only consistency result record; it is not permission to hand-edit generated projections or shared bundle rows.\n\n###### Prior Art Grounding\n\nThe landing spine is grounded in version-control staging, deterministic workflow history, and provenance-control patterns. Git's index separates selected changes from the rest of a dirty worktree, which is the practical ancestor of scoped path ownership. Temporal workflows show the value of recorded event history and deterministic replay for long-running work. Microcosm imports those ideas as a public control spine: preflight, scoped selection, reconcile/finalize checks, and copied source-body digests make work landing auditable without broad staging, private-index leakage, or live mutation from the paper module itself.\n\nPrior-art anchors:\n- Git staging/index workflow: https://git-scm.com/book/en/v2/Git-Basics-Recording-Changes-to-the-Repository\n- Temporal workflow event history and replay: https://docs.temporal.io/workflows\n\n###### Validation Result record Path\n\nReader-verifiable bundle command, run from `microcosm-substrate/`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.cli work-landing-control-spine \\\n  validate-control-bundle \\\n  --input examples/work_landing_control_spine/exported_work_landing_control_bundle \\\n  --out receipts/first_wave/work_landing_control_spine\n```\n\nThe command writes the copied-source validation result record under `receipts/first_wave/work_landing_control_spine/`, including `exported_work_landing_control_bundle_validation_result.json`. That result record is the public replay boundary for module digests, required source anchors, secret-exclusion posture, and the no-live-mutation runtime contract.\n\nThis result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, run live Git mutation, mutate work log or work log state, execute private-index commits, launch claims, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis spine validates copied internal control source bodies for public inspection. It excludes live Git mutation, shared-index mutation, work log or work log mutation, claim launch, broad staging, private-index commit execution, external model access, account secret export, public sharing, hosting, or launch-scope decision.\n\n###### Scope boundary\n\nThis spine is local internal control system for inspection and validation. It does not run live Git mutations; mutate work log or work log state; launch claims; stage broadly; execute private-index commits; use external model services; export account secrets, account or browser state, model-output data bodies, or recipient-send state; publish; host; or include launch operations.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open floor for this module is the copied bundle plus the validator that checks it:\n- validator runtime: `src/microcosm_core/macro_tools/work_landing_control_spine.py`\n- standard: `standards/std_microcosm_work_landing_control_spine.json`\n- copied source bundle: `examples/work_landing_control_spine/exported_work_landing_control_bundle`\n- copied source manifest: `examples/work_landing_control_spine/exported_work_landing_control_bundle/source_module_manifest.json`\n- runtime contract: `examples/work_landing_control_spine/exported_work_landing_control_bundle/work_landing_control_runtime_contract.json`\n- focused tests: `tests/test_work_landing_control_spine.py`\n- generated placeholder JSON row: `paper_modules/work_landing_control_spine.json`\n\nThat floor lets a reader inspect the public internal control mechanics and replay the digest, anchor, no-live-mutation, and secret-exclusion checks. It is not a license to run live Git commands, mutate ledgers, claim launch-scope decision, or treat copied source bodies as a private-system-equivalent control plane.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13772,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "teleology",
       "title": "Teleology",
       "level": 2,
       "excerpt": "worklandingcontrol_spine makes the source work-landing control plane inspectable inside Microcosm by copying the command, reconcile, mission preflight, and private-index scoped commit source bodies into a public bundle. The point is not to let the public validator mutate Git or ledgers; it is to expose the real internal control mechanics that govern claims, owned paths, same-path conflicts, expected-parent checks, shared-index quarantine, finalizer ordering, and scoped commit discipline.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The source repository this slice comes from is edited by several agents at once, so its hardest engineering problem is mundane: how does one agent land a small, finished commit without colliding with another agent's half-done work in the same files, and without claiming more than it actually did? The control plane that answers this lives in a handful of source modules. This module copies those bodies, non-secret, into a public bundle so a reader can inspect the real mechanics rather than take a description on trust. The single question it answers is narrow: are these copied internal control bodies the genuine ones, with their load-bearing logic still present, and does the bundle keep within\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is a public validation spine for copied work-landing internal control source. It validates exact copied module bodies, required anchors, contract flags, and secret-exclusion posture, then writes a result record that contains metadata, hashes, counts, gates, and findings. It does not execute live Git mutation, mutate work log or work log, launch claims, stage broadly, or run private-index commits.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The validator in src/microcosmcore/macrotools/worklandingcontrol_spine.py is a staged copied-source witness, not a live work-landing actuator. It loads bundlemanifest.json, sourcemodule_manifest.json, and worklandingcontrolruntimecontract.json; then it checks seven required inputs: five copied source source bodies plus the two manifest/contract JSON files. The source body rows must exist under source_modules/, keep the expected SHA-256 digests and line counts from the bundle manifest, stay inside the allowed material classes, and classify source modules as copiednonsecretmacrobody. After file parity, the validator scans required anchors for each copied source body: work_landing.py must stil\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The public command is: The validator checks copied module digests, line counts, required source anchors, the no-live-mutation runtime contract, the originating overclaim Work item reference, and a secret-exclusion scan over the copied bundle. Source bodies live in the bundle; result records carry refs, hashes, counts, gates, and findings.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-standard",
       "title": "Governing Standard",
       "level": 2,
       "excerpt": "standards/stdmicrocosmworklandingcontrol_spine.json owns the result record contract, source refs, allowed public inputs, forbidden private inputs, and scope limit for this import.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-substrate",
       "title": "Source System",
       "level": 2,
       "excerpt": "The copied source bodies are: tools/meta/control/work_landing.py system/lib/worklandingstatus.py tools/meta/control/missiontransactionpreflight.py system/lib/missiontransactionlanding_preflight.py tools/meta/control/scoped_commit.py This closes the old worklandingtoolbodyimport overclaim by adding an exact copied-source bundle beneath the existing public dry-run refactor.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open floor for this module is the copied bundle plus the validator that checks it: validator runtime: src/microcosmcore/macrotools/worklandingcontrol_spine.py standard: standards/stdmicrocosmworklandingcontrol_spine.json copied source bundle: examples/worklandingcontrolspine/exportedworklandingcontrol_bundle copied source manifest: examples/worklandingcontrolspine/exportedworklandingcontrolbundle/sourcemodule_manifest.json runtime contract: examples/worklandingcontrolspine/exportedworklandingcontrolbundle/worklandingcontrolruntime_contract.json focused tests: tests/testworklandingcontrolspine.py generated placeholder JSON row: papermodules/worklandingcontrolspine.json That floor\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This spine validates copied internal control source bodies for public inspection. It excludes live Git mutation, shared-index mutation, work log or work log mutation, claim launch, broad staging, private-index commit execution, external model access, account secret export, public sharing, hosting, or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-doctrine-relations",
       "title": "Governing Doctrine Relations",
       "level": 2,
       "excerpt": "The generated structured source record reports sixteen bundle-derived edges for this page and zero unresolved selective relations. Its subjects bind the paper module to macroprojectionimport_protocol and mechanism.macroprojectionimportprotocol.validatespublicmacroprojection_imports; its code-locus edges bind the reader page to src/microcosmcore/macrotools/worklandingcontrol_spine.py and src/microcosmcore/components/macroprojectionimportprotocol.py. The mechanism claim is therefore narrow: Microcosm validates a public source-projection import bundle by copied-source parity, required anchors, no-live-mutation flags, and secret-exclusion evidence. The concept edges are concept.worklandingandco\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read a passing control-bundle result record as \"the copied source bodies matched the manifest, required anchors were present, the no-live-mutation scope limit held, and no forbidden private material was found.\" Do not read it as a live landing operation or a proof that future work sessions are safe. Read digest and line-count failures as stale-copy evidence only. They show the public bundle no longer matches the source manifest; they do not authorize an separate claim. Read authority-overclaim failures as launch-boundary evidence. A contract that claims live Git, ledger mutation, claim launch, broad staging, private-index commit execution, external model access, or launch-scope decision mus\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "Bundle validator consumer: PYTHONPATH=src ../repo-python -m microcosmcore.cli work-landing-control-spine validate-control-bundle --input examples/worklandingcontrolspine/exportedworklandingcontrolbundle --out /tmp/microcosm-work-landing-control-spine/result record consumes the copied source bodies, bundle manifest, source-module manifest, runtime contract, anchor scan, scope limit flags, secret-exclusion scan, and metadata-only result record writer. Focused regression consumer: PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/testworklandingcontrolspine.py -q pins the green bundle path, exact-copy source-manifest relation, digest and line-count checks, live-mutation overcla\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable bundle command, run from microcosm-substrate/: The command writes the copied-source validation result record under result records/firstwave/worklandingcontrolspine/, including exportedworklandingcontrolbundlevalidationresult.json. That result record is the public replay boundary for module digests, required source anchors, secret-exclusion posture, and the no-live-mutation runtime contract. This result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, run live Git mutation, mutate work log or work log state, execute private-index commits, launch claims, or aggregate doctrine-lattice coverage.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The landing spine is grounded in version-control staging, deterministic workflow history, and provenance-control patterns. Git's index separates selected changes from the rest of a dirty worktree, which is the practical ancestor of scoped path ownership. Temporal workflows show the value of recorded event history and deterministic replay for long-running work. Microcosm imports those ideas as a public control spine: preflight, scoped selection, reconcile/finalize checks, and copied source-body digests make work landing auditable without broad staging, private-index leakage, or live mutation from the paper module itself. Prior-art anchors: Git staging/index workflow: https://git-scm.com/book\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This spine is local internal control system for inspection and validation. It does not run live Git mutations; mutate work log or work log state; launch claims; stage broadly; execute private-index commits; use external model services; export account secrets, account or browser state, model-output data bodies, or recipient-send state; publish; host; or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.work_landing_control_spine.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR A[\"Copied source source bundle 5 internal control bodies + manifest + contract\"] --> B[\"Manifest digest and line-count check is the copy exact?\"] B --> C[\"Required anchor scan is the load-bearing logic still present?\"] C --> D[\"Runtime no-live-mutation contract are all authority flags false?\"] D --> E[\"Secret-exclusion scan any private/account secret material?\"] E --> F[\"Validation result record refs, hashes, counts, findings\"] B --> G[\"Reject stale or missing source body\"] C --> G D --> H[\"Reject authority overclaim\"] E --> I[\"Reject private payload leakage\"]",
       "source_hash": "sha256:120c2d4938fddf71ce9e0ac9318273ab6f312f3f54323fa552614653dce2d71c",
       "html_url": "docs/paper-modules.html#paper-module-work-landing-control-spine-diagram-1",
       "html_anchor": "paper-module-work-landing-control-spine-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/work_landing_control_spine.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 2,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-9",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Compensable transactional effects",
         "url": "doctrine.html#dcard-ax-9"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.durable_agent_work_landing_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Durable Agent Work-Landing Replay",
         "url": "paper-modules.html#paper-module-durable-agent-work-landing-replay"
        },
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "macro_projection_import_protocol",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Source Projection Import Protocol",
         "url": "components.html#component-macro_projection_import_protocol"
        },
        {
         "id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public source projection imports",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-10",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Do not land effects without compensation",
         "url": "doctrine.html#dcard-p-10"
        },
        {
         "id": "P-14",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Carry basis and provenance together",
         "url": "doctrine.html#dcard-p-14"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "P-16",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind authority to transaction scope",
         "url": "doctrine.html#dcard-p-16"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "concept.work_landing_and_continuity_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "work landing and continuity controls as transaction-scoped coordination evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/work_landing_control_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 15220
    },
    {
     "id": "paper_module.executable_doctrine_grammar",
     "title": "Executable Doctrine Grammar",
     "relative_href": "docs/paper-modules.html#paper-module-executable-doctrine-grammar",
     "read_href": "docs/paper-modules.html#paper-module-executable-doctrine-grammar",
     "context_href": "docs/rules-and-ideas.html#paper-module-executable-doctrine-grammar",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public executable-doctrine grammar fixture validates public standard rows, paper-module sections, negative cases, copied executable-grammar and standards/type-plane source-module bodies, and metadata-only result records without claiming doctrine completeness.",
     "summary": "Executable Doctrine Grammar is the public grammar membrane for doctrine-shaped runtime fixtures. It validates standard row fields, paper-module teleology and result record sections, duplicate-slug and overclaim negative cases, exact copied executable-grammar, standards-registry/type-plane, lattice, kind-atlas, and standards option-surface bodies, then emits metadata-only result records with source refs, digests, counts, and scope limits.",
     "authority_ceiling": "Public fixture, exported standards bundle, and copied source specimen/body digest evidence only; no private standards engine export, source doctrine completeness, source notes export, model-output data export, source-file changes, launch-scope decision, publishing-scope decision, private-data equivalence, or whole-system correctness.",
     "abstract": "The public executable-doctrine grammar fixture validates public standard rows, paper-module sections, negative cases, copied executable-grammar and standards/type-plane source-module bodies, and metadata-only result records without claiming doctrine completeness.",
     "teleology": {
      "section_id": "teleology",
      "text": "executabledoctrinegrammar turns toy public standards and paper-module fixtures into deterministic grammar result records. It makes doctrine-shape claims checkable while importing copied, source bodies only through source-module manifests, digests, and result record boundaries.",
      "source": "markdown_section"
     },
     "body_markdown": "###### Purpose\n\nDoctrine in most systems is prose convention. A standard says a rule should hold, a paper module says a section should be present, and nothing checks whether the claim is actually true. This component exists to make doctrine shape a thing a program can pass or fail. It answers one question: does a standard row or a paper-module fixture carry the structure that doctrine here requires, or is it just text that looks the part?\n\nWhat it checks is deliberately structural rather than semantic. A standard row must declare a teleology, a governing standard, result record expectations, and an scope boundary. A paper module must carry the matching sections by heading. The validator does not judge whether the prose is good. It judges whether the load-bearing fields are present, so a row cannot quietly drop its result record expectations or its scope boundary and still pass.\n\nThe less obvious part is that the failures are first-class. Five negative cases are part of the contract: a row missing its required fields, a prose-only standard that tries to claim executable authority, a source doctrine body copied into a public fixture, a duplicate standard slug, and a grammar pass that overclaims doctrine completeness. A run that does not observe each of these classes is blocked, so the checker is held to demonstrating that it can reject, not only that it can accept.\n\nThe component also imports copied source bodies, but only through a source-module manifest with declared SHA-256 digests, and never inlines a body into a result record. The result record reports refs, hashes, counts, and verdicts; the bodies live in the bundle. The point is to make the doctrine shape checkable without turning the public surface into an export of the private standards engine.\n\n###### Teleology\n\n`executable_doctrine_grammar` turns toy public standards and paper-module fixtures into deterministic grammar result records. It makes doctrine-shape claims checkable while importing copied, source bodies only through source-module manifests, digests, and result record boundaries.\n\n###### Shape\n\nSource refs\n\nPublic doctrine fixtures `fixtures/first_wave/executable_doctrine_grammar/input` Executable grammar validator `src/microcosm_core/organs/executable_doctrine_grammar.py` Exported standards bundle `examples/executable_doctrine_grammar/exported_standards_bundle` Source-module manifest `examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle/source_module_manifest.json` metadata-only deterministic result records `receipts/first_wave/executable_doctrine_grammar/` Bundle and atlas evidence `core/paper_module_capsules.json::paper_modules[18]` Diagram source\n\n```text\nflowchart TD A[\"Public doctrine fixtures fixtures/first_wave/executable_doctrine_grammar/input\"] --> B[\"Executable grammar validator src/microcosm_core/components/executable_doctrine_grammar.py\"] C[\"Exported standards bundle examples/executable_doctrine_grammar/exported_standards_bundle\"] --> B D[\"Source-module manifest examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle/source_module_manifest.json\"] --> B B --> E[\"metadata-only deterministic result records result records/first_wave/executable_doctrine_grammar/\"] E --> F[\"Bundle and atlas evidence core/paper_module_capsules.json::paper_modules[18]\"] F --> G[\"Bounded reader claim doctrine-shape validation, not launch-scope decision\"]\n```\n\n###### Reader Evidence Routing\n\nReader evidence routes through the executable-grammar runtime, fixture inputs, exported standards bundle, executable-grammar metabolism bundle, source-module manifests, public result records, and focused tests. The Mermaid diagram and Atlas card are generated navigation projections; this page is the cold-reader explanation of the proof boundary.\n\n###### Public Contract\n\nThe validator checks standard slugs, teleology, governing standard refs, result record expectations, scope boundaries, paper-module sections, source-body sentinels, duplicate slug conflicts, prose-only authority claims, and doctrine-completeness overclaims. It also validates the imported public executable-grammar specimen, standards registry, standards type-plane, lattice registry, kind-atlas runtime, and standards option-surface runtime as exact copied source modules.\n\n###### Prior Art Grounding\n\nThis component is grounded in schema validation, parser generators, and executable semantics traditions. [JSON Schema](https://json-schema.org/specification) anchors the idea that document shape can be validated by a shared machine contract, [Tree-sitter](https://github.com/tree-sitter/tree-sitter) shows the practical value of generated grammars for inspectable source structure, and the [K framework](https://kframework.org/) is a close reference point for turning semantic rules into executable artifacts.\n\nMicrocosm borrows the executable-contract pattern: doctrine shape, result record expectations, duplicate slugs, imported source bodies, and scope boundaries are checked by a validator instead of left as prose convention. It does not claim source doctrine completeness or launch-scope decision.\n\n###### First Commands\n\nFrom `microcosm-substrate/`, a cold agent can prove the fixture path:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate --input fixtures/first_wave/executable_doctrine_grammar/input --out receipts/first_wave/executable_doctrine_grammar --card\n```\n\nThe exported public standards bundle uses the same component with a narrower input:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate-standards-bundle --input examples/executable_doctrine_grammar/exported_standards_bundle --out receipts/first_wave/executable_doctrine_grammar --card\n```\n\nThe source-open source-body floor is the executable-grammar metabolism bundle:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate-executable-grammar-metabolism-bundle --input examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle --out receipts/first_wave/executable_doctrine_grammar --card\n```\n\n###### Source-Backed Mechanism\n\nThe mechanism row `mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle` points at `validate`, `validate_standards_bundle`, `validate_executable_grammar_metabolism_bundle`, `validate_source_module_imports`, `validate_standard_registry`, `validate_paper_module_shape`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `GRAMMAR_AUTHORITY_CEILING`.\n\nThose symbols are the runnable floor:\n- `validate` writes the fixture standards, paper-module, group-index, and sign-off result records.\n- `validate_standards_bundle` validates the exported public standards bundle and keeps result record paths public-relative.\n- `validate_executable_grammar_metabolism_bundle` validates the copied executable-grammar metabolism specimen, standards registry/type-plane, lattice registry, kind-atlas, and standards option-surface bodies.\n- `validate_source_module_imports` requires `source_module_manifest.json`, `copied_non_secret_macro_body`, `exact_copy`, allowlisted source refs, body-in-result record exclusion, and SHA-256 digest matches.\n- `result_card` compresses result record evidence without duplicating body text.\n\n###### Negative Cases\n\nThe fixture must keep these failures executable rather than prose-only:\n- `invalid_standard_and_module`: missing teleology, result record expectations, governing standard, and scope boundary.\n- `prose_standard_claims_runtime_authority`: prose cannot claim executable runtime authority.\n- `macro_doctrine_body_copied_into_fixture`: source doctrine body sentinels are rejected from public fixtures.\n- `duplicate_standard_slug_conflict`: duplicate slugs are rejected deterministically.\n- `grammar_index_pass_overclaims_doctrine_complete`: grammar pass is not doctrine-completeness authority.\n\n###### Atlas Binding\n- `paper_module_ref`: `core/paper_module_capsules.json#paper_module.executable_doctrine_grammar`\n- `mechanism_refs[].ref`: `mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle`\n- `code_loci[]`: `src/microcosm_core/organs/executable_doctrine_grammar.py` with the mechanism symbols named above.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_executable_doctrine_grammar.py -q --basetemp=/tmp/microcosm_executable_doctrine_grammar_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope boundary\n\nThis module documents a public grammar fixture plus exact source body imports. It does not claim source doctrine completeness, public launch-scope decision, hosted-public posture, public sharing, recipient work, external model access, private-data equivalence, or whole-system correctness.\n\n###### Scope limit\n\nThis paper module can claim an executable-doctrine grammar fixture with a generated diagram view and an Atlas card. It can explain the public grammar specimen, exact source body imports, and metadata-only result record boundary.\n\nIt cannot claim source doctrine completeness, public launch-scope decision, hosted-public posture, publishing-scope decision, recipient execution, external model access, private-data equivalence, source-file changes, launch-scope decision, or whole-system correctness. Higher claims must land in the JSON bundle and generated projection before Markdown can narrate them.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\n`examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle/source_module_manifest.json` declares 12 copied source bodies. Result records may report refs, hashes, counts, classes, and verdicts, but `body_in_receipt=false` remains required.\n\nThe body-material classes are `public_macro_receipt_body`, `public_macro_standard_body`, and `public_macro_tool_body`. The body set covers the executable-grammar specimen README, board, and result record; standards registry and group-index standards; standard type-plane and core authority index; lattice registry and standard; and the kind-atlas / standards option-surface runtime tools.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 10200,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Doctrine in most systems is prose convention. A standard says a rule should hold, a paper module says a section should be present, and nothing checks whether the claim is actually true. This component exists to make doctrine shape a thing a program can pass or fail. It answers one question: does a standard row or a paper-module fixture carry the structure that doctrine here requires, or is it just text that looks the part? What it checks is deliberately structural rather than semantic. A standard row must declare a teleology, a governing standard, result record expectations, and an scope boundary. A paper module must carry the matching sections by heading. The validator does not judge wheth\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "teleology",
       "title": "Teleology",
       "level": 2,
       "excerpt": "executabledoctrinegrammar turns toy public standards and paper-module fixtures into deterministic grammar result records. It makes doctrine-shape claims checkable while importing copied, source bodies only through source-module manifests, digests, and result record boundaries.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Read this module as an executable grammar path: public fixtures and exact source-module manifests enter the component runtime, result records prove bounded bounded claim.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Reader evidence routes through the executable-grammar runtime, fixture inputs, exported standards bundle, executable-grammar metabolism bundle, source-module manifests, public result records, and focused tests. The Mermaid diagram and Atlas card are generated navigation projections; this page is the cold-reader explanation of the proof boundary.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The validator checks standard slugs, teleology, governing standard refs, result record expectations, scope boundaries, paper-module sections, source-body sentinels, duplicate slug conflicts, prose-only authority claims, and doctrine-completeness overclaims. It also validates the imported public executable-grammar specimen, standards registry, standards type-plane, lattice registry, kind-atlas runtime, and standards option-surface runtime as exact copied source modules.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in schema validation, parser generators, and executable semantics traditions. JSON Schema anchors the idea that document shape can be validated by a shared machine contract, Tree-sitter shows the practical value of generated grammars for inspectable source structure, and the K framework is a close reference point for turning semantic rules into executable artifacts. Microcosm borrows the executable-contract pattern: doctrine shape, result record expectations, duplicate slugs, imported source bodies, and scope boundaries are checked by a validator instead of left as prose convention. It does not claim source doctrine completeness or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "first-commands",
       "title": "First Commands",
       "level": 2,
       "excerpt": "From microcosm-substrate/, a cold agent can prove the fixture path: The exported public standards bundle uses the same component with a narrower input: The source-open source-body floor is the executable-grammar metabolism bundle:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-mechanism",
       "title": "Source-Backed Mechanism",
       "level": 2,
       "excerpt": "The mechanism row mechanism.executabledoctrinegrammar.validatespublicdoctrinegrammarbundle points at validate, validatestandardsbundle, validateexecutablegrammarmetabolismbundle, validatesourcemoduleimports, validatestandard_registry, validatepapermoduleshape, resultcard, EXPECTEDNEGATIVECASES, and GRAMMARAUTHORITYCEILING. Those symbols are the runnable floor: validate writes the fixture standards, paper-module, group-index, and sign-off result records. validatestandardsbundle validates the exported public standards bundle and keeps result record paths public-relative. validateexecutablegrammarmetabolismbundle validates the copied executable-grammar metabolism specimen, standards registry/t\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The fixture must keep these failures executable rather than prose-only: invalidstandardand_module: missing teleology, result record expectations, governing standard, and scope boundary. prosestandardclaimsruntimeauthority: prose cannot claim executable runtime authority. macrodoctrinebodycopiedinto_fixture: source doctrine body sentinels are rejected from public fixtures. duplicatestandardslug_conflict: duplicate slugs are rejected deterministically. grammarindexpassoverclaimsdoctrine_complete: grammar pass is not doctrine-completeness authority.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "examples/executabledoctrinegrammar/exportedexecutablegrammarmetabolismbundle/sourcemodulemanifest.json declares 12 copied source bodies. Result records may report refs, hashes, counts, classes, and verdicts, but bodyinreceipt=false remains required. The body-material classes are publicmacroreceipt_body, publicmacrostandardbody, and publicmacrotoolbody. The body set covers the executable-grammar specimen README, board, and result record; standards registry and group-index standards; standard type-plane and core authority index; lattice registry and standard; and the kind-atlas / standards option-surface runtime tools.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module documents a public grammar fixture plus exact source body imports. It does not claim source doctrine completeness, public launch readiness, hosted-public posture, public sharing, recipient work, external model access, private-data equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim an executable-doctrine grammar fixture with a generated diagram view and an Atlas card. It can explain the public grammar specimen, exact source body imports, and metadata-only result record boundary. It cannot claim source doctrine completeness, public launch-scope decision, hosted-public posture, public sharing decision, recipient execution, external model access, private-data equivalence, source-file changes, launch-scope decision, or whole-system correctness. Higher claims must land in the JSON bundle and generated projection before Markdown can narrate them.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "atlas-binding",
       "title": "Atlas Binding",
       "level": 2,
       "excerpt": "papermoduleref: core/papermodulecapsules.json#papermodule.executabledoctrine_grammar mechanism_refs[].ref: mechanism.executabledoctrinegrammar.validatespublicdoctrinegrammarbundle code_loci[]: src/microcosmcore/components/executabledoctrine_grammar.py with the mechanism symbols named above.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.executable_doctrine_grammar.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Public doctrine fixtures fixtures/first_wave/executable_doctrine_grammar/input\"] --> B[\"Executable grammar validator src/microcosm_core/components/executable_doctrine_grammar.py\"] C[\"Exported standards bundle examples/executable_doctrine_grammar/exported_standards_bundle\"] --> B D[\"Source-module manifest examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle/source_module_manifest.json\"] --> B B --> E[\"metadata-only deterministic result records result records/first_wave/executable_doctrine_grammar/\"] E --> F[\"Bundle and atlas evidence core/paper_module_capsules.json::paper_modules[18]\"] F --> G[\"Bounded reader claim doctrine-shape validation, not launch-scope decision\"]",
       "source_hash": "sha256:1736cad390db51df07a5e44e592b13865b7adc9954c5b566123324d4dcc4a8cd",
       "html_url": "docs/paper-modules.html#paper-module-executable-doctrine-grammar-diagram-1",
       "html_anchor": "paper-module-executable-doctrine-grammar-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/executable_doctrine_grammar.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "JSON Schema",
       "url": "https://json-schema.org/specification",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Tree-sitter",
       "url": "https://github.com/tree-sitter/tree-sitter",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "K framework",
       "url": "https://kframework.org/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 3,
       "links": [
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "executable_doctrine_grammar",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Executable Doctrine Grammar",
         "url": "components.html#component-executable_doctrine_grammar"
        },
        {
         "id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public doctrine grammar bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.executable_doctrine_grammar_standard_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "standard as schema contract with explicit scope limit",
         "url": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/executable_doctrine_grammar.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11534
    },
    {
     "id": "paper_module.macro_projection_import_protocol",
     "title": "Source Projection Import Protocol",
     "relative_href": "docs/paper-modules.html#paper-module-macro-projection-import-protocol",
     "read_href": "docs/paper-modules.html#paper-module-macro-projection-import-protocol",
     "context_href": "docs/rules-and-ideas.html#paper-module-macro-projection-import-protocol",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public source-projection import protocol validates classified source-to-Microcosm projection cells, per-slice source-module manifests, digest relations, omission result records, intake statuses, and scope limits without claiming source or launch-scope decision.",
     "summary": "Source Projection Import Protocol is the public import membrane for source-backed Microcosm growth. It validates fixture and exported projection bundles by checking source refs, public target refs, content digests, source-to-target relations, per-slice source-module manifests, validation refs, omitted-material result records, metadata-only result record policy, secret-exclusion scans, projection cell statuses, and negative cases while keeping true private bodies, model-output data, launch material, and static count claims out of public authority.",
     "authority_ceiling": "Verified source body imports, fixture result records, exported projection-bundle result records, per-slice manifest refs, and metadata-only result record fields only; no live source source authority, private-system equivalence, launch, public sharing, hosted deployment, recipient work, provider or Lean/Lake execution, secret/non-public body export, source-file changes, or whole-system correctness.",
     "abstract": "The public source-projection import protocol validates classified source-to-Microcosm projection cells, per-slice source-module manifests, digest relations, omission result records, intake statuses, and scope limits without claiming source or launch-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "The public source-projection import protocol validates classified source-to-Microcosm projection cells, per-slice source-module manifests, digest relations, omission result records, intake statuses, and scope limits without claiming source or launch-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`macro_projection_import_protocol` is the source-available membrane for bringing source system into Microcosm. It exists because Microcosm should be dense and alive without becoming a dump of private source bodies, operator context, model-output data, or launch material.\n\nThe component validates a projection packet with four public claims:\n- source bodies are copied or source-faithfully refactored only when the target file, digest, provenance, validation refs, and metadata-only result record contract verify;\n- private material is omitted with explicit omission result records;\n- public runtime refs are fixtures, standards, paper modules, exported bundles, copied body targets, and result record refs;\n- authority stays capped below launch, public sharing, private-system equivalence, and live source source authority.\n\n###### Purpose\n\nMicrocosm grows by copying real material out of a much larger private codebase. The danger in that move is obvious: a dense public copy is exactly the kind of artefact that quietly carries a secret, an operator conversation, a model-output data, or launch material along with the genuinely useful code. This component exists to answer one question for every copied slice: was this body allowed out, and is the public copy honestly tied to the source it claims to come from?\n\nThe answer is an accounting check, not a trust statement. Each copied row declares its source ref, its public target ref, a content digest, and a material class. The protocol sorts that class into one of two sets. Five classes are source bodies (pattern, standard, tool, result record, proof) and may be copied with provenance. Nine classes are forbidden outright (source note, operator thread, model-output data, account secret, secret, recipient packet, launch packet, and the like) and can never appear as an imported body. Anything claiming to be must also carry a verification record naming the digest, the source-to-target relation, and the command or test that consumes the copy.\n\nThe unusual part is how the protocol treats a copy whose source has since changed. For an exact-copy row it re-hashes the live source file on disk and compares it against the digest recorded at import time. A mismatch is not reported as a failed import. It is recorded as live source drift: the original copy was still honest, the source has simply moved on, and the row is flagged for the refresh actuator rather than failed. The protocol deliberately separates a dishonest import from a stale one. That keeps the public copy faithful without forcing it to track every upstream edit in lock-step, and it stops a routine upstream change from being mistaken for a broken proof.\n\nWhat the check does not do is just as load-bearing. A passing scan proves that the named slice omitted the forbidden material classes and kept result record bodies out of the result record. It does not establish the public copy is complete, equivalent to the private root, or ready to launch. The import is evidence about provenance and boundaries, never a launch decision.\n\n###### Shape\n\nThe protocol is the membrane between source source and public Microcosm evidence. It reads projection cells, classifies the requested import, verifies source/target refs and digest relations, applies the secret-exclusion boundary, and emits metadata-only result records that a public reader can replay without gaining live source authority.\n\nIts shape is deliberately two-level:\n- fixture and exported-bundle commands validate whole projection packets, negative cases, omitted-material result records, and the intake/status board;\n- source-module manifests bind each imported slice to source refs, target refs, digest relation, body-import class, validation refs, and scope limits.\n\nThat split keeps the component usable as a source-open body floor while preventing the paper module from becoming a static copy-count ledger. Counts, status totals, and current body-import floors live in result records and runtime status surfaces.\n\n###### Runtime Shape\n\nRun the fixture:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.macro_projection_import_protocol run --input fixtures/first_wave/macro_projection_import_protocol/input --out receipts/first_wave/macro_projection_import_protocol\n```\n\nRun the exported bundle:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.macro_projection_import_protocol run-projection-bundle --input examples/macro_projection_import_protocol/exported_projection_import_bundle --out receipts/runtime_shell/demo_project/organs/macro_projection_import_protocol\n```\n\nPreview the next import slice without writing result records:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.macro_projection_import_protocol plan --input examples/macro_projection_import_protocol/exported_projection_import_bundle\n```\n\nThe public CLI also exposes the same validator through:\n\nThe `plan` action emits `macro_projection_import_intake_preview_v1`. It does not write result records. It scores each proposed projection cell before import: source refs, public target refs, validation refs, selected pattern ids, copy policy, scope limit, omitted material, secret-exclusion scan count, verified body-import status, and ready/blocked status.\n\nExact-copy is a relation, not the whole protocol. Rows declared as exact-copy prove byte-identical source and target digests and may be maintained by the exact-copy refresh actuator. Rows declared as source-faithful public edits or refactors prove the source source digest and the improved public target digest separately, cite the rewrite or symbol mapping, and are maintained by their own validator/test lane. This is the lane for public-safety redaction, dependency trimming, Microcosm-standard compliance, or runnable local cleanup.\n\nIt also self-hosts the intake cell state machine. Every projection cell carries `projection_status`, `cell_state`, `action_required`, status reason, landed evidence refs, and a next runtime surface. The board totals those fields as status counts plus an open-actionable count so future passes can distinguish a ready but unlanded cell from a verified public runtime import, self-hosted protocol, or runtime bridge that is already consumed.\n\n`microcosm intake` is the runtime bridge over that plan. It writes `receipts/runtime_shell/intake_bridge/runtime_reveal_import_bridge.json`, links the projection cells to the spine and reveal commands, and projects the same statuses into the first-run bridge. Current landed statuses are: `public_runtime_import_landed` for `formal_math_readiness_extensions`, `self_hosted_status_protocol_landed` for `projection_protocol_self_host`, and `runtime_bridge_landed` for `runtime_reveal_import_bridge`. These statuses do not raise authority above public metadata, fixture shape, and result record refs.\n\n`microcosm status` and `microcosm spine` also expose the computed `macro_body_import_floor`. Treat that value as a result record-backed floor, not a stable prose constant: the current authority lives in result records/sign-off/first_wave/macro_projection_import_protocol_fixture_acceptance.json and the first-wave runtime result records under `receipts/first_wave/macro_projection_import_protocol/`. Cold readers should inspect `public_safe_body_import_count`, `public_safe_body_import_status`, `projection_status_counts`, `open_actionable_cell_count`, and `secret_exclusion_scan` there instead of trusting an old markdown count. The floor is still not a launch signal or private-system equivalence claim.\n\n###### Trace-Bundle Source-Body Import\n\nThe trace-bundle slice is the current proof-grade example of a source-body import. Its source-module manifest is `examples/macro_projection_import_protocol/exported_projection_import_bundle/trace_capsule_source_module_manifest.json`; the projection cell is `trace_capsule_prompt_edit_capture_source_modules_import`. The cell imports four source source bodies into the bundle:\n- `tools/meta/observability/cli_prompt_trace.py` -> `source_modules/tools/meta/observability/cli_prompt_trace.py`;\n- `system/server/tests/test_cli_prompt_trace_capsule.py` -> `source_modules/system/server/tests/test_cli_prompt_trace_capsule.py`;\n- `tools/agent_trace_structurer/parser.mjs` -> `source_modules/tools/agent_trace_structurer/parser.mjs`;\n- `tools/agent_trace_structurer/parser.test.mjs` -> `source_modules/tools/agent_trace_structurer/parser.test.mjs`.\n\nThe manifest is the body-floor result record for this slice. It records `module_count: 4`, `body_copied: true`, `body_in_receipt: false`, `sha256_match: true`, line counts, byte counts, required anchors, source refs, target refs, and the shared `copied_non_secret_macro_body` classification. That means the public bundle carries the source bodies, while runtime result records carry paths, hashes, counts, anchors, and validation refs without duplicating the bodies.\n\nDiagram source\n\n```text\nflowchart TD A[\"Copied material row source ref, target ref, digest, material class\"] --> B{\"Material class?\"} B -- \"forbidden class (secret, account secret, source note, operator, provider, launch)\" --> R[\"Reject: forbidden body import\"] B -- \"class (pattern, standard, tool, result record, proof)\" --> C{\"Verification record present and target digest bound?\"} C -- \"no\" --> R2[\"Reject: unverified import\"] C -- \"yes, exact copy\" --> D[\"Re-hash live source source on disk\"] D --> E{\"Source digest still matches?\"} E -- \"yes\" --> F[\"body floor\"] E -- \"no\" --> G[\"Flag live source drift (honest copy, refresh later)\"] G --> F F --> H[\"Per-slice manifest + metadata-only result record\"] H --> I[\"Reader projection\"] H -. does not grant .-> J[\"live source authority, public sharing, launch, or source-file changes\"]\n```\n\nThe imported Python side supplies the trace-bundle runtime surface: `cli_prompt_trace.py` reads selected source files, rejects binary paths, supports line-range and symbol selection, redacts selected excerpt text, and emits numbered source lines with schema metadata. Its companion test module proves terminal validation semantics, repeated prompt interning, source excerpt priority, and completion-report behavior. The imported JavaScript side supplies the Agent Trace Structurer surface: `parser.mjs` preserves `source_text` as the exact copied string, treats `source_lines` and indexes as deterministic navigation projections, and builds lossless attachment clips where exact text is reconstructed from `source_segments[].text`. `parser.test.mjs` proves embedded file artifact indexing, Codex trace shape, final-message extraction, AIW thread classification, and bounded export behavior.\n\nThis is a mechanism/evidence claim, not a launch claim. The slice proves that these four named, source bodies were imported into the public bundle with manifest-backed digest and anchor checks, and that the parser and trace bundle behavior have public fixture coverage. It does not establish that live provider logs, browser UI state, account or browser state, account secrets, raw operator thread bodies, recipient-send material, or future trace-bundle bodies are or exported.\n\nThose artifacts are the source-open floor. The result record bodies stay metadata-only, and private source note, operator thread content, model-output data bodies, account secrets, account or browser state, and launch or recipient material remain outside the public bundle.\n\n###### Evidence Binding\n\nThe component's current public authority is the accepted component row in `core/organ_registry.json` plus the sign-off result record result records/sign-off/first_wave/macro_projection_import_protocol_fixture_acceptance.json. The JSON paper-module bundle is `core/paper_module_capsules.json#paper_module.macro_projection_import_protocol`, and the resolved mechanism row is `core/mechanism_sources.json#mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports`. The runtime source locus is `src/microcosm_core/organs/macro_projection_import_protocol.py`, with focused regression coverage in `tests/test_macro_projection_import_protocol.py`.\n\nThe exported bundle does not have a single catch-all source-module manifest. It carries one `*_source_module_manifest.json` file per imported slice under `examples/macro_projection_import_protocol/exported_projection_import_bundle/`, plus copied targets under that bundle's `source_modules/` tree. That per-slice manifest shape is part of the evidence: it lets each imported route, tool, standard, result record, proof, or runtime body keep its own source ref, target ref, digest relation, validation refs, and scope limit.\n\nThe first command for the fixture lane is:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.macro_projection_import_protocol run --input fixtures/first_wave/macro_projection_import_protocol/input --out receipts/first_wave/macro_projection_import_protocol\n```\n\n###### Reader Evidence Routing\n\nUse this order when checking the module:\n1. Read the JSON bundle and standard to confirm the paper-module binding, scope limit, source-module manifest contract, and result record fields.\n2. Run the fixture command to validate projection cells and negative cases against temporary result records.\n3. Run the exported-bundle command to validate the public bundle and copied source-module surfaces.\n4. Inspect the source-module manifests for exact-copy versus source-faithful edit relations before deciding which refresh lane applies.\n5. Run the focused regression and paper-module corpus checks before landing a markdown or manifest update.\n\nIf a manifest is dry but a bundle-level validator still fails, check whether a bundle manifest carries its own expected digest or line-count rows. Do not infer that all companion manifest surfaces were refreshed just because an exact-copy source-module dry run is clean.\n\n###### Prior Art Grounding\n\nThe import membrane follows established provenance and software-supply-chain patterns: copied or refactored artifacts need source refs, target refs, digests, validation refs, omission records, and a claim boundary. The closest public anchors are [W3C PROV](https://www.w3.org/TR/prov-overview/) for describing entity/activity/agent provenance, the [SLSA specification](https://slsa.dev/spec/) for artifact integrity and provenance in software supply chains, and [in-toto](https://in-toto.io/) for linking supply-chain steps through signed metadata.\n\nMicrocosm applies those patterns to a public/private projection boundary rather than to launch attestation. The per-slice source-module manifests, secret-exclusion scans, metadata-only result records, and omission result records are inspired by that provenance lineage, but they remain a local validator contract for public Microcosm fixtures and exported bundles.\n\n###### Negative Cases\n\nThe validator intentionally rejects:\n- private body import requests;\n- omitted source material without omission result record refs;\n- authority upgrades into live source source authority;\n- projection cells without validation refs;\n- launch, public sharing, recipient-work, or secret-export claims.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThese checks validate projection cells, per-slice manifests, omitted-material result records, and metadata-only result record policy only. A diagram view is generated for this module and an atlas card is linked. The checks do not authorize live source source authority, secret export, launch, public sharing, source-file changes, provider or Lean/Lake execution, or whole-system correctness.\n\nRe-enter this module when a new projection cell lands, a source-module manifest is refreshed, or a result record count changes. The repair route is to rerun the component validator, refresh the first-wave and sign-off result records, and update the standard or paper module only where the result record contract changed. Do not raise the scope limit from documentation edits.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can claim that the protocol validates projection cells, per-slice manifests, copied or source-faithful target bodies, omission result records, negative cases, and metadata-only result record policy. It can also claim that accepted result records expose current `public_safe_body_import_count`, `public_safe_body_import_status`, `projection_status_counts`, `open_actionable_cell_count`, and `secret_exclusion_scan` fields.\n\nIt cannot claim that Microcosm is launch-ready, equivalent to the private root, free of all private material, or authorized to publish. It also cannot raise an exact-copy refresh into permission to rewrite source-faithful public refactors, mutate live source source, use external model services, run Lean/Lake, or export operator/session bodies. Any stronger claim must come from the owning result record, standard, or launch gate.\n\nScope boundary: metadata, provenance, public runtime refs, copied-body presence, green fixture result records, digest refs, and intake status counts are bounded import evidence only. They are not launch-scope decision, publishing-scope decision, private-system equivalence, live source authority, semantic truth, complete secret-scan coverage, external model service, Lean/Lake execution, or whole-system correctness.\n\n###### Scope limit\n\nThis paper module explains a public projection protocol. It excludes launch, hosted deployment, public sharing, recipient work, external model access, Lean/Lake execution, secret export, private source-body export, or whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nExact-copy rows are refreshed by `refresh-exact-copy-source-modules`; source-faithful edit rows stay with their own validator/test lane because their target body is intentionally public cleanup, normalization, or path redaction rather than byte identity.\n\nThe bundle body floor is never inferred from prose. A reader should inspect:\n- `examples/macro_projection_import_protocol/exported_projection_import_bundle/*_source_module_manifest.json` for per-slice source-to-target relations;\n- the copied targets under `examples/macro_projection_import_protocol/exported_projection_import_bundle/source_modules/`;\n- `receipts/first_wave/macro_projection_import_protocol/projection_import_intake_board.json` for cell state, open actions, and landed evidence refs;\n- result records/sign-off/first_wave/macro_projection_import_protocol_fixture_acceptance.json for the accepted public authority result record.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 18520,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Microcosm grows by copying real material out of a much larger private codebase. The danger in that move is obvious: a dense public copy is exactly the kind of artefact that quietly carries a secret, an operator conversation, a model-output data, or launch material along with the genuinely useful code. This component exists to answer one question for every copied slice: was this body allowed out, and is the public copy honestly tied to the source it claims to come from? The answer is an accounting check, not a trust statement. Each copied row declares its source ref, its public target ref, a content digest, and a material class. The protocol sorts that class into one of two sets. Five classe\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The protocol is the membrane between source source and public Microcosm evidence. It reads projection cells, classifies the requested import, verifies source/target refs and digest relations, applies the secret-exclusion boundary, and emits metadata-only result records that a public reader can replay without gaining live source authority. Its shape is deliberately two-level: fixture and exported-bundle commands validate whole projection packets, negative cases, omitted-material result records, and the intake/status board; source-module manifests bind each imported slice to source refs, target refs, digest relation, body-import class, validation refs, and scope limits. That split keeps the c\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-shape",
       "title": "Runtime Shape",
       "level": 2,
       "excerpt": "Run the fixture: Run the exported bundle: Preview the next import slice without writing result records: The public CLI also exposes the same validator through: The plan action emits macroprojectionimportintakepreview_v1. It does not write result records. It scores each proposed projection cell before import: source refs, public target refs, validation refs, selected pattern ids, copy policy, scope limit, omitted material, secret-exclusion scan count, verified body-import status, and ready/blocked status. Exact-copy is a relation, not the whole protocol. Rows declared as exact-copy prove byte-identical source and target digests and may be maintained by the exact-copy refresh actuator. Rows d\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "classification and digest checks as copies or source-faithful public refactors. Exact-copy rows are refreshed by refresh-exact-copy-source-modules; source-faithful edit rows stay with their own validator/test lane because their target body is intentionally public cleanup, normalization, or path redaction rather than byte identity. The bundle body floor is never inferred from prose. A reader should inspect: examples/macroprojectionimportprotocol/exportedprojectionimportbundle/sourcemodule_manifest.json for per-slice source-to-target relations; the copied targets under examples/macroprojectionimportprotocol/exportedprojectionimportbundle/source_modules/; result records/firstwave/macroprojecti\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "trace-capsule-source-body-import",
       "title": "Trace-Bundle Source-Body Import",
       "level": 2,
       "excerpt": "The trace-bundle slice is the current proof-grade example of a source-body import. Its source-module manifest is examples/macroprojectionimportprotocol/exportedprojectionimportbundle/tracecapsulesourcemodulemanifest.json; the projection cell is tracecapsuleprompteditcapturesourcemodules_import. The cell imports four source source bodies into the bundle: tools/meta/observability/cliprompttrace.py -> sourcemodules/tools/meta/observability/cliprompt_trace.py; system/server/tests/testcliprompttracecapsule.py -> sourcemodules/system/server/tests/testcliprompttrace_capsule.py; tools/agenttracestructurer/parser.mjs -> sourcemodules/tools/agenttrace_structurer/parser.mjs; tools/agenttracestructurer\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module can claim that the protocol validates projection cells, per-slice manifests, copied or source-faithful target bodies, omission result records, negative cases, and metadata-only result record policy. It can also claim that accepted result records expose current publicsafebodyimportcount, publicsafebodyimportstatus, projectionstatuscounts, openactionablecellcount, and secretexclusion_scan fields. It cannot claim that Microcosm is launch-ready, equivalent to the private root, free of all private material, or authorized to publish. It also cannot raise an exact-copy refresh into permission to rewrite source-faithful public refactors, mutate live source source, use external model ser\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-binding",
       "title": "Evidence Binding",
       "level": 2,
       "excerpt": "The component's current public authority is the accepted component row in core/organ_registry.json plus the sign-off result record result records/sign-off/firstwave/macroprojectionimportprotocolfixtureacceptance.json. The JSON paper-module bundle is core/papermodulecapsules.json#papermodule.macroprojectionimportprotocol, and the resolved mechanism row is core/mechanismsources.json#mechanism.macroprojectionimportprotocol.validatespublicmacroprojectionimports. The runtime source locus is src/microcosmcore/components/macroprojectionimportprotocol.py, with focused regression coverage in tests/testmacroprojectionimportprotocol.py. The exported bundle does not have a single catch-all source-modul\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Use this order when checking the module: Read the JSON bundle and standard to confirm the paper-module binding, scope limit, source-module manifest contract, and result record fields. Run the fixture command to validate projection cells and negative cases against temporary result records. Run the exported-bundle command to validate the public bundle and copied source-module surfaces. Inspect the source-module manifests for exact-copy versus source-faithful edit relations before deciding which refresh lane applies. Run the focused regression and paper-module corpus checks before landing a markdown or manifest update. If a manifest is dry but a bundle-level validator still fails, check whethe\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate/, reproduce this page's proof boundary with temporary result records: These checks validate projection cells, per-slice manifests, omitted-material result records, and metadata-only result record policy only. A diagram view is generated for this module and an atlas card is linked. The checks do not authorize live source source authority, secret export, launch, public sharing, source-file changes, provider or Lean/Lake execution, or whole-system correctness. Re-enter this module when a new projection cell lands, a source-module manifest is refreshed, or a result record count changes. The repair route is to rerun the component validator, refresh the first-wave and sig\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The import membrane follows established provenance and software-supply-chain patterns: copied or refactored artifacts need source refs, target refs, digests, validation refs, omission records, and a claim boundary. The closest public anchors are W3C PROV for describing entity/activity/agent provenance, the SLSA specification for artifact integrity and provenance in software supply chains, and in-toto for linking supply-chain steps through signed metadata. Microcosm applies those patterns to a public/private projection boundary rather than to launch attestation. The per-slice source-module manifests, secret-exclusion scans, metadata-only result records, and omission result records are inspir\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The validator intentionally rejects: private body import requests; omitted source material without omission result record refs; authority upgrades into live source source authority; projection cells without validation refs; launch, public sharing, recipient-work, or secret-export claims.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module explains a public projection protocol. It excludes launch, hosted deployment, public sharing, recipient work, external model access, Lean/Lake execution, secret export, private source-body export, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.macro_projection_import_protocol.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Copied material row source ref, target ref, digest, material class\"] --> B{\"Material class?\"} B -- \"forbidden class (secret, account secret, source note, operator, provider, launch)\" --> R[\"Reject: forbidden body import\"] B -- \"class (pattern, standard, tool, result record, proof)\" --> C{\"Verification record present and target digest bound?\"} C -- \"no\" --> R2[\"Reject: unverified import\"] C -- \"yes, exact copy\" --> D[\"Re-hash live source source on disk\"] D --> E{\"Source digest still matches?\"} E -- \"yes\" --> F[\"body floor\"] E -- \"no\" --> G[\"Flag live source drift (honest copy, refresh later)\"] G --> F F --> H[\"Per-slice manifest + metadata-only result record\"] H --> I[\"Reader projection\"] H -. does not grant .-> J[\"live source authority, public sharing, launch, or source-file changes\"]",
       "source_hash": "sha256:b9853a8da4a4518b47c8c0f78a7ac1b3bf9ea944f92c837c6944b2539cbc340c",
       "html_url": "docs/paper-modules.html#paper-module-macro-projection-import-protocol-diagram-1",
       "html_anchor": "paper-module-macro-projection-import-protocol-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/macro_projection_import_protocol.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SLSA specification",
       "url": "https://slsa.dev/spec/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "in-toto",
       "url": "https://in-toto.io/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 7,
       "links": [
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.pattern_binding_contract",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Pattern Binding Contract",
         "url": "paper-modules.html#paper-module-pattern-binding-contract"
        },
        {
         "id": "paper_module.formal_math_readiness_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Readiness Gate",
         "url": "paper-modules.html#paper-module-formal-math-readiness-gate"
        },
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        },
        {
         "id": "paper_module.batch11_saturation_engines_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 11 Saturation Engines Bundle",
         "url": "paper-modules.html#paper-module-batch11-saturation-engines-capsule"
        },
        {
         "id": "paper_module.batch8_compliance_pipeline_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 8 Compliance Pipeline Bundle",
         "url": "paper-modules.html#paper-module-batch8-compliance-pipeline-capsule"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "macro_projection_import_protocol",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Source Projection Import Protocol",
         "url": "components.html#component-macro_projection_import_protocol"
        },
        {
         "id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public source projection imports",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 4,
       "links": [
        {
         "id": "P-14",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Carry basis and provenance together",
         "url": "doctrine.html#dcard-p-14"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/macro_projection_import_protocol.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 20040
    },
    {
     "id": "paper_module.mission_transaction_work_spine",
     "title": "Mission Transaction Work Spine",
     "relative_href": "docs/paper-modules.html#paper-module-mission-transaction-work-spine",
     "read_href": "docs/paper-modules.html#paper-module-mission-transaction-work-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-mission-transaction-work-spine",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public mission-transaction fixture validates work-landing, claim, dependency, scoped-commit, checkpoint-lane, result record-drain, completion, and copied control source-module contracts without mutating live ledgers or git.",
     "summary": "Mission Transaction Work Spine is the public replay membrane for Microcosm work-landing discipline. It checks fixed Work item, claim, dependency, transaction, result record-drain, completion, scoped mutation, and checkpoint-lane rows; validates copied work log, work log, checkpoint, scoped-commit, and mission-preflight source modules by manifest; and writes metadata-only result records with secret-exclusion and scope limits.",
     "authority_ceiling": "Public fixture and exported-bundle result records only; no live work log mutation, live work log mutation, live git mutation, private backup execution, broad checkpoint authorization, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "The public mission-transaction fixture validates work-landing, claim, dependency, scoped-commit, checkpoint-lane, result record-drain, completion, and copied control source-module contracts without mutating live ledgers or git.",
     "teleology": {
      "section_id": "",
      "text": "The public mission-transaction fixture validates work-landing, claim, dependency, scoped-commit, checkpoint-lane, result record-drain, completion, and copied control source-module contracts without mutating live ledgers or git.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nThis component exists because the riskiest moment in agentic code work is the one that feels safest: the agent runs a few checks, sees no errors, and concludes that its work is finished and committed. Those are different facts. A clean preflight describes the state of the checks. It says nothing about whether a competing claim already owns the same path, whether the branch has moved under the agent, or whether the commit ever actually landed. The single question this module answers is narrow and concrete: what evidence has to hold before a unit of work is allowed to land, and is that evidence checkable rather than asserted?\n\nThe interesting design choice is that the module refuses to trust its own declared verdicts. Most fixtures pass when their inputs carry the right labels. It then perturbs the input one field at a time: a same-path claim conflict, a stale expected-parent hash, a checkpoint lane mutated into an unauthorised broad commit. A genuine check has to break under each of those and stay clear under harmless ones, such as a claim on an unrelated path. That asymmetry, not the bare pass, is the claim.\n\nThe result is deliberately bounded. A pass means the public fixture, the exported source bodies, and the negative cases together preserve the work-landing contract and that its discriminating tests still discriminate. It does not touch the live work log, the live work log, or Git, and it grants no authority to commit, checkpoint broadly, back up, or launch.\n\n###### Abstract\n\n`mission_transaction_work_spine` is the public Microcosm paper module for work-landing discipline. Its telos is to make the boundary between \"a check looked clean\" and \"work is actually allowed to land\" inspectable as source, fixture, result record, and test evidence rather than as chat confidence or status arithmetic.\n\nThe component validates a fixed public mission-transaction bundle: Work item rows, work log path claims, dependency unlocks, transaction plans, result record drains, completion projections, scoped mutation policy, checkpoint-lane decisions, copied internal control source modules, and metadata-only result records.\n\nThe result is intentionally narrow. A pass means the public fixture and exported bundle preserve the mission-transaction contract, its source-open body floor, and its negative cases. It does not mutate work log, work log, or Git; it does not certify arbitrary live completion; and it does not grant broad checkpoint, backup, launch, public sharing, provider, or whole-system authority.\n\n###### Problem\n\nAgentic code work fails most often at transaction boundaries, not at isolated syntax checks. Common false positives include:\n- treating a clean preflight as a landed commit;\n- ignoring a competing work log claim on the same path;\n- accepting a claim whose expected parent no longer matches the repository;\n- marking a downstream Work item ready without hard-dependency evidence;\n- reading a dirty tree as a blocker for scoped commits while allowing broad staging without explicit operator authorization;\n- writing result records that smuggle private ledger or provider bodies into a public artifact.\n\nThe module turns those failures into a deterministic replay. A cold reader can inspect which public rows are projections, which copied source bodies implement the checks, which negative cases must be observed, and which authority claims remain forbidden even when every validator passes.\n\n###### Shape\n\nSource refs\n\nJSON bundle `paper_module.mission_transaction_work_spine` Component runtime `mission_transaction_work_spine.py` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.mission_transaction_work_spine\"] Fixture[\"First-wave fixture Work items, claims, deps, lanes, result records\"] Bundle[\"Exported bundle work log, work log, checkpoint, scoped commit, preflight source bodies\"] Snapshot[\"Real work log session snapshot active claims, heartbeat, source hash\"] Runtime[\"Component runtime mission_transaction_work_spine.py\"] R3[\"R3 replay verdict runtime-derived, not label-derived\"] Result records[\"metadata-only result records refs, hashes, counts, limits\"] Ceiling[\"Scope limit no live ledger, git, launch, or provider authority\"] Bundle --> Runtime Fixture --> Runtime Bundle --> Runtime Snapshot --> Runtime Runtime --> R3 Runtime --> Result records R3 --> Ceiling Result records --> Ceiling\n```\n\nThis Mermaid diagram is the reader flow. The generated lattice Mermaid remains `available_from_capsule_edges`, and the generated Atlas card remains `linked_from_capsule_edges`; both are derived from bundle and doctrine-lattice rows, not from this prose.\n\n###### Technical Mechanism\n\nThe component exposes two validator paths.\n\nThe first-wave fixture command validates the local replay fixture and writes the canonical result record set:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.mission_transaction_work_spine run \\\n  --input fixtures/first_wave/mission_transaction_work_spine/input \\\n  --out receipts/first_wave/mission_transaction_work_spine\n```\n\nThat path loads public fixture rows, validates dependency unlocks, claim preflight, scoped result record authority, private-marker rejection, preflight overclaim rejection, checkpoint lane policy, and the real active-claims snapshot.\n\nThe exported-bundle command validates source-open import and bundle replay:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.mission_transaction_work_spine \\\n  validate-mission-transaction-bundle \\\n  --input examples/mission_transaction_work_spine/exported_mission_transaction_bundle \\\n  --out receipts/first_wave/mission_transaction_work_spine\n```\n\nThat path checks copied work log, work log, checkpoint, scoped-commit, and mission-preflight source modules by manifest, digest, anchor strings, secret-exclusion scan, and `body_in_receipt: false`. It also requires the real work log snapshot in the mission bundle. Commit `da97bc6394` (Require real work log snapshot in mission bundle) landed the snapshot as a required bundle input; later source/test commits recomputed the snapshot verdict and bound the R3 claim to runtime evidence.\n\n###### Prior Art Grounding\n\nThis component is the mission-transaction member of Microcosm's local work-landing family. Its closest sibling is `durable_agent_work_landing_replay`, which checks recorded landing rows, validation-before-commit ordering, HEAD movement, blocker capture, and work log completion evidence without performing live Git work. `mission_transaction_work_spine` narrows that pattern to the transaction preflight and work log seed-speed membrane: same-path claim conflicts, expected-parent mismatches, checkpoint-lane selection, dependency unlocks, result record drains, and session finalization posture.\n\nIt also supplies a source-import anchor used by adjacent public components such as `concurrency_mission_control` and `macro_projection_import_protocol`. Those links are structural evidence routes, not runtime invocation or launch-scope decision. The prior-art claim is therefore local and source-bounded: this paper module inherits the work-landing accounting shape, then tests the particular mission-transaction and work log session-snapshot boundary.\n\n###### Data And Evidence Contract\n\nThe public evidence bundle is composed of source refs, hashes, rows, and result records. The source bodies live only in the exported bundle's `source_modules/` tree; result records carry refs, counts, hashes, verdicts, and ceilings, not private or live internal control bodies.\n- JSON bundle: `core/paper_module_capsules.json::paper_modules[20:paper_module.mission_transaction_work_spine]`\n- Runtime locus: `src/microcosm_core/organs/mission_transaction_work_spine.py`\n- Fixture input: `fixtures/first_wave/mission_transaction_work_spine/input`\n- Exported bundle: `examples/mission_transaction_work_spine/exported_mission_transaction_bundle`\n- Real snapshot: examples/mission_transaction_work_spine/exported_mission_transaction_bundle/real_work_ledger_active_claims_snapshot.json\n- Fixture manifest: `core/fixture_manifests/mission_transaction_work_spine.fixture_manifest.json`\n- Mechanism row: `mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle`\n- Standard: `standards/std_microcosm_mission_transaction_work_spine.json`\n\nThe result record floor includes preflight, dependency blocked, work landing attempt, claim preflight, scoped mutation, checkpoint lane, completion projection, dependency unlock scheduler, reconcile plan, and exported-bundle validation result records. The fields must preserve schema and component ids, validator id, command, status, observed and missing negative cases, error codes, scope boundary, secret-exclusion status, public work-landing status, body-import status, `body_in_receipt: false`, scope limit, and result record paths.\n\n###### Discriminating Tests\n\nThe positive claim is not \"the fixture passes.\" The positive claim is that the fixture accepts real-good evidence and rejects targeted perturbations.\n- Real-good case: the real active-claims snapshot passes with R3 public_safe_real_work_ledger_session_snapshot_replay, a state/work_ledger/active_claims_snapshot.json source ref, a matching source hash, a bound session heartbeat, and five source-session claims.\n- Same-path perturbation: adding a competing claim on the requested path blocks preflight through work_ledger_runtime.active_claim_collisions_for_paths and emits `SAME_PATH_CLAIM_CONFLICT`.\n- Parent perturbation: changing the expected parent for a real claim blocks with `EXPECTED_PARENT_MISMATCH`; changing it back to the current parent clears.\n- Disjoint perturbation: adding a claim on a disjoint path does not create a collision for the requested path, so the public preflight remains pass.\n- Landing-row perturbation: mutating the checkpoint lane into an unauthorized broad checkpoint blocks with the checkpoint-lane violation floor.\n- Private-body perturbation: a fixture row that carries live private work log body material is rejected, while source bodies copied into the public bundle remain outside result records.\n- Overclaim perturbation: a clean preflight cannot claim that work is already landed.\n- Dependency perturbations: dangling dependency refs and ready rows with incomplete hard dependencies remain blockers.\n\nFocused regression coverage lives in `tests/test_mission_transaction_work_spine.py`. The R3 tests assert that the verdict is re-derived from runtime evidence, expected labels are not sufficient, source hashes are bound, mutated or stale snapshots are rejected, clear perturbations move the verdict, and `body_in_receipt` is false.\n\n###### Reader Evidence Routing\n\nRead this module as an evidence-accounting paper, not as a live controller.\n1. Open the mechanism row and standard to see the required bundle fields: work items, claim table, dependency graph, transaction plan, result record drain, completion projection, scoped mutation policy, checkpoint lane policy, copied source imports, body import verification, scope boundary, and scope limit.\n2. Inspect the real active-claims snapshot to see the source ref, source hash, snapshot time, source session id, owned paths, checkpoint lane case, runtime session, and metadata-only posture.\n3. Read the focused tests to verify R3 is runtime-derived: same-path conflicts, stale parents, landing-row violations, disjoint paths, and equal-parent mutations are all discriminated.\n4. Treat generated JSON, generated Mermaid, Atlas, public-site docs, and result records as projections or validator outputs.\n\n###### Limits And Non-Claims\n\nThe module's useful claim is compact: public fixture rows, copied control source bodies, a real work log session snapshot replay, discriminating negative cases, metadata-only result records, and focused tests preserve the mission-transaction work spine at R3.\n\nIt may not claim live work log authority, live work log authority, live Git mutation, broad checkpoint authorization, private backup execution, current repository completion, source-file changes, provider behavior, browser UI state, launch-scope decision, publishing-scope decision, hosted-product readiness, or whole-system correctness.\n\n###### Validation Result record Path\n\nFor this Markdown-only paper-module update, use non-mutating checks from repo root:\n\n```text\n./repo-pytest tests/test_mission_transaction_work_spine.py \\\n  -q \\\n  --basetemp=/tmp/microcosm_mission_transaction_work_spine_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nFor a source, bundle, or projection landing, run the owner lane from `microcosm-substrate`:\n\n```text\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check\n```\n\nDo not run `--write` from this Markdown-only lane.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim that public fixture rows, copied control source bodies, a real work log session snapshot replay, discriminating negative cases, metadata-only result records, and focused tests preserve the mission-transaction work spine at R3. That is a replay and evidence-shape claim.\n\nThis module may not claim live work log authority, live work log authority, live Git mutation, broad checkpoint authorization, private backup execution, current repository completion, source-file changes, provider behavior, browser UI state, launch-scope decision, publishing-scope decision, hosted-product readiness, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13542,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This component exists because the riskiest moment in agentic code work is the one that feels safest: the agent runs a few checks, sees no errors, and concludes that its work is finished and committed. Those are different facts. A clean preflight describes the state of the checks. It says nothing about whether a competing claim already owns the same path, whether the branch has moved under the agent, or whether the commit ever actually landed. The single question this module answers is narrow and concrete: what evidence has to hold before a unit of work is allowed to land, and is that evidence checkable rather than asserted? The interesting design choice is that the module refuses to trust i\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "missiontransactionwork_spine is the public Microcosm paper module for work-landing discipline. Its telos is to make the boundary between \"a check looked clean\" and \"work is actually allowed to land\" inspectable as source, fixture, result record, and test evidence rather than as chat confidence or status arithmetic. The component validates a fixed public mission-transaction bundle: Work item rows, work log path claims, dependency unlocks, transaction plans, result record drains, completion projections, scoped mutation policy, checkpoint-lane decisions, copied internal control source modules, and metadata-only result records. Its current a active-claims snapshot from copied work log runtime c\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "problem",
       "title": "Problem",
       "level": 2,
       "excerpt": "Agentic code work fails most often at transaction boundaries, not at isolated syntax checks. Common false positives include: treating a clean preflight as a landed commit; ignoring a competing work log claim on the same path; accepting a claim whose expected parent no longer matches the repository; marking a downstream Work item ready without hard-dependency evidence; reading a dirty tree as a blocker for scoped commits while allowing broad staging without explicit operator authorization; writing result records that smuggle private ledger or provider bodies into a public artifact. The module turns those failures into a deterministic replay. A cold reader can inspect which public rows are pr\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This Mermaid diagram is the reader flow. The generated lattice Mermaid remains availablefromcapsule_edges, and the generated Atlas card remains linkedfromcapsule_edges; both are derived from bundle and doctrine-lattice rows, not from this prose.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The component exposes two validator paths. The first-wave fixture command validates the local replay fixture and writes the canonical result record set: That path loads public fixture rows, validates dependency unlocks, claim preflight, scoped result record authority, private-marker rejection, preflight overclaim rejection, checkpoint lane policy, and the real active-claims snapshot. active-claims snapshot from the runtime_status payload, compares the declared sourcesnapshothash to the recomputed snapshot hash, and derives publicsaferealworkledgersessionsnapshot_replay only when runtime evidence, mutation tests, source-hash binding, session binding, and source refs all pass. The exported-bu\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is the mission-transaction member of Microcosm's local work-landing family. Its closest sibling is durableagentworklandingreplay, which checks recorded landing rows, validation-before-commit ordering, HEAD movement, blocker capture, and work log completion evidence without performing live Git work. missiontransactionwork_spine narrows that pattern to the transaction preflight and work log seed-speed membrane: same-path claim conflicts, expected-parent mismatches, checkpoint-lane selection, dependency unlocks, result record drains, and session finalization posture. It also supplies a source-import anchor used by adjacent public components such as concurrencymissioncontrol and\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "data-and-evidence-contract",
       "title": "Data And Evidence Contract",
       "level": 2,
       "excerpt": "The public evidence bundle is composed of source refs, hashes, rows, and result records. The source bodies live only in the exported bundle's source_modules/ tree; result records carry refs, counts, hashes, verdicts, and ceilings, not private or live internal control bodies. JSON bundle: core/papermodulecapsules.json::papermodules[20:papermodule.missiontransactionwork_spine] Runtime locus: src/microcosmcore/components/missiontransactionworkspine.py Fixture input: fixtures/firstwave/missiontransactionworkspine/input Exported bundle: examples/missiontransactionworkspine/exportedmissiontransactionbundle Real snapshot: examples/missiontransactionworkspine/exportedmissiontransactionbundle/realwo\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "discriminating-tests",
       "title": "Discriminating Tests",
       "level": 2,
       "excerpt": "The positive claim is not \"the fixture passes.\" The positive claim is that the fixture accepts real-good evidence and rejects targeted perturbations. Real-good case: the real active-claims snapshot passes with R3 publicsaferealworkledgersessionsnapshot_replay, a state/workledger/activeclaims_snapshot.json source ref, a matching source hash, a bound session heartbeat, and five source-session claims. Same-path perturbation: adding a competing claim on the requested path blocks preflight through workledgerruntime.activeclaimcollisionsforpaths and emits SAMEPATHCLAIM_CONFLICT. Parent perturbation: changing the expected parent for a real claim blocks with EXPECTEDPARENTMISMATCH; changing it back\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module as an evidence-accounting paper, not as a live controller. Start at the JSON bundle to confirm paper-module authority, subject ids, Open the mechanism row and standard to see the required bundle fields: work items, claim table, dependency graph, transaction plan, result record drain, completion projection, scoped mutation policy, checkpoint lane policy, copied source imports, body import verification, scope boundary, and scope limit. Inspect the real active-claims snapshot to see the source ref, source hash, snapshot time, source session id, owned paths, checkpoint lane case, runtime session, and metadata-only posture. Read the focused tests to verify R3 is runtime-derived:\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim that public fixture rows, copied control source bodies, a real work log session snapshot replay, discriminating negative cases, metadata-only result records, and focused tests preserve the mission-transaction work spine at R3. That is a replay and evidence-shape claim. This module may not claim live work log authority, live work log authority, live Git mutation, broad checkpoint authorization, private backup execution, current repository completion, source-file changes, provider behavior, browser UI state, launch-scope decision, public sharing decision, hosted-product readiness, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "For this Markdown-only paper-module update, use non-mutating checks from repo root: For a source, bundle, or projection landing, run the owner lane from microcosm-substrate: Do not run --write from this Markdown-only lane. This pass owns only the",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "limits-and-non-claims",
       "title": "Limits And Non-Claims",
       "level": 2,
       "excerpt": "The module's useful claim is compact: public fixture rows, copied control source bodies, a real work log session snapshot replay, discriminating negative cases, metadata-only result records, and focused tests preserve the mission-transaction work spine at R3. It may not claim live work log authority, live work log authority, live Git mutation, broad checkpoint authorization, private backup execution, current repository completion, source-file changes, provider behavior, browser UI state, launch-scope decision, public sharing decision, hosted-product readiness, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.mission_transaction_work_spine.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"JSON bundle paper_module.mission_transaction_work_spine\"] Fixture[\"First-wave fixture Work items, claims, deps, lanes, result records\"] Bundle[\"Exported bundle work log, work log, checkpoint, scoped commit, preflight source bodies\"] Snapshot[\"Real work log session snapshot active claims, heartbeat, source hash\"] Runtime[\"Component runtime mission_transaction_work_spine.py\"] R3[\"R3 replay verdict runtime-derived, not label-derived\"] Result records[\"metadata-only result records refs, hashes, counts, limits\"] Ceiling[\"Scope limit no live ledger, git, launch, or provider authority\"] Bundle --> Runtime Fixture --> Runtime Bundle --> Runtime Snapshot --> Runtime Runtime --> R3 Runtime --> Result records R3 --> Ceiling Result records --> Ceiling",
       "source_hash": "sha256:cdd46b941e39209ebf137ccebc61cbcc2cfb1e09ceb6a5132bc3f29c3bae8b93",
       "html_url": "docs/paper-modules.html#paper-module-mission-transaction-work-spine-diagram-1",
       "html_anchor": "paper-module-mission-transaction-work-spine-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mission_transaction_work_spine.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-9",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Compensable transactional effects",
         "url": "doctrine.html#dcard-ax-9"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.durable_agent_work_landing_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Durable Agent Work-Landing Replay",
         "url": "paper-modules.html#paper-module-durable-agent-work-landing-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "mission_transaction_work_spine",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Mission Transaction Work Spine",
         "url": "components.html#component-mission_transaction_work_spine"
        },
        {
         "id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public mission transaction bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-10",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Do not land effects without compensation",
         "url": "doctrine.html#dcard-p-10"
        },
        {
         "id": "P-16",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind authority to transaction scope",
         "url": "doctrine.html#dcard-p-16"
        },
        {
         "id": "concept.work_landing_and_continuity_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "work landing and continuity controls as transaction-scoped coordination evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mission_transaction_work_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14721
    },
    {
     "id": "paper_module.formal_math_readiness_gate",
     "title": "Formal Math Readiness Gate",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-readiness-gate",
     "read_href": "docs/paper-modules.html#paper-module-formal-math-readiness-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-math-readiness-gate",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public formal-math readiness gate validates declared corpus, tactic, premise, routing, provider-budget, source-module manifest, copied PROVER probe body, and negative-case boundaries without claiming Lean/Lake or proof authority.",
     "summary": "Formal Math Readiness Gate is the public readiness membrane before downstream proof work. It checks declared Mathlib and corpus readiness, tactic probe result records, proof-metadata-only premise indexes, target-shape routing, provider context budgets, formal_math_readiness_extensions intake rows, copied PROVER smoke-run artifacts, public component source body imports, digest manifests, secret exclusion, and negative cases, then emits readiness boards rather than theorem evidence.",
     "authority_ceiling": "Public readiness metadata, copied PROVER smoke-run readiness/probe artifacts, public component source body floor, fixture result records, and exported-bundle result records only; no Lean/Lake execution, Mathlib availability beyond probe status, formal proof authority, formal-result correctness, external model access, private proof body, oracle premise id, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "The public formal-math readiness gate validates declared corpus, tactic, premise, routing, provider-budget, source-module manifest, copied PROVER probe body, and negative-case boundaries without claiming Lean/Lake or proof authority.",
     "teleology": {
      "section_id": "teleology",
      "text": "formalmathreadiness_gate is the public runtime cell that turns the formal math slice from a deferred slogan into an executable boundary. It validates synthetic readiness metadata for corpus availability, tactic probes, premise indexes, target-shape routing, and provider context recipes before any future Lean witness can claim authority. The page should let a cold reader answer one question without rereading the component: what evidence has Microcosm actually validated, and where does that evidence stop?",
      "source": "markdown_section"
     },
     "body_markdown": "###### Teleology\n\n`formal_math_readiness_gate` is the public runtime cell that turns the formal math slice from a deferred slogan into an executable boundary. It validates synthetic readiness metadata for corpus availability, tactic probes, premise indexes, target-shape routing, and provider context recipes before any future Lean witness can claim authority.\n\nThe page should let a cold reader answer one question without rereading the component: what evidence has Microcosm actually validated, and where does that evidence stop?\n\n###### Purpose\n\nFormal-math tooling fails quietly when a library, tactic, or corpus is assumed present rather than checked. A pipeline that routes a proof to `aesop` when `aesop` is not actually available, or that treats a premise index as proof evidence because it happens to carry a proof body, has already lost the boundary between \"ready to attempt\" and \"proven\". This component exists to make that boundary explicit before any downstream proof work begins. It answers one question: which declared formal-math inputs are well-formed and honest enough that a later proof witness could safely consume them, and where exactly does that warrant stop?\n\nThe mechanism is a deterministic reducer over five public JSON inputs: corpus readiness, tactic-portfolio availability, a premise index, target-shape routing, and provider context recipes. It does not run Lean or Lake. Instead it reads what those inputs declare and refuses the specific ways they can lie. A corpus that claims Mathlib is available without a passing probe is rejected. A tactic marked available without a probe result record is rejected. A premise row carrying a `proof_body` or `oracle_needed_premise_ids` field is rejected. A route that admits a tactic the portfolio probe already marked unavailable is rejected. The output is a readiness board, not theorem evidence.\n\nThe design choice worth noticing is that the gate proves its own discipline through negative cases. Alongside the positive inputs, the fixture carries five inputs that each commit a known overclaim, and the run passes only when every one of those overclaims is caught and no unexpected finding appears. The gate is therefore not merely asserting \"we check Mathlib availability\"; it is demonstrating, on each run, that a falsified Mathlib claim is actually refused. A second guard keeps the floor source-open without leaking: copied prover probe bodies are verified by digest through a manifest, while proof bodies, model-output data, and private state stay out of the result records entirely.\n\n###### Shape\n\nSource refs\n\nreject Mathlib-availability overclaim `validate_corpus_readiness` each available tactic needs a probe result record `validate_tactic_portfolio` reject route admitting an unavailable tactic `validate_target_shape_routing` reject over-budget or proof-body recipe `validate_provider_context_recipes` copied probe bodies, digest-checked `validate_source_module_imports` Diagram source\n\n```text\nflowchart TD Inputs[\"Five public JSON inputs corpus, tactics, premises, routes, provider recipes\"] Scan[\"Secret-exclusion scan zero blocking hits required\"] Corpus[\"validate_corpus_readiness reject Mathlib-availability overclaim\"] Tactics[\"validate_tactic_portfolio each available tactic needs a probe result record\"] Premises[\"validate_premise_index reject proof_body / oracle premise ids\"] Routing[\"validate_target_shape_routing reject route admitting an unavailable tactic\"] Provider[\"validate_provider_context_recipes reject over-budget or proof-body recipe\"] SourceFloor[\"validate_source_module_imports copied probe bodies, digest-checked\"] Reconcile[\"Reconcile findings vs EXPECTED_NEGATIVE_CASES every known overclaim must be caught\"] Board[\"Readiness board + extension board available / blocked capabilities, counts\"] Ceiling[\"Scope limit no Lean/Lake, proof, provider, launch, or private-system authority\"] Inputs --> Scan Scan --> Corpus Scan --> Tactics Scan --> Premises Scan --> Provider Tactics -->|unavailable tactic ids| Routing Corpus --> Reconcile Tactics --> Reconcile Premises --> Reconcile Routing --> Reconcile Provider --> Reconcile SourceFloor --> Reconcile Reconcile --> Board Board --> Ceiling\n```\n\nThe machine graph remains the generated `paper_module.formal_math_readiness_gate.mermaid` projection derived from the source record, not from this hand-authored Mermaid block.\n\n###### Reader Evidence Routing\n\nRead this module in evidence order:\n1. Start at `core/paper_module_capsules.json::paper_modules[21:paper_module.formal_math_readiness_gate]`. That row names the source authority, subjects, mechanism refs, code locus, Microcosm concept/principle/axiom refs, generated projection statuses, and the bundle scope limit.\n2. Check the generated structured source record `paper_modules/formal_math_readiness_gate.json`. Its `relationships.edges` cite the bundle source refs and show the generated Mermaid status, Atlas status, `source_authority: json_capsule`, and unresolved selective-relation count.\n3. Inspect the runtime locus `src/microcosm_core/organs/formal_math_readiness_gate.py`, especially `run`, `run_readiness_bundle`, `validate_source_module_imports`, `write_receipts`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `SOURCE_MODULE_MANIFEST_NAME`.\n4. Use fixture evidence for the gate behavior: `fixtures/first_wave/formal_math_readiness_gate/input`, `receipts/first_wave/formal_math_readiness_gate/readiness_gate_result.json`, `formal_math_readiness_board.json`, `formal_math_readiness_extension_board.json`, `formal_math_readiness_validation_receipt.json`, and result records/sign-off/first_wave/formal_math_readiness_gate_fixture_acceptance.json.\n5. Use exported-bundle evidence for source-open body-floor claims: `examples/formal_math_readiness_gate/exported_formal_math_readiness_bundle/source_module_manifest.json`, `bundle_manifest.json`, `source_artifacts/`, `source_body_floor/source_modules/`, and `receipts/runtime_shell/demo_project/organs/formal_math_readiness_gate/exported_formal_math_readiness_bundle_validation_result.json`.\n6. Use `tests/test_formal_math_readiness_gate.py` for the behavioral result record boundary. The tests cover negative cases, exported bundle sign-off, source-module digest and target-ref mismatch rejection, bounded command-card output, source-body omission from result records, secret-exclusion/public-relative result record paths, and non-writing plan preview.\n\nDo not route a proof claim through this page. It routes readiness evidence, result record integrity, and source-body-floor accounting only.\n\n###### Technical Mechanism\n\nThe runtime is a deterministic readiness reducer over declared public inputs. `run()` evaluates the first-wave fixture directory with positive and negative JSON cases enabled; `run_readiness_bundle()` evaluates the exported public bundle without fixture-negative cases and requires the bundle source-module manifest. Both entrypoints call `_build_result()`, so the fixture and exported bundle result records share one scope limit, one secret scan, one source-module digest checker, and one readiness-board schema.\n\n`_build_result()` first loads the five public input families: `corpus_readiness.json`, `tactic_portfolio_availability.json`, `premise_index.json`, `target_shape_tactic_routing.json`, and `provider_context_recipes.json`. It then scans those inputs plus any declared source artifacts through `secret_exclusion_scan.scan_paths`, using the public Microcosm forbidden-class policy. The scan is not advisory: the result can pass only when the scan has zero blocking hits, source-module imports pass, all expected fixture-negative cases are observed, and no unexpected positive-case findings remain.\n\nThe mechanism is split into six validators:\n- `validate_corpus_readiness()` records Lean and Mathlib readiness metadata and adds `lean_std_synthetic_core:mathlib` to blocked capabilities when Mathlib is unavailable. A Mathlib availability claim without a passing probe becomes `MATHLIB_AVAILABILITY_OVERCLAIM`.\n- `validate_tactic_portfolio()` separates available from unavailable tactics and requires every available tactic to carry a probe result record. Synthetic probe labels are accepted only when `_tactic_probe_realness_evidence()` binds them to copied source modules or fixture-manifest source-open evidence.\n- `validate_premise_index()` admits premise rows as metadata only. It counts premises, namespaces, retrieval terms, and split eligibility, but rejects `proof_body`, `ground_truth_proof`, `provider_output_body`, and `oracle_needed_premise_ids`.\n- `validate_target_shape_routing()` intersects each route case's allowed tactics with the unavailable tactics emitted by the portfolio validator. Any overlap becomes `ROUTING_ALLOWS_UNAVAILABLE_TACTIC`, so routing cannot silently re-enable a tactic that the probe plane blocked.\n- `validate_provider_context_recipes()` records byte budgets and deliverable shape while rejecting public recipes over 32,768 bytes or recipes that allow proof bodies or provider-body material.\n- `validate_source_module_imports()` verifies the exported bundle's `source_module_manifest.json`, target refs, source refs, line counts, target digests, source digests, exact-copy rows, and the two permitted private-path rewrites. It reports digest/ref failures without placing copied source bodies in result records.\n\nAfter the validators run, `_merge_observed()` and `_merge_findings()` compare observed fixture failures against `EXPECTED_NEGATIVE_CASES`. This is the local scope limit: the fixture run must prove that the known overclaims are caught, while the exported-bundle run must prove that the positive public bundle has no unexpected findings. `_build_extension_board()` then projects the accepted metadata into the extension board: selected pattern ids, namespace and split counts, tactic availability counts, Mathlib-dependent unavailable tactics, blocked route cases, provider budgets, source-body import counts, the scope limit, and the scope boundary.\n\nResult record writing preserves the same boundary. `write_receipts()` emits the gate result, readiness board, extension board, validation result record, and sign-off result record for fixture mode. `run_readiness_bundle()` emits the exported-bundle result record. The focused test suite asserts the mechanism rather than just file existence: it checks the five expected negative case ids, local Lean/Lake probe metadata with Mathlib unavailable, six available tactics with `aesop` blocked, eleven premises, five route cases, three provider recipes, thirteen verified source artifacts, source/target digest mismatch rejection, target-ref mismatch rejection, secret-exclusion/public-relative result record paths, and result record omission of copied body text.\n\n###### Public Contract\n\nThe component does not run Lean or Lake. It consumes public JSON fixtures and exported bundles, records which capabilities are available or blocked, rejects Mathlib availability overclaims, rejects unprobed tactics, rejects premise rows that contain proof bodies, rejects routes that admit unavailable tactics, and rejects provider recipes that exceed the public budget or allow proof bodies.\n\nThe accepted result is a readiness board. That board can tell a later component what is safe to attempt, but it is bounded evidence evidence, benchmark evidence, or permission to execute a theorem prover.\n\n###### Prior Art Grounding\n\nThis component is grounded in formal-math benchmark and environment-readiness work where the presence of a library, tactic, or corpus is not enough by itself. [miniF2F](https://arxiv.org/abs/2109.00110) motivates explicit benchmark split discipline for formal mathematics, [LeanDojo](https://arxiv.org/abs/2306.15626) motivates reproducible theorem-proving environments, and [mathlib](https://arxiv.org/abs/1910.09336) makes the availability of library imports a concrete precondition rather than a vague capability claim.\n\nMicrocosm borrows the readiness-gate pattern: corpus availability, Mathlib probes, tactic probes, premise indexes, target-shape routing, and context budgets must be checked before downstream proof or retrieval language is allowed. It excludes Lean execution or proof authority.\n\n###### Runtime Surfaces\n- `python -m microcosm_core.organs.formal_math_readiness_gate run --input fixtures/first_wave/formal_math_readiness_gate/input --out receipts/first_wave/formal_math_readiness_gate`\n- `python -m microcosm_core.organs.formal_math_readiness_gate run-readiness-bundle --input examples/formal_math_readiness_gate/exported_formal_math_readiness_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_readiness_gate`\n- `python -m microcosm_core.organs.formal_math_readiness_gate plan --input fixtures/first_wave/formal_math_readiness_gate/input`\n- `microcosm formal-math-readiness-gate run --input fixtures/first_wave/formal_math_readiness_gate/input --out receipts/first_wave/formal_math_readiness_gate`\n- `microcosm formal-math-readiness-gate plan --input fixtures/first_wave/formal_math_readiness_gate/input`\n\n###### Relationship To Lean Witness\n\n`formal_math_lean_proof_witness` remains deferred. This gate makes the deferral typed and testable: Mathlib is absent until a passing probe says otherwise, unavailable tactics cannot be routed, premise indexes cannot carry proof or oracle bodies, and provider recipes cannot smuggle proof-body deliverables.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_math_readiness_gate.py -q --basetemp=/tmp/microcosm_formal_math_readiness_gate_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.relationships.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/formal_math_readiness_gate.json\n```\n\nExpected generated-row proof: `edge_count: 15`, `mermaid_status: available_from_capsule_edges`, `atlas_status: blocked_until_organ_atlas_owner_lane_binds_edges`, `source_authority: json_capsule`, and `unresolved_selective_relation_count: 0`.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim that Microcosm has a public readiness gate for formal math system preparation. The valid claim is bounded to corpus availability, Mathlib and tactic probe metadata, premise-index coverage, target-shape tactic routing, provider context budget checks, extension-board pattern ids, public PROVER smoke-run source artifacts, an exact public component-source body floor, and fixture or exported-bundle result records.\n\nThe module must not claim Lean/Lake execution, theorem proving, formal proof authority, formal-result correctness, Mathlib-dependent proof success, benchmark performance, provider-call execution, private proof-body import, oracle-needed premise disclosure, source-file changes, publishing-scope decision, hosted deployment, recipient work, secret export, or whole-system correctness. Its strongest launch-facing statement is readiness-boundary enforcement over public metadata and copied source artifacts.\n\n###### Limitations\n\nThe runtime validates finite public fixtures and exported-bundle manifests. It does not execute Lean or Lake, import Mathlib in the current environment, call a provider, or check theorem statements. When the result reports blocked capabilities such as `lean_std_synthetic_core:mathlib`, that is a readiness boundary for downstream components, not an invitation to route around the gate.\n\nThe copied source artifacts are source-open body-floor evidence only. Digest and target-ref checks show that selected PROVER readiness/probe bodies and the public component source copy match their manifests; they do not authorize source-file changes, private source-root export, proof-body disclosure, recipient work, hosted deployment, or public sharing. Result records intentionally carry counts, digests, paths, negative-case coverage, and authority flags instead of copied body text.\n\nThe negative cases are also finite. They cover the known overclaims encoded in `EXPECTED_NEGATIVE_CASES`: Mathlib availability without a passing probe, unprobed tactic availability, premise rows with proof bodies, target routes that admit unavailable tactics, and provider recipes that exceed public budgets or permit proof bodies. A new formal-math claim needs either a new source-backed negative case here or a different proof consumer; this page should not be used as a generic formal-proof claim surface.\n\n###### Scope boundary\n\nThis module documents a public readiness gate only. It excludes Lean/Lake execution, formal proof authority, Mathlib-dependent proof attempts, external model access, benchmark claims, public launch, hosted deployment, public sharing, recipient work, secret export, or whole-system correctness. It also does not make private source-root material, browser UI state, account or browser material, browser state, account secrets, source notes, model-output data bodies, recipient-send state, or private proof bodies part of the public Microcosm body floor.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe exported readiness bundle carries thirteen PROVER smoke-run readiness/probe bodies under `source_artifacts`. They cover corpus readiness, tactic-affordance probe metadata, Mathlib and trace probes, and the copied portfolio-core Lean probes used to decide which tactics are blocked or available. Two JSON rows are private-path rewrites; those rows retain source and target digests plus the rewrite mode.\n\nThe bundle also carries an exact public component-source copy for `src/microcosm_core/organs/formal_math_readiness_gate.py` under `source_body_floor/source_modules`. Generated `state/runs` Lean artifacts are runnable readiness evidence, not source-body authority. Neither floor places body text in result records or workingness cards, and neither imports model-output data bodies, account or browser state, browser UI live access, recipient-send state, account secrets, private proof bodies, or oracle-needed premise ids.\n\nThe source-module manifest and bundle manifest are the right surfaces for body-floor inspection. The validation result records intentionally carry status, digests, counts, and public-relative refs rather than copied source bodies.\n\nWave 011 adds the explicit extension board for the source intake cell `formal_math_readiness_extensions`. The board is still metadata-only, but it is more useful than the older flat counts: it records the selected pattern ids (`lean_std_toolchain_premise_index`, `tactic_portfolio_availability_probe`, `target_shape_tactic_routing_gate`), the source projection intake ref, public target refs, validation refs, namespace and split coverage for the premise index, tactic availability status counts, Mathlib-dependent unavailable tactics, target-shape routing admissibility, and provider context budgets.\n\n###### Governing Lattice Relation\n\nThe bundle binds this module to `concept.formal_math_and_proof_witness_bundle` because the component is not a theorem prover; it is the membrane that decides which public formal-math inputs are safe enough for a later proof witness to consume. The governing mechanisms split that membrane in two. The `validates_public_formal_math_readiness_bundle` mechanism names the positive bundle path: `run`, `run_readiness_bundle`, `validate_source_module_imports`, and `write_receipts` validate the declared corpus, tactic, premise, routing, provider-budget, source-module-manifest, and source-body-floor evidence before writing readiness boards. The `validates_public_readiness_boundary` mechanism names the negative path: `validate_corpus_readiness`, `validate_tactic_portfolio`, `validate_premise_index`, `validate_target_shape_routing`, and `validate_provider_context_recipes` reject the cases that would turn readiness metadata into proof authority.\n\nThe principle and axiom refs are therefore operational, not decorative. `P-1`, `P-2`, and `P-3` are expressed by keeping the JSON bundle, generated structured source record, runtime code locus, and result records as separate authority classes. `P-6` and `P-8` are expressed by the body-floor and secret-exclusion contracts: copied PROVER probe bodies and the public component source copy can be inspected through digests and manifests, while private proof bodies, model-output data bodies, and browser or account state stay outside the public floor. `AX-1`, `AX-2`, `AX-5`, and `AX-7` are the local reason the downstream `paper_module.formal_math_lean_proof_witness` remains a dependency rather than an already-proven conclusion.\n\nThe generated lattice edge count is small on purpose: it proves that this page is bundle-backed, source-bound, and connected to one deferred proof-witness module.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 20970,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "teleology",
       "title": "Teleology",
       "level": 2,
       "excerpt": "formalmathreadiness_gate is the public runtime cell that turns the formal math slice from a deferred slogan into an executable boundary. It validates synthetic readiness metadata for corpus availability, tactic probes, premise indexes, target-shape routing, and provider context recipes before any future Lean witness can claim authority. The page should let a cold reader answer one question without rereading the component: what evidence has Microcosm actually validated, and where does that evidence stop?",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Formal-math tooling fails quietly when a library, tactic, or corpus is assumed present rather than checked. A pipeline that routes a proof to aesop when aesop is not actually available, or that treats a premise index as proof evidence because it happens to carry a proof body, has already lost the boundary between \"ready to attempt\" and \"proven\". This component exists to make that boundary explicit before any downstream proof work begins. It answers one question: which declared formal-math inputs are well-formed and honest enough that a later proof witness could safely consume them, and where exactly does that warrant stop? The mechanism is a deterministic reducer over five public JSON input\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The machine graph remains the generated source record, not from this hand-authored Mermaid block.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module in evidence order: Start at core/papermodulecapsules.json::papermodules[21:papermodule.formalmathreadiness_gate]. That row names the source authority, subjects, mechanism refs, code locus, Microcosm concept/principle/axiom refs, generated projection statuses, and the bundle scope limit. Check the generated structured source record papermodules/formalmathreadinessgate.json. Its relationships.edges cite the bundle source refs and show the generated Mermaid status, Atlas status, sourceauthority: jsoncapsule, and unresolved selective-relation count. Inspect the runtime locus src/microcosmcore/components/formalmathreadinessgate.py, especially run, runreadinessbundle, validatesou\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime is a deterministic readiness reducer over declared public inputs. run() evaluates the first-wave fixture directory with positive and negative JSON cases enabled; runreadinessbundle() evaluates the exported public bundle without fixture-negative cases and requires the bundle source-module manifest. Both entrypoints call buildresult(), so the fixture and exported bundle result records share one scope limit, one secret scan, one source-module digest checker, and one readiness-board schema. buildresult() first loads the five public input families: corpusreadiness.json, tacticportfolio_availability.json, premiseindex.json, targetshapetacticrouting.json, and providercontextrecipes.jso\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The component does not run Lean or Lake. It consumes public JSON fixtures and exported bundles, records which capabilities are available or blocked, rejects Mathlib availability overclaims, rejects unprobed tactics, rejects premise rows that contain proof bodies, rejects routes that admit unavailable tactics, and rejects provider recipes that exceed the public budget or allow proof bodies. The accepted result is a readiness board. That board can tell a later component what is safe to attempt, but it is bounded evidence evidence, benchmark evidence, or permission to execute a theorem prover.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in formal-math benchmark and environment-readiness work where the presence of a library, tactic, or corpus is not enough by itself. miniF2F motivates explicit benchmark split discipline for formal mathematics, LeanDojo motivates reproducible theorem-proving environments, and mathlib makes the availability of library imports a concrete precondition rather than a vague capability claim. Microcosm borrows the readiness-gate pattern: corpus availability, Mathlib probes, tactic probes, premise indexes, target-shape routing, and context budgets must be checked before downstream proof or retrieval language is allowed. It excludes Lean execution or proof authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The exported readiness bundle carries thirteen PROVER smoke-run readiness/probe bodies under source_artifacts. They cover corpus readiness, tactic-affordance probe metadata, Mathlib and trace probes, and the copied portfolio-core Lean probes used to decide which tactics are blocked or available. Two JSON rows are private-path rewrites; those rows retain source and target digests plus the rewrite mode. The bundle also carries an exact public component-source copy for src/microcosmcore/components/formalmathreadinessgate.py under sourcebodyfloor/source_modules. Generated state/runs Lean artifacts are runnable readiness evidence, not source-body authority. Neither floor places body text in resu\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim that Microcosm has a public readiness gate for formal math system preparation. The valid claim is bounded to corpus availability, Mathlib and tactic probe metadata, premise-index coverage, target-shape tactic routing, provider context budget checks, extension-board pattern ids, public PROVER smoke-run source artifacts, an exact public component-source body floor, and fixture or exported-bundle result records. The module must not claim Lean/Lake execution, theorem proving, formal proof authority, formal-result correctness, Mathlib-dependent proof success, benchmark performance, provider-call execution, private proof-body import, oracle-needed premise disclosure, source-\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The bundle binds this module to concept.formalmathandproofwitness_bundle because the component is not a theorem prover; it is the membrane that decides which public formal-math inputs are safe enough for a later proof witness to consume. The governing mechanisms split that membrane in two. The validatespublicformalmathreadiness_bundle mechanism names the positive bundle path: run, runreadinessbundle, validatesourcemodule_imports, and write_receipts validate the declared corpus, tactic, premise, routing, provider-budget, source-module-manifest, and source-body-floor evidence before writing readiness boards. The validatespublicreadiness_boundary mechanism names the negative path: validatecorp\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The runtime validates finite public fixtures and exported-bundle manifests. It does not execute Lean or Lake, import Mathlib in the current environment, call a provider, or check theorem statements. When the result reports blocked capabilities such as leanstdsynthetic_core:mathlib, that is a readiness boundary for downstream components, not an invitation to route around the gate. The copied source artifacts are source-open body-floor evidence only. Digest and target-ref checks show that selected PROVER readiness/probe bodies and the public component source copy match their manifests; they do not authorize source-file changes, private source-root export, proof-body disclosure, recipient work\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-surfaces",
       "title": "Runtime Surfaces",
       "level": 2,
       "excerpt": "python -m microcosmcore.components.formalmathreadinessgate run --input fixtures/firstwave/formalmathreadinessgate/input --out result records/firstwave/formalmathreadinessgate python -m microcosmcore.components.formalmathreadinessgate run-readiness-bundle --input examples/formalmathreadinessgate/exportedformalmathreadinessbundle --out result records/runtimeshell/demoproject/components/formalmathreadinessgate python -m microcosmcore.components.formalmathreadinessgate plan --input fixtures/firstwave/formalmathreadinessgate/input microcosm formal-math-readiness-gate run --input fixtures/firstwave/formalmathreadinessgate/input --out result records/firstwave/formalmathreadinessgate microcosm form\u2026",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces: Expected generated-row proof: edge_count: 15, mermaidstatus: availablefromcapsuleedges, atlasstatus: blockeduntilorganatlasownerlanebindsedges, sourceauthority: jsoncapsule, and unresolvedselectiverelation_count: 0.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "relationship-to-lean-witness",
       "title": "Relationship To Lean Witness",
       "level": 2,
       "excerpt": "formalmathleanproofwitness remains deferred. This gate makes the deferral typed and testable: Mathlib is absent until a passing probe says otherwise, unavailable tactics cannot be routed, premise indexes cannot carry proof or oracle bodies, and provider recipes cannot smuggle proof-body deliverables.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module documents a public readiness gate only. It excludes Lean/Lake execution, formal proof authority, Mathlib-dependent proof attempts, external model access, benchmark claims, public launch, hosted deployment, public sharing, recipient work, secret export, or whole-system correctness. It also does not make private source-root material, browser UI state, account or browser material, browser state, account secrets, source notes, model-output data bodies, recipient-send state, or private proof bodies part of the public Microcosm body floor.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.formal_math_readiness_gate.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Inputs[\"Five public JSON inputs corpus, tactics, premises, routes, provider recipes\"] Scan[\"Secret-exclusion scan zero blocking hits required\"] Corpus[\"validate_corpus_readiness reject Mathlib-availability overclaim\"] Tactics[\"validate_tactic_portfolio each available tactic needs a probe result record\"] Premises[\"validate_premise_index reject proof_body / oracle premise ids\"] Routing[\"validate_target_shape_routing reject route admitting an unavailable tactic\"] Provider[\"validate_provider_context_recipes reject over-budget or proof-body recipe\"] SourceFloor[\"validate_source_module_imports copied probe bodies, digest-checked\"] Reconcile[\"Reconcile findings vs EXPECTED_NEGATIVE_CASES every known overclaim must be caught\"] Board[\"Readiness board + extension board available / blocked capabilities, counts\"] Ceiling[\"Scope limit no Lean/Lake, proof, provider, launch, or private-system authority\"] Inputs --> Scan Scan --> Corpus Scan --> Tactics Scan --> Premises Scan --> Provider Tactics -->|unavailable tactic ids| Routing Corpus --> Reconcile Tactics --> Reconcile Premises --> Reconcile Routing --> Reconcile Provider --> Reconcile SourceFloor --> Reconcile Reconcile --> Board Board --> Ceiling",
       "source_hash": "sha256:80af348c44dc0b502c9b53c0c0370728f18d18af44fee689e95cdb769bab53fc",
       "html_url": "docs/paper-modules.html#paper-module-formal-math-readiness-gate-diagram-1",
       "html_anchor": "paper-module-formal-math-readiness-gate-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_readiness_gate.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "miniF2F",
       "url": "https://arxiv.org/abs/2109.00110",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "LeanDojo",
       "url": "https://arxiv.org/abs/2306.15626",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "mathlib",
       "url": "https://arxiv.org/abs/1910.09336",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.formal_math_lean_proof_witness",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Lean Proof Witness",
         "url": "paper-modules.html#paper-module-formal-math-lean-proof-witness"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 3,
       "links": [
        {
         "id": "formal_math_readiness_gate",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Formal Math Readiness Gate",
         "url": "components.html#component-formal_math_readiness_gate"
        },
        {
         "id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public formal math readiness bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle"
        },
        {
         "id": "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public readiness boundary",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 6,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_readiness_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 22388
    },
    {
     "id": "paper_module.formal_math_lean_proof_witness",
     "title": "Formal Math Lean Proof Witness",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-lean-proof-witness",
     "read_href": "docs/paper-modules.html#paper-module-formal-math-lean-proof-witness",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-math-lean-proof-witness",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public Lean proof witness runs local Lean/Lake over a tiny synthetic project, validates copied public source-module digests and negative cases, and emits redacted result records without claiming general proof authority.",
     "summary": "Formal Math Lean Proof Witness is the public runtime crossing from readiness metadata into a real local Lean/Lake subprocess witness. It copies a bounded public Lake project, records tool availability, Lake build status, source hashes, declaration names, line counts, source-module manifest verdicts, a Mathlib-blocked debt row, and four leakage/invalid-proof negative cases while keeping proof bodies and command output bodies out of result records.",
     "authority_ceiling": "Declared public toy Lean/Lake fixture result records only; no Mathlib/Aesop/Batteries authority, general formal-result correctness, private proof import, external model access, benchmark performance, launch-scope decision, publishing-scope decision, source-file changes, or whole-system correctness.",
     "abstract": "The public Lean proof witness runs local Lean/Lake over a tiny synthetic project, validates copied public source-module digests and negative cases, and emits redacted result records without claiming general proof authority.",
     "teleology": {
      "section_id": "teleology",
      "text": "formalmathleanproofwitness is the bounded public crossing from formal-math readiness into an actual local Lean/Lake run. It exists so a cold reader can see Microcosm compile a tiny synthetic proof witness with the installed toolchain while the result records stay redacted, public-relative, and honest about the narrow authority boundary.",
      "source": "markdown_section"
     },
     "body_markdown": "###### Purpose\n\nThis component exists to make one claim checkable instead of asserted: that Microcosm can actually run the Lean toolchain, not merely talk about it. The single question it answers is whether the installed Lean toolchain will compile a declared, tiny synthetic Lean project end to end, and whether that run can be recorded without leaking the proof.\n\nThe unusual part is the discipline around the run, not the run itself. The component copies a bounded public Lake project into a temporary workspace and invokes `lake build`, but the result record keeps only the return code, the standard-output and standard-error line counts, the source hashes, and the declaration names pulled out by a regular expression. The proof text and the raw command output never reach the result record. A reader gets evidence that the build happened and what it contained, without the page becoming a copy of the proof.\n\nTwo failure modes drive the design. The first is a proof-assistant integration that reports success without ever running the checker; the witness guards against that by executing a real subprocess and recording its exit status, and by deliberately compiling an invalid Lean file in a negative case to confirm the toolchain rejects it. The second is a circular pass, where the manifest quietly carries the answer. The component refuses manifests that embed a `proof_body`, a ground-truth proof, provider output, or oracle premise ids, so a green result cannot be smuggled in through the inputs.\n\nThe scope is small on purpose. Imports of Mathlib, Aesop, and Batteries are rejected before anything runs, so this is a witness for a toy theorem under a local toolchain, not a claim about library-dependent proof work. That boundary is the point: it shows the result record discipline a larger formal-math component would need, without borrowing authority it has not earned.\n\n###### Teleology\n\n`formal_math_lean_proof_witness` is the bounded public crossing from formal-math readiness into an actual local Lean/Lake run. It exists so a cold reader can see Microcosm compile a tiny synthetic proof witness with the installed toolchain while the result records stay redacted, public-relative, and honest about the narrow authority boundary.\n\n###### Shape\n\nSource refs\n\nFirst-wave fixture `fixtures/first_wave/.../input` Exported public bundle `examples/.../exported_lean_proof_witness_bundle` Diagram source\n\n```text\nflowchart TD A[\"First-wave fixture fixtures/first_wave/.../input\"] --> B[\"run() include_negative=true\"] C[\"Exported public bundle examples/.../exported_lean_proof_witness_bundle\"] --> D[\"run_witness_bundle() include_negative=false\"] B --> E[\"Validate witness manifest: reject embedded proof bodies, oracle ids, non-public source refs\"] D --> F[\"Validate source_module_manifest.json: copied public source digests, exact-copy vs replacement\"] E --> G[\"Copy Lake project to temp workspace lake build MicrocosmProofWitness\"] G --> H[\"Negative cases run real Lean: invalid proof rejected, Mathlib/Aesop/Batteries import blocked\"] F --> I[\"Standalone exported-witness contract or fresh bundle result record reuse (no live build)\"] G --> J[\"metadata-only JSON result records: return code, line counts, hashes, declaration names\"] H --> J I --> J J --> K[\"Scope limit: toy public witness only\"]\n```\n\n###### Reader Evidence Routing\n\nRoute bundle/currentness questions through ## JSON Bundle Binding, the source record, and the structured source record. The expected generated-row evidence is `source_authority: json_capsule`, `edge_count: 8`, Mermaid `available_from_capsule_edges`, Atlas `blocked_until_organ_atlas_owner_lane_binds_edges`, and zero unresolved selective relations. That evidence proves reader wiring and source authority placement, not formal-result correctness.\n\nRoute runtime questions through the runtime locus and the two public input surfaces. The first-wave fixture runs `run()` against the public Lake project and checks the four expected negative cases. The exported bundle runs `run_witness_bundle()` against copied public source modules, validates `source_module_manifest.json`, and records digest/source-module status without placing proof bodies in JSON result records.\n\nRoute result record and test questions through the required result record paths, the focused pytest, and the corpus check. The focused test asserts local Lake build success for the tiny witness when Lean/Lake are available, eight compiled declarations, four negative-case observations for the fixture, public-relative redacted result records, five exported source-module rows, source digest checks, metadata-only result record policy, and tamper-blocking behavior. Those validation result records do not authorize Mathlib-dependent proofs, external model access, private proof import, benchmark claims, launch-scope decision, deployment posture, public sharing, hosted deployment, source-file changes, or private-system equivalence.\n\n###### Public Contract\n\nThe component copies `examples/formal_math_lean_proof_witness/exported_lean_proof_witness_bundle` or the first-wave fixture Lake project into a temporary workspace and runs `lake build`. The public result record records tool availability, Lake build status, source hashes, declaration names, line counts, negative-case coverage, and the scope limit. It does not export proof bodies in JSON result records.\n\nThe accepted witness scope is deliberately small:\n- public synthetic Lean source is allowed;\n- JSON manifests and result records may not embed proof bodies;\n- Mathlib, Aesop, and Batteries imports are rejected until a wider scope limit exists;\n- non-public source refs, model-output data, oracle proofs, and private source run bodies remain outside the public root.\n\n###### Prior Art Grounding\n\nThis component is grounded in the Lean proof-assistant lineage and the broader small-kernel theorem-proving tradition. The [Lean theorem prover system description](https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/) anchors the local Lean/Lake witness route, and the [Lean mathematical library](https://arxiv.org/abs/1910.09336) shows why proof authority depends on explicit imports, declarations, and checked environments.\n\nMicrocosm borrows the proof-witness discipline: a local toolchain run, source hashes, declarations, negative cases, and metadata-only result records must be visible before Lean witness language is allowed. It does not claim Mathlib-dependent proof authority or benchmark performance.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_math_lean_proof_witness.py -q --basetemp=/tmp/microcosm_formal_math_lean_proof_witness_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.relationships.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/formal_math_lean_proof_witness.json\n```\n\nExpected generated-row proof: `edge_count: 8`, `mermaid_status: available_from_capsule_edges`, `atlas_status: blocked_until_organ_atlas_owner_lane_binds_edges`, `source_authority: json_capsule`, and `unresolved_selective_relation_count: 0`.\n\n###### Scope boundary\n\n###### Limitations\n\nThis module is a bounded public witness, not a formal-proof authority. Its positive evidence is one declared toy Lean/Lake fixture, one exported public witness bundle, five copied source-module body rows, local toolchain metadata, eight compiled declarations when Lean/Lake are available, and four expected negative-case observations. That evidence is enough to show the mechanism's result record discipline; it is not enough to prove arbitrary Lean goals, Mathlib coverage, formal-result correctness, benchmark performance, or private proof import equivalence.\n\nThe copied-body floor is public but narrow. Result records may cite source refs, hashes, material classes, declaration names, counts, manifest verdicts, tool-return summaries, and scope limit fields. They may not embed proof bodies, model-output data, oracle answers, non-public source refs, raw command output bodies, account secrets, account or browser state, or private source-root material. The source-open claim is therefore limited to the declared public fixture and exported bundle body classes.\n\nThe focused regression validates the stated fixture and exported-bundle shape. It checks streaming source scans, tool-version caching, temporary Lake project reuse, Lake build behavior, public-relative redacted result records, source-module digest parity, standalone exported-bundle handling, tamper rejection, negative case coverage, and the generated-row proof. It excludes future fixture families, Atlas/site public sharing, source-file changes, launch, or a larger formal-math proof claim without the owning builder and launch lanes.\n\n###### Scope limit\n\nThis module authorizes only a tiny public fixture witness compiled by local Lean/Lake in a temporary workspace. It excludes Mathlib-dependent proofs, external model access, private proof import, benchmark performance claims, launch operations, hosted deployment, public sharing, recipient work, secret export, or whole-system correctness.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that a tiny public Lean fixture witness can run in a temporary local workspace, emit metadata-only result records, and expose source hashes, declarations, and negative cases. It does not establish Mathlib-dependent theorems, benchmark performance, provider outputs, private proof imports, launch-scope decision, hosted deployment, publishing-scope decision, secret export safety, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe bundle binds this module to `concept.formal_math_and_proof_witness_bundle`: public proof-adjacent language must pass through explicit witness artifacts before it becomes reader evidence. Here the witness artifacts are the temporary Lake project copy, local Lean/Lake tool probes, `lake build MicrocosmProofWitness`, source hashes, declaration metadata, source-module manifest checks, negative-case observations, and metadata-only result records. The Markdown page explains that lattice; it does not upgrade the generated JSON row, the local toolchain, or the copied source body floor into theorem authority.\n\n`P-3` is the governing principle edge for claim discipline. The mechanism rows do not ask a reader to trust a proof story from prose; they route the claim through `run`, `run_witness_bundle`, `validate_source_module_imports`, `_build_result`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `SOURCE_MODULE_MANIFEST_NAME`. Those symbols are the mechanism's concrete boundary: they decide which public source refs may be copied, which imports are blocked, which negative cases count, and which result record fields may be exposed.\n\n`AX-2` supplies the hard law boundary. Public proof claims stay inside declared fixture evidence, public-relative refs, source digests, declaration counts, tool-return metadata, and negative-case verdicts. Proof bodies, model-output data, non-public source refs, stdout/stderr bodies, private source-root material, launch decisions, and whole-system correctness remain outside the module's authority even when the focused test and corpus check are green.\n\nThe dependency on `paper_module.corpus_readiness_mathlib_absence_gate` prevents the most tempting overread. This witness intentionally rejects Mathlib, Aesop, and Batteries imports until a different scope limit exists. A reader can therefore interpret the module as a toy Lean/Lake execution cell upstream of larger formal-math components, not as evidence that Microcosm can certify Mathlib-dependent theorem work.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 11998,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This component exists to make one claim checkable instead of asserted: that Microcosm can actually run the Lean toolchain, not merely talk about it. The single question it answers is whether the installed Lean toolchain will compile a declared, tiny synthetic Lean project end to end, and whether that run can be recorded without leaking the proof. The unusual part is the discipline around the run, not the run itself. The component copies a bounded public Lake project into a temporary workspace and invokes lake build, but the result record keeps only the return code, the standard-output and standard-error line counts, the source hashes, and the declaration names pulled out by a regular expres\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "teleology",
       "title": "Teleology",
       "level": 2,
       "excerpt": "formalmathleanproofwitness is the bounded public crossing from formal-math readiness into an actual local Lean/Lake run. It exists so a cold reader can see Microcosm compile a tiny synthetic proof witness with the installed toolchain while the result records stay redacted, public-relative, and honest about the narrow authority boundary.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The bundle binds this module to concept.formalmathandproofwitness_bundle: public proof-adjacent language must pass through explicit witness artifacts before it becomes reader evidence. Here the witness artifacts are the temporary Lake project copy, local Lean/Lake tool probes, lake build MicrocosmProofWitness, source hashes, declaration metadata, source-module manifest checks, negative-case observations, and metadata-only result records. The Markdown page explains that lattice; it does not upgrade the generated JSON row, the local toolchain, or the copied source body floor into theorem authority. P-3 is the governing principle edge for claim discipline. The mechanism rows do not ask a reade\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Route bundle/currentness questions through ## JSON Bundle Binding, the source record, and the structured source record. The expected generated-row evidence is sourceauthority: jsoncapsule, edge_count: 8, Mermaid availablefromcapsule_edges, Atlas blockeduntilorganatlasownerlanebinds_edges, and zero unresolved selective relations. That evidence proves reader wiring and source authority placement, not formal-result correctness. Route runtime questions through the runtime locus and the two public input surfaces. The first-wave fixture runs run() against the public Lake project and checks the four expected negative cases. The exported bundle runs runwitnessbundle() against copied public source m\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The component copies examples/formalmathleanproofwitness/exportedleanproofwitnessbundle or the first-wave fixture Lake project into a temporary workspace and runs lake build. The public result record records tool availability, Lake build status, source hashes, declaration names, line counts, negative-case coverage, and the scope limit. It does not export proof bodies in JSON result records. The accepted witness scope is deliberately small: public synthetic Lean source is allowed; JSON manifests and result records may not embed proof bodies; Mathlib, Aesop, and Batteries imports are rejected until a wider scope limit exists; non-public source refs, model-output data, oracle proofs, and priva\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in the Lean proof-assistant lineage and the broader small-kernel theorem-proving tradition. The Lean theorem prover system description anchors the local Lean/Lake witness route, and the Lean mathematical library shows why proof authority depends on explicit imports, declarations, and checked environments. Microcosm borrows the proof-witness discipline: a local toolchain run, source hashes, declarations, negative cases, and metadata-only result records must be visible before Lean witness language is allowed. It does not claim Mathlib-dependent proof authority or benchmark performance.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces: Expected generated-row proof: edge_count: 8, mermaidstatus: availablefromcapsuleedges, atlasstatus: blockeduntilorganatlasownerlanebindsedges, sourceauthority: jsoncapsule, and unresolvedselectiverelation_count: 0.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "This module is a bounded public witness, not a formal-proof authority. Its positive evidence is one declared toy Lean/Lake fixture, one exported public witness bundle, five copied source-module body rows, local toolchain metadata, eight compiled declarations when Lean/Lake are available, and four expected negative-case observations. That evidence is enough to show the mechanism's result record discipline; it is not enough to prove arbitrary Lean goals, Mathlib coverage, formal-result correctness, benchmark performance, or private proof import equivalence. The copied-body floor is public but narrow. Result records may cite source refs, hashes, material classes, declaration names, counts, man\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module authorizes only a tiny public fixture witness compiled by local Lean/Lake in a temporary workspace. It excludes Mathlib-dependent proofs, external model access, private proof import, benchmark performance claims, launch operations, hosted deployment, public sharing, recipient work, secret export, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that a tiny public Lean fixture witness can run in a temporary local workspace, emit metadata-only result records, and expose source hashes, declarations, and negative cases. It does not establish Mathlib-dependent theorems, benchmark performance, provider outputs, private proof imports, launch-scope decision, hosted deployment, public sharing decision, secret export safety, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.formal_math_lean_proof_witness.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"First-wave fixture fixtures/first_wave/.../input\"] --> B[\"run() include_negative=true\"] C[\"Exported public bundle examples/.../exported_lean_proof_witness_bundle\"] --> D[\"run_witness_bundle() include_negative=false\"] B --> E[\"Validate witness manifest: reject embedded proof bodies, oracle ids, non-public source refs\"] D --> F[\"Validate source_module_manifest.json: copied public source digests, exact-copy vs replacement\"] E --> G[\"Copy Lake project to temp workspace lake build MicrocosmProofWitness\"] G --> H[\"Negative cases run real Lean: invalid proof rejected, Mathlib/Aesop/Batteries import blocked\"] F --> I[\"Standalone exported-witness contract or fresh bundle result record reuse (no live build)\"] G --> J[\"metadata-only JSON result records: return code, line counts, hashes, declaration names\"] H --> J I --> J J --> K[\"Scope limit: toy public witness only\"]",
       "source_hash": "sha256:5d6f8dad08be9992a0faabd9eb00bab57c7cbb6d3df54e0e0169e32949fc9a31",
       "html_url": "docs/paper-modules.html#paper-module-formal-math-lean-proof-witness-diagram-1",
       "html_anchor": "paper-module-formal-math-lean-proof-witness-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_lean_proof_witness.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Lean theorem prover system description",
       "url": "https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Lean mathematical library",
       "url": "https://arxiv.org/abs/1910.09336",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.corpus_readiness_mathlib_absence_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Corpus Readiness Mathlib Absence Gate",
         "url": "paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 3,
       "links": [
        {
         "id": "formal_math_lean_proof_witness",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Formal Math Lean Proof Witness",
         "url": "components.html#component-formal_math_lean_proof_witness"
        },
        {
         "id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public lean lake witness",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness"
        },
        {
         "id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public lean witness",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 2,
       "links": [
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_lean_proof_witness.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 13228
    },
    {
     "id": "paper_module.formal_math_verifier_trace_repair_loop",
     "title": "Formal Math Verifier Trace Repair Loop",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop",
     "read_href": "docs/paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-math-verifier-trace-repair-loop",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public verifier-trace repair fixture validates copied Ring2 failure taxonomy, graph-update, oracle-repair contrast rows, source-module digests, negative cases, and one deterministic toy rerun without claiming proof authority.",
     "summary": "Formal Math Verifier Trace Repair Loop is the public evidence membrane for proof-lab repair mechanics. It checks copied Ring2 run refs and digests, verifier attempts, trace grades, repair actions, promotion gates, source-module manifests, secret exclusion, and seven leakage or overclaim negative cases, then writes metadata-only result records that keep proof bodies, oracle premise ids, model-output data, Lean/Lake execution, and theorem-correctness claims out of scope.",
     "authority_ceiling": "Copied Ring2 verifier-trace repair metadata, source-module digests, public fixture result records, and one deterministic public toy-theorem rerun only; no Lean/Lake authority, formal-result correctness, proof body, oracle premise id, external model access, human approval as proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "The public verifier-trace repair fixture validates copied Ring2 failure taxonomy, graph-update, oracle-repair contrast rows, source-module digests, negative cases, and one deterministic toy rerun without claiming proof authority.",
     "teleology": {
      "section_id": "",
      "text": "The public verifier-trace repair fixture validates copied Ring2 failure taxonomy, graph-update, oracle-repair contrast rows, source-module digests, negative cases, and one deterministic toy rerun without claiming proof authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`formal_math_verifier_trace_repair_loop` is the source-available replay of a source proof-lab pattern over copied Ring2 run system: verifier feedback becomes a teaching signal only after a trace grade, a repair action, a failure-mode ledger append, a curriculum delta, and a cold rerun result record.\n\nIt is deliberately not a Lean/Lake proof component. It sits between the existing readiness, premise retrieval, tactic routing, proof diagnostic, and Lean witness surfaces so a cold reader can inspect real failure taxonomy, graph-update candidates, and oracle-repair contrast rows without seeing proof bodies, oracle premise ids, model-output data bodies, or private run logs.\n\n###### Purpose\n\nA failed proof attempt is cheap to throw away and expensive to learn from. The question this component answers is narrow: can a verifier's failure be turned into a reusable repair signal, on the public side, without that signal quietly inheriting the authority of a real theorem prover? It exists because the interesting work in a proof-repair loop is the bookkeeping, not the proving, and that bookkeeping is where overclaim usually creeps in.\n\nThe design choice worth noticing is that the loop refuses to collapse its stages into a single verdict. A verifier failure only counts as a teaching signal once it carries a trace grade backed by trace events, a repair action named against the verifier failure class it responds to, a failure-mode ledger append, a curriculum delta, and a cold-rerun result record. Each of those is a separate field, and promotion is blocked until the cold-rerun result record is present. The same separation keeps the dangerous material out: proof bodies, oracle-needed premise ids, and model-output data bodies are forbidden keys, so a row may name a failure class without ever exposing the proof or the oracle answer that produced it.\n\nThe failure mode it guards against is stale copied rows pretending to be live proof-lab evidence. The repair rows here are imported from a real Ring2 benchmark run, so the temptation is to treat the copy as if the run were happening now. The realness gate is the answer: it only reaches its top rung when every verifier attempt and curriculum row replays cleanly against the imported source bodies, and the focused tests deliberately perturb an oracle row, a manifest digest, an attempt label, and a curriculum count so that any drift downgrades the verdict rather than passing quietly. A single deterministic toy-theorem rerun is the one thing actually executed here, and it is plain arithmetic over public inputs, not a Lean proof.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Input[\"Fixture input or exported bundle copied Ring2 rows + source-module manifest\"] Protocol[\"Projection protocol copied-material provenance\"] Manifest[\"Source-module manifest digest, line and byte match, body_in_receipt false\"] Secret[\"Secret-exclusion scan proof bodies, oracle ids, model-output data forbidden\"] Attempts[\"Verifier-attempt replay grade needs trace events, repair needs failure class\"] Curriculum[\"Repair-curriculum replay failure-mode ledger, curriculum deltas\"] Promotion[\"Promotion policy requires cold-rerun result record\"] Toy[\"Deterministic toy rerun fail then repair over public inputs\"] Realness[\"Realness gate clean source replay -> top rung; any drift downgrades\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"Scope limit repair-loop accounting, bounded evidence\"] Input --> Protocol Protocol --> Manifest Manifest --> Secret Secret --> Attempts Attempts --> Curriculum Curriculum --> Promotion Promotion --> Toy Attempts --> Realness Curriculum --> Realness Toy --> Realness Realness --> Result records Result records --> Ceiling\n```\n\n###### Technical Mechanism\n\nThe named mechanism `mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle` is a staged public verifier-repair validator, not a proof executor. `_build_result` composes five checks over the fixture or exported bundle: projection-protocol density, copied source-module manifest integrity, verifier attempt replay, repair-curriculum replay, promotion policy, and one deterministic toy-theorem repair rerun. The result is `pass` only when the projection protocol has copied-material provenance, the secret scan has no blocking hits, source modules pass when required, verifier attempts and curriculum rows replay against their imported Ring2 source bodies, promotion requires a cold rerun reference, and the toy rerun succeeds.\n\nThe exported-bundle path is intentionally stricter than the fixture path. `validate_source_module_manifest` requires a source import class, `body_in_receipt: false`, one row for each declared Ring2 source ref, matching target digests, line counts, and byte counts, and a metadata-only `source_open_body_imports` summary. `_validate_attempt_source_replay` then dereferences the premise-run row, oracle-repair contrast row, and graph-update candidate for each verifier attempt. Mismatches become typed findings such as `VERIFIER_TRACE_SOURCE_REPLAY_MISMATCH`, `VERIFIER_TRACE_ORACLE_REPLAY_MISMATCH`, `VERIFIER_TRACE_COLD_RERUN_SOURCE_MISMATCH`, or `VERIFIER_TRACE_CANDIDATE_REPLAY_MISMATCH`; curriculum-source mismatches are checked separately by `validate_repair_curriculum`.\n\nThe realness gate is also mechanical. `_runtime_realness_evidence` reaches the R4 state only for an exported bundle with verified source modules, at least 30 source replay checks, zero source replay mismatches, at least three attempts, at least nine trace events, at least three failure modes, and a passing toy rerun. The focused tests deliberately perturb the oracle source row, a manifest digest, a verifier-attempt source label, and a curriculum source count; each mutation blocks the verdict or downgrades the realness evidence instead of letting stale copied rows masquerade as proof-lab evidence.\n\nThe proof consumer is `tests/test_formal_math_verifier_trace_repair_loop.py`: it asserts five attempts, 15 trace events, five repair actions, three cold-rerun promotions, three toy-theorem failures repaired into four passing rerun inputs, seven exported source modules, 37 source replay checks, compact-card omission and fresh-result record reuse, public-relative result record paths, no private/body fields in result records, and exact source module copies. Those checks consume the same fixture, bundle, source-module manifest, and mechanism row cited by this page, so the evidence is executable replay accounting rather than a prose-only description.\n\nThe governing lattice is deliberately narrow: the bundle binds the module to `concept.formal_math_and_proof_witness_bundle`, principles `P-1`, `P-2`, `P-3`, `P-6`, and `P-8`, axioms `AX-1`, `AX-2`, `AX-5`, and `AX-7`, and dependency modules for the Lean standard premise index, tactic portfolio availability, target-shape tactic routing, and formal-math premise retrieval. The standard allows only copied Ring2 verifier-trace repair result record schemas and metadata-only public fields. It does not widen a passing replay into Lean/Lake authority, formal-result correctness, proof-body evidence, oracle premise authority, provider authority, human-approval proof authority, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[23:paper_module.formal_math_verifier_trace_repair_loop]` sets `source_authority: json_capsule`, binds the component, binds `mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle`, and resolves `src/microcosm_core/organs/formal_math_verifier_trace_repair_loop.py`.\n- Generated instance: `paper_modules/formal_math_verifier_trace_repair_loop.json` reports `paper_module_payload.source_authority: json_capsule`, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, 17 relationship edges, and resolved `paper_module.depends_on.paper_module` edges to the Lean standard premise index, tactic portfolio, target-shape routing, and formal-math premise retrieval modules named by the active standard.\n- Runtime, fixture, and bundle: `src/microcosm_core/organs/formal_math_verifier_trace_repair_loop.py` exposes `run`, `run_loop_bundle`, `validate_source_module_manifest`, `_write_receipts`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `SOURCE_MODULE_MANIFEST_REF`. The fixture input and exported bundle replay copied Ring2 verifier-trace repair metadata, source-module digests, failure classes, repair actions, promotion gates, and one deterministic public toy-theorem rerun.\n- Result record and test floor: `receipts/first_wave/formal_math_verifier_trace_repair_loop/formal_math_verifier_trace_repair_loop_result.json`, `verifier_trace_repair_board.json`, `formal_math_verifier_trace_repair_loop_validation_receipt.json`, and result records/sign-off/first_wave/formal_math_verifier_trace_repair_loop_fixture_acceptance.json are metadata-only evidence. `tests/test_formal_math_verifier_trace_repair_loop.py` checks source-module manifest validation, negative cases, toy rerun evidence, and scope limits.\n- Claim boundary: `standards/std_microcosm_formal_math_verifier_trace_repair_loop.json` and the generated structured source record limit this module to copied Ring2 verifier-trace repair metadata, source-module digests, public fixture result records, and deterministic toy rerun evidence. They do not authorize Lean/Lake authority, formal-result correctness, proof bodies, oracle premise ids, external model access, human approval as proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\n###### Reader Evidence Routing\n\nThose rows prove reader wiring, not formal-result correctness.\n\nRoute runtime and replay questions through `## Runtime`, `## Receipts`, and the fixture/bundle paths in the validation command. The fixture runner, exported bundle runner, CLI route, standard, and fixture manifest show how verifier-trace repair accounting is replayed over copied public rows without importing proof bodies, oracle-needed premise ids, model-output data bodies, or private logs.\n\nRoute claim-safety questions through `## What It Proves`, `## What It Refuses`, ## Result record Expectations, and ## Scope limit. If the question is whether the repair loop is still body-safe and result record-backed, run the focused pytest and paper-module corpus check before citing this page.\n\n###### Prior Art Grounding\n\nThis component is grounded in interactive theorem-proving feedback loops and learning environments where failed proof attempts become structured training or repair signals. [GamePad](https://arxiv.org/abs/1806.00608) and [HOList](https://arxiv.org/abs/1904.03241) both expose theorem-proving interaction data for machine-learning experiments, while [LeanDojo](https://arxiv.org/abs/2306.15626) reinforces the need to keep proof assistant feedback, retrieval, and proof-state interaction reproducible.\n\nMicrocosm borrows the repair-loop accounting pattern: verifier events, grades, failure classes, repair actions, curriculum deltas, and cold rerun result records are separate fields. It does not treat human or provider advice as formal-result correctness.\n\n###### Runtime\n- Component runner: `python -m microcosm_core.organs.formal_math_verifier_trace_repair_loop run --input fixtures/first_wave/formal_math_verifier_trace_repair_loop/input --out receipts/first_wave/formal_math_verifier_trace_repair_loop`\n- Exported bundle runner: `python -m microcosm_core.organs.formal_math_verifier_trace_repair_loop run-loop-bundle --input examples/formal_math_verifier_trace_repair_loop/exported_verifier_trace_repair_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_verifier_trace_repair_loop`\n- CLI: `microcosm formal-math-verifier-trace-repair-loop run-loop-bundle --input examples/formal_math_verifier_trace_repair_loop/exported_verifier_trace_repair_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_verifier_trace_repair_loop`\n- Standard: `standards/std_microcosm_formal_math_verifier_trace_repair_loop.json`\n- Fixture manifest: `core/fixture_manifests/formal_math_verifier_trace_repair_loop.fixture_manifest.json`\n\n###### What It Proves\n- A public verifier replay can require trace events before trace grades.\n- Copied Ring2 failure rows can feed a repair curriculum without becoming proof authority.\n- A repair action must name the verifier failure class it responds to.\n- A failure-mode ledger update can be represented without proof bodies.\n- Promotion requires a cold rerun result record reference.\n- Human or provider advice stays advisory until checker evidence exists.\n\n###### What It Refuses\n- Proof bodies in public verifier traces.\n- Oracle-needed premise ids in public inputs.\n- model-output data bodies in fixtures or result records.\n- Human approval as checker authority or theorem-quality evidence.\n- launch, public sharing, secret export, or general theorem-proving claims.\n\n###### Result records\n- `receipts/first_wave/formal_math_verifier_trace_repair_loop/formal_math_verifier_trace_repair_loop_result.json`\n- `receipts/first_wave/formal_math_verifier_trace_repair_loop/verifier_trace_repair_board.json`\n- `receipts/first_wave/formal_math_verifier_trace_repair_loop/formal_math_verifier_trace_repair_loop_validation_receipt.json`\n- result records/sign-off/first_wave/formal_math_verifier_trace_repair_loop_fixture_acceptance.json\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_math_verifier_trace_repair_loop.py -q --basetemp=/tmp/microcosm_formal_math_verifier_trace_repair_loop_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.relationships.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/formal_math_verifier_trace_repair_loop.json\n```\n\nExpected generated-row proof: `edge_count: 17`, `mermaid_status: available_from_capsule_edges`, `atlas_status: linked_from_capsule_edges`, `source_authority: json_capsule`, and `unresolved_selective_relation_count: 0`.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe authority boundary is copied Ring2 verifier trace repair public fields only. The component demonstrates control-loop mechanics over real run rows, not formal-result correctness.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that copied Ring2 verifier rows can drive a public verifier-trace repair loop with trace-event requirements, failure-class routing, promotion gates, and metadata-only result records. It does not establish formal-result correctness, expose proof bodies, authorize human or provider advice as proof authority, publish private run logs, approve launch, or certify whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 15112,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A failed proof attempt is cheap to throw away and expensive to learn from. The question this component answers is narrow: can a verifier's failure be turned into a reusable repair signal, on the public side, without that signal quietly inheriting the authority of a real theorem prover? It exists because the interesting work in a proof-repair loop is the bookkeeping, not the proving, and that bookkeeping is where overclaim usually creeps in. The design choice worth noticing is that the loop refuses to collapse its stages into a single verdict. A verifier failure only counts as a teaching signal once it carries a trace grade backed by trace events, a repair action named against the verifier f\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The named mechanism mechanism.formalmathverifiertracerepairloop.validatespublicverifiertracerepairbundle is a staged public verifier-repair validator, not a proof executor. buildresult composes five checks over the fixture or exported bundle: projection-protocol density, copied source-module manifest integrity, verifier attempt replay, repair-curriculum replay, promotion policy, and one deterministic toy-theorem repair rerun. The result is pass only when the projection protocol has copied-material provenance, the secret scan has no blocking hits, source modules pass when required, verifier attempts and curriculum rows replay against their imported Ring2 source bodies, promotion requires a c\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Those rows prove reader wiring, not formal-result correctness. Route runtime and replay questions through ## Runtime, ## Result records, and the fixture/bundle paths in the validation command. The fixture runner, exported bundle runner, CLI route, standard, and fixture manifest show how verifier-trace repair accounting is replayed over copied public rows without importing proof bodies, oracle-needed premise ids, model-output data bodies, or private logs. Route claim-safety questions through ## What It Proves, ## What It Refuses, ## Result record Expectations, and ## Scope limit. If the question is whether the repair loop is still body-safe and result record-backed, run the focused pytest an\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in interactive theorem-proving feedback loops and learning environments where failed proof attempts become structured training or repair signals. GamePad and HOList both expose theorem-proving interaction data for machine-learning experiments, while LeanDojo reinforces the need to keep proof assistant feedback, retrieval, and proof-state interaction reproducible. Microcosm borrows the repair-loop accounting pattern: verifier events, grades, failure classes, repair actions, curriculum deltas, and cold rerun result records are separate fields. It does not treat human or provider advice as formal-result correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "runtime",
       "title": "Runtime",
       "level": 2,
       "excerpt": "Component runner: python -m microcosmcore.components.formalmathverifiertracerepairloop run --input fixtures/firstwave/formalmathverifiertracerepairloop/input --out result records/firstwave/formalmathverifiertracerepairloop Exported bundle runner: python -m microcosmcore.components.formalmathverifiertracerepairloop run-loop-bundle --input examples/formalmathverifiertracerepairloop/exportedverifiertracerepairbundle --out result records/runtimeshell/demoproject/components/formalmathverifiertracerepairloop CLI: microcosm formal-math-verifier-trace-repair-loop run-loop-bundle --input examples/formalmathverifiertracerepairloop/exportedverifiertracerepairbundle --out result records/runtimeshell/de\u2026",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "what-it-proves",
       "title": "What It Proves",
       "level": 2,
       "excerpt": "A public verifier replay can require trace events before trace grades. Copied Ring2 failure rows can feed a repair curriculum without becoming proof authority. A repair action must name the verifier failure class it responds to. A failure-mode ledger update can be represented without proof bodies. Promotion requires a cold rerun result record reference. Human or provider advice stays advisory until checker evidence exists.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-refuses",
       "title": "What It Refuses",
       "level": 2,
       "excerpt": "Proof bodies in public verifier traces. Oracle-needed premise ids in public inputs. model-output data bodies in fixtures or result records. Human approval as checker authority or theorem-quality evidence. launch, public sharing, secret export, or general theorem-proving claims.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces: Expected generated-row proof: edge_count: 17, mermaidstatus: availablefromcapsuleedges, atlasstatus: linkedfromcapsuleedges, sourceauthority: jsoncapsule, and unresolvedselectiverelation_count: 0.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "receipts",
       "title": "Result records",
       "level": 2,
       "excerpt": "result records/firstwave/formalmathverifiertracerepairloop/formalmathverifiertracerepairloopresult.json result records/firstwave/formalmathverifiertracerepairloop/verifiertracerepair_board.json result records/firstwave/formalmathverifiertracerepairloop/formalmathverifiertracerepairloopvalidation_receipt.json result records/sign-off/firstwave/formalmathverifiertracerepairloopfixtureacceptance.json",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The authority boundary is copied Ring2 verifier trace repair public fields only. The component demonstrates control-loop mechanics over real run rows, not formal-result correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that copied Ring2 verifier rows can drive a public verifier-trace repair loop with trace-event requirements, failure-class routing, promotion gates, and metadata-only result records. It does not establish formal-result correctness, expose proof bodies, authorize human or provider advice as proof authority, publish private run logs, approve launch, or certify whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.formal_math_verifier_trace_repair_loop.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Input[\"Fixture input or exported bundle copied Ring2 rows + source-module manifest\"] Protocol[\"Projection protocol copied-material provenance\"] Manifest[\"Source-module manifest digest, line and byte match, body_in_receipt false\"] Secret[\"Secret-exclusion scan proof bodies, oracle ids, model-output data forbidden\"] Attempts[\"Verifier-attempt replay grade needs trace events, repair needs failure class\"] Curriculum[\"Repair-curriculum replay failure-mode ledger, curriculum deltas\"] Promotion[\"Promotion policy requires cold-rerun result record\"] Toy[\"Deterministic toy rerun fail then repair over public inputs\"] Realness[\"Realness gate clean source replay -> top rung; any drift downgrades\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"Scope limit repair-loop accounting, bounded evidence\"] Input --> Protocol Protocol --> Manifest Manifest --> Secret Secret --> Attempts Attempts --> Curriculum Curriculum --> Promotion Promotion --> Toy Attempts --> Realness Curriculum --> Realness Toy --> Realness Realness --> Result records Result records --> Ceiling",
       "source_hash": "sha256:66a602b3ad09df9cd4e8e5f943691d94ecf2a57c9a2f944b5385366f8fb4cadf",
       "html_url": "docs/paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop-diagram-1",
       "html_anchor": "paper-module-formal-math-verifier-trace-repair-loop-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_verifier_trace_repair_loop.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "GamePad",
       "url": "https://arxiv.org/abs/1806.00608",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "HOList",
       "url": "https://arxiv.org/abs/1904.03241",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "LeanDojo",
       "url": "https://arxiv.org/abs/2306.15626",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 4,
       "links": [
        {
         "id": "paper_module.lean_std_premise_index",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Lean/Std Premise Index",
         "url": "paper-modules.html#paper-module-lean-std-premise-index"
        },
        {
         "id": "paper_module.tactic_portfolio_availability",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Tactic Portfolio Availability",
         "url": "paper-modules.html#paper-module-tactic-portfolio-availability"
        },
        {
         "id": "paper_module.target_shape_tactic_routing",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Target Shape Tactic Routing",
         "url": "paper-modules.html#paper-module-target-shape-tactic-routing"
        },
        {
         "id": "paper_module.formal_math_premise_retrieval",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Premise Retrieval",
         "url": "paper-modules.html#paper-module-formal-math-premise-retrieval"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "formal_math_verifier_trace_repair_loop",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Formal Math Verifier Trace Repair Loop",
         "url": "components.html#component-formal_math_verifier_trace_repair_loop"
        },
        {
         "id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public verifier trace repair bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 6,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_verifier_trace_repair_loop.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 16456
    },
    {
     "id": "paper_module.formal_evidence_cell_anchor_resolver",
     "title": "Formal Evidence Cell Anchor Resolver",
     "relative_href": "docs/paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver",
     "read_href": "docs/paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-evidence-cell-anchor-resolver",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The formal evidence cell anchor resolver binds proof-language paper claims to public evidence cells, source anchors, machine-anchor metadata, copied source modules, and negative-case result records without claiming formal-result correctness.",
     "summary": "Formal Evidence Cell Anchor Resolver is the evidence-legibility membrane for Microcosm's formal math claims. It resolves three paper claims to public evidence-cell ids, checks source-anchor and machine-anchor metadata, anchors the verifier-trace cell to real Ring2 verifier-trace repair result records, validates six copied source-open body modules, observes seven proof/private/human-approval/theorem-correctness negative cases, and emits metadata-only result records that make proof-language boundaries inspectable without becoming proof authority.",
     "authority_ceiling": "Evidence-cell anchor metadata and source-open runtime result records only; no formal-result correctness, proof-body import, private source-ref authority, human approval as proof authority, Lean/Lake execution, external model access, launch-scope decision, publishing-scope decision, source-file changes, or formal-proof certification.",
     "abstract": "The formal evidence cell anchor resolver binds proof-language paper claims to public evidence cells, source anchors, machine-anchor metadata, copied source modules, and negative-case result records without claiming formal-result correctness.",
     "teleology": {
      "section_id": "",
      "text": "The formal evidence cell anchor resolver binds proof-language paper claims to public evidence cells, source anchors, machine-anchor metadata, copied source modules, and negative-case result records without claiming formal-result correctness.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`formal_evidence_cell_anchor_resolver` makes Microcosm's formal-math evidence claims inspectable without turning result record summaries into proof authority. It resolves paper-module claims to evidence-cell ids, checks source-anchor refs, records machine-anchor classes, and enforces a claim-strength boundary before any proof-language claim can pass. Its formal-math trace cell anchors the real Ring2 verifier-trace repair result records.\n\nIt is not a theorem prover. It does not execute Lean or Lake, expose proof bodies, expose non-public source refs, use external model services, or claim formal-result correctness. It emits real runtime result records over the imported evidence-cell system, carries digest-bearing Ring2 failure-taxonomy and graph-update source refs, and uses secret-exclusion scanning only for account secret-equivalent or non-result record body payloads.\n\n###### Purpose\n\nProof-adjacent prose is the easiest place for a claim to drift. A paper module can write \"this proves the theorem\" or \"this is certified\" and a cold reader has no cheap way to tell whether the words are backed by a checked artifact or by nothing at all. This component answers one question: when a claim uses proof language, can the words be resolved to a specific piece of public evidence, and does that evidence stay below theorem-correctness authority?\n\nThe mechanism is an evidence cell. A cell is a stable id that stands in for a bundle of result record-backed evidence: its source-anchor refs, a `machine_anchor_class` that names what kind of machine artifact backs it, and the list of claim strengths the cell is allowed to support. The policy `proof_language_requires_machine_anchor` is the rule that makes the resolver useful. A claim that uses proof language must name a cell, the cell must resolve in the registry, and its source anchors must point at files that actually exist on the public path. A claim that uses proof language but names no cell, or names a cell that is not in the registry, lowers the run to a blocked status rather than passing as green prose.\n\nWhat is worth noticing is what the cell id buys. It is a compressed handle: one short reference that a reader can follow back to the real result records behind a claim, instead of inlining proof bodies or trusting narrative. Two boundaries sit on top of that handle. Claim strength is capped by the cell, so a claim cannot assert more than its anchored evidence allows. And human approval is refused as a substitute for a machine anchor, which keeps a sign-off from being treated as proof.\n\n###### Shape\n\nSource refs\n\nsource record `core/paper_module_capsules.json::paper_modules[24]` structured source record source basis: source record `paper_modules/formal_evidence_cell_anchor_resolver.json` runtime locus `src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py` first-wave fixture input `fixtures/first_wave/formal_evidence_cell_anchor_resolver/input` exported evidence-cell anchor bundle `examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle` source-open body manifest `source_module_manifest.json` validation result records `receipts/first_wave/... + receipts/acceptance/...` runtime-shell result record `receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver/...` Diagram source\n\n```text\nflowchart TD Bundle[\"source record core/paper_module_capsules.json::paper_modules[24]\"] --> structured source record[\"structured source record paper_modules/formal_evidence_cell_anchor_resolver.json source basis: source record\"] structured source record --> Mermaid[\"diagram view available_from_capsule_edges\"] structured source record --> Atlas[\"map view blocked_until_organ_atlas_owner_lane_binds_edges\"] structured source record --> Reader[\"this page this page\"] Reader --> Runtime[\"runtime locus src/microcosm_core/components/formal_evidence_cell_anchor_resolver.py\"] Runtime --> Fixture[\"first-wave fixture input fixtures/first_wave/formal_evidence_cell_anchor_resolver/input\"] Runtime --> Bundle[\"exported evidence-cell anchor bundle examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle\"] Bundle --> Manifest[\"source-open body manifest source_module_manifest.json\"] Fixture --> Result records[\"validation result records result records/first_wave/... + result records/sign-off/...\"] Bundle --> BundleReceipt[\"runtime-shell result record result records/runtime_shell/demo_project/components/formal_evidence_cell_anchor_resolver/...\"] Result records --> Ceiling[\"proof boundary + scope limit anchor metadata only, not formal-result correctness\"] BundleReceipt --> Ceiling\n```\n\nRead the diagram left to right: the bundle and generated structured source record name the relationships; the runtime validates fixture and bundle inputs; the result records show what passed; the scope limit prevents any of those surfaces from becoming proof, launch, provider, private-system, or theorem-correctness authority.\n\n###### Reader Evidence Routing\n\nA cold reader should inspect this module through these system surfaces, in order:\n1. Authority seed: `core/paper_module_capsules.json::paper_modules[24:paper_module.formal_evidence_cell_anchor_resolver]`. This is the source record that binds the Markdown projection, generated JSON, runtime locus, fixture, exported bundle, mechanism rows, and scope boundaries.\n2. Generated structured source record: `paper_modules/formal_evidence_cell_anchor_resolver.json`. Check `relationships.source_authority`, the 15 relationship edges, the `generated_projections` statuses, `unpopulated_selective_relations`, and the bundle-carried scope limit before trusting any prose summary.\n3. Runtime locus: `src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py`. The relevant runtime symbols are `run`, `run_anchor_bundle`, `validate_source_module_manifest`, `_build_result`, `_source_module_summary_card`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_REF`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n4. Fixture and exported bundle: `fixtures/first_wave/formal_evidence_cell_anchor_resolver/input`, `examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle`, and `examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle/source_module_manifest.json`. The first-wave fixture exercises negative cases and Ring2 result record anchors; the exported bundle validates six source-open body modules by digest while keeping source bodies out of result records.\n5. Result records: `receipts/first_wave/formal_evidence_cell_anchor_resolver/formal_evidence_cell_anchor_resolver_result.json`, `receipts/first_wave/formal_evidence_cell_anchor_resolver/evidence_cell_anchor_board.json`, `receipts/first_wave/formal_evidence_cell_anchor_resolver/formal_evidence_cell_anchor_resolver_validation_receipt.json`, result records/sign-off/first_wave/formal_evidence_cell_anchor_resolver_fixture_acceptance.json, and `receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle_validation_result.json`. These result records report pass/fail state, metadata-only public refs, negative-case observations, and explicit `release_authorized=false`, `provider_calls_authorized=false`, `lean_lake_execution_authorized=false`, `formal_proof_authority=false`, and `theorem_correctness_authority=false` ceilings.\n6. Focused checks: `tests/test_formal_evidence_cell_anchor_resolver.py`, `scripts/build_doctrine_projection.py --check-paper-module-corpus`, and the JSON-row proof query in the validation section below. Those checks validate the reader route and generated-row parity; they do not authorize public sharing or formal proof claims.\n\n###### Prior Art Grounding\n\nThis component is grounded in provenance and proof-certificate work where claims must point at checkable evidence rather than untyped narrative. The [W3C PROV](https://www.w3.org/TR/prov-overview/) model is a general anchor for linking entities, activities, and agents in an evidence graph, while [Proof-Carrying Code](https://www.usenix.org/legacy/publications/library/proceedings/osdi96/full_papers/necula/html/node2.html) and small-kernel proof assistants motivate separating a certificate or anchor from the trusted checker that bounds its meaning.\n\nMicrocosm borrows the anchor-resolution pattern: proof-language claims must name evidence-cell ids, source anchors, machine-anchor classes, and claim strength limits. It does not turn metadata cells into theorem-correctness authority.\n\n###### Runtime\n- Component runner: `python -m microcosm_core.organs.formal_evidence_cell_anchor_resolver run --input fixtures/first_wave/formal_evidence_cell_anchor_resolver/input --out receipts/first_wave/formal_evidence_cell_anchor_resolver`\n- Exported bundle runner: `python -m microcosm_core.organs.formal_evidence_cell_anchor_resolver run-anchor-bundle --input examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle --out receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver`\n- CLI: `microcosm formal-evidence-cell-anchor-resolver run-anchor-bundle --input examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle --out receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver`\n- Standard: `standards/std_microcosm_formal_evidence_cell_anchor_resolver.json`\n- Fixture manifest: `core/fixture_manifests/formal_evidence_cell_anchor_resolver.fixture_manifest.json`\n\n###### What It Establishes As Evidence Routing\n- Proof-language claims must resolve to a public evidence cell before this reader treats them as routed evidence.\n- Evidence cells must carry source-anchor refs.\n- Machine-anchor metadata is visible as metadata, not formal-result correctness.\n- Claim strength is bounded by the resolved cell.\n- Secret, account secret-equivalent, or non-result record body payloads must have explicit exclusion result records.\n- The verifier-trace cell is anchored to the first-wave `formal_math_verifier_trace_repair_loop` result, board, validation result record, and Ring2 failure-taxonomy source digest.\n\n###### What It Refuses\n- Unknown evidence-cell ids used as proof authority.\n- Proof-language claims without evidence-cell ids.\n- Proof bodies in public claim rows.\n- non-public source refs in public claim or cell rows.\n- Human approval as proof authority.\n- Theorem-correctness claims from metadata cells.\n- launch, public sharing, secret export, or provider authority.\n\n###### Result records\n- `receipts/first_wave/formal_evidence_cell_anchor_resolver/formal_evidence_cell_anchor_resolver_result.json`\n- `receipts/first_wave/formal_evidence_cell_anchor_resolver/evidence_cell_anchor_board.json`\n- `receipts/first_wave/formal_evidence_cell_anchor_resolver/formal_evidence_cell_anchor_resolver_validation_receipt.json`\n- result records/sign-off/first_wave/formal_evidence_cell_anchor_resolver_fixture_acceptance.json\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_evidence_cell_anchor_resolver.py -q --basetemp=/tmp/microcosm_formal_evidence_cell_anchor_resolver_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.relationships.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/formal_evidence_cell_anchor_resolver.json\n```\n\nExpected generated-row proof: `edge_count: 15`, `mermaid_status: available_from_capsule_edges`, `atlas_status: blocked_until_organ_atlas_owner_lane_binds_edges`, `source_authority: json_capsule`, and `unresolved_selective_relation_count: 0`.\n\n###### Scope boundary\n\n###### Limitations\n\nThis module is a proof-adjacent evidence router, not a proof system. The fixture proves a bounded resolver contract over three paper claims, three evidence cells, seven declared negative-case classes, eight source anchors, three machine anchors, and zero copied source modules in fixture mode. The exported bundle proves the same public runtime shape over three claims, three evidence cells, five source anchors, six copied source-open body modules, and metadata-only result records. These counts are the claim boundary, not a scale claim about the formal-math corpus.\n\nThe source-module proof is digest and authority-ref parity for the six exported body modules named by the bundle manifest. It does not establish that every source formal-math source file has been imported, that future source drift is absent, or that copied body availability confers public launch-scope decision. A digest match also excludes exporting proof bodies, non-public source refs, model-output data, oracle material, account secrets, browser UI/operator UI state, or source notes.\n\nThe checker rejects unknown cells, missing source anchors, proof language without cells, non-public refs, proof bodies, theorem-correctness overclaims, and human approval as proof authority. That refusal coverage does not certify Lean or Lake execution, formal-result correctness, proof completeness, benchmark performance, deployment posture, or whole-system correctness.\n\n###### Scope limit\n\nThe authority boundary is evidence-cell anchor resolution backed by real runtime result records. The component makes claim boundaries legible; it does not certify mathematical truth.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that public evidence-cell anchor metadata can bind proof-language claims to result record-backed cells and exclude private bodies, proof bodies, model-output data, oracle material, and secret-equivalent refs. Its generated Mermaid/Atlas statuses and relationship counts are JSON-bundle projections; they do not certify formal-result correctness, proof completeness, launch-scope decision, publishing-scope decision, provider authority, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe lattice edge is not just that this page \"mentions\" formal math evidence. The generated structured source record binds the page to one component, two mechanism rows, `concept.formal_math_and_proof_witness_bundle`, `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, `AX-1`, `AX-2`, `AX-5`, `AX-7`, the sibling `paper_module.formal_math_verifier_trace_repair_loop`, and the resolved runtime source locus. That is the governing shape: proof-adjacent claims enter as paper-claim rows, evidence-cell ids, source anchors, machine-anchor classes, and copied source-module manifests; `_build_result` recomputes the pass or blocked status from those lower-level artifacts; `_source_module_summary_card` and `run_anchor_bundle` export compact, metadata-only evidence.\n\n`P-1` and `AX-1` require a recomputed checker result rather than a label. `P-2` and `AX-2` keep the scope limit at the strength of the resolver and its certificates. `P-3` makes the small resolver/manifest checker the authority surface instead of broad proof-language prose. `P-6`, `P-8`, `AX-5`, and `AX-7` explain the blocked path: missing anchors, proof bodies, non-public source refs, source-module digest drift, theorem-correctness language, or human approval as proof authority must lower the status or return a refusal with evidence rather than preserving a green reader claim.\n\nThe focused proof consumer is `tests/test_formal_evidence_cell_anchor_resolver.py`. It asserts the fixture path observes all seven expected negative cases, resolves three claims to three evidence cells, records eight source anchors and three machine anchors, anchors the verifier-trace row to Ring2 result records, keeps formal-proof and theorem-correctness authority false, validates the exported bundle with six copied source modules, rejects theorem-correctness overclaims, rejects digest and rehashed-body swaps, and keeps command-card result records compact and metadata-only. Those checks are the local mechanism witness for the lattice relation.\n\n###### Source-Open Body Floor\n\nThe exported bundle carries a source-open body floor at `examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle/source_module_manifest.json`. It imports the paper-module formal-evidence auditor, formal evidence-cell registry builder, focused runtime tests, public formal-evidence registry state, Erdos257 issue217 evidence-cell manifest, and the `std_paper_module` formal-evidence-cell contract body. Result records and workingness cards expose digests and validation status, not body text, proof bodies, model-output data, non-public refs, oracle material, or theorem-correctness authority.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 16832,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Proof-adjacent prose is the easiest place for a claim to drift. A paper module can write \"this proves the theorem\" or \"this is certified\" and a cold reader has no cheap way to tell whether the words are backed by a checked artifact or by nothing at all. This component answers one question: when a claim uses proof language, can the words be resolved to a specific piece of public evidence, and does that evidence stay below theorem-correctness authority? The mechanism is an evidence cell. A cell is a stable id that stands in for a bundle of result record-backed evidence: its source-anchor refs, a machineanchorclass that names what kind of machine artifact backs it, and the list of claim streng\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Read the diagram left to right: the bundle and generated structured source record name the relationships; the runtime validates fixture and bundle inputs; the result records show what passed; the scope limit prevents any of those surfaces from becoming proof, launch, provider, private-system, or theorem-correctness authority.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "A cold reader should inspect this module through these system surfaces, in order: Authority seed: core/papermodulecapsules.json::papermodules[24:papermodule.formalevidencecellanchorresolver]. This is the source record that binds the Markdown projection, generated JSON, runtime locus, fixture, exported bundle, mechanism rows, and scope boundaries. Generated structured source record: papermodules/formalevidencecellanchor_resolver.json. Check relationships.source basis, the 15 relationship edges, the generatedprojections statuses, unpopulatedselective_relations, and the bundle-carried scope limit before trusting any prose summary. Runtime locus: src/microcosmcore/components/formalevidencecella\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The lattice edge is not just that this page \"mentions\" formal math evidence. The generated structured source record binds the page to one component, two mechanism rows, concept.formalmathandproofwitness_bundle, P-1, P-2, P-3, P-6, P-8, AX-1, AX-2, AX-5, AX-7, the sibling papermodule.formalmathverifiertracerepairloop, and the resolved runtime source locus. That is the governing shape: proof-adjacent claims enter as paper-claim rows, evidence-cell ids, source anchors, machine-anchor classes, and copied source-module manifests; buildresult recomputes the pass or blocked status from those lower-level artifacts; sourcemodulesummarycard and runanchorbundle export compact, metadata-only evidence.\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in provenance and proof-certificate work where claims must point at checkable evidence rather than untyped narrative. The W3C PROV model is a general anchor for linking entities, activities, and agents in an evidence graph, while Proof-Carrying Code and small-kernel proof assistants motivate separating a certificate or anchor from the trusted checker that bounds its meaning. Microcosm borrows the anchor-resolution pattern: proof-language claims must name evidence-cell ids, source anchors, machine-anchor classes, and claim strength limits. It does not turn metadata cells into theorem-correctness authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "runtime",
       "title": "Runtime",
       "level": 2,
       "excerpt": "Component runner: python -m microcosmcore.components.formalevidencecellanchorresolver run --input fixtures/firstwave/formalevidencecellanchorresolver/input --out result records/firstwave/formalevidencecellanchor_resolver Exported bundle runner: python -m microcosmcore.components.formalevidencecellanchorresolver run-anchor-bundle --input examples/formalevidencecellanchorresolver/exportedevidencecellanchorbundle --out result records/runtimeshell/demoproject/components/formalevidencecellanchor_resolver CLI: microcosm formal-evidence-cell-anchor-resolver run-anchor-bundle --input examples/formalevidencecellanchorresolver/exportedevidencecellanchorbundle --out result records/runtimeshell/demopro\u2026",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The exported bundle carries a source-open body floor at examples/formalevidencecellanchorresolver/exportedevidencecellanchorbundle/sourcemodulemanifest.json. It imports the paper-module formal-evidence auditor, formal evidence-cell registry builder, focused runtime tests, public formal-evidence registry state, Erdos257 issue217 evidence-cell manifest, and the stdpapermodule formal-evidence-cell contract body. Result records and workingness cards expose digests and validation status, not body text, proof bodies, model-output data, non-public refs, oracle material, or theorem-correctness authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-establishes-as-evidence-routing",
       "title": "What It Establishes As Evidence Routing",
       "level": 2,
       "excerpt": "Proof-language claims must resolve to a public evidence cell before this reader treats them as routed evidence. Evidence cells must carry source-anchor refs. Machine-anchor metadata is visible as metadata, not formal-result correctness. Claim strength is bounded by the resolved cell. Secret, account secret-equivalent, or non-result record body payloads must have explicit exclusion result records. The verifier-trace cell is anchored to the first-wave formalmathverifiertracerepair_loop result, board, validation result record, and Ring2 failure-taxonomy source digest.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-refuses",
       "title": "What It Refuses",
       "level": 2,
       "excerpt": "Unknown evidence-cell ids used as proof authority. Proof-language claims without evidence-cell ids. Proof bodies in public claim rows. non-public source refs in public claim or cell rows. Human approval as proof authority. Theorem-correctness claims from metadata cells. launch, public sharing, secret export, or provider authority.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "This module is a proof-adjacent evidence router, not a proof system. The fixture proves a bounded resolver contract over three paper claims, three evidence cells, seven declared negative-case classes, eight source anchors, three machine anchors, and zero copied source modules in fixture mode. The exported bundle proves the same public runtime shape over three claims, three evidence cells, five source anchors, six copied source-open body modules, and metadata-only result records. These counts are the claim boundary, not a scale claim about the formal-math corpus. The source-module proof is digest and authority-ref parity for the six exported body modules named by the bundle manifest. It does\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces: Expected generated-row proof: edge_count: 15, mermaidstatus: availablefromcapsuleedges, atlasstatus: blockeduntilorganatlasownerlanebindsedges, sourceauthority: jsoncapsule, and unresolvedselectiverelation_count: 0.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "receipts",
       "title": "Result records",
       "level": 2,
       "excerpt": "result records/firstwave/formalevidencecellanchorresolver/formalevidencecellanchorresolverresult.json result records/firstwave/formalevidencecellanchorresolver/evidencecellanchorboard.json result records/firstwave/formalevidencecellanchorresolver/formalevidencecellanchorresolvervalidation_receipt.json result records/sign-off/firstwave/formalevidencecellanchorresolverfixture_acceptance.json",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The authority boundary is evidence-cell anchor resolution backed by real runtime result records. The component makes claim boundaries legible; it does not certify mathematical truth.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that public evidence-cell anchor metadata can bind proof-language claims to result record-backed cells and exclude private bodies, proof bodies, model-output data, oracle material, and secret-equivalent refs. Its generated Mermaid/Atlas statuses and relationship counts are JSON-bundle projections; they do not certify formal-result correctness, proof completeness, launch-scope decision, public sharing decision, provider authority, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.formal_evidence_cell_anchor_resolver.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"source record core/paper_module_capsules.json::paper_modules[24]\"] --> structured source record[\"structured source record paper_modules/formal_evidence_cell_anchor_resolver.json source basis: source record\"] structured source record --> Mermaid[\"diagram view available_from_capsule_edges\"] structured source record --> Atlas[\"map view blocked_until_organ_atlas_owner_lane_binds_edges\"] structured source record --> Reader[\"this page this page\"] Reader --> Runtime[\"runtime locus src/microcosm_core/components/formal_evidence_cell_anchor_resolver.py\"] Runtime --> Fixture[\"first-wave fixture input fixtures/first_wave/formal_evidence_cell_anchor_resolver/input\"] Runtime --> Bundle[\"exported evidence-cell anchor bundle examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle\"] Bundle --> Manifest[\"source-open body manifest source_module_manifest.json\"] Fixture --> Result records[\"validation result records result records/first_wave/... + result records/sign-off/...\"] Bundle --> BundleReceipt[\"runtime-shell result record result records/runtime_shell/demo_project/components/formal_evidence_cell_anchor_resolver/...\"] Result records --> Ceiling[\"proof boundary + scope limit anchor metadata only, not formal-result correctness\"] BundleReceipt --> Ceiling",
       "source_hash": "sha256:743aa85dc1d159195dd26cc0dbd5d38be7f4c4890641f6eee3229aa690e2e34e",
       "html_url": "docs/paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver-diagram-1",
       "html_anchor": "paper-module-formal-evidence-cell-anchor-resolver-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_evidence_cell_anchor_resolver.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Proof-Carrying Code",
       "url": "https://www.usenix.org/legacy/publications/library/proceedings/osdi96/full_papers/necula/html/node2.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.formal_math_verifier_trace_repair_loop",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Verifier Trace Repair Loop",
         "url": "paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 3,
       "links": [
        {
         "id": "formal_evidence_cell_anchor_resolver",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Formal Evidence Cell Anchor Resolver",
         "url": "components.html#component-formal_evidence_cell_anchor_resolver"
        },
        {
         "id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public evidence cell anchor resolution",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution"
        },
        {
         "id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public evidence cell anchors",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 6,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_evidence_cell_anchor_resolver.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 18239
    },
    {
     "id": "paper_module.formal_math_premise_retrieval",
     "title": "Formal Math Premise Retrieval",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-premise-retrieval",
     "read_href": "docs/paper-modules.html#paper-module-formal-math-premise-retrieval",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-math-premise-retrieval",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Formal math premise retrieval validates copied public Lean/Std premise metadata, query scoring, context budgets, strategy gates, body-floor provenance, and leakage negative cases without claiming proof authority.",
     "summary": "Formal Math Premise Retrieval is the source-backed retrieval slice between the Lean/Std premise catalog and proof-witness boundary. It validates eleven public premise descriptors, four retrieval queries, forty-four considered candidates, exact and source-faithful source body imports, context recipe byte budgets, strategy ids, card freshness, and five leakage/overclaim negative cases while keeping proof bodies, oracle premise ids, model-output data, Lean/Lake execution, and launch claims out of result records.",
     "authority_ceiling": "Copied public source retrieval metadata and runtime validation result records only; no formal-result correctness, proof-body import, oracle-needed premise authority, Mathlib authority, Lean/Lake execution, external model access, benchmark claim, launch-scope decision, publishing-scope decision, source-file changes, or general formal-proof authority.",
     "abstract": "Formal math premise retrieval validates copied public Lean/Std premise metadata, query scoring, context budgets, strategy gates, body-floor provenance, and leakage negative cases without claiming proof authority.",
     "teleology": {
      "section_id": "",
      "text": "Formal math premise retrieval validates copied public Lean/Std premise metadata, query scoring, context budgets, strategy gates, body-floor provenance, and leakage negative cases without claiming proof authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`formal_math_premise_retrieval` is the source-available first real formal-math import slice after the source projection protocol. It turns the source prover lab's premise-index, term-scoring, context-budget, and strategy-selection patterns into a runnable Microcosm component.\n\nIt is still deliberately below proof authority. It validates:\n- Lean/Std premise metadata;\n- query term scoring across public premise ids, namespaces, declaration names, statement excerpts, and retrieval terms;\n- split eligibility;\n- context recipe budgets;\n- public strategy ids;\n- redacted result records;\n- negative cases.\n\nIt does not run Lean or Lake, use external model services, expose proof bodies, expose oracle-needed premise ids, tune on test split truth, claim formal-result correctness, or include launch operations.\n\n###### Purpose\n\nBefore a model can attempt a formal proof, it has to find the right lemmas. A Lean library holds thousands of theorems and definitions, and the useful ones for a given goal are a handful. Premise selection is the step that narrows that library down to candidates worth putting in front of a prover. This component is the smallest honest version of that step: it takes a query, scores every public premise against it, and returns a ranked shortlist.\n\nThe single question it answers is narrow and checkable: given a copied catalogue of public Lean/Std premise metadata, does a transparent term-scoring retrieval return the premises a query should find, without ever touching a proof? Both halves matter. The retrieval has to actually work, so each fixture query carries the premise ids it is expected to surface and the run fails if the shortlist misses them. And the boundary has to hold, so the same run refuses any input that smuggles in a proof body, an oracle answer, or test-split truth.\n\nWhat is unusual is the restraint. The retrieval index is not a learned embedding model and the scoring is not a benchmark claims. It is plain term overlap over fields that a reader can inspect: premise ids, namespaces, declaration names, statement excerpts, and retrieval terms. The interesting claim is therefore not \"this retrieves well\" but \"this retrieves over real, copied Lean metadata and can be audited end to end, and the design forbids the shortcuts that would make a premise-selection result look better than it is\".\n\n###### Shape\n\nSource refs\n\nJSON source record `paper_module.formal_math_premise_retrieval` Runtime component `formal_math_premise_retrieval.py` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record paper_module.formal_math_premise_retrieval\"] --> instance[\"Generated paper-module instance 15 relationship edges\"] instance --> component[\"Runtime component formal_math_premise_retrieval.py\"] subgraph Inputs[\"Public inputs\"] index[\"Premise index copied Lean/Std metadata\"] queries[\"Retrieval queries terms, split, strategy, top_k\"] recipes[\"Context recipes byte budgets\"] negatives[\"Negative-case inputs proof body, oracle ids, test-split tuning, budget, strategy\"] end component --> index component --> queries component --> recipes component --> negatives index --> split[\"Split gate skip premises not in allowed_for_split\"] queries --> split split --> score[\"Term-overlap scoring shared tokens + strategy bonus\"] score --> shortlist[\"Ranked top_k shortlist\"] shortlist --> recall[\"Recall check vs expected premise ids\"] negatives --> reject[\"Required rejections five leakage/overclaim guards\"] recipes --> reject recall --> result records[\"metadata-only result records board, validation, sign-off\"] reject --> result records result records --> ceiling[\"Scope limit metadata coherence, no Lean/Lake, no proof\"]\n```\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[25:paper_module.formal_math_premise_retrieval]` has `source_authority: json_capsule`, three `subjects`, one resolved `code_loci[0].path`, `depends_on` naming `paper_module.formal_math_lean_proof_witness`, and generated projection statuses for Markdown, Mermaid, and Atlas.\n- Generated instance: `paper_modules/formal_math_premise_retrieval.json::paper_module_payload` repeats the bundle `authority_ceiling`, reports Mermaid status `available_from_capsule_edges`, and derives 15 `relationships.edges` with `relationships.unpopulated_selective_relations: []`.\n- Component atlas: `core/organ_atlas.json::organs[9:formal_math_premise_retrieval]` classifies the component in `family: formal_math_and_proof`, cites the runtime locus, and restates that retrieval metadata coherence is not Lean/Lake, provider, theorem-correctness, benchmark, or launch-scope decision.\n- Mechanism rows: `core/mechanism_sources.json::mechanisms[27:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice]` and `core/mechanism_sources.json::mechanisms[37:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection]` point at `src/microcosm_core/organs/formal_math_premise_retrieval.py` and name first-wave, sign-off, and runtime-shell result record refs.\n- Runtime and tests: `src/microcosm_core/organs/formal_math_premise_retrieval.py` exposes `run`, `run_retrieval_bundle`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`; `tests/test_formal_math_premise_retrieval.py` checks 11 premises, 4 queries, 44 considered candidates, five negative cases, metadata-only result records, and compact runtime-shell cards.\n- Result records: `receipts/first_wave/formal_math_premise_retrieval/formal_math_premise_retrieval_result.json` records `status: pass`, 11 premises, 4 queries, 44 considered candidates, five observed negative cases, `missing_negative_cases: []`, and a secret-exclusion scan with `blocking_hit_count: 0`; the exported runtime result record at `receipts/runtime_shell/demo_project/organs/formal_math_premise_retrieval/exported_premise_retrieval_bundle_validation_result.json` records `status: pass`, the same premise/query/candidate counts, no negative cases, and `secret_exclusion_scan.scanned_path_count: 11`.\n- Standard ceiling: `standards/std_microcosm_formal_math_premise_retrieval.json::authority_ceiling` has `status: pass` while keeping `formal_proof_authority`, `lean_lake_authority`, `provider_authority`, and `release_authority` false.\n\n###### Runtime Surfaces\n- Component runner: `python -m microcosm_core.organs.formal_math_premise_retrieval run --input fixtures/first_wave/formal_math_premise_retrieval/input --out receipts/first_wave/formal_math_premise_retrieval`\n- Exported bundle runner: `python -m microcosm_core.organs.formal_math_premise_retrieval run-retrieval-bundle --input examples/formal_math_premise_retrieval/exported_premise_retrieval_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_premise_retrieval`\n- CLI route: `microcosm formal-math-premise-retrieval run-retrieval-bundle`\n- Standard: `standards/std_microcosm_formal_math_premise_retrieval.json`\n- Fixture manifest: `core/fixture_manifests/formal_math_premise_retrieval.fixture_manifest.json`\n\n###### Public Claim\n\nMicrocosm can show a real formal-math retrieval mechanism in miniature:\n- a source-available Lean/Std premise index;\n- public field-haystack term-scored queries;\n- split-aware eligibility;\n- context recipe ceilings;\n- strategy gates;\n- redacted validation result records.\n\n###### How retrieval scoring works\n\nEach premise row contributes five inspectable fields to the haystack: its premise id, namespace, declaration name, statement excerpt, and a list of retrieval terms. A query carries its own terms, a data split, an optional strategy id, a context recipe, and the public premise ids it is expected to return.\n\nScoring is term overlap, computed per query. Both the query and each premise are tokenised into lowercase word counts. A premise is only considered if the query's split appears in that premise's `allowed_for_split` list, which is how test-split leakage is kept out at the structural level rather than by trust. For each eligible premise the score is the summed minimum count of every shared token across the five fields, so a term that appears in both the query and the premise contributes as many points as the smaller of the two counts. A premise that also carries the query's strategy id as a tag gets a single extra point. The ranked list is sorted by score descending, ties broken by premise id, and the top of that list up to the query's `top_k` is taken as the retrieval.\n\nThe retrieval is then graded against itself. Each query declares the public premise ids it should surface, and the component computes recall as the fraction of those expected ids that actually landed in the shortlist. A query that declares expectations but misses any of them blocks the run. In the first-wave fixture this is eleven premises and four queries, scoring forty-four considered candidates in total, and every query is expected to reach full recall.\n\nThe failure mode this guards against is a premise-selection result that looks good because it cheated. The five negative-case inputs each encode one such shortcut: a premise index that ships a proof body, a query that lists the oracle premise ids it is \"meant\" to find, a query that tunes on test-split truth, a context recipe that blows past the byte budget, and a query naming a strategy id outside the allowed set. The run is required to observe all five rejections; if any expected rejection is missing, the whole fixture is blocked rather than passed. Recall over copied real metadata is the positive signal; the refusals are what keep that signal honest.\n\n###### Prior Art Grounding\n\nThis component is grounded in premise-selection and retrieval-augmented theorem proving work. [LeanDojo](https://arxiv.org/abs/2306.15626) is the closest modern anchor because it couples Lean interaction with retrieval-augmented premise selection. Earlier theorem-proving environments such as [HOList](https://arxiv.org/abs/1904.03241) and [GamePad](https://arxiv.org/abs/1806.00608) also motivate extracting proof-state or premise metadata for learning-assisted theorem proving.\n\nMicrocosm borrows the retrieval accounting pattern: premise ids, namespaces, statement excerpts, retrieval terms, split eligibility, context budgets, and strategy gates must be inspectable before premise-retrieval claims are admitted. It does not run Lean/Lake or expose proof bodies.\n\n###### Negative Cases\n- `premise_index_proof_body_forbidden`\n- `query_oracle_ids_forbidden`\n- `test_split_tuning_attempt`\n- `context_recipe_budget_overflow`\n- `unknown_strategy_id`\n\n###### Reader Evidence Routing\n- Start with the JSON Bundle Binding to identify the source record, generated instance, proof boundary, and scope limit.\n- Use Structured Lattice Bindings for navigation; the generated JSON row is the authority for relationship counts and dependency state.\n- Use Runtime Surfaces and Result record Expectations when checking metadata coherence, redaction, leakage checks, and source-available bundle behavior.\n- Use Negative Cases, Scope limit, and Scope limit together before admitting any formal-math public claim.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_math_premise_retrieval.py -q --basetemp=/tmp/microcosm_formal_math_premise_retrieval_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThe component proves only that public retrieval metadata is internally coherent and leakage-checked. The deferred `formal_math_lean_proof_witness` boundary remains unchanged.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that public premise metadata, retrieval terms, split eligibility, strategy gates, and redacted result records are coherent and leakage-checked. It does not run Lean or Lake, prove formal-result correctness, expose proof bodies, authorize oracle-needed premise ids, tune on test split truth, use external model services, approve public sharing, or expand the deferred Lean proof-witness boundary.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12008,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Before a model can attempt a formal proof, it has to find the right lemmas. A Lean library holds thousands of theorems and definitions, and the useful ones for a given goal are a handful. Premise selection is the step that narrows that library down to candidates worth putting in front of a prover. This component is the smallest honest version of that step: it takes a query, scores every public premise against it, and returns a ranked shortlist. The single question it answers is narrow and checkable: given a copied catalogue of public Lean/Std premise metadata, does a transparent term-scoring retrieval return the premises a query should find, without ever touching a proof? Both halves matter\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Evidence/accounting: Bundle authority: core/papermodulecapsules.json::papermodules[25:papermodule.formalmathpremise_retrieval] has sourceauthority: jsoncapsule, three subjects, one resolved codeloci[0].path, dependson naming papermodule.formalmathleanproof_witness, and generated projection statuses for Markdown, Mermaid, and Atlas. Generated instance: papermodules/formalmathpremiseretrieval.json::papermodulepayload repeats the bundle scope_limit, reports Mermaid status availablefromcapsule_edges, and derives 15 relationships.edges with relationships.unpopulatedselectiverelations: []. Component atlas: core/organatlas.json::components[9:formalmathpremiseretrieval] classifies the component in\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-surfaces",
       "title": "Runtime Surfaces",
       "level": 2,
       "excerpt": "Component runner: python -m microcosmcore.components.formalmathpremiseretrieval run --input fixtures/firstwave/formalmathpremiseretrieval/input --out result records/firstwave/formalmathpremiseretrieval Exported bundle runner: python -m microcosmcore.components.formalmathpremiseretrieval run-retrieval-bundle --input examples/formalmathpremiseretrieval/exportedpremiseretrievalbundle --out result records/runtimeshell/demoproject/components/formalmathpremise_retrieval CLI route: microcosm formal-math-premise-retrieval run-retrieval-bundle Standard: standards/stdmicrocosmformalmathpremise_retrieval.json Fixture manifest: core/fixturemanifests/formalmathpremiseretrieval.fixture_manifest.json",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-claim",
       "title": "Public Claim",
       "level": 2,
       "excerpt": "Microcosm can show a real formal-math retrieval mechanism in miniature: a source-available Lean/Std premise index; public field-haystack term-scored queries; split-aware eligibility; context recipe ceilings; strategy gates; redacted validation result records.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "how-retrieval-scoring-works",
       "title": "How retrieval scoring works",
       "level": 2,
       "excerpt": "Each premise row contributes five inspectable fields to the haystack: its premise id, namespace, declaration name, statement excerpt, and a list of retrieval terms. A query carries its own terms, a data split, an optional strategy id, a context recipe, and the public premise ids it is expected to return. Scoring is term overlap, computed per query. Both the query and each premise are tokenised into lowercase word counts. A premise is only considered if the query's split appears in that premise's allowedforsplit list, which is how test-split leakage is kept out at the structural level rather than by trust. For each eligible premise the score is the summed minimum count of every shared token\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in premise-selection and retrieval-augmented theorem proving work. LeanDojo is the closest modern anchor because it couples Lean interaction with retrieval-augmented premise selection. Earlier theorem-proving environments such as HOList and GamePad also motivate extracting proof-state or premise metadata for learning-assisted theorem proving. Microcosm borrows the retrieval accounting pattern: premise ids, namespaces, statement excerpts, retrieval terms, split eligibility, context budgets, and strategy gates must be inspectable before premise-retrieval claims are admitted. It does not run Lean/Lake or expose proof bodies.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "premiseindexproofbodyforbidden queryoracleids_forbidden testsplittuning_attempt contextrecipebudget_overflow unknownstrategyid",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The component proves only that public retrieval metadata is internally coherent and leakage-checked. The deferred formalmathleanproofwitness boundary remains unchanged.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that public premise metadata, retrieval terms, split eligibility, strategy gates, and redacted result records are coherent and leakage-checked. It does not run Lean or Lake, prove formal-result correctness, expose proof bodies, authorize oracle-needed premise ids, tune on test split truth, use external model services, approve public sharing, or expand the deferred Lean proof-witness boundary.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with the JSON Bundle Binding to identify the source record, generated instance, proof boundary, and scope limit. Use Structured Lattice Bindings for navigation; the generated JSON row is the authority for relationship counts and dependency state. Use Runtime Surfaces and Result record Expectations when checking metadata coherence, redaction, leakage checks, and source-available bundle behavior. Use Negative Cases, Scope limit, and Scope limit together before admitting any formal-math public claim.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.formal_math_premise_retrieval.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON source record paper_module.formal_math_premise_retrieval\"] --> instance[\"Generated paper-module instance 15 relationship edges\"] instance --> component[\"Runtime component formal_math_premise_retrieval.py\"] subgraph Inputs[\"Public inputs\"] index[\"Premise index copied Lean/Std metadata\"] queries[\"Retrieval queries terms, split, strategy, top_k\"] recipes[\"Context recipes byte budgets\"] negatives[\"Negative-case inputs proof body, oracle ids, test-split tuning, budget, strategy\"] end component --> index component --> queries component --> recipes component --> negatives index --> split[\"Split gate skip premises not in allowed_for_split\"] queries --> split split --> score[\"Term-overlap scoring shared tokens + strategy bonus\"] score --> shortlist[\"Ranked top_k shortlist\"] shortlist --> recall[\"Recall check vs expected premise ids\"] negatives --> reject[\"Required rejections five leakage/overclaim guards\"] recipes --> reject recall --> result records[\"metadata-only result records board, validation, sign-off\"] reject --> result records result records --> ceiling[\"Scope limit metadata coherence, no Lean/Lake, no proof\"]",
       "source_hash": "sha256:2a537a867822aa6a3b3621163a9ea5be58875acc136a92764c6a5fc6bc4fb1fe",
       "html_url": "docs/paper-modules.html#paper-module-formal-math-premise-retrieval-diagram-1",
       "html_anchor": "paper-module-formal-math-premise-retrieval-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_premise_retrieval.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "LeanDojo",
       "url": "https://arxiv.org/abs/2306.15626",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "HOList",
       "url": "https://arxiv.org/abs/1904.03241",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "GamePad",
       "url": "https://arxiv.org/abs/1806.00608",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.formal_math_lean_proof_witness",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Lean Proof Witness",
         "url": "paper-modules.html#paper-module-formal-math-lean-proof-witness"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 3,
       "links": [
        {
         "id": "formal_math_premise_retrieval",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Formal Math Premise Retrieval",
         "url": "components.html#component-formal_math_premise_retrieval"
        },
        {
         "id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public premise retrieval slice",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice"
        },
        {
         "id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public premise retrieval projection",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 6,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_premise_retrieval.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 13331
    },
    {
     "id": "paper_module.lean_std_premise_index",
     "title": "Lean/Std Premise Index",
     "relative_href": "docs/paper-modules.html#paper-module-lean-std-premise-index",
     "read_href": "docs/paper-modules.html#paper-module-lean-std-premise-index",
     "context_href": "docs/rules-and-ideas.html#paper-module-lean-std-premise-index",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The Lean/Std premise index validates a copied public Lean/Std descriptor catalog plus Ring2 premise-retrieval source bodies without claiming proof, Mathlib, Lean/Lake, provider, launch, or theorem-correctness authority.",
     "summary": "Lean/Std Premise Index is the source-open formal-math catalog component for Microcosm. It imports a premise descriptor index, validates eleven Lean/Std premise rows across Nat, Bool, List, and Iff namespaces, checks six copied body modules through a source-module manifest, observes Mathlib/proof-body/oracle/test-split/source-ref negative cases, and writes metadata-only result records that make premise system inspectable without turning metadata into proof authority.",
     "authority_ceiling": "Copied public Lean/Std descriptor index and Ring2 premise-retrieval source result records only; no Lean/Lake execution, Mathlib authority, proof-body import, oracle-needed premise authority, external model access, benchmark claim, launch-scope decision, publishing-scope decision, source-file changes, or theorem-correctness claim.",
     "abstract": "The Lean/Std premise index validates a copied public Lean/Std descriptor catalog plus Ring2 premise-retrieval source bodies without claiming proof, Mathlib, Lean/Lake, provider, launch, or theorem-correctness authority.",
     "teleology": {
      "section_id": "",
      "text": "The Lean/Std premise index validates a copied public Lean/Std descriptor catalog plus Ring2 premise-retrieval source bodies without claiming proof, Mathlib, Lean/Lake, provider, launch, or theorem-correctness authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`lean_std_premise_index` is the closed public premise-index lane for the formal-math slice. It validates premise metadata and selected Ring2 premise-retrieval source result record bodies that a cold reader can inspect without importing Mathlib, exposing proof bodies, or relying on private source run state.\n\n###### Purpose\n\nA premise index is the catalogue a theorem-proving system reads before it tries to prove anything: a list of the named lemmas and definitions it is allowed to cite, with enough metadata to retrieve the relevant ones. This component answers a narrower question. Given that such an index already exists inside a private Ring2 benchmark run, can a cold reader inspect its public shape and be sure that what they are reading is a faithful copy of the real thing, and not a separate hand-written stand-in?\n\nThe answer rests on one design choice that is worth noticing. The validator does not just describe eleven premise rows; it opens the declared source artifact from the Ring2 premise-retrieval run, recomputes its SHA-256, and checks every public row against the matching source row by `premise_id`. The only permitted difference is a path rewrite: a raw Lean toolchain path becomes a public `lean-toolchain://.../Init/...` reference, so the reader sees where a lemma lives in the standard library without seeing a private filesystem. If the public catalogue ever drifts from the source it claims to copy, the digest or the row-signature comparison fails and the result record is blocked.\n\nThe interesting tension is the line between a useful index and a leaked answer key. A premise index for a benchmark is one edit away from telling a solver exactly which lemmas it needs. So the same pass that admits names, namespaces, retrieval terms, and train/dev/test eligibility rejects the things that would turn the catalogue into proof authority: Mathlib references, proof bodies, the oracle-needed premise ids that name the answer, and any flag that authorises tuning on the test split. The catalogue stays inspectable precisely because those are kept out.\n\n###### Shape\n\nThis module is a cold-reader map from a JSON bundle and copied public Lean/Std premise artifacts into metadata-only validation result records. The readable path is bundle -> generated instance/status -> runtime validator -> fixtures and exported source bundle -> tests and result records -> scope limit; none of those projections expands the closed-index boundary.\n\nSource refs\n\nsource basis: source record `core/paper_module_capsules.json` `paper_module.lean_std_premise_index` generated instance from source record `paper_modules/lean_std_premise_index.json` run / run_index_bundle / scope_limit `src/microcosm_core/organs/lean_std_premise_index.py` closed Lean/Std premise-index contract `standards/std_microcosm_lean_std_premise_index.json` projection_protocol, premise_index, index_policy, negative cases `fixtures/first_wave/lean_std_premise_index/input` source_module_manifest: 6 copied body modules `examples/lean_std_premise_index/exported_lean_std_premise_index_bundle` fixture, manifest, bundle, and runtime-shape checks `tests/test_lean_std_premise_index.py` Result records `receipts/first_wave/lean_std_premise_index` `receipts/runtime_shell/demo_project/organs/lean_std_premise_index` Diagram source\n\n```text\nflowchart TD bundle[\"core/paper_module_capsules.json paper_module.lean_std_premise_index source basis: source record\"] instance[\"paper_modules/lean_std_premise_index.json generated instance from source record Markdown stays reader projection\"] generated[\"Generated status Mermaid: available_from_capsule_edges Atlas: blocked_until_organ_atlas_owner_lane_binds_edges\"] runtime[\"src/microcosm_core/components/lean_std_premise_index.py run / run_index_bundle / scope_limit\"] standard[\"standards/std_microcosm_lean_std_premise_index.json closed Lean/Std premise-index contract\"] fixtures[\"fixtures/first_wave/lean_std_premise_index/input projection_protocol, premise_index, index_policy, negative cases\"] bundle[\"examples/lean_std_premise_index/exported_lean_std_premise_index_bundle source_module_manifest: 6 copied body modules\"] tests[\"tests/test_lean_std_premise_index.py fixture, manifest, bundle, and runtime-shape checks\"] result records[\"result records/first_wave/lean_std_premise_index result records/runtime_shell/demo_project/components/lean_std_premise_index\"] ceiling[\"Scope limit no Lean/Lake, Mathlib, proof bodies, providers, benchmark authority, source-file changes, public sharing, or launch-scope decision\"] bundle --> instance instance --> generated standard --> runtime fixtures --> runtime bundle --> runtime runtime --> tests tests --> result records generated --> ceiling result records --> ceiling\n```\n\n###### Technical Mechanism\n\nThe mechanism is a two-entry validator over copied public artifacts, not a proof engine. `run` reads the first-wave fixture inputs, opens the declared source premise-index source artifact, verifies the declared `source_sha256`, normalizes Lean toolchain paths into `lean-toolchain://.../Init/...` public refs, compares every public row against the source row signature, and then checks the protocol, policy, copied-material contract, namespace coverage, split coverage, negative cases, secret exclusion scan, and scope limit before writing metadata-only result, board, validation, and sign-off result records. `run_index_bundle` applies the same public boundary to the exported bundle and requires the source-module manifest to verify six copied body-material files by source ref, target ref, digest, line count, byte count, and source-to-target equivalence while keeping body text out of result records.\n\nThe proof consumer is therefore concrete and local: `tests/test_lean_std_premise_index.py` asserts that the validator observes all five negative cases, imports the real Ring2 premise-index source artifact, rejects digest, row-count, row-signature, source-ref, source-module digest, and rehash-body-swap mutations, and validates the runtime-shell bundle shape. The positive fixture carries 11 premise rows across `Nat`, `Bool`, `List`, and `Iff`; the source-open body floor carries one normalized Lean/Std premise index plus five Ring2 source result record or pattern bodies. This is evidence of a bounded public premise catalog and copied-source manifest, not evidence of Lean formal-result correctness.\n\nThe governing lattice is source-backed through the bundle-generated instance: `paper_module.lean_std_premise_index` explains the `lean_std_premise_index` component and the two `mechanism.lean_std_premise_index.*` mechanisms, is governed by `concept.formal_math_and_proof_witness_bundle`, cites `P-1`, `P-2`, `P-3`, `P-6`, and `P-8`, abides by `AX-1`, `AX-2`, `AX-5`, and `AX-7`, and depends only on `paper_module.formal_math_premise_retrieval`.\n\n###### Inputs\n- `projection_protocol.json` records source pattern ids, source source refs, public replacement refs, projection result records, omitted material, and copy policy.\n- `premise_index.json` carries public metadata rows: premise id, declaration name, namespace, `Init/` source ref, retrieval terms, and split eligibility.\n- `index_policy.json` keeps the closed-index scope limit explicit.\n- `source_module_manifest.json` records six source-open body imports: the normalized Lean/Std premise index plus five exact bodies from the formal-math premise-retrieval pipeline (source result records and graph-pattern bodies) under `source_modules/`.\n\n###### Prior Art Grounding\n\nThis component is grounded in formal-library indexing and premise-selection work. The [Lean mathematical library](https://arxiv.org/abs/1910.09336) anchors the library-as-corpus side, while [LeanDojo](https://arxiv.org/abs/2306.15626) and [HOList](https://arxiv.org/abs/1904.03241) anchor the need for premise metadata, retrieval splits, and theorem-proving environments that can be inspected by learning systems.\n\nMicrocosm borrows the closed-index discipline: premise ids, declaration names, namespaces, source refs, retrieval terms, split eligibility, and source-module digests are public metadata, while proof bodies and oracle-needed ids remain outside the public boundary. It does not import Mathlib or prove theorems.\n\n###### Negative Cases\n\nThe fixture rejects:\n- Mathlib premise refs;\n- proof-body leakage;\n- oracle-needed premise ids;\n- test-split tuning authority;\n- namespace rows without `Init/` source refs.\n\nThese are stable negative cases because the index is intended to be useful without becoming proof authority.\n\n###### Result records\n\nThe validator emits:\n- `lean_std_premise_index_result.json`;\n- `lean_std_premise_index_board.json`;\n- `lean_std_premise_index_validation_receipt.json`;\n- an sign-off result record under result records/sign-off/first_wave/.\n\nRuntime-shell execution emits `exported_lean_std_premise_index_bundle_validation_result.json` after checking the source-module manifest, target file digests, line counts, byte counts, and secret-exclusion boundary.\n\n###### Reader Evidence Routing\n- Start with the JSON Bundle Binding to identify the source row, generated instance, and scope limit.\n- Use Structured Lattice Bindings only as navigation evidence; the resolved dependency edge points to the premise-retrieval module and does not expand the closed-index proof boundary.\n- Use Inputs and Result records when checking whether public metadata, copied body manifests, and runtime-shell validation stayed body-safe.\n- Use Negative Cases and Scope limit together when deciding whether a proposed public claim exceeds the closed-index boundary.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_lean_std_premise_index.py -q --basetemp=/tmp/microcosm_lean_std_premise_index_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis lane is body only. It does not:\n- run Lean or Lake;\n- import Mathlib;\n- expose proof bodies;\n- expose oracle-needed premise ids;\n- tune on test split truth;\n- use external model services;\n- certify theorem validity;\n- authorize public launch;\n- claim secret export.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that public Lean/Std premise metadata, source refs, retrieval terms, split eligibility, and copied source-module digests can be indexed without exposing proof bodies or oracle-needed ids. It does not run Lean or Lake, import Mathlib, prove formal-result correctness, tune on test split truth, use external model services, include launch operations, or certify secret-export safety.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 10598,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A premise index is the catalogue a theorem-proving system reads before it tries to prove anything: a list of the named lemmas and definitions it is allowed to cite, with enough metadata to retrieve the relevant ones. This component answers a narrower question. Given that such an index already exists inside a private Ring2 benchmark run, can a cold reader inspect its public shape and be sure that what they are reading is a faithful copy of the real thing, and not a separate hand-written stand-in? The answer rests on one design choice that is worth noticing. The validator does not just describe eleven premise rows; it opens the declared source artifact from the Ring2 premise-retrieval run, re\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This module is a cold-reader map from a JSON bundle and copied public Lean/Std premise artifacts into metadata-only validation result records. The readable path is bundle -> generated instance/status -> runtime validator -> fixtures and exported source bundle -> tests and result records -> scope limit; none of those projections expands the closed-index boundary.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The mechanism is a two-entry validator over copied public artifacts, not a proof engine. run reads the first-wave fixture inputs, opens the declared source premise-index source artifact, verifies the declared source_sha256, normalizes Lean toolchain paths into lean-toolchain://.../Init/... public refs, compares every public row against the source row signature, and then checks the protocol, policy, copied-material contract, namespace coverage, split coverage, negative cases, secret exclusion scan, and scope limit before writing metadata-only result, board, validation, and sign-off result records. runindexbundle applies the same public boundary to the exported bundle and requires the source-\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-route",
       "title": "Runtime Route",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "inputs",
       "title": "Inputs",
       "level": 2,
       "excerpt": "projection_protocol.json records source pattern ids, source source refs, public replacement refs, projection result records, omitted material, and copy policy. premise_index.json carries public metadata rows: premise id, declaration name, namespace, Init/ source ref, retrieval terms, and split eligibility. index_policy.json keeps the closed-index scope limit explicit. sourcemodulemanifest.json records six source-open body imports: the normalized Lean/Std premise index plus five exact bodies from the formal-math premise-retrieval pipeline (source result records and graph-pattern bodies) under source_modules/.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in formal-library indexing and premise-selection work. The Lean mathematical library anchors the library-as-corpus side, while LeanDojo and HOList anchor the need for premise metadata, retrieval splits, and theorem-proving environments that can be inspected by learning systems. Microcosm borrows the closed-index discipline: premise ids, declaration names, namespaces, source refs, retrieval terms, split eligibility, and source-module digests are public metadata, while proof bodies and oracle-needed ids remain outside the public boundary. It does not import Mathlib or prove theorems.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The fixture rejects: Mathlib premise refs; proof-body leakage; oracle-needed premise ids; test-split tuning authority; namespace rows without Init/ source refs. These are stable negative cases because the index is intended to be useful without becoming proof authority.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This lane is body only. It does not: run Lean or Lake; import Mathlib; expose proof bodies; expose oracle-needed premise ids; tune on test split truth; use external model services; certify theorem validity; authorize public launch; claim secret export.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that public Lean/Std premise metadata, source refs, retrieval terms, split eligibility, and copied source-module digests can be indexed without exposing proof bodies or oracle-needed ids. It does not run Lean or Lake, import Mathlib, prove formal-result correctness, tune on test split truth, use external model services, include launch operations, or certify secret-export safety.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "receipts",
       "title": "Result records",
       "level": 2,
       "excerpt": "The validator emits: leanstdpremiseindexresult.json; leanstdpremiseindexboard.json; leanstdpremiseindexvalidation_receipt.json; an sign-off result record under result records/sign-off/first_wave/. Runtime-shell execution emits exportedleanstdpremiseindexbundlevalidation_result.json after checking the source-module manifest, target file digests, line counts, byte counts, and secret-exclusion boundary.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with the JSON Bundle Binding to identify the source row, generated instance, and scope limit. Use Structured Lattice Bindings only as navigation evidence; the resolved dependency edge points to the premise-retrieval module and does not expand the closed-index proof boundary. Use Inputs and Result records when checking whether public metadata, copied body manifests, and runtime-shell validation stayed body-safe. Use Negative Cases and Scope limit together when deciding whether a proposed public claim exceeds the closed-index boundary.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.lean_std_premise_index.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"core/paper_module_capsules.json paper_module.lean_std_premise_index source basis: source record\"] instance[\"paper_modules/lean_std_premise_index.json generated instance from source record Markdown stays reader projection\"] generated[\"Generated status Mermaid: available_from_capsule_edges Atlas: blocked_until_organ_atlas_owner_lane_binds_edges\"] runtime[\"src/microcosm_core/components/lean_std_premise_index.py run / run_index_bundle / scope_limit\"] standard[\"standards/std_microcosm_lean_std_premise_index.json closed Lean/Std premise-index contract\"] fixtures[\"fixtures/first_wave/lean_std_premise_index/input projection_protocol, premise_index, index_policy, negative cases\"] bundle[\"examples/lean_std_premise_index/exported_lean_std_premise_index_bundle source_module_manifest: 6 copied body modules\"] tests[\"tests/test_lean_std_premise_index.py fixture, manifest, bundle, and runtime-shape checks\"] result records[\"result records/first_wave/lean_std_premise_index result records/runtime_shell/demo_project/components/lean_std_premise_index\"] ceiling[\"Scope limit no Lean/Lake, Mathlib, proof bodies, providers, benchmark authority, source-file changes, public sharing, or launch-scope decision\"] bundle --> instance instance --> generated standard --> runtime fixtures --> runtime bundle --> runtime runtime --> tests tests --> result records generated --> ceiling result records --> ceiling",
       "source_hash": "sha256:9887573ac76c00ecdff9e50436107011224c58598bdb1ae926c0e8a6c85c6da8",
       "html_url": "docs/paper-modules.html#paper-module-lean-std-premise-index-diagram-1",
       "html_anchor": "paper-module-lean-std-premise-index-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/lean_std_premise_index.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Lean mathematical library",
       "url": "https://arxiv.org/abs/1910.09336",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "LeanDojo",
       "url": "https://arxiv.org/abs/2306.15626",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "HOList",
       "url": "https://arxiv.org/abs/1904.03241",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.formal_math_premise_retrieval",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Premise Retrieval",
         "url": "paper-modules.html#paper-module-formal-math-premise-retrieval"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 3,
       "links": [
        {
         "id": "lean_std_premise_index",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Lean Std Premise Index",
         "url": "components.html#component-lean_std_premise_index"
        },
        {
         "id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public lean std premise catalog",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog"
        },
        {
         "id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public lean std premise index",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 6,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/lean_std_premise_index.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11864
    },
    {
     "id": "paper_module.world_model_projection_drift_control_room",
     "title": "World-Model Projection Drift Control Room",
     "relative_href": "docs/paper-modules.html#paper-module-world-model-projection-drift-control-room",
     "read_href": "docs/paper-modules.html#paper-module-world-model-projection-drift-control-room",
     "context_href": "docs/rules-and-ideas.html#paper-module-world-model-projection-drift-control-room",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The world-model projection drift control room validates public metadata-only projection-drift rows and copied source-module bodies without treating projections as source authority or repair authority.",
     "summary": "World-Model Projection Drift Control Room is the public projection-drift boundary for Microcosm. It validates eight drift rows, source refs, repair routes, validation refs, target refs, source-module digest evidence, copied world-model and view-quality source bodies, secret-exclusion policy, and eight negative cases while keeping private runtime bodies, model-output data, live repair, source-file changes, automatic doctrine changes, launch, public sharing, and source-authority claims out of scope.",
     "authority_ceiling": "Public metadata-only runtime result record and copied source-module evidence only; no private runtime body inspection, source authority, source-file changes, live route repair, automatic doctrine changes, model-output data export, launch-scope decision, publishing-scope decision, or whole-system correctness claim.",
     "abstract": "The world-model projection drift control room validates public metadata-only projection-drift rows and copied source-module bodies without treating projections as source authority or repair authority.",
     "teleology": {
      "section_id": "",
      "text": "The world-model projection drift control room validates public metadata-only projection-drift rows and copied source-module bodies without treating projections as source authority or repair authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Abstract\n\n`world_model_projection_drift_control_room` is Microcosm's public projection-drift control component. It turns projected world-model rows into an auditable runtime result record: each row must carry a source signal, source ref, target ref, repair route, validation ref, fact-authority mesh, and explicit scope boundary booleans before the projection can pass.\n\nThe mechanism is deliberately narrow. It validates that public, metadata-only projection rows remain tied to named source evidence and rejection policy; it does not claim that the projection is source authority, that a live route was repaired, that private runtime state was inspected, or that Microcosm is public sharing-authorized or launch-authorized.\n\n###### Purpose\n\nThis component exists to answer one question: when a public read model says something has drifted, can that claim still be traced back to a real source artifact, or has the read model quietly started to stand in for the source?\n\nThe design choice that makes this more than a shape check is that the supplied `drift_rows.json` is never trusted as input. The validator recomputes the drift rows from the public runtime result record, then treats the supplied file only as an expected snapshot whose role is recorded as `expected_snapshot_not_source_authority`. If the snapshot disagrees with the recomputed rows, that is flagged as staleness, not accepted as fact. Each recomputed row is then diffed against a real source-state artifact: a row from the extracted-pattern ledger, or a view-quality action-map lens whose own summary is re-derived from its action rows. A row that cannot be re-derived from source, or whose guard reference or derivation path has changed, moves the verdict to `blocked`.\n\nThe same boundary holds in the other direction. A drift row may name a repair route, but the route stays a label rather than an action: the validator rejects any row that authorises live repair, source-file changes, automatic doctrine changes, or launch. A projection here can describe what is wrong and where to go next without ever being allowed to act on it or to speak for the source it describes.\n\n###### Telos\n\nProjection drift is the failure mode where a useful read model begins to look like truth. A dashboard row, generated structured source record, route card, or public runtime result record can be correct enough for navigation while still being downstream of a source artifact that owns the actual authority.\n\nThis component makes that boundary executable. It accepts public drift rows only when they retain:\n- a real source signal and source ref\n- a target ref that names where the projection appears\n- a repair-route label that remains a route, not a live mutation\n- a validation ref that can witness the row\n- a fact-authority record with authority, appearance, derivation, guard, and residual-route fields\n- metadata-only result record policy and an explicit scope limit\n\n###### Technical Object\n\nThe runtime locus is `src/microcosm_core/organs/world_model_projection_drift_control_room.py`. The exported public example is `examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle`. The accepted first-wave fixture is `fixtures/first_wave/world_model_projection_drift_control_room/input`.\n\nThe component exposes two public validation routes:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.world_model_projection_drift_control_room \\\n  run-drift-control-bundle \\\n  --input examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle \\\n  --out /tmp/microcosm_world_model_projection_drift_bundle\n```\n\n###### Projection-Drift Mechanism\n\nThe validator recomputes the public projection rows from runtime result records and source artifacts, then compares them with the supplied fixture snapshot. A row passes only when the recomputed projection, supplied snapshot, source-ref evidence, source-state diff, source-module manifest check, copied-body geometry probe, runtime result record witness, and non-public-state exclusion scan all stay inside the public boundary.\n\nThe core result payload records:\n- `drift_summary.row_count: 8`\n- `source_ref_count: 8`\n- `target_ref_count: 8`\n- `repair_route_count: 8`\n- `validation_ref_count: 8`\n- `fact_authority_row_count: 8`\n- `guarded_projection_treatment_count: 8`\n- `unguarded_duplicate_count: 0`\n- `runtime_receipt_witnessed_row_count: 8`\n- `source_authority_claim_count: 0`\n- `live_repair_authorized_count: 0`\n- `source_mutation_authorized_count: 0`\n- `automatic_doctrine_promotion_count: 0`\n\nThe source-state result record evidence is intentionally small and inspectable. The focused test suite expects exactly two source-state evidence classes: `extracted_pattern_ledger_row_diff` and `view_quality_action_map_summary_diff`.\n\n###### Runtime Result record Evidence\n\nThe public result record floor is metadata-only. The first-wave result records live at:\n- `receipts/first_wave/world_model_projection_drift_control_room/world_model_projection_drift_control_room_result.json`\n- `receipts/first_wave/world_model_projection_drift_control_room/world_model_projection_drift_control_room_validation_receipt.json`\n- result records/sign-off/first_wave/world_model_projection_drift_control_room_fixture_acceptance.json\n\nThe exported-bundle result record lives at:\n- `receipts/runtime_shell/demo_project/organs/world_model_projection_drift_control_room/exported_projection_drift_control_bundle_validation_result.json`\n\nThe exported-bundle result record records `body_import_status: real_runtime_receipt_landed`, `body_material_status: copied_non_secret_macro_body_landed`, `body_copied_material_count: 4`, `body_in_receipt: false`, and `release_authorized: false`. Its scope limit also sets `source_authority_claim`, `source_mutation_authorized`, `live_route_repair_authorized`, `automatic_doctrine_promotion_authorized`, `provider_payload_exported`, `publication_authorized`, and `release_authorized` to false.\n\n###### Source-Available Body Floor\n\nThe exported bundle includes copied source bodies so a reader can inspect the implementation class without receiving private runtime state in the result record. The source-module manifest is:\n- `examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle/source_module_manifest.json`\n\nIt records four copied modules:\n- `world_model_drift_aggregate_source_body_import`\n- `world_model_drift_endpoint_source_body_import`\n- `view_quality_action_map_source_body_import`\n- `view_quality_action_map_test_body_import`\n\nEvery manifest row is `body_copied: true`, `body_in_receipt: false`, `classification: copied_non_secret_macro_body`, and `material_class: public_macro_tool_body`, with `sha256_match: true`. The largest bodies are the Station world-model reducer `system/server/world_model.py`, the `/api/drift` endpoint in `system/server/main.py`, the view-quality action-map builder `tools/meta/observability/view_quality_census.py`, and its focused source regression test `system/server/tests/test_view_quality_census.py`.\n\nThe body floor is therefore source-available by bundle, not by result record. Result records carry paths, hashes, counts, anchor checks, and verdicts; they do not duplicate private bodies, model-output data, browser UI state, account or browser material, source notes, recipient-send state, or account secret-equivalent payloads.\n\n###### Mutation and Rejection Contract\n\nThe validator is not a shape-only check. The focused test suite mutates the public inputs and requires the verdict to move to `blocked` when authority or freshness is broken:\n- missing source refs produce `DRIFT_SOURCE_REF_REQUIRED`\n- missing repair or validation refs produce `DRIFT_VALIDATION_REF_REQUIRED`\n- missing fact-authority mesh produces `DRIFT_FACT_AUTHORITY_REQUIRED`\n- projection rows claiming source authority produce `DRIFT_SOURCE_AUTHORITY_FORBIDDEN`\n- live repair authority produces `DRIFT_LIVE_REPAIR_FORBIDDEN`\n- non-public runtime export produces `DRIFT_PRIVATE_RUNTIME_EXPORT_FORBIDDEN`\n- model-output data export produces `DRIFT_PROVIDER_PAYLOAD_FORBIDDEN`\n- automatic doctrine changes produces `DRIFT_AUTOMATIC_DOCTRINE_PROMOTION_FORBIDDEN`\n- launch-scope decision produces `DRIFT_RELEASE_AUTHORITY_FORBIDDEN`\n\nAdditional source-drift tests cover unwitnessed runtime rows, stale supplied snapshots, mutated runtime result record refs, missing source-ledger rows, source ledger rows without `source_refs`, view-quality source-file changes, internally consistent fake source refs, and selected-row order drift. These cases matter because a projection can be internally coherent and still lose authority if its source evidence, guard result record, or derivation path changes.\n\n###### Shape\n\nSource refs\n\nPublic runtime result record `public_projection_drift_control_lens.json` expected snapshot, source-linked only `Supplied drift_rows.json` Diagram source\n\n```text\nflowchart TD Result record[\"Public runtime result record public_projection_drift_control_lens.json\"] Recompute[\"Recompute drift rows from selected_pattern_ids + result record rows\"] Snapshot[\"Supplied drift_rows.json expected snapshot, source-linked only\"] SourceDiff[\"Source-state diff extracted-pattern ledger + view-quality action map\"] Geometry[\"View-quality geometry grade via copied view_quality_census.py\"] Witness[\"Runtime result record witness every recomputed row appears in the result record\"] Reject[\"Rejection gates missing/fake refs, private export, source authority, live repair, source-file changes, doctrine changes, launch\"] Result records[\"metadata-only result records first-wave, sign-off, exported bundle\"] Ceiling[\"Scope limit projection evidence only\"] Result record --> Recompute Recompute --> Snapshot Recompute --> SourceDiff Recompute --> Witness Recompute --> Geometry Snapshot --> Reject SourceDiff --> Reject Witness --> Reject Geometry --> Reject Reject --> Result records Result records --> Ceiling\n```\n\n###### Reader Evidence Routing\n\nRead in this order:\n1. Bundle and generated instance: `core/paper_module_capsules.json::paper_modules[27:paper_module.world_model_projection_drift_control_room]` and `paper_modules/world_model_projection_drift_control_room.json`.\n2. Runtime source and focused tests: `src/microcosm_core/organs/world_model_projection_drift_control_room.py` and `tests/test_world_model_projection_drift_control_room.py`.\n3. First-wave fixture and result records: `fixtures/first_wave/world_model_projection_drift_control_room/input`, `receipts/first_wave/world_model_projection_drift_control_room/`, and result records/sign-off/first_wave/world_model_projection_drift_control_room_fixture_acceptance.json.\n4. Exported-bundle evidence: `examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle/` and `receipts/runtime_shell/demo_project/organs/world_model_projection_drift_control_room/exported_projection_drift_control_bundle_validation_result.json`.\n5. Generated projection evidence: Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges_after_atlas_binding`, and the one selective dependency residual preserved by the generated JSON instance.\n\n###### Prior Art Grounding\n\nThis control room watches a world-model projection for drift between what the model expects and what the runtime reports. It draws on the model-monitoring and [concept-drift](https://en.wikipedia.org/wiki/Concept_drift) literature, which treats a growing gap between predicted and observed behaviour as an operational signal. Microcosm borrows the drift-as-signal shape over metadata-only result records; the result is fixture-bound monitoring evidence, source-linked only, private runtime inspection, or whole-system correctness.\n\n###### Validation Result record Path\n\nFocused runtime validation:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_world_model_projection_drift_control_room.py -q\n```\n\nPaper-module corpus validation:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPaper-module index validation from the repo root:\n\n```text\n./repo-python tools/meta/factory/build_paper_module_index.py --check\n```\n\n###### Scope boundary\n\n###### Limitations\n\nThe component validates metadata-only drift result records and public-source refs. It supports inspection of recorded drift rows; live repair, source control, doctrine changes, model-output export, public sharing, and launch are outside the fixture. It also does not claim that every possible world-model drift source is covered. Its claim is narrower: the named public drift rows are guarded by source refs, target refs, validation refs, fact-authority mesh, copied source body evidence, metadata-only result records, and negative-case rejection.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Public metadata-only runtime result record and copied source-module evidence only; no private runtime body inspection, source authority, source-file changes, live route repair, automatic doctrine changes, model-output data export, launch-scope decision, publishing-scope decision, or whole-system correctness claim.\n\nSource and projection details\n\n###### Governing Lattice Bindings\n- source record: `core/paper_module_capsules.json::paper_modules[27:paper_module.world_model_projection_drift_control_room]`\n- Generated instance: `paper_modules/world_model_projection_drift_control_room.json`\n- Standard: `standards/std_microcosm_world_model_projection_drift_control_room.json`\n- Mechanism: `mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary`\n- Concept: `concept.import_projection_and_drift_control_bundle`\n- Principle refs: `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-8`, `P-9`, `P-12`, `P-15`\n- Axiom refs: `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, `AX-11`\n\nThe generated JSON instance reports `source_authority: json_capsule`, 19 resolved relationship edges, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges_after_atlas_binding`, and one honest selective residual for `paper_module.depends_on.paper_module` because the bundle does not yet name a sibling dependency module.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 14483,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "worldmodelprojectiondriftcontrol_room is Microcosm's public projection-drift control component. It turns projected world-model rows into an auditable runtime result record: each row must carry a source signal, source ref, target ref, repair route, validation ref, fact-authority mesh, and explicit scope boundary booleans before the projection can pass. The mechanism is deliberately narrow. It validates that public, metadata-only projection rows remain tied to named source evidence and rejection policy; it does not claim that the projection is source authority, that a live route was repaired, that private runtime state was inspected, or that Microcosm is public sharing-authorized or launch-au\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This component exists to answer one question: when a public read model says something has drifted, can that claim still be traced back to a real source artifact, or has the read model quietly started to stand in for the source? The design choice that makes this more than a shape check is that the supplied drift_rows.json is never trusted as input. The validator recomputes the drift rows from the public runtime result record, then treats the supplied file only as an expected snapshot whose role is recorded as expectedsnapshotnotsourceauthority. If the snapshot disagrees with the recomputed rows, that is flagged as staleness, not accepted as fact. Each recomputed row is then diffed against a\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "telos",
       "title": "Telos",
       "level": 2,
       "excerpt": "Projection drift is the failure mode where a useful read model begins to look like truth. A dashboard row, generated structured source record, route card, or public runtime result record can be correct enough for navigation while still being downstream of a source artifact that owns the actual authority. This component makes that boundary executable. It accepts public drift rows only when they retain: a real source signal and source ref a target ref that names where the projection appears a repair-route label that remains a route, not a live mutation a validation ref that can witness the row a fact-authority record with authority, appearance, derivation, guard, and residual-route fields met\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-object",
       "title": "Technical Object",
       "level": 2,
       "excerpt": "The runtime locus is src/microcosmcore/components/worldmodelprojectiondriftcontrolroom.py. The exported public example is examples/worldmodelprojectiondriftcontrolroom/exportedprojectiondriftcontrol_bundle. The accepted first-wave fixture is fixtures/firstwave/worldmodelprojectiondriftcontrolroom/input. The component exposes two public validation routes:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "projection-drift-mechanism",
       "title": "Projection-Drift Mechanism",
       "level": 2,
       "excerpt": "The validator recomputes the public projection rows from runtime result records and source artifacts, then compares them with the supplied fixture snapshot. A row passes only when the recomputed projection, supplied snapshot, source-ref evidence, source-state diff, source-module manifest check, copied-body geometry probe, runtime result record witness, and non-public-state exclusion scan all stay inside the public boundary. The core result payload records: driftsummary.rowcount: 8 sourcerefcount: 8 targetrefcount: 8 repairroutecount: 8 validationrefcount: 8 factauthorityrow_count: 8 guardedprojectiontreatment_count: 8 unguardedduplicatecount: 0 runtimereceiptwitnessedrowcount: 8 sourceautho\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-receipt-evidence",
       "title": "Runtime Result record Evidence",
       "level": 2,
       "excerpt": "The public result record floor is metadata-only. The first-wave result records live at: result records/firstwave/worldmodelprojectiondriftcontrolroom/worldmodelprojectiondriftcontrolroomresult.json result records/firstwave/worldmodelprojectiondriftcontrolroom/worldmodelprojectiondriftcontrolroomvalidation_receipt.json result records/sign-off/firstwave/worldmodelprojectiondriftcontrolroomfixtureacceptance.json The exported-bundle result record lives at: result records/runtimeshell/demoproject/components/worldmodelprojectiondriftcontrolroom/exportedprojectiondriftcontrolbundlevalidation_result.json The exported-bundle result record records bodyimportstatus: realruntimereceipt_landed, bodymate\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-available-body-floor",
       "title": "Source-Available Body Floor",
       "level": 2,
       "excerpt": "The exported bundle includes copied source bodies so a reader can inspect the implementation class without receiving private runtime state in the result record. The source-module manifest is: examples/worldmodelprojectiondriftcontrolroom/exportedprojectiondriftcontrolbundle/sourcemodule_manifest.json It records four copied modules: worldmodeldriftaggregatesourcebodyimport worldmodeldriftendpointsourcebodyimport viewqualityactionmapsourcebodyimport viewqualityactionmaptestbodyimport Every manifest row is bodycopied: true, bodyin_receipt: false, classification: copiednonsecretmacrobody, and materialclass: publicmacrotoolbody, with sha256_match: true. The largest bodies are the Station world-m\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "mutation-and-rejection-contract",
       "title": "Mutation and Rejection Contract",
       "level": 2,
       "excerpt": "The validator is not a shape-only check. The focused test suite mutates the public inputs and requires the verdict to move to blocked when authority or freshness is broken: missing source refs produce DRIFTSOURCEREF_REQUIRED missing repair or validation refs produce DRIFTVALIDATIONREF_REQUIRED missing fact-authority mesh produces DRIFTFACTAUTHORITY_REQUIRED projection rows claiming source authority produce DRIFTSOURCEAUTHORITY_FORBIDDEN live repair authority produces DRIFTLIVEREPAIR_FORBIDDEN non-public runtime export produces DRIFTPRIVATERUNTIMEEXPORTFORBIDDEN model-output data export produces DRIFTPROVIDERPAYLOAD_FORBIDDEN automatic doctrine changes produces DRIFTAUTOMATICDOCTRINEPROMOTIO\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-bindings",
       "title": "Governing Lattice Bindings",
       "level": 2,
       "excerpt": "source record: core/papermodulecapsules.json::papermodules[27:papermodule.worldmodelprojectiondriftcontrol_room] Generated instance: papermodules/worldmodelprojectiondriftcontrolroom.json Standard: standards/stdmicrocosmworldmodelprojectiondriftcontrol_room.json Mechanism: mechanism.worldmodelprojectiondriftcontrolroom.validatespublicprojectiondriftcontrolboundary Concept: concept.importprojectionanddriftcontrol_bundle Principle refs: P-1, P-2, P-3, P-5, P-6, P-8, P-9, P-12, P-15 Axiom refs: AX-1, AX-4, AX-5, AX-7, AX-8, AX-11 The generated JSON instance reports sourceauthority: jsoncapsule, 19 resolved relationship edges, Mermaid availablefromcapsule_edges, Atlas linkedfromcapsuleedgesafte\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "It sketches the evidence path and authority bundle-backed generated lattice.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Focused runtime validation: Paper-module corpus validation: Paper-module index validation from the repo root:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The component validates metadata-only drift result records and public-source refs. It supports inspection of recorded drift rows; live repair, source control, doctrine changes, model-output export, public sharing, and launch are outside the fixture. It also does not claim that every possible world-model drift source is covered. Its claim is narrower: the named public drift rows are guarded by source refs, target refs, validation refs, fact-authority mesh, copied source body evidence, metadata-only result records, and negative-case rejection.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read in this order: Bundle and generated instance: core/papermodulecapsules.json::papermodules[27:papermodule.worldmodelprojectiondriftcontrol_room] and papermodules/worldmodelprojectiondriftcontrolroom.json. Runtime source and focused tests: src/microcosmcore/components/worldmodelprojectiondriftcontrolroom.py and tests/testworldmodelprojectiondriftcontrolroom.py. First-wave fixture and result records: fixtures/firstwave/worldmodelprojectiondriftcontrolroom/input, result records/firstwave/worldmodelprojectiondriftcontrolroom/, and result records/sign-off/firstwave/worldmodelprojectiondriftcontrolroomfixtureacceptance.json. Exported-bundle evidence: examples/worldmodelprojectiondriftcontrolr\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page. It may not claim more than its bundle scope limit allows: Public metadata-only runtime result record and copied source-module evidence only; no private runtime body inspection, source authority, source-file changes, live route repair, automatic doctrine changes, model-output data export, launch-scope decision, public sharing decision, or whole-system correctness claim.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This control room watches a world-model projection for drift between what the model expects and what the runtime reports. It draws on the model-monitoring and concept-drift literature, which treats a growing gap between predicted and observed behaviour as an operational signal. Microcosm borrows the drift-as-signal shape over metadata-only result records; the result is fixture-bound monitoring evidence, source-linked only, private runtime inspection, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.world_model_projection_drift_control_room.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Result record[\"Public runtime result record public_projection_drift_control_lens.json\"] Recompute[\"Recompute drift rows from selected_pattern_ids + result record rows\"] Snapshot[\"Supplied drift_rows.json expected snapshot, source-linked only\"] SourceDiff[\"Source-state diff extracted-pattern ledger + view-quality action map\"] Geometry[\"View-quality geometry grade via copied view_quality_census.py\"] Witness[\"Runtime result record witness every recomputed row appears in the result record\"] Reject[\"Rejection gates missing/fake refs, private export, source authority, live repair, source-file changes, doctrine changes, launch\"] Result records[\"metadata-only result records first-wave, sign-off, exported bundle\"] Ceiling[\"Scope limit projection evidence only\"] Result record --> Recompute Recompute --> Snapshot Recompute --> SourceDiff Recompute --> Witness Recompute --> Geometry Snapshot --> Reject SourceDiff --> Reject Witness --> Reject Geometry --> Reject Reject --> Result records Result records --> Ceiling",
       "source_hash": "sha256:59753dba127a94331e85ebf216db08743cd7989f26835e0afe318113fe453bdd",
       "html_url": "docs/paper-modules.html#paper-module-world-model-projection-drift-control-room-diagram-1",
       "html_anchor": "paper-module-world-model-projection-drift-control-room-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/world_model_projection_drift_control_room.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "concept-drift",
       "url": "https://en.wikipedia.org/wiki/Concept_drift",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "world_model_projection_drift_control_room",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "World Model Projection Drift Control Room",
         "url": "components.html#component-world_model_projection_drift_control_room"
        },
        {
         "id": "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public projection drift control boundary",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/world_model_projection_drift_control_room.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 15746
    },
    {
     "id": "paper_module.public_reveal_walkthrough",
     "title": "Public Reveal Walkthrough",
     "relative_href": "docs/paper-modules.html#paper-module-public-reveal-walkthrough",
     "read_href": "docs/paper-modules.html#paper-module-public-reveal-walkthrough",
     "context_href": "docs/rules-and-ideas.html#paper-module-public-reveal-walkthrough",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public reveal walkthrough validates a ten-minute cold-reader path through commands, routes, evidence refs, source-open body imports, negative cases, and scope limits without claiming launch-scope decision or private-system equivalence.",
     "summary": "Public Reveal Walkthrough is the source-backed public-entry membrane for Microcosm. It checks the declared reveal steps, runnable command set, evidence refs, claim-floor phrases, secret-exclusion scan, source-open body import manifest, runtime-bundle shape, and four overclaim negative cases while keeping copied bodies out of result records and launch/provider/private-equivalence claims out of scope.",
     "authority_ceiling": "Public reveal fixture and exported-bundle result records only; no launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness.",
     "abstract": "The public reveal walkthrough validates a ten-minute cold-reader path through commands, routes, evidence refs, source-open body imports, negative cases, and scope limits without claiming launch-scope decision or private-system equivalence.",
     "teleology": {
      "section_id": "",
      "text": "The public reveal walkthrough validates a ten-minute cold-reader path through commands, routes, evidence refs, source-open body imports, negative cases, and scope limits without claiming launch-scope decision or private-system equivalence.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`public_reveal_walkthrough` is the accepted component that makes Microcosm's public reveal executable instead of descriptive.\n\nIt validates a ten-minute cold-reader path:\n1. Compile a project into `.microcosm/`.\n2. Inspect catalog, patterns, and routes.\n3. Explain one route through patterns, standard pressure, work, events, and evidence.\n4. Open the observatory causal chain before raw JSON drilldown.\n5. Run `microcosm intake` to see the source projection intake cells connected to spine, reveal, and runtime evidence.\n6. Read the result records and scope limit.\n\nThe component reads public fixtures from `fixtures/first_wave/public_reveal_walkthrough/input/` and exported runtime input from `examples/public_reveal_walkthrough/exported_public_reveal_bundle/`.\n\nIt emits:\n- `receipts/first_wave/public_reveal_walkthrough/public_reveal_walkthrough_result.json`\n- `receipts/first_wave/public_reveal_walkthrough/ten_minute_reveal_board.json`\n- `receipts/first_wave/public_reveal_walkthrough/public_reveal_validation_receipt.json`\n- result records/sign-off/first_wave/public_reveal_walkthrough_fixture_acceptance.json\n\nThe reveal path treats `microcosm intake` as a runtime bridge rather than a private planning note. The command exposes `runtime_reveal_import_bridge`, keeps `formal_math_readiness_extensions` visible as a public replacement when its extension board exists, and points back to the source projection intake board without copying private source bodies.\n\n###### Purpose\n\nA cold reader meeting Microcosm for the first time needs one thing the README cannot give them on its own: proof that the first ten minutes are real and not a tour of screenshots. This component answers a single question. Can a reader who has never seen the system run a short, fixed path from a command to local state, to a route, to the result record and source boundary behind it, with nothing on that path that the system does not actually run?\n\nThe validator enforces that path as an accounting floor rather than a narrative. A reveal only passes if it carries at least five steps, four distinct runnable commands, and four evidence refs, and if four overclaim fixtures stay rejected: a launch or hosting claim, a private-data equivalence claim, a step with no evidence ref, and marketing copy with no command behind it. The floor exists because a walkthrough drifts towards a hero pitch the moment it is allowed to. Removing the commands and the result record refs is the easiest way to make a reveal look more impressive and prove less.\n\nThe part worth noting is the real-lane witness. The fixture run does not pass on its own paperwork. It is gated on the exported reveal bundle actually running, with its copied source bodies present and digest-verified. If that backing run is missing or blocked, the fixture is marked blocked too, with `real_runtime_receipt` set to false. So the reveal cannot describe a runnable path while the runnable path is broken underneath it, which is the quiet failure mode of every quick-start guide that says more than it can execute.\n\n###### Shape\n\nPublic Reveal Walkthrough is the source-backed entry membrane for a cold technical reader. It turns the local Microcosm first-run path into a runnable accounting exercise: commands produce local state, routes point at work and events, evidence refs point at result records, and scope limits keep the visual or browser layer from becoming a product or public-sharing claims.\n\nSource refs\n\nJSON bundle `paper_module.public_reveal_walkthrough` Runtime component `public_reveal_walkthrough.py` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.public_reveal_walkthrough\"] Fixture[\"First-wave public reveal fixture 10-minute route + negative cases\"] Bundle[\"Exported public reveal bundle 5 copied source bodies\"] Runtime[\"Runtime component public_reveal_walkthrough.py\"] Shell[\"Runtime shell bridge microcosm intake + public reveal view\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Reader[\"Cold reader route command -> route -> evidence refs -> ceiling\"] Ceiling[\"Scope limit no launch, hosting, provider, or private-system claims\"] Bundle --> Runtime Fixture --> Runtime Bundle --> Runtime Runtime --> Result records Runtime --> Shell Shell --> Reader Result records --> Reader Reader --> Ceiling\n```\n\nThe runtime shape has five bounded inputs:\n- the public reveal fixture under `fixtures/first_wave/public_reveal_walkthrough/input`;\n- the exported reveal bundle under `examples/public_reveal_walkthrough/exported_public_reveal_bundle`;\n- the source-module manifest for copied source bodies;\n- the component source and focused tests that enforce command, evidence, and negative-case behavior;\n- the standard and JSON bundle that bind the paper module to the mechanism, source locus, and scope limit.\n\nThe proof shape is route-first rather than dashboard-first. A valid reveal shows a command, a selected route, the route explanation through work/events/ evidence, result record refs, evidence-class counts, and the scope boundary beside any impressive total. Generated cards, observatory views, and browser/video boards are presentation layers over that accounting path.\n\nThe negative-case shape is part of the floor. launch or hosting overclaims, private-data equivalence, missing evidence refs, and marketing-only reveal material must remain rejected. If those refusals stop appearing, the reveal is no longer bounded enough for a cold reader.\n\nThe source-open shape is also bounded. The exported bundle carries five copied public bodies, and the manifest verifies exact-copy relation, digests, material classes, and metadata-only result records.\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[paper_module.public_reveal_walkthrough]` sets `source_authority: json_capsule`, binds the component, binds `mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough`, and resolves `src/microcosm_core/organs/public_reveal_walkthrough.py`.\n- Generated instance: `paper_modules/public_reveal_walkthrough.json` reports `source_authority: json_capsule`, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges_after_atlas_binding`, 20 relationship edges, and a resolved `paper_module.depends_on.paper_module` edge to `paper_module.first_screen_composition_root` because the reveal path spends the first-screen composition contract before deeper route/evidence drilldown.\n- Runtime and shell consumers: `src/microcosm_core/organs/public_reveal_walkthrough.py` exposes `run`, `run_reveal_bundle`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `PUBLIC_SAFE_SOURCE_BODY_CLASSES`. `src/microcosm_core/runtime_shell.py` routes the exported reveal bundle through `public_reveal_walkthrough.run_reveal_bundle` and publishes the `public_reveal_view` runtime lens.\n- Result record and test floor: `receipts/first_wave/public_reveal_walkthrough/public_reveal_walkthrough_result.json`, `ten_minute_reveal_board.json`, `public_reveal_validation_receipt.json`, and result records/sign-off/first_wave/public_reveal_walkthrough_fixture_acceptance.json are metadata-only evidence. `tests/test_public_reveal_walkthrough.py` checks the fixture path, exported-bundle path, source-module digest validation, negative cases, and public-relative result record posture.\n- Claim boundary: `standards/std_microcosm_public_reveal_walkthrough.json`, the generated structured source record, and this page limit the module to public reveal walkability, route/evidence accounting, exact-copy public source-body import evidence, negative-case rejection, and metadata-only result records. They do not include launch operations, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, source-file changes, Lean/Lake execution, or whole-system correctness.\n\n###### Source-Backed Mechanism\n\nThe source mechanism is `mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough` in `core/mechanism_sources.json`.\n\nThe runtime locus is `src/microcosm_core/organs/public_reveal_walkthrough.py`. The source symbols that matter for cold-agent drilldown are:\n- `run`\n- `run_reveal_bundle`\n- `_source_module_manifest_result`\n- `_source_open_body_import_summary`\n- `EXPECTED_NEGATIVE_CASES`\n- `AUTHORITY_CEILING`\n- `PUBLIC_SAFE_SOURCE_BODY_CLASSES`\n\nThe governing standard is `standards/std_microcosm_public_reveal_walkthrough.json`. Its `paper_module_contract` binds this Markdown module to `core/paper_module_capsules.json#paper_module.public_reveal_walkthrough` and to the mechanism row above.\n\nThe atlas source row is intentionally not claimed as complete in this pass: `core/organ_atlas.json` is the source surface that must later receive `paper_module_ref`, `mechanism_refs`, and `code_loci` for this component. The re-entry capture is `cap_quick_public_reveal_atlas_edge_population_wait_147e39c7a896`.\n\n###### Source-Open Body Imports\n\nThe exported reveal bundle carries five copied source bodies under `examples/public_reveal_walkthrough/exported_public_reveal_bundle/source_modules/`. The authority manifest is `examples/public_reveal_walkthrough/exported_public_reveal_bundle/source_module_manifest.json`.\n\nThe copied materials are:\n\nModule id Material class What it contributes `public_reveal_first_slice_execution_receipt_body_import` `public_macro_receipt_body` First public Microcosm slice validation result record with launch/public sharing/hosting boundaries. `public_reveal_runtime_shell_reorientation_receipt_body_import` `public_macro_receipt_body` Source result record for the shift from result record archive posture to runnable runtime shell posture. `public_reveal_clean_clone_state_fixture_receipt_body_import` `public_macro_receipt_body` Clean-clone fixture repair result record showing self-contained public validation. `public_reveal_public_substrate_boundary_policy_body_import` `public_macro_tool_body` Boundary policy for source import and excluded material classes. `public_reveal_walkthrough_control_plane_source_body_import` `public_python_source_body` The public component source body that validates reveal commands, claims, digest evidence, and metadata-only result records.\n\nAll five rows are exact-copy imports, `body_in_receipt=false`, and digest checks must pass before the exported reveal bundle can count as source-backed. Result records may name refs, hashes, counts, and verdicts; they do not embed copied body text.\n\n###### First Commands\n\nFrom `microcosm-substrate/`, the first fixture command is:\n\nThe exported bundle command is:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.public_reveal_walkthrough run-reveal-bundle --input examples/public_reveal_walkthrough/exported_public_reveal_bundle --out receipts/runtime_shell/demo_project/organs/public_reveal_walkthrough --card\n```\n\nFocused regression:\n\n```text\nPYTHONPATH=src ../repo-pytest tests/test_public_reveal_walkthrough.py -q --basetemp=/tmp/microcosm-public-reveal-pytest --ignore-host-pressure\n```\n\n###### Evidence Counts In The Reveal\n\nThe reveal board should not ask a cold reader to decode evidence-class numbers from context. When the walkthrough shows source-open body material counts, verified import counts, subprocess witnesses, algorithmic projection counts, or rows with source imports, it should pair each number with the evidence class and the scope boundary:\n- Counts prove that the public route exposes an inspectable accounting surface.\n- Counts do not prove launch-scope decision, whole-system correctness, or equal evidence depth across every component.\n- A small high-authority count is stronger than a large low-authority count for the claim it actually covers.\n- Generated or projected rows are reveal handles; source files, validators, result records, and scope limits remain the proof surfaces.\n\nThis keeps the public reveal from becoming a dashboard of impressive totals. The first reveal task is to show how a reader can move from number to result record to source boundary without crossing into private bodies, model-output data, account or browser state, or launch claims.\n\n###### Reveal First View\n\nThe reveal board should open with the same compression grammar as the first-screen card, then widen only after the reader has a route to inspect:\n1. Restate the bounded claim frame.\n2. Show the command that produced the local state.\n3. Show one route explanation with result record refs.\n4. Show the evidence-count legend beside the result record refs.\n5. Show the scope limit before any totals, drilldowns, or observatory links.\n\nThis gives video-first or browser-first readers a visible artifact without turning the reveal into a marketing hero. Motion, screenshots, and observatory views are allowed presentation layers only when the same evidence legend, scope boundary, and result record refs remain on the first view.\n\n###### Discipline In The Reveal\n\nThe reveal should make discipline legible as prevented failure, not as a wall of policy labels. Before showing totals or motion, the board should pair each impressive-looking artifact with the boundary that keeps it honest:\n\nReveal artifact Boundary shown beside it What the boundary prevents Local `.microcosm/` state `source_files_mutated=false` plus route/work/event/evidence refs. Reading a local demo as source-file changes, hosted launch, or external model service. Body-import counts `verified_macro_body_import` rows with validator or result record refs. Reading copied public material as private-system equivalence. Projection counts Source-coupling and generated-row scope boundaries. Reading generated cards as source authority or domain proof. Observatory views Compact endpoint first, full model as drilldown. Letting browser motion replace command, result record, and evidence-class checks. Doctrine constraints Failure mode or scope boundary beside the constraint. Reading governance as ceremony rather than as a specific overclaim guard.\n\nIf the reveal cannot show those boundaries on the first view, it should defer the visual flourish and keep the compact result record-backed route visible instead.\n\n###### Prior Art Grounding\n\nThe public reveal path is grounded in first-run CLI and progressive-disclosure practice. The [Command Line Interface Guidelines](https://clig.dev/) motivate a single runnable command, examples, discoverable next steps, and machine-readable output. Nielsen Norman Group's [progressive disclosure](https://www.nngroup.com/articles/progressive-disclosure/) pattern motivates showing the bounded first route before expanding into full observatory or JSON drilldowns.\n\nThe reveal's evidence walk also borrows from provenance and tracing patterns: [W3C PROV](https://www.w3.org/TR/prov-overview/) for moving from artifact to source and result record, and [OpenTelemetry traces](https://opentelemetry.io/docs/concepts/signals/traces/) for representing causal chains as inspectable linked work. Microcosm applies those patterns to a local walkthrough so the visual board remains evidence accounting, not a launch or maturity claim.\n\n###### Browser/Video Reveal Board\n\nThe reveal board is the public visual candidate for a 60-second walkthrough. It must therefore be more than raw JSON, but it must still be less than a product claim. The first browser/video frame should show:\n1. The command that produced the local state.\n2. The selected route and one-line route reason.\n3. The route explanation through work, events, evidence, and result record refs.\n4. The evidence legend, including evidence class and scope boundary.\n5. The compact observatory or first-screen endpoint used for the board.\n6. The scope limit before totals, motion, or full-model drilldown.\n\nMotion is allowed to make the causal order easier to inspect: command to local state, local state to selected route, selected route to work/event/evidence, and evidence to result record or validator. Motion is not allowed to displace the command, result record/evidence ref, scope boundary, or scope limit from the first view.\n\nThe board should end by offering exactly three next steps: reader-specific branch, result record drilldown, and full observatory JSON. That keeps the visual surface from expanding into a second README while still making the public reveal inspectable by readers who will not start in the terminal.\n\nThe validated claim is narrow:\n\n> Microcosm turns a repo into a local operating system: patterns, routes, > work transactions, events, evidence, and explanations.\n\nNegative fixtures reject launch or hosting overclaim, private-data equivalence, missing evidence refs, and marketing-only reveal material without runtime commands.\n\n###### Reader Evidence Routing\n- Start with the first commands and the JSON Bundle Binding to identify the fixture, exported bundle, source record, mechanism row, standard, and result record surfaces.\n- For behavior questions, read `src/microcosm_core/organs/public_reveal_walkthrough.py` and `tests/test_public_reveal_walkthrough.py` before trusting this prose.\n- For source-open body questions, read the exported bundle's `source_module_manifest.json`; it is the evidence for exact-copy relation, digest match, material class, and metadata-only result record posture.\n- For visual or browser walkthrough questions, read the evidence legend, result record refs, scope boundary, and scope limit before reading totals, observatory links, or motion as meaningful.\n- Treat generated atlas docs, generated coverage projections, generated result records, copied-body presence, and browser/video boards as navigation or validation projections. They do not become source authority for launch, hosting, provider, private-system-equivalence, or whole-system claims.\n\n###### Validation Result record Path\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_public_reveal_walkthrough.py -q --basetemp=/tmp/microcosm_public_reveal_walkthrough_pytest --ignore-host-pressure\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module describes public reveal walkthrough validation only. It excludes launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness.\n\nGenerated atlas docs, generated coverage projections, generated result records, copied-body presence, browser/video boards, and impressive evidence totals are source-linked only. The source authority remains with the standard, bundle, mechanism row, component source, source-module manifest, validators, and result record refs named above.\n\n###### Scope limit\n\nThis module may claim a bounded public reveal walkthrough over the local fixture and exported bundle: runnable commands, selected route explanation, work/event/evidence refs, source-open body import manifest checks, evidence legend, negative-case refusals, metadata-only result records, and scope limits. A diagram view is generated for this module; an atlas card is a staged exercise pending atlas owner-lane binding. One selective dependency remains open and requires a governed bundle update to resolve.\n\nIt does not claim launch-scope decision, hosted deployment, publishing-scope decision, recipient work, external model service, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness. Visual boards, screenshots, observatory motion, copied-body counts, and generated cards remain presentation or navigation projections over the result record path.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 19691,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A cold reader meeting Microcosm for the first time needs one thing the README cannot give them on its own: proof that the first ten minutes are real and not a tour of screenshots. This component answers a single question. Can a reader who has never seen the system run a short, fixed path from a command to local state, to a route, to the result record and source boundary behind it, with nothing on that path that the system does not actually run? The validator enforces that path as an accounting floor rather than a narrative. A reveal only passes if it carries at least five steps, four distinct runnable commands, and four evidence refs, and if four overclaim fixtures stay rejected: a launch o\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Public Reveal Walkthrough is the source-backed entry membrane for a cold technical reader. It turns the local Microcosm first-run path into a runnable accounting exercise: commands produce local state, routes point at work and events, evidence refs point at result records, and scope limits keep the visual or browser layer from becoming a product or public-sharing claims. The runtime shape has five bounded inputs: the public reveal fixture under fixtures/firstwave/publicreveal_walkthrough/input; the exported reveal bundle under examples/publicrevealwalkthrough/exportedpublicreveal_bundle; the source-module manifest for copied source bodies; the component source and focused tests that enforce\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-mechanism",
       "title": "Source-Backed Mechanism",
       "level": 2,
       "excerpt": "The source mechanism is mechanism.publicrevealwalkthrough.validatespublicreveal_walkthrough in core/mechanism_sources.json. The runtime locus is src/microcosmcore/components/publicreveal_walkthrough.py. The source symbols that matter for cold-agent drilldown are: run runrevealbundle sourcemodulemanifestresult sourceopenbodyimport_summary EXPECTEDNEGATIVECASES scope_limit PUBLICSAFESOURCEBODYCLASSES The governing standard is standards/stdmicrocosmpublicrevealwalkthrough.json. Its papermodulecontract binds this Markdown module to core/papermodulecapsules.json#papermodule.publicreveal_walkthrough and to the mechanism row above. The atlas source row is intentionally not claimed as complete in t\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-imports",
       "title": "Source-Open Body Imports",
       "level": 2,
       "excerpt": "The exported reveal bundle carries five copied source bodies under examples/publicrevealwalkthrough/exportedpublicrevealbundle/sourcemodules/. The authority manifest is examples/publicrevealwalkthrough/exportedpublicrevealbundle/sourcemodule_manifest.json. The copied materials are: All five rows are exact-copy imports, bodyinreceipt=false, and digest checks must pass before the exported reveal bundle can count as source-backed. Result records may name refs, hashes, counts, and verdicts; they do not embed copied body text.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "first-commands",
       "title": "First Commands",
       "level": 2,
       "excerpt": "From microcosm-substrate/, the first fixture command is: The exported bundle command is: Focused regression:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-counts-in-the-reveal",
       "title": "Evidence Counts In The Reveal",
       "level": 2,
       "excerpt": "The reveal board should not ask a cold reader to decode evidence-class numbers from context. When the walkthrough shows source-open body material counts, verified import counts, subprocess witnesses, algorithmic projection counts, or rows with source imports, it should pair each number with the evidence class and the scope boundary: Counts prove that the public route exposes an inspectable accounting surface. Counts do not prove launch-scope decision, whole-system correctness, or equal evidence depth across every component. A small high-authority count is stronger than a large low-authority count for the claim it actually covers. Generated or projected rows are reveal handles; source files,\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reveal-first-view",
       "title": "Reveal First View",
       "level": 2,
       "excerpt": "The reveal board should open with the same compression grammar as the first-screen card, then widen only after the reader has a route to inspect: Restate the bounded claim frame. Show the command that produced the local state. Show one route explanation with result record refs. Show the evidence-count legend beside the result record refs. Show the scope limit before any totals, drilldowns, or observatory links. This gives video-first or browser-first readers a visible artifact without turning the reveal into a marketing hero. Motion, screenshots, and observatory views are allowed presentation layers only when the same evidence legend, scope boundary, and result record refs remain on the fir\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "discipline-in-the-reveal",
       "title": "Discipline In The Reveal",
       "level": 2,
       "excerpt": "The reveal should make discipline legible as prevented failure, not as a wall of policy labels. Before showing totals or motion, the board should pair each impressive-looking artifact with the boundary that keeps it honest: If the reveal cannot show those boundaries on the first view, it should defer the visual flourish and keep the compact result record-backed route visible instead.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The public reveal path is grounded in first-run CLI and progressive-disclosure practice. The Command Line Interface Guidelines motivate a single runnable command, examples, discoverable next steps, and machine-readable output. Nielsen Norman Group's progressive disclosure pattern motivates showing the bounded first route before expanding into full observatory or JSON drilldowns. The reveal's evidence walk also borrows from provenance and tracing patterns: W3C PROV for moving from artifact to source and result record, and OpenTelemetry traces for representing causal chains as inspectable linked work. Microcosm applies those patterns to a local walkthrough so the visual board remains evidence\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "browser-video-reveal-board",
       "title": "Browser/Video Reveal Board",
       "level": 2,
       "excerpt": "The reveal board is the public visual candidate for a 60-second walkthrough. It must therefore be more than raw JSON, but it must still be less than a product claim. The first browser/video frame should show: The command that produced the local state. The selected route and one-line route reason. The route explanation through work, events, evidence, and result record refs. The evidence legend, including evidence class and scope boundary. The compact observatory or first-screen endpoint used for the board. The scope limit before totals, motion, or full-model drilldown. Motion is allowed to make the causal order easier to inspect: command to local state, local state to selected route, selecte\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with the first commands and the JSON Bundle Binding to identify the fixture, exported bundle, source record, mechanism row, standard, and result record surfaces. For behavior questions, read src/microcosmcore/components/publicreveal_walkthrough.py and tests/testpublicreveal_walkthrough.py before trusting this prose. For source-open body questions, read the exported bundle's sourcemodulemanifest.json; it is the evidence for exact-copy relation, digest match, material class, and metadata-only result record posture. For visual or browser walkthrough questions, read the evidence legend, result record refs, scope boundary, and scope limit before reading totals, observatory links, or motion\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module describes public reveal walkthrough validation only. It does not include launch operations, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness. Generated atlas docs, generated coverage projections, generated result records, copied-body presence, browser/video boards, and impressive evidence totals are source-linked only. The source authority remains with the standard, bundle, mechanism row, component source, source-module manifest, validators, and result record refs named above.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim a bounded public reveal walkthrough over the local fixture and exported bundle: runnable commands, selected route explanation, work/event/evidence refs, source-open body import manifest checks, evidence legend, negative-case refusals, metadata-only result records, and scope limits. A diagram view is generated for this module; an atlas card is a staged exercise pending atlas owner-lane binding. One selective dependency remains open and requires a governed bundle update to resolve. It does not claim launch-scope decision, hosted deployment, public sharing decision, recipient work, external model service, secret export, private-system equivalence, Lean/Lake execution, sou\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.public_reveal_walkthrough.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"JSON bundle paper_module.public_reveal_walkthrough\"] Fixture[\"First-wave public reveal fixture 10-minute route + negative cases\"] Bundle[\"Exported public reveal bundle 5 copied source bodies\"] Runtime[\"Runtime component public_reveal_walkthrough.py\"] Shell[\"Runtime shell bridge microcosm intake + public reveal view\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Reader[\"Cold reader route command -> route -> evidence refs -> ceiling\"] Ceiling[\"Scope limit no launch, hosting, provider, or private-system claims\"] Bundle --> Runtime Fixture --> Runtime Bundle --> Runtime Runtime --> Result records Runtime --> Shell Shell --> Reader Result records --> Reader Reader --> Ceiling",
       "source_hash": "sha256:45d33a6bd66ec9d73c41796c7a5779a901eb9b37fe87c944e828764350c3880f",
       "html_url": "docs/paper-modules.html#paper-module-public-reveal-walkthrough-diagram-1",
       "html_anchor": "paper-module-public-reveal-walkthrough-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/public_reveal_walkthrough.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Command Line Interface Guidelines",
       "url": "https://clig.dev/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "progressive disclosure",
       "url": "https://www.nngroup.com/articles/progressive-disclosure/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "OpenTelemetry traces",
       "url": "https://opentelemetry.io/docs/concepts/signals/traces/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.first_screen_composition_root",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "First-Screen Composition Root",
         "url": "paper-modules.html#paper-module-first-screen-composition-root"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 3,
       "links": [
        {
         "id": "public_reveal_walkthrough",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Public Reveal Walkthrough",
         "url": "components.html#component-public_reveal_walkthrough"
        },
        {
         "id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public reveal walkthrough",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough"
        },
        {
         "id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public first screen composition root",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.entry_and_reveal_route_readiness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "entry and reveal routes as bounded cold-reader readiness evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/public_reveal_walkthrough.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 20862
    },
    {
     "id": "paper_module.standards_meta_diagnostics",
     "title": "Standards Meta Diagnostics",
     "relative_href": "docs/paper-modules.html#paper-module-standards-meta-diagnostics",
     "read_href": "docs/paper-modules.html#paper-module-standards-meta-diagnostics",
     "context_href": "docs/rules-and-ideas.html#paper-module-standards-meta-diagnostics",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Terminal public coverage diagnostic: verifies every accepted component stays mapped to a standard, runtime contract, result record, and scope limit.",
     "summary": "Checks accepted adapter-backed components against standards_inventory/organ_runtime_contracts/diagnostic_policy; rejects 5 boundary failures (missing standard_id/standard_ref, missing inventory row, missing result record ref, launch/provider/public sharing overclaim, private-body leak); secret_exclusion_scan with body_in_receipt:false and synthetic_receipt_standin_allowed:false.",
     "authority_ceiling": "Projection-only diagnostic; never source authority for core/standards_registry.json, no source-file changes, no provider/launch-scope decision, no whole-system correctness.",
     "abstract": "Terminal public coverage diagnostic: verifies every accepted component stays mapped to a standard, runtime contract, result record, and scope limit.",
     "teleology": {
      "section_id": "",
      "text": "Terminal public coverage diagnostic: verifies every accepted component stays mapped to a standard, runtime contract, result record, and scope limit.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`standards_meta_diagnostics` is the terminal public coverage diagnostic for the Microcosm runtime spine. It checks that accepted adapter-backed components remain mapped to standards, runtime contracts, result records, and explicit scope limits before a cold reader trusts the spine as coherent.\n\nIt consumes public `standards_inventory.json`, `organ_runtime_contracts.json`, and `diagnostic_policy.json` inputs backed by registry refs, runtime commands, sign-off result records, and the exported diagnostics bundle. Its result record contract is source-open by default: `secret_exclusion_scan` proves that secrets, account or browser material, model-output data bodies, raw operator bodies, and account secret-equivalent live-access material are excluded, while `public_runtime_refs` point at the real standards, component, sign-off, fixture, bundle, and paper-module system. Bodies are not inlined into JSON result records, so the positive evidence uses `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n\nThe component rejects five boundary failures:\n- accepted component rows without `standard_id` or `standard_ref`\n- accepted components missing from the standards inventory\n- accepted component rows without result record refs\n- launch, provider, public sharing, secret export, trading/advice, or whole-system correctness overclaims\n- private source bodies or model-output data bodies in public diagnostics\n\n###### Purpose\n\nA spine of accepted components is only coherent if each component is still attached to the things that make it accountable: a standard that describes it, a runtime contract that runs it, a result record that records its last verdict, and an explicit statement of what it is not allowed to claim. As the spine grows, those four attachments drift out of step one component at a time, and the drift is silent. A new component can be accepted into the runtime while its standard file, registry row, or result record ref is never added. Nothing breaks; the gap just sits there until a reader trusts the spine and finds a hole.\n\nThis component answers a single question: does every accepted component still resolve to a standard, a runtime contract, a result record, and an scope limit, with no extra and no missing entries? It treats the answer as a graph-closure check rather than a written audit. The accepted-component list, the standard rows, the runtime-contract rows, and the result record refs must agree on exactly the same set of components. Any component that appears in one surface but not another becomes a structured finding with a named error code, not a paragraph of prose.\n\nThe unusual choice is that the diagnostic refuses to grow its own authority. It projects its positive coverage from the live registry rather than a checked-in list, so a stale example cannot quietly become the thing the spine is measured against. It carries five negative fixtures that must each surface their expected failure, so the checker is itself falsifiable. And its result records deliberately hold refs, counts, hashes, and verdicts rather than the bodies they describe, so a coverage report can be read in the open without exporting private source.\n\n###### Technical Mechanism\n\n`standards_meta_diagnostics` is a public consistency validator over three finite surfaces: a standards inventory, component runtime contracts, and diagnostic policy. The positive path either reads those exported JSON inputs or projects them from the live public registry, then requires the accepted-component list, the standard rows, the runtime-contract rows, and the result record refs to agree on the same component set. This is a graph-closure check, not a narrative audit: an accepted component without a standard ref, registry-backed standard row, runtime step, validator command, or result record ref becomes a structured finding.\n\nThe mechanism has four guarded stages:\n1. `run` loads `standards_inventory.json`, `organ_runtime_contracts.json`, and `diagnostic_policy.json`, or projects the positive rows from live public registry state when the caller asks for live positives.\n2. The validator checks every accepted component row against a resolving `std_microcosm_<organ_id>` standard, the standards registry entry, the runtime shell step, a non-empty validator command, and non-empty result record refs with `body_in_receipt: false`.\n3. Five negative fixtures exercise the expected boundary failures: `missing_standard_ref`, `unmapped_accepted_organ`, `missing_receipt_ref`, `release_overclaim`, and `private_source_leakage`.\n4. The exported-bundle path revalidates the same shape through `source_module_manifest.json`, exact source-module digest checks, source-open body-import accounting, `secret_exclusion_scan`, and the projection-only `AUTHORITY_CEILING`.\n\nThe output card deliberately omits the covered-component list, findings, secret-exclusion detail, source refs, public runtime refs, scope boundary, scope limit, and source-module summary from the compact payload. Those keys remain in the full result record, which keeps the reader-facing card inspectable without turning it into a private-body export.\n\n###### Shape\n\nSource refs\n\nInventory `standards_inventory.json` Contracts `organ_runtime_contracts.json` Policy `diagnostic_policy.json` Runtime `standards_meta_diagnostics.run / run_diagnostics_bundle` Diagram source\n\n```text\nflowchart TD bundle[\"paper_module bundle: subjects + code_loci + scope limit\"] inventory[\"standards_inventory.json\"] contracts[\"organ_runtime_contracts.json\"] policy[\"diagnostic_policy.json\"] negatives[\"negative fixtures: missing standard, unmapped component, missing result record, overclaim, private source\"] runtime[\"standards_meta_diagnostics.run / run_diagnostics_bundle\"] scan[\"secret_exclusion_scan + public_runtime_refs\"] result record[\"sign-off result record: counts, error codes, scope boundary\"] projections[\"generated navigation projections: mermaid + atlas card\"] bundle --> projections inventory --> runtime contracts --> runtime policy --> runtime negatives --> runtime runtime --> scan scan --> result record runtime --> result record\n```\n\nEvidence/accounting:\n- `core/paper_module_capsules.json::paper_modules[29:paper_module.standards_meta_diagnostics]` is the JSON authority row. It names the component and mechanism subjects, the resolved code locus `src/microcosm_core/organs/standards_meta_diagnostics.py`, and the projection-only scope limit.\n- `paper_modules/standards_meta_diagnostics.json::paper_module_payload.source_authority` is `json_capsule`; `generated_projections.mermaid.status` is `available_from_capsule_edges`; `generated_projections.atlas_card.status` is `linked_from_capsule_edges`; `relationships.edges` currently has 11 edges.\n- `organs/standards_meta_diagnostics.json::organ_payload.source_registry_row` records `status: accepted_current_authority`, the validator command, and the generated result record refs; its `claim_ceiling` keeps the diagnostic scoped to the declared public contract.\n- `src/microcosm_core/organs/standards_meta_diagnostics.py` names `INPUT_NAMES`, `NEGATIVE_INPUT_NAMES`, `EXPECTED_NEGATIVE_CASES`, `PUBLIC_RUNTIME_REFS`, and `AUTHORITY_CEILING`, which are the runtime contract this reader section summarizes.\n- `tests/test_standards_meta_diagnostics.py` asserts the fixture and exported bundle paths, the five expected negative cases, source-module digest checks, `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n- result records/sign-off/first_wave/standards_meta_diagnostics_fixture_acceptance.json records `status: pass`, `accepted_organ_count: 77`, `standard_mapping_count: 77`, `runtime_contract_count: 77`, five expected error codes, `secret_exclusion_scan.blocking_hit_count: 0`, and the scope boundary that the diagnostic excludes launch, providers, registry mutation, formal-result correctness, or whole-system correctness.\n\n###### Reader Evidence Routing\n- Start with the JSON Bundle Binding to identify the source record and the projection-only scope limit before treating the diagnostic as evidence.\n- Use Structured Lattice Bindings to understand which wiring is resolved and which dependencies remain pending. Pending dependencies are honest residuals, not hidden failures.\n- Use Validation Result record Path for reproducibility: focused pytest exercises the diagnostic policy and negative cases; the corpus check verifies paper-module parity.\n- Treat secret-exclusion and public-runtime refs as result record evidence about public projection consistency. They do not mutate standards, include launch operations, expose private source material, or prove whole-system correctness.\n\n###### Named Proof Consumers\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_observes_negative_cases` is the fixture consumer. It proves that the positive public inputs cover the accepted component set and that the five expected negative cases surface their named error codes.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_bundle_validates_runtime_shape` is the exported-bundle consumer. It checks the bundle id, covered component set, source-module manifest status, source-open body-import counts, `body_in_receipt: false`, and the false scope limit flags.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_rejects_source_module_digest_mismatch`, `::test_standards_meta_diagnostics_rejects_partial_source_module_digest_mismatch`, and `::test_standards_meta_diagnostics_rejects_partial_target_module_digest_mismatch` are the digest-drift consumers. They make copied source-module bodies falsifiable instead of relying on manifest prose.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_source_modules_are_exact_macro_body_imports` is the exact-copy consumer for the three public source-body imports named in the exported bundle.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_receipts_use_secret_exclusion` is the public/private boundary consumer. It checks that result record evidence uses the secret-exclusion lane and keeps private bodies out of public diagnostics.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_input_builder_tracks_live_registry` and the live-positive projection tests are the registry-freshness consumers. They keep fixture inputs tied to public registry state instead of allowing a stale checked-in example to become silent authority.\n\n###### Prior Art Grounding\n\nThis component is grounded in schema- and contract-validation practice rather than in a claim that diagnostics create authority. JSON Schema treats a schema as a machine-readable vocabulary for validating structured JSON data, and OpenAPI uses interface descriptions so consumers can understand an API without reading source code or observing traffic. The component imports that pattern into Microcosm's launch boundary: standards, adapter contracts, result records, and scope limits are checked as public projections, while the diagnostic remains bounded evidence about consistency rather than a new source of truth.\n\nPrior-art anchors:\n- JSON Schema validation and structured-data constraints: https://json-schema.org/\n- OpenAPI interface descriptions and conformance expectations: https://spec.openapis.org/oas/latest.html\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_standards_meta_diagnostics.py -q \\\n  --basetemp=/tmp/microcosm_standards_meta_diagnostics_pytest\n./repo-python scripts/build_doctrine_projection.py \\\n  --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can claim that public standards inventory, runtime contracts, accepted-component refs, result record refs, diagnostic policy, and secret-exclusion checks are consistently projected into a reader-facing diagnostics result record. It cannot claim standards-registry mutation authority, provider authority, launch-scope decision, publishing-scope decision, private source export, or whole-system correctness.\n\n###### Scope limit\n\nThis is a projection-only diagnostic. It does not become source authority for `core/standards_registry.json`, change source files surfaces, expose private source material, authorize providers, include launch operations, or prove whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe public diagnostics bundle is source-open as evidence about refs, policies, runtime contracts, and result records. It may expose standards inventory rows, component runtime contract rows, diagnostic policy rows, sign-off result record refs, fixture refs, bundle refs, secret-exclusion scan verdicts, and public runtime refs.\n\nIt must not inline private source bodies, model-output data bodies, source notes, account or browser material, account secret-equivalent live-access material, launch-send state, or private source-root bodies. The positive result record evidence therefore stays at `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13168,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A spine of accepted components is only coherent if each component is still attached to the things that make it accountable: a standard that describes it, a runtime contract that runs it, a result record that records its last verdict, and an explicit statement of what it is not allowed to claim. As the spine grows, those four attachments drift out of step one component at a time, and the drift is silent. A new component can be accepted into the runtime while its standard file, registry row, or result record ref is never added. Nothing breaks; the gap just sits there until a reader trusts the spine and finds a hole. This component answers a single question: does every accepted component still\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The public diagnostics bundle is source-open as evidence about refs, policies, runtime contracts, and result records. It may expose standards inventory rows, component runtime contract rows, diagnostic policy rows, sign-off result record refs, fixture refs, bundle refs, secret-exclusion scan verdicts, and public runtime refs. It must not inline private source bodies, model-output data bodies, source notes, account or browser material, account secret-equivalent live-access material, launch-send state, or private source-root bodies. The positive result record evidence therefore stays at bodyinreceipt: false, realruntimereceipt: true, and syntheticreceiptstandin_allowed: false.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "standardsmetadiagnostics is a public consistency validator over three finite surfaces: a standards inventory, component runtime contracts, and diagnostic policy. The positive path either reads those exported JSON inputs or projects them from the live public registry, then requires the accepted-component list, the standard rows, the runtime-contract rows, and the result record refs to agree on the same component set. This is a graph-closure check, not a narrative audit: an accepted component without a standard ref, registry-backed standard row, runtime step, validator command, or result record ref becomes a structured finding. The mechanism has four guarded stages: run loads standardsinvento\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Evidence/accounting: core/papermodulecapsules.json::papermodules[29:papermodule.standardsmetadiagnostics] is the JSON authority row. It names the component and mechanism subjects, the resolved code locus src/microcosmcore/components/standardsmeta_diagnostics.py, and the projection-only scope limit. papermodules/standardsmetadiagnostics.json::papermodulepayload.sourceauthority is jsoncapsule; generatedprojections.mermaid.status is availablefromcapsuleedges; generatedprojections.atlas_card.status is linkedfromcapsule_edges; relationships.edges currently has 11 edges. components/standardsmetadiagnostics.json::organpayload.sourceregistry_row records status: acceptedcurrentauthority, the validat\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with the JSON Bundle Binding to identify the source record and the projection-only scope limit before treating the diagnostic as evidence. Use Structured Lattice Bindings to understand which wiring is resolved and which dependencies remain pending. Pending dependencies are honest residuals, not hidden failures. Use Validation Result record Path for reproducibility: focused pytest exercises the diagnostic policy and negative cases; the corpus check verifies paper-module parity. Treat secret-exclusion and public-runtime refs as result record evidence about public projection consistency. They do not mutate standards, authorize launch, expose private source material, or prove whole-system\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "tests/teststandardsmetadiagnostics.py::teststandardsmetadiagnosticsobservesnegative_cases is the fixture consumer. It proves that the positive public inputs cover the accepted component set and that the five expected negative cases surface their named error codes. tests/teststandardsmetadiagnostics.py::teststandardsmetadiagnosticsbundlevalidatesruntimeshape is the exported-bundle consumer. It checks the bundle id, covered component set, source-module manifest status, source-open body-import counts, bodyinreceipt: false, and the false scope limit flags. tests/teststandardsmetadiagnostics.py::teststandardsmetadiagnosticsrejectssourcemoduledigest_mismatch, ::teststandardsmetadiagnosticsrejects\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module can claim that public standards inventory, runtime contracts, accepted-component refs, result record refs, diagnostic policy, and secret-exclusion checks are consistently projected into a reader-facing diagnostics result record. It cannot claim standards-registry mutation authority, provider authority, launch authority, public sharing decision, private source export, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in schema- and contract-validation practice rather than in a claim that diagnostics create authority. JSON Schema treats a schema as a machine-readable vocabulary for validating structured JSON data, and OpenAPI uses interface descriptions so consumers can understand an API without reading source code or observing traffic. The component imports that pattern into Microcosm's launch boundary: standards, adapter contracts, result records, and scope limits are checked as public projections, while the diagnostic remains bounded evidence about consistency rather than a new source of truth. Prior-art anchors: JSON Schema validation and structured-data constraints: https:\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is a projection-only diagnostic. It does not become source authority for core/standards_registry.json, change source files surfaces, expose private source material, authorize providers, include launch operations, or prove whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.standards_meta_diagnostics.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"paper_module bundle: subjects + code_loci + scope limit\"] inventory[\"standards_inventory.json\"] contracts[\"organ_runtime_contracts.json\"] policy[\"diagnostic_policy.json\"] negatives[\"negative fixtures: missing standard, unmapped component, missing result record, overclaim, private source\"] runtime[\"standards_meta_diagnostics.run / run_diagnostics_bundle\"] scan[\"secret_exclusion_scan + public_runtime_refs\"] result record[\"sign-off result record: counts, error codes, scope boundary\"] projections[\"generated navigation projections: mermaid + atlas card\"] bundle --> projections inventory --> runtime contracts --> runtime policy --> runtime negatives --> runtime runtime --> scan scan --> result record runtime --> result record",
       "source_hash": "sha256:a4a84cba972577673380f486135e1e877d7bf28cf07b90095ec22a2c74b06153",
       "html_url": "docs/paper-modules.html#paper-module-standards-meta-diagnostics-diagram-1",
       "html_anchor": "paper-module-standards-meta-diagnostics-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/standards_meta_diagnostics.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 3,
       "links": [
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "standards_meta_diagnostics",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Standards Meta Diagnostics",
         "url": "components.html#component-standards_meta_diagnostics"
        },
        {
         "id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public standards meta diagnostics",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-7",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Track known unknowns without claiming the unknown is mapped",
         "url": "doctrine.html#dcard-p-7"
        },
        {
         "id": "P-13",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Apply the same floor to meta artifacts",
         "url": "doctrine.html#dcard-p-13"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.standards_meta_diagnostics_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "component-standard-runtime-result record coverage as projection-only evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/standards_meta_diagnostics.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14048
    },
    {
     "id": "paper_module.finance_forecast_evaluation_spine",
     "title": "Finance Forecast Evaluation Spine",
     "relative_href": "docs/paper-modules.html#paper-module-finance-forecast-evaluation-spine",
     "read_href": "docs/paper-modules.html#paper-module-finance-forecast-evaluation-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-finance-forecast-evaluation-spine",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Forecast-evaluation component: Diebold-Mariano / Hansen-SPA / stationary-bootstrap stats over synthetic fixtures with typed refusal discipline; no market authority.",
     "summary": "Runs admissible forecast-evaluation statistics (Diebold-Mariano loss-differential, Harvey-Leybourne-Newbold small-sample correction, Hansen SPA with recentering, Politis-Romano stationary bootstrap, Bartlett HAC long-run variance, purged/embargoed CV) over synthetic market-shaped fixtures and copied source bodies; refusal discipline returns typed refusals (horizon>=sample length, too-small samples, leakage-prone splits, missing SciPy, advice-shaped claims) instead of crashing; computed-statistic and refused-because-inadmissible are both valid validator outcomes.",
     "authority_ceiling": "Synthetic market-shaped fixtures only; not investment or trading decisions, no live market data, no track record or performance claim, mutates no optimizer, SciPy absence is a typed HLN refusal.",
     "abstract": "Forecast-evaluation component: Diebold-Mariano / Hansen-SPA / stationary-bootstrap stats over synthetic fixtures with typed refusal discipline; no market authority.",
     "teleology": {
      "section_id": "",
      "text": "Forecast-evaluation component: Diebold-Mariano / Hansen-SPA / stationary-bootstrap stats over synthetic fixtures with typed refusal discipline; no market authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`finance_forecast_evaluation_spine` is a Crown Jewel import component with real runnable system and a strict public scope limit. It consumes synthetic public fixtures, copied source source bodies, and source manifests that verify sha256 digests, line counts, required anchors, secret-exclusion status, and result record body omission.\n\n###### Purpose\n\nComparing two forecasting models is harder than it looks. A lower average loss does not establish that one model genuinely predicts better, because losses are autocorrelated, samples are short, and a careless split can let a model peek at the answer. This component exists to carry the statistical machinery that economists use to answer that question carefully, and to do so without ever claiming the machinery has been pointed at a real market.\n\nThe single question it answers is narrow: given two paired loss series over a synthetic fixture, can the difference in predictive accuracy be called significant under an admissible test, or must the test refuse? It computes the Diebold-Mariano loss-differential statistic with a Bartlett HAC long-run variance, the Harvey-Leybourne-Newbold small-sample correction, Hansen's test for superior predictive ability with recentering, a model confidence set, and a Politis-Romano stationary bootstrap.\n\nFailure is handled explicitly. The Harvey-Leybourne-Newbold correction returns its computed statistic, but when SciPy is absent it refuses the p-value with a typed reason rather than fabricating one. The same discipline rejects a horizon that reaches the sample length, a sample too small to estimate anything, a time split that lets the evaluation date sit at or after the event window, and any policy flag that smuggles in advice or a track-record claim. A refusal is recorded as a first-class validator outcome, not an error: \"we declined to answer\" is itself a valid result.\n\nThe guards run before the statistics. If a boundary policy or a leakage check fails, the result record is blocked before any statistics subprocess starts, so an inadmissible request never produces a number that could be misread as a result.\n\nWhat it proves: synthetic fixture forecast-evaluation statistics only; no investment-related actions, live market data, track record, or performance claim.\n\nHow to run it:\n\n```text\nmicrocosm finance-forecast-evaluation-spine run --input fixtures/first_wave/finance_forecast_evaluation_spine/input --out receipts/first_wave/finance_forecast_evaluation_spine\n```\n\nRuntime bundle route:\n\n```text\npython -m microcosm_core.organs.finance_forecast_evaluation_spine run-finance-forecast-bundle --input examples/finance_forecast_evaluation_spine/exported_finance_eval_bundle --out receipts/runtime_shell/demo_project/organs/finance_forecast_evaluation_spine\n```\n\nNegative cases covered by the fixture manifest: finance_hln_dependency_refusal, finance_leakage_lookahead_split, finance_no_advice_overclaim.\n\nSource provenance is anchored by `examples/finance_forecast_evaluation_spine/exported_finance_eval_bundle/source_module_manifest.json` and result records carry refs, digests, counts, verdicts, and scope boundaries only.\n\n###### Shape\n\nSource refs\n\nRunner `finance_forecast_evaluation_spine.run` Diagram source\n\n```text\nflowchart TD Fixture[\"Synthetic fixture inputs family_loss_matrix, paired_loss_series, finance_boundary_policy, projection_protocol\"] Source[\"Copied finance modules plus source manifest digests\"] Runner[\"finance_forecast_evaluation_spine.run\"] Guards[\"Guards run first policy no-advice flags, lookahead-split leakage check\"] Blocked[\"Blocked result record statistics subprocess never starts\"] Branch{\"Admissible and exported bundle?\"} Subprocess[\"Statistics subprocess DM/HAC, Hansen SPA, MCS, stationary bootstrap, HLN refusal\"] Standalone[\"Standalone statistics contract no live source-root subprocess\"] Result record[\"Result records refs, hashes, counts, verdicts, scope boundaries; body_in_receipt false\"] Fixture --> Runner Source --> Runner Runner --> Guards Guards -->|\"boundary fails\"| Blocked Guards -->|\"boundary passes\"| Branch Branch -->|\"first-wave fixture\"| Subprocess Branch -->|\"exported bundle\"| Standalone Subprocess --> Result record Standalone --> Result record Blocked --> Result record\n```\n\n###### Technical Mechanism\n\nThe module is a deterministic forecast-evaluation harness around `CrownJewelSpec`, not a finance product. The spec fixes four required fixture inputs (`family_loss_matrix.json`, `paired_loss_series.json`, `finance_boundary_policy.json`, and `projection_protocol.json`), names the three required negative cases, binds the source manifest, and restricts the source-open import to required anchors in `model_selection_stats.py`, `spa_statistics.py`, `loss_differentials.py`, and `family_loss_matrix.py`.\n\nAt runtime, `run` delegates to `run_crown_jewel_organ` with `evaluate` and `evaluate_negative_case`. `evaluate` loads the synthetic loss matrix, paired loss series, and boundary policy, then calls `_evaluate_payloads`. That function first enforces the policy and lookahead-split guards; if either boundary fails, it returns a blocked result record before any statistics subprocess can run. Only after those guards pass does it run the copied statistics modules or, for the exported bundle path, use `_standalone_exported_statistics_contract` so the standalone public bundle does not depend on a live source-root subprocess.\n\nThe statistical witness is therefore deliberately narrow: Reality Check, Hansen-SPA, MCS, Diebold-Mariano/HAC, stationary bootstrap, and the HLN refusal are result record fields over the synthetic fixture. The same mechanism treats `finance_hln_dependency_refusal` as a typed negative case when SciPy support is absent, treats policy overclaims as `FINANCE_NO_ADVICE_OVERCLAIM`, treats temporal leakage as `FINANCE_LOOKAHEAD_SPLIT_FORBIDDEN`, and keeps copied source bodies out of result records with `body_in_receipt: false`.\n\n###### Reader Evidence Routing\n\nRead the positive fixture as a small statistical witness, not as a market result. The current result record has `status: pass`, `sample_size: 40`, `candidate_count: 3`, `reality_check.status: computed_bootstrap`, `spa.status: computed_bootstrap`, `mcs.implemented: true`, `paired_loss.diebold_mariano.status: computed_hac_normal_approximation`, and a five-replicate stationary-bootstrap witness. Those fields show that the component can exercise the copied forecast evaluation code paths on public synthetic data.\n\nRead the negative floor as equal evidence. The observed negative cases are `finance_hln_dependency_refusal`, `finance_leakage_lookahead_split`, and `finance_no_advice_overclaim`, with stable error codes `FINANCE_HLN_TYPED_REFUSAL_REQUIRED`, `FINANCE_LOOKAHEAD_SPLIT_FORBIDDEN`, and `FINANCE_NO_ADVICE_OVERCLAIM`. The HLN case refuses because SciPy is unavailable for the t-distribution; that is the intended scope limit, not a missing p-value to fill in by hand.\n\nRead source-open evidence through the manifest, not through result records. The source bundle carries 13 copied finance modules; result records carry references, hashes, counts, verdicts, and scope boundaries, and keep `body_in_receipt: false`. The local claim therefore stays at \"synthetic fixture forecast-evaluation statistics and typed refusals.\" It does not become investment-related actions, live-market data, a track record, performance proof, optimizer authorization, or launch-scope decision.\n\n###### Forecast-Evaluation Discipline\n\nThis component is evidence that the Microcosm can carry professional forecast evaluation logic without pretending to carry market authority. The admissible statistics include Diebold-Mariano loss-differential testing, the Harvey-Leybourne-Newbold small-sample correction, Hansen's SPA test, a Politis-Romano stationary bootstrap, Bartlett HAC long-run variance, and purged/embargoed cross-validation in the Lopez de Prado style.\n\nThe important doctrine is refusal discipline. Horizons greater than or equal to sample length, samples too small to estimate a statistic, leakage-prone splits, missing SciPy support, and advice-shaped claims must return typed refusals instead of crashes or meaningless numbers. Hansen-style recentering of poor or irrelevant alternatives is part of the SPA contract because it is the boundary between a useful superior-predictive-ability test and White Reality Check style over-penalization.\n\nResult records should therefore distinguish \"computed statistic\" from \"refused because inadmissible.\" Both are successful validator outcomes when the fixture asked for that behavior.\n\n###### Named Proof Consumers\n- Runtime fixture consumer: `finance_forecast_evaluation_spine.run` over `fixtures/first_wave/finance_forecast_evaluation_spine/input` must produce `status: pass`, the three observed semantic negative cases, false advice/live-data/performance authority flags, and metadata-only source-manifest result record material.\n- Exported-bundle consumer: `run-finance-forecast-bundle` over `examples/finance_forecast_evaluation_spine/exported_finance_eval_bundle` must validate the 13 copied finance modules by digest and use the standalone statistics contract rather than a live source subprocess.\n- Focused pytest consumer: `tests/test_finance_forecast_evaluation_spine.py` must keep the positive statistical fixture, no-advice overclaim, live-market overclaim, lookahead split, semantic-negative-case, standalone-bundle, and digest-mismatch tests green.\n- Corpus consumer: `scripts/build_doctrine_projection.py --check-paper-module-corpus` must keep the 98-module Microcosm paper-module corpus valid without hand-editing the generated JSON instance.\n- Scope limit consumer: any public or dissemination copy must preserve the local ceiling that this is synthetic fixture forecast-evaluation evidence, not investment-related actions, live data, performance proof, optimizer authorization, or launch-scope decision.\n\n###### Prior Art Grounding\n\nThis component is grounded in forecast-evaluation statistics rather than trading systems. The core anchors are the [Diebold-Mariano test for comparing predictive accuracy](https://www.nber.org/papers/t0169), the Harvey-Leybourne-Newbold small-sample correction for prediction-error tests ( [DOI reference](https://doi.org/10.1016/S0169-2070%2896%2900719-4)), Hansen's [test for superior predictive ability](https://ideas.repec.org/a/bes/jnlbes/v23y2005p365-380.html), and proper-scoring-rule work such as [Gneiting and Raftery](https://sites.stat.washington.edu/people/raftery/Research/PDF/Gneiting2007jasa.pdf). The purged/embargoed split discipline also follows the financial ML concern that temporal leakage can make backtests look stronger than they are.\n\nMicrocosm borrows the professional evaluation posture: compute admissible statistics when the fixture supports them, return typed refusals when it does not, and keep evaluation separate from advice, live market data, or performance claims.\n\n###### Validation Result record Path\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_finance_forecast_evaluation_spine.py -q --basetemp=/tmp/microcosm_finance_forecast_evaluation_spine_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nFinance forecast evaluation spine proves only synthetic market-shaped forecast-evaluation fixture behavior, copied source manifest integrity, metadata-only result records, admissible statistic computation, and typed refusals for inadmissible finance claims. A diagram view and atlas navigation entry are generated for this module, but those navigation projections do not expand the proof. This module is not investment or trading decisions, uses no live market data, proves no track record or performance claim, mutates no optimizer, certifies no trading strategy, and treats SciPy absence as a typed HLN refusal rather than a hidden statistical success.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe generated JSON instance resolves six bundle-derived edges for this module: it explains component `finance_forecast_evaluation_spine`, explains mechanism `mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine`, is governed by concept `concept.research_and_science_replay_evidence_bundle`, is governed by principle `P-8`, abides by `AX-7`, and cites the code locus `src/microcosm_core/organs/finance_forecast_evaluation_spine.py`. Those edges come from `core/paper_module_capsules.json::paper_modules[30:paper_module.finance_forecast_evaluation_spine]` and the generated structured source record, not from this Markdown prose.\n\nMechanically, `P-8` and `AX-7` show up as refusal discipline: an admissible statistic can pass, but advice-shaped policy flags, live-market authority, leakage-prone time splits, source digest mismatch, and fake HLN p-values must block. The concept edge keeps the module in the research/science replay-evidence family, where proof value is a reproducible fixture and source-manifest witness rather than a claim about markets.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13095,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Comparing two forecasting models is harder than it looks. A lower average loss does not establish that one model genuinely predicts better, because losses are autocorrelated, samples are short, and a careless split can let a model peek at the answer. This component exists to carry the statistical machinery that economists use to answer that question carefully, and to do so without ever claiming the machinery has been pointed at a real market. The single question it answers is narrow: given two paired loss series over a synthetic fixture, can the difference in predictive accuracy be called significant under an admissible test, or must the test refuse? It computes the Diebold-Mariano loss-dif\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The module is a deterministic forecast-evaluation harness around CrownJewelSpec, not a finance product. The spec fixes four required fixture inputs (familylossmatrix.json, pairedlossseries.json, financeboundarypolicy.json, and projection_protocol.json), names the three required negative cases, binds the source manifest, and restricts the source-open import to required anchors in modelselectionstats.py, spastatistics.py, lossdifferentials.py, and familylossmatrix.py. At runtime, run delegates to runcrownjewel_organ with evaluate and evaluatenegativecase. evaluate loads the synthetic loss matrix, paired loss series, and boundary policy, then calls evaluatepayloads. That function first enforce\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The generated JSON instance resolves six bundle-derived edges for this module: it explains component financeforecastevaluation_spine, explains mechanism mechanism.financeforecastevaluationspine.validatespublicfinanceforecastevaluationspine, is governed by concept concept.researchandsciencereplayevidence_bundle, is governed by principle P-8, abides by AX-7, and cites the code locus src/microcosmcore/components/financeforecastevaluationspine.py. Those edges come from core/papermodulecapsules.json::papermodules[30:papermodule.financeforecastevaluation_spine] and the generated structured source record, not from this Markdown prose. Mechanically, P-8 and AX-7 show up as refusal discipline: an ad\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read the positive fixture as a small statistical witness, not as a market result. The current result record has status: pass, samplesize: 40, candidatecount: 3, realitycheck.status: computedbootstrap, spa.status: computed_bootstrap, mcs.implemented: true, `pairedloss.dieboldmariano.status: computedhacnormal_approximation`, and a five-replicate stationary-bootstrap witness. Those fields show that the component can exercise the copied forecast evaluation code paths on public synthetic data. Read the negative floor as equal evidence. The observed negative cases are financehlndependencyrefusal, financeleakagelookaheadsplit, and financenoadvice_overclaim, with stable error codes FINANCEHLNTYPEDR\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "forecast-evaluation-discipline",
       "title": "Forecast-Evaluation Discipline",
       "level": 2,
       "excerpt": "This component is evidence that the Microcosm can carry professional forecast evaluation logic without pretending to carry market authority. The admissible statistics include Diebold-Mariano loss-differential testing, the Harvey-Leybourne-Newbold small-sample correction, Hansen's SPA test, a Politis-Romano stationary bootstrap, Bartlett HAC long-run variance, and purged/embargoed cross-validation in the Lopez de Prado style. The important doctrine is refusal discipline. Horizons greater than or equal to sample length, samples too small to estimate a statistic, leakage-prone splits, missing SciPy support, and advice-shaped claims must return typed refusals instead of crashes or meaningless n\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "Runtime fixture consumer: financeforecastevaluation_spine.run over fixtures/firstwave/financeforecastevaluationspine/input must produce status: pass, the three observed semantic negative cases, false advice/live-data/performance authority flags, and metadata-only source-manifest result record material. Exported-bundle consumer: run-finance-forecast-bundle over examples/financeforecastevaluationspine/exportedfinanceevalbundle must validate the 13 copied finance modules by digest and use the standalone statistics contract rather than a live source subprocess. Focused pytest consumer: tests/testfinanceforecastevaluationspine.py must keep the positive statistical fixture, no-advice overclaim, l\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in forecast-evaluation statistics rather than trading systems. The core anchors are the Diebold-Mariano test for comparing predictive accuracy, the Harvey-Leybourne-Newbold small-sample correction for prediction-error tests (DOI reference), Hansen's test for superior predictive ability, and proper-scoring-rule work such as Gneiting and Raftery. The purged/embargoed split discipline also follows the financial ML concern that temporal leakage can make backtests look stronger than they are. Microcosm borrows the professional evaluation posture: compute admissible statistics when the fixture supports them, return typed refusals when it does not, and keep evaluation se\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "Finance forecast evaluation spine proves only synthetic market-shaped forecast-evaluation fixture behavior, copied source manifest integrity, metadata-only result records, admissible statistic computation, and typed refusals for inadmissible finance claims. A diagram view and atlas navigation entry are generated for this module, but those navigation projections do not expand the proof. This module is not investment or trading decisions, uses no live market data, proves no track record or performance claim, mutates no optimizer, certifies no trading strategy, and treats SciPy absence as a typed HLN refusal rather than a hidden statistical success.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.finance_forecast_evaluation_spine.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Fixture[\"Synthetic fixture inputs family_loss_matrix, paired_loss_series, finance_boundary_policy, projection_protocol\"] Source[\"Copied finance modules plus source manifest digests\"] Runner[\"finance_forecast_evaluation_spine.run\"] Guards[\"Guards run first policy no-advice flags, lookahead-split leakage check\"] Blocked[\"Blocked result record statistics subprocess never starts\"] Branch{\"Admissible and exported bundle?\"} Subprocess[\"Statistics subprocess DM/HAC, Hansen SPA, MCS, stationary bootstrap, HLN refusal\"] Standalone[\"Standalone statistics contract no live source-root subprocess\"] Result record[\"Result records refs, hashes, counts, verdicts, scope boundaries; body_in_receipt false\"] Fixture --> Runner Source --> Runner Runner --> Guards Guards -->|\"boundary fails\"| Blocked Guards -->|\"boundary passes\"| Branch Branch -->|\"first-wave fixture\"| Subprocess Branch -->|\"exported bundle\"| Standalone Subprocess --> Result record Standalone --> Result record Blocked --> Result record",
       "source_hash": "sha256:7ba378c16648cb18eae4bf9c2b5acb0b8163afb82614c795473c9e1eee3ad3c7",
       "html_url": "docs/paper-modules.html#paper-module-finance-forecast-evaluation-spine-diagram-1",
       "html_anchor": "paper-module-finance-forecast-evaluation-spine-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/finance_forecast_evaluation_spine.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Diebold-Mariano test for comparing predictive accuracy",
       "url": "https://www.nber.org/papers/t0169",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "DOI reference",
       "url": "https://doi.org/10.1016/S0169-2070%2896%2900719-4",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "test for superior predictive ability",
       "url": "https://ideas.repec.org/a/bes/jnlbes/v23y2005p365-380.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Gneiting and Raftery",
       "url": "https://sites.stat.washington.edu/people/raftery/Research/PDF/Gneiting2007jasa.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "finance_forecast_evaluation_spine",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Finance Forecast Evaluation Spine",
         "url": "components.html#component-finance_forecast_evaluation_spine"
        },
        {
         "id": "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public finance forecast evaluation spine",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 2,
       "links": [
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "concept.research_and_science_replay_evidence_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "research and science replay validators as reproducibility scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/finance_forecast_evaluation_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14223
    },
    {
     "id": "paper_module.engine_room_demo",
     "title": "Engine Room Demo",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-demo",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-demo",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-demo",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Composition component: verifies the 14 staged Engine Room jewel targets and their owned bundle surfaces through the public fixture chain; composition contract only.",
     "summary": "Wraps the bundles under microcosm_core.engine_room, verifies the 14 controller-selected jewel targets, checks each owned staged bundle surface (module source, fixture input, fixture manifest, paper module, standard, tests), executes the staged demo through the public fixture chain, and observes a negative fixture where an expected target is intentionally absent.",
     "authority_ceiling": "Validates the declared public composition contract only; not deployment posture, not private-system equivalence, not a frontier theorem-proving claim, not a complete security proof, not benchmark validation, not launch-scope decision.",
     "abstract": "Composition component: verifies the 14 staged Engine Room jewel targets and their owned bundle surfaces through the public fixture chain; composition contract only.",
     "teleology": {
      "section_id": "",
      "text": "Composition component: verifies the 14 staged Engine Room jewel targets and their owned bundle surfaces through the public fixture chain; composition contract only.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`engine_room_demo` is the accepted Microcosm composition component for the staged Engine Room set. It wraps the bundles under `microcosm_core.engine_room`, runs the composed demo/audit path, and writes first-wave result records without promoting fixture rows into private-system or launch-scope decision.\n\n###### Purpose\n\nThe Engine Room set is ten separate bundles: a Lean proof-search lab, a metabolism runtime, command singleflight, a generated-projection drift gate, a derived-fact engine, a public-projection leak gate, an egress self-compliance gate, a navigation-fitness benchmark, a bridge-campaign DAG, and an reference knowledge router. Each bundle has its own fixture and result record. This component exists so that a reader does not have to trust ten claims separately. It answers one question: do the ten bundles together cover the fourteen targets the controller asked for, and does each one still own its full surface and run.\n\nA bundle \"owns its surface\" only when six files exist for it: module source, fixture input, fixture manifest, paper module, standard, and test. The audit checks all six per bundle, runs each fixture through its declared evaluator, and unions the targets the bundles actually declare against the fourteen the controller expected. A passing run means the set is complete and every fixture executed, not that any single bundle is finished or correct.\n\nThe design choice worth noting is in the negative case. Rather than compare against a frozen answer key, the negative fixture recomputes the live set of covered targets and fails only when the fixture names a target that is genuinely outside it. That keeps the refusal honest as the bundle set grows: the test cannot drift into agreement with a stale list, because there is no stored list to agree with.\n\nA second deliberate boundary is that the runner reads the shared component registry, sign-off file, and atlas, but never writes to them. It reports whether the composition component is integrated into those shared surfaces as a separate visibility line, and always records `shared_registry_mutated: false`. Composition coverage and shared-registry integration are kept as two distinct facts, so a green demo cannot quietly imply registry authority it does not hold.\n\n###### What It Runs\n- Verifies the 14 Engine Room jewel targets selected by the controller prompt.\n- Checks the owned staged bundle surfaces: module source, fixture input, fixture manifest, paper module, standard, and tests.\n- Executes the staged bundle demo through the public fixture chain.\n- Observes a negative fixture where an expected target is intentionally absent.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR A[\"Engine Room fixture cases\"] --> B[\"Accepted component wrapper\"] B --> C[\"Controller coverage audit\"] C --> D[\"10 staged bundle evaluators\"] D --> E[\"14 covered jewel targets\"] C --> F[\"Shared surface integration check\"] B --> G[\"Result, board, validation result record\"] G --> H[\"Sign-off result record\"] A --> I[\"Missing-target negative case\"] I --> C\n```\n\nThe shape is a composition proof over declared public bundles. The wrapper asks the staged Engine Room runner to verify target coverage, surface presence, fixture execution, shared-surface visibility, and the missing-target negative case. It writes public result records and an sign-off result record without exporting private source run state or turning the staged demo into launch-scope decision.\n\n###### Technical Mechanism\n\n`src/microcosm_core/organs/engine_room_demo.py` is a result record-writing wrapper around `src/microcosm_core/engine_room/demo.py`. The wrapper loads one or more fixture cases, calls `_evaluate_case` for each case, and writes four metadata-only artifacts: result, board, validation result record, and optional sign-off result record. The positive case delegates to `audit_controller_coverage`; the negative case does not compare against a static answer key, but recomputes the actual staged target set and fails only when the fixture names a target outside that set.\n\n`audit_controller_coverage` is the mechanism that makes the composition claim specific. It enumerates the ten `CAPSULES`, unions their declared jewel targets against `EXPECTED_JEWEL_TARGETS`, checks each bundle's owned source, fixture, manifest, paper module, standard, and test surface, optionally runs the staged bundle exercises through `run_demo`, and reads registry, sign-off, and atlas ids only as visibility evidence. The resulting result record distinguishes staged bundle completion from shared-registry integration and always reports `shared_registry_mutated: false`.\n\n`run_demo` is the execution spine below the audit. It imports each staged bundle module, calls the declared evaluator (`evaluate_fixture_dir` or `validate_fixture_dir`), records compact per-bundle status, and summarizes the covered jewel targets. A pass therefore means the selected public fixture chain ran for the declared bundle set and covered the expected target lattice; it does not mean the Engine Room set is deployment-posture, privately equivalent, benchmark-complete, or launch-approved.\n\n###### Governing Doctrine Relations\n\nThe generated structured source record binds this page to `concept.import_projection_and_drift_control_bundle`, `mechanism.engine_room_demo.validates_public_engine_room_demo`, and three adjacent Engine Room mechanisms for projection leakage, generated-projection drift, and command singleflight. Its governing principle refs are `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-8`, `P-9`, `P-12`, and `P-15`; its axiom refs are `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, and `AX-11`. In this module those refs all converge on one rule: composition evidence must be routed through explicit source, fixture, result record, and projection boundaries before it can support a reader claim.\n\nThe ten dependency modules are not decorative neighbors. They are the actual staged Engine Room bundle families consumed by the demo runner: Lean/proof-search, metabolism runtime, command singleflight, generated projection drift, derived facts, public projection leak checks, egress self-compliance, navigation fitness, bridge campaign DAGs, and reference knowledge routing. The bundle edge set is therefore a mechanism lattice over those bounded components, not an invitation to generalize beyond their result records.\n\n###### Named Proof Consumers\n- Fixture wrapper consumer: PYTHONPATH=src ../repo-python -m microcosm_core.components.engine_room_demo run --input fixtures/first_wave/engine_room_demo/input --out /tmp/microcosm-engine-room-demo/fixture --sign-off-out /tmp/microcosm-engine-room-demo/sign-off.json --json consumes `build_result`, the positive controller-audit fixture, the semantic missing-target negative case, result record writing, metadata-only sign-off output, and the module scope limit.\n- Controller audit consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.engine_room.demo audit --root . --json` consumes the ten-bundle inventory, 14-target coverage set, staged surface checks, shared-surface visibility readback, and the no-shared-mutation boundary.\n- Staged bundle execution consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.engine_room.demo run --root . --json` consumes each public bundle evaluator and proves the composition runner can execute the declared Engine Room fixture chain without touching shared registry, sign-off, atlas, or generated projection surfaces.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_engine_room_demo.py tests/test_engine_room_demo_organ.py -q` pins the bundle inventory, CLI JSON output, controller audit, semantic negative case, result record writer, public-relative fixture refs, and private-path redaction floor.\n- It is a read-only result record for the Markdown slice, not permission to hand-edit generated projections.\n\n###### Reader Evidence Routing\n\nRead `expected_jewel_count: 14` and `covered_jewel_count: 14` as controller target coverage for the staged Engine Room set. Read `capsule_count: 10` and `passed_capsule_count: 10` as successful execution of the selected public fixture evaluators.\n\nRead `shared_registry_mutated: false` as an authority boundary: the staged runner observes registry, sign-off, and atlas visibility, but it does not mutate those shared surfaces. Read `shared_integration_status` as a visibility result record, not as permission to alter the shared registry from this page.\n\nRead `body_in_receipt: false` as the public-copy boundary. Result records can expose counts, target ids, fixture refs, stable error codes, scope limits, and omission-safe summaries; they must not copy private source run state, model-output data, raw operator threads, browser UI material, account secrets, or cloned third-party body text.\n\n###### Prior Art Grounding\n\nThe component borrows from integration-testing and CI composition practice: multiple component checks are assembled into one public demo/audit path, negative fixtures prove refusal behavior, and result records summarize execution without upgrading fixture evidence into launch claims. Useful anchors include:\n- IBM's [integration testing](https://www.ibm.com/think/topics/integration-testing) overview, which frames testing around whether composed modules interact as intended.\n- [pytest fixtures](https://docs.pytest.org/en/stable/reference/fixtures.html), as a common pattern for public synthetic setup and reusable test inputs.\n- [GitHub Actions](https://github.com/features/actions), as a widely used workflow surface for composing build, test, and publish stages with explicit status.\n\nMicrocosm borrows the composed-demo and audit-pipeline shape, but keeps the claim at declared public composition only. It is not deployment posture, private-system equivalence, benchmark validation, a security proof, or launch-scope decision.\n\n###### Public Command\n\nThe CLI alias is:\n\nThe fixture manifest names one positive case (`positive_controller_audit`) and one negative case (`missing_expected_target_negative`) that expects `ENGINE_ROOM_EXPECTED_TARGET_MISSING`. The expected component result is `status: pass`, `expected_jewel_count: 14`, `positive_case_count: 1`, `negative_case_count: 1`, and `observed_negative_case_count: 1`.\n\nThe staged composition runner can also be inspected without writing sign-off result records:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.demo audit --root . --json\nPYTHONPATH=src python3 -m microcosm_core.engine_room.demo run --root . --json\n```\n\nFocused verification from the source repo root:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_demo.py tests/test_engine_room_demo_organ.py -q --basetemp /tmp/microcosm-engine-room-demo\ncd microcosm-substrate && PYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Validation Result record Path\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_demo.py tests/test_engine_room_demo_organ.py -q --basetemp=/tmp/microcosm_engine_room_demo_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component validates the declared public composition contract only. It is not deployment posture, not private-system equivalence, not a frontier theorem-proving claim, not a complete security proof, not benchmark validation, and not launch-scope decision.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 11450,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The Engine Room set is ten separate bundles: a Lean proof-search lab, a metabolism runtime, command singleflight, a generated-projection drift gate, a derived-fact engine, a public-projection leak gate, an egress self-compliance gate, a navigation-fitness benchmark, a bridge-campaign DAG, and an reference knowledge router. Each bundle has its own fixture and result record. This component exists so that a reader does not have to trust ten claims separately. It answers one question: do the ten bundles together cover the fourteen targets the controller asked for, and does each one still own its full surface and run. A bundle \"owns its surface\" only when six files exist for it: module source, f\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-runs",
       "title": "What It Runs",
       "level": 2,
       "excerpt": "Verifies the 14 Engine Room jewel targets selected by the controller prompt. Checks the owned staged bundle surfaces: module source, fixture input, fixture manifest, paper module, standard, and tests. Executes the staged bundle demo through the public fixture chain. Observes a negative fixture where an expected target is intentionally absent.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is a composition proof over declared public bundles. The wrapper asks the staged Engine Room runner to verify target coverage, surface presence, fixture execution, shared-surface visibility, and the missing-target negative case. It writes public result records and an sign-off result record without exporting private source run state or turning the staged demo into launch-scope decision.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "src/microcosmcore/components/engineroom_demo.py is a result record-writing wrapper around src/microcosmcore/engineroom/demo.py. The wrapper loads one or more fixture cases, calls evaluatecase for each case, and writes four metadata-only artifacts: result, board, validation result record, and optional sign-off result record. The positive case delegates to auditcontrollercoverage; the negative case does not compare against a static answer key, but recomputes the actual staged target set and fails only when the fixture names a target outside that set. auditcontrollercoverage is the mechanism that makes the composition claim specific. It enumerates the ten Bundles, unions their declared jewel t\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-doctrine-relations",
       "title": "Governing Doctrine Relations",
       "level": 2,
       "excerpt": "The generated structured source record binds this page to concept.importprojectionanddriftcontrol_bundle, mechanism.engineroomdemo.validatespublicengineroomdemo, and three adjacent Engine Room mechanisms for projection leakage, generated-projection drift, and command singleflight. Its governing principle refs are P-1, P-2, P-3, P-5, P-6, P-8, P-9, P-12, and P-15; its axiom refs are AX-1, AX-4, AX-5, AX-7, AX-8, and AX-11. In this module those refs all converge on one rule: composition evidence must be routed through explicit source, fixture, result record, and projection boundaries before it can support a reader claim. The ten dependency modules are not decorative neighbors. They are the ac\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "Fixture wrapper consumer: PYTHONPATH=src ../repo-python -m microcosmcore.components.engineroomdemo run --input fixtures/firstwave/engineroomdemo/input --out /tmp/microcosm-engine-room-demo/fixture --sign-off-out /tmp/microcosm-engine-room-demo/sign-off.json --json consumes build_result, the positive controller-audit fixture, the semantic missing-target negative case, result record writing, metadata-only sign-off output, and the module scope limit. Controller audit consumer: PYTHONPATH=src ../repo-python -m microcosmcore.engineroom.demo audit --root . --json consumes the ten-bundle inventory, 14-target coverage set, staged surface checks, shared-surface visibility readback, and the no-shared\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component validates the declared public composition contract only. It is not deployment posture, not private-system equivalence, not a frontier theorem-proving claim, not a complete security proof, not benchmark validation, and not launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read expectedjewelcount: 14 and coveredjewelcount: 14 as controller target coverage for the staged Engine Room set. Read capsule_count: 10 and passedcapsulecount: 10 as successful execution of the selected public fixture evaluators. Read sharedregistrymutated: false as an authority boundary: the staged runner observes registry, sign-off, and atlas visibility, but it does not mutate those shared surfaces. Read sharedintegrationstatus as a visibility result record, not as permission to alter the shared registry from this page. Read bodyinreceipt: false as the public-copy boundary. Result records can expose counts, target ids, fixture refs, stable error codes, scope limits, and omission-safe s\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows from integration-testing and CI composition practice: multiple component checks are assembled into one public demo/audit path, negative fixtures prove refusal behavior, and result records summarize execution without upgrading fixture evidence into launch claims. Useful anchors include: IBM's integration testing overview, which frames testing around whether composed modules interact as intended. pytest fixtures, as a common pattern for public synthetic setup and reusable test inputs. GitHub Actions, as a widely used workflow surface for composing build, test, and publish stages with explicit status. Microcosm borrows the composed-demo and audit-pipeline shape, but keeps\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-command",
       "title": "Public Command",
       "level": 2,
       "excerpt": "The CLI alias is: The fixture manifest names one positive case (positivecontrolleraudit) and one negative case (missingexpectedtarget_negative) that expects ENGINEROOMEXPECTEDTARGETMISSING. The expected component result is status: pass, expectedjewelcount: 14, positivecasecount: 1, negativecasecount: 1, and observednegativecase_count: 1. The staged composition runner can also be inspected without writing sign-off result records: Focused verification from the source repo root:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "result record or generated projection surfaces:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_demo.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR A[\"Engine Room fixture cases\"] --> B[\"Accepted component wrapper\"] B --> C[\"Controller coverage audit\"] C --> D[\"10 staged bundle evaluators\"] D --> E[\"14 covered jewel targets\"] C --> F[\"Shared surface integration check\"] B --> G[\"Result, board, validation result record\"] G --> H[\"Sign-off result record\"] A --> I[\"Missing-target negative case\"] I --> C",
       "source_hash": "sha256:cc34faf72753172c7c95afa5b8dbbf6a3c80b3ed69066510896b9eb05ff1d80d",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-demo-diagram-1",
       "html_anchor": "paper-module-engine-room-demo-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_demo.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "integration testing",
       "url": "https://www.ibm.com/think/topics/integration-testing",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "pytest fixtures",
       "url": "https://docs.pytest.org/en/stable/reference/fixtures.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "GitHub Actions",
       "url": "https://github.com/features/actions",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 10,
       "links": [
        {
         "id": "paper_module.engine_room_lean_proof_search_lab",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Lean Proof Search Lab",
         "url": "paper-modules.html#paper-module-engine-room-lean-proof-search-lab"
        },
        {
         "id": "paper_module.engine_room_metabolism_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Metabolism Runtime",
         "url": "paper-modules.html#paper-module-engine-room-metabolism-runtime"
        },
        {
         "id": "paper_module.engine_room_command_run_singleflight",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Command-Run Singleflight",
         "url": "paper-modules.html#paper-module-engine-room-command-run-singleflight"
        },
        {
         "id": "paper_module.engine_room_generated_projection_drift_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Generated Projection Drift Gate",
         "url": "paper-modules.html#paper-module-engine-room-generated-projection-drift-gate"
        },
        {
         "id": "paper_module.engine_room_derived_fact_provider_engine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Derived Fact Provider Engine",
         "url": "paper-modules.html#paper-module-engine-room-derived-fact-provider-engine"
        },
        {
         "id": "paper_module.engine_room_public_projection_leak_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Public Projection Leak Gate",
         "url": "paper-modules.html#paper-module-engine-room-public-projection-leak-gate"
        },
        {
         "id": "paper_module.engine_room_egress_self_compliance_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Egress Self-Compliance Gate",
         "url": "paper-modules.html#paper-module-engine-room-egress-self-compliance-gate"
        },
        {
         "id": "paper_module.engine_room_navigation_fitness_benchmark",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Navigation Fitness Benchmark",
         "url": "paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark"
        },
        {
         "id": "paper_module.engine_room_bridge_campaign_dag",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Bridge Campaign DAG",
         "url": "paper-modules.html#paper-module-engine-room-bridge-campaign-dag"
        },
        {
         "id": "paper_module.engine_room_annex_knowledge_router",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Reference Knowledge Router",
         "url": "paper-modules.html#paper-module-engine-room-annex-knowledge-router"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 10,
       "links": [
        {
         "id": "engine_room_demo",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Engine Room Demo",
         "url": "components.html#component-engine_room_demo"
        },
        {
         "id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public engine room demo",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
        },
        {
         "id": "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public projection leak gate",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate"
        },
        {
         "id": "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public generated projection drift gate",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate"
        },
        {
         "id": "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public command run singleflight",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight"
        },
        {
         "id": "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public reference knowledge router",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router"
        },
        {
         "id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public derived fact provider engine",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
        },
        {
         "id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public egress self compliance gate",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
        },
        {
         "id": "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public lean proof search lab",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab"
        },
        {
         "id": "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public navigation fitness benchmark",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_demo.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 12397
    },
    {
     "id": "paper_module.agent_memory_temporal_conflict_replay",
     "title": "Agent Memory Temporal-Conflict Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-memory-temporal-conflict-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-memory-temporal-conflict-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-memory-temporal-conflict-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Synthetic replay fixture for an agent-memory honesty contract: models scoped-preference episodes and checks temporal-conflict handling; no live memory product.",
     "summary": "Public Microcosm projection of an agent-memory honesty contract. Replays synthetic episodes (a scoped preference later contradicted) and validates temporal-conflict resolution, negative cases, non-public-state exclusion, and scope limits with metadata-only result records.",
     "authority_ceiling": "Synthetic replay fixture only; not a live memory product, private transcript export, source-authority claim, or launch claim.",
     "abstract": "Synthetic replay fixture for an agent-memory honesty contract: models scoped-preference episodes and checks temporal-conflict handling; no live memory product.",
     "teleology": {
      "section_id": "",
      "text": "Synthetic replay fixture for an agent-memory honesty contract: models scoped-preference episodes and checks temporal-conflict handling; no live memory product.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This module is the public Microcosm projection of an agent-memory honesty contract. It is a synthetic replay fixture, not a live memory product, private transcript export, source-authority claim, or launch claim.\n\nThe fixture models three public episodes: episode A records a scoped preference and a tool-result fact, episode B updates the preference scope and deletes the now-stale fact through conflict-edge and downgrade result records, and episode C replays the task with memory enabled and disabled. The replay is admitted only when ADD, UPDATE, DELETE, and NOOP decisions, metadata-only non-public refs, evidence handles, cold replay refs, and an answer-delta result record line up.\n\n###### Purpose\n\nThis component exists because an agent that remembers can quietly start trusting the wrong row. A user states a preference, the world changes, a later turn contradicts the earlier one, and a naive memory store keeps serving the stale fact as though it were still true. The single question this fixture answers is narrow and checkable: when one memory write supersedes an earlier one, does the record of that conflict actually hold up, or is it just a label?\n\nThe unusual choice is that the validator does not trust the labels it is given. A row can declare `decision = UPDATE`, attach a plausible-looking conflict-edge ref, and still be quarantined. In `_apply_conflict_semantic_recompute` the checker re-derives the conflict lineage from the raw fields it can verify: episode order, event timestamp, memory priority, and source-trust score. An UPDATE or DELETE that claims to supersede a prior write but is not timestamped after it, or that regresses priority or relies on lower-trust evidence than the write it replaces, is rejected. `_apply_temporal_order_checks` adds the coarser ordering rule that a conflict edge must land after some earlier accepted write and a replay must land after the conflict it depends on. The label is treated as a claim to be recomputed, not as authority.\n\nThe point of the paired memory-on and memory-off replay is the matching discipline on the output side. Memory is only allowed to take credit for a better answer through an explicit evidence handle and a cold-replay result record, so the gain is attributable rather than asserted. The interesting idea here is not a memory product. It is a small, reproducible accounting method for one specific failure: a stale row outranking newer evidence.\n\n###### Abstract\n\nAgent memory becomes dangerous when a stored row is allowed to outrank later evidence. This module turns that risk into a public, replayable checker: a synthetic three-episode fixture exercises memory ADD, UPDATE, DELETE, and NOOP decisions, then verifies that later conflicts can influence replay only through typed evidence handles, temporal conflict edges, stale-downgrade result records, paired memory-on/off cold replays, and a metadata-only answer-delta result record.\n\nThe technical contribution is not \"better memory\" and not a product claim. It is a narrow public accounting method for temporal memory conflict: memory rows are metadata under test, non-public refs are metadata-only, copied source-open source bodies are digest checked outside result records, and seven negative fixtures prove that common overclaim paths are rejected before any pass result record is written.\n\n###### Telos\n\nThe reader-facing aim is to make a hard memory-honesty boundary inspectable without exporting private memory bodies. A cold reader should be able to answer four questions from files and result records:\n1. Which memory decision was made, and under which public route ref?\n2. Which evidence handle, timestamp, priority, and source-trust score justified the row?\n3. Which prior row was conflicted or downgraded before later replay credit was allowed?\n4. Did the memory-enabled replay use admissible evidence while the paired memory-disabled replay remained available for answer-delta accounting?\n\nThe accepted result is a metadata-only memory-conflict result record. It supports only a synthetic fixture-level claim: this replay respected the declared temporal conflict contract under the checked inputs.\n\n###### Technical Mechanism\n\nThe runtime treats memory as public replay metadata, not as authority. The validator loads `projection_protocol.json`, `memory_policy.json`, `memory_episodes.json`, and `replay_observations.json`; the exported-bundle mode also loads `bundle_manifest.json`, `source_module_manifest.json`, and the copied source artifacts listed in the manifest. `_build_result` combines secret scanning, public trace construction, protocol validation, policy validation, episode validation, replay validation, source-module import validation, negative-case coverage, and the scope limit before a pass status is possible.\n\nThe mechanism has five reader-visible gates:\n1. `validate_projection_protocol` requires source refs, source pattern ids, projection result records, target refs, public runtime refs, target symbols, reimplemented mechanics, omissions, and an explicit denial that private thread bodies were copied.\n2. `validate_memory_policy` requires ADD, UPDATE, DELETE, and NOOP as the only admitted decision vocabulary and denies live-memory product, transcript export, source-authority, active-injection, provider-call, and launch-scope decision.\n3. `validate_memory_episodes` turns the five public event rows into accepted or quarantined memory metadata. Each row needs a route ref, decision, synthetic subject id, evidence handle, metadata-only private thread ref, body-export flag, source-authority flag, and active-injection flag. Positive replay credit requires all four decision classes, two conflict-edge refs, stale-downgrade refs, and a prompt-adoption observation ref.\n4. `validate_replay_observations` checks the paired memory-enabled and memory-disabled replay rows. Memory-enabled replay must cite public evidence handles that resolve against the accepted event rows, both replays must carry cold-replay result record refs, and the pair must share an answer-delta result record.\n5. `validate_source_module_imports` verifies the exported bundle's five copied source bodies by digest, material class, relation, and `body_in_receipt=false`. The card path reports only counts, digest refs, and result record paths; full memory rows, replay rows, source bodies, private transcript bodies, model-output data, and active injection text stay out of result records and public cards.\n\nThe mechanism is deliberately negative as well as constructive. Seven falsification fixtures prove that raw transcript export, private candidate auto-promotion, stale preference override, memory-as-source-authority, vector recall without evidence, final-answer-only memory credit, and active injection as authority are blocked. `build_public_memory_conflict_trace` gives the reader a seven-span public trace over the same rows, with five memory-event spans and two cold-replay spans, and audits coverage for evidence handles, metadata-only non-public refs, no non-public body export, cold-replay refs, answer-delta refs, and memory-enabled evidence.\n\n###### Temporal Conflict Mechanism\n\nThe central rule is evidence-before-memory-authority. A memory row may be accepted as replay metadata only after it satisfies the public policy fields: route ref, decision, synthetic subject id, event timestamp, memory priority, source-trust score, evidence handle, metadata-only private thread ref, and explicit false authority flags for body export, source authority, and active injection.\n\nUPDATE and DELETE decisions have an extra burden because they alter older memory. The validator recomputes the conflict lineage instead of trusting the label. `_apply_temporal_order_checks` verifies that conflict rows occur after the prior writes they touch, and that replay NOOP rows occur after conflict and downgrade evidence. `_apply_conflict_semantic_recompute` then checks the semantic shape of the mutation: the prior event must exist, the conflict group must be coherent, timestamps must advance, priority may not regress below the allowed floor, and source trust must stay above the declared floor.\n\nOnly after those checks pass can episode C receive replay credit. The memory-enabled replay must cite public evidence refs that resolve to accepted memory rows. The memory-disabled replay stays paired by replay group. The answer-delta result record accounts for the difference between those cold replays without reducing the evaluation to final-answer comparison alone.\n\n###### Real Sanitized Episode Evidence\n\nThe first-wave fixture is not merely shape-only synthetic data. Its `memory_episodes.json`, `memory_policy.json`, and `replay_observations.json` mirror the exported memory-temporal-conflict bundle, and the positive rows carry `sanitized_real_episode=true`, source artifact refs, source event refs, timestamps, memory priority, and source-trust scores. The source evidence posture declares `real_source_floor` as `copied_non_secret_macro_agent_memory_body_with_provenance`, `body_in_receipt=false`, and `private_bodies_exported=false`.\n\nThe exported bundle contributes a source-open body floor without turning bodies into result record material. `source_module_manifest.json` lists five copied source bodies across tool, doctrine, standard, and pattern material classes. The runtime verifies their digests and material classes, while public cards and result records expose only paths, counts, digest refs, omitted-material reasons, and the scope limit. That is the realness proof this paper can use: source provenance and result record-level recomputation, not private memory export.\n\n###### Perturbation and Rejection Contract\n\nThe fixture includes positive pass evidence and perturbation evidence. Focused tests mutate the bundle to ensure that the validator rejects timestamp incoherence, priority regression, source-trust regression, temporal order breakage, unverified conflict evidence, source-event drift, stale override without downgrade, downgrade result record field swaps, positive rows without evidence handles, unresolved replay refs, replay without memory evidence, and source-body tampering.\n\nThose rejection tests matter because temporal memory bugs often look plausible in isolation. A stale row with a nice label is still rejected if its conflict edge is absent or late; a memory-enabled replay is still rejected if its evidence refs do not resolve; a digest-mismatched body floor blocks the source import; and final-answer-only comparison remains a negative case rather than utility evidence.\n\n###### Named Proof Consumers\n- `python -m microcosm_core.organs.agent_memory_temporal_conflict_replay run` consumes the first-wave fixture, includes negative cases, and writes the result, board, validation, and sign-off result records.\n- `python -m microcosm_core.organs.agent_memory_temporal_conflict_replay run-memory-bundle` consumes the exported source-open bundle, digest-checks copied source bodies, and emits the public bundle validation result.\n- `tests/test_agent_memory_temporal_conflict_replay.py` consumes the same fixture and bundle to assert decision counts, conflict counts, stale downgrades, secret exclusion, public-relative result records, unresolved replay rejection, source-module digest verification, metadata-only result record cards, and seven-span trace construction.\n- A cold public reader consumes the source record, manifest, event rows, replay rows, source-artifact digests, and validation result records; that consumer can verify the synthetic honesty boundary but cannot infer quality of any live memory system or launch-scope decision.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD BodyFloor[\"Source-open body floor\"] -->|digest verified; body_in_receipt=false| Policy[\"Policy vocabulary\"] Policy -->|allows ADD / UPDATE / DELETE / NOOP only| EpisodeA[\"Episode A: ADD rows\"] EpisodeA -->|creates baseline memory metadata| EpisodeB[\"Episode B: UPDATE / DELETE rows\"] EpisodeB -->|touches older memory| ConflictGate[\"Temporal conflict gate\"] ConflictGate -->|requires conflict_edge_ref| DowngradeGate[\"Stale downgrade gate\"] DowngradeGate -->|requires stale_downgrade_ref| Recompute[\"Semantic recompute\"] Recompute -->|checks timestamp, priority, source trust| Enabled[\"Episode C: memory-enabled replay\"] Recompute -->|keeps paired baseline| Disabled[\"Episode C: memory-disabled replay\"] Enabled -->|uses evidence_handle_refs| Delta[\"Answer-delta result record\"] Disabled -->|no memory evidence used| Delta Delta -->|paired by replay_group_id| Trace[\"Public 7-span trace\"] Trace -->|covers events plus cold replays| Result record[\"metadata-only result record\"] Result record -->|omits private bodies and model-output data| Ceiling[\"Scope limit / scope boundary\"] Ceiling -->|denies live-memory and source-authority claims| Done[\"Fixture-level validation claim only\"]\n```\n\nThe page shape is a temporal-conflict replay, not a memory product surface. A reader starts with the JSON bundle, follows the source module manifest to five copied source bodies, then checks three synthetic episodes: initial memory writes, a later temporal conflict with stale downgrades, and paired cold replays with memory enabled and disabled. The accepted outcome is a result record that says the replay respected the memory-honesty boundary; it does not make memory recall into source authority.\n\n###### Failure Modes and Limitations\n\nThis module is intentionally narrow. It validates a public fixture and exported bundle against a declared temporal conflict contract; it does not measure live assistant memory quality, user satisfaction, recall coverage, provider behavior, or deployment posture. Passing result records show that checked rows, digests, traces, negative cases, and scope limits agreed for the fixture under test.\n\nKnown failure modes are treated as checker inputs rather than prose caveats: private transcript export, private candidate auto-promotion, stale preference override, memory-as-source-authority, vector recall without evidence, final-answer-only credit, active injection authority, missing source manifests, source-body digest drift, source-event drift, missing conflict edges, missing downgrade result records, and unresolved replay evidence. If a future module wants a stronger memory claim, it needs a new standard and new evidence; this module cannot promote itself beyond its fixture ceiling.\n\n###### Reader Evidence Routing\n- Bundle route: read `examples/agent_memory_temporal_conflict_replay/exported_memory_temporal_conflict_bundle/source_module_manifest.json` for `module_count=5`, `body_in_receipt=false`, material classes, digest refs, omitted-material reasons, and the explicit secret-exclusion boundary.\n- Event route: read `memory_episodes.json` for the five memory events: `episode_a_preference_add`, `episode_a_tool_fact_add`, `episode_b_preference_scope_update`, `episode_b_tool_fact_delete`, and `episode_c_replay_noop`.\n- Conflict route: verify that the UPDATE and DELETE events carry temporal conflict-edge refs and stale-downgrade refs before they can affect replay credit.\n- Replay route: read `replay_observations.json` for the paired `episode_c_memory_enabled_replay` and `episode_c_memory_disabled_replay` rows, evidence refs, cold replay result records, and answer-delta accounting.\n- Runtime route: run `tests/test_agent_memory_temporal_conflict_replay.py` when the reader needs recomputation evidence. The focused tests assert digest verification, public-relative result records, non-public-state exclusion, unresolved replay rejection, and the exported bundle runtime shape.\n\n###### Public Mechanics\n- Memory update claims require route refs, evidence handles, and explicit ADD/UPDATE/DELETE/NOOP decisions.\n- Updates and deletes that touch older memory require temporal conflict-edge refs plus stale-downgrade refs before memory can affect replay credit.\n- Private thread references are metadata-only; transcript bodies and private memory candidate bodies stay omitted.\n- Utility language requires paired memory-enabled and memory-disabled cold replay result records; final-answer-only comparison is not enough to support a memory utility claim.\n- Raw transcript export, private candidate auto-promotion, stale preference override, memory-as-source-authority, vector recall without evidence, final-answer-only memory credit, and active-injection authority are expected falsification fixtures.\n\n###### Prior Art Grounding\n\nThis component is grounded in agent-memory architectures and the newer literature on stale or poisoned memory. The constructive lineage includes [Generative Agents](https://arxiv.org/abs/2304.03442), which made observation, reflection, retrieval, and planning a concrete agent-memory pattern, and [MemGPT](https://arxiv.org/abs/2310.08560), which treats long-context behavior as a memory-management problem. The risk lineage includes [AgentPoison](https://arxiv.org/abs/2407.12784) and [STALE](https://arxiv.org/abs/2605.06527), which focus respectively on poisoned retrieval stores and whether agents update invalid memories when new evidence arrives.\n\nMicrocosm does not claim a live memory product. It borrows the useful accounting questions: which memory decision was made, which evidence handle justified it, which older row was conflicted or downgraded, and whether memory-on/off replay supports any claim beyond a final-answer comparison.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.agent_memory_temporal_conflict_replay run-memory-bundle --input examples/agent_memory_temporal_conflict_replay/exported_memory_temporal_conflict_bundle --out /tmp/agent_memory_temporal_conflict_bundle_receipt --card > /tmp/agent_memory_temporal_conflict_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && ../repo-pytest tests/test_agent_memory_temporal_conflict_replay.py\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Reader Validation Boundary\n\nA cold reader can validate this module by starting from the JSON source record, then checking the generated JSON instance, source-module manifest, synthetic episodes, memory-event decisions, temporal conflict-edge refs, stale-downgrade refs, paired memory-on/off cold replays, negative cases, and focused tests. The validation is limited to whether the synthetic replay preserved a metadata-only memory-honesty boundary.\n\nThe validation stops before quality claims about any live memory system, private transcript export, private candidate promotion, memory recall as source authority, provider behavior, active-injection authority, public sharing, and launch. Unpopulated concept, principle, axiom, and dependency edges remain residual pressure unless the JSON bundle owner lane adds real targets.\n\n###### Scope limit\n\nThis module may claim only that a synthetic memory-temporal replay preserved a metadata-only memory-honesty boundary: ADD/UPDATE/DELETE/NOOP decisions, temporal conflict-edge refs, stale-downgrade refs, paired memory-on/off cold replay refs, answer-delta accounting, public trace refs, manifest digests, negative cases, and scope limits are checked.\n\nIt must not claim quality of any live memory system, readiness of a memory product, private transcript export, private candidate auto-promotion, source-authority status, provider behavior, active-injection authority, source-file changes, public sharing authorization, or launch-scope decision.\n\n###### Scope boundary\n\nThis module does not run live memory, claim memory product quality, export private transcripts, auto-promote private candidates, treat memory recall as source authority, adopt active injection, use external model services, change source files, publish results, or include launch operations.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe exported bundle manifest is the body-row authority for five copied source bodies spanning tool, doctrine, standard, and pattern material classes. Those bodies stay in bundle source artifacts; result records and cards carry refs, digests, classes, counts, omission reasons, secret-exclusion status, and scope limits only.\n\nThe floor is accepted as synthetic temporal-conflict replay evidence. It is not live memory product evidence, private transcript export, private memory candidate export, provider-behavior evidence, source-file changes, public sharing authorization, or launch-scope decision.\n\n###### Governing Lattice Relation\n\nThe JSON bundle binds this module to `mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay`, `concept.agent_reliability_and_safety_validator_bundle`, provisional principle refs `P-1` and `P-2`, and provisional axiom ref `AX-1`. This Markdown does not promote those placeholder refs into stronger doctrine ids; it explains how the concrete mechanism satisfies the current bundle boundary.\n\nMechanically, the governing relation is evidence-before-memory-authority: memory rows may influence replay only after they carry route refs, public evidence handles, metadata-only non-public refs, conflict-edge or downgrade result records when stale state changes, and paired replay result records. The concept relation is validator-bundle accountability: the module is not a narrative claim about agents remembering well, but an executable fixture whose policy, trace, source-body manifest, negative cases, and result records must all agree. The axiom/principle ceiling is the same one enforced by the validator: private state is not public source authority, synthetic replay is not live product evidence, and projection-ready result records cannot authorize source-file changes, external model access, public sharing, or launch.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 22017,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This component exists because an agent that remembers can quietly start trusting the wrong row. A user states a preference, the world changes, a later turn contradicts the earlier one, and a naive memory store keeps serving the stale fact as though it were still true. The single question this fixture answers is narrow and checkable: when one memory write supersedes an earlier one, does the record of that conflict actually hold up, or is it just a label? The unusual choice is that the validator does not trust the labels it is given. A row can declare decision = UPDATE, attach a plausible-looking conflict-edge ref, and still be quarantined. In applyconflictsemanticrecompute the checker re-der\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "Agent memory becomes dangerous when a stored row is allowed to outrank later evidence. This module turns that risk into a public, replayable checker: a synthetic three-episode fixture exercises memory ADD, UPDATE, DELETE, and NOOP decisions, then verifies that later conflicts can influence replay only through typed evidence handles, temporal conflict edges, stale-downgrade result records, paired memory-on/off cold replays, and a metadata-only answer-delta result record. The technical contribution is not \"better memory\" and not a product claim. It is a narrow public accounting method for temporal memory conflict: memory rows are metadata under test, non-public refs are metadata-only, copied\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "telos",
       "title": "Telos",
       "level": 2,
       "excerpt": "The reader-facing aim is to make a hard memory-honesty boundary inspectable without exporting private memory bodies. A cold reader should be able to answer four questions from files and result records: Which memory decision was made, and under which public route ref? Which evidence handle, timestamp, priority, and source-trust score justified the row? Which prior row was conflicted or downgraded before later replay credit was allowed? Did the memory-enabled replay use admissible evidence while the paired memory-disabled replay remained available for answer-delta accounting? The accepted result is a metadata-only memory-conflict result record. It supports only a synthetic fixture-level claim\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-validation-boundary",
       "title": "Reader Validation Boundary",
       "level": 2,
       "excerpt": "A cold reader can validate this module by starting from the JSON source record, then checking the generated JSON instance, source-module manifest, synthetic episodes, memory-event decisions, temporal conflict-edge refs, stale-downgrade refs, paired memory-on/off cold replays, negative cases, and focused tests. The validation is limited to whether the synthetic replay preserved a metadata-only memory-honesty boundary. The validation stops before quality claims about any live memory system, private transcript export, private candidate promotion, memory recall as source authority, provider behavior, active-injection authority, public sharing, and launch. Unpopulated concept, principle, axiom,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime treats memory as public replay metadata, not as authority. The validator loads projectionprotocol.json, memorypolicy.json, memoryepisodes.json, and replayobservations.json; the exported-bundle mode also loads bundlemanifest.json, sourcemodule_manifest.json, and the copied source artifacts listed in the manifest. buildresult combines secret scanning, public trace construction, protocol validation, policy validation, episode validation, replay validation, source-module import validation, negative-case coverage, and the scope limit before a pass status is possible. The mechanism has five reader-visible gates: validateprojectionprotocol requires source refs, source pattern ids, proj\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "temporal-conflict-mechanism",
       "title": "Temporal Conflict Mechanism",
       "level": 2,
       "excerpt": "The central rule is evidence-before-memory-authority. A memory row may be accepted as replay metadata only after it satisfies the public policy fields: route ref, decision, synthetic subject id, event timestamp, memory priority, source-trust score, evidence handle, metadata-only private thread ref, and explicit false authority flags for body export, source authority, and active injection. UPDATE and DELETE decisions have an extra burden because they alter older memory. The validator recomputes the conflict lineage instead of trusting the label. applytemporalorderchecks verifies that conflict rows occur after the prior writes they touch, and that replay NOOP rows occur after conflict and dow\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "real-sanitized-episode-evidence",
       "title": "Real Sanitized Episode Evidence",
       "level": 2,
       "excerpt": "The first-wave fixture is not merely shape-only synthetic data. Its memoryepisodes.json, memorypolicy.json, and replay_observations.json mirror the exported memory-temporal-conflict bundle, and the positive rows carry sanitizedrealepisode=true, source artifact refs, source event refs, timestamps, memory priority, and source-trust scores. The source evidence posture declares realsourcefloor as copiednonsecretmacroagentmemorybodywithprovenance, bodyinreceipt=false, and privatebodiesexported=false. The exported bundle contributes a source-open body floor without turning bodies into result record material. sourcemodulemanifest.json lists five copied source bodies across tool, doctrine, standard\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "perturbation-and-rejection-contract",
       "title": "Perturbation and Rejection Contract",
       "level": 2,
       "excerpt": "The fixture includes positive pass evidence and perturbation evidence. Focused tests mutate the bundle to ensure that the validator rejects timestamp incoherence, priority regression, source-trust regression, temporal order breakage, unverified conflict evidence, source-event drift, stale override without downgrade, downgrade result record field swaps, positive rows without evidence handles, unresolved replay refs, replay without memory evidence, and source-body tampering. Those rejection tests matter because temporal memory bugs often look plausible in isolation. A stale row with a nice label is still rejected if its conflict edge is absent or late; a memory-enabled replay is still rejecte\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "python -m microcosmcore.components.agentmemorytemporalconflict_replay run consumes the first-wave fixture, includes negative cases, and writes the result, board, validation, and sign-off result records. python -m microcosmcore.components.agentmemorytemporalconflict_replay run-memory-bundle consumes the exported source-open bundle, digest-checks copied source bodies, and emits the public bundle validation result. tests/testagentmemorytemporalconflict_replay.py consumes the same fixture and bundle to assert decision counts, conflict counts, stale downgrades, secret exclusion, public-relative result records, unresolved replay rejection, source-module digest verification, metadata-only result r\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The page shape is a temporal-conflict replay, not a memory product surface. A reader starts with the JSON bundle, follows the source module manifest to five copied source bodies, then checks three synthetic episodes: initial memory writes, a later temporal conflict with stale downgrades, and paired cold replays with memory enabled and disabled. The accepted outcome is a result record that says the replay respected the memory-honesty boundary; it does not make memory recall into source authority.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The exported bundle manifest is the body-row authority for five copied source bodies spanning tool, doctrine, standard, and pattern material classes. Those bodies stay in bundle source artifacts; result records and cards carry refs, digests, classes, counts, omission reasons, secret-exclusion status, and scope limits only. The floor is accepted as synthetic temporal-conflict replay evidence. It is not live memory product evidence, private transcript export, private memory candidate export, provider-behavior evidence, source-file changes, public sharing authorization, or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim only that a synthetic memory-temporal replay preserved a metadata-only memory-honesty boundary: ADD/UPDATE/DELETE/NOOP decisions, temporal conflict-edge refs, stale-downgrade refs, paired memory-on/off cold replay refs, answer-delta accounting, public trace refs, manifest digests, negative cases, and scope limits are checked. It must not claim quality of any live memory system, readiness of a memory product, private transcript export, private candidate auto-promotion, source-authority status, provider behavior, active-injection authority, source-file changes, public sharing authorization, or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "failure-modes-and-limitations",
       "title": "Failure Modes and Limitations",
       "level": 2,
       "excerpt": "This module is intentionally narrow. It validates a public fixture and exported bundle against a declared temporal conflict contract; it does not measure live assistant memory quality, user satisfaction, recall coverage, provider behavior, or deployment posture. Passing result records show that checked rows, digests, traces, negative cases, and scope limits agreed for the fixture under test. Known failure modes are treated as checker inputs rather than prose caveats: private transcript export, private candidate auto-promotion, stale preference override, memory-as-source-authority, vector recall without evidence, final-answer-only credit, active injection authority, missing source manifests,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: read core/papermodulecapsules.json::paper_modules[35], Bundle route: read examples/agentmemorytemporalconflictreplay/exportedmemorytemporalconflictbundle/sourcemodulemanifest.json for modulecount=5, bodyin_receipt=false, material classes, digest refs, omitted-material reasons, and the explicit secret-exclusion boundary. Event route: read memory_episodes.json for the five memory events: episodeapreferenceadd, episodeatoolfact_add, episodebpreferencescopeupdate, episodebtoolfactdelete, and episodecreplay_noop. Conflict route: verify that the UPDATE and DELETE events carry temporal conflict-edge refs and stale-downgrade refs before they can affect replay credit. Replay route: rea\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-mechanics",
       "title": "Public Mechanics",
       "level": 2,
       "excerpt": "Memory update claims require route refs, evidence handles, and explicit ADD/UPDATE/DELETE/NOOP decisions. Updates and deletes that touch older memory require temporal conflict-edge refs plus stale-downgrade refs before memory can affect replay credit. Private thread references are metadata-only; transcript bodies and private memory candidate bodies stay omitted. Utility language requires paired memory-enabled and memory-disabled cold replay result records; final-answer-only comparison is not enough to support a memory utility claim. Raw transcript export, private candidate auto-promotion, stale preference override, memory-as-source-authority, vector recall without evidence, final-answer-onl\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in agent-memory architectures and the newer literature on stale or poisoned memory. The constructive lineage includes Generative Agents, which made observation, reflection, retrieval, and planning a concrete agent-memory pattern, and MemGPT, which treats long-context behavior as a memory-management problem. The risk lineage includes AgentPoison and STALE, which focus respectively on poisoned retrieval stores and whether agents update invalid memories when new evidence arrives. Microcosm does not claim a live memory product. It borrows the useful accounting questions: which memory decision was made, which evidence handle justified it, which older row was conflicted\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The JSON bundle binds this module to mechanism.agentmemorytemporalconflictreplay.validatespublicmemoryconflictreplay, concept.agentreliabilityandsafetyvalidator_bundle, provisional principle refs P-1 and P-2, and provisional axiom ref AX-1. This Markdown does not promote those placeholder refs into stronger doctrine ids; it explains how the concrete mechanism satisfies the current bundle boundary. Mechanically, the governing relation is evidence-before-memory-authority: memory rows may influence replay only after they carry route refs, public evidence handles, metadata-only non-public refs, conflict-edge or downgrade result records when stale state changes, and paired replay result records.\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture validator from the repo root and write its result record outside the repo working tree: Then run the exported bundle validator: The focused regression test and corpus projection checks are:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not run live memory, claim memory product quality, export private transcripts, auto-promote private candidates, treat memory recall as source authority, adopt active injection, use external model services, change source files, publish results, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.agent_memory_temporal_conflict_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD BodyFloor[\"Source-open body floor\"] -->|digest verified; body_in_receipt=false| Policy[\"Policy vocabulary\"] Policy -->|allows ADD / UPDATE / DELETE / NOOP only| EpisodeA[\"Episode A: ADD rows\"] EpisodeA -->|creates baseline memory metadata| EpisodeB[\"Episode B: UPDATE / DELETE rows\"] EpisodeB -->|touches older memory| ConflictGate[\"Temporal conflict gate\"] ConflictGate -->|requires conflict_edge_ref| DowngradeGate[\"Stale downgrade gate\"] DowngradeGate -->|requires stale_downgrade_ref| Recompute[\"Semantic recompute\"] Recompute -->|checks timestamp, priority, source trust| Enabled[\"Episode C: memory-enabled replay\"] Recompute -->|keeps paired baseline| Disabled[\"Episode C: memory-disabled replay\"] Enabled -->|uses evidence_handle_refs| Delta[\"Answer-delta result record\"] Disabled -->|no memory evidence used| Delta Delta -->|paired by replay_group_id| Trace[\"Public 7-span trace\"] Trace -->|covers events plus cold replays| Result record[\"metadata-only result record\"] Result record -->|omits private bodies and model-output data| Ceiling[\"Scope limit / scope boundary\"] Ceiling -->|denies live-memory and source-authority claims| Done[\"Fixture-level validation claim only\"]",
       "source_hash": "sha256:d2f13800ccca160a8c458d901bf525a075fdac51ed592658820348aef1178a73",
       "html_url": "docs/paper-modules.html#paper-module-agent-memory-temporal-conflict-replay-diagram-1",
       "html_anchor": "paper-module-agent-memory-temporal-conflict-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_memory_temporal_conflict_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Generative Agents",
       "url": "https://arxiv.org/abs/2304.03442",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "MemGPT",
       "url": "https://arxiv.org/abs/2310.08560",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "AgentPoison",
       "url": "https://arxiv.org/abs/2407.12784",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "STALE",
       "url": "https://arxiv.org/abs/2605.06527",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.bridge_phase_continuity_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Bridge Phase Continuity Runtime",
         "url": "paper-modules.html#paper-module-bridge-phase-continuity-runtime"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agent_memory_temporal_conflict_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agent Memory Temporal Conflict Replay",
         "url": "components.html#component-agent_memory_temporal_conflict_replay"
        },
        {
         "id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public memory conflict replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_memory_temporal_conflict_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 22774
    },
    {
     "id": "paper_module.agent_monitor_redteam_falsification_replay",
     "title": "Agent Monitor Redteam Falsification Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-monitor-redteam-falsification-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Synthetic regression drilldown for a monitor/redteam honesty contract; checks falsification handling, negative cases, non-public-state scan, scope limits.",
     "summary": "Public Microcosm regression drilldown for a monitor/redteam honesty contract. Replays synthetic monitor traces and validates redteam-falsification behavior, negative cases, non-public-state exclusion, and scope limits with metadata-only result records.",
     "authority_ceiling": "Synthetic replay fixture only; not a live monitor product, control eval, exploit guide, product-spine system, or complete-security claim.",
     "abstract": "Synthetic regression drilldown for a monitor/redteam honesty contract; checks falsification handling, negative cases, non-public-state scan, scope limits.",
     "teleology": {
      "section_id": "",
      "text": "Synthetic regression drilldown for a monitor/redteam honesty contract; checks falsification handling, negative cases, non-public-state scan, scope limits.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`agent_monitor_redteam_falsification_replay` is a synthetic regression fixture for one honesty claim: that a monitor verdict was earned by evidence rather than asserted. It replays public trajectory metadata and checks that every \"the monitor caught it\" sentence is tied to a probe, an escalation, a mitigation, and a metadata-only result record before it counts.\n\n###### Purpose\n\nIt is easy to say a safety monitor flagged a suspicious agent action. It is harder to show that the verdict followed from the evidence and would survive a rerun. This component answers one question: if a monitor claim is replayed against its own declared evidence, does the claim still hold, or does it fall apart?\n\nThe part worth noticing is that the page does not trust the verdict it is given. A separate builder, `build_public_monitor_redteam_falsification_trace`, independently recomputes two things from the trajectory spans: whether each declared coverage label is actually backed by an adversarial probe, and what the monitor verdict should be given the span's severity, escalation, and mitigation evidence. If that recomputed verdict disagrees with the verdict the fixture declared, the run blocks. So the contract is not \"does the row have the right fields\" but \"does an independent reading of the evidence reach the same conclusion\". The failure mode it guards against is the one that quietly defeats most monitoring write-ups: a verdict label that reads well but is not supported by the trajectory it claims to summarise.\n\nThe replay is deliberately narrow. It works over three synthetic trajectory cases and seven negative cases, on public metadata and metadata-only result records. It is not a live monitor, a control-evaluation score, an exploit guide, or evidence about how well any real monitor performs. It only proves that, for these fixtures, a monitor claim cannot pass without surviving the disagreement check.\n\n###### Abstract\n\nThis module is the public Microcosm technical paper for a monitor/redteam honesty contract. It specifies a synthetic replay fixture that treats a monitor verdict as an evidence object to falsify: the verdict must be tied to a trajectory hash, suspicious-span ref, adversarial-probe ref, escalation ref, mitigation ref, body-omission ref, cold-replay ref, and source-artifact digest boundary before it can support any monitor-coverage sentence.\n\nThe result is a safety/reliability proof about evidence shape, not a live monitor product, control-eval score, exploit guide, product-spine system, or complete-security claim. The technical contribution is the proof contract: a replay can show how a monitor claim would fail under semantic negatives and perturbations without exporting private reasoning, internal source bodies, model-output data, live agent traffic, or launch-scope decision.\n\n###### Telos\n\nThe fixture models three public trajectory cases: a benign control, a suppressed failure attempt, and a tool-authority boundary attempt. Each case must carry a trajectory hash, monitor id, suspicious span ref, adversarial probe ref, verdict, severity, escalation ref, body-omission ref, mitigation ref, and cold replay ref before the claim is admitted.\n\nThe point is to make \"the monitor caught it\" a rerunnable, falsifiable claim. A benign pass proves only that the benign route remains admissible. An escalation proves that a suppressed-failure attempt retained enough evidence for human escalation. A block proves that the tool-authority boundary attempt was rejected under the public policy vocabulary. None of those outcomes proves live monitor performance; together they prove that this fixture's evidence contract catches missing probes, missing source evidence, private-body leakage, and verdict drift.\n\n###### Monitor-Falsification Mechanism\n\nThe component turns a monitor claim into a falsification replay. Its inputs are the projection protocol, monitor policy, trajectory cases, monitor observations, negative-case files, exported bundle manifest, and source-module manifest. `_build_result` loads those inputs, validates the projection protocol density, checks the monitor policy vocabulary, checks trajectory case floors, validates each observation against required refs and source-artifact evidence, scans public inputs and copied source artifacts for forbidden non-public-state classes, and folds in a public trace recomputation before writing result records.\n\nA positive observation cannot pass by carrying a verdict label alone. The policy requires a trajectory id, monitor id, coverage label, suspicious action span ref, adversarial probe ref, monitor verdict, severity tier, human escalation ref, body-omission ref, mitigation diff ref, and cold replay ref. For positive observations, source-artifact evidence refs must match the targets declared by the exported source-module manifest. Missing fields, unsupported verdicts, unverified source evidence, private chain-of-thought export, internal-code export, exploit-instruction material, account secret material, live agent traffic, monitor product-performance claims, and coverage without a probe become quarantine or blocking findings.\n\nThe exported body floor is checked separately from the result record. The source-module manifest admits two source artifacts: a copied public source pattern body for the monitor-redteam compound row, and a sanitized public dogfood safety-evals trace slice. `validate_source_module_manifest` requires the declared module count to match the rows, requires `body_in_receipt=false`, rejects body text in result records, resolves each target path, and verifies every declared digest field against disk. Result records and cards then expose ids, refs, digests, counts, verdicts, findings, and ceilings, not copied bodies.\n\nThe public trace is the anti-echo pass. `build_public_monitor_redteam_falsification_trace` recomputes whether a coverage label is backed by an adversarial-probe span, then derives the monitor verdict from severity, escalation, and mitigation evidence. In the first-wave fixture, the three spans recompute to one `pass`, one `escalate`, and one `block`. If a declared verdict no longer matches the span-derived verdict, `validate_public_trace` records `PUBLIC_TRACE_MONITOR_REDTEAM_VERDICT_MISMATCH` and the component blocks.\n\n###### Named Proof Consumers\n- `run` consumes the first-wave fixture and writes result, board, validation, sign-off, and metadata-only command-card result records. It is the proof consumer for the three synthetic trajectory cases and seven required negative cases.\n- `run-monitor-bundle` consumes the exported public bundle and proves that the bundle manifest, source-module manifest, copied/sanitized source artifacts, four bundle observations, digest checks, non-public-state scan, and metadata-only card path remain valid outside the fixture directory.\n- `tests/test_agent_monitor_redteam_falsification_replay.py` is the focused regression consumer. It asserts digest verification, sanitized dogfood trace slicing, workingness exposure of source-body imports, negative-case semantic floors, public trace verdict recomputation, source-evidence ref enforcement, public-relative metadata-only result records, manifest boundary rejection, and fresh result record reuse.\n- A cold reader consumes this Markdown only after checking the JSON bundle, generated JSON instance, exported source manifest, trajectory and observation fixtures, public trace recomputation path, focused tests, and scope limit. The reader may verify the replay boundary but must not infer live monitor performance, control-eval score, exploit guidance, complete security, public sharing, or launch-scope decision.\n\n###### Semantic Negative and Perturbation Proof\n\nThe replay proves its boundary through negative and perturbation cases, not by trusting the positive fixture. The negative floor includes private chain-of-thought leakage, internal code export, exploit-instruction material, account secret material, live agent traffic, monitor product-performance claims, and coverage claims without adversarial probes. Those cases are expected to block or quarantine because they violate the public-source/metadata-only contract, not because they resemble production attacks.\n\nThe perturbation proof is the public trace recomputation. A declared verdict is accepted only when the public span evidence derives the same `pass`, `escalate`, or `block` result. Removing the adversarial-probe span, weakening the escalation or mitigation refs, changing the severity/verdict relation, or declaring source evidence that is absent from the exported source-module manifest turns the replay into a mismatch or blocking finding. That is the technical safety property: the paper authority lives in disagreement detection between declared monitor coverage and independently recomputed public evidence.\n\n###### Shape\n\nSource refs\n\nManifest `source_module_manifest.json` Diagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] manifest[\"source_module_manifest.json\"] digest[\"2 source-artifact digest gates\"] cases[\"three trajectory cases\"] policy[\"public monitor policy\"] observations[\"three observations\"] required[\"required refs: span, probe, escalation, mitigation, replay\"] trace[\"public trace verdict recomputation\"] verdicts[\"pass / escalate / block\"] negatives[\"7 negative semantic floors\"] privateScan[\"metadata-only non-public-state scan\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limits\"] bundle --> markdown manifest --> digest digest --> observations cases --> required policy --> required required --> observations observations --> trace trace --> verdicts negatives --> result record digest --> privateScan verdicts --> result record privateScan --> result record result record --> ceiling\n```\n\nThe module's shape is evidence narrowing.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[33]` is the bundle-backed authority row, and `paper_modules/agent_monitor_redteam_falsification_replay.json` is the generated paper-module instance.\n- Source-module route: `examples/agent_monitor_redteam_falsification_replay/exported_monitor_redteam_bundle/source_module_manifest.json` records two admitted source artifacts with `body_in_receipt: false`: the public source-pattern JSON slice with digest `sha256:89792add1e2f03a09c40f64d19c1ac0a54d62c053aabe11ecad0a9846a54cf33`, and the sanitized public dogfood safety-evals trace slice with digest `sha256:88493225f908f3f8892d187370d30231cb4e292b43bed202b462b6a6888e1eb0`.\n- Trajectory route: `trajectory_cases.json` carries the three public trajectory hashes `sha256:monitor-redteam-benign-route-review`, `sha256:monitor-redteam-suppressed-failure`, and `sha256:monitor-redteam-tool-authority-escape`.\n- Observation route: `monitor_observations.json` binds `obs_benign_route_review_pass` to `monitor.synthetic.route-review.v1` and a `pass` verdict, `obs_suppressed_failure_escalate` to `monitor.synthetic.failure-suppression.v1` and an `escalate` verdict, and `obs_tool_authority_escape_block` to `monitor.synthetic.tool-authority.v1` and a `block` verdict. Each observation carries a body-omission ref and cold replay ref.\n- Runtime route: `src/microcosm_core/organs/agent_monitor_redteam_falsification_replay.py` and `tests/test_agent_monitor_redteam_falsification_replay.py` verify manifest digest visibility, negative-case coverage, required observation fields, public trace recomputation, and metadata-only result record boundaries.\n\n###### Public Mechanics\n- A monitor claim cannot pass unless the observation includes a verdict and the probe, escalation, mitigation, body-omission, and replay refs that make the verdict rerunnable.\n- Coverage labels require adversarial probe refs; benign-only trajectories do not authorize coverage language.\n- Private reasoning, internal code, exploit-detail, account secret, live-traffic, product-performance, and coverage-without-probe cases are expected falsification fixtures.\n- Result records expose ids, refs, verdict counts, negative cases, `body_in_receipt: false`, non-public-state scan, and scope limits only.\n\n###### Prior Art Grounding\n\nThis component is grounded in model red-team and behavior-discovery work that treats monitor claims as things to falsify with adversarial probes. Anthropic's [Red Teaming Language Models to Reduce Harms](https://arxiv.org/abs/2209.07858) is a close procedural anchor for eliciting harmful or unwanted behavior, and [Discovering Language Model Behaviors with Model-Written Evaluations](https://arxiv.org/abs/2212.09251) anchors the idea that evaluation prompts can surface behavior classes worth tracking. More recent sabotage and control-evaluation work reinforces the same shape: monitors need adversarial trajectories, suspicious spans, escalation paths, and negative cases, not just benign examples.\n\nMicrocosm borrows the falsification accounting pattern. A monitor verdict needs trajectory hashes, probe refs, suspicious-span refs, escalation refs, mitigation refs, replay refs, and body-omission result records before coverage language is allowed. It does not claim a live monitor product or control-eval score.\n\n###### Evidence Contract Summary\n\nThe evidence contract has four gates:\n1. **Trajectory gate**: each monitor observation must cite a trajectory hash, monitor id, suspicious-span ref, adversarial-probe ref, verdict, severity, escalation ref, body-omission ref, mitigation ref, and cold-replay ref.\n2. **Source-body gate**: the exported source-module manifest names the admitted copied/sanitized public source artifacts, requires matching digests, and keeps `body_in_receipt: false`.\n3. **Falsification gate**: semantic negatives and public trace recomputation reject private-body leakage, unsupported source evidence, missing probes, unsupported verdicts, and declared/recomputed verdict mismatch.\n\nA valid paper claim must pass all four gates and still inherit the limitations above.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.agent_monitor_redteam_falsification_replay run-monitor-bundle --input examples/agent_monitor_redteam_falsification_replay/exported_monitor_redteam_bundle --out /tmp/agent_monitor_redteam_bundle_receipt --card > /tmp/agent_monitor_redteam_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are run from the repo root:\n\n```text\nPYTHONDONTWRITEBYTECODE=1 PYTHONPYCACHEPREFIX=/tmp/mc_agent_monitor_pyc ./repo-pytest tests/test_agent_monitor_redteam_falsification_replay.py -q -p no:cacheprovider --basetemp=/tmp/mc_agent_monitor_bt\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe validation ceiling remains synthetic monitor falsification replay only.\n\n###### Scope boundary\n\n###### Limitations and Scope limit\n\nThis module may claim public fixture evidence that trajectory hashes, synthetic monitor ids, suspicious-span refs, adversarial-probe refs, verdict labels, escalation refs, mitigation refs, body-omission refs, cold replay refs, negative-case labels, manifest digests, and validation result records are checked by the listed runtime witnesses.\n\nThis module may not claim a live monitor product, control-eval score, production monitoring, exploit guidance, private reasoning export, internal source export, live agent traffic, provider behavior, complete security, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Scope boundary\n\nThis module does not run live agents, use external model services, expose private chain-of-thought, export internal code, provide exploit instructions, include account secrets, import live agent traffic, claim monitor product performance, claim control-eval scores, change source files, publish results, or include launch operations.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Synthetic replay fixture only; not a live monitor product, control eval, exploit guide, product-spine system, or complete-security claim.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe bundle binds this page to `mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts`, the `agent_reliability_and_safety_validator_bundle` concept, provisional principles `P-1` and `P-2`, provisional axiom `AX-1`, and the `agent_monitor_redteam_falsification_replay` runtime locus. Within that lattice, the mechanism is an evidence-before-monitor-claim gate: monitor coverage language has no paper authority unless the source record, policy, trajectory roster, observations, source-artifact manifest, negative-case semantic floors, public trace, and metadata-only result records agree.\n\nThe governing concept is validator-bundle accountability, not live monitor operation. The principle/axiom ceiling is enforced as a refusal surface: private reasoning, internal code, exploit instructions, account secrets, live agent traffic, model-output data, performance claims, source-file changes, publishing-scope decision, and launch-scope decision remain false even when the replay fixture passes.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 17639,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "It is easy to say a safety monitor flagged a suspicious agent action. It is harder to show that the verdict followed from the evidence and would survive a rerun. This component answers one question: if a monitor claim is replayed against its own declared evidence, does the claim still hold, or does it fall apart? The part worth noticing is that the page does not trust the verdict it is given. A separate builder, buildpublicmonitorredteamfalsification_trace, independently recomputes two things from the trajectory spans: whether each declared coverage label is actually backed by an adversarial probe, and what the monitor verdict should be given the span's severity, escalation, and mitigation\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "This module is the public Microcosm technical paper for a monitor/redteam honesty contract. It specifies a synthetic replay fixture that treats a monitor verdict as an evidence object to falsify: the verdict must be tied to a trajectory hash, suspicious-span ref, adversarial-probe ref, escalation ref, mitigation ref, body-omission ref, cold-replay ref, and source-artifact digest boundary before it can support any monitor-coverage sentence. The result is a safety/reliability proof about evidence shape, not a live monitor product, control-eval score, exploit guide, product-spine system, or complete-security claim. The technical contribution is the proof contract: a replay can show how a monit\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "telos",
       "title": "Telos",
       "level": 2,
       "excerpt": "The fixture models three public trajectory cases: a benign control, a suppressed failure attempt, and a tool-authority boundary attempt. Each case must carry a trajectory hash, monitor id, suspicious span ref, adversarial probe ref, verdict, severity, escalation ref, body-omission ref, mitigation ref, and cold replay ref before the claim is admitted. The point is to make \"the monitor caught it\" a rerunnable, falsifiable claim. A benign pass proves only that the benign route remains admissible. An escalation proves that a suppressed-failure attempt retained enough evidence for human escalation. A block proves that the tool-authority boundary attempt was rejected under the public policy vocab\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "monitor-falsification-mechanism",
       "title": "Monitor-Falsification Mechanism",
       "level": 2,
       "excerpt": "The component turns a monitor claim into a falsification replay. Its inputs are the projection protocol, monitor policy, trajectory cases, monitor observations, negative-case files, exported bundle manifest, and source-module manifest. buildresult loads those inputs, validates the projection protocol density, checks the monitor policy vocabulary, checks trajectory case floors, validates each observation against required refs and source-artifact evidence, scans public inputs and copied source artifacts for forbidden non-public-state classes, and folds in a public trace recomputation before writing result records. A positive observation cannot pass by carrying a verdict label alone. The polic\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "run consumes the first-wave fixture and writes result, board, validation, sign-off, and metadata-only command-card result records. It is the proof consumer for the three synthetic trajectory cases and seven required negative cases. run-monitor-bundle consumes the exported public bundle and proves that the bundle manifest, source-module manifest, copied/sanitized source artifacts, four bundle observations, digest checks, non-public-state scan, and metadata-only card path remain valid outside the fixture directory. tests/testagentmonitorredteamfalsification_replay.py is the focused regression consumer. It asserts digest verification, sanitized dogfood trace slicing, workingness exposure of so\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "semantic-negative-and-perturbation-proof",
       "title": "Semantic Negative and Perturbation Proof",
       "level": 2,
       "excerpt": "The replay proves its boundary through negative and perturbation cases, not by trusting the positive fixture. The negative floor includes private chain-of-thought leakage, internal code export, exploit-instruction material, account secret material, live agent traffic, monitor product-performance claims, and coverage claims without adversarial probes. Those cases are expected to block or quarantine because they violate the public-source/metadata-only contract, not because they resemble production attacks. The perturbation proof is the public trace recomputation. A declared verdict is accepted only when the public span evidence derives the same pass, escalate, or block result. Removing the ad\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations-and-claim-ceiling",
       "title": "Limitations and Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that trajectory hashes, synthetic monitor ids, suspicious-span refs, adversarial-probe refs, verdict labels, escalation refs, mitigation refs, body-omission refs, cold replay refs, negative-case labels, manifest digests, and validation result records are checked by the listed runtime witnesses. This module may not claim a live monitor product, control-eval score, production monitoring, exploit guidance, private reasoning export, internal source export, live agent traffic, provider behavior, complete security, source-file changes, public sharing decision, launch-scope decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module's shape is evidence narrowing.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: core/papermodulecapsules.json::paper_modules[33] is the bundle-backed authority row, and papermodules/agentmonitorredteamfalsification_replay.json is the generated paper-module instance. Source-module route: examples/agentmonitorredteamfalsificationreplay/exportedmonitorredteambundle/sourcemodule_manifest.json records two admitted source artifacts with bodyinreceipt: false: the public source-pattern JSON slice with digest sha256:89792add1e2f03a09c40f64d19c1ac0a54d62c053aabe11ecad0a9846a54cf33, and the sanitized public dogfood safety-evals trace slice with digest sha256:88493225f908f3f8892d187370d30231cb4e292b43bed202b462b6a6888e1eb0. Trajectory route: trajectory_cases.json car\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-mechanics",
       "title": "Public Mechanics",
       "level": 2,
       "excerpt": "A monitor claim cannot pass unless the observation includes a verdict and the probe, escalation, mitigation, body-omission, and replay refs that make the verdict rerunnable. Coverage labels require adversarial probe refs; benign-only trajectories do not authorize coverage language. Private reasoning, internal code, exploit-detail, account secret, live-traffic, product-performance, and coverage-without-probe cases are expected falsification fixtures. Result records expose ids, refs, verdict counts, negative cases, `bodyinreceipt: false`, non-public-state scan, and scope limits only.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in model red-team and behavior-discovery work that treats monitor claims as things to falsify with adversarial probes. Anthropic's Red Teaming Language Models to Reduce Harms is a close procedural anchor for eliciting harmful or unwanted behavior, and Discovering Language Model Behaviors with Model-Written Evaluations anchors the idea that evaluation prompts can surface behavior classes worth tracking. More recent sabotage and control-evaluation work reinforces the same shape: monitors need adversarial trajectories, suspicious spans, escalation paths, and negative cases, not just benign examples. Microcosm borrows the falsification accounting pattern. A monitor ve\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The bundle binds this page to mechanism.agentmonitorredteamfalsificationreplay.validatespublicmonitorverdictreceipts, the agentreliabilityandsafetyvalidator_bundle concept, provisional principles P-1 and P-2, provisional axiom AX-1, and the agentmonitorredteamfalsificationreplay runtime locus. Within that lattice, the mechanism is an evidence-before-monitor-claim gate: monitor coverage language has no paper authority unless the source record, policy, trajectory roster, observations, source-artifact manifest, negative-case semantic floors, public trace, and metadata-only result records agree. The governing concept is validator-bundle accountability, not live monitor operation. The principle/\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-contract-summary",
       "title": "Evidence Contract Summary",
       "level": 2,
       "excerpt": "The evidence contract has four gates: component, mechanism, code locus, generated JSON instance, generated Mermaid Trajectory gate: each monitor observation must cite a trajectory hash, monitor id, suspicious-span ref, adversarial-probe ref, verdict, severity, escalation ref, body-omission ref, mitigation ref, and cold-replay ref. Source-body gate: the exported source-module manifest names the admitted copied/sanitized public source artifacts, requires matching digests, and keeps bodyinreceipt: false. Falsification gate: semantic negatives and public trace recomputation reject private-body leakage, unsupported source evidence, missing probes, unsupported verdicts, and declared/recomputed ve\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture validator from the repo root and write its result record outside the repo working tree: Then run the exported bundle validator: The focused regression test and corpus projection checks are run from the repo root: The validation ceiling remains synthetic monitor falsification replay only.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not run live agents, use external model services, expose private chain-of-thought, export internal code, provide exploit instructions, include account secrets, import live agent traffic, claim monitor product performance, claim control-eval scores, change source files, publish results, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page. It may not claim more than its bundle scope limit allows: Synthetic replay fixture only; not a live monitor product, control eval, exploit guide, product-spine system, or complete-security claim.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.agent_monitor_redteam_falsification_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] manifest[\"source_module_manifest.json\"] digest[\"2 source-artifact digest gates\"] cases[\"three trajectory cases\"] policy[\"public monitor policy\"] observations[\"three observations\"] required[\"required refs: span, probe, escalation, mitigation, replay\"] trace[\"public trace verdict recomputation\"] verdicts[\"pass / escalate / block\"] negatives[\"7 negative semantic floors\"] privateScan[\"metadata-only non-public-state scan\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limits\"] bundle --> markdown manifest --> digest digest --> observations cases --> required policy --> required required --> observations observations --> trace trace --> verdicts negatives --> result record digest --> privateScan verdicts --> result record privateScan --> result record result record --> ceiling",
       "source_hash": "sha256:dc11228527571d1a549984bec8a2b8fd003628ddcf7a4a068f0c2398e76f54d1",
       "html_url": "docs/paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay-diagram-1",
       "html_anchor": "paper-module-agent-monitor-redteam-falsification-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_monitor_redteam_falsification_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Red Teaming Language Models to Reduce Harms",
       "url": "https://arxiv.org/abs/2209.07858",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Discovering Language Model Behaviors with Model-Written Evaluations",
       "url": "https://arxiv.org/abs/2212.09251",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agent_monitor_redteam_falsification_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agent Monitor Redteam Falsification Replay",
         "url": "components.html#component-agent_monitor_redteam_falsification_replay"
        },
        {
         "id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public monitor verdict result records",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_monitor_redteam_falsification_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 18383
    },
    {
     "id": "paper_module.agent_sabotage_scheming_monitor_replay",
     "title": "Agent Sabotage Scheming-Monitor Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-sabotage-scheming-monitor-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Drilldown regression contract for synthetic sabotage/scheming monitor claims: replays task episodes, action traces, monitor scores, counterfactual/cold replay.",
     "summary": "Drilldown-only regression contract for synthetic sabotage/scheming monitor claims. Checks projection_protocol, scheming_monitor_policy, task_episodes, action_traces, monitor_scores, counterfactual_replay, and cold_replay against negative cases and scope limits.",
     "authority_ceiling": "No live sabotage, exploit instruction, account secret/account material, private reasoning, harmful payload, or deployment-risk product claim; synthetic fixtures and metadata-only result records only.",
     "abstract": "Drilldown regression contract for synthetic sabotage/scheming monitor claims: replays task episodes, action traces, monitor scores, counterfactual/cold replay.",
     "teleology": {
      "section_id": "",
      "text": "Drilldown regression contract for synthetic sabotage/scheming monitor claims: replays task episodes, action traces, monitor scores, counterfactual/cold replay.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Abstract\n\n`agent_sabotage_scheming_monitor_replay` is a technical paper module for a drilldown-only regression component. It validates whether a sabotage/scheming monitor claim is backed by joinable synthetic episodes, action traces, per-step monitor scores, counterfactual benign replay, cold replay, falsification fixtures, source-artifact evidence refs, metadata-only result records, and an explicit scope limit.\n\nThe core contribution is not a live scheming detector. It is a replay contract: given a public fixture or exported bundle, the component recomputes caught/not-caught verdicts from monitor evidence, checks whether counterfactual replay isolates the side objective, verifies source-artifact digest/provenance rows, rejects common overclaim shapes, and emits result records that omit private or harmful bodies.\n\n###### Telos\n\nThe module exists to make safety-monitor evidence auditable without laundering a demo into a deployment claim. Frontier-lab readers should be able to answer:\n- Which finite evidence rows support the sabotage/scheming monitor claim?\n- Which verdicts are recomputed from scores and joins rather than echoed from fixture labels?\n- Which mutations and negative cases cause rejection?\n- Which claims remain out of scope even when every local check is green?\n\n###### Mechanism\n\nThe runtime locus is `src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py`. It exposes two public admission paths:\n- `run` validates the first-wave fixture under `fixtures/first_wave/agent_sabotage_scheming_monitor_replay/input`.\n- `run_sabotage_bundle` validates the exported bundle under `examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle`.\n\nBoth paths call `_build_result`. The builder loads:\n- `projection_protocol.json`\n- `scheming_monitor_policy.json`\n- `task_episodes.json`\n- `action_traces.json`\n- `monitor_scores.json`\n- `counterfactual_replay.json`\n- `cold_replay.json`\n- `source_module_manifest.json` when present\n\nThe monitor proof is a join-and-recompute circuit. `validate_task_episodes`, `validate_action_traces`, and `validate_monitor_scores` require monitor rows to bind to an episode and action step. Monitor rows must carry evidence refs; in the exported bundle those refs resolve through the digest-checked source manifest. `validate_counterfactual_replay` checks that replay rows remove side-task success while preserving the main task. `validate_cold_replay` requires explicit passing replay result records rather than narrative assurance.\n\nThe recompute is deliberately conjunctive. A monitor row only earns a `block` verdict if the suspicion score is at or above the policy block threshold and the row is a \"backed suspicious action\". Backed means five separate joins all hold: the suspicious-action span names a real action id, that action id is also cited in the row's evidence refs, the joined action carries `attack_opportunity_label = present`, its hidden-side-objective pressure is medium or high, and the counterfactual replay isolates exactly that step by removing side-task success while preserving the main task. Drop any one of those and the row recomputes to `escalate` or `pass` rather than `block`, so a high score alone cannot manufacture a catch. An episode is then recomputed as `caught` only if it contains at least one recomputed `block` row with verified source-artifact evidence.\n\nThe trace recomputation locus is `src/microcosm_core/macro_tools/agent_execution_trace.py::build_public_sabotage_scheming_monitor_trace`. It folds the same joins into per-episode spans, recomputes the caught verdict, and checks that the counterfactual's changed steps are the higher-suspicion ones (a positive rank delta). A stale declared verdict, a benign-step counterfactual spoof, or a missing cold replay becomes a finding rather than a silent pass.\n\n###### Evidence Floor\n\nThe local floor is intentionally small and inspectable:\n\nEvidence class Fixture mode Exported-bundle mode Episodes 3 4 Action trace rows 6 7 Monitor-score rows 6 7 Counterfactual replay rows 3 4 Cold replay rows 3 4 Negative cases 7 0 fixture-negative payloads Copied public source artifacts source trace body + trace builder import 2 manifest rows\n\nThe exported bundle adds `scheming_ep_public_authority_probe` and `obs_public_authority_probe`. That row is the real dogfood-trace floor: it comes from a sanitized public command-trace slice, verifies against the source trace digest, drops argv/stdout/stderr previews, and remains metadata-only in result records. The tests require it to compute a `block` monitor verdict and a caught episode without exporting private session material.\n\nThe source-open body floor is split:\n- The runtime imports `microcosm_core.macro_tools.agent_execution_trace::build_public_sabotage_scheming_monitor_trace` as the public recomputation body.\n- The exported bundle manifest carries `agent_sabotage_scheming_extracted_pattern_ledger_row_body_import` as a source-faithful public source pattern slice with digest `sha256:e1ad34691ca598b878f8658485ce78fa4fa59b3eb0a4bd078355c415ca2cb312`.\n- The same manifest carries `agent_sabotage_scheming_public_dogfood_safety_evals_trace_slice_import` as a source-faithful sanitized command-trace slice with digest `sha256:7b6255ec65f4b21163685cf9d7a59dd9ae6075126deac065dec9a45d79dcea06` and source trace digest `sha256:24487cf8edb0779cfdd460b04a4ea7701805686545069f9e1c5767250c223cd3`.\n\nBoth manifest rows require `body_in_receipt: false`.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] fixture[\"fixture or exported bundle\"] episodes[\"task episodes\"] actions[\"action traces\"] scores[\"monitor scores\"] sourceManifest[\"source module manifest\"] sourceArtifacts[\"digest-checked public artifacts\"] counterfactual[\"counterfactual replay\"] cold[\"cold replay\"] recompute[\"public trace recomputation\"] negatives[\"negative/falsification cases\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limit\"] bundle --> fixture fixture --> episodes fixture --> actions fixture --> scores fixture --> counterfactual fixture --> cold fixture --> sourceManifest sourceManifest --> sourceArtifacts episodes --> recompute actions --> recompute scores --> recompute counterfactual --> recompute cold --> recompute negatives --> result record sourceArtifacts --> result record recompute --> result record result record --> ceiling\n```\n\n###### Rejection And Perturbation Evidence\n\nThe focused regression suite is the strongest technical evidence for the paper claim. `tests/test_agent_sabotage_scheming_monitor_replay.py` covers:\n- Digest mismatch in `source_module_manifest.json` blocks the exported bundle.\n- `target_ref` / path mismatch blocks the exported bundle.\n- `body_text_in_receipt` at manifest or row level is rejected.\n- Missing `source_artifact_evidence_refs` quarantines a monitor row.\n- A declared caught verdict that disagrees with recomputation emits `PUBLIC_TRACE_SCHEMING_CAUGHT_VERDICT_MISMATCH`.\n- Perturbing a high-suspicion block row down to pass moves the recomputed caught verdict and blocks the result record.\n- A stale `caught_verdict` label inside a monitor-score row is rejected against the recomputed episode verdict.\n- A counterfactual row that changes a benign low-suspicion step fails the rank delta check and the isolation check.\n- Spoofing a declared negative-case id is caught by semantic negative-case floors.\n- Public-relative, metadata-only result records exclude absolute local paths and private keys such as account secrets, model-output data, hidden reasoning, raw harmful payloads, exploit instructions, and real target identifiers.\n- The real sanitized public probe must compute `block`, carry verified source artifact evidence, and join to its counterfactual row.\n- Spoofing the public probe to `pass` is rejected by verdict recomputation and the real-sanitized-evidence check.\n\nThese tests matter because they exercise the falsification path, not only the happy path. The component is permitted to say \"this synthetic replay failed closed under these mutations\"; it is not permitted to say \"this detects real scheming\".\n\n###### Reader Evidence Routing\n- Bundle: `core/paper_module_capsules.json::paper_modules[34:paper_module.agent_sabotage_scheming_monitor_replay]`\n- Generated instance: `paper_modules/agent_sabotage_scheming_monitor_replay.json`\n- Standard: `standards/std_microcosm_agent_sabotage_scheming_monitor_replay.json`\n- Mechanism: `mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json`\n- Component model: `organs/agent_sabotage_scheming_monitor_replay.json`\n- Runtime: `src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py`\n- Trace recomputation: `src/microcosm_core/macro_tools/agent_execution_trace.py::build_public_sabotage_scheming_monitor_trace`\n- Fixture input: `fixtures/first_wave/agent_sabotage_scheming_monitor_replay/input`\n- Exported bundle: `examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle`\n- Focused tests: `tests/test_agent_sabotage_scheming_monitor_replay.py`\n- Runtime-shell result record: `receipts/runtime_shell/demo_project/organs/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle_validation_result.json`\n\n###### Governing Relations\n\nThe generated paper-module instance binds this reader page to:\n- component:agent_sabotage_scheming_monitor_replay\n- `mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay`\n- `concept:concept.agent_reliability_and_safety_validator_bundle`\n- `principle:P-1`\n- `principle:P-2`\n- `axiom:AX-1`\n- `paper_module.agent_monitor_redteam_falsification_replay`\n- code locus: `src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py` with `run`, `run_sabotage_bundle`, `_build_result`, `_write_receipts`, and `result_card`\n\nThose edges are structural evidence-routing edges. They do not by themselves prove runtime correctness; the runtime result records and tests carry that narrower claim.\n\n###### Prior-Art Positioning\n\nThe module borrows evaluation grammar from sabotage, scheming, and deceptive behavior evaluations: episodes, action traces, monitor scores, counterfactual benign replay, falsification cases, and fail-closed monitor disagreement. The closest public references remain Anthropic's sabotage evaluations, Apollo's in-context scheming evaluations, Anthropic's Sleeper Agents work, and the OpenAI/Apollo line on detecting and reducing scheming.\n\nThe Microcosm claim is deliberately narrower than those research programs. It does not evaluate frontier models or live deployments. It gives the public Microcosm system a result record-backed, metadata-only, replayable safety-monitor proof shape that can reject overclaims and provenance drift.\n\n###### Prior Art Grounding\n\nThis component replays a monitor that watches an agent transcript for sabotage and scheming signals. It is grounded in the AI-control literature, which studies how to catch a model that may be deliberately subverting oversight rather than assuming it is benign ( [Greenblatt et al., AI Control](https://arxiv.org/abs/2312.06942), and Anthropic's [sabotage evaluations](https://www.anthropic.com/research/sabotage-evaluations)). Microcosm borrows the monitor-over-transcript shape on synthetic fixtures; the result is fixture-bound replay evidence, not a live monitor, a control guarantee, or an exploit guide.\n\n###### Validation Result record Path\n\nRun the metadata-only fixture validator:\n\nRun the exported-bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python \\\n  -m microcosm_core.organs.agent_sabotage_scheming_monitor_replay \\\n  run-sabotage-bundle \\\n  --input examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle \\\n  --out /tmp/agent_sabotage_scheming_bundle_receipt \\\n  --card > /tmp/agent_sabotage_scheming_bundle_card.json\n```\n\nRun focused tests and paper-module corpus validation:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_agent_sabotage_scheming_monitor_replay.py\ncd microcosm-substrate && PYTHONPATH=src python3 \\\n  scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nExpected local result: the fixture and exported-bundle validators pass on the checked-in inputs; the mutation tests block when digest, target-ref, body-in-result record, evidence-ref, caught-verdict, counterfactual-rank, negative semantic, or public-probe labels are corrupted.\n\n###### Scope boundary\n\n###### Public-Safety Boundary\n\nPublic rendering may describe the replay grammar, recomputation rule, falsification cases, sanitized command-trace source artifact, digest checks, and metadata-only result records.\n\nPublic rendering must not include or imply:\n- live sabotage instructions\n- exploit steps\n- account secrets, browser state, account or browser material, or model-output data\n- private chain-of-thought or hidden reasoning bodies\n- raw harmful payloads\n- unsanitized argv/stdout/stderr previews\n- browser UI state\n- production telemetry\n- live traffic\n- live agent execution authorization\n- deployment-risk measurement\n- product monitor performance\n- benchmark claims\n- provider affiliation or provider behavior claims\n- source-file changes\n- public sharing/launch-scope decision\n- private-system equivalence\n- whole-system safety\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: No live sabotage, exploit instruction, account secret/account material, private reasoning, harmful payload, or deployment-risk product claim; synthetic fixtures and metadata-only result records only.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13876,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "agentsabotageschemingmonitorreplay is a technical paper module for a drilldown-only regression component. It validates whether a sabotage/scheming monitor claim is backed by joinable synthetic episodes, action traces, per-step monitor scores, counterfactual benign replay, cold replay, falsification fixtures, source-artifact evidence refs, metadata-only result records, and an explicit scope limit. The core contribution is not a live scheming detector. It is a replay contract: given a public fixture or exported bundle, the component recomputes caught/not-caught verdicts from monitor evidence, checks whether counterfactual replay isolates the side objective, verifies source-artifact digest/pro\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "telos",
       "title": "Telos",
       "level": 2,
       "excerpt": "The module exists to make safety-monitor evidence auditable without laundering a demo into a deployment claim. Frontier-lab readers should be able to answer: Which finite evidence rows support the sabotage/scheming monitor claim? Which verdicts are recomputed from scores and joins rather than echoed from fixture labels? Which mutations and negative cases cause rejection? result records? Which claims remain out of scope even when every local check is green?",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism",
       "title": "Mechanism",
       "level": 2,
       "excerpt": "The runtime locus is src/microcosmcore/components/agentsabotageschemingmonitor_replay.py. It exposes two public admission paths: run validates the first-wave fixture under fixtures/firstwave/agentsabotageschemingmonitor_replay/input. runsabotagebundle validates the exported bundle under examples/agentsabotageschemingmonitorreplay/exportedsabotagemonitor_bundle. Both paths call buildresult. The builder loads: projection_protocol.json schemingmonitorpolicy.json task_episodes.json action_traces.json monitor_scores.json counterfactual_replay.json cold_replay.json sourcemodulemanifest.json when present The monitor proof is a join-and-recompute circuit. validatetaskepisodes, validateactiontraces,\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-floor",
       "title": "Evidence Floor",
       "level": 2,
       "excerpt": "The local floor is intentionally small and inspectable: The exported bundle adds schemingeppublicauthorityprobe and obspublicauthority_probe. That row is the real dogfood-trace floor: it comes from a sanitized public command-trace slice, verifies against the source trace digest, drops argv/stdout/stderr previews, and remains metadata-only in result records. The tests require it to compute a block monitor verdict and a caught episode without exporting private session material. The source-open body floor is split: The runtime imports microcosmcore.macrotools.agentexecutiontrace::buildpublicsabotageschemingmonitor_trace as the public recomputation body. The exported bundle manifest carries age\u2026",
       "block_kinds": [
        "list",
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "rejection-and-perturbation-evidence",
       "title": "Rejection And Perturbation Evidence",
       "level": 2,
       "excerpt": "The focused regression suite is the strongest technical evidence for the paper claim. tests/testagentsabotageschemingmonitor_replay.py covers: Digest mismatch in sourcemodulemanifest.json blocks the exported bundle. target_ref / path mismatch blocks the exported bundle. bodytextin_receipt at manifest or row level is rejected. Missing sourceartifactevidence_refs quarantines a monitor row. A declared caught verdict that disagrees with recomputation emits PUBLICTRACESCHEMINGCAUGHTVERDICT_MISMATCH. Perturbing a high-suspicion block row down to pass moves the recomputed caught verdict and blocks the result record. A stale caught_verdict label inside a monitor-score row is rejected against the re\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle: core/papermodulecapsules.json::papermodules[34:papermodule.agentsabotageschemingmonitorreplay] Generated instance: papermodules/agentsabotageschemingmonitor_replay.json Standard: standards/stdmicrocosmagentsabotageschemingmonitorreplay.json Mechanism: mechanisms/mechanism.agentsabotageschemingmonitorreplay.validatespublicsabotageschemingmonitor_replay.json Component model: components/agentsabotageschemingmonitorreplay.json Runtime: src/microcosmcore/components/agentsabotageschemingmonitor_replay.py Trace recomputation: src/microcosmcore/macrotools/agentexecutiontrace.py::buildpublicsabotageschemingmonitor_trace Fixture input: fixtures/firstwave/agentsabotageschemingmonitor_replay/in\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-relations",
       "title": "Governing Relations",
       "level": 2,
       "excerpt": "The generated paper-module instance binds this reader page to: component:agentsabotageschemingmonitorreplay mechanism:mechanism.agentsabotageschemingmonitorreplay.validatespublicsabotageschemingmonitor_replay concept:concept.agentreliabilityandsafetyvalidator_bundle principle:P-1 principle:P-2 axiom:AX-1 papermodule.agentmonitorredteamfalsification_replay code locus: src/microcosmcore/components/agentsabotageschemingmonitor_replay.py with run, runsabotagebundle, buildresult, writereceipts, and result_card Those edges are structural evidence-routing edges. They do not by themselves prove runtime correctness; the runtime result records and tests carry that narrower claim.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the metadata-only fixture validator: Run the exported-bundle validator: Run focused tests and paper-module corpus validation: Expected local result: the fixture and exported-bundle validators pass on the checked-in inputs; the mutation tests block when digest, target-ref, body-in-result record, evidence-ref, caught-verdict, counterfactual-rank, negative semantic, or public-probe labels are corrupted.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "public-safety-boundary",
       "title": "Public-Safety Boundary",
       "level": 2,
       "excerpt": "Public rendering may describe the replay grammar, recomputation rule, falsification cases, sanitized command-trace source artifact, digest checks, and metadata-only result records. Public rendering must not include or imply: live sabotage instructions exploit steps account secrets, browser state, account or browser material, or model-output data private chain-of-thought or hidden reasoning bodies raw harmful payloads unsanitized argv/stdout/stderr previews browser UI state production telemetry live traffic live agent execution authorization deployment-risk measurement product monitor performance benchmark claims provider affiliation or provider behavior claims source-file changes public sha\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-positioning",
       "title": "Prior-Art Positioning",
       "level": 2,
       "excerpt": "The module borrows evaluation grammar from sabotage, scheming, and deceptive behavior evaluations: episodes, action traces, monitor scores, counterfactual benign replay, falsification cases, and fail-closed monitor disagreement. The closest public references remain Anthropic's sabotage evaluations, Apollo's in-context scheming evaluations, Anthropic's Sleeper Agents work, and the OpenAI/Apollo line on detecting and reducing scheming. The Microcosm claim is deliberately narrower than those research programs. It does not evaluate frontier models or live deployments. It gives the public Microcosm system a result record-backed, metadata-only, replayable safety-monitor proof shape that can rejec\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page. It may not claim more than its bundle scope limit allows: No live sabotage, exploit instruction, account secret/account material, private reasoning, harmful payload, or deployment-risk product claim; synthetic fixtures and metadata-only result records only.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component replays a monitor that watches an agent transcript for sabotage and scheming signals. It is grounded in the AI-control literature, which studies how to catch a model that may be deliberately subverting oversight rather than assuming it is benign (Greenblatt et al., AI Control, and Anthropic's sabotage evaluations). Microcosm borrows the monitor-over-transcript shape on synthetic fixtures; the result is fixture-bound replay evidence, not a live monitor, a control guarantee, or an exploit guide.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.agent_sabotage_scheming_monitor_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON bundle authority\"] fixture[\"fixture or exported bundle\"] episodes[\"task episodes\"] actions[\"action traces\"] scores[\"monitor scores\"] sourceManifest[\"source module manifest\"] sourceArtifacts[\"digest-checked public artifacts\"] counterfactual[\"counterfactual replay\"] cold[\"cold replay\"] recompute[\"public trace recomputation\"] negatives[\"negative/falsification cases\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limit\"] bundle --> fixture fixture --> episodes fixture --> actions fixture --> scores fixture --> counterfactual fixture --> cold fixture --> sourceManifest sourceManifest --> sourceArtifacts episodes --> recompute actions --> recompute scores --> recompute counterfactual --> recompute cold --> recompute negatives --> result record sourceArtifacts --> result record recompute --> result record result record --> ceiling",
       "source_hash": "sha256:e880f407048ad4b77c7f392f6536468ac6043342f10a8bc406d2de1349d2e203",
       "html_url": "docs/paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay-diagram-1",
       "html_anchor": "paper-module-agent-sabotage-scheming-monitor-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sabotage_scheming_monitor_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Greenblatt et al., AI Control",
       "url": "https://arxiv.org/abs/2312.06942",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "sabotage evaluations",
       "url": "https://www.anthropic.com/research/sabotage-evaluations",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.agent_monitor_redteam_falsification_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Monitor Redteam Falsification Replay",
         "url": "paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agent_sabotage_scheming_monitor_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agent Sabotage Scheming Monitor Replay",
         "url": "components.html#component-agent_sabotage_scheming_monitor_replay"
        },
        {
         "id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public sabotage scheming monitor replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sabotage_scheming_monitor_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14697
    },
    {
     "id": "paper_module.agent_sandbox_policy_escape_replay",
     "title": "Agent Sandbox Policy-Escape Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-sandbox-policy-escape-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-sandbox-policy-escape-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-sandbox-policy-escape-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Validator-backed public refactor of source agent_execution_trace for sandbox/security: metadata-only trace spans, pre-exec policy verdicts, side-effect diffs",
     "summary": "Validator-backed public refactor of the source agent_execution_trace system for sandbox/security claims. Computes metadata-only trace spans from action requests, pre-execution policy verdicts, side-effect diff result records, and rollback against negative cases and scope limits.",
     "authority_ceiling": "No live sandbox escape, live secret handling, or live network; source-faithful refactored fixtures and metadata-only result records only; not a complete-security or launch claim.",
     "abstract": "Validator-backed public refactor of source agent_execution_trace for sandbox/security: metadata-only trace spans, pre-exec policy verdicts, side-effect diffs",
     "teleology": {
      "section_id": "",
      "text": "Validator-backed public refactor of source agent_execution_trace for sandbox/security: metadata-only trace spans, pre-exec policy verdicts, side-effect diffs",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`agent_sandbox_policy_escape_replay` is a validator-backed public refactor of the source `agent_execution_trace` system for sandbox/security claims. It asks a narrow question: can Microcosm compute metadata-only trace spans from action requests, pre-execution policy verdicts, side-effect diff result records, rollback result records, cold replay, falsification fixtures, and an explicit scope limit?\n\n###### Purpose\n\nAgent sandbox claims are easy to assert and hard to evidence. A system can say it blocks an untrusted action, or that a side effect was rolled back, without ever showing the record that would make the statement checkable. This component exists to hold one narrow claim to account: that for a fixed set of synthetic action requests, the policy decision was recorded before execution, blocked actions left no side effect, and permitted side effects each carry a diff and a rollback result record.\n\nThe interesting choice is that the validator does not trust the verdict it is handed. For each request it derives the expected verdict from the request's own shape, its action kind, requested capability, risk class, and source trust label, using a small fixed policy table (`_derived_sandbox_policy_verdict`). A secret read from untrusted tool output derives to `block`; a low-risk public fixture write derives to `allow`; a mock database update derives to `review`. Any action shape the table does not recognise fails closed to `block`. The recorded verdict row is then checked against that derivation. A declared `allow` that should have derived to `block` is a finding, not a pass. The same fail-closed semantics drive the side-effect check: a request whose shape requires a block must show no execution and a zero diff count regardless of what the verdict row claims.\n\nBecause every check runs over symbolic references, the page can report concrete numbers, six action requests, four derived blocks, six metadata-only trace spans, while staying honest about what those numbers are not. They demonstrate that the pre-execution accounting pattern is wired and replayable over public fixtures. They do not demonstrate containment in a real host, resistance to a live exploit, or network isolation. That gap is the point of the scope limit below, and it is the line this component is built to keep visible.\n\n###### Named Proof Consumers\n\nThe primary proof consumer is `tests/test_agent_sandbox_policy_escape_replay.py`. Its 17 tests exercise both runtime entry points (`run` and `run_sandbox_bundle`) and the public trace builder from `microcosm_core.macro_tools.agent_execution_trace`. The consumer does not accept declared labels at face value: it mutates policy verdicts, side-effect rows, cold replay labels, exported bundle rows, source-module digests, source/target manifest fields, body-boundary fields, and cached-card freshness to prove that the validator recomputes the sandbox-policy result from source rows.\n\nThe fixture proof path is `microcosm_core.organs.agent_sandbox_policy_escape_replay run`. Its success result record must include six action requests, six pre-execution verdicts, four derived blocked rows, one derived allow row, one derived review row, six side-effect result records, two rollback-verified rows, six cold replay passes, all expected negative cases, and a six-span public trace. The negative-case rows are not auxiliary examples; they are the admission boundary that rejects semantic policy drift, blocked-action execution, executable escape payload material, tool-output authority bypass, raw environment exposure, and broad security or benchmark overclaim.\n\nThe exported-bundle proof path is `microcosm_core.cli agent-sandbox-policy-escape-replay run-sandbox-bundle`. It has no fixture-only negative cases, so its proof surface shifts to bundle shape: the bundle id, source-module manifest, seven copied source bodies, digest equality, required anchors, metadata-only result records, public-relative paths, and public trace spans must all validate. The same test file also breaks the manifest in targeted ways to prove that missing manifests, invalid material classes, body-in-result record flags, count mismatches, missing target copies, and partial source or target digest drift block the result.\n\nThe corpus proof consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`. It proves only that this reader page remains aligned with the JSON bundle-backed paper-module corpus. It does not refresh generated Mermaid, Atlas, site, or verifier projections, and it does not raise the claim above public fixture and bundle replay evidence.\n\n###### Technical Mechanism\n\nThe mechanism is a validating transducer over public refs, not a sandbox. The runtime entry points `run` and `run_sandbox_bundle` load the fixture or exported bundle, then `_build_result` recomputes each claim from lower-level rows before any result record is accepted. The named proof consumer is `tests/test_agent_sandbox_policy_escape_replay.py`, with the corpus-level projection consumer `scripts/build_doctrine_projection.py --check-paper-module-corpus`.\n\nThe validator first establishes an input boundary. `_load_payloads` reads the projection protocol, sandbox policy, action requests, verdicts, side-effect result records, rollback result records, and cold replay rows with strict JSON parsing. `scan_paths` checks the same public files and copied source-module bodies against `core/private_state_forbidden_classes.json`, while `_source_module_manifest_result` verifies that the seven copied source bodies are present, digest-matched, by material class, and excluded from result record body fields.\n\nThe policy mechanism is then recomputed row by row. `validate_action_requests` admits only symbolic request metadata with redacted bodies and no live network target. `validate_policy_verdicts` joins each request to a pre-execution verdict and checks the verdict against the request's risk class instead of trusting the declared label. `validate_side_effect_receipts` enforces the mechanical consequence: block decisions must have no execution and no diff, while allow/review decisions must carry a non-empty public diff result record. `validate_rollback_receipts` requires rollback refs for side-effecting actions, and `validate_cold_replay` requires replay rows that reproduce verdict and side-effect state.\n\nThe trace layer converts accepted public rows into metadata-only `PublicTraceSpan` records through `build_public_sandbox_policy_trace`. Each span carries a request id, authority verdict ref, side-effect or rollback ref, outcome, digest, and `sandbox_policy_action` tool label. This is why the module can claim six public trace spans and outcome counts, but cannot claim live sandbox security: the trace proves replay consistency over refs, not containment in a real host environment.\n\nNegative cases define the refusal surface. The focused test suite mutates the fixture and exported bundle to verify semantic mismatch, blocked-action execution, source-module digest mismatch, source-module manifest boundary breakage, public-relative result record paths, and card reuse. These tests are the source-bound evidence that the validator fails closed for the named public contract.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] manifest[\"source module manifest\"] requests[\"six action requests\"] verdicts[\"six pre-execution verdicts\"] effects[\"six side-effect result records\"] rollbacks[\"two rollback result records\"] replay[\"six cold replay rows\"] trace[\"public agent-execution trace\"] negative[\"negative-case refusals\"] tests[\"focused proof consumer\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limits\"] bundle --> markdown manifest --> result record requests --> verdicts verdicts --> effects effects --> rollbacks effects --> replay verdicts --> negative effects --> negative replay --> trace negative --> tests trace --> result record tests --> result record result record --> ceiling\n```\n\nThe module's shape is pre-execution containment accounting. Public action requests are normalized into symbolic refs, policy verdicts must exist before execution, blocked actions carry zero side effects, allowed or reviewed side effects need diff refs and rollback refs, cold replay must reproduce the public state, and the trace builder emits metadata-only spans over those refs without promoting the fixture into live sandbox-security authority.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[35]` is the bundle-backed authority row, and `paper_modules/agent_sandbox_policy_escape_replay.json` is the generated paper-module instance.\n- Bundle route: `examples/agent_sandbox_policy_escape_replay/exported_sandbox_policy_escape_bundle` carries `action_requests.json`, `policy_verdicts.json`, `side_effect_receipts.json`, `rollback_receipts.json`, `cold_replay.json`, `sandbox_policy.json`, `projection_protocol.json`, and `source_module_manifest.json`.\n- Action route: the six public request ids are `req_secret_read_attempt`, `req_network_exfil_attempt`, `req_destructive_delete_attempt`, `req_shell_obfuscation_attempt`, `req_safe_file_edit`, and `req_reviewed_mock_db_update`.\n- Verdict route: the six verdict rows are pre-execution policy decisions under `sandbox-policy-v1-public-synthetic`, with four `block`, one `allow`, and one `review` outcome.\n- Side-effect route: all six requests have side-effect result records; blocked rows use zero diffs, while the public fixture edit and reviewed mock database update carry diff refs plus rollback refs.\n- Manifest route: `source_module_manifest.json` records seven copied source bodies, `body_in_receipt: false`, `body_text_in_receipt: false`, and the boundary excluding keys, account secrets, account or browser material, model-output data, live network payloads, raw environments, executable escape payloads, and account secret-equivalent material.\n- Runtime route: `src/microcosm_core/organs/agent_sandbox_policy_escape_replay.py`, `src/microcosm_core/macro_tools/agent_execution_trace.py`, and `tests/test_agent_sandbox_policy_escape_replay.py` verify negative cases, public trace-span construction, exact source-module imports, manifest digest rejection, result record public-relativity, and card result record reuse.\n\n###### Contract\n- Input shape: `projection_protocol`, `sandbox_policy`, `action_requests`, `policy_verdicts`, `side_effect_receipts`, `rollback_receipts`, and `cold_replay`.\n- Positive evidence: six metadata-only action requests converted into public `agent_execution_trace` spans, six pre-execution policy verdicts, six side-effect result records, two verified rollback result records, and six cold replay rows.\n- Negative cases: real secret material, live network access, raw environment export, policy after execution, unlogged side effect, tool-output policy bypass, executable escape payload, and security benchmark claim.\n- Result record boundary: the validation result record proves the source-faithful trace refactor mechanics, negative-case coverage, secret-exclusion scan, and scope limit.\n- Scope limit: no live sandbox escape, live secret handling, live network access, host filesystem mutation, executable payload export, raw environment export, external model access, security benchmark claim, source-file changes, or launch-scope decision.\n\n###### Projection Protocol\n\nCopied: the public shape of the source agent-execution trace membrane and the idea that containment must be proven before a security claim is admitted.\n\nSource-faithfully refactored: `PublicTraceSpan` construction, sequence-ordered trace rows, authority verdict refs, side-effect and rollback refs, public summary counts, trace digests, local JSON validators, and result record generation.\n\nCleaned: real secrets, host paths, live network targets, raw environment data, executable payloads, provider data, and account state.\n\nOmitted: live exploit material, hosted sandbox details, real account secrets, raw tool-output bodies, real filesystem paths, raw environment variables, and security benchmark claims claims.\n\nPublic runtime surface: a metadata-only sandbox policy bundle plus generated result records under `receipts/first_wave/agent_sandbox_policy_escape_replay/` and `receipts/runtime_shell/demo_project/organs/agent_sandbox_policy_escape_replay/`.\n\nSource-open body floor: the exported bundle carries `source_module_manifest.json` plus seven exact copied source bodies: the extracted-pattern ledger, the high novelty reconstruction result record, the canonical component model, the source `system/lib/agent_execution_trace.py` runtime, `std_agent_execution_trace`, the extracted-pattern route-readiness checker, and the strict JSON helper required by the refreshed trace body. Result records and cards cite the manifest, hashes, material classes, and counts only; full body text stays in the bundle source module files.\n\n###### Prior Art Grounding\n\nThis component is grounded in least-privilege sandboxing and agent-security evaluation work, not in a new exploit technique. The security-control lineage is Saltzer and Schroeder's [least-privilege / complete-mediation principles](https://www.cs.virginia.edu/~evans/cs551/saltzer/) and capability-oriented confused-deputy thinking. The agent-evaluation lineage is closer to sandboxed tool-use benchmarks such as [AgentDojo](https://arxiv.org/abs/2406.13352) and misuse/harm evaluations such as [AgentHarm](https://arxiv.org/abs/2410.09024), where an agent's requested actions, tool calls, and policy outcomes are evaluated under controlled conditions.\n\nMicrocosm does not claim real sandbox security, exploit resistance, or live environment isolation. It borrows the pattern that containment must be checked before action, side effects must be logged, rollback needs its own result record, and harmful payloads must stay out of the public surface.\n\nValidation proves the projection boundary and public trace-refactor mechanics for this contract; it does not establish real sandbox security, live model behavior, benchmark claims, exploit resistance, or whole-system safety.\n\n###### Validation Result records\n\nThe focused proof consumer is `tests/test_agent_sandbox_policy_escape_replay.py`. A passing result record has to show that the fixture validator and exported-bundle validator both recompute the public sandbox-policy trace from action-request refs, pre-execution verdict refs, side-effect result record refs, rollback refs, cold replay rows, and the source-module manifest instead of trusting declared labels.\n\n```text\nPYTHONDONTWRITEBYTECODE=1 ./repo-pytest \\\n  tests/test_agent_sandbox_policy_escape_replay.py \\\n  -p no:cacheprovider\n./repo-python scripts/build_doctrine_projection.py \\\n  --check-paper-module-corpus\n```\n\nFor the focused test, the result record boundary is the asserted shape: six action requests, six policy verdicts, four blocked-without-execution rows, two verified rollback result records, six cold replay rows, six public trace spans, manifest digest checks, public-relative result record paths, and negative cases for semantic mismatch, blocked-action execution, digest mismatch, manifest-boundary breakage, and unsafe card reuse. For the corpus check, the result record is only parity evidence that the JSON bundle and generated paper-module instance still agree; it is not a live sandbox-security result.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python \\\n  -m microcosm_core.organs.agent_sandbox_policy_escape_replay \\\n  run-sandbox-bundle \\\n  --input examples/agent_sandbox_policy_escape_replay/exported_sandbox_policy_escape_bundle \\\n  --out /tmp/agent_sandbox_policy_escape_bundle_receipt \\\n  --card > /tmp/agent_sandbox_policy_escape_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && ../repo-pytest \\\n  tests/test_agent_sandbox_policy_escape_replay.py\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe result record path proves pre-execution policy replay over public refs, not live sandbox security, exploit resistance, or host isolation.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that action request refs, pre-execution policy verdict refs, side-effect result record refs, rollback refs, cold replay rows, metadata-only trace spans, source manifests, digest checks, secret-exclusion scans, negative cases, and validation result records are checked by the listed runtime witnesses.\n\nThis module may not claim live sandbox escape resistance, live secret handling, live network isolation, host filesystem mutation authority, executable payload export, raw environment export, provider behavior, security benchmark performance, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe JSON bundle binds this paper module to the component `agent_sandbox_policy_escape_replay` and to `mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace`. The mechanism row states the actual computation: check action requests, pre-execution policy verdicts, side-effect result records, rollback result records, cold replay rows, public trace spans, source-module manifest boundaries, secret-exclusion scans, and escape negative cases before writing bounded result records.\n\n`AX-1` supplies the axiom-level rule: derivation must precede assertion, and a claim cannot be stronger than the checker that accepted it. `P-1` specializes that rule into recomputation over lower-level evidence instead of echoing fixture labels, declared verdicts, or public copy lines. `P-2` lowers the module's public claim to the strength of the named validator, which is why the scope limit stops at metadata-only public sandbox-policy replay result records. The governing concept, `concept.agent_reliability_and_safety_validator_bundle`, groups this component with agent reliability and safety validators whose public value is bounded result record evidence, not a broad claim that agents are safe in the world.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 18441,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Agent sandbox claims are easy to assert and hard to evidence. A system can say it blocks an untrusted action, or that a side effect was rolled back, without ever showing the record that would make the statement checkable. This component exists to hold one narrow claim to account: that for a fixed set of synthetic action requests, the policy decision was recorded before execution, blocked actions left no side effect, and permitted side effects each carry a diff and a rollback result record. The interesting choice is that the validator does not trust the verdict it is handed. For each request it derives the expected verdict from the request's own shape, its action kind, requested capability,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "runnable-path",
       "title": "Runnable Path",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipts",
       "title": "Validation Result records",
       "level": 2,
       "excerpt": "The focused proof consumer is tests/testagentsandboxpolicyescape_replay.py. A passing result record has to show that the fixture validator and exported-bundle validator both recompute the public sandbox-policy trace from action-request refs, pre-execution verdict refs, side-effect result record refs, rollback refs, cold replay rows, and the source-module manifest instead of trusting declared labels. For the focused test, the result record boundary is the asserted shape: six action requests, six policy verdicts, four blocked-without-execution rows, two verified rollback result records, six cold replay rows, six public trace spans, manifest digest checks, public-relative result record paths,\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "The primary proof consumer is tests/testagentsandboxpolicyescape_replay.py. Its 17 tests exercise both runtime entry points (run and runsandboxbundle) and the public trace builder from microcosmcore.macrotools.agentexecutiontrace. The consumer does not accept declared labels at face value: it mutates policy verdicts, side-effect rows, cold replay labels, exported bundle rows, source-module digests, source/target manifest fields, body-boundary fields, and cached-card freshness to prove that the validator recomputes the sandbox-policy result from source rows. The fixture proof path is microcosmcore.components.agentsandboxpolicyescape_replay run. Its success result record must include six acti\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The mechanism is a validating transducer over public refs, not a sandbox. The runtime entry points run and runsandboxbundle load the fixture or exported bundle, then buildresult recomputes each claim from lower-level rows before any result record is accepted. The named proof consumer is tests/testagentsandboxpolicyescape_replay.py, with the corpus-level projection consumer scripts/builddoctrineprojection.py --check-paper-module-corpus. The validator first establishes an input boundary. loadpayloads reads the projection protocol, sandbox policy, action requests, verdicts, side-effect result records, rollback result records, and cold replay rows with strict JSON parsing. scan_paths checks the\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that action request refs, pre-execution policy verdict refs, side-effect result record refs, rollback refs, cold replay rows, metadata-only trace spans, source manifests, digest checks, secret-exclusion scans, negative cases, and validation result records are checked by the listed runtime witnesses. This module may not claim live sandbox escape resistance, live secret handling, live network isolation, host filesystem mutation authority, executable payload export, raw environment export, provider behavior, security benchmark performance, source-file changes, public sharing decision, launch approval, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The JSON bundle binds this paper module to the component agentsandboxpolicyescapereplay and to mechanism.agentsandboxpolicyescapereplay.validatespublicsandboxpolicytrace. The mechanism row states the actual computation: check action requests, pre-execution policy verdicts, side-effect result records, rollback result records, cold replay rows, public trace spans, source-module manifest boundaries, secret-exclusion scans, and escape negative cases before writing bounded result records. AX-1 supplies the axiom-level rule: derivation must precede assertion, and a claim cannot be stronger than the checker that accepted it. P-1 specializes that rule into recomputation over lower-level evidence in\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module's shape is pre-execution containment accounting. Public action requests are normalized into symbolic refs, policy verdicts must exist before execution, blocked actions carry zero side effects, allowed or reviewed side effects need diff refs and rollback refs, cold replay must reproduce the public state, and the trace builder emits metadata-only spans over those refs without promoting the fixture into live sandbox-security authority.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: core/papermodulecapsules.json::paper_modules[35] is the bundle-backed authority row, and papermodules/agentsandboxpolicyescape_replay.json is the generated paper-module instance. Bundle route: examples/agentsandboxpolicyescapereplay/exportedsandboxpolicyescapebundle carries actionrequests.json, policyverdicts.json, sideeffectreceipts.json, rollbackreceipts.json, coldreplay.json, sandboxpolicy.json, projectionprotocol.json, and sourcemodulemanifest.json. Action route: the six public request ids are reqsecretread_attempt, reqnetworkexfilattempt, reqdestructivedeleteattempt, reqshellobfuscationattempt, reqsafefileedit, and reqreviewedmockdbupdate. Verdict route: the six verdict r\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "contract",
       "title": "Contract",
       "level": 2,
       "excerpt": "Input shape: projectionprotocol, sandboxpolicy, action_requests, policyverdicts, sideeffectreceipts, rollbackreceipts, and cold_replay. Positive evidence: six metadata-only action requests converted into public agentexecutiontrace spans, six pre-execution policy verdicts, six side-effect result records, two verified rollback result records, and six cold replay rows. Negative cases: real secret material, live network access, raw environment export, policy after execution, unlogged side effect, tool-output policy bypass, executable escape payload, and security benchmark claim. Result record boundary: the validation result record proves the source-faithful trace refactor mechanics, negative-ca\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "projection-protocol",
       "title": "Projection Protocol",
       "level": 2,
       "excerpt": "Copied: the public shape of the source agent-execution trace membrane and the idea that containment must be proven before a security claim is admitted. Source-faithfully refactored: PublicTraceSpan construction, sequence-ordered trace rows, authority verdict refs, side-effect and rollback refs, public summary counts, trace digests, local JSON validators, and result record generation. Cleaned: real secrets, host paths, live network targets, raw environment data, executable payloads, provider data, and account state. Omitted: live exploit material, hosted sandbox details, real account secrets, raw tool-output bodies, real filesystem paths, raw environment variables, and security benchmark cla\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture validator from the repo root and write its result record outside the repo working tree: Then run the exported bundle validator: The focused regression test and corpus projection checks are: The result record path proves pre-execution policy replay over public refs, not live sandbox security, exploit resistance, or host isolation.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in least-privilege sandboxing and agent-security evaluation work, not in a new exploit technique. The security-control lineage is Saltzer and Schroeder's least-privilege / complete-mediation principles and capability-oriented confused-deputy thinking. The agent-evaluation lineage is closer to sandboxed tool-use benchmarks such as AgentDojo and misuse/harm evaluations such as AgentHarm, where an agent's requested actions, tool calls, and policy outcomes are evaluated under controlled conditions. Microcosm does not claim real sandbox security, exploit resistance, or live environment isolation. It borrows the pattern that containment must be checked before action, si\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.agent_sandbox_policy_escape_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] manifest[\"source module manifest\"] requests[\"six action requests\"] verdicts[\"six pre-execution verdicts\"] effects[\"six side-effect result records\"] rollbacks[\"two rollback result records\"] replay[\"six cold replay rows\"] trace[\"public agent-execution trace\"] negative[\"negative-case refusals\"] tests[\"focused proof consumer\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limits\"] bundle --> markdown manifest --> result record requests --> verdicts verdicts --> effects effects --> rollbacks effects --> replay verdicts --> negative effects --> negative replay --> trace negative --> tests trace --> result record tests --> result record result record --> ceiling",
       "source_hash": "sha256:b954ad21a7c2b9dc9afb4dcc0aa4e0647f834e22292815f3c9c0f34114cc883e",
       "html_url": "docs/paper-modules.html#paper-module-agent-sandbox-policy-escape-replay-diagram-1",
       "html_anchor": "paper-module-agent-sandbox-policy-escape-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sandbox_policy_escape_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "least-privilege / complete-mediation principles",
       "url": "https://www.cs.virginia.edu/~evans/cs551/saltzer/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "AgentDojo",
       "url": "https://arxiv.org/abs/2406.13352",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "AgentHarm",
       "url": "https://arxiv.org/abs/2410.09024",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.computer_use_action_trace_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Computer-Use Action Trace Replay",
         "url": "paper-modules.html#paper-module-computer-use-action-trace-replay"
        },
        {
         "id": "paper_module.mcp_tool_authority_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "MCP Tool Authority Replay",
         "url": "paper-modules.html#paper-module-mcp-tool-authority-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agent_sandbox_policy_escape_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agent Sandbox Policy Escape Replay",
         "url": "components.html#component-agent_sandbox_policy_escape_replay"
        },
        {
         "id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public sandbox policy trace",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sandbox_policy_escape_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 19251
    },
    {
     "id": "paper_module.belief_state_process_reward_replay",
     "title": "Belief-State Process Reward Replay",
     "relative_href": "docs/paper-modules.html#paper-module-belief-state-process-reward-replay",
     "read_href": "docs/paper-modules.html#paper-module-belief-state-process-reward-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-belief-state-process-reward-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Public projection of a belief-state process-reward claim contract, backed by the agent-execution trace refactor and copied source bodies.",
     "summary": "Public Microcosm projection of a belief-state process-reward claim contract. Backed by the public agent-execution trace refactor lane plus copied source source bodies; validates trajectory groups, cold replay result records, negative cases, and scope limits.",
     "authority_ceiling": "Source-faithful refactored fixtures and copied source bodies only; not fixture-echo product evidence, benchmark result, or launch claim.",
     "abstract": "Public projection of a belief-state process-reward claim contract, backed by the agent-execution trace refactor and copied source bodies.",
     "teleology": {
      "section_id": "",
      "text": "Public projection of a belief-state process-reward claim contract, backed by the agent-execution trace refactor and copied source bodies.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This module is the public Microcosm projection of a belief-state process reward claim contract. It is backed by the public agent-execution trace refactor lane plus copied source source bodies. It is not a hidden-reasoning export, live RL run, neural-judge-only label set, hidden-gold benchmark, external model access, source-file changes, benchmark-score claim, or launch claim.\n\nThe public bundle models three partially observable tasks: terminal investigation, mock purchase, and formal-planning toy. A process-reward claim is admitted only when public observation digests, typed belief-state summaries, predicted next evidence, verifier or observed feedback refs, belief-discrepancy scores, dense process rewards, outcome rewards, reward-hacking trap results, trajectory groups, cold replay result records, negative cases, scope limits, and a source-faithful public trace span set line up.\n\n###### Purpose\n\nProcess-reward language is easy to assert and hard to verify. A row can claim that a step earned a reward \"for good reasoning\" while the underlying evidence is a hidden gold label, a neural-judge guess, or formatting that gamed the scorer. This component exists to answer one narrow question: does a public process-reward claim actually reconstruct from lower-level public evidence, or is it just a label asserting its own correctness?\n\nThe interesting part is the recomputation. The validator does not trust any single fixture file. If any of those refs is missing or points somewhere inconsistent, the claim is blocked with a specific reason code rather than passed. A reward cannot point at a belief that points at a different episode, or cite feedback that belongs to another trajectory, and still count.\n\nThat cross-referential check is what separates this from a shape linter. The failure mode it guards against is a process-reward claim that looks correct field by field but does not survive being recomputed end to end. Two further design choices keep the result honest: outcome rewards are carried beside process rewards so a final answer cannot be re-labelled as step-level evidence, and every belief summary, feedback ref, and reward event stays metadata-only, so the validator proves the accounting structure without ever reading hidden reasoning.\n\n###### Shape\n\nThe local governing standard is `standards/std_microcosm_belief_state_process_reward_replay.json`, whose authority boundary is synthetic belief-state process-reward replay only, not live training, benchmark, provider, source-file changes, public sharing, or launch-scope decision.\n\nSource refs\n\nLocal standard `std_microcosm_belief_state_process_reward_replay.json` Runtime locus `belief_state_process_reward_replay.py` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record paper_module_capsules.json[36]\"] standard[\"Local standard std_microcosm_belief_state_process_reward_replay.json\"] component[\"Runtime locus belief_state_process_reward_replay.py\"] fixtureMode[\"run (fixture mode) 8 positive + 7 negative inputs\"] bundleMode[\"run_reward_bundle (bundle mode) copied-body manifest floor required\"] floors[\"Per-file floors projection protocol, reward policy, episodes, belief states, feedback, rewards, trajectory groups, cold replay\"] recompute[\"Semantic recompute rebuild belief -> feedback -> process reward -> trajectory -> outcome reward -> cold replay\"] negatives[\"Negative cases 7 planted traps must be observed\"] scan[\"Secret-exclusion scan plus metadata-only public trace span set\"] gate{\"All floors pass, chain recomputes, every trap observed, no secret hit?\"} pass[\"status: pass\"] blocked[\"status: blocked with reason codes\"] result records[\"Result records + compact card refs, hashes, counts, verdicts; body_in_receipt false\"] ceiling[\"Scope limit source-faithful replay only\"] bundle --> component standard --> component component --> fixtureMode component --> bundleMode fixtureMode --> floors bundleMode --> floors floors --> recompute recompute --> negatives negatives --> scan scan --> gate gate -->|yes| pass gate -->|no| blocked pass --> result records blocked --> result records result records --> ceiling\n```\n\nThe generated instance reports eight relationship edges and zero unpopulated selective relations: it explains the `belief_state_process_reward_replay` component and the validating mechanism, is governed by `P-1`, `P-2`, and `concept.agent_reliability_and_safety_validator_bundle`, abides by `AX-1`, depends on `paper_module.agent_route_observability_runtime`, and cites `src/microcosm_core/organs/belief_state_process_reward_replay.py` as the resolved code locus. The component atlas adds the human/agent gloss and result record set; it classifies the evidence as `algorithmic_projection` and restates that the validator operates on recorded synthetic fixtures rather than live agent behavior.\n\nThe fixture manifest `fixtures/first_wave/belief_state_process_reward_replay/fixture_manifest.json` names eight positive input files and seven planted negative cases: hidden-chain-of-thought export, neural-judge-only labels, hidden gold labels, reward-by-formatting, verifier bypass, benchmark-performance claims, and final-answer-only scoring. The exported bundle manifest carries the source-open body floor: seven copied source modules under `source_modules/`, checked by digest and anchor refs, with `body_text_exported_in_receipts: false`. The focused test file `tests/test_belief_state_process_reward_replay.py` covers the fixture validator, exported bundle validator, public-root copy, negative cases, exact source body imports, and route/result record shape.\n\nThe honest ceiling is therefore narrow: this module can support public, metadata-only belief-state process-reward replay over synthetic tasks with verifier-backed process feedback, separated outcome rewards, cold replay, and negative-case coverage. It cannot support hidden reasoning export, live RL, reward-model quality, hidden-gold benchmark claims, provider behavior, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Reader Evidence Routing\n\nRead this page from the structured bindings outward. The bindings name the component, mechanism, concept, dependency module, runtime code locus, principle and axiom refs. The fixture result records, bundle result records, and focused test then show the metadata-only replay behavior. This page explains that chain for readers.\n\n###### Technical Mechanism\n\nThe runtime validator is a two-mode replay checker. In fixture mode, `run` loads eight positive fixture files plus the seven planted negative inputs named by `EXPECTED_NEGATIVE_CASES`; `_build_result` then validates the projection protocol, reward policy, task episodes, belief states, verifier feedback, reward events, trajectory groups, cold replay, negative cases, secret-exclusion scan, and public trace projection before `_write_receipts` writes the result, board, validation, and sign-off result records. A pass requires all required positive floors to pass, every expected negative case to be observed, zero secret-scan blocking hits, public trace status `pass`, and no positive finding outside the expected falsification cases.\n\nIn exported-bundle mode, `run_reward_bundle` validates the public bundle without negative inputs and makes the copied-body floor mandatory. The `source_module_manifest.json` path must declare seven copied source body modules, `body_in_receipt: false`, `body_text_in_receipt: false`, public material classes, exact source/target digests, existing copied targets, and all declared anchors. Digest mismatch, missing manifest, wrong body class, result record-body leakage, count mismatch, missing target, and missing anchor cases block the bundle instead of degrading silently.\n\nBetween the per-file floors and the result records sits `validate_semantic_recompute`, which is where most of the real work happens. It checks that the cited feedback belongs to the same episode, that the process reward references the same belief, episode, trajectory, feedback ref, and belief-discrepancy value, that the trajectory actually lists that episode and that reward, that the trajectory's outcome reward is a real outcome event for the same episode, and that the cold replay both exists and passes. Any inconsistency appends a precise reason code such as `feedback_episode_mismatch`, `belief_discrepancy_mismatch`, or `trajectory_process_reward_missing`, and a single blocked row is enough to block the whole result. This is the check that a label-only fixture cannot fake: the references have to recompute into one coherent chain, not merely be present.\n\nThe validator links process-reward claims to public belief summaries rather than private reasoning. `build_public_belief_state_process_reward_trace` emits six metadata-only trace spans from the exported bundle, and the card path reports only compact counts, status, freshness digest, source-body floor metadata, and result record refs. `CARD_OMITTED_FULL_PAYLOAD_KEYS` keeps findings, scans, trace bodies, row payloads, source imports, scope limit, and scope boundary text out of the command card so public surfaces carry proof handles rather than copied private or source bodies.\n\n###### Named Proof Consumers\n- `microcosm_core.organs.belief_state_process_reward_replay.run` is the first-wave fixture consumer. It writes result, board, validation, and sign-off result records for the synthetic episodes and negative-case floor.\n- `microcosm_core.organs.belief_state_process_reward_replay.run_reward_bundle` is the exported bundle consumer. It validates copied source bodies, public trace spans, digest/anchor contracts, and metadata-only result record behavior.\n- `microcosm_core.organs.belief_state_process_reward_replay.result_card` is the compact public card consumer. It reports counts and validation state while omitting the heavy/private payload classes named by `CARD_OMITTED_FULL_PAYLOAD_KEYS`.\n- `tests/test_belief_state_process_reward_replay.py` is the focused regression consumer. It asserts the three episode groups, six belief states, six process rewards, three outcome rewards, three cold replays, seven expected negative cases, exact source-body imports, digest mismatch blockers, manifest-boundary blockers, public-relative redacted result records, fresh-card reuse, and metadata-only public trace projection.\n- `microcosm_core.macro_tools.agent_execution_trace.build_public_belief_state_process_reward_trace` is the trace-projection consumer. It converts the exported bundle into six public spans with belief-state, feedback, process-reward, outcome-reward, and cold-replay coverage while preserving `body_in_receipt: false`.\n\n###### Public Mechanics\n- Belief-state JSON is a public summary, not hidden chain-of-thought.\n- Process rewards must cite deterministic verifier or observed environment feedback refs; neural-judge-only labels are rejected.\n- Outcome rewards are carried beside process rewards so final answers cannot masquerade as process evidence.\n- Reward-hacking traps and cold replay result records must pass for each trajectory group.\n- `microcosm_core.macro_tools.agent_execution_trace:: build_public_belief_state_process_reward_trace` turns the public bundle into ordered trace spans that preserve belief, verifier, process-reward, outcome-reward, and cold-replay refs while keeping bodies out of result records.\n- `examples/belief_state_process_reward_replay/ exported_belief_state_process_reward_bundle/source_module_manifest.json` verifies exact copied source bodies for the extracted-pattern ledger, high-novelty reconstruction result record, canonical component model, agent-execution trace runtime, trace standard, and route-readiness checker. Those bodies live in `source_modules/`; result records carry refs, hashes, counts, and verdicts only.\n- Hidden reasoning export, hidden gold labels, reward-by-formatting, verifier bypass, benchmark-performance claims, and final-answer-only scoring are expected falsification fixtures.\n\n###### Prior Art Grounding\n\nThis component is grounded in three older ideas: belief-state tracking under partial observability, process supervision, and reward-hacking controls. The belief lineage comes from POMDP work such as Kaelbling, Littman, and Cassandra's [Planning and Acting in Partially Observable Stochastic Domains](https://people.smp.uq.edu.au/YoniNazarathy/Control4406_2014/resources/KaelblingLittmanCassandra1998.pdf). The process-reward lineage follows OpenAI's [Let's Verify Step by Step](https://arxiv.org/abs/2305.20050), where step-level feedback is separated from outcome-only supervision. The reward-hacking lineage comes from [Concrete Problems in AI Safety](https://openai.com/index/concrete-ai-safety-problems/) and related work on specification gaming.\n\nMicrocosm does not train a reward model or expose hidden reasoning. It borrows the accounting form: public belief summaries, verifier-backed process feedback, outcome rewards kept separate from process rewards, reward-hacking traps, and cold replay result records before process-reward language is admitted.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.belief_state_process_reward_replay run-reward-bundle --input examples/belief_state_process_reward_replay/exported_belief_state_process_reward_bundle --out /tmp/belief_state_process_reward_bundle_receipt --card > /tmp/belief_state_process_reward_bundle_card.json\n```\n\n###### Scope boundary\n\n###### Limitations\n\nThe replay is intentionally small and synthetic. It covers three partially observable task families, six accepted belief summaries, six process rewards, three outcome rewards, three trajectory groups, three cold replays, seven negative cases in fixture mode, and seven copied source modules in exported-bundle mode. Those counts are proof boundaries, not scale claims. They show that the public validator can separate belief summaries, verifier-backed process feedback, outcome rewards, reward-hacking traps, and cold replay under declared fixtures.\n\nThe mechanism does not estimate reward-model calibration, generalize to unseen tasks, compare agent policies, certify live training behavior, or score a benchmark. `build_public_belief_state_process_reward_trace` emits metadata-only trace spans, so it can prove trace structure and privacy boundaries, not hidden reasoning fidelity. The copied-source manifest proves exact declared public source bodies and anchors for this bundle; it excludes private source root export, external model access, source-file changes, public sharing, or launch.\n\n###### Scope limit\n\nSource-faithful refactored fixtures and copied source bodies only; not fixture-echo product evidence, hidden reasoning export, live RL training, neural-judge sufficiency, hidden-gold benchmarking, provider behavior, benchmark claims, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Scope limit\n\nThis paper module can claim a metadata-only belief-state process-reward replay over synthetic tasks, with public belief summaries, verifier-backed process feedback, separated outcome rewards, reward-hacking traps, and cold replay result records.\n\nIt cannot claim hidden reasoning export, live RL training, reward-model quality, hidden-gold benchmark claims, provider behavior, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness. Any higher claim must land first in `core/paper_module_capsules.json` and the generated paper-module projection.\n\n###### Scope boundary\n\nThis module does not export hidden reasoning, run RL or train a model, use hidden gold labels, rely on neural-judge-only labels, claim benchmark performance, use external model services, change source files, publish results, or include launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing lattice relation is that belief-state process-reward language is admissible only after the runtime recomputes the claim from lower-level public evidence. The generated JSON instance resolves eight edges and leaves no selective relation open: the bundle explains the `belief_state_process_reward_replay` component and `mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay`, is governed by `concept.agent_reliability_and_safety_validator_bundle`, `P-1`, and `P-2`, abides by `AX-1`, depends on `paper_module.agent_route_observability_runtime`, and cites `src/microcosm_core/organs/belief_state_process_reward_replay.py` as the code locus.\n\nThat relation matters because the module is not trying to make reward quality plausible from a label. `P-1` requires recomputation rather than echoing fixture verdicts, so `_build_result` rechecks projection protocol, reward policy, episodes, belief rows, feedback rows, reward rows, trajectory groups, cold replay, expected negative cases, secret-exclusion scans, public trace shape, and copied source-module manifests. `P-2` and `AX-1` then lower the paper claim to what those checks derive: a local replay certificate over declared public inputs. The focused proof consumer is `tests/test_belief_state_process_reward_replay.py`, which exercises both fixture and exported-bundle modes, mutates real positive feedback linkage, rejects digest and manifest boundary violations, verifies exact source-body imports, checks freshness over live source authority, and confirms the command card omits full payload keys.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 17697,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Process-reward language is easy to assert and hard to verify. A row can claim that a step earned a reward \"for good reasoning\" while the underlying evidence is a hidden gold label, a neural-judge guess, or formatting that gamed the scorer. This component exists to answer one narrow question: does a public process-reward claim actually reconstruct from lower-level public evidence, or is it just a label asserting its own correctness? The interesting part is the recomputation. The validator does not trust any single fixture file. Beyond checking each file's own floor, validatesemanticrecompute episode it belongs to, the verifier feedback it cites, the process reward that scored it, the traject\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The authoritative shape is the JSON source record core/papermodulecapsules.json::papermodules[36:papermodule.beliefstateprocessrewardreplay] and its generated JSON instance papermodules/beliefstateprocessreward_replay.json; this Markdown remains The local governing standard is standards/stdmicrocosmbeliefstateprocessrewardreplay.json, whose authority boundary is synthetic belief-state process-reward replay only, not live training, benchmark, provider, source-file changes, public sharing, or launch authority. The generated instance reports eight relationship edges and zero unpopulated selective relations: it explains the beliefstateprocessrewardreplay component and the validating mechanism,\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The governing lattice relation is that belief-state process-reward language is admissible only after the runtime recomputes the claim from lower-level public evidence. The generated JSON instance resolves eight edges and leaves no selective relation open: the bundle explains the beliefstateprocessrewardreplay component and mechanism.beliefstateprocessrewardreplay.validatespublicbeliefstateprocessrewardreplay, is governed by concept.agentreliabilityandsafetyvalidator_bundle, P-1, and P-2, abides by AX-1, depends on papermodule.agentrouteobservabilityruntime, and cites src/microcosmcore/components/beliefstateprocessreward_replay.py as the code locus. That relation matters because the module i\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this page from the structured bindings outward. The bindings name the component, mechanism, concept, dependency module, runtime code locus, principle and axiom refs. The fixture result records, bundle result records, and focused test then show the metadata-only replay behavior. This page explains that chain for readers.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime validator is a two-mode replay checker. In fixture mode, run loads eight positive fixture files plus the seven planted negative inputs named by EXPECTEDNEGATIVECASES; buildresult then validates the projection protocol, reward policy, task episodes, belief states, verifier feedback, reward events, trajectory groups, cold replay, negative cases, secret-exclusion scan, and public trace projection before writereceipts writes the result, board, validation, and sign-off result records. A pass requires all required positive floors to pass, every expected negative case to be observed, zero secret-scan blocking hits, public trace status pass, and no positive finding outside the expected\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "microcosmcore.components.beliefstateprocessreward_replay.run is the first-wave fixture consumer. It writes result, board, validation, and sign-off result records for the synthetic episodes and negative-case floor. microcosmcore.components.beliefstateprocessrewardreplay.runreward_bundle is the exported bundle consumer. It validates copied source bodies, public trace spans, digest/anchor contracts, and metadata-only result record behavior. microcosmcore.components.beliefstateprocessrewardreplay.resultcard is the compact public card consumer. It reports counts and validation state while omitting the heavy/private payload classes named by CARDOMITTEDFULLPAYLOADKEYS. tests/testbeliefstateprocess\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-mechanics",
       "title": "Public Mechanics",
       "level": 2,
       "excerpt": "Belief-state JSON is a public summary, not hidden chain-of-thought. Process rewards must cite deterministic verifier or observed environment feedback refs; neural-judge-only labels are rejected. Outcome rewards are carried beside process rewards so final answers cannot masquerade as process evidence. Reward-hacking traps and cold replay result records must pass for each trajectory group. `microcosmcore.macrotools.agentexecutiontrace:: buildpublicbeliefstateprocessrewardtrace` turns the public bundle into ordered trace spans that preserve belief, verifier, process-reward, outcome-reward, and cold-replay refs while keeping bodies out of result records. `examples/beliefstateprocessrewardreplay\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in three older ideas: belief-state tracking under partial observability, process supervision, and reward-hacking controls. The belief lineage comes from POMDP work such as Kaelbling, Littman, and Cassandra's Planning and Acting in Partially Observable Stochastic Domains. The process-reward lineage follows OpenAI's Let's Verify Step by Step, where step-level feedback is separated from outcome-only supervision. The reward-hacking lineage comes from Concrete Problems in AI Safety and related work on specification gaming. Microcosm does not train a reward model or expose hidden reasoning. It borrows the accounting form: public belief summaries, verifier-backed process\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The replay is intentionally small and synthetic. It covers three partially observable task families, six accepted belief summaries, six process rewards, three outcome rewards, three trajectory groups, three cold replays, seven negative cases in fixture mode, and seven copied source modules in exported-bundle mode. Those counts are proof boundaries, not scale claims. They show that the public validator can separate belief summaries, verifier-backed process feedback, outcome rewards, reward-hacking traps, and cold replay under declared fixtures. The mechanism does not estimate reward-model calibration, generalize to unseen tasks, compare agent policies, certify live training behavior, or scor\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture validator from the repo root and write its result record outside the repo working tree: Then run the exported bundle validator:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "Source-faithful refactored fixtures and copied source bodies only; not fixture-echo product evidence, hidden reasoning export, live RL training, neural-judge sufficiency, hidden-gold benchmarking, provider behavior, benchmark claims, source-file changes, public sharing decision, launch-scope decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim a metadata-only belief-state process-reward replay over synthetic tasks, with public belief summaries, verifier-backed process feedback, separated outcome rewards, reward-hacking traps, and cold replay result records. It cannot claim hidden reasoning export, live RL training, reward-model quality, hidden-gold benchmark claims, provider behavior, source-file changes, public sharing approval, launch-scope decision, or whole-system correctness. Any higher claim must land first in core/papermodulecapsules.json and the generated paper-module projection.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not export hidden reasoning, run RL or train a model, use hidden gold labels, rely on neural-judge-only labels, claim benchmark performance, use external model services, change source files, publish results, or authorize launch.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.belief_state_process_reward_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON source record paper_module_capsules.json[36]\"] standard[\"Local standard std_microcosm_belief_state_process_reward_replay.json\"] component[\"Runtime locus belief_state_process_reward_replay.py\"] fixtureMode[\"run (fixture mode) 8 positive + 7 negative inputs\"] bundleMode[\"run_reward_bundle (bundle mode) copied-body manifest floor required\"] floors[\"Per-file floors projection protocol, reward policy, episodes, belief states, feedback, rewards, trajectory groups, cold replay\"] recompute[\"Semantic recompute rebuild belief -> feedback -> process reward -> trajectory -> outcome reward -> cold replay\"] negatives[\"Negative cases 7 planted traps must be observed\"] scan[\"Secret-exclusion scan plus metadata-only public trace span set\"] gate{\"All floors pass, chain recomputes, every trap observed, no secret hit?\"} pass[\"status: pass\"] blocked[\"status: blocked with reason codes\"] result records[\"Result records + compact card refs, hashes, counts, verdicts; body_in_receipt false\"] ceiling[\"Scope limit source-faithful replay only\"] bundle --> component standard --> component component --> fixtureMode component --> bundleMode fixtureMode --> floors bundleMode --> floors floors --> recompute recompute --> negatives negatives --> scan scan --> gate gate -->|yes| pass gate -->|no| blocked pass --> result records blocked --> result records result records --> ceiling",
       "source_hash": "sha256:40825d077645197cdf15539a006419fdeb994be4d5ddbec9250e0e2d0bb73b16",
       "html_url": "docs/paper-modules.html#paper-module-belief-state-process-reward-replay-diagram-1",
       "html_anchor": "paper-module-belief-state-process-reward-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/belief_state_process_reward_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Planning and Acting in Partially Observable Stochastic Domains",
       "url": "https://people.smp.uq.edu.au/YoniNazarathy/Control4406_2014/resources/KaelblingLittmanCassandra1998.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Let's Verify Step by Step",
       "url": "https://arxiv.org/abs/2305.20050",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Concrete Problems in AI Safety",
       "url": "https://openai.com/index/concrete-ai-safety-problems/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "belief_state_process_reward_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Belief State Process Reward Replay",
         "url": "components.html#component-belief_state_process_reward_replay"
        },
        {
         "id": "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public belief state process reward replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/belief_state_process_reward_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 18404
    },
    {
     "id": "paper_module.sleeper_memory_poisoning_quarantine_replay",
     "title": "Sleeper Memory Poisoning Quarantine Replay",
     "relative_href": "docs/paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay",
     "read_href": "docs/paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-sleeper-memory-poisoning-quarantine-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Synthetic replay fixture for a persistent-memory security contract: quarantine of poisoned memory, audit refs, rerun result records, negative cases, authority",
     "summary": "Public Microcosm projection of a persistent-memory security claim contract. Replays synthetic memory-poisoning episodes and validates quarantine behavior, audit refs, rerun result records, negative cases, and scope limits with metadata-only result records.",
     "authority_ceiling": "Synthetic replay fixture only; not a live memory product, live user memory import, benchmark security result, private memory export, or launch claim.",
     "abstract": "Synthetic replay fixture for a persistent-memory security contract: quarantine of poisoned memory, audit refs, rerun result records, negative cases, authority",
     "teleology": {
      "section_id": "",
      "text": "Synthetic replay fixture for a persistent-memory security contract: quarantine of poisoned memory, audit refs, rerun result records, negative cases, authority",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nPersistent agent memory is an attack surface. If an agent reads a poisoned source in one session and writes a memory from it, that memory can quietly shape a later session's actions, long after the poisoning is out of view. This module asks one question: if an agent quarantines a poisoned memory write, can it show, from result records alone, that the quarantine actually held when the memory was retrieved later, and that a rollback genuinely removed it?\n\nThe interesting part is that the runtime grades the whole chain, not just the final answer. A naive memory-security story checks that the agent reached the right conclusion. This validator refuses that. It requires the poisoned write to carry provenance, the later retrieval to be blocked before any action and to cite the same memory ref the write quarantined, and the rollback to carry a deletion audit ref, a cold-rerun result record, and proof that the memory is absent after the rerun. A blocked retrieval that cannot name the quarantine audit ref or the cold-replay result record for the memory it gates is treated as unproven, not as a pass.\n\nIt is a synthetic fixture, deliberately narrow. The inputs are public metadata rows, never live user memory or private bodies, and the result records carry refs, hashes, counts, and verdicts rather than any memory text. It borrows the control shape from prior work on sleeper triggers and memory poisoning; it does not secure a live memory system or claim a benchmark result.\n\n###### Abstract\n\nThis module is the public Microcosm projection of a persistent-memory security claim contract. It is a synthetic replay fixture, not a live memory product, live user memory import, benchmark security result, private memory export, or launch claim.\n\nThe fixture models four public sessions: a poisoned source bundle is seen, a memory write proposal is quarantined, later retrieval is blocked before action, and rollback plus cold rerun proves the poisoned memory is absent at the result record boundary. The claim is admitted only when source bundle refs, provenance refs, quarantine verdicts, classifier labels, retrieval influence gates, rollback audit refs, rerun result records, negative cases, and scope limits line up.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD inputs[\"Public metadata inputs sessions, write proposals, retrieval replays, rollback rows\"] subgraph Gates[\"Four ordered gates\"] provenance[\"Provenance gate poisoned write quarantined + provenance-bound control admitted\"] influence[\"Delayed-influence gate later retrieval blocked before action, same memory ref + audit + cold-replay ref\"] rollback[\"Rollback gate deletion audit + cold-rerun result record + memory absent after rerun\"] bodies[\"Source-body gate copied bodies digest-checked, result records stay metadata-only\"] end negatives[\"Eight negative cases each must be observed as a typed finding\"] result records[\"metadata-only result records refs, hashes, counts, verdicts\"] ceiling[\"Scope limit synthetic replay only\"] inputs --> provenance provenance -->|quarantined memory ref| influence influence --> rollback rollback --> bodies inputs --> negatives provenance --> result records influence --> result records rollback --> result records bodies --> result records negatives --> result records result records --> ceiling\n```\n\nThe module's shape is a public memory-security replay, not a live memory product. Public metadata inputs pass through four ordered gates: provenance, delayed influence, rollback, and source-body handling. The delayed-influence gate is coupled to the provenance gate, so a blocked retrieval must target the same memory ref the write quarantined and cite its audit and cold-replay refs. Alongside the positive chain, eight negative cases must each surface as a typed finding, and every path lands in metadata-only result records under the scope limit.\n\n###### Mechanism\n\nThe mechanism is a replay reducer over public metadata, not a memory runtime. `src/microcosm_core/organs/sleeper_memory_poisoning_quarantine_replay.py` loads six positive input families through `_build_result`: projection protocol, memory policy, session chain, quarantine events, retrieval replays, rollback/cold-rerun rows, and the source-module manifest. When `run` is used on the first-wave fixture it also loads the expected negative fixtures; when `run_quarantine_bundle` is used on the exported bundle it validates the public bundle without treating that bundle as negative-case authority.\n\nThe first gate is provenance. `validate_memory_write_proposals` accepts a memory write only when it carries the required source bundle ref, provenance ref, trust tier, classifier labels, audit ref, quarantine verdict, and redacted body posture. An untrusted source context with the sleeper-poisoning classifier cannot silently become trusted memory. Missing provenance, private memory body export, raw transcript export, live user-memory claims, and trusted promotion from untrusted context become typed findings instead of admissible memory authority.\n\nThe second gate is delayed influence. `validate_retrieval_replays` checks that later retrieval of the quarantined memory is blocked before any action can use it. The row must carry a retrieval ref, influence grade, action gate, cold replay result record ref, public evidence refs, and a quarantine audit ref coupling back to the write proposal it gates. This is the anti-final-answer check: the runtime rejects a memory-security story that grades only the final answer while omitting retrieval, influence, or rerun evidence.\n\nThe third gate is rollback. `validate_rollback_rerun` requires a rollback result record ref, deletion audit ref, rerun result record ref, and `memory_absent_after_rerun=true`. Rollback language is therefore admitted only when deletion and cold rerun are both present. Tests mutate these fields to show that nonempty but bogus rollback refs, missing result record refs, and absence failures block rather than becoming evidence.\n\nThe fourth gate is source-open body handling. `validate_source_module_manifest` and `_source_open_body_import_summary` verify seven copied public source bodies, their declared material classes, their digest fields, and their metadata-only result record posture. `_write_receipts` and `result_card` then expose public ids, counts, refs, digests, verdicts, negative-case status, and scope limits while omitting retrieval rows, rollback rows, and copied source bodies from command cards.\n\nThe proof consumer is therefore a pair of bounded runs plus focused tests: `run` proves the first-wave fixture with expected negative cases; `run_quarantine_bundle` proves the exported public bundle; and `tests/test_sleeper_memory_poisoning_quarantine_replay.py` verifies mutated positive rows, stale baked labels, retrieval/quarantine coupling, rollback result record shape, source-body digest checks, public-relative redaction, and card payload omission.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[37:paper_module.sleeper_memory_poisoning_quarantine_replay]` is the JSON authority row. A diagram view and an atlas card are generated for this module.\n- Mechanism route: `core/mechanism_sources.json::mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay` binds the code locus, input refs, result record refs, validator commands, focused regression, and guardrails.\n- Runtime route: `src/microcosm_core/organs/sleeper_memory_poisoning_quarantine_replay.py` owns `run`, `run_quarantine_bundle`, `_build_result`, `_write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and the metadata-only source-module import checks.\n- Exported-bundle route: `examples/sleeper_memory_poisoning_quarantine_replay/exported_sleeper_memory_poisoning_bundle` contains `bundle_manifest.json`, `projection_protocol.json`, `memory_policy.json`, `session_chain.json`, `quarantine_events.json`, `retrieval_replays.json`, `rollback_rerun.json`, and `source_module_manifest.json`.\n- Source-module route: `source_module_manifest.json` records seven copied public source bodies, including the growth result record, memory-plane paper modules, operator-memory tests, agent execution trace runtime, strict JSON helper, and agent execution trace standard; result records keep source bodies out with `body_in_receipt: false`.\n- Focused-test route: `tests/test_sleeper_memory_poisoning_quarantine_replay.py` verifies negative cases, public-relative redacted result records, exported-bundle runtime shape, digest mismatch rejection, exact copied source bodies, and card result record reuse.\n\n###### Prior Art Grounding\n\nThis component combines two prior-art lines: sleeper/deceptive trigger behavior and long-term-memory/RAG poisoning. The sleeper-trigger lineage is Anthropic's [Sleeper Agents](https://arxiv.org/abs/2401.05566). The memory-poisoning lineage includes [AgentPoison](https://arxiv.org/abs/2407.12784), [MemoryGraft](https://arxiv.org/abs/2512.16962), and [Hidden in Memory](https://arxiv.org/abs/2605.15338), which all treat retrieved or persistent agent memory as an attack surface rather than a neutral cache.\n\nMicrocosm does not claim to secure live memory systems. It borrows the control shape: memory writes need provenance, untrusted source context cannot silently become authority, later retrieval must pass an influence gate, and deletion or rollback needs an audit ref plus cold rerun evidence.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.sleeper_memory_poisoning_quarantine_replay run-quarantine-bundle --input examples/sleeper_memory_poisoning_quarantine_replay/exported_sleeper_memory_poisoning_bundle --out /tmp/sleeper_memory_poisoning_bundle_receipt --card > /tmp/sleeper_memory_poisoning_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && ../repo-pytest tests/test_sleeper_memory_poisoning_quarantine_replay.py\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe result record path proves synthetic memory-poisoning quarantine replay over public metadata refs, not live memory safety, provider behavior, or benchmark security.\n\n###### Scope boundary\n\n###### Scope boundary\n\nThis module does not run live memory, claim memory product quality, import live user memory, export private memory bodies or raw transcripts, promote untrusted context into trusted memory, use external model services, change source files, claim benchmark security, publish results, or include launch operations.\n\n###### Scope limit\n\nThis module may claim synthetic sleeper-memory poisoning quarantine replay over public metadata refs: source bundle refs, provenance refs, quarantine verdicts, classifier labels, retrieval influence gates, rollback audit refs, cold rerun result records, expected negative cases, source-module digest checks, metadata-only result records, and validation result records.\n\nIt does not claim live memory product quality, live user-memory handling, trusted promotion from untrusted context, provider behavior, source-file changes, benchmark security, private memory export, public sharing, launch-scope decision, or whole-system correctness. The generated diagram and atlas card are navigation aids, not security benchmark results.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 11605,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Persistent agent memory is an attack surface. If an agent reads a poisoned source in one session and writes a memory from it, that memory can quietly shape a later session's actions, long after the poisoning is out of view. This module asks one question: if an agent quarantines a poisoned memory write, can it show, from result records alone, that the quarantine actually held when the memory was retrieved later, and that a rollback genuinely removed it? The interesting part is that the runtime grades the whole chain, not just the final answer. A naive memory-security story checks that the agent reached the right conclusion. This validator refuses that. It requires the poisoned write to carry\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "This module is the public Microcosm projection of a persistent-memory security claim contract. It is a synthetic replay fixture, not a live memory product, live user memory import, benchmark security result, private memory export, or launch claim. The fixture models four public sessions: a poisoned source bundle is seen, a memory write proposal is quarantined, later retrieval is blocked before action, and rollback plus cold rerun proves the poisoned memory is absent at the result record boundary. The claim is admitted only when source bundle refs, provenance refs, quarantine verdicts, classifier labels, retrieval influence gates, rollback audit refs, rerun result records, negative cases, an\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module's shape is a public memory-security replay, not a live memory product. Public metadata inputs pass through four ordered gates: provenance, delayed influence, rollback, and source-body handling. The delayed-influence gate is coupled to the provenance gate, so a blocked retrieval must target the same memory ref the write quarantined and cite its audit and cold-replay refs. Alongside the positive chain, eight negative cases must each surface as a typed finding, and every path lands in metadata-only result records under the scope limit.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism",
       "title": "Mechanism",
       "level": 2,
       "excerpt": "The mechanism is a replay reducer over public metadata, not a memory runtime. src/microcosmcore/components/sleepermemorypoisoningquarantine_replay.py loads six positive input families through buildresult: projection protocol, memory policy, session chain, quarantine events, retrieval replays, rollback/cold-rerun rows, and the source-module manifest. When run is used on the first-wave fixture it also loads the expected negative fixtures; when runquarantinebundle is used on the exported bundle it validates the public bundle without treating that bundle as negative-case authority. The first gate is provenance. validatememorywrite_proposals accepts a memory write only when it carries the requir\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: core/papermodulecapsules.json::papermodules[37:papermodule.sleepermemorypoisoningquarantinereplay] is the JSON authority row. A diagram view and an atlas card are generated for this module. Mechanism route: core/mechanismsources.json::mechanism.sleepermemorypoisoningquarantinereplay.validatespublicsleepermemorypoisoningquarantine_replay binds the code locus, input refs, result record refs, validator commands, focused regression, and guardrails. Runtime route: src/microcosmcore/components/sleepermemorypoisoningquarantine_replay.py owns run, runquarantinebundle, buildresult, writereceipts, resultcard, EXPECTEDNEGATIVECASES, AUTHORITYCEILING, and the metadata-only source-module i\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture validator from the repo root and write its result record outside the repo working tree: Then run the exported bundle validator: The focused regression test and corpus projection checks are: The result record path proves synthetic memory-poisoning quarantine replay over public metadata refs, not live memory safety, provider behavior, or benchmark security.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component combines two prior-art lines: sleeper/deceptive trigger behavior and long-term-memory/RAG poisoning. The sleeper-trigger lineage is Anthropic's Sleeper Agents. The memory-poisoning lineage includes AgentPoison, MemoryGraft, and Hidden in Memory, which all treat retrieved or persistent agent memory as an attack surface rather than a neutral cache. Microcosm does not claim to secure live memory systems. It borrows the control shape: memory writes need provenance, untrusted source context cannot silently become authority, later retrieval must pass an influence gate, and deletion or rollback needs an audit ref plus cold rerun evidence.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not run live memory, claim memory product quality, import live user memory, export private memory bodies or raw transcripts, promote untrusted context into trusted memory, use external model services, change source files, claim benchmark security, publish results, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim synthetic sleeper-memory poisoning quarantine replay over public metadata refs: source bundle refs, provenance refs, quarantine verdicts, classifier labels, retrieval influence gates, rollback audit refs, cold rerun result records, expected negative cases, source-module digest checks, metadata-only result records, and validation result records. It does not claim live memory product quality, live user-memory handling, trusted promotion from untrusted context, provider behavior, source-file changes, benchmark security, private memory export, public sharing, launch-scope decision, or whole-system correctness. The generated diagram and atlas card are navigation aids, not s\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.sleeper_memory_poisoning_quarantine_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD inputs[\"Public metadata inputs sessions, write proposals, retrieval replays, rollback rows\"] subgraph Gates[\"Four ordered gates\"] provenance[\"Provenance gate poisoned write quarantined + provenance-bound control admitted\"] influence[\"Delayed-influence gate later retrieval blocked before action, same memory ref + audit + cold-replay ref\"] rollback[\"Rollback gate deletion audit + cold-rerun result record + memory absent after rerun\"] bodies[\"Source-body gate copied bodies digest-checked, result records stay metadata-only\"] end negatives[\"Eight negative cases each must be observed as a typed finding\"] result records[\"metadata-only result records refs, hashes, counts, verdicts\"] ceiling[\"Scope limit synthetic replay only\"] inputs --> provenance provenance -->|quarantined memory ref| influence influence --> rollback rollback --> bodies inputs --> negatives provenance --> result records influence --> result records rollback --> result records bodies --> result records negatives --> result records result records --> ceiling",
       "source_hash": "sha256:59a2bc92da0366b1624e689ed68dcff0d3638de0028642d63c586db4599d3ba1",
       "html_url": "docs/paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay-diagram-1",
       "html_anchor": "paper-module-sleeper-memory-poisoning-quarantine-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/sleeper_memory_poisoning_quarantine_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Sleeper Agents",
       "url": "https://arxiv.org/abs/2401.05566",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "AgentPoison",
       "url": "https://arxiv.org/abs/2407.12784",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "MemoryGraft",
       "url": "https://arxiv.org/abs/2512.16962",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Hidden in Memory",
       "url": "https://arxiv.org/abs/2605.15338",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.agent_memory_temporal_conflict_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Memory Temporal-Conflict Replay",
         "url": "paper-modules.html#paper-module-agent-memory-temporal-conflict-replay"
        },
        {
         "id": "paper_module.mcp_tool_authority_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "MCP Tool Authority Replay",
         "url": "paper-modules.html#paper-module-mcp-tool-authority-replay"
        },
        {
         "id": "paper_module.agent_sandbox_policy_escape_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Sandbox Policy-Escape Replay",
         "url": "paper-modules.html#paper-module-agent-sandbox-policy-escape-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "sleeper_memory_poisoning_quarantine_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Sleeper Memory Poisoning Quarantine Replay",
         "url": "components.html#component-sleeper_memory_poisoning_quarantine_replay"
        },
        {
         "id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public sleeper memory poisoning quarantine replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-14",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Carry basis and provenance together",
         "url": "doctrine.html#dcard-p-14"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/sleeper_memory_poisoning_quarantine_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 12373
    },
    {
     "id": "paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "title": "Indirect Prompt-Injection Information-Flow Policy Replay",
     "relative_href": "docs/paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay",
     "read_href": "docs/paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-indirect-prompt-injection-information-flow-policy-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Validator-backed claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action.",
     "summary": "Validator-backed public claim contract for indirect prompt-injection information-flow policy. Admits one narrow claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action or answer, checked against negative cases and scope limits.",
     "authority_ceiling": "Source-faithful refactored fixtures and metadata-only result records only; not a live information-flow product, complete-security proof, or launch claim.",
     "abstract": "Validator-backed claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action.",
     "teleology": {
      "section_id": "",
      "text": "Validator-backed claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This validator-backed claim contract admits one narrow public claim: a source-faithful public trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action or answer claim was accepted.\n\nThe runnable contract requires source trust labels, taint labels, source-to-sink flow rows, pre-action policy verdicts, sanitized-output result records, cold replay, secret-exclusion scan, negative cases, a public agent-execution trace, and an explicit scope limit.\n\n###### Purpose\n\nAn agent that reads web pages, tool output, or retrieved documents takes in text from sources it does not control. Indirect prompt injection is the case where that untrusted text carries an instruction, and the agent acts on it as if the operator had asked. This component exists to make one specific safety property checkable on a synthetic trace: untrusted text was kept separate from trusted instructions, and no untrusted source reached a privileged action without being gated first. It answers a single question. Did the trust boundary actually hold through the flow, or only on paper?\n\nThe unusual part is that the validator does not trust the labels the fixture declares. Each flow row claims a set of taint labels and a policy verdict, but the runtime ignores those and recomputes both. It propagates taint along the source-to-sink graph from the labelled sources, so a sink inherits the taint of everything that fed it, and it derives the verdict from that propagated taint plus the sink's privilege, the sanitizer state, the sink kind, and the proposed action. If the declared taint or the declared verdict disagrees with the recomputed one, the row is blocked. A flow cannot quietly relabel an untrusted source as clean, or mark a dangerous action as `allow`, because the contradiction is recomputed rather than read back.\n\nThat recomputation is the point. The failure mode it guards against is a trace that looks safe because the labels were written to look safe. By deriving the labels and verdicts from the graph itself, the contract catches the mislabelled flow that a field-by-field check would wave through. To stay honest about live behaviour, it also takes one generated public tool-call trace span and pushes it through the same machinery as untrusted tool output, so the runtime is seen to treat tool output as data until a policy gate reviews it, never as instruction authority.\n\n###### Cold-Reader Path\n\n```text\nmicrocosm indirect-prompt-injection-information-flow-policy-replay run-prompt-injection-bundle \\\n  --input examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/indirect_prompt_injection_information_flow_policy_replay\n```\n\nPrimary result record: `receipts/runtime_shell/demo_project/organs/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle_validation_result.json`\n\nFirst-wave fixture result record: `receipts/first_wave/indirect_prompt_injection_information_flow_policy_replay/indirect_prompt_injection_information_flow_policy_replay_validation_receipt.json`\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD sources[\"Source rows trusted and untrusted, with taint labels\"] flows[\"Source-to-sink flow rows (declared taint and verdict)\"] propagate[\"Propagate taint along the source-to-sink graph\"] derive[\"Derive verdict from taint + sink privilege + sanitizer + sink kind + action\"] compare{\"Declared labels and verdict match the derived ones?\"} blocked[\"Block the row (relabelled or wrong verdict)\"] gate{\"Untrusted into a privileged sink?\"} verdicts[\"Pre-action verdict allow / warn / review / block\"] outputs[\"Sanitized output no trusted context disclosed, no untrusted instruction obeyed\"] toolspan[\"One public tool-call trace span treated as untrusted tool output\"] result records[\"metadata-only result records refs, digests, counts, status\"] sources --> flows flows --> propagate propagate --> derive derive --> compare compare -- no --> blocked compare -- yes --> gate gate -- yes --> verdicts gate -- no --> verdicts verdicts --> outputs toolspan --> propagate outputs --> result records blocked --> result records\n```\n\nThe module's shape is a public information-flow replay, not a live prompt-injection defense. This page points at the mechanism and runtime component; the runtime validates source trust labels, taint propagation, privileged sink gates, pre-action verdicts, sanitized outputs, cold replay, public trace spans, source-module digest anchors, negative cases, and metadata-only result records.\n\n###### Technical Mechanism\n\nThe runtime mechanism is an evidence compiler plus an information-flow validator. `run` loads the first-wave fixture with negative cases enabled; `run_prompt_injection_bundle` loads the exported public bundle and leaves the fixture-only negative cases out. Both routes call `_build_result`, which loads the projection protocol, injection policy, source-document rows, flow graph, policy verdict rows, sanitized outputs, cold replay rows, public trace, copied source-module manifest, and secret-exclusion policy before it writes any result record.\n\nThe source and flow validators separate instruction authority from untrusted data before claim admission. `validate_source_documents` requires every source row to carry source id, trust label, channel, body ref, taint labels, instruction-authority flag, body redaction, synthetic-fixture status, and no raw or real-account body export; untrusted sources cannot carry instruction authority. `validate_information_flow_graph` joins each flow to its source row, derives taint labels through `_taint_propagation_receipt`, derives the expected policy verdict from propagated taint, sink kind, sink privilege, sanitizer state, and proposed action, and rejects hand-written taint or verdict drift.\n\nPolicy and output validation then bind the pre-action membrane. The injection policy must name allow, warn, block, and review verdicts; require the source, flow, verdict, and output field floors; and deny real accounts, raw prompt bodies, account secrets, tool-output authority, hidden-message promotion, live tool calls, general robustness claims, and launch. `validate_policy_verdicts` requires verdicts to join to flows, precede action, cite rules, stay redacted, and match the derived flow verdict. `validate_sanitized_outputs` requires output refs to join to flows, disclose no trusted context, obey no untrusted instruction, and avoid external action on blocked flows.\n\nReplay and trace validation keep the public claim metadata-only. `validate_cold_replay` requires replay commands and result record refs to reproduce each verdict and sanitized output without trusted-context disclosure. The component uses `build_public_prompt_injection_trace` to build five public trace spans, then `_live_tool_call_trace_promotion` promotes one generated public tool-call trace span back through the same taint-graph machinery as an untrusted tool-output source. That promotion is evidence that the runtime treats tool output as data until a policy gate reviews it, not as instruction authority.\n\nThe copied-source floor is checked independently. `_source_module_manifest_result` requires the exported bundle's `source_module_manifest.json` to classify copied material as source body material, keep body text out of result records, match declared module counts, resolve `path` and `target_ref` to the same copied body, stream SHA-256 digests over each target, and verify required anchors. `_source_open_body_import_summary` exposes only body ids, classes, manifest refs, counts, and ceiling flags; the copied bodies remain under `source_modules/`.\n\nThe result record mechanism is intentionally small. `_write_receipts` writes first-wave result, board, validation, and sign-off result records for fixture mode, while exported-bundle mode writes the bundle validation result. `result_card` emits a compact command card and omits findings, secret-scan details, scope limit bodies, scope boundary text, source refs, target refs, public trace spans, source rows, flow rows, verdict rows, sanitized output rows, cold replay rows, board rows, and copied source-module bodies. The card preserves counts, status, negative-case coverage, trace span count, body-floor status, and result record refs.\n\nThe lattice binding is the source record `paper_module.indirect_prompt_injection_information_flow_policy_replay`, the mechanism row `mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay`, principles `P-9` and `P-14`, axiom `AX-8`, and `concept.agent_reliability_and_safety_validator_bundle`. Those refs are used as an admission-control lattice: source-labelled public evidence may enter the claim surface, while untrusted instruction authority, private bodies, model-output data, live account material, source-file changes, and launch claims remain out of scope.\n\n###### Input Contract\n- `projection_protocol.json`: source-available projection statement and omitted private material.\n- `injection_policy.json`: required source, flow, verdict, and output fields plus authority denials.\n- `source_documents.json`: synthetic trusted and untrusted sources with trust labels and taint labels.\n- `information_flow_graph.json`: source-to-sink flow rows before claim admission.\n- `policy_verdicts.json`: allow, warn, block, and review verdicts before synthetic action.\n- `sanitized_outputs.json`: output refs proving no trusted context disclosure and no untrusted instruction obedience.\n- `cold_replay.json`: rerunnable command and result record refs that reproduce verdicts and sanitized state.\n\n###### Public Trace Refactor\n\nThe product evidence is no longer the fixture verdict fields alone. The component uses `microcosm_core.macro_tools.agent_execution_trace::build_public_prompt_injection_trace` to emit metadata-only spans over the public source, flow, verdict, output, and replay refs. That builder is a Microcosm refactor of the source `system/lib/agent_execution_trace.py` span model, so the accepted result record can show sequence, authority, audit, coverage, and digest mechanics without copying real accounts, prompt bodies, model-output data, or live tool material.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[38:paper_module.indirect_prompt_injection_information_flow_policy_replay]` is the JSON authority row; a Mermaid diagram and an Atlas card are generated for this module from that row.\n- Mechanism route: `core/mechanism_sources.json::mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay` binds the code locus, fixture refs, exported bundle refs, result record refs, validator commands, focused regression, and guardrails.\n- Runtime route: `src/microcosm_core/organs/indirect_prompt_injection_information_flow_policy_replay.py` owns `run`, `run_prompt_injection_bundle`, `_build_result`, `_write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- Exported-bundle route: `examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle` contains `bundle_manifest.json`, `projection_protocol.json`, `injection_policy.json`, `source_documents.json`, `information_flow_graph.json`, `policy_verdicts.json`, `sanitized_outputs.json`, `cold_replay.json`, and `source_module_manifest.json`.\n- Source-module route: `source_module_manifest.json` records five copied public source bodies: the extracted-pattern ledger row, high-novelty reconstruction result record, agent execution trace runtime, agent execution trace standard, and strict JSON helper. Result records carry refs, digests, counts, and status only; source body text stays in the bundle's `source_modules/` tree.\n- Focused-test route: `tests/test_indirect_prompt_injection_information_flow_policy_replay.py` verifies negative cases, public-relative redacted result records, exported-bundle runtime shape, source-module digest and target-ref failures, exact copied source bodies, card result record reuse, and public trace span construction.\n\n###### Prior Art Grounding\n\nThis component is grounded in the prompt-injection and information-flow-control literature. The prompt-injection side follows the threat shape described by Greshake et al. in [Not what you've signed up for](https://arxiv.org/abs/2302.12173), the agentic evaluation framing in [AgentDojo](https://arxiv.org/abs/2406.13352), and later data-leakage benchmarks over tool-calling agents such as [Simple Prompt Injection Attacks Can Leak Personal Data](https://arxiv.org/abs/2506.01055). The policy mechanism borrows from dynamic information-flow / taint-tracking ideas, including [Permissive Information-Flow Analysis for Large Language Models](https://arxiv.org/abs/2410.03055).\n\nMicrocosm does not claim a general prompt-injection defense. It preserves the prior-art internal control lesson: untrusted content must be labelled as data, source-to-sink flows must be visible before privileged action, and sanitized outputs need result records. The local component turns that lesson into a metadata-only replay contract with explicit scope boundaries and negative cases.\n\n###### Negative Cases\n\nThe validator rejects real account material, secret or trusted-context exfiltration, raw prompt body export, untrusted tool output treated as instruction authority, hidden system-message promotion, account secret exfiltration, final-answer-only success, and ungated untrusted flow into a privileged sink.\n\nThese are falsification fixtures. They are part of the contract, not examples of live exploit traffic.\n\n###### Named Proof Consumers\n\nThe named proof consumer is `tests/test_indirect_prompt_injection_information_flow_policy_replay.py`. It checks first-wave negative-case coverage, five sources, three untrusted and two trusted source labels, five information flows, derived taint paths, derived policy verdicts, allow/warn/block/review counts, blocked-without-external-action counts, sanitized-output non-disclosure, cold replay, scope limit flags, public trace spans, public tool-call trace promotion through taint propagation, public-relative redacted result records, exported-bundle validation, source-module digest mismatch rejection, target-ref/path mismatch rejection, partial digest mismatch rejection, manifest body-text boundary rejection, streaming source-module digests, exact copied source body imports, fresh `--card` result record reuse, public trace construction, and fixture-manifest binding to the body-open refactor.\n\nThe runtime proof consumers are the two module commands in the Validation Result record Path: fixture mode via `indirect_prompt_injection_information_flow_policy_replay run`, and exported bundle mode via `indirect_prompt_injection_information_flow_policy_replay run-prompt-injection-bundle`. Fixture mode must observe all eight negative cases and write metadata-only result, board, validation, and sign-off result records. Bundle mode must validate the public bundle shape, source-module manifest, public trace spans, and metadata-only exported bundle result record.\n\nThe corpus proof consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`. It is a corpus check only; it does not refresh generated Mermaid, Atlas, site, verifier, or bundle state.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.indirect_prompt_injection_information_flow_policy_replay run-prompt-injection-bundle --input examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle --out /tmp/indirect_prompt_injection_flow_bundle_receipt --card > /tmp/indirect_prompt_injection_flow_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_indirect_prompt_injection_information_flow_policy_replay.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe result record path proves synthetic information-flow replay and body omission, not general prompt-injection robustness or live account safety.\n\n###### Scope boundary\n\n###### Limitations\n\nThe replay is intentionally small and synthetic. Fixture mode covers five source documents, three untrusted and two trusted source labels, five source-to-sink flows, five pre-action verdicts, five sanitized outputs, five cold replay passes, five public trace spans, one generated public tool-call trace promoted through the taint graph, five copied source bodies, and eight negative cases. Exported-bundle mode validates the public bundle, source-module manifest, trace spans, and metadata-only result record shape, but it does not carry the fixture-only negative-case payloads.\n\nThose counts are proof boundaries, not scale claims. They show that this local validator recomputes source trust, taint propagation, pre-action verdicts, sanitized output constraints, cold replay, source-module digest anchors, and metadata-only result record shape over declared public inputs. They do not estimate attack coverage, compare defenses, score a benchmark, certify hidden-message handling in production, or demonstrate live email, browser, account, tool, or provider behavior.\n\nThe source-open body floor is also narrow. The manifest proves byte parity and declared anchors for the five copied source bodies in the exported bundle. It excludes private source-root export, raw prompt or system body export, account secret-bearing material, source-file changes, public sharing, hosting, launch-scope decision, complete security, or product readiness.\n\n###### Scope limit\n\nThis module supports only the public claim that the replay exposes and checks a prompt-injection information-flow policy over source trust labels, taint labels, source-to-sink flow rows, pre-action policy verdict refs, sanitized-output refs, cold replay refs, public trace spans, live public tool-call trace taint promotion, copied source-module digests, negative-case result records, secret-exclusion checks, and metadata-only scope limits.\n\nThe copied source-module digest row proves byte parity for the named source body only; it does not widen the replay into live source authority.\n\nIt does not claim general prompt-injection robustness, live account safety, live tool or provider behavior, raw prompt/system/tool body export, account secret-bearing account data, hidden-message production handling, benchmark security or performance, source-file changes, publishing-scope decision, hosting authority, launch-scope decision, complete security, or product-progress authority.\n\n###### Scope limit\n\nPassing result records prove only that this public trace refactor satisfies the named prompt-injection information-flow contract over metadata-only rows. They do not prove general prompt-injection robustness, benchmark performance, live account safety, provider behavior, tool behavior, hidden-message handling in a real system, source-file changes, publishing-scope decision, or launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe generated JSON instance gives this page a specific admission lattice, not a loose security story. The only unresolved selective relation is the dependency edge; it remains a residual because the bundle does not name a sibling paper-module dependency.\n\nThe governing law is provenance propagation and non-interference. `P-9` requires every source, fixture, result record, public-copy, provider-shape, or private-boundary crossing to carry provenance class and scope limit. `P-14` requires byte or row basis and provenance to travel together. `AX-8` requires data labels to propagate along flows, with untrusted labels entering privileged sinks only through declared transforms that satisfy the sink policy.\n\nThe runtime implements that lattice in `_build_result`: it loads the projection protocol, source documents, information-flow graph, policy verdicts, sanitized outputs, cold replay rows, public trace spans, source-module manifest, and secret-exclusion policy before status is admitted. `validate_source_documents` rejects untrusted instruction authority, `validate_information_flow_graph` derives taint labels and policy verdicts instead of trusting hand-written rows, `_live_tool_call_trace_promotion` treats generated public tool-call trace spans as untrusted tool output, and `_write_receipts` / `result_card` keep public result records metadata-only. The focused proof consumer is `tests/test_indirect_prompt_injection_information_flow_policy_replay.py`, which checks fixture and exported-bundle modes, taint/verdict derivation, negative cases, source-module digest boundaries, exact copied source-body imports, card redaction, fresh result record reuse, public trace spans, and fixture-manifest binding to the body-open refactor.\n\n###### Source-Open Body Floor\n\nThe exported bundle carries exact copied source bodies under `source_modules/ai_workflow/`, governed by `source_module_manifest.json`. The imported bodies are:\n- `state/microcosm_portfolio/extracted_patterns_ledger.jsonl`\n- `state/microcosm_portfolio/reconstruction/high_novelty_substrate_gap_scout_v1.json`\n- `system/lib/agent_execution_trace.py`\n- `codex/standards/std_agent_execution_trace.json`\n- `system/lib/strict_json.py`\n\nThe manifest records source refs, target refs, hashes, material classes, and required anchors. Result records and cards expose refs, counts, and validation status only; they do not embed ledger, reconstruction, prompt, account, account secret, browser UI, model-output data, or live-access bodies.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 22095,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "An agent that reads web pages, tool output, or retrieved documents takes in text from sources it does not control. Indirect prompt injection is the case where that untrusted text carries an instruction, and the agent acts on it as if the operator had asked. This component exists to make one specific safety property checkable on a synthetic trace: untrusted text was kept separate from trusted instructions, and no untrusted source reached a privileged action without being gated first. It answers a single question. Did the trust boundary actually hold through the flow, or only on paper? The unusual part is that the validator does not trust the labels the fixture declares. Each flow row claims\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "cold-reader-path",
       "title": "Cold-Reader Path",
       "level": 2,
       "excerpt": "Primary result record: result records/runtimeshell/demoproject/components/indirectpromptinjectioninformationflowpolicyreplay/exportedpromptinjectionflowbundlevalidationresult.json First-wave fixture result record: result records/firstwave/indirectpromptinjectioninformationflowpolicyreplay/indirectpromptinjectioninformationflowpolicyreplayvalidation_receipt.json",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module's shape is a public information-flow replay, not a live prompt-injection defense. This page points at the mechanism and runtime component; the runtime validates source trust labels, taint propagation, privileged sink gates, pre-action verdicts, sanitized outputs, cold replay, public trace spans, source-module digest anchors, negative cases, and metadata-only result records.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The generated JSON instance gives this page a specific admission lattice, not a loose security story. indirectpromptinjectioninformationflowpolicyreplay component, mechanism.indirectpromptinjectioninformationflowpolicyreplay.validatespublicindirectpromptinjectioninformationflowpolicyreplay, concept.agentreliabilityandsafetyvalidator_bundle, P-9, P-14, AX-8, and the runtime code locus src/microcosmcore/components/indirectpromptinjectioninformationflowpolicy_replay.py. The only unresolved selective relation is the dependency edge; it remains a residual because the bundle does not name a sibling paper-module dependency. The governing law is provenance propagation and non-interference. P-9 requ\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism is an evidence compiler plus an information-flow validator. run loads the first-wave fixture with negative cases enabled; runpromptinjection_bundle loads the exported public bundle and leaves the fixture-only negative cases out. Both routes call buildresult, which loads the projection protocol, injection policy, source-document rows, flow graph, policy verdict rows, sanitized outputs, cold replay rows, public trace, copied source-module manifest, and secret-exclusion policy before it writes any result record. The source and flow validators separate instruction authority from untrusted data before claim admission. validatesourcedocuments requires every source row to car\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "input-contract",
       "title": "Input Contract",
       "level": 2,
       "excerpt": "projection_protocol.json: source-available projection statement and omitted private material. injection_policy.json: required source, flow, verdict, and output fields plus authority denials. source_documents.json: synthetic trusted and untrusted sources with trust labels and taint labels. informationflowgraph.json: source-to-sink flow rows before claim admission. policy_verdicts.json: allow, warn, block, and review verdicts before synthetic action. sanitized_outputs.json: output refs proving no trusted context disclosure and no untrusted instruction obedience. cold_replay.json: rerunnable command and result record refs that reproduce verdicts and sanitized state.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "public-trace-refactor",
       "title": "Public Trace Refactor",
       "level": 2,
       "excerpt": "The product evidence is no longer the fixture verdict fields alone. The component uses microcosmcore.macrotools.agentexecutiontrace::buildpublicpromptinjectiontrace to emit metadata-only spans over the public source, flow, verdict, output, and replay refs. That builder is a Microcosm refactor of the source system/lib/agentexecutiontrace.py span model, so the accepted result record can show sequence, authority, audit, coverage, and digest mechanics without copying real accounts, prompt bodies, model-output data, or live tool material.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: core/papermodulecapsules.json::papermodules[38:papermodule.indirectpromptinjectioninformationflowpolicyreplay] is the JSON authority row; a Mermaid diagram and an Atlas card are generated for this module from that row. Mechanism route: core/mechanismsources.json::mechanism.indirectpromptinjectioninformationflowpolicyreplay.validatespublicindirectpromptinjectioninformationflowpolicy_replay binds the code locus, fixture refs, exported bundle refs, result record refs, validator commands, focused regression, and guardrails. Runtime route: src/microcosmcore/components/indirectpromptinjectioninformationflowpolicy_replay.py owns run, runpromptinjectionbundle, build_result, writerecei\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in the prompt-injection and information-flow-control literature. The prompt-injection side follows the threat shape described by Greshake et al. in Not what you've signed up for, the agentic evaluation framing in AgentDojo, and later data-leakage benchmarks over tool-calling agents such as Simple Prompt Injection Attacks Can Leak Personal Data. The policy mechanism borrows from dynamic information-flow / taint-tracking ideas, including Permissive Information-Flow Analysis for Large Language Models. Microcosm does not claim a general prompt-injection defense. It preserves the prior-art internal control lesson: untrusted content must be labelled as data, source-to-s\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The exported bundle carries exact copied source bodies under sourcemodules/aiworkflow/, governed by sourcemodulemanifest.json. The imported bodies are: state/microcosmportfolio/extractedpatterns_ledger.jsonl state/microcosmportfolio/reconstruction/highnoveltysubstrategapscoutv1.json system/lib/agentexecutiontrace.py codex/standards/stdagentexecution_trace.json system/lib/strict_json.py The manifest records source refs, target refs, hashes, material classes, and required anchors. Result records and cards expose refs, counts, and validation status only; they do not embed ledger, reconstruction, prompt, account, account secret, browser UI, model-output data, or live-access bodies.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The replay is intentionally small and synthetic. Fixture mode covers five source documents, three untrusted and two trusted source labels, five source-to-sink flows, five pre-action verdicts, five sanitized outputs, five cold replay passes, five public trace spans, one generated public tool-call trace promoted through the taint graph, five copied source bodies, and eight negative cases. Exported-bundle mode validates the public bundle, source-module manifest, trace spans, and metadata-only result record shape, but it does not carry the fixture-only negative-case payloads. Those counts are proof boundaries, not scale claims. They show that this local validator recomputes source trust, taint\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the public claim that the replay exposes and checks a prompt-injection information-flow policy over source trust labels, taint labels, source-to-sink flow rows, pre-action policy verdict refs, sanitized-output refs, cold replay refs, public trace spans, live public tool-call trace taint promotion, copied source-module digests, negative-case result records, secret-exclusion checks, and metadata-only scope limits. The copied source-module digest row proves byte parity for the named source body only; it does not widen the replay into live source authority. It does not claim general prompt-injection robustness, live account safety, live tool or provider behavior, raw p\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The validator rejects real account material, secret or trusted-context exfiltration, raw prompt body export, untrusted tool output treated as instruction authority, hidden system-message promotion, account secret exfiltration, final-answer-only success, and ungated untrusted flow into a privileged sink. These are falsification fixtures. They are part of the contract, not examples of live exploit traffic.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "Passing result records prove only that this public trace refactor satisfies the named prompt-injection information-flow contract over metadata-only rows. They do not prove general prompt-injection robustness, benchmark performance, live account safety, provider behavior, tool behavior, hidden-message handling in a real system, source-file changes, public sharing decision, or launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture validator from the repo root and write its result record outside the repo working tree: Then run the exported bundle validator: The focused regression test and corpus projection checks are: The result record path proves synthetic information-flow replay and body omission, not general prompt-injection robustness or live account safety.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "The named proof consumer is tests/testindirectpromptinjectioninformationflowpolicy_replay.py. It checks first-wave negative-case coverage, five sources, three untrusted and two trusted source labels, five information flows, derived taint paths, derived policy verdicts, allow/warn/block/review counts, blocked-without-external-action counts, sanitized-output non-disclosure, cold replay, scope limit flags, public trace spans, public tool-call trace promotion through taint propagation, public-relative redacted result records, exported-bundle validation, source-module digest mismatch rejection, target-ref/path mismatch rejection, partial digest mismatch rejection, manifest body-text boundary rej\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.indirect_prompt_injection_information_flow_policy_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD sources[\"Source rows trusted and untrusted, with taint labels\"] flows[\"Source-to-sink flow rows (declared taint and verdict)\"] propagate[\"Propagate taint along the source-to-sink graph\"] derive[\"Derive verdict from taint + sink privilege + sanitizer + sink kind + action\"] compare{\"Declared labels and verdict match the derived ones?\"} blocked[\"Block the row (relabelled or wrong verdict)\"] gate{\"Untrusted into a privileged sink?\"} verdicts[\"Pre-action verdict allow / warn / review / block\"] outputs[\"Sanitized output no trusted context disclosed, no untrusted instruction obeyed\"] toolspan[\"One public tool-call trace span treated as untrusted tool output\"] result records[\"metadata-only result records refs, digests, counts, status\"] sources --> flows flows --> propagate propagate --> derive derive --> compare compare -- no --> blocked compare -- yes --> gate gate -- yes --> verdicts gate -- no --> verdicts verdicts --> outputs toolspan --> propagate outputs --> result records blocked --> result records",
       "source_hash": "sha256:d39bdce91f262ab0bbb93ae8f16c5c7a2f0ab63460fca6c13d0e1348e831938e",
       "html_url": "docs/paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay-diagram-1",
       "html_anchor": "paper-module-indirect-prompt-injection-information-flow-policy-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Not what you've signed up for",
       "url": "https://arxiv.org/abs/2302.12173",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "AgentDojo",
       "url": "https://arxiv.org/abs/2406.13352",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Simple Prompt Injection Attacks Can Leak Personal Data",
       "url": "https://arxiv.org/abs/2506.01055",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Permissive Information-Flow Analysis for Large Language Models",
       "url": "https://arxiv.org/abs/2410.03055",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "indirect_prompt_injection_information_flow_policy_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Indirect Prompt Injection Information Flow Policy Replay",
         "url": "components.html#component-indirect_prompt_injection_information_flow_policy_replay"
        },
        {
         "id": "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public indirect prompt injection information flow policy replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-14",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Carry basis and provenance together",
         "url": "doctrine.html#dcard-p-14"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 22925
    },
    {
     "id": "paper_module.mcp_tool_authority_replay",
     "title": "MCP Tool Authority Replay",
     "relative_href": "docs/paper-modules.html#paper-module-mcp-tool-authority-replay",
     "read_href": "docs/paper-modules.html#paper-module-mcp-tool-authority-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-mcp-tool-authority-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Synthetic MCP-like replay fixture for a tool-authority claim contract: replay result records, negative cases, scope limits; no live MCP/provider/account secret",
     "summary": "Public Microcosm projection of a tool-authority claim contract. Replays a synthetic MCP-like tool-authority scenario and validates replay result records, negative cases, and scope limits with metadata-only result records.",
     "authority_ceiling": "Synthetic MCP-like replay fixture only; not a live MCP account test, external model access, account secret-handling certification, benchmark security result, or launch claim.",
     "abstract": "Synthetic MCP-like replay fixture for a tool-authority claim contract: replay result records, negative cases, scope limits; no live MCP/provider/account secret",
     "teleology": {
      "section_id": "",
      "text": "Synthetic MCP-like replay fixture for a tool-authority claim contract: replay result records, negative cases, scope limits; no live MCP/provider/account secret",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This module is the public Microcosm projection of a tool-authority claim contract. It is a synthetic MCP-like replay fixture, not a live MCP account test, external model access, account secret-handling certification, benchmark security result, or launch claim.\n\nThe fixture models three public tools: a readonly docs lookup, a write-capable ticket update, and an untrusted result source. The claim is admitted only when tool manifest scope refs, call argument hashes, approval token refs, side-effect ledger refs, rollback result records, untrusted-output instruction/data splits, cold replay result records, negative cases, and scope limits line up.\n\n###### Purpose\n\nWhen an agent uses tools through a protocol like MCP, the sentence \"the agent used the tool safely\" is cheap to write and hard to back. This component answers one question: given a recorded tool-use trace, does the evidence actually support the authority the trace claims, or is the safety language unearned? It exists so that tool-authority claims have to be replayed against metadata before prose is allowed to call them safe.\n\nThe approach is to treat a tool call as a small transaction that must show its working. Each call cites a narrow capability scope, an argument hash, and, if it writes, an approval token, a side-effect ledger entry, and a rollback result record. Those references are not taken on trust: the side-effect ledger and the cold replay rows are cross-checked against the accepted call rows by call id, so a rollback result record that no call refers to, or a write that skips approval, is caught rather than waved through. The point is that a reference string is not authority until something downstream resolves it.\n\nTwo failure modes are worth naming because they are specific to tool-using agents. The first is the confused deputy: a call that asks for a scope wider than its task needs (`*`, `account_full_access`) is rejected before it runs, so a tool cannot quietly borrow more authority than it was granted. The second is tool-output-as-instruction, the prompt-injection shape where text returned by an untrusted tool is obeyed as a command. Here untrusted output must stay data and cite an instruction/data split; a row that lets output become instruction is one of the eight negative cases the fixture is built to catch.\n\nThis is deliberately a synthetic replay, not a live test. The component never opens an MCP account, calls a provider, or handles a account secret. It reads only public metadata and digests, and it keeps every payload, result body, and account secret out of the result records it writes. What it offers is narrow and honest: a way to check that a tool-authority story is internally consistent and metadata-only, not a certificate that any real tool integration is secure.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"MCP authority runtime\"] fixture[\"first-wave fixture\"] bundle[\"exported authority bundle\"] manifest[\"tool manifest\"] calls[\"scoped tool calls\"] results[\"tool result rows\"] side_effects[\"side-effect ledger\"] replay[\"cold replay rows\"] trace[\"public trace spans\"] source_modules[\"source-module body floor\"] result records[\"metadata-only result records\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle bundle --> manifest manifest --> calls calls --> results calls --> side_effects side_effects --> replay results --> trace replay --> trace source_modules --> trace trace --> result records result records --> ceiling\n```\n\nThe module's shape is a public tool-authority replay, not a live MCP security claim.\n\n###### Technical Mechanism\n\nThe replay is a fail-closed authority lattice over a synthetic MCP-like tool story. `_build_result` loads the fixture or exported bundle, runs `load_forbidden_classes` and `scan_paths` over input JSON and copied source modules, then validates each contract plane separately: projection protocol, tool policy, tool manifest, tool calls, tool results, side-effect ledger, cold replay rows, public trace spans, and source-module manifest rows. The final status is `pass` only when every sub-validator passes, no expected negative case is missing, the secret scan has zero blocking hits, and the source-module floor is either present when required or explicitly not required for the first-wave fixture.\n\nTool authority is checked before prose can turn it into evidence. Manifest rows define the declared tool ids and allowed tool classes. `validate_tool_calls` then rejects undeclared tool ids, overbroad scopes, missing argument hashes, hidden account secret export, live account access, unapproved side effects, tool-output-as-instruction, final-answer-only grading, and unredacted payload export. Write-capable calls must carry approval token refs, side-effect ledger refs, and rollback result record refs; untrusted-result calls must keep instruction and data boundaries explicit. `validate_side_effect_ledger` and `validate_cold_replay` make those refs observable instead of leaving them as decorative strings.\n\nThe exported-bundle path adds a body-floor check without moving bodies into result records. `_source_module_manifest_result` streams digest verification over each copied source source module, checks required anchors, requires `body_in_receipt: false`, and reports a metadata-only source-open import summary. `build_public_mcp_tool_authority_trace` contributes three public trace spans for the tool calls; `_body_import_verification` binds that public refactor back to the source source and Microcosm target digests. `_write_receipts` emits the result, board, validation result record, and sign-off result record for fixture runs, and `result_card` deliberately exposes counts, status bits, digest freshness, and omission result records rather than tool rows or source bodies.\n\nThe mechanism is intentionally narrower than a tool-use security benchmark. It accepts only public metadata and digest evidence, and it treats every generated projection as a result record over source rows rather than as source authority.\n\n###### Public Mechanics\n- Every tool call must bind to a narrow capability scope ref before admission.\n- Write-capable calls require approval token refs, side-effect ledger refs, and rollback result record refs.\n- Untrusted tool output is data, not instruction, and must cite an instruction/data split ref.\n- Call arguments, tool outputs, account refs, and result bodies stay redacted or metadata-only.\n- Overbroad scopes, hidden account secret export, tool-output-as-instruction, unapproved side effects, live account access, final-answer-only grading, missing rollback result records, and unredacted tool payloads are expected falsification fixtures.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[39:paper_module.mcp_tool_authority_replay]` is the JSON authority row; a diagram view and an atlas card are generated for this module from the source record.\n- Mechanism route: `core/mechanism_sources.json::mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay` binds the code locus, fixture refs, exported bundle refs, result record refs, validator commands, focused regression, and guardrails.\n- Runtime route: `src/microcosm_core/organs/mcp_tool_authority_replay.py` owns `run`, `run_tool_authority_bundle`, `_build_result`, `_write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- Exported-bundle route: `examples/mcp_tool_authority_replay/exported_mcp_tool_authority_bundle` contains `bundle_manifest.json`, `projection_protocol.json`, `tool_policy.json`, `tool_manifest.json`, `tool_calls.json`, `tool_results.json`, `side_effect_ledger.json`, `cold_replay.json`, and `source_module_manifest.json`.\n- Source-module route: `source_module_manifest.json` records seven copied public source body rows, while the exported source-open body summary exposes at least six body materials. The floor includes high-novelty and extracted-pattern evidence, agent execution trace runtime and standard bodies, route-readiness standard material, mission-transaction preflight internal control material, and the strict JSON helper. Result records carry refs, digests, counts, and status only.\n- Focused-test route: `tests/test_mcp_tool_authority_replay.py` verifies negative cases, public-relative redacted result records, exported-bundle runtime shape, source-module digest failures, exact copied source bodies, card result record reuse, and public trace span construction.\n\n###### Named Proof Consumers\n- First-wave fixture consumer: PYTHONPATH=src ../repo-python -m microcosm_core.components.mcp_tool_authority_replay run --input fixtures/first_wave/mcp_tool_authority_replay/input --out /tmp/microcosm-mcp-tool-authority-replay/fixture --sign-off-out /tmp/microcosm-mcp-tool-authority-replay/sign-off.json --card consumes the fixture route, expected negative cases, secret scan, public trace construction, scope limit, metadata-only result record writer, and command-card omission contract.\n- Exported-bundle consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.organs.mcp_tool_authority_replay run-tool-authority-bundle --input examples/mcp_tool_authority_replay/exported_mcp_tool_authority_bundle --out /tmp/microcosm-mcp-tool-authority-replay/bundle --card` consumes the public bundle, source-module manifest, copied body-floor digest checks, public trace spans, metadata-only exported-bundle result record, and fresh card reuse path.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_mcp_tool_authority_replay.py -q` pins the negative-case matrix, undeclared-tool rejection, redacted/public result record paths, source-module digest mismatch failures, exact copied source bodies, public trace span coverage, and card omission behavior.\n- This check excludes hand-editing generated projections; it is a read-only result record for this Markdown slice.\n\n###### Prior Art Grounding\n\nThis component is grounded in capability security, least privilege, and current MCP authorization guidance. The classic security lineage is Saltzer and Schroeder's [Protection of Information in Computer Systems](https://www.cs.virginia.edu/~evans/cs551/saltzer/) and Hardy's [Confused Deputy](https://web.cs.wpi.edu/~cs557/f14/papers/confused_deputy-hardy.pdf): authority should be narrow, mediated, and bound to the object/action being requested. The MCP-specific lineage is the official [MCP authorization](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization) and [security best practices](https://modelcontextprotocol.io/specification/2025-06-18/basic/security_best_practices) guidance, especially least-privilege scopes and token audience boundaries.\n\nMicrocosm does not claim live MCP security or account certification. It borrows the prior-art authority shape and makes it replayable: every public tool story must expose capability scope refs, approval refs, side-effect refs, rollback refs, instruction/data split refs, and scope boundaries before write authority is treated as evidence.\n\n###### Validation Result record Path\n\nRun the first-wave fixture into disposable result records from the Microcosm root:\n\nRun the exported bundle through the same component:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.mcp_tool_authority_replay run-tool-authority-bundle --input examples/mcp_tool_authority_replay/exported_mcp_tool_authority_bundle --out /tmp/microcosm_mcp_tool_authority_bundle\n```\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_mcp_tool_authority_replay.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim only that a synthetic public MCP-like replay preserved tool-authority boundaries over metadata rows: capability scopes, argument hashes, approval refs, side-effect refs, rollback refs, instruction/data split refs, cold replay refs, source-module digests, negative cases, and metadata-only validation result records.\n\nIt must not claim live MCP account safety, account secret-handling certification, live tool behavior, provider behavior, benchmark security, source-file changes, publishing-scope decision, complete security, or launch-scope decision.\n\n###### Scope boundary\n\nThis module does not access live MCP accounts, export account secrets or model-output data, obey tool output as instruction, run live tools, change source files, claim benchmark safety, publish results, or include launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe source record declares `concept.agent_reliability_and_safety_validator_bundle`, principles `P-4` and `P-16`, and axiom `AX-3` as the governing lattice. The generated component row repeats the paper and mechanism links and adds an component-level `P-18` relation; that component relation is useful context but does not expand the paper-module bundle's declared authority.\n\n`P-4` and `AX-3` are the local authority rule: a tool handle, account secret-shaped string, role name, or trusted-session label is bounded evidence of authority. The runtime must derive authority from dereferenced manifest policy, capability scope refs, approval refs, side-effect refs, rollback refs, cold replay refs, and public trace spans. `P-16` supplies the transaction boundary: a write-capable tool call is admissible only when the call is scoped, the side-effect is ledgered, rollback evidence is present, and the result record says which scope limit still holds.\n\nThe mechanism row deliberately leaves sibling/upstream mechanism relations as residual pressure. That residual is part of the scope limit: this module can show a public replay lattice for synthetic MCP-like tool authority, but it does not infer neighbouring mechanisms from prose, certify live MCP security, or promote generated Mermaid, Atlas, site, or corpus projections into source authority.\n\n###### Source-Open Body Floor\n\nThe exported bundle carries copied source bodies under `source_modules/`, governed by `source_module_manifest.json`. The manifest records source refs, target refs, hashes, material classes, required anchors, and result record body exclusions for:\n- `state/microcosm_portfolio/reconstruction/high_novelty_substrate_gap_scout_v1.json`\n- `state/microcosm_portfolio/extracted_patterns_ledger.jsonl`\n- `system/lib/agent_execution_trace.py`\n- `codex/standards/std_agent_execution_trace.json`\n- `codex/standards/std_extracted_pattern_route_readiness.json`\n- `tools/meta/control/mission_transaction_preflight.py`\n- `system/lib/strict_json.py`\n\nThe floor is source-open body evidence, not live-account or provider authority. Result records and command cards expose refs, digest status, counts, and verdicts only; they do not embed copied source bodies or private/live payload material.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 15140,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "When an agent uses tools through a protocol like MCP, the sentence \"the agent used the tool safely\" is cheap to write and hard to back. This component answers one question: given a recorded tool-use trace, does the evidence actually support the authority the trace claims, or is the safety language unearned? It exists so that tool-authority claims have to be replayed against metadata before prose is allowed to call them safe. The approach is to treat a tool call as a small transaction that must show its working. Each call cites a narrow capability scope, an argument hash, and, if it writes, an approval token, a side-effect ledger entry, and a rollback result record. Those references are not\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module's shape is a public tool-authority replay, not a live MCP security claim. component; the runtime validates tool classes, capability scopes, call metadata, approval refs, side-effect and rollback refs, untrusted-output data boundaries, cold replay, public trace spans, source-module digest anchors, negative cases, and metadata-only result records.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The replay is a fail-closed authority lattice over a synthetic MCP-like tool story. buildresult loads the fixture or exported bundle, runs loadforbiddenclasses and scan_paths over input JSON and copied source modules, then validates each contract plane separately: projection protocol, tool policy, tool manifest, tool calls, tool results, side-effect ledger, cold replay rows, public trace spans, and source-module manifest rows. The final status is pass only when every sub-validator passes, no expected negative case is missing, the secret scan has zero blocking hits, and the source-module floor is either present when required or explicitly not required for the first-wave fixture. Tool authori\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "mcptoolauthority_replay component and to mechanism.mcptoolauthorityreplay.validatespublicmcptoolauthorityreplay. The source record declares concept.agentreliabilityandsafetyvalidator_bundle, principles P-4 and P-16, and axiom AX-3 as the governing lattice. The generated component row repeats the paper and mechanism links and adds an component-level P-18 relation; that component relation is useful context but does not expand the paper-module bundle's declared authority. P-4 and AX-3 are the local authority rule: a tool handle, account secret-shaped string, role name, or trusted-session label is bounded evidence of authority. The runtime must derive authority from dereferenced manifest policy\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-mechanics",
       "title": "Public Mechanics",
       "level": 2,
       "excerpt": "Every tool call must bind to a narrow capability scope ref before admission. Write-capable calls require approval token refs, side-effect ledger refs, and rollback result record refs. Untrusted tool output is data, not instruction, and must cite an instruction/data split ref. Call arguments, tool outputs, account refs, and result bodies stay redacted or metadata-only. Overbroad scopes, hidden account secret export, tool-output-as-instruction, unapproved side effects, live account access, final-answer-only grading, missing rollback result records, and unredacted tool payloads are expected falsification fixtures.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: core/papermodulecapsules.json::papermodules[39:papermodule.mcptoolauthority_replay] is the JSON authority row; a diagram view and an atlas card are generated for this module from the source record. Mechanism route: core/mechanismsources.json::mechanism.mcptoolauthorityreplay.validatespublicmcptoolauthority_replay binds the code locus, fixture refs, exported bundle refs, result record refs, validator commands, focused regression, and guardrails. Runtime route: src/microcosmcore/components/mcptoolauthorityreplay.py owns run, runtoolauthoritybundle, buildresult, write_receipts, resultcard, EXPECTEDNEGATIVECASES, and AUTHORITYCEILING. Exported-bundle route: examples/mcptoolauthori\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "First-wave fixture consumer: PYTHONPATH=src ../repo-python -m microcosmcore.components.mcptoolauthorityreplay run --input fixtures/firstwave/mcptoolauthorityreplay/input --out /tmp/microcosm-mcp-tool-authority-replay/fixture --sign-off-out /tmp/microcosm-mcp-tool-authority-replay/sign-off.json --card consumes the fixture route, expected negative cases, secret scan, public trace construction, scope limit, metadata-only result record writer, and command-card omission contract. Exported-bundle consumer: PYTHONPATH=src ../repo-python -m microcosmcore.components.mcptoolauthorityreplay run-tool-authority-bundle --input examples/mcptoolauthorityreplay/exportedmcptoolauthority_bundle --out /tmp/mic\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run the first-wave fixture into disposable result records from the Microcosm root: Run the exported bundle through the same component:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim only that a synthetic public MCP-like replay preserved tool-authority boundaries over metadata rows: capability scopes, argument hashes, approval refs, side-effect refs, rollback refs, instruction/data split refs, cold replay refs, source-module digests, negative cases, and metadata-only validation result records. It must not claim live MCP account safety, account secret-handling certification, live tool behavior, provider behavior, benchmark security, source-file changes, public sharing decision, complete security, or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in capability security, least privilege, and current MCP authorization guidance. The classic security lineage is Saltzer and Schroeder's Protection of Information in Computer Systems and Hardy's Confused Deputy: authority should be narrow, mediated, and bound to the object/action being requested. The MCP-specific lineage is the official MCP authorization and security best practices guidance, especially least-privilege scopes and token audience boundaries. Microcosm does not claim live MCP security or account certification. It borrows the prior-art authority shape and makes it replayable: every public tool story must expose capability scope refs, approval refs, sid\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The exported bundle carries copied source bodies under sourcemodules/, governed by sourcemodule_manifest.json. The manifest records source refs, target refs, hashes, material classes, required anchors, and result record body exclusions for: state/microcosmportfolio/reconstruction/highnoveltysubstrategapscoutv1.json state/microcosmportfolio/extractedpatterns_ledger.jsonl system/lib/agentexecutiontrace.py codex/standards/stdagentexecution_trace.json codex/standards/stdextractedpatternroutereadiness.json tools/meta/control/missiontransactionpreflight.py system/lib/strict_json.py The floor is source-open body evidence, not live-account or provider authority. Result records and command cards exp\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not access live MCP accounts, export account secrets or model-output data, obey tool output as instruction, run live tools, change source files, claim benchmark safety, publish results, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.mcp_tool_authority_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"MCP authority runtime\"] fixture[\"first-wave fixture\"] bundle[\"exported authority bundle\"] manifest[\"tool manifest\"] calls[\"scoped tool calls\"] results[\"tool result rows\"] side_effects[\"side-effect ledger\"] replay[\"cold replay rows\"] trace[\"public trace spans\"] source_modules[\"source-module body floor\"] result records[\"metadata-only result records\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle bundle --> manifest manifest --> calls calls --> results calls --> side_effects side_effects --> replay results --> trace replay --> trace source_modules --> trace trace --> result records result records --> ceiling",
       "source_hash": "sha256:87f5bee4b36bfd37bcca16e7ba6ff489e3be2de3ce35114da33622eb7b7c21e4",
       "html_url": "docs/paper-modules.html#paper-module-mcp-tool-authority-replay-diagram-1",
       "html_anchor": "paper-module-mcp-tool-authority-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mcp_tool_authority_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Protection of Information in Computer Systems",
       "url": "https://www.cs.virginia.edu/~evans/cs551/saltzer/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Confused Deputy",
       "url": "https://web.cs.wpi.edu/~cs557/f14/papers/confused_deputy-hardy.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "MCP authorization",
       "url": "https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "security best practices",
       "url": "https://modelcontextprotocol.io/specification/2025-06-18/basic/security_best_practices",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-3",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Authority by derivation, not possession",
         "url": "doctrine.html#dcard-ax-3"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "mcp_tool_authority_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "MCP Tool Authority Replay",
         "url": "components.html#component-mcp_tool_authority_replay"
        },
        {
         "id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public mcp tool authority replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-4",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Possession is not permission",
         "url": "doctrine.html#dcard-p-4"
        },
        {
         "id": "P-16",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind authority to transaction scope",
         "url": "doctrine.html#dcard-p-16"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mcp_tool_authority_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 15883
    },
    {
     "id": "paper_module.tactic_portfolio_availability",
     "title": "Tactic Portfolio Availability",
     "relative_href": "docs/paper-modules.html#paper-module-tactic-portfolio-availability",
     "read_href": "docs/paper-modules.html#paper-module-tactic-portfolio-availability",
     "context_href": "docs/rules-and-ideas.html#paper-module-tactic-portfolio-availability",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Environment-scoped tactic availability rows gate downstream tactic routing without becoming proof, benchmark, or launch-scope decision.",
     "summary": "Tactic Portfolio Availability Probe validates copied Lean/Std tactic affordance rows before downstream routing can treat a tactic as usable. It checks compile status, Mathlib absence handling, probe portfolio membership, negative cases, source digests, and metadata-only result records while keeping proof bodies, model-output data, benchmark claims, and launch-scope decision out of scope.",
     "authority_ceiling": "Copied tactic affordance probe rows and public fixture/exported-bundle result records only; no Lean/Lake rerun, theorem proof, benchmark performance, external model access, Mathlib-dependent proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Environment-scoped tactic availability rows gate downstream tactic routing without becoming proof, benchmark, or launch-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "Environment-scoped tactic availability rows gate downstream tactic routing without becoming proof, benchmark, or launch-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`tactic_portfolio_availability_probe` is the public component that turns tactic callability into an explicit artifact before routing or proof search treats a tactic as usable.\n\nThe fixture is copied from real source system: the 2026-05-11 `PROVER_PROOF_STATE_SEARCH_CURRICULUM` smoke run's Lean/Std tactic affordance probe. It records compile-status rows for `rfl`, `decide`, `omega`, `simp`, `simp_all`, `grind`, `native_decide`, and `aesop`, with source digests for the run-level affordance probe, the `portfolio_core_v0` tactic availability artifact, and the paired corpus-readiness boundary. The Mathlib-dependent `aesop` row is marked `environment_fail` because the paired environment probe reports `mathlib_lake_project_import_available=false`.\n\nThe component validates:\n- every tactic has an environment-scoped `compile_status`;\n- Mathlib-dependent tactics are not marked available without a passing Mathlib import probe;\n- downstream consumers reference only tactics present in the probe portfolio;\n- proof bodies, raw model-output data, benchmark claims, launch-scope decision, and non-public paths stay out of the public artifact.\n\nThe generated board is a callability map, bounded evidence evidence. It can make target-shape routing cheaper and more honest, but it cannot prove a goal, widen Lean/Lake authority, use external model services, claim benchmark performance, or include launch operations.\n\nThe result record contract reports `body_material_status=copied_non_secret_macro_body_with_provenance`, `tactic_availability_status=real_lean_std_tactic_affordance_probe_rows`, source digests, target refs, and `secret_exclusion_scan`. It does not use body-redaction or non-public-state-scan grammar as product evidence.\n\n###### Purpose\n\nA tactic name is not a usable tactic. `aesop` is callable only if the surrounding Lean and Std environment actually carries the imports it needs; `omega` is callable in one project layout and not in another. Routing or proof search that trusts a bare tactic name will reach for tactics that the current environment cannot run, and then misread the resulting failure as a property of the goal rather than a property of the environment. This component answers one question: in the observed Lean/Std environment, which tactics were actually callable, and on what evidence?\n\nThe interesting part is how it treats failure. A copied probe row that reports a Lean `FAIL` is not flattened into a single \"unavailable\" verdict. When a tactic declares `requires_mathlib` and the paired environment probe reports that the Mathlib import is absent, the failure is classified as `environment_fail` with the reason `MATHLIB_IMPORT_MISSING`. The same Lean `FAIL` for a tactic that does not depend on Mathlib is classified as `compile_fail`. The distinction keeps a missing import from masquerading as a broken tactic, and it preserves Mathlib absence as a recorded fact about the environment rather than discarding it. A downstream router can then re-attempt the same tactic in a different environment instead of striking it off permanently.\n\nThe second deliberate choice is that none of this is a measurement of quality. The component copies probe durations and bands them as `fast`, `moderate`, or `slow` so a router can prefer a cheaper available tactic, but the latency profile is stamped as environment-scoped, not benchmark authority. Callability and speed in one observed environment are useful for cheaper routing; they are explicitly not evidence that a tactic is correct, that a goal was proved, or that Lean was rerun by this component.\n\n###### Shape\n\nSource refs\n\nTactic portfolio availability probe `tactic_portfolio_availability_probe` Environment probe `mathlib_lake_project_import_available` Diagram source\n\n```text\nflowchart TD A[\"Copied Lean/Std affordance probe rows (compile_status, requires_mathlib, duration_ms)\"] --> B[\"tactic_portfolio_availability_probe\"] C[\"Environment probe mathlib_lake_project_import_available\"] --> B B --> D{\"Copied compile_status\"} D -->|PASS| E[\"available band duration fast / moderate / slow\"] D -->|FAIL + requires_mathlib + Mathlib absent| F[\"environment_fail reason MATHLIB_IMPORT_MISSING\"] D -->|FAIL otherwise| G[\"compile_fail\"] E --> H[\"Availability board for target-shape routing\"] F --> H G --> H I[\"Downstream tactic reference\"] --> J{\"Tactic in probed portfolio?\"} J -->|no| K[\"Rejected: unprobed tactic referenced\"] J -->|yes| H B --> L[\"metadata-only fixture and bundle result records no proof, Lean, or provider bodies\"] L --> M[\"Generated paper-module row and validation result records\"]\n```\n\nThe flow is deliberately smaller than the generated doctrine-lattice graph.\n\n###### Reader Evidence Routing\n\nRead this page in four passes:\n1. Start with the bundle source row at `core/paper_module_capsules.json::paper_modules[40:paper_module.tactic_portfolio_availability]`. It names the public component subject, mechanism subject, resolved code locus, Microcosm concept, governing principles, axioms, and sibling paper-module dependencies that generate the relationship edges.\n2. Inspect the runtime system at `src/microcosm_core/organs/tactic_portfolio_availability_probe.py`. The load-bearing symbols are `run`, `run_availability_bundle`, `_build_result`, `_write_receipts`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`; those are the code-loci symbols that make the paper module about an executable component instead of a prose topic.\n3. Reproduce the evidence floor with the fixture input `fixtures/first_wave/tactic_portfolio_availability_probe/input`, the exported bundle `examples/tactic_portfolio_availability_probe/exported_tactic_portfolio_availability_bundle`, the focused test `tests/test_tactic_portfolio_availability_probe.py`, and the paper-module corpus check. Treat the result records as environment-scoped tactic-callability evidence only; validation result records do not widen the proof boundary, scope limit, launch posture, provider posture, or benchmark posture.\n\n###### Prior Art Grounding\n\nThe module is patterned after feature-detection probes and proof-assistant tactic inventories. GNU Autoconf's configure workflow established the habit of testing local capability before relying on it; Lean's tactic documentation shows that tactic use is environment- and goal-sensitive, so a tactic name is not enough to justify downstream routing. This component applies that older probe discipline to Microcosm: it records which tactics were callable in the observed Lean/Std environment and preserves Mathlib-dependent absence as evidence, without treating callability as proof quality.\n\nPrior-art anchors:\n- GNU Autoconf feature/configuration probing: https://ftp.gnu.org/old-gnu/Manuals/autoconf-2.57/html_chapter/autoconf.html\n- Lean 4 tactic documentation: https://lean-lang.org/theorem_proving_in_lean4/Tactics/\n\nPrimary commands:\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThe expected projection row is `paper_module.tactic_portfolio_availability` with 18 generated relationship edges, no unpopulated selective relations, Mermaid status `available_from_capsule_edges`, and Atlas status `linked_from_capsule_edges`. These checks validate environment-scoped tactic availability rows and bundle result records only; they do not turn callability into proof quality, benchmark performance, Mathlib proof authority, or launch-scope decision.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe JSON bundle and generated row prove only environment-scoped tactic callability evidence: copied Lean/Std tactic affordance rows, compile-status rows, Mathlib absence evidence, downstream tactic-reference checks, source digests, secret-exclusion checks, negative cases, and validation result records. They do not prove formal-result correctness, expand Lean or Lake authority, use external model services, claim benchmark performance, export non-public paths, include launch operations or public sharing, or treat tactic callability as proof quality.\n\n###### Scope limit\n\nThis component is environment-scoped tactic callability evidence only. It does not establish formal-result correctness, expand Lean/Lake authority, use external model services, claim benchmark performance, export non-public paths, include launch operations, or treat tactic callability as proof quality.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 8378,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A tactic name is not a usable tactic. aesop is callable only if the surrounding Lean and Std environment actually carries the imports it needs; omega is callable in one project layout and not in another. Routing or proof search that trusts a bare tactic name will reach for tactics that the current environment cannot run, and then misread the resulting failure as a property of the goal rather than a property of the environment. This component answers one question: in the observed Lean/Std environment, which tactics were actually callable, and on what evidence? The interesting part is how it treats failure. A copied probe row that reports a Lean FAIL is not flattened into a single \"unavailabl\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The flow is deliberately smaller than the generated doctrine-lattice graph. The diagram shows the behavior boundary a human should inspect before treating a tactic as routeable.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this page in four passes: Start with the bundle source row at core/papermodulecapsules.json::papermodules[40:papermodule.tacticportfolioavailability]. It names the public component subject, mechanism subject, resolved code locus, Microcosm concept, governing principles, axioms, and sibling paper-module dependencies that generate the relationship edges. Open papermodules/tacticportfolio_availability.json next, not as a currently resolves to 18 relationship edges, zero unpopulated selective relations, generated Mermaid availablefromcapsule_edges, generated Atlas linkedfromcapsuleedges, and sourceauthority: source record. Inspect the runtime system at src/microcosmcore/components/tacticpo\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The JSON bundle and generated row prove only environment-scoped tactic callability evidence: copied Lean/Std tactic affordance rows, compile-status rows, Mathlib absence evidence, downstream tactic-reference checks, source digests, secret-exclusion checks, negative cases, and validation result records. They do not prove formal-result correctness, expand Lean or Lake authority, use external model services, claim benchmark performance, export non-public paths, include launch operations or public sharing, or treat tactic callability as proof quality.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component is environment-scoped tactic callability evidence only. It does not establish formal-result correctness, expand Lean/Lake authority, use external model services, claim benchmark performance, export non-public paths, include launch operations, or treat tactic callability as proof quality.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The module is patterned after feature-detection probes and proof-assistant tactic inventories. GNU Autoconf's configure workflow established the habit of testing local capability before relying on it; Lean's tactic documentation shows that tactic use is environment- and goal-sensitive, so a tactic name is not enough to justify downstream routing. This component applies that older probe discipline to Microcosm: it records which tactics were callable in the observed Lean/Std environment and preserves Mathlib-dependent absence as evidence, without treating callability as proof quality. Prior-art anchors: GNU Autoconf feature/configuration probing: https://ftp.gnu.org/old-gnu/Manuals/autoconf-2\u2026",
       "block_kinds": [
        "code",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate/, reproduce this page's proof boundary with temporary result records: The expected projection row is papermodule.tacticportfolio_availability with 18 generated relationship edges, no unpopulated selective relations, Mermaid status availablefromcapsule_edges, and Atlas status linkedfromcapsule_edges. These checks validate environment-scoped tactic availability rows and bundle result records only; they do not turn callability into proof quality, benchmark performance, Mathlib proof authority, or launch authority.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.tactic_portfolio_availability.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Copied Lean/Std affordance probe rows (compile_status, requires_mathlib, duration_ms)\"] --> B[\"tactic_portfolio_availability_probe\"] C[\"Environment probe mathlib_lake_project_import_available\"] --> B B --> D{\"Copied compile_status\"} D -->|PASS| E[\"available band duration fast / moderate / slow\"] D -->|FAIL + requires_mathlib + Mathlib absent| F[\"environment_fail reason MATHLIB_IMPORT_MISSING\"] D -->|FAIL otherwise| G[\"compile_fail\"] E --> H[\"Availability board for target-shape routing\"] F --> H G --> H I[\"Downstream tactic reference\"] --> J{\"Tactic in probed portfolio?\"} J -->|no| K[\"Rejected: unprobed tactic referenced\"] J -->|yes| H B --> L[\"metadata-only fixture and bundle result records no proof, Lean, or provider bodies\"] L --> M[\"Generated paper-module row and validation result records\"]",
       "source_hash": "sha256:38e4b18430b85bcac4484f389e79552b7576ebffbd68c29a3580b119b9f0d5e2",
       "html_url": "docs/paper-modules.html#paper-module-tactic-portfolio-availability-diagram-1",
       "html_anchor": "paper-module-tactic-portfolio-availability-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tactic_portfolio_availability.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 5,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.corpus_readiness_mathlib_absence_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Corpus Readiness Mathlib Absence Gate",
         "url": "paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate"
        },
        {
         "id": "paper_module.formal_math_readiness_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Readiness Gate",
         "url": "paper-modules.html#paper-module-formal-math-readiness-gate"
        },
        {
         "id": "paper_module.target_shape_tactic_routing",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Target Shape Tactic Routing",
         "url": "paper-modules.html#paper-module-target-shape-tactic-routing"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "tactic_portfolio_availability_probe",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Tactic Portfolio Availability Probe",
         "url": "components.html#component-tactic_portfolio_availability_probe"
        },
        {
         "id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public tactic availability projection",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tactic_portfolio_availability.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 9358
    },
    {
     "id": "paper_module.target_shape_tactic_routing",
     "title": "Target Shape Tactic Routing",
     "relative_href": "docs/paper-modules.html#paper-module-target-shape-tactic-routing",
     "read_href": "docs/paper-modules.html#paper-module-target-shape-tactic-routing",
     "context_href": "docs/rules-and-ideas.html#paper-module-target-shape-tactic-routing",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Pre-execution tactic routing admits or rejects tactics from target shape and probe evidence without proving the target.",
     "summary": "Target Shape Tactic Routing is the pre-execution gate between tactic availability and proof attempts. It validates Ring2 problem-domain, failure-class, graph-update, and tactic-probe references, rejects unavailable or unprobed tactics, and records metadata-only route decisions before any Lean/Lake proof authority is claimed.",
     "authority_ceiling": "Public route-reference fixture and exported-bundle result records only; no Lean/Lake execution, formal-result correctness, post-execution routing, external model access, proof body export, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Pre-execution tactic routing admits or rejects tactics from target shape and probe evidence without proving the target.",
     "teleology": {
      "section_id": "",
      "text": "Pre-execution tactic routing admits or rejects tactics from target shape and probe evidence without proving the target.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`target_shape_tactic_routing_gate` is the public Microcosm component for the pre-execution tactic admissibility layer.\n\nIt turns real problem-domain, failure-class, and graph-update candidate refs from the formal-math evaluation pipeline into route decisions: which tactics are admitted, which are rejected as unavailable, which are rejected as unprobed, and which are rejected because they do not match the declared goal shape.\n\n###### Purpose\n\nA proof attempt is expensive, and most of that cost is spent on tactics that were never going to work: tactics the environment cannot run, tactics absent from the probe portfolio, or tactics that do not match the shape of the goal. This component answers one question before any Lean call is made: given the target shape and the current availability probe, which tactics may a route even attempt?\n\nThe decision is deliberately made early. Routing happens before execution, so a case that carries Lean result records, execution results, or a post-execution stage is rejected outright rather than trusted. The point is to decide admissibility from evidence that already exists, not from the outcome of the attempt the gate is meant to filter.\n\nWhat is unusual is that the gate recomputes the choice rather than accepting the declared one. Each target shape carries a small preferred-tactic order (for example `omega` for integer linear arithmetic, `decide` for closed natural-number decisions). The gate walks that order, skips any preferred tactic that is unprobed or unavailable, records why it skipped, and falls back to the next allowed candidate or to a default safe order for shapes it does not recognise. A route whose declared selection disagrees with this computed preference is flagged rather than honoured. The route is a claim about what should run; the gate treats it as something to check, not something to believe.\n\n###### Shape\n\nSource refs\n\nJSON bundle `paper_module.target_shape_tactic_routing` Generated structured source record `paper_modules/target_shape_tactic_routing.json` Runtime component `target_shape_tactic_routing_gate.py` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.target_shape_tactic_routing\"] structured source record[\"Generated structured source record paper_modules/target_shape_tactic_routing.json\"] Component[\"Runtime component target_shape_tactic_routing_gate.py\"] Portfolio[\"Tactic probe portfolio available/unavailable tactic ids\"] Routes[\"Target-shape route cases pre_execution selected tactics\"] SourceFloor[\"Copied Ring2 source artifacts 4 body imports, body_in_receipt=false\"] Decisions{\"Route admissible before proof execution?\"} Result records[\"Result records result, board, validation, sign-off\"] Tests[\"Focused tests negative cases and digest checks\"] Ceiling[\"Scope limit no Lean/Lake, proof, provider, post-execution, launch\"] Bundle --> structured source record Bundle --> Component Component --> Portfolio Component --> Routes Portfolio --> Decisions Routes --> Decisions SourceFloor --> Decisions Decisions --> Result records Tests --> Result records Result records --> Ceiling\n```\n\n###### Technical Mechanism\n\nThe named mechanism `mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary` is a fail-closed scorer over two public input planes: the tactic probe portfolio and the target-shape route cases. `_build_result` loads the fixture or exported bundle payloads, scans the inputs and copied source artifacts for forbidden body material, derives known/available/unavailable tactic sets, scores every route case, checks copied Ring2 source-artifact digests, and emits metadata-only result, board, validation, and sign-off result records.\n\nFor each route case, `_decision_for_tactic` rejects a candidate before selection if the tactic id is absent from the public probe portfolio, marked unavailable, or outside the case's declared `allowed_tactic_ids`. Only a tactic that is probed, available, and target-shape-admissible can receive `TARGET_SHAPE_ADMISSIBLE`. `_shape_preferred_selection` then applies the local target-shape preference map, records the unknown-shape default fallback when no specific map exists, and records the preferred-unavailable fallback when the first preferred tactic is known but not usable. `_route_integrity_findings` turns any unavailable admission, unprobed admission, post-execution route, or declared-selection mismatch into typed findings.\n\nThe proof consumer is `tests/test_target_shape_tactic_routing_gate.py`: it asserts seven `pre_execution` route cases, shape-preferred selection for the real Ring2 cases, unknown-shape and unavailable-Mathlib fallback behavior, rejection of mutated shape and availability inputs, exported-bundle sign-off, four copied source artifacts with digest verification, compact card omission of the full routing board, and result record text without non-public paths or body fields. Those tests consume the same fixture and exported-bundle surfaces named by the mechanism row, so this page's evidence is the runnable route-reference and result record contract rather than a prose-only claim.\n\nThe governing lattice stays explicit: the bundle binds the module to `concept.formal_math_and_proof_witness_bundle`, principles `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-9`, axioms `AX-1`, `AX-2`, `AX-5`, `AX-7`, and `AX-8`, and dependency modules for tactic portfolio availability, formal-math readiness, proof-diagnostic evidence, verifier-trace repair, and formal evidence-cell anchor resolution. The standard narrows that lattice to one allowed claim: public pre-execution route cases may admit only tactics that were both probed and available before proof execution. The same standard forbids widening this mechanism into formal-result correctness, Lean/Lake execution, external model access, proof or provider body export, post-execution route authority, publishing-scope decision, or launch-scope decision.\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[41:paper_module.target_shape_tactic_routing]` names `source_authority: json_capsule`, subjects component:target_shape_tactic_routing_gate and `mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary`, the resolved code locus `src/microcosm_core/organs/target_shape_tactic_routing_gate.py`, and generated projection statuses `mermaid.status: available_from_capsule_edges` plus `atlas_card.status: linked_from_capsule_edges`.\n- Generated structured source record: `paper_modules/target_shape_tactic_routing.json` carries `relationships.edges` for the bundle subjects, concept/principle/axiom refs, dependency paper modules, and code locus; `relationships.unpopulated_selective_relations: []`; and scope boundaries that the JSON row does not establish runtime correctness, launch-scope decision, or whole-system completeness.\n- Runtime contract: `standards/std_microcosm_target_shape_tactic_routing_gate.json` limits the allowed claim to pre-execution tactic admission from probed, available tactics; its `required_fields` bind `tactic_portfolio_availability.tactics[].tactic_id`, `availability_status`, `target_shape_routes.route_cases[].target_shape`, `allowed_tactic_ids`, `selected_tactic_id`, and `route_stage`.\n- Source-body accounting: `examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle/source_module_manifest.json` records `source_import_class: copied_non_secret_macro_body`, `module_count: 4`, `body_in_receipt: false`, three `verified_public_safe_private_path_rewrite` rows, and one `exact_copy` row.\n- Fixture/bundle behavior: `examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle/target_shape_routes.json` has seven `pre_execution` route cases, while `tactic_portfolio_availability.json` marks `decide`, `omega`, `simp_all`, and `rfl` available and `aesop` unavailable.\n- Result record floor: `receipts/first_wave/target_shape_tactic_routing_gate/target_shape_tactic_routing_result.json`, `target_shape_tactic_routing_board.json`, `target_shape_tactic_routing_validation_receipt.json`, and result records/sign-off/first_wave/target_shape_tactic_routing_gate_fixture_acceptance.json report `status: pass`, `route_case_count: 7`, `copied_source_artifact_count: 4`, `source_artifacts_pass: true`, `missing_negative_cases: []`, `secret_exclusion_scan.blocking_hit_count: 0`, and authority flags with Lean/Lake, proof, provider, post-execution routing, and launch-scope decision set false.\n- Test boundary: `tests/test_target_shape_tactic_routing_gate.py` checks observed negative cases, shape-preferred selection, unknown-shape and Mathlib-unavailable fallback, exported-bundle sign-off, source-module digest verification, compact card omission of full boards, and result record output without non-public paths or body fields.\n\n###### Reader Evidence Routing\n\nRead this module as a pre-execution admissibility gate, not as a proof attempt. The primary reader path is:\n- Start with the problem-domain, failure-class, graph-update candidate, and tactic-probe refs in the fixture input. They are the public route evidence the gate is allowed to inspect before any Lean/Lake work in the formal-math evaluation and premise-retrieval pipeline.\n- Compare each target-shape route case against the selected tactic ids and rejection reasons: admitted tactics must match both the declared goal shape and the public availability probe.\n- Inspect negative cases before the happy path. The important behavior is that unavailable tactics, unprobed tactics, proof/provider body leakage, post-execution routing, and launch overclaims all fail closed.\n- Use the structured source record only for structural lattice proof: it confirms subjects, code loci, doctrine refs, and dependency edges; it does not establish the tactic route can solve the target.\n\n###### Runtime Surfaces\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.target_shape_tactic_routing_gate run --input fixtures/first_wave/target_shape_tactic_routing_gate/input --out receipts/first_wave/target_shape_tactic_routing_gate\nPYTHONPATH=src python3 -m microcosm_core.cli target-shape-tactic-routing-gate run-routing-bundle --input examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle --out receipts/runtime_shell/demo_project/organs/target_shape_tactic_routing_gate\n```\n\n###### Negative Cases\n- `unavailable_tactic_admitted` rejects an `aesop` route while Mathlib is absent.\n- `unprobed_tactic_allowed` rejects a tactic absent from the public probe portfolio.\n- `proof_body_leakage` rejects proof/provider/Lean body fields.\n- `post_execution_route` rejects route selection after execution evidence.\n- `release_overclaim` rejects proof, provider, Lean/Lake, public sharing, and launch-scope decision overclaims.\n\n###### Prior Art Grounding\n\nThe routing layer follows established proof-search and policy-gating patterns: match a goal shape to methods that are known to be available before spending runtime on them. Lean's tactic documentation supplies the local proof-assistant context for goal-directed tactic choice, while Isabelle/Sledgehammer represents a mature prior-art pattern for selecting external provers and relevant facts from a goal. Microcosm narrows that idea to a pre-execution admissibility filter: target shape, allowed references, and current tactic availability must line up before a tactic route can be exported.\n\nPrior-art anchors:\n- Lean 4 tactic documentation: https://lean-lang.org/theorem_proving_in_lean4/Tactics/\n- Isabelle Sledgehammer user guide: https://isabelle.in.tum.de/doc/sledgehammer.pdf\n\n###### Why It Matters\n\nAfter corpus readiness and strategy scoring, Microcosm needs a visible gate that prevents wasted or misleading proof attempts. This component shows that gate over the formal-math evaluation and premise-retrieval pipeline already feeding verifier repair, evidence anchoring, and proof diagnostics: a tactic is not tried just because it exists; it is admitted only when the target shape and the public availability probe both allow it.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThese checks validate route-reference fixture and bundle result records only; they do not widen the no-Lean/no-proof scope limit.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component does not run Lean or Lake and does not establish a target. It validates only the route references that must exist before a proof attempt in the formal-math evaluation and premise-retrieval pipeline: tactic probe availability, target-shape route cases, selected tactic ids, failure-class refs, graph-update candidate refs, and negative-case result records.\n\nForbidden outputs include proof bodies, provider bodies, post-execution route selection, Lean result record claims, external model access, launch claims, and Mathlib-dependent proof authority.\n\n###### Scope limit\n\nThis module covers only public pre-execution tactic routing evidence: the route references used before a formal proof attempt, tactic probe availability, target-shape cases, selected tactic ids, failure-class refs, graph-update candidate refs, negative-case result records, source-module digest evidence, and validation result records. It does not run Lean or Lake, prove formal-result correctness, export proof bodies or provider bodies, authorize post-execution route selection, use external model services, claim Mathlib-dependent proof authority, authorize public sharing, include launch operations, or prove whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13621,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A proof attempt is expensive, and most of that cost is spent on tactics that were never going to work: tactics the environment cannot run, tactics absent from the probe portfolio, or tactics that do not match the shape of the goal. This component answers one question before any Lean call is made: given the target shape and the current availability probe, which tactics may a route even attempt? The decision is deliberately made early. Routing happens before execution, so a case that carries Lean result records, execution results, or a post-execution stage is rejected outright rather than trusted. The point is to decide admissibility from evidence that already exists, not from the outcome of\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component does not run Lean or Lake and does not establish a target. It validates only the route references that must exist before a proof attempt in the formal-math evaluation and premise-retrieval pipeline: tactic probe availability, target-shape route cases, selected tactic ids, failure-class refs, graph-update candidate refs, and negative-case result records. Forbidden outputs include proof bodies, provider bodies, post-execution route selection, Lean result record claims, external model access, launch claims, and Mathlib-dependent proof authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The named mechanism mechanism.targetshapetacticroutinggate.validatespublictacticroutingboundary is a fail-closed scorer over two public input planes: the tactic probe portfolio and the target-shape route cases. buildresult loads the fixture or exported bundle payloads, scans the inputs and copied source artifacts for forbidden body material, derives known/available/unavailable tactic sets, scores every route case, checks copied Ring2 source-artifact digests, and emits metadata-only result, board, validation, and sign-off result records. For each route case, decisionfor_tactic rejects a candidate before selection if the tactic id is absent from the public probe portfolio, marked unavailable,\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module as a pre-execution admissibility gate, not as a proof attempt. The primary reader path is: Start with the problem-domain, failure-class, graph-update candidate, and tactic-probe refs in the fixture input. They are the public route evidence the gate is allowed to inspect before any Lean/Lake work in the formal-math evaluation and premise-retrieval pipeline. Compare each target-shape route case against the selected tactic ids and rejection reasons: admitted tactics must match both the declared goal shape and the public availability probe. Inspect negative cases before the happy path. The important behavior is that unavailable tactics, unprobed tactics, proof/provider body lea\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module covers only public pre-execution tactic routing evidence: the route references used before a formal proof attempt, tactic probe availability, target-shape cases, selected tactic ids, failure-class refs, graph-update candidate refs, negative-case result records, source-module digest evidence, and validation result records. It does not run Lean or Lake, prove formal-result correctness, export proof bodies or provider bodies, authorize post-execution route selection, use external model services, claim Mathlib-dependent proof authority, authorize public sharing, include launch operations, or prove whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-surfaces",
       "title": "Runtime Surfaces",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate/, reproduce this page's proof boundary with temporary result records: These checks validate route-reference fixture and bundle result records only; they do not widen the no-Lean/no-proof scope limit.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "unavailabletacticadmitted rejects an aesop route while Mathlib is absent. unprobedtacticallowed rejects a tactic absent from the public probe portfolio. proofbodyleakage rejects proof/provider/Lean body fields. postexecutionroute rejects route selection after execution evidence. release_overclaim rejects proof, provider, Lean/Lake, public sharing, and launch-scope decision overclaims.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The routing layer follows established proof-search and policy-gating patterns: match a goal shape to methods that are known to be available before spending runtime on them. Lean's tactic documentation supplies the local proof-assistant context for goal-directed tactic choice, while Isabelle/Sledgehammer represents a mature prior-art pattern for selecting external provers and relevant facts from a goal. Microcosm narrows that idea to a pre-execution admissibility filter: target shape, allowed references, and current tactic availability must line up before a tactic route can be exported. Prior-art anchors: Lean 4 tactic documentation: https://lean-lang.org/theoremprovingin_lean4/Tactics/ Isab\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "why-it-matters",
       "title": "Why It Matters",
       "level": 2,
       "excerpt": "After corpus readiness and strategy scoring, Microcosm needs a visible gate that prevents wasted or misleading proof attempts. This component shows that gate over the formal-math evaluation and premise-retrieval pipeline already feeding verifier repair, evidence anchoring, and proof diagnostics: a tactic is not tried just because it exists; it is admitted only when the target shape and the public availability probe both allow it.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.target_shape_tactic_routing.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"JSON bundle paper_module.target_shape_tactic_routing\"] structured source record[\"Generated structured source record paper_modules/target_shape_tactic_routing.json\"] Component[\"Runtime component target_shape_tactic_routing_gate.py\"] Portfolio[\"Tactic probe portfolio available/unavailable tactic ids\"] Routes[\"Target-shape route cases pre_execution selected tactics\"] SourceFloor[\"Copied Ring2 source artifacts 4 body imports, body_in_receipt=false\"] Decisions{\"Route admissible before proof execution?\"} Result records[\"Result records result, board, validation, sign-off\"] Tests[\"Focused tests negative cases and digest checks\"] Ceiling[\"Scope limit no Lean/Lake, proof, provider, post-execution, launch\"] Bundle --> structured source record Bundle --> Component Component --> Portfolio Component --> Routes Portfolio --> Decisions Routes --> Decisions SourceFloor --> Decisions Decisions --> Result records Tests --> Result records Result records --> Ceiling",
       "source_hash": "sha256:0548790beff38ad3d3b3daac0463f333bb2a27bd8aba0a6dad71e9ceaea695c2",
       "html_url": "docs/paper-modules.html#paper-module-target-shape-tactic-routing-diagram-1",
       "html_anchor": "paper-module-target-shape-tactic-routing-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/target_shape_tactic_routing.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 5,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 5,
       "links": [
        {
         "id": "paper_module.tactic_portfolio_availability",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Tactic Portfolio Availability",
         "url": "paper-modules.html#paper-module-tactic-portfolio-availability"
        },
        {
         "id": "paper_module.formal_math_readiness_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Readiness Gate",
         "url": "paper-modules.html#paper-module-formal-math-readiness-gate"
        },
        {
         "id": "paper_module.proof_diagnostic_evidence_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Proof Diagnostic Evidence Spine",
         "url": "paper-modules.html#paper-module-proof-diagnostic-evidence-spine"
        },
        {
         "id": "paper_module.formal_math_verifier_trace_repair_loop",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Verifier Trace Repair Loop",
         "url": "paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop"
        },
        {
         "id": "paper_module.formal_evidence_cell_anchor_resolver",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Evidence Cell Anchor Resolver",
         "url": "paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "target_shape_tactic_routing_gate",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Target Shape Tactic Routing Gate",
         "url": "components.html#component-target_shape_tactic_routing_gate"
        },
        {
         "id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public tactic routing boundary",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/target_shape_tactic_routing.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14484
    },
    {
     "id": "paper_module.ring2_premise_precision_recall",
     "title": "Ring-2 Premise Precision Recall",
     "relative_href": "docs/paper-modules.html#paper-module-ring2-premise-precision-recall",
     "read_href": "docs/paper-modules.html#paper-module-ring2-premise-precision-recall",
     "context_href": "docs/rules-and-ideas.html#paper-module-ring2-premise-precision-recall",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "After-the-fact premise retrieval metrics separate retrieval misses from proof failures without becoming theorem authority.",
     "summary": "Ring-2 Premise Precision Recall validates copied Ring2 retrieval rankings against after-the-fact metric labels. It computes precision/recall classes, rejects oracle-label leakage and tuning shortcuts, and keeps proof bodies, model-output data, benchmark claims, and theorem-correctness claims outside the public result record boundary.",
     "authority_ceiling": "Copied Ring2 retrieval records and public fixture/exported-bundle result records only; no Lean/Lake execution, theorem proof, benchmark performance, external model access, provider-context label flow, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "After-the-fact premise retrieval metrics separate retrieval misses from proof failures without becoming theorem authority.",
     "teleology": {
      "section_id": "",
      "text": "After-the-fact premise retrieval metrics separate retrieval misses from proof failures without becoming theorem authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`ring2_premise_retrieval_precision_recall_harness` is the public Microcosm component for evaluating copied Ring-2 premise retrieval rankings against after-the-fact labels.\n\nThe component computes precision and recall per problem, then classifies the result as `retrieval_hit`, `partial_retrieval_miss`, `retrieval_miss`, or `proof_failure_despite_hit`. That distinction matters because a failed proof with all needed premises retrieved is a different failure than a missing premise retrieval path.\n\n###### Purpose\n\nWhen a proof search fails, it is easy to blame the prover and miss the simpler cause: the right supporting facts were never put in front of it. This component exists to keep those two cases apart. It answers one question: did the retrieval step actually surface the premises a problem needed, or did the failure happen somewhere downstream after the premises were already in hand?\n\nIt answers that by recomputing precision and recall from copied records rather than trusting a reported figure. For each problem it intersects the retrieved premise ids with the labelled needed-premise ids, then reads the proof outcome alongside that overlap. Full recall with a passing proof is a `retrieval_hit`; full recall with a non-passing proof is `proof_failure_despite_hit`, the case where retrieval did its job and the fault lies elsewhere. Partial overlap and zero overlap are graded as `partial_retrieval_miss` and `retrieval_miss`.\n\nThe unusual part is the direction the labels are allowed to flow. The needed premise ids are after-the-fact measurement labels, and the component treats them as strictly one-way: they may be used to score a finished run, but they may not be fed back into the retrieval ranking, used to tune on a test split, or carried into a provider-context recipe. Planting an oracle label inside a ranking, or tuning on test answers, is a typed refusal, not a higher score. The point is a metric that cannot quietly become the very advantage it is meant to measure, and that never inflates a retrieval result into a claim about formal-result correctness.\n\n###### Shape\n\nSource refs\n\nsource record `core/paper_module_capsules.json[42]` structured source record `paper_modules/ring2_premise_precision_recall.json` fixture input `fixtures/first_wave/.../input` runtime component `ring2_premise_retrieval_precision_recall_harness.py` exported bundle `examples/.../exported_ring2_precision_recall_bundle` Diagram source\n\n```text\nflowchart TD Bundle[\"source record core/paper_module_capsules.json[42]\"] --> JSON[\"structured source record paper_modules/ring2_premise_precision_recall.json\"] JSON --> Markdown[\"this page reader projection\"] JSON --> Mermaid[\"diagram view available_from_capsule_edges\"] JSON --> Atlas[\"map view organ_atlas.ring2_premise_retrieval_precision_recall_harness\"] Fixture[\"fixture input fixtures/first_wave/.../input\"] --> Runtime[\"runtime component ring2_premise_retrieval_precision_recall_harness.py\"] Bundle[\"exported bundle examples/.../exported_ring2_precision_recall_bundle\"] --> Runtime Runtime --> Metrics[\"precision/recall labels retrieval vs proof-failure attribution\"] Runtime --> Result records[\"validation result records first_wave + runtime_shell\"] Runtime --> Negatives[\"negative cases leakage, tuning, overclaim, missing decoy\"] Result records --> Boundary[\"proof boundary metrics and copied artifacts only\"]\n```\n\n###### Technical Mechanism\n\nThe runtime splits the proof consumer into three evidence classes before it reports any metric. `_load_payloads` reads the declared fixture or exported bundle inputs; `_validate_run_material` checks that copied Ring-2 run material carries source refs, target refs, validation refs, digests, and the expected `copied_non_secret_macro_body_with_provenance` status; and `_validate_source_artifacts` verifies the four copied source artifacts against either the source digest or the private-path rewrite digest. The result record therefore proves the presence and provenance of the copied public artifacts before the precision/recall scores can be interpreted.\n\nThe scoring core is `_evaluate`. It indexes after-the-fact labels by `problem_id`, applies the policy `default_top_k` or per-ranking `top_k`, truncates retrieved premise ids to that cutoff, intersects retrieved ids with labelled needed-premise ids, and computes `precision_at_k = hits/top_k` and `recall_at_k = hits/needed`. Aggregate precision and recall use total hit, candidate, and needed-premise counts, then compare the computed aggregate metrics with the policy's expected values. This is why the paper module can distinguish a retrieval miss from a proof failure after full premise recall without asserting anything about the downstream proof.\n\nThe failure taxonomy is mechanical rather than rhetorical. Full recall plus a passing proof is `retrieval_hit`; full recall plus a non-passing proof is `proof_failure_despite_hit`; partial overlap is `partial_retrieval_miss`; and zero overlap is `retrieval_miss`. The policy floor also requires expected failure modes and an adversarial decoy whose needed premise is absent or missed. Those gates make the metric harness test the shape of the evaluation set, not just the happy path.\n\nThe negative cases enforce the scope limit. `EXPECTED_NEGATIVE_CASES` requires oracle labels planted in rankings, proof-body leakage, test-split tuning, metric-overclaim, and missing-decoy inputs to produce typed refusal codes. The result record-writing path then exposes import ids, target refs, digest status, aggregate counts, failure-mode counts, and secret-scan status while keeping proof bodies, model-output data, and non-public paths outside the public result record. That implements the bundle's P-1/P-2/P-6/P-8/P-9 and AX-1/AX-2/AX-5/AX-7 posture: metrics are recomputed from copied artifacts, blocked states stay blocked, and no metric label becomes Lean, provider, benchmark, or launch-scope decision.\n\n###### Reader Evidence Routing\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[42:paper_module.ring2_premise_precision_recall]` names the component subject, mechanism subject, concept ref, principle refs, axiom refs, dependencies, runtime code locus, and projection statuses. Edit the source record, not this page, if those relationships change.\n- Generated structured source record: `paper_modules/ring2_premise_precision_recall.json` is the structured source record to inspect for `source_authority: json_capsule`, the 18 generated relationship edges, zero unresolved selective relations, Mermaid `available_from_capsule_edges`, and Atlas `linked_from_capsule_edges`.\n- Runtime locus: `src/microcosm_core/organs/ring2_premise_retrieval_precision_recall_harness.py` owns `run`, `run_precision_recall_bundle`, `_build_result`, `_write_receipts`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`. It computes aggregate precision/recall, enforces copied source-artifact digests, writes result records, and carries the provider/proof/launch refusal flags.\n- Fixture and exported bundle: `fixtures/first_wave/ring2_premise_retrieval_precision_recall_harness/input/` includes the public input records plus five negative cases; `examples/ring2_premise_retrieval_precision_recall_harness/exported_ring2_precision_recall_bundle/` is the runtime-shell bundle. Both routes expose source artifacts under `source_artifacts/` while result records carry import ids, target refs, and digest status rather than private proof bodies.\n- Result record and test surfaces: `receipts/first_wave/ring2_premise_retrieval_precision_recall_harness/ring2_precision_recall_result.json`, `receipts/first_wave/ring2_premise_retrieval_precision_recall_harness/ring2_precision_recall_validation_receipt.json`, result records/sign-off/first_wave/ring2_premise_retrieval_precision_recall_harness_fixture_acceptance.json, `receipts/runtime_shell/demo_project/organs/ring2_premise_retrieval_precision_recall_harness/exported_ring2_precision_recall_bundle_validation_result.json`, and `tests/test_ring2_premise_retrieval_precision_recall_harness.py` are the reader-verifiable validation result records for the local public boundary.\n\n###### Runtime Surfaces\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.ring2_premise_retrieval_precision_recall_harness run --input fixtures/first_wave/ring2_premise_retrieval_precision_recall_harness/input --out receipts/first_wave/ring2_premise_retrieval_precision_recall_harness\nPYTHONPATH=src python3 -m microcosm_core.cli ring2-premise-retrieval-precision-recall-harness run-precision-recall-bundle --input examples/ring2_premise_retrieval_precision_recall_harness/exported_ring2_precision_recall_bundle --out receipts/runtime_shell/demo_project/organs/ring2_premise_retrieval_precision_recall_harness\n```\n\n###### Body-Floor Import\n\nThe fixture and exported bundle both carry exact copied source artifacts under `source_artifacts/` for the Ring2 aggregate report, graph-variant run summary, graph comparison, and problem-source manifest. The validator treats those four digest-matched files as `source_open_body_imports` with `body_in_receipt=false`: workingness can count the real source result record bodies, while result records expose only import ids, target refs, and digest status.\n\n###### Negative Cases\n- `oracle_labels_in_ranking` rejects oracle-needed premise ids inside rankings.\n- `proof_body_leakage` rejects proof, provider, or private body fields.\n- `test_split_tuning_attempt` rejects retrieval tuned on test labels.\n- `metric_overclaim` rejects proof, benchmark, provider, launch, or publishing-scope decision claims.\n- `missing_adversarial_decoy` rejects a metric harness without a decoy miss case.\n\n###### Prior Art Grounding\n\nThis component is grounded in information-retrieval evaluation. NIST's [TREC evaluation measures](https://trec.nist.gov/pubs/trec20/appendices/measures.pdf) provide the older precision/recall frame for judging retrieval systems, and scikit-learn's [precision/recall metric API](https://scikit-learn.org/stable/modules/generated/sklearn.metrics.precision_recall_fscore_support.html) shows the common machine-learning interface for reporting those labels.\n\nThe theorem-proving side is adjacent to premise-selection and hammer workflows, such as Isabelle [Sledgehammer](https://isabelle.in.tum.de/doc/sledgehammer.pdf), where finding the right facts is a distinct step from replaying a proof. Microcosm keeps that distinction explicit: precision/recall can say whether needed support was ranked, but it cannot become Lean correctness, benchmark performance, or provider-output authority.\n\n###### Why It Matters\n\nPremise retrieval should be measurable without becoming theorem authority. This component gives Microcosm a compact public harness for asking whether a retrieval path missed the needed support, hit the support but failed later, or hid a dangerous truth-side shortcut inside the public runtime.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThe expected projection row is `paper_module.ring2_premise_precision_recall` with 18 generated relationship edges, zero unresolved selective relations, Mermaid status `available_from_capsule_edges`, and Atlas status `linked_from_capsule_edges`. These checks validate copied retrieval records, metric labels, and bundle result records only; they do not become Lean/Lake, benchmark, provider, or theorem authority.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component does not run Lean or Lake, use external model services, emit proof bodies, tune retrieval on test answers, claim benchmark performance, prove formal-result correctness, or include launch operations. Its labels are metric labels only; they are not allowed to flow into provider context recipes.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that copied public premise-retrieval records can be scored for precision/recall labels, adversarial decoys, body-floor imports, and metric overclaim refusals. It does not establish Lean correctness, benchmark performance, provider output quality, theorem truth, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\n###### Limitations\n\nThe harness is a local evidence-accounting check over copied artifacts. It does not execute Lean, Lake, Sledgehammer, or any external prover; it does not inspect proof bodies; and it does not decide whether a theorem is true. A `retrieval_hit` label means the needed-premise ids appeared in the ranking under this fixture policy, not that the downstream proof search is sound or complete.\n\nThe reported precision and recall are bounded by the declared Ring-2 fixture and exported bundle. Different corpora, retrieval cutoffs, premise labels, decoy construction, or source-artifact digests require rerunning the component and cannot be inferred from this page. The negative cases prove specific forbidden flows are rejected here; they do not exhaust all possible leakage, tuning, non-public-state, provider-output, or benchmark-gaming failures.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nRing-2 precision/recall sits between premise retrieval and proof diagnosis. The bundle explains the runtime component and the `mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution` mechanism, which is grounded in the same component source and in `concept.formal_math_and_proof_witness_bundle`. That relation is deliberately proof-adjacent rather than proof-authoritative: it can show whether copied retrieval rankings hit the labelled needed premises, but it cannot promote a hit into a Lean proof, a benchmark claim, or a provider-context label.\n\nThe governing principles make the scoring path stricter than a label echo. P-1 requires recomputing precision and recall from copied rankings and labels; P-2 keeps the scope limit at metric-checker strength; P-3 concentrates authority in the small harness and focused tests; P-6 keeps missing source artifacts, negative cases, or digests blocked; P-8 turns leakage, tuning, and overclaim cases into typed refusals; and P-9 preserves provenance as records cross from source run artifacts into public fixture and bundle result records. The axiom layer matches that mechanism: AX-1 and AX-2 require derived checker evidence, AX-5 and AX-7 force blocked or refused states instead of inflated metrics, AX-6 keeps the labelled premise domain explicit, and AX-8 prevents metric labels from flowing into forbidden sinks.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 14564,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "When a proof search fails, it is easy to blame the prover and miss the simpler cause: the right supporting facts were never put in front of it. This component exists to keep those two cases apart. It answers one question: did the retrieval step actually surface the premises a problem needed, or did the failure happen somewhere downstream after the premises were already in hand? It answers that by recomputing precision and recall from copied records rather than trusting a reported figure. For each problem it intersects the retrieved premise ids with the labelled needed-premise ids, then reads the proof outcome alongside that overlap. Full recall with a passing proof is a retrieval_hit; full\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime splits the proof consumer into three evidence classes before it reports any metric. loadpayloads reads the declared fixture or exported bundle inputs; validaterun_material checks that copied Ring-2 run material carries source refs, target refs, validation refs, digests, and the expected copiednonsecretmacrobodywithprovenance status; and validatesource_artifacts verifies the four copied source artifacts against either the source digest or the private-path rewrite digest. The result record therefore proves the presence and provenance of the copied public artifacts before the precision/recall scores can be interpreted. The scoring core is _evaluate. It indexes after-the-fact labels\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component does not run Lean or Lake, use external model services, emit proof bodies, tune retrieval on test answers, claim benchmark performance, prove formal-result correctness, or include launch operations. Its labels are metric labels only; they are not allowed to flow into provider context recipes.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that copied public premise-retrieval records can be scored for precision/recall labels, adversarial decoys, body-floor imports, and metric overclaim refusals. It does not establish Lean correctness, benchmark performance, provider output quality, theorem truth, launch-scope decision, public sharing decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "Ring-2 precision/recall sits between premise retrieval and proof diagnosis. The bundle explains the runtime component and the mechanism.ring2premiseretrievalprecisionrecallharness.validatespublicpremiseretrieval_attribution mechanism, which is grounded in the same component source and in concept.formalmathandproofwitness_bundle. That relation is deliberately proof-adjacent rather than proof-authoritative: it can show whether copied retrieval rankings hit the labelled needed premises, but it cannot promote a hit into a Lean proof, a benchmark claim, or a provider-context label. The governing principles make the scoring path stricter than a label echo. P-1 requires recomputing precision and r\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle authority: core/papermodulecapsules.json::papermodules[42:papermodule.ring2premiseprecision_recall] names the component subject, mechanism subject, concept ref, principle refs, axiom refs, dependencies, runtime code locus, and projection statuses. Edit the source record, not this page, if those relationships change. Generated structured source record: papermodules/ring2premiseprecisionrecall.json is the structured source record to inspect for sourceauthority: jsoncapsule, the 18 generated relationship edges, zero unresolved selective relations, Mermaid availablefromcapsuleedges, and Atlas linkedfromcapsuleedges. Runtime locus: src/microcosmcore/components/ring2premiseretrievalprecisi\u2026",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "runtime-surfaces",
       "title": "Runtime Surfaces",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate/, reproduce this page's proof boundary with temporary result records: The expected projection row is papermodule.ring2premiseprecisionrecall with 18 generated relationship edges, zero unresolved selective relations, Mermaid status availablefromcapsule_edges, and Atlas status linkedfromcapsule_edges. These checks validate copied retrieval records, metric labels, and bundle result records only; they do not become Lean/Lake, benchmark, provider, or theorem authority.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "body-floor-import",
       "title": "Body-Floor Import",
       "level": 2,
       "excerpt": "The fixture and exported bundle both carry exact copied source artifacts under source_artifacts/ for the Ring2 aggregate report, graph-variant run summary, graph comparison, and problem-source manifest. The validator treats those four digest-matched files as sourceopenbody_imports with bodyinreceipt=false: workingness can count the real source result record bodies, while result records expose only import ids, target refs, and digest status.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "oraclelabelsin_ranking rejects oracle-needed premise ids inside rankings. proofbodyleakage rejects proof, provider, or private body fields. testsplittuning_attempt rejects retrieval tuned on test labels. metric_overclaim rejects proof, benchmark, provider, launch, or public sharing decision claims. missingadversarialdecoy rejects a metric harness without a decoy miss case.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The harness is a local evidence-accounting check over copied artifacts. It does not execute Lean, Lake, Sledgehammer, or any external prover; it does not inspect proof bodies; and it does not decide whether a theorem is true. A retrieval_hit label means the needed-premise ids appeared in the ranking under this fixture policy, not that the downstream proof search is sound or complete. The reported precision and recall are bounded by the declared Ring-2 fixture and exported bundle. Different corpora, retrieval cutoffs, premise labels, decoy construction, or source-artifact digests require rerunning the component and cannot be inferred from this page. The negative cases prove specific forbidde\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in information-retrieval evaluation. NIST's TREC evaluation measures provide the older precision/recall frame for judging retrieval systems, and scikit-learn's precision/recall metric API shows the common machine-learning interface for reporting those labels. The theorem-proving side is adjacent to premise-selection and hammer workflows, such as Isabelle Sledgehammer, where finding the right facts is a distinct step from replaying a proof. Microcosm keeps that distinction explicit: precision/recall can say whether needed support was ranked, but it cannot become Lean correctness, benchmark performance, or provider-output authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "why-it-matters",
       "title": "Why It Matters",
       "level": 2,
       "excerpt": "Premise retrieval should be measurable without becoming theorem authority. This component gives Microcosm a compact public harness for asking whether a retrieval path missed the needed support, hit the support but failed later, or hid a dangerous truth-side shortcut inside the public runtime.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.ring2_premise_precision_recall.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"source record core/paper_module_capsules.json[42]\"] --> JSON[\"structured source record paper_modules/ring2_premise_precision_recall.json\"] JSON --> Markdown[\"this page reader projection\"] JSON --> Mermaid[\"diagram view available_from_capsule_edges\"] JSON --> Atlas[\"map view organ_atlas.ring2_premise_retrieval_precision_recall_harness\"] Fixture[\"fixture input fixtures/first_wave/.../input\"] --> Runtime[\"runtime component ring2_premise_retrieval_precision_recall_harness.py\"] Bundle[\"exported bundle examples/.../exported_ring2_precision_recall_bundle\"] --> Runtime Runtime --> Metrics[\"precision/recall labels retrieval vs proof-failure attribution\"] Runtime --> Result records[\"validation result records first_wave + runtime_shell\"] Runtime --> Negatives[\"negative cases leakage, tuning, overclaim, missing decoy\"] Result records --> Boundary[\"proof boundary metrics and copied artifacts only\"]",
       "source_hash": "sha256:ed0e7e2605d0669cd1de354147f3a533bf7c35b3c99c1aa7a3048416448dcaa1",
       "html_url": "docs/paper-modules.html#paper-module-ring2-premise-precision-recall-diagram-1",
       "html_anchor": "paper-module-ring2-premise-precision-recall-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/ring2_premise_precision_recall.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "TREC evaluation measures",
       "url": "https://trec.nist.gov/pubs/trec20/appendices/measures.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "precision/recall metric API",
       "url": "https://scikit-learn.org/stable/modules/generated/sklearn.metrics.precision_recall_fscore_support.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Sledgehammer",
       "url": "https://isabelle.in.tum.de/doc/sledgehammer.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.formal_math_premise_retrieval",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Premise Retrieval",
         "url": "paper-modules.html#paper-module-formal-math-premise-retrieval"
        },
        {
         "id": "paper_module.proof_diagnostic_evidence_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Proof Diagnostic Evidence Spine",
         "url": "paper-modules.html#paper-module-proof-diagnostic-evidence-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "ring2_premise_retrieval_precision_recall_harness",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Ring2 Premise Retrieval Precision Recall Harness",
         "url": "components.html#component-ring2_premise_retrieval_precision_recall_harness"
        },
        {
         "id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public premise retrieval attribution",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/ring2_premise_precision_recall.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 15458
    },
    {
     "id": "paper_module.mathematical_strategy_atlas",
     "title": "Mathematical Strategy Atlas",
     "relative_href": "docs/paper-modules.html#paper-module-mathematical-strategy-atlas",
     "read_href": "docs/paper-modules.html#paper-module-mathematical-strategy-atlas",
     "context_href": "docs/rules-and-ideas.html#paper-module-mathematical-strategy-atlas",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Pre-oracle strategy hypotheses make the first proof-search move inspectable without claiming proof or provider authority.",
     "summary": "Mathematical Strategy Atlas scores public problem features into explicit pre-oracle strategy hypotheses before retrieval or proof execution. It validates strategy ids, copied public source tool bodies, retrieval-term effects, oracle-label exclusion, negative cases, and metadata-only result records while keeping proof and provider authority out of scope.",
     "authority_ceiling": "Copied public strategy metadata, public source tool bodies, and public fixture/exported-bundle result records only; no Lean/Lake execution, formal-result correctness, oracle-label visibility, external model access, benchmark performance, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Pre-oracle strategy hypotheses make the first proof-search move inspectable without claiming proof or provider authority.",
     "teleology": {
      "section_id": "",
      "text": "Pre-oracle strategy hypotheses make the first proof-search move inspectable without claiming proof or provider authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`mathematical_strategy_atlas_hypothesis_scorer` is the public pre-oracle strategy layer for Microcosm formal-math work. It turns problem feature tags into an explicit strategy hypothesis before premise retrieval or proof execution, then records the result as redacted result records.\n\nThe point is not to prove anything. The point is to make the first mathematical move inspectable: an `iff_goal` shape selects `iff_split`, a recursive list shape selects `recursive_data_induction`, arithmetic normalization selects the arithmetic lens, and unmapped shapes become a typed `STRATEGY_SELECTION_MISS` instead of a hidden failure mode.\n\nThe current body-floor import carries eight copied source bodies: the prover graph benchmark harness, the provider result record reducer, their strategy-boundary regression tests, the compute-provider strategy classification standard, and three public runtime artifacts from `PROVER_PROVIDER_CONTEXT_SWEEP_20260510_v0` (`strategy_cards.json`, `strategy_hypothesis_set.json`, and `prover_skill_atlas.json`). They live in `source_artifacts/` under both the first-wave fixture input and the exported bundle; result records carry refs, counts, hashes, anchors, and verdicts instead of body text.\n\n###### Purpose\n\nA proof search has to start somewhere. Before any premise is retrieved or any tactic is run, an agent has already committed to a first move: a goal shape, a lens, a family of tactics it expects to use. That choice is usually implicit, buried inside a model call or a prompt. This component exists to pull it into the open. The single question it answers is: for a given problem shape, which strategy did the system pick first, and on what visible evidence?\n\nThe interesting part is what the answer is allowed to depend on. The scorer never sees the oracle's expected strategy, the ground-truth proof, or any provider output. It works only from public problem features and a strategy atlas of trigger features, negative triggers, and retrieval-expansion terms. The selected strategy is therefore a hypothesis, recomputed from inputs a cold reader can also read, not a result borrowed from the answer key.\n\nThat constraint is what the page guards. The common failure mode for a \"strategy classifier\" is to bake the answer in: declare the chosen strategy as a plain label, or score it on shallow feature overlap that happens to line up with the known-good label. The component rejects both. A declared selection must match the score the scorer recomputes from evidence, and a strategy chosen on overlap alone is a typed negative case rather than a pass.\n\n###### Shape\n\nThe local component standard, when changing runtime behavior or the claim envelope, is `standards/std_microcosm_mathematical_strategy_atlas_hypothesis_scorer.json`; the general paper-module contract remains `standards/std_microcosm_paper_module.json`.\n\nThe diagram below traces the scorer's runtime flow inside that projection: how public inputs become a per-candidate score, how a selection or a typed miss is chosen, and how the result is recomputed and written as metadata-only result records under the scope limit.\n\nSource refs\n\ntrigger / negative / retrieval terms `strategy_atlas.json` feature tags, oracle hidden `problem_features.json` candidate strategy ids `hypothesis_cases.json` Diagram source\n\n```text\nflowchart TD subgraph Inputs[\"Public inputs\"] atlas[\"strategy_atlas.json trigger / negative / retrieval terms\"] features[\"problem_features.json feature tags, oracle hidden\"] cases[\"hypothesis_cases.json candidate strategy ids\"] end subgraph Scoring[\"Per-candidate scoring\"] score[\"score = trigger_hits x4 - negative_hits x3 + retrieval_bonus (cap 2)\"] rank[\"rank positive scores tie-break by order, then id\"] end select{\"any positive score?\"} selected[\"selected_strategy_id + score components\"] miss[\"STRATEGY_SELECTION_MISS (unknown)\"] recheck[\"recompute vs declared selection / score / ranking\"] result records[\"metadata-only result records refs, counts, hits, verdicts\"] ceiling[\"Scope limit no Lean/Lake, oracle labels, external model access, or launch\"] atlas --> score features --> score cases --> score score --> rank rank --> select select -- yes --> selected select -- no --> miss selected --> recheck miss --> recheck recheck --> result records result records --> ceiling\n```\n\nThe generated instance currently exposes 19 concrete `relationships.edges`: two subject edges for the component and mechanism, one governing concept edge, six principle edges, six axiom edges, three sibling paper-module dependency edges, and one resolved code-locus edge into `src/microcosm_core/organs/mathematical_strategy_atlas_hypothesis_scorer.py`. `relationships.unpopulated_selective_relations` is empty, so the module-level unresolved selective-relation count available from this instance is `0`.\n\nRuntime evidence enters through the fixture input `fixtures/first_wave/mathematical_strategy_atlas_hypothesis_scorer/input`, the exported bundle `examples/mathematical_strategy_atlas_hypothesis_scorer/exported_mathematical_strategy_atlas_bundle`, and their copied `source_artifacts/` / `source_module_manifest.json` bundles. The focused test file is `tests/test_mathematical_strategy_atlas_hypothesis_scorer.py`; result records include `receipts/first_wave/mathematical_strategy_atlas_hypothesis_scorer/mathematical_strategy_atlas_result.json`, `mathematical_strategy_atlas_board.json`, `mathematical_strategy_atlas_validation_receipt.json`, result records/sign-off/first_wave/mathematical_strategy_atlas_hypothesis_scorer_fixture_acceptance.json, and runtime-shell exported-bundle validation result records.\n\nThe honest ceiling is narrow by design: this module can say that public pre-oracle strategy hypotheses, retrieval-lens metadata, copied public source tool/standard/runtime bodies, source-artifact digests, and negative cases are inspectable. It cannot say that Lean or Lake ran, that a theorem was proved, that oracle labels or model-output data are visible, that benchmark performance is certified, that public sharing is approved, that launch is approved, or that the private root has been made public-safe.\n\n###### How it works\n\nThe scorer reads three public inputs: a strategy atlas, a set of problem features, and a set of hypothesis cases. For each candidate strategy in a case it computes a single integer score from three terms. Each problem feature that matches a strategy's `trigger_features` adds four points. Each feature that matches the strategy's `negative_triggers` subtracts three. Retrieval-query terms that appear in the strategy's expansion terms add one point each, capped at two. Plain feature overlap is recorded as a diagnostic count but is deliberately kept out of the score.\n\nSelection is then a deterministic sort. Only strategies with a positive score are eligible. Among those, the scorer ranks by score (highest first), breaking ties by the strategy's declared order and then its id, and takes the top row. If no candidate scores positive, the case resolves to the typed `STRATEGY_SELECTION_MISS` rather than guessing. The output for each case carries the selected id, the score, the component breakdown, the ranked candidate scores, and the trigger, negative, and retrieval hits that produced them, so the choice can be re-derived by hand.\n\nThe weights matter because they encode the design intent. Trigger matches are worth more than retrieval matches, so a strategy is chosen mainly for the shape it claims to handle, not for how many search terms happen to coincide. Negative triggers can veto a strategy that looks superficially apt. The retrieval cap stops a strategy from winning on keyword volume alone. A fixture that tries to score on overlap without these terms is caught by the `superficial_overlap_only_scoring` negative case.\n\nThe same recomputation is what enforces honesty. When a case declares its own `selected_strategy_id`, `score`, `classifier`, `retrieval_bonus`, or `candidate_scores`, the component recomputes each from the evidence and reports a stale-declaration finding on any mismatch. Declaring the selected strategy as a bare label, with nothing for the scorer to check against, is itself rejected: a label with no derivable evidence is not strategy evidence. Alongside this, the copied source artifacts are checked for leakage policy, so the strategy cards, hypothesis set, and skill atlas stay pre-oracle, free of proof bodies, and free of oracle strategy ids.\n\n###### Reader Evidence Routing\n\nRead this module as a pre-oracle strategy-hypothesis audit, not as a proof result. The primary reader path is:\n- Start with `strategy_atlas.json`, `problem_features.json`, and `hypothesis_cases.json` to see how public feature tags select a strategy id before retrieval or proof execution.\n- Check `source_module_manifest.json` and the copied `source_artifacts/` bodies to verify that the imported source bodies are public tool/runtime bodies with exact digests, required anchors, and body-floor result records.\n- Inspect the fixture and exported-bundle result records to confirm that strategy ids, retrieval-term effects, oracle-label exclusion, source-card consistency, and negative cases are checked without exposing proof bodies or model-output data.\n- Use the structured source record only for structural lattice proof: it confirms bundle-backed subjects, code loci, doctrine refs, and dependency edges; it does not establish the scorer's correctness or any theorem.\n\n###### Public Inputs\n- `strategy_atlas.json` defines the known strategy enum, match features, and retrieval-term additions.\n- `problem_features.json` carries synthetic public problem features with oracle labels hidden.\n- `hypothesis_cases.json` validates deterministic pre-oracle strategy scoring.\n- `source_module_manifest.json` binds copied source body files to exact source refs, SHA-256 digests, byte counts, line counts, material classes, and required anchors.\n- Negative cases reject unknown strategy ids, proof bodies, oracle labels, post-oracle strategy selection, and launch/proof/provider overclaims.\n\n###### Result records\n\nThe component emits:\n- `mathematical_strategy_atlas_result.json`\n- `mathematical_strategy_atlas_board.json`\n- `mathematical_strategy_atlas_validation_receipt.json`\n- `mathematical_strategy_atlas_hypothesis_scorer_fixture_acceptance.json`\n\nRuntime-shell exported bundle validation writes `exported_mathematical_strategy_atlas_bundle_validation_result.json`.\n\n###### Prior Art Grounding\n\nThe strategy atlas is grounded in the formal-methods practice of separating problem-shape classification from proof execution. Lean's tactic model, as introduced in [Theorem Proving in Lean 4](https://lean-lang.org/theorem_proving_in_lean4/Tactics/), gives the immediate precedent: proof work is often arrange around tactics chosen for a goal shape, while the kernel checks the final proof state. The [mathlib overview](https://leanprover-community.github.io/mathlib-overview.html) also motivates explicit retrieval terms and domain tags because a large formal library is navigated by topic, structure, and reusable theorem families.\n\nThe atlas is also adjacent to hammer-style premise and method selection, such as Isabelle [Sledgehammer](https://isabelle.in.tum.de/doc/sledgehammer.pdf), where a front-end tool searches for useful facts or proof methods before replay. This module keeps the pattern pre-oracle and metadata-only: it records why a first strategy hypothesis was selected, not whether the proof can be completed.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.mathematical_strategy_atlas_hypothesis_scorer run \\\n  --input fixtures/first_wave/mathematical_strategy_atlas_hypothesis_scorer/input \\\n  --out /tmp/microcosm-mathematical-strategy-atlas-hypothesis-scorer/fixture \\\n  --card\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.mathematical_strategy_atlas_hypothesis_scorer run-strategy-bundle \\\n  --input examples/mathematical_strategy_atlas_hypothesis_scorer/exported_mathematical_strategy_atlas_bundle \\\n  --out /tmp/microcosm-mathematical-strategy-atlas-hypothesis-scorer/bundle \\\n  --card\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_mathematical_strategy_atlas_hypothesis_scorer.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nA green result record proves only pre-oracle strategy-hypothesis metadata, copied public source tool bodies, source artifact digests, and negative-case enforcement; it does not run Lean or Lake, prove formal-result correctness, reveal oracle labels, export proof bodies, use external model services, certify benchmark performance, authorize public sharing, or include launch operations.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe atlas is metadata and strategy-hypothesis machinery only. It does not run Lean or Lake, claim formal-result correctness, reveal oracle strategy labels, expose proof bodies, use external model services, tune on test answers, include launch operations, or make Mathlib-dependent proof claims. The copied runtime artifacts are public strategy traces, not oracle labels, model-output data, or proof bodies.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that public strategy-hypothesis metadata, copied source tool bodies, source artifact digests, and negative cases can be checked before oracle labels or proof execution. It does not run Lean or Lake, prove formal-result correctness, reveal oracle labels, expose proof bodies, use external model services, certify benchmark performance, authorize public sharing, include launch operations, or make Mathlib-dependent proof claims.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13744,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A proof search has to start somewhere. Before any premise is retrieved or any tactic is run, an agent has already committed to a first move: a goal shape, a lens, a family of tactics it expects to use. That choice is usually implicit, buried inside a model call or a prompt. This component exists to pull it into the open. The single question it answers is: for a given problem shape, which strategy did the system pick first, and on what visible evidence? The interesting part is what the answer is allowed to depend on. The scorer never sees the oracle's expected strategy, the ground-truth proof, or any provider output. It works only from public problem features and a strategy atlas of trigger\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The local component standard, when changing runtime behavior or the claim envelope, is standards/stdmicrocosmmathematicalstrategyatlashypothesisscorer.json; the general paper-module contract remains standards/stdmicrocosmpaper_module.json. The diagram below traces the scorer's runtime flow inside that projection: how public inputs become a per-candidate score, how a selection or a typed miss is chosen, and how the result is recomputed and written as metadata-only result records under the scope limit. The generated instance currently exposes 19 concrete relationships.edges: two subject edges for the component and mechanism, one governing concept edge, six principle edges, six axiom edges, th\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "The scorer reads three public inputs: a strategy atlas, a set of problem features, and a set of hypothesis cases. For each candidate strategy in a case it computes a single integer score from three terms. Each problem feature that matches a strategy's trigger_features adds four points. Each feature that matches the strategy's negative_triggers subtracts three. Retrieval-query terms that appear in the strategy's expansion terms add one point each, capped at two. Plain feature overlap is recorded as a diagnostic count but is deliberately kept out of the score. Selection is then a deterministic sort. Only strategies with a positive score are eligible. Among those, the scorer ranks by score (hi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module as a pre-oracle strategy-hypothesis audit, not as a proof result. The primary reader path is: Start with strategyatlas.json, problemfeatures.json, and hypothesis_cases.json to see how public feature tags select a strategy id before retrieval or proof execution. Check sourcemodulemanifest.json and the copied source_artifacts/ bodies to verify that the imported source bodies are public tool/runtime bodies with exact digests, required anchors, and body-floor result records. Inspect the fixture and exported-bundle result records to confirm that strategy ids, retrieval-term effects, oracle-label exclusion, source-card consistency, and negative cases are checked without exposing\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-inputs",
       "title": "Public Inputs",
       "level": 2,
       "excerpt": "strategy_atlas.json defines the known strategy enum, match features, and retrieval-term additions. problem_features.json carries synthetic public problem features with oracle labels hidden. hypothesis_cases.json validates deterministic pre-oracle strategy scoring. sourcemodulemanifest.json binds copied source body files to exact source refs, SHA-256 digests, byte counts, line counts, material classes, and required anchors. Negative cases reject unknown strategy ids, proof bodies, oracle labels, post-oracle strategy selection, and launch/proof/provider overclaims.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "receipts",
       "title": "Result records",
       "level": 2,
       "excerpt": "The component emits: mathematicalstrategyatlas_result.json mathematicalstrategyatlas_board.json mathematicalstrategyatlasvalidationreceipt.json mathematicalstrategyatlashypothesisscorerfixtureacceptance.json Runtime-shell exported bundle validation writes exportedmathematicalstrategyatlasbundlevalidationresult.json.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run from microcosm-substrate: A green result record proves only pre-oracle strategy-hypothesis metadata, copied public source tool bodies, source artifact digests, and negative-case enforcement; it does not run Lean or Lake, prove formal-result correctness, reveal oracle labels, export proof bodies, use external model services, certify benchmark performance, authorize public sharing, or include launch operations.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The strategy atlas is grounded in the formal-methods practice of separating problem-shape classification from proof execution. Lean's tactic model, as introduced in Theorem Proving in Lean 4, gives the immediate precedent: proof work is often arrange around tactics chosen for a goal shape, while the kernel checks the final proof state. The mathlib overview also motivates explicit retrieval terms and domain tags because a large formal library is navigated by topic, structure, and reusable theorem families. The atlas is also adjacent to hammer-style premise and method selection, such as Isabelle Sledgehammer, where a front-end tool searches for useful facts or proof methods before replay. Thi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The atlas is metadata and strategy-hypothesis machinery only. It does not run Lean or Lake, claim formal-result correctness, reveal oracle strategy labels, expose proof bodies, use external model services, tune on test answers, include launch operations, or make Mathlib-dependent proof claims. The copied runtime artifacts are public strategy traces, not oracle labels, model-output data, or proof bodies.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that public strategy-hypothesis metadata, copied source tool bodies, source artifact digests, and negative cases can be checked before oracle labels or proof execution. It does not run Lean or Lake, prove formal-result correctness, reveal oracle labels, expose proof bodies, use external model services, certify benchmark performance, authorize public sharing, include launch operations, or make Mathlib-dependent proof claims.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.mathematical_strategy_atlas.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD subgraph Inputs[\"Public inputs\"] atlas[\"strategy_atlas.json trigger / negative / retrieval terms\"] features[\"problem_features.json feature tags, oracle hidden\"] cases[\"hypothesis_cases.json candidate strategy ids\"] end subgraph Scoring[\"Per-candidate scoring\"] score[\"score = trigger_hits x4 - negative_hits x3 + retrieval_bonus (cap 2)\"] rank[\"rank positive scores tie-break by order, then id\"] end select{\"any positive score?\"} selected[\"selected_strategy_id + score components\"] miss[\"STRATEGY_SELECTION_MISS (unknown)\"] recheck[\"recompute vs declared selection / score / ranking\"] result records[\"metadata-only result records refs, counts, hits, verdicts\"] ceiling[\"Scope limit no Lean/Lake, oracle labels, external model access, or launch\"] atlas --> score features --> score cases --> score score --> rank rank --> select select -- yes --> selected select -- no --> miss selected --> recheck miss --> recheck recheck --> result records result records --> ceiling",
       "source_hash": "sha256:e0300a89414989ef36a1074cd1e834317fa1cb44473c9fe6c83e1d497940386d",
       "html_url": "docs/paper-modules.html#paper-module-mathematical-strategy-atlas-diagram-1",
       "html_anchor": "paper-module-mathematical-strategy-atlas-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mathematical_strategy_atlas.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Theorem Proving in Lean 4",
       "url": "https://lean-lang.org/theorem_proving_in_lean4/Tactics/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "mathlib overview",
       "url": "https://leanprover-community.github.io/mathlib-overview.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Sledgehammer",
       "url": "https://isabelle.in.tum.de/doc/sledgehammer.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.lean_std_premise_index",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Lean/Std Premise Index",
         "url": "paper-modules.html#paper-module-lean-std-premise-index"
        },
        {
         "id": "paper_module.formal_math_premise_retrieval",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Premise Retrieval",
         "url": "paper-modules.html#paper-module-formal-math-premise-retrieval"
        },
        {
         "id": "paper_module.ring2_premise_precision_recall",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Ring-2 Premise Precision Recall",
         "url": "paper-modules.html#paper-module-ring2-premise-precision-recall"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "mathematical_strategy_atlas_hypothesis_scorer",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Mathematical Strategy Atlas Hypothesis Scorer",
         "url": "components.html#component-mathematical_strategy_atlas_hypothesis_scorer"
        },
        {
         "id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public strategy hypothesis projection",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mathematical_strategy_atlas.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14689
    },
    {
     "id": "paper_module.verifier_lab_execution_spine",
     "title": "Verifier Lab Execution Spine",
     "relative_href": "docs/paper-modules.html#paper-module-verifier-lab-execution-spine",
     "read_href": "docs/paper-modules.html#paper-module-verifier-lab-execution-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-verifier-lab-execution-spine",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Bounded public verifier execution result records witness command execution without upgrading output into theorem authority.",
     "summary": "Verifier Lab Execution Spine records bounded public Lean transition execution evidence: command intent, tool facts, return codes, result record refs, omitted dangerous payload fields, negative cases, and source-open body imports. It separates real execution evidence from formal-result correctness, provider text, oracle answers, proof-body exposure, source-file changes, and launch-scope decision.",
     "authority_ceiling": "Bounded public fixture and exported-bundle execution result records only; no general formal-result correctness, benchmark solve-rate claim, external model access, oracle-to-proof authority, proof body export, source-file changes, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Bounded public verifier execution result records witness command execution without upgrading output into theorem authority.",
     "teleology": {
      "section_id": "",
      "text": "Bounded public verifier execution result records witness command execution without upgrading output into theorem authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`verifier_lab_execution_spine` is the public execution witness for the verifier lab lane. It is narrower than `verifier_lab_kernel`: it actually runs bounded Lean transition candidates in a throwaway Lake project, records the return code of each run, and keeps every line of generated proof text and tool output out of the result record. A reader can then separate real execution evidence from overstated proof claims.\n\nThe component consumes a public execution packet with:\n- transition candidates, each naming a problem id, a target shape, and one action class from a fixed vocabulary (`rfl`, `decide`, `cases`, `induction`, `exact_premise`, and similar);\n- a small Lake project whose `MicrocosmProofWitness` library the component builds once and reuses;\n- CP2 translation requests that ask for the next typed action after a residual, and Evolve mutations that adjust bounded policy artifacts;\n- negative fixtures that smuggle a proof body, an oracle structured source record, a provider hypothesis, or an unbounded source-file changes into a row.\n\nThe component writes one `.lean` file per transition, runs `lake env lean` on it, and treats a zero exit code as `accepted`. It records the return code, the action class, and the failure class, but never the proof text, the stdout body, or the stderr body. The exported-bundle lane re-validates the same shape from a copied source-module manifest without re-running Lean, so a third party can inspect the bundle without a Lean toolchain installed.\n\n###### Purpose\n\nAutomated proof systems can blur how a result was obtained. A model can be handed the answer by an oracle, or prompted with the proof by a provider, and still report the result as if it had found the proof unaided. This component exists to keep that blurring out of the result record. It answers one question: did a bounded Lean candidate actually pass the verifier, with no help that the result record is hiding?\n\nThe discipline that makes this work is the separation of authority classes. Every row lands in exactly one bucket: `lean_verified` for candidates the verifier accepted, `oracle_compared` and `provider_suggested` for rows that existed only as references, `cp2_translated` for the typed next-action layer, `retrieval_miss` and `proof_synthesis_fail` for residuals, and `contract_rejected` for anything that broke the leak rules. The unusual choice is what does not happen: an oracle match never increments forward success, and provider text is never counted as a proof. The counters `oracle_forward_success_increment_count` and `provider_results_counted` are held at zero by construction.\n\nThe second idea is that real execution and clean result records are not in tension. A candidate carrying `oracle_visible: true`, or a forbidden field such as `proof_body` or `raw_tactic_script`, is rejected before Lean is ever invoked, so the run cannot be contaminated. The transition then runs for real, and the result record carries the return code and the failure class while the proof text and the stdout and stderr bodies stay out. The result record is public evidence precisely because the only things omitted are the things that would leak.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Packet[\"Execution packet transition candidates, CP2 requests, Evolve mutations, oracle/provider refs\"] Gate[\"Leak contract gate forbidden fields? oracle/provider visible? action class out of vocabulary?\"] Rejected[\"contract_rejected rejected before Lean runs\"] Build[\"Build Lake project lake build MicrocosmProofWitness (once, cached)\"] Run[\"Run candidate write .lean, lake env lean, return code = accepted?\"] Verified[\"lean_verified return code 0\"] Residual[\"retrieval_miss / proof_synthesis_fail non-zero return code\"] CP2[\"cp2_translated typed next action, no proof body\"] Evolve[\"evolve_candidate / evolve_accepted bounded policy artifacts only\"] Refs[\"oracle_compared / provider_suggested references, never counted as success\"] Counters[\"Authority counters oracle_forward_success = 0, provider_results = 0, proof_body_export = 0\"] Result records[\"metadata-only result records result, board, validation, sign-off; return codes kept, bodies omitted\"] Ceiling[\"Scope limit bounded public transition result record only\"] Packet --> Gate Gate -->|leak found| Rejected Gate -->|clean| Build Build --> Run Run -->|exit 0| Verified Run -->|non-zero| Residual Packet --> CP2 Packet --> Evolve Packet --> Refs Verified --> Counters Residual --> Counters CP2 --> Counters Evolve --> Counters Refs --> Counters Rejected --> Result records Counters --> Result records Result records --> Ceiling\n```\n\nEvidence/accounting used for this shape:\n- `core/paper_module_capsules.json::paper_modules[44:paper_module.verifier_lab_execution_spine]` is the source bundle with `source_authority: json_capsule`, subjects for component: verifier_lab_execution_spine and `mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness`, resolved `code_loci.path: src/microcosm_core/organs/verifier_lab_execution_spine.py`, and generated projection statuses `available_from_capsule_edges` / `linked_from_capsule_edges`.\n- `paper_modules/verifier_lab_execution_spine.json::paper_module_payload.source_row` carries the generated copy of that source record; `relationships.edges` has 19 entries and `relationships.unpopulated_selective_relations` is empty. This is readback evidence only, not an editable source.\n- `core/organ_atlas.json::organs[18]` classifies the component as `evidence_class: external_subprocess_witness`, names the first command, resolves the mechanism edge, and restates that the scope limit is bounded public Lean transition rows only.\n- `src/microcosm_core/organs/verifier_lab_execution_spine.py` defines the runtime spine: `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `RECEIPT_TRANSPARENCY_CONTRACT`, ANTI_CLAIM, `validate_source_module_imports`, `_build_lake_project`, `_build_result`, `write_receipts`, `run`, and `run_execution_bundle`.\n- `core/fixture_manifests/verifier_lab_execution_spine.fixture_manifest.json` names the fixture inputs, four expected negative cases, stable error codes, generated result record paths, result record field floor, and `body_copied_material_count: 5` for the exported body-floor lane.\n- `examples/verifier_lab_execution_spine/exported_verifier_lab_execution_spine_bundle/source_module_manifest.json` records `module_count: 5`, `body_in_receipt: false`, exact-copy digest matches, validation refs, and blocked private/external model service payload bodies.\n- result records/sign-off/first_wave/verifier_lab_execution_spine_fixture_acceptance.json records `status: pass`, `accepted_scope: bounded_public_lean_transition_execution_only`, `accepted_transition_count: 4`, `residual_transition_count: 2`, zero provider/oracle/proof-body/source-file changes counters, the four observed negative cases, and `release_authorized: false`.\n- `tests/test_verifier_lab_execution_spine.py` checks fixture execution, exported-bundle structure, source-module digest blocking, metadata-only result record transparency, and exact public body-floor manifest behavior.\n\n###### Reader Evidence Routing\n\nA cold-reader audit starts with the module definition and structured source record proof, then moves to the fixture and exported bundle.\n\nEvidence should be read in this order:\n- Bundle proof: `core/paper_module_capsules.json::paper_module.verifier_lab_execution_spine` and `paper_modules/verifier_lab_execution_spine.json`.\n- Execution proof: declared command intent, fixture input ref, tool version facts, stdout/stderr classification, validator result record refs, and sign-off result record refs.\n- Bundle proof: exported execution-bundle run and the same command/tool/result record membrane in disposable outputs.\n- Negative boundary proof: missing command intent, missing tool facts, missing result record refs, stale execution facts, proof-authority overclaiming, proof-body export, model-output data export, benchmark solve-rate certification, hosted deployment, and launch-scope decision.\n\n###### Prior Art Grounding\n\nThis component is grounded in reproducible execution and proof-assistant witness patterns. Lean/Lake execution inherits from the small-kernel proof-assistant tradition represented by the [Lean theorem prover](https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/) and by LCF/HOL systems such as [HOL Light](https://www.cl.cam.ac.uk/~jrh13/papers/hollight.html). Artifact evaluation practice also motivates recording command identity, tool facts, stdout/stderr classification, and result record refs separately from the claim they support.\n\nMicrocosm borrows the execution-spine discipline: a command can witness that a bounded tool run happened, but tool output must not become theorem-certification or benchmark authority. It does not expose proof bodies or certify solve rates.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\nA green result record proves only bounded execution-spine evidence: command intent, tool facts, stdout/stderr classification, result record refs, and explicit missing-fact failures. It does not establish general proof certification, proof-body safety beyond the fixture membrane, benchmark solve rate, hosted deployment, or launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module can claim the following for the verifier lab execution spine: the component subject resolves, the runtime source locus is named, a diagram view is generated for this module, and an atlas card is generated for this module. It cannot claim general proof certification, Mathlib-dependent proof authority, proof-body safety beyond the fixture membrane, benchmark solve-rate certification, provider authority, source-file changes, hosted deployment, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\nFixture result records, exported execution-bundle result records, focused tests, command intent, tool-version facts, stdout/stderr classification, result record refs, and missing-fact failures can support only bounded execution-spine evidence. The diagram and atlas views are navigation aids derived from the module definition; they do not promote a tool run into proof certification, benchmark authority, or launch-scope decision.\n\n###### Scope limit\n\nThis paper module describes public execution-spine result records only. It does not establish general proof certification, authorize Mathlib-dependent proof authority, expose private proof bodies, certify benchmark solve rates, use external model services, change source files, include launch operations, or authorize hosted deployment.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 10689,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Automated proof systems can blur how a result was obtained. A model can be handed the answer by an oracle, or prompted with the proof by a provider, and still report the result as if it had found the proof unaided. This component exists to keep that blurring out of the result record. It answers one question: did a bounded Lean candidate actually pass the verifier, with no help that the result record is hiding? The discipline that makes this work is the separation of authority classes. Every row lands in exactly one bucket: lean_verified for candidates the verifier accepted, oraclecompared and providersuggested for rows that existed only as references, cp2_translated for the typed next-actio\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Evidence/accounting used for this shape: core/papermodulecapsules.json::papermodules[44:papermodule.verifierlabexecutionspine] is the source bundle with sourceauthority: jsoncapsule, subjects for component: verifierlabexecutionspine and mechanism.verifierlabexecutionspine.validatespublicverifiertransitionwitness, resolved codeloci.path: src/microcosmcore/components/verifierlabexecutionspine.py, and generated projection statuses availablefromcapsuleedges / linkedfromcapsuleedges. papermodules/verifierlabexecutionspine.json::papermodulepayload.sourcerow carries the generated copy of that source record; relationships.edges has 19 entries and relationships.unpopulatedselective_relations is empt\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim the following for the verifier lab execution spine: the component subject resolves, the runtime source locus is named, a diagram view is generated for this module, and an atlas card is generated for this module. It cannot claim general proof certification, Mathlib-dependent proof authority, proof-body safety beyond the fixture membrane, benchmark solve-rate certification, provider authority, source-file changes, hosted deployment, launch approval, public sharing decision, or whole-system correctness. Fixture result records, exported execution-bundle result records, focused tests, command intent, tool-version facts, stdout/stderr classification, result record refs\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "A cold-reader audit starts with the module definition and structured source record proof, then moves to the fixture and exported bundle. Evidence should be read in this order: Bundle proof: core/papermodulecapsules.json::papermodule.verifierlabexecutionspine and papermodules/verifierlabexecutionspine.json. Execution proof: declared command intent, fixture input ref, tool version facts, stdout/stderr classification, validator result record refs, and sign-off result record refs. Bundle proof: exported execution-bundle run and the same command/tool/result record membrane in disposable outputs. Negative boundary proof: missing command intent, missing tool facts, missing result record refs, stal\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run from microcosm-substrate: A green result record proves only bounded execution-spine evidence: command intent, tool facts, stdout/stderr classification, result record refs, and explicit missing-fact failures. It does not establish general proof certification, proof-body safety beyond the fixture membrane, benchmark solve rate, hosted deployment, or launch.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in reproducible execution and proof-assistant witness patterns. Lean/Lake execution inherits from the small-kernel proof-assistant tradition represented by the Lean theorem prover and by LCF/HOL systems such as HOL Light. Artifact evaluation practice also motivates recording command identity, tool facts, stdout/stderr classification, and result record refs separately from the claim they support. Microcosm borrows the execution-spine discipline: a command can witness that a bounded tool run happened, but tool output must not become theorem-certification or benchmark authority. It does not expose proof bodies or certify solve rates.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module describes public execution-spine result records only. It does not establish general proof certification, authorize Mathlib-dependent proof authority, expose private proof bodies, certify benchmark solve rates, use external model services, change source files, include launch operations, or authorize hosted deployment.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.verifier_lab_execution_spine.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Packet[\"Execution packet transition candidates, CP2 requests, Evolve mutations, oracle/provider refs\"] Gate[\"Leak contract gate forbidden fields? oracle/provider visible? action class out of vocabulary?\"] Rejected[\"contract_rejected rejected before Lean runs\"] Build[\"Build Lake project lake build MicrocosmProofWitness (once, cached)\"] Run[\"Run candidate write .lean, lake env lean, return code = accepted?\"] Verified[\"lean_verified return code 0\"] Residual[\"retrieval_miss / proof_synthesis_fail non-zero return code\"] CP2[\"cp2_translated typed next action, no proof body\"] Evolve[\"evolve_candidate / evolve_accepted bounded policy artifacts only\"] Refs[\"oracle_compared / provider_suggested references, never counted as success\"] Counters[\"Authority counters oracle_forward_success = 0, provider_results = 0, proof_body_export = 0\"] Result records[\"metadata-only result records result, board, validation, sign-off; return codes kept, bodies omitted\"] Ceiling[\"Scope limit bounded public transition result record only\"] Packet --> Gate Gate -->|leak found| Rejected Gate -->|clean| Build Build --> Run Run -->|exit 0| Verified Run -->|non-zero| Residual Packet --> CP2 Packet --> Evolve Packet --> Refs Verified --> Counters Residual --> Counters CP2 --> Counters Evolve --> Counters Refs --> Counters Rejected --> Result records Counters --> Result records Result records --> Ceiling",
       "source_hash": "sha256:55451913d4d912b932bdbf7f46d1704e7883c7b5b59a2ad3dc78bda28806507e",
       "html_url": "docs/paper-modules.html#paper-module-verifier-lab-execution-spine-diagram-1",
       "html_anchor": "paper-module-verifier-lab-execution-spine-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_execution_spine.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Lean theorem prover",
       "url": "https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "HOL Light",
       "url": "https://www.cl.cam.ac.uk/~jrh13/papers/hollight.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 5,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.verifier_lab_kernel",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Verifier Lab Kernel",
         "url": "paper-modules.html#paper-module-verifier-lab-kernel"
        },
        {
         "id": "paper_module.formal_math_lean_proof_witness",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Lean Proof Witness",
         "url": "paper-modules.html#paper-module-formal-math-lean-proof-witness"
        },
        {
         "id": "paper_module.formal_math_verifier_trace_repair_loop",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Verifier Trace Repair Loop",
         "url": "paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "verifier_lab_execution_spine",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Verifier Lab Execution Spine",
         "url": "components.html#component-verifier_lab_execution_spine"
        },
        {
         "id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public verifier transition witness",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_execution_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11674
    },
    {
     "id": "paper_module.bounded_autonomy_campaign_packet",
     "title": "Bounded Autonomy Campaign Packet",
     "relative_href": "docs/paper-modules.html#paper-module-bounded-autonomy-campaign-packet",
     "read_href": "docs/paper-modules.html#paper-module-bounded-autonomy-campaign-packet",
     "context_href": "docs/rules-and-ideas.html#paper-module-bounded-autonomy-campaign-packet",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Bounded autonomy campaign packets propose guarded agent work without authorizing source-file changes or unsupervised repair.",
     "summary": "Bounded Autonomy Campaign Packet validates public campaign packet fixtures: proposed gaps, policy gates, repeated-failure digests, negative cases, source-open body imports, and scope limits. It keeps campaign proposals separate from self-repair, source writes, live scheduling, external model access, launch-scope decision, public sharing, and whole-system correctness.",
     "authority_ceiling": "Self-proposal campaign packet fixture and exported-bundle result record evidence only; no self-repair authority, unsupervised source-file changes, live scheduler authority, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Bounded autonomy campaign packets propose guarded agent work without authorizing source-file changes or unsupervised repair.",
     "teleology": {
      "section_id": "",
      "text": "Bounded autonomy campaign packets propose guarded agent work without authorizing source-file changes or unsupervised repair.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`bounded_autonomy_campaign_packet` is a Crown Jewel import component with real runnable system and a strict public scope limit. It consumes synthetic public fixtures, copied source source bodies, and source manifests that verify sha256 digests, line counts, required anchors, secret-exclusion status, and result record body omission.\n\nWhat it proves: self-proposal campaign packet only; no self-repair or unsupervised source-file changes.\n\n###### Purpose\n\nAn agent can usefully notice its own coverage gaps and draft a plan to close them. The danger is that \"draft a plan\" quietly becomes \"do the work\": a proposal grows a write surface, and a system that was meant to suggest starts mutating its own source unsupervised. This component exists to keep those two steps apart. It answers one question: can an agent emit a draft campaign proposal from real coverage gaps without that proposal carrying any authority to act on them?\n\nThe design choice that makes this interesting is where the candidate count comes from. The component does not invent a plausible-looking list of work. It runs a real source campaign builder in read-only mode (`build_standard_skill_pairing_campaign.py --check --report`) and accepts its witness only when the builder reports candidate targets and leaves `wrote_packet` unset. The proposal is therefore derived from a surface that could do real work, observed in a mode where it did not. Each drafted candidate is then stamped `write_surface: none`, `source_mutation_authorized: false`, and `requires_human_review: true`, so the act of proposing can never be mistaken for the act of authorising.\n\nTwo refusals guard the boundary. A campaign policy that lists `write_source` among its allowed actions is rejected outright, before any candidate is drafted. And a campaign digest that already appears in the failed-campaign ledger more than once is refused, so a plan that has already failed cannot be quietly re-proposed under a fresh wrapper. Both refusals are checked by mutating the fixture and confirming the expected error code fires, not by trusting a declared label.\n\n###### Shape\n\nSource refs\n\nRead-only builder witness check --report `build_standard_skill_pairing_campaign.py` Diagram source\n\n```text\nflowchart TD Inputs[\"Public synthetic inputs coverage_gaps, campaign_policy, failed_campaign_digests\"] PolicyGate{\"campaign_policy allows write_source?\"} Witness[\"Read-only builder witness build_standard_skill_pairing_campaign.py --check --report\"] WitnessGate{\"reports candidate targets and wrote_packet unset?\"} Draft[\"Draft candidate packet write_surface: none, requires_human_review, source_mutation: false\"] DigestGate{\"failed digest repeated?\"} Refuse[\"Refuse SOURCE_WRITE_FORBIDDEN / REPEATED_FAILED_DIGEST / witness blocked\"] Result records[\"metadata-only result records refs, digests, stdout/stderr hashes; builder output bodies excluded\"] Ceiling[\"Scope limit no self-repair, source-file changes, providers, launch, or public sharing\"] Inputs --> PolicyGate PolicyGate -- \"yes\" --> Refuse PolicyGate -- \"no\" --> Witness Witness --> WitnessGate WitnessGate -- \"no\" --> Refuse WitnessGate -- \"yes\" --> Draft Draft --> DigestGate DigestGate -- \"yes\" --> Refuse DigestGate -- \"no\" --> Result records Refuse --> Result records Result records --> Ceiling\n```\n\nThis diagram is a reader aid. The machine graph remains the generated `paper_module.bounded_autonomy_campaign_packet.mermaid` projection derived from the JSON source record.\n\n###### Technical Mechanism\n\nThe runtime is intentionally narrower than \"autonomous repair.\" `SPEC` declares the four required public inputs, the source-module manifest, the expected negative cases, and an `AUTHORITY_CEILING` in which self-repair, unsupervised source-file changes, source-write packets, external model access, and launch are all false. `run()` and `run_bounded_autonomy_bundle()` then route both the fixture and exported bundle through `run_crown_jewel_organ`, so the same evaluator, source-manifest checks, metadata-only result record policy, and semantic negative-case evaluator guard both command surfaces.\n\nThe positive lane is witnessed by `_campaign_builder_witness()`, not by a fictional campaign row. It invokes `tools/meta/factory/build_standard_skill_pairing_campaign.py --check --report --max-targets <n>` from the source root, then accepts the witness only when the builder returns `standard_skill_pairing_campaign_summary`, reports at least one candidate target, emits a `source_digest`, and leaves `wrote_packet` unset. This makes the campaign packet a read-only proposal derived from a real builder surface; the result record stores return code, digest fields, and stdout/stderr hashes, but keeps builder output bodies out of the result record.\n\n`_candidate_packet_subprocess()` converts the witnessed target count into draft candidate rows. Each candidate is tied to one fixture coverage gap when available, carries the builder ref and builder source digest, sets `write_surface: none`, requires human review, and records `source_mutation_authorized: false`. `evaluate()` then applies the policy checks: `write_source` in `campaign_policy.allowed_actions` is a hard refusal; blocked builder witness or empty candidate packet is a hard refusal; any candidate that authorizes source-file changes or writes to the `source` surface is also refused.\n\nThe negative cases are semantic mutations of the input, not trusted labels. `evaluate_negative_case()` copies the required inputs into a temporary directory and mutates the relevant file: `source_write_campaign_packet` appends `write_source` to `campaign_policy.allowed_actions`, while `repeated_failed_campaign_digest` rewrites the failed-digest ledger to contain a duplicate digest. The component passes its own evidence floor only when these mutations produce `BOUNDED_AUTONOMY_SOURCE_WRITE_FORBIDDEN` and `BOUNDED_AUTONOMY_REPEATED_FAILED_DIGEST`; stale declared error-code labels cannot satisfy the proof consumer.\n\n###### Reader Evidence Routing\n\nThe primary evidence for this module is the fixture result record and the exported-bundle result record, which demonstrate the bounded campaign packet behavior under synthetic public inputs. Source-module manifests and digest checks are evidence for copied body provenance. This page is an explanation of those sources; the underlying JSON and test outputs are the authority.\n\n###### Prior Art Grounding\n\nThis component borrows from AI risk-management, policy gating, and controlled workflow-automation patterns. Useful anchors include:\n- NIST's [AI Risk Management Framework](https://www.nist.gov/itl/ai-risk-management-framework), which frames AI work in terms of governance, mapping, measuring, and managing risk rather than assuming autonomy is inherently authorized.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), as a policy-engine pattern for deciding whether a proposed action may proceed.\n- GitHub Actions [workflow syntax](https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax), as a widely used automation surface where jobs, permissions, and concurrency behavior are declared before execution.\n\nMicrocosm borrows the governed-campaign and preflight-gate shape, but keeps the component to draft self-proposal packets over synthetic public coverage gaps. It does not self-repair, change source files unsupervised, use external model services, or include launch operations.\n\nHow to run it:\n\n```text\nmicrocosm bounded-autonomy-campaign-packet run --input fixtures/first_wave/bounded_autonomy_campaign_packet/input --out receipts/first_wave/bounded_autonomy_campaign_packet\n```\n\nRuntime bundle route:\n\n```text\npython -m microcosm_core.organs.bounded_autonomy_campaign_packet run-bounded-autonomy-bundle --input examples/bounded_autonomy_campaign_packet/exported_bounded_autonomy_campaign_packet_bundle --out receipts/runtime_shell/demo_project/organs/bounded_autonomy_campaign_packet\n```\n\n###### Validation Result record Path\n\nIf the fixture or bundle reports source-module digest drift, route that through `microcosm_exact_copy_refresh`; this page is source-linked only for copied source bodies. If the full projection check fails because another active session holds shared lattice outputs, treat that as unrelated contention and use the corpus check as the local gate for this module.\n\nNegative cases covered by the fixture manifest: repeated_failed_campaign_digest, source_write_campaign_packet.\n\nSource provenance is anchored by `examples/bounded_autonomy_campaign_packet/exported_bounded_autonomy_campaign_packet_bundle/source_module_manifest.json` and result records carry refs, digests, counts, verdicts, and scope boundaries only.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component emits a draft self-proposal from public synthetic coverage gaps and refuses source-write or repeated-failure packets. It does not self-repair, change source files unsupervised, use external model services, include launch operations or public sharing, or widen the proof boundary beyond the copied source bodies, synthetic fixtures, source manifests, negative cases, and validation result records.\n\n###### Scope limit\n\nThis paper module demonstrates a bounded-autonomy fixture that builds a draft campaign packet and refuses unsafe packets under public synthetic inputs. A diagram view and atlas card are generated for this module.\n\nIt cannot claim autonomous repair, unsupervised source-file changes, external model access, launch-scope decision, publishing-scope decision, production campaign safety, private-system equivalence, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 9620,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "An agent can usefully notice its own coverage gaps and draft a plan to close them. The danger is that \"draft a plan\" quietly becomes \"do the work\": a proposal grows a write surface, and a system that was meant to suggest starts mutating its own source unsupervised. This component exists to keep those two steps apart. It answers one question: can an agent emit a draft campaign proposal from real coverage gaps without that proposal carrying any authority to act on them? The design choice that makes this interesting is where the candidate count comes from. The component does not invent a plausible-looking list of work. It runs a real source campaign builder in read-only mode (buildstandardskil\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This diagram is a reader aid. The machine graph remains the generated the JSON source record.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime is intentionally narrower than \"autonomous repair.\" SPEC declares the four required public inputs, the source-module manifest, the expected negative cases, and an scope_limit in which self-repair, unsupervised source-file changes, source-write packets, external model access, and launch are all false. run() and runboundedautonomy_bundle() then route both the fixture and exported bundle through runcrownjewel_organ, so the same evaluator, source-manifest checks, metadata-only result record policy, and semantic negative-case evaluator guard both command surfaces. The positive lane is witnessed by campaignbuilder_witness(), not by a fictional campaign row. It invokes `tools/meta/fact\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "The primary evidence for this module is the fixture result record and the exported-bundle result record, which demonstrate the bounded campaign packet behavior under synthetic public inputs. Source-module manifests and digest checks are evidence for copied body provenance. This page is an explanation of those sources; the underlying JSON and test outputs are the authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component emits a draft self-proposal from public synthetic coverage gaps and refuses source-write or repeated-failure packets. It does not self-repair, change source files unsupervised, use external model services, include launch operations or public sharing, or widen the proof boundary beyond the copied source bodies, synthetic fixtures, source manifests, negative cases, and validation result records.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module demonstrates a bounded-autonomy fixture that builds a draft campaign packet and refuses unsafe packets under public synthetic inputs. A diagram view and atlas card are generated for this module. It cannot claim autonomous repair, unsupervised source-file changes, external model access, launch-scope decision, public sharing decision, production campaign safety, private-system equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component borrows from AI risk-management, policy gating, and controlled workflow-automation patterns. Useful anchors include: NIST's AI Risk Management Framework, which frames AI work in terms of governance, mapping, measuring, and managing risk rather than assuming autonomy is inherently authorized. Open Policy Agent, as a policy-engine pattern for deciding whether a proposed action may proceed. GitHub Actions workflow syntax, as a widely used automation surface where jobs, permissions, and concurrency behavior are declared before execution. Microcosm borrows the governed-campaign and preflight-gate shape, but keeps the component to draft self-proposal packets over synthetic public c\u2026",
       "block_kinds": [
        "code",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "tracked result record outputs: If the fixture or bundle reports source-module digest drift, route that through microcosmexactcopy_refresh; this page is source-linked only for copied source bodies. If the full projection check fails because another active session holds shared lattice outputs, treat that as unrelated contention and use the corpus check as the local gate for this module. Negative cases covered by the fixture manifest: repeatedfailedcampaigndigest, sourcewritecampaignpacket. Source provenance is anchored by examples/boundedautonomycampaignpacket/exportedboundedautonomycampaignpacketbundle/sourcemodulemanifest.json and result records carry refs, digests, counts, verdicts, and sc\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.bounded_autonomy_campaign_packet.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Inputs[\"Public synthetic inputs coverage_gaps, campaign_policy, failed_campaign_digests\"] PolicyGate{\"campaign_policy allows write_source?\"} Witness[\"Read-only builder witness build_standard_skill_pairing_campaign.py --check --report\"] WitnessGate{\"reports candidate targets and wrote_packet unset?\"} Draft[\"Draft candidate packet write_surface: none, requires_human_review, source_mutation: false\"] DigestGate{\"failed digest repeated?\"} Refuse[\"Refuse SOURCE_WRITE_FORBIDDEN / REPEATED_FAILED_DIGEST / witness blocked\"] Result records[\"metadata-only result records refs, digests, stdout/stderr hashes; builder output bodies excluded\"] Ceiling[\"Scope limit no self-repair, source-file changes, providers, launch, or public sharing\"] Inputs --> PolicyGate PolicyGate -- \"yes\" --> Refuse PolicyGate -- \"no\" --> Witness Witness --> WitnessGate WitnessGate -- \"no\" --> Refuse WitnessGate -- \"yes\" --> Draft Draft --> DigestGate DigestGate -- \"yes\" --> Refuse DigestGate -- \"no\" --> Result records Refuse --> Result records Result records --> Ceiling",
       "source_hash": "sha256:36a8748109745a7642777567ee2061ac0a58a4227fbd3ad8377841165a322cba",
       "html_url": "docs/paper-modules.html#paper-module-bounded-autonomy-campaign-packet-diagram-1",
       "html_anchor": "paper-module-bounded-autonomy-campaign-packet-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bounded_autonomy_campaign_packet.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "AI Risk Management Framework",
       "url": "https://www.nist.gov/itl/ai-risk-management-framework",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs/latest",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "workflow syntax",
       "url": "https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-9",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Compensable transactional effects",
         "url": "doctrine.html#dcard-ax-9"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        },
        {
         "id": "paper_module.provider_context_recipe_budget",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Provider Context Recipe Budget",
         "url": "paper-modules.html#paper-module-provider-context-recipe-budget"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "bounded_autonomy_campaign_packet",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Bounded Autonomy Campaign Packet",
         "url": "components.html#component-bounded_autonomy_campaign_packet"
        },
        {
         "id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public bounded autonomy campaign packet",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bounded_autonomy_campaign_packet.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 10548
    },
    {
     "id": "paper_module.computer_use_action_trace_replay",
     "title": "Computer-Use Action Trace Replay",
     "relative_href": "docs/paper-modules.html#paper-module-computer-use-action-trace-replay",
     "read_href": "docs/paper-modules.html#paper-module-computer-use-action-trace-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-computer-use-action-trace-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Validator-backed public replay for synthetic computer-use action traces under the route-observability runtime.",
     "summary": "Computer-Use Action Trace Replay validates a synthetic computer-use episode through visible observations, affordances, action rows, authority verdicts, state-transition and recovery result records, cold replay rows, public trace spans, source-module manifests, negative cases, and metadata-only result records. It is a reader-facing contract under Agent Route Observability Runtime, not live browser or desktop control.",
     "authority_ceiling": "Synthetic public computer-use action-trace fixtures, exported bundle metadata, copied source-module digests, and metadata-only result records only; no live account action, account secret entry, external network mutation, purchase/send authority, destructive host action, hidden screen-state claim, benchmark-score claim, launch-scope decision, or whole-system correctness.",
     "abstract": "Validator-backed public replay for synthetic computer-use action traces under the route-observability runtime.",
     "teleology": {
      "section_id": "",
      "text": "Validator-backed public replay for synthetic computer-use action traces under the route-observability runtime.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`computer_use_action_trace_replay` is a validator-backed claim contract under `agent_route_observability_runtime`. It asks a narrow eval-harness question: does a claimed computer-use episode bind visible observations, affordances, actions, pre-action authority verdicts, state-transition result records, recovery result records, cold replay, falsification fixtures, non-public-state scan posture, and an explicit scope limit?\n\nRun:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.cli agent-route-observability-runtime \\\n  --input examples/agent_route_observability_runtime/exported_computer_use_action_trace_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/agent_route_observability_runtime \\\n  validate-computer-use-bundle\n```\n\nThe fixture rejects live account action, account secret entry, external network mutation, purchase/send without approval, destructive action without review, hidden screen-state claims, actions without observation and affordance refs, and benchmark-score claims.\n\n###### Purpose\n\nA computer-use agent produces a stream of screenshots, clicks, keystrokes, and \"it worked\" assertions. The hard question for anyone reviewing such a trace is not whether the agent moved the mouse, but whether the record actually supports the claim that something happened safely. A trace can look complete while hiding the two failures that matter most: an action that was blocked or sent for review but is later narrated as a success, and a success that is asserted without any state evidence to back it. This module exists to make that question decidable on a synthetic episode, offline, before any of the language reaches a reader.\n\nThe single question it answers is: does each recorded action line up, row by row, with a prior visible observation, a pre-action authority verdict, and a state-transition result record whose outcome agrees with that verdict? The mechanism is a typed join, not a screenshot replay. An action must cite the observation it reacted to and an affordance that was visible in it; a verdict must be stamped before the action and must explicitly deny live-account, account secret, network, destructive, and purchase or send authority; a transition result record must then match the verdict. If the verdict said allow, the result record has to show the action was executed and an oracle confirmed the resulting state. If the verdict said block or review, the result record has to show the action was not executed and the status reads blocked or review-required. Nondeterministic \"it probably succeeded\" claims are refused outright.\n\nWhat is genuinely unusual here is the inversion. Most action-trace tooling treats a screenshot as the proof. This module treats the screenshot as the one thing it will not trust: observations enter only as a digest and a visible-state hash, with raw pixels, hidden-state assertions, and live-browser state all required to be absent. The evidence that carries weight is the agreement between the verdict and the transition, not the image. The result record that comes out the other end records counts, refs, hashes, and the redaction posture, and never the raw bodies it checked. It describes a synthetic episode under the route-observability runtime; it does not drive a live browser or desktop.\n\n###### Shape\n\nSource refs\n\nComponent `agent_route_observability_runtime runtime` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record\"] bundle --> mermaid[\"generated Mermaid available\"] bundle --> atlas[\"generated Atlas linked\"] bundle --> component[\"agent_route_observability_runtime runtime\"] component --> bundle[\"exported computer-use bundle\"] bundle --> observations[\"visible observations: digest + visible-state hash, no raw pixels\"] observations --> actions[\"action rows: cite observation + affordance, allowed kind, redacted\"] actions --> verdicts[\"pre-action authority verdict per action\"] verdicts -->|allow| executed[\"transition: executed + oracle status pass\"] verdicts -->|block or review| held[\"transition: not executed + blocked / review-required\"] held --> recovery[\"recovery result record, no upgrade to executed\"] executed --> cold[\"cold replay reproduces action, verdict, transition\"] recovery --> cold cold --> trace[\"public trace spans: refs, counts, hashes, redaction posture\"] trace --> result record[\"metadata-only validation result record\"] result record --> ceiling[\"scope limit: no live control\"]\n```\n\nThe shape is a reader route over a synthetic computer-use action trace validator. The evidence path runs through the source record, fixture manifest, exported bundle, runtime validator, public trace builder, metadata-only result records, and explicit scope limit. A diagram view and Atlas entry are generated for this module from the source record.\n\n###### Technical Mechanism\n\nThe runtime entry point is `run_computer_use_action_trace_bundle` in `src/microcosm_core/organs/agent_route_observability_runtime.py`. It first loads the bundle through the strict JSON path and decides whether the input is the full fixture with negative cases or the public exported bundle. It then checks the projection protocol, interaction policy, task episodes, screen observations, action trace, authority verdicts, state transitions, recovery result records, cold replay rows, source-module manifest, non-public-state scan, and public trace spans before writing a result record. The status is `pass` only when positive findings are empty, required negative cases are observed for the fixture path, the non-public-state scan passes, and copied public source-module digests verify.\n\nThe mechanism is a typed join, not a screenshot replay. Actions must cite prior observation and affordance refs. Authority verdicts must cite action ids before state transitions can be credited. Cold replay rows must cover the action ids and reproduce the action, verdict, and transition relation. Recovery result records cover blocked or review-required actions without upgrading them into executed mutations. The public trace builder then emits bounded spans over refs, counts, hashes, and redaction posture, while the result record deliberately omits raw screen bodies, account secrets, hidden screen state, model-output data, private source bodies, absolute local paths, and benchmark-score claims.\n\n###### Named Proof Consumers\n- `validate-computer-use-bundle` is the reader command. On the exported bundle, it should produce `exported_computer_use_action_trace_bundle_validation_result.json` with four episodes, six observations, eight actions, eight authority verdicts, eight state-transition result records, one recovery result record, four cold replay rows, eight public trace spans, copied source-module digest verification, and an explicit no-live-control scope limit.\n- `tests/test_agent_route_observability_runtime.py::test_computer_use_action_trace_replay_observes_negative_cases` is the negative fixture consumer. It checks that live account action, account secret entry, external network mutation, unapproved purchase/send, destructive file action, hidden screen-state claims, action-without-observation rows, and benchmark-score claims are rejected.\n- `tests/test_agent_route_observability_runtime.py::test_computer_use_action_trace_receipt_is_public_relative_and_redacted` is the result record-safety consumer. It verifies public-relative paths and absence of account secret values, hidden screen state, absolute paths, and raw bodies.\n- `tests/test_agent_route_observability_runtime.py::test_computer_use_action_trace_exported_bundle_validates_runtime_shape` is the public-bundle consumer. It checks the exported-bundle shape, action kinds, source-module digest posture, public trace coverage, and no benchmark authority.\n- `tests/test_agent_route_observability_runtime.py::test_computer_use_trace_loader_rejects_duplicate_json_keys` is the parser-integrity consumer. It prevents a replay bundle from passing by hiding conflicting values behind duplicate JSON keys.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[46:paper_module.computer_use_action_trace_replay]` is the source-authority row for this module. A diagram view and Atlas entry are generated from that source record.\n- Dependency route: downstream modules may reference `paper_module.computer_use_action_trace_replay`, but this page's source authority is the source record named above, not those downstream dependencies.\n- Fixture-manifest route: `core/fixture_manifests/agent_route_observability_runtime.fixture_manifest.json::computer_use_action_trace_replay_contract_v1` names the positive inputs, negative-case floor, expected result record fields, runtime-example command, and scope limit.\n- Runtime route: `src/microcosm_core/organs/agent_route_observability_runtime.py::run_computer_use_action_trace_bundle` loads the bundle, validates projection protocol, interaction policy, episodes, observations, actions, authority verdicts, state transitions, recovery result records, cold replay, source-module manifest, negative cases, and public trace spans.\n- Exported-bundle route: `examples/agent_route_observability_runtime/exported_computer_use_action_trace_bundle` contains `bundle_manifest.json`, `projection_protocol.json`, `interaction_policy.json`, `task_episodes.json`, `screen_observations.json`, `action_trace.json`, `authority_verdicts.json`, `state_transition_receipts.json`, `recovery_receipts.json`, `cold_replay.json`, and `source_module_manifest.json`.\n- Source-module route: `source_module_manifest.json` records copied public source bodies for `codex/standards/std_agent_execution_trace.json`, `system/lib/agent_execution_trace.py`, and `system/lib/strict_json.py`, with `body_in_receipt: false`.\n- Focused-test route: `tests/test_agent_route_observability_runtime.py` validates negative cases, public-relative redacted result records, exported-bundle runtime shape, public trace span coverage, source-faithful public refactor status, source digest matching, and duplicate-key rejection.\n\n###### Prior Art Grounding\n\nThis component is grounded in web and desktop agent benchmarks that make action trajectories inspectable. [WebArena](https://arxiv.org/abs/2307.13854) and [Mind2Web](https://arxiv.org/abs/2306.06070) anchor realistic web-task evaluation, while [OSWorld](https://arxiv.org/abs/2404.07972) extends the concern to multimodal agents acting in real computer environments. Browser automation standards such as [WebDriver](https://www.w3.org/TR/webdriver2/) are also prior art for representing actions against visible browser state through a controlled protocol.\n\nMicrocosm borrows the action-trace accounting pattern: observations, affordances, actions, pre-action authority verdicts, transition result records, recovery result records, cold replay, and falsification cases must line up before a computer-use episode is credited. It does not operate a live browser or desktop.\n\nThe result record proves only this public synthetic replay boundary. It does not control a live browser or desktop, use accounts, enter account secrets, mutate external systems, export raw screenshots, claim benchmark performance, change source files, use external model services, or include launch operations.\n\n###### Validation Result record Path\n\nReader-verifiable bundle command, run from `microcosm-substrate/`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.cli agent-route-observability-runtime \\\n  --input examples/agent_route_observability_runtime/exported_computer_use_action_trace_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/agent_route_observability_runtime \\\n  validate-computer-use-bundle\n```\n\nThe command writes the computer-use replay result record under `receipts/runtime_shell/demo_project/organs/agent_route_observability_runtime/`, including `computer_use_action_trace_replay_result.json` and the exported bundle validation result. The tracked fixture result record records the synthetic observations, affordances, authority verdicts, transition result records, recovery result records, falsification cases, non-public-state scan posture, and scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, operate a live browser or desktop, use accounts, enter account secrets, mutate external systems, claim benchmark performance, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim synthetic computer-use action-trace replay over public fixtures: visible observations, affordances, action rows, pre-action authority verdicts, state-transition result records, recovery result records, cold replay rows, public trace spans, source-module digest checks, expected negative cases, and metadata-only result records.\n\nIt does not claim live browser or desktop control, account automation, account secret entry, purchase/send authority, external network mutation, destructive host action, hidden screen-state truth, benchmark performance, provider behavior, source-file changes, launch-scope decision, or whole-system correctness. The diagram view and Atlas entry generated for this module are navigation surfaces; they are not additional proof authority.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe source record binds this module to the accepted `agent_route_observability_runtime` component and to `mechanism.agent_route_observability_runtime.validates_public_route_feedback`. That places the page under `AX-1` and the `P-1` / `P-2` claim discipline: a computer-use claim is admissible only when the runtime recomputes it from lower level evidence, and the public sentence cannot exceed what the named validator actually checks. The generated JSON instance records nine resolved edges: component, mechanism, concept, axiom, principle, dependency, and code-locus links.\n\nThe relevant concept is `concept.agent_reliability_and_safety_validator_bundle`, not a generic browser agent benchmark. It frames the replay as an evidence bundle: visible observations and affordances are the basis, action rows are candidate transitions, pre-action authority verdicts decide whether a transition may be executed or blocked, and result record rows carry the bounded public result. The dependencies on `agent_route_observability_runtime` and `macro_projection_import_protocol` keep the proof below the source-open import and result record lanes instead of treating this Markdown page as source authority.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 14516,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A computer-use agent produces a stream of screenshots, clicks, keystrokes, and \"it worked\" assertions. The hard question for anyone reviewing such a trace is not whether the agent moved the mouse, but whether the record actually supports the claim that something happened safely. A trace can look complete while hiding the two failures that matter most: an action that was blocked or sent for review but is later narrated as a success, and a success that is asserted without any state evidence to back it. This module exists to make that question decidable on a synthetic episode, offline, before any of the language reaches a reader. The single question it answers is: does each recorded action lin\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is a reader route over a synthetic computer-use action trace validator. The evidence path runs through the source record, fixture manifest, exported bundle, runtime validator, public trace builder, metadata-only result records, and explicit scope limit. A diagram view and Atlas entry are generated for this module from the source record.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The source record binds this module to the accepted agentrouteobservability_runtime component and to mechanism.agentrouteobservabilityruntime.validatespublicroutefeedback. That places the page under AX-1 and the P-1 / P-2 claim discipline: a computer-use claim is admissible only when the runtime recomputes it from lower level evidence, and the public sentence cannot exceed what the named validator actually checks. The generated JSON instance records nine resolved edges: component, mechanism, concept, axiom, principle, dependency, and code-locus links. The relevant concept is concept.agentreliabilityandsafetyvalidator_bundle, not a generic browser agent benchmark. It frames the replay as an\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime entry point is runcomputeruseactiontrace_bundle in src/microcosmcore/components/agentrouteobservabilityruntime.py. It first loads the bundle through the strict JSON path and decides whether the input is the full fixture with negative cases or the public exported bundle. It then checks the projection protocol, interaction policy, task episodes, screen observations, action trace, authority verdicts, state transitions, recovery result records, cold replay rows, source-module manifest, non-public-state scan, and public trace spans before writing a result record. The status is pass only when positive findings are empty, required negative cases are observed for the fixture path, the n\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "validate-computer-use-bundle is the reader command. On the exported bundle, it should produce exportedcomputeruseactiontracebundlevalidation_result.json with four episodes, six observations, eight actions, eight authority verdicts, eight state-transition result records, one recovery result record, four cold replay rows, eight public trace spans, copied source-module digest verification, and an explicit no-live-control scope limit. tests/testagentrouteobservabilityruntime.py::testcomputeruseactiontracereplayobservesnegativecases is the negative fixture consumer. It checks that live account action, account secret entry, external network mutation, unapproved purchase/send, destructive file act\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: core/papermodulecapsules.json::papermodules[46:papermodule.computeruseactiontracereplay] is the source-authority row for this module. A diagram view and Atlas entry are generated from that source record. Dependency route: downstream modules may reference papermodule.computeruseactiontrace_replay, but this page's source authority is the source record named above, not those downstream dependencies. Fixture-manifest route: core/fixturemanifests/agentrouteobservabilityruntime.fixturemanifest.json::computeruseactiontracereplaycontract_v1 names the positive inputs, negative-case floor, expected result record fields, runtime-example command, and scope limit. Runtime route: src/microc\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable bundle command, run from microcosm-substrate/: The command writes the computer-use replay result record under result records/runtimeshell/demoproject/components/agentrouteobservability_runtime/, including computeruseactiontracereplay_result.json and the exported bundle validation result. The tracked fixture result record records the synthetic observations, affordances, authority verdicts, transition result records, recovery result records, falsification cases, non-public-state scan posture, and scope limit. This result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, operate a live browser or desktop, use accou\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim synthetic computer-use action-trace replay over public fixtures: visible observations, affordances, action rows, pre-action authority verdicts, state-transition result records, recovery result records, cold replay rows, public trace spans, source-module digest checks, expected negative cases, and metadata-only result records. It does not claim live browser or desktop control, account automation, account secret entry, purchase/send authority, external network mutation, destructive host action, hidden screen-state truth, benchmark performance, provider behavior, source-file changes, launch-scope decision, or whole-system correctness. The diagram view and Atlas entry gene\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in web and desktop agent benchmarks that make action trajectories inspectable. WebArena and Mind2Web anchor realistic web-task evaluation, while OSWorld extends the concern to multimodal agents acting in real computer environments. Browser automation standards such as WebDriver are also prior art for representing actions against visible browser state through a controlled protocol. Microcosm borrows the action-trace accounting pattern: observations, affordances, actions, pre-action authority verdicts, transition result records, recovery result records, cold replay, and falsification cases must line up before a computer-use episode is credited. It does not operate a\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.computer_use_action_trace_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON source record\"] bundle --> mermaid[\"generated Mermaid available\"] bundle --> atlas[\"generated Atlas linked\"] bundle --> component[\"agent_route_observability_runtime runtime\"] component --> bundle[\"exported computer-use bundle\"] bundle --> observations[\"visible observations: digest + visible-state hash, no raw pixels\"] observations --> actions[\"action rows: cite observation + affordance, allowed kind, redacted\"] actions --> verdicts[\"pre-action authority verdict per action\"] verdicts -->|allow| executed[\"transition: executed + oracle status pass\"] verdicts -->|block or review| held[\"transition: not executed + blocked / review-required\"] held --> recovery[\"recovery result record, no upgrade to executed\"] executed --> cold[\"cold replay reproduces action, verdict, transition\"] recovery --> cold cold --> trace[\"public trace spans: refs, counts, hashes, redaction posture\"] trace --> result record[\"metadata-only validation result record\"] result record --> ceiling[\"scope limit: no live control\"]",
       "source_hash": "sha256:b06e705700669dba51ecf7c2b262a137f4426710811928646d39d39a5b693702",
       "html_url": "docs/paper-modules.html#paper-module-computer-use-action-trace-replay-diagram-1",
       "html_anchor": "paper-module-computer-use-action-trace-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/computer_use_action_trace_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "WebArena",
       "url": "https://arxiv.org/abs/2307.13854",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Mind2Web",
       "url": "https://arxiv.org/abs/2306.06070",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "OSWorld",
       "url": "https://arxiv.org/abs/2404.07972",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "WebDriver",
       "url": "https://www.w3.org/TR/webdriver2/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 1,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "agent_route_observability_runtime",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Agent Route Observability Runtime",
         "url": "components.html#component-agent_route_observability_runtime"
        },
        {
         "id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public route feedback",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 3,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/computer_use_action_trace_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 15564
    },
    {
     "id": "paper_module.concurrency_mission_control",
     "title": "Concurrency Mission Control",
     "relative_href": "docs/paper-modules.html#paper-module-concurrency-mission-control",
     "read_href": "docs/paper-modules.html#paper-module-concurrency-mission-control",
     "context_href": "docs/rules-and-ideas.html#paper-module-concurrency-mission-control",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Concurrency Mission Control validates metadata-only coordination result records without becoming a live scheduler or production concurrency proof.",
     "summary": "Concurrency Mission Control validates the public concurrency mission-control membrane: copied source-builder digests, bridge artifacts, failure classes, work log seed-speed topology, heartbeat and claim-collision anchors, negative cases, source-open body imports, and metadata-only result records. It separates coordination evidence from hosted orchestration, external model access, live scheduling, private-system equivalence, source authority, launch, public sharing, and production concurrency guarantees.",
     "authority_ceiling": "Verified concurrency mission-control fixture and source-module import evidence only; no live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Concurrency Mission Control validates metadata-only coordination result records without becoming a live scheduler or production concurrency proof.",
     "teleology": {
      "section_id": "",
      "text": "Concurrency Mission Control validates metadata-only coordination result records without becoming a live scheduler or production concurrency proof.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`concurrency_mission_control` imports the real self-indexing-cognitive-system/src/idea_microcosm/concurrency_mission_control_specimen.py source builder plus its public provider-canary and work log bridge artifacts as exact source copies. The component runs the copied builder in a temporary public seed root, then checks the transaction failure matrix, authority membrane, and a public work log seed-speed topology fixture. The work log code body itself is consumed through the existing `mission_transaction_work_spine` source-body import surfaces rather than duplicated here.\n\nThe component is deliberately narrow: it demonstrates fail-closed transaction gating for synthetic multi-agent lanes, not private mission-control runtime, external model access, live scheduling, production concurrency safety, hosted orchestration, or launch-scope decision.\n\n###### Purpose\n\nWhen several agents work the same repository at once, the dangerous moment is not a crash. It is a quiet one: two lanes edit the same generated file, or one lane commits work whose owner has not finished, and nobody notices until the state is already wrong. This component exists to make that moment a checkable verdict rather than a judgement call.\n\nThe single question it answers is: given a dirty path and the live claim topology around it, is acting on that path safe, and if not, what must happen first? The answer is never \"probably fine\". Each case resolves to a named classification and one allowed action, so a lane can decide whether to proceed, hand off, or wait.\n\nWhat is unusual is where the evidence comes from. Rather than re-implementing a scheduler, the component runs the real source mission-control builder over public synthetic lanes and reads a public snapshot of the work log's seed-speed topology: who holds which claim, whether their heartbeat is current, and where path claims collide. The most pointed part is the pair of classifier lenses. The closure-state lens then folds in validation, commitability, and residual evidence to say whether a piece of work is genuinely closed or only looks closed. Both lenses default to the cautious verdict when the evidence is thin, which is the behaviour the page is really about.\n\n###### Prior Art Grounding\n\nThis component borrows from workflow DAGs, lease-based coordination, atomic commit protocols, and CI concurrency controls. Useful anchors include:\n- Apache Airflow [DAGs](https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/dags.html), for representing tasks, dependencies, retries, and scheduling separately from task internals.\n- Kubernetes [Lease-based leader election](https://kubernetes.io/docs/concepts/cluster-administration/coordinated-leader-election/), as a prior pattern for lease holders, renewals, and failover-sensitive internal control coordination.\n- IBM Research on [two-phase commit](https://research.ibm.com/publications/two-phase-commit-optimizations-and-tradeoffs-in-the-commercial-environment), as a transaction-consistency pattern for distributed participants under failure.\n- GitHub Actions [workflow syntax](https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax), for declared workflow concurrency and job orchestration controls.\n\nMicrocosm borrows the DAG, lease, commit-gate, and workflow-concurrency shapes, but keeps the component to fail-closed synthetic multi-agent transaction gating. It does not claim private mission-control runtime, external model access, live scheduling, production concurrency safety, hosted orchestration, or launch.\n\n###### Shape\n\nSource refs\n\nbridges green, authority-collapse zero, forbidden claims blocked `bridge_authority_membrane` heartbeat current, path claims collision-free `work_ledger_seed_speed_gate` dirty generated file: owner live / stale / absent > allowed action `generated_surface_claim_lens` Diagram source\n\n```text\nflowchart LR Builder[\"Copied source builder run in temp seed root: mission board, bridges, result record\"] Bridge[\"Public bridge artifacts provider canary and work log cap economy\"] Seed[\"work log seed-speed snapshot claims, heartbeats, collisions, session cards\"] subgraph Engines[\"Six engines (all must pass)\"] Matrix[\"failure_matrix_gate conflict, duplicate run, dependency, lease, result record, finalizer visible\"] Membrane[\"bridge_authority_membrane bridges green, authority-collapse zero, forbidden claims blocked\"] SeedGate[\"work_ledger_seed_speed_gate heartbeat current, path claims collision-free\"] SurfaceLens[\"generated_surface_claim_lens dirty generated file: owner live / stale / absent -> allowed action\"] ClosureLens[\"closure_state_lens closed and committed, validation deferred, or open and unclassified\"] end Negative[\"Negative floor missing seed root, blocked bridge, authority collapse, private runtime, claim collision\"] Result record[\"metadata-only result records refs, digests, anchors, counts, verdicts; no session or proof bodies\"] Builder --> Matrix Builder --> Membrane Bridge --> Membrane Seed --> SeedGate Seed --> SurfaceLens Seed --> ClosureLens Engines --> Negative Negative --> Result record\n```\n\n###### Engines\n- `mission_transaction_original_builder` dynamically loads the copied source builder and emits the mission board, provider repair bridge, work-metabolism bridge, residual replay bridge, and result record.\n- `failure_matrix_gate` checks that owner-path conflicts, duplicate command runs, dependency gaps, stale leases, missing result records, supervised-scope gaps, missing parent finalizers, and misanchored claims all remain visible.\n- `bridge_authority_membrane` checks that bridge statuses are green while authority-collapse counters remain zero and forbidden claims stay blocked.\n- work_ledger_seed_speed_gate checks that public session heartbeat, seed-speed status, mutation-check commands, multi-session/claim counts, and collision-free path-claim rows are present without exporting private work log session bodies.\n- Each classification carries the single allowed action, so the verdict is what a lane should do, not just what it observed.\n- `closure_state_lens` decides whether a unit of work is genuinely closed. It folds the generated-surface classification together with validation state, commitability, and any open residual, separating `closed_and_committed` from the cases that only look done: `closed_validation_deferred` (validation parked under host pressure), `closed_uncommitted_authority` (event authority exists but shared append logs are unsafe to stage), `false_residual_stale` (a residual left open against a passing generator check), or `open_unclassified` when the closure evidence is simply insufficient. The default is the last of these, so absent evidence never reads as success.\n\n###### Reader Evidence Routing\n\nRead this module as a coordination-evidence membrane, not as a live scheduler. Start with `paper_modules/concurrency_mission_control.json` for the full structured binding, then open `standards/std_microcosm_concurrency_mission_control.json` for required copied-body counts, negative cases, result record fields, and the public/private boundary.\n\nOpen `core/fixture_manifests/concurrency_mission_control.fixture_manifest.json` and `examples/concurrency_mission_control/exported_concurrency_mission_control_bundle/source_module_manifest.json` before inspecting copied source modules. The manifest floor names one source builder body and six public bridge artifacts; result record payloads should carry source refs, hashes, anchors, counts, verdicts, and omission result records, not body text.\n\nRead the work log seed-speed topology as a public coordination fixture. It can show heartbeat participation, mutation-check commands, session and claim counts, and collision-free selected rows, but it cannot export private work log session bodies or authorize live scheduling.\n\n###### Negative Cases\n\nThe fixture carries stable cases for missing seed roots, blocked provider bridges, authority-collapse claims, private runtime overclaims, and unresolved work log seed-speed claim collisions. If focused validation reports an exact-copy source-module body mismatch, route that repair through `microcosm_exact_copy_refresh`; do not treat this Markdown projection as source authority for copied source bodies.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, validate with throwaway result record outputs first:\n\nA diagram view and navigation card are generated for this module from its declared component, mechanism, concept, principle, axiom, dependency, and code-locus relationships. Fixture and bundle passes prove only public fail-closed coordination evidence over the declared copied bodies and synthetic fixtures. Source-copy digest drift belongs to `microcosm_exact_copy_refresh`; shared lattice projection drift belongs to the live projection owner lane.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the exact public source builder copy, provider-canary and work log bridge artifacts, failure-matrix fixture, bridge authority membrane, work log seed-speed topology fixture, source manifests, metadata-only result records, negative cases, and generated navigation projections support the declared concurrency mission-control fixture contract. It may also claim that the structured binding row resolves the accepted component subject, resolved mechanism subject, runtime source locus, governed concept, five principles, four axioms, and three dependency modules.\n\nThis module may not claim private mission-control runtime truth, external model access, live scheduling, production concurrency safety, hosted orchestration, source-file changes, hosted-public posture, launch-scope decision, publishing-scope decision, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing lattice claim is that this module turns concurrency coordination from a status narrative into a transaction-scoped evidence check. The bundle structured source record reports sixteen resolved edges and zero unresolved selective relations: the page explains the accepted component and mechanism, cites the runtime source locus, depends on the mission-transaction, bridge-continuity, and work-landing modules, and is governed by `concept.work_landing_and_continuity_control_bundle`. That concept binds this component to the same family shape as work landing and continuity controls: public fixture or exported bundle input becomes a coordination validator, and the result is a scoped transaction or continuity result record rather than chat status or generated projection authority.\n\nThe mechanism row `mechanism.concurrency_mission_control.validates_public_concurrency_mission_control` is the source-backed explanation edge. In source, `run`, `run_concurrency_mission_control_bundle`, `classify_generated_surface_claim_lens`, and `classify_concurrency_closure_state_lens` require copied-source digest equality, required anchors, failure-class coverage, work log seed-speed topology checks, metadata-only result records, and explicit scope limits. The focused proof consumer is `tests/test_concurrency_mission_control.py`: it checks the happy-path fixture, exported-bundle validation, digest-mismatch rejection, exact source-body imports, semantic negative cases, owner-state classification, and closure-state classification. The standard `std_microcosm_concurrency_mission_control.json` supplies the same ceiling in schema form, including seven copied public source modules, five negative cases, no non-public body export, and no live scheduler/provider/launch-scope decision.\n\nThe principle and axiom edges keep the proof boundary from drifting upward. `P-10`, `P-16`, and `AX-9` make coordination effects transaction-scoped and compensable; `P-2`, `P-6`, `P-8`, `AX-5`, `AX-7`, and `AX-8` force the validator to lower claim strength when evidence, preconditions, provenance, or refusal reasons are missing. A passing run therefore proves only the public concurrency mission-control fixture contract over declared copied bodies and synthetic fixtures. It does not establish private mission-control runtime truth, live scheduling, external model access, hosted orchestration, production concurrency safety, source-file changes, launch-scope decision, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12391,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "When several agents work the same repository at once, the dangerous moment is not a crash. It is a quiet one: two lanes edit the same generated file, or one lane commits work whose owner has not finished, and nobody notices until the state is already wrong. This component exists to make that moment a checkable verdict rather than a judgement call. The single question it answers is: given a dirty path and the live claim topology around it, is acting on that path safe, and if not, what must happen first? The answer is never \"probably fine\". Each case resolves to a named classification and one allowed action, so a lane can decide whether to proceed, hand off, or wait. What is unusual is where\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component borrows from workflow DAGs, lease-based coordination, atomic commit protocols, and CI concurrency controls. Useful anchors include: Apache Airflow DAGs, for representing tasks, dependencies, retries, and scheduling separately from task internals. Kubernetes Lease-based leader election, as a prior pattern for lease holders, renewals, and failover-sensitive internal control coordination. IBM Research on two-phase commit, as a transaction-consistency pattern for distributed participants under failure. GitHub Actions workflow syntax, for declared workflow concurrency and job orchestration controls. Microcosm borrows the DAG, lease, commit-gate, and workflow-concurrency shapes, bu\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "engines",
       "title": "Engines",
       "level": 2,
       "excerpt": "missiontransactionoriginal_builder dynamically loads the copied source builder and emits the mission board, provider repair bridge, work-metabolism bridge, residual replay bridge, and result record. failurematrixgate checks that owner-path conflicts, duplicate command runs, dependency gaps, stale leases, missing result records, supervised-scope gaps, missing parent finalizers, and misanchored claims all remain visible. bridgeauthoritymembrane checks that bridge statuses are green while authority-collapse counters remain zero and forbidden claims stay blocked. workledgerseedspeedgate checks that public session heartbeat, seed-speed status, mutation-check commands, multi-session/claim counts,\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The governing lattice claim is that this module turns concurrency coordination from a status narrative into a transaction-scoped evidence check. The bundle structured source record reports sixteen resolved edges and zero unresolved selective relations: the page explains the accepted component and mechanism, cites the runtime source locus, depends on the mission-transaction, bridge-continuity, and work-landing modules, and is governed by concept.worklandingandcontinuitycontrol_bundle. That concept binds this component to the same family shape as work landing and continuity controls: public fixture or exported bundle input becomes a coordination validator, and the result is a scoped transacti\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-command",
       "title": "Public Command",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate, validate with throwaway result record outputs first: A diagram view and navigation card are generated for this module from its declared component, mechanism, concept, principle, axiom, dependency, and code-locus relationships. Fixture and bundle passes prove only public fail-closed coordination evidence over the declared copied bodies and synthetic fixtures. Source-copy digest drift belongs to microcosmexactcopy_refresh; shared lattice projection drift belongs to the live projection owner lane.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that the exact public source builder copy, provider-canary and work log bridge artifacts, failure-matrix fixture, bridge authority membrane, work log seed-speed topology fixture, source manifests, metadata-only result records, negative cases, and generated navigation projections support the declared concurrency mission-control fixture contract. It may also claim that the structured binding row resolves the accepted component subject, resolved mechanism subject, runtime source locus, governed concept, five principles, four axioms, and three dependency modules. This module may not claim private mission-control runtime truth, external model access,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module as a coordination-evidence membrane, not as a live scheduler. Start with papermodules/concurrencymission_control.json for the full structured binding, then open standards/stdmicrocosmconcurrencymissioncontrol.json for required copied-body counts, negative cases, result record fields, and the public/private boundary. Open core/fixturemanifests/concurrencymissioncontrol.fixturemanifest.json and examples/concurrencymissioncontrol/exportedconcurrencymissioncontrolbundle/sourcemodulemanifest.json before inspecting copied source modules. The manifest floor names one source builder body and six public bridge artifacts; result record payloads should carry source refs, hashes, ancho\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The fixture carries stable cases for missing seed roots, blocked provider bridges, authority-collapse claims, private runtime overclaims, and unresolved work log seed-speed claim collisions. If focused validation reports an exact-copy source-module body mismatch, route that repair through microcosmexactcopy_refresh; do not treat this Markdown projection as source authority for copied source bodies.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.concurrency_mission_control.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Builder[\"Copied source builder run in temp seed root: mission board, bridges, result record\"] Bridge[\"Public bridge artifacts provider canary and work log cap economy\"] Seed[\"work log seed-speed snapshot claims, heartbeats, collisions, session cards\"] subgraph Engines[\"Six engines (all must pass)\"] Matrix[\"failure_matrix_gate conflict, duplicate run, dependency, lease, result record, finalizer visible\"] Membrane[\"bridge_authority_membrane bridges green, authority-collapse zero, forbidden claims blocked\"] SeedGate[\"work_ledger_seed_speed_gate heartbeat current, path claims collision-free\"] SurfaceLens[\"generated_surface_claim_lens dirty generated file: owner live / stale / absent -> allowed action\"] ClosureLens[\"closure_state_lens closed and committed, validation deferred, or open and unclassified\"] end Negative[\"Negative floor missing seed root, blocked bridge, authority collapse, private runtime, claim collision\"] Result record[\"metadata-only result records refs, digests, anchors, counts, verdicts; no session or proof bodies\"] Builder --> Matrix Builder --> Membrane Bridge --> Membrane Seed --> SeedGate Seed --> SurfaceLens Seed --> ClosureLens Engines --> Negative Negative --> Result record",
       "source_hash": "sha256:f852dadb923f4d1ede2737dc13dafa9ad07aa708fa5326241431a9f570f63f3b",
       "html_url": "docs/paper-modules.html#paper-module-concurrency-mission-control-diagram-1",
       "html_anchor": "paper-module-concurrency-mission-control-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/concurrency_mission_control.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "DAGs",
       "url": "https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/dags.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Lease-based leader election",
       "url": "https://kubernetes.io/docs/concepts/cluster-administration/coordinated-leader-election/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "two-phase commit",
       "url": "https://research.ibm.com/publications/two-phase-commit-optimizations-and-tradeoffs-in-the-commercial-environment",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "workflow syntax",
       "url": "https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-9",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Compensable transactional effects",
         "url": "doctrine.html#dcard-ax-9"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        },
        {
         "id": "paper_module.bridge_phase_continuity_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Bridge Phase Continuity Runtime",
         "url": "paper-modules.html#paper-module-bridge-phase-continuity-runtime"
        },
        {
         "id": "paper_module.work_landing_control_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Work Landing Control Spine",
         "url": "paper-modules.html#paper-module-work-landing-control-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "concurrency_mission_control",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Concurrency Mission Control",
         "url": "components.html#component-concurrency_mission_control"
        },
        {
         "id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public concurrency mission control",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 6,
       "links": [
        {
         "id": "P-10",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Do not land effects without compensation",
         "url": "doctrine.html#dcard-p-10"
        },
        {
         "id": "P-16",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind authority to transaction scope",
         "url": "doctrine.html#dcard-p-16"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "concept.work_landing_and_continuity_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "work landing and continuity controls as transaction-scoped coordination evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/concurrency_mission_control.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 13533
    },
    {
     "id": "paper_module.doctrine_fact_claim_audit",
     "title": "Doctrine Fact Claim Audit",
     "relative_href": "docs/paper-modules.html#paper-module-doctrine-fact-claim-audit",
     "read_href": "docs/paper-modules.html#paper-module-doctrine-fact-claim-audit",
     "context_href": "docs/rules-and-ideas.html#paper-module-doctrine-fact-claim-audit",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Doctrine Fact Claim Audit rejects wrong fact counts and dead anchors without claiming comprehension or route completeness.",
     "summary": "Doctrine Fact Claim Audit validates public doctrine fact assertions against declared sections, numeric claim gates, code-locus anchors, route DAG fixtures, negative cases, source-open body imports, and scope limits. It lowers claim strength to fixture truth: fact assertion, code-loci, and DAG evidence are checked, but the component does not become a comprehension engine, minimum-read graph, doctrine saturation proof, source-file changes lane, or launch-scope decision.",
     "authority_ceiling": "Declared fact-assertion, code-locus, and DAG fixture truth gate only; no comprehension engine, no minimum-read-graph proof, no doctrine saturation claim, no source-file changes, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "abstract": "Doctrine Fact Claim Audit rejects wrong fact counts and dead anchors without claiming comprehension or route completeness.",
     "teleology": {
      "section_id": "",
      "text": "Doctrine Fact Claim Audit rejects wrong fact counts and dead anchors without claiming comprehension or route completeness.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`doctrine_fact_claim_audit` is a Crown Jewel import component with real runnable system and a strict public scope limit. It consumes synthetic public fixtures, copied source source bodies, and source manifests that verify sha256 digests, line counts, required anchors, secret-exclusion status, and result record body omission.\n\nWhat it proves: fact assertion, code-loci, DAG, and numeric claim binding fixture truth gate only.\n\n###### Purpose\n\nDocumentation about a living system rots. A page states that there are forty-seven of something, or cites a function in a file, and both claims quietly go stale as the code moves underneath them. A reader cannot tell a current count from a number that was true once and never rechecked. This component exists to answer one question: which of a page's factual assertions can be re-derived from source right now, and which have become untracked drift?\n\nThe approach treats a documentation claim like a cached value that needs an invalidation strategy. A bare number is not enough; the claim is admissible only when it is bound to a fact assertion that records how to recompute or revalidate the value. The same pass resolves every cited code locus on disk and checks that the quoted anchor text is actually present, so a plausible-but-dead file reference becomes a typed finding rather than inert prose. The interesting move is that nothing here asks a model whether the prose reads as true. The component recomputes a bounded relation over public fixtures and reports only what that relation supports.\n\nThe second design choice worth naming is how the checks are proved. The negative floor is semantic, not label-trusting: the test harness overwrites the declared failure fixtures with bogus pass rows and confirms the evaluator still derives the expected stable error codes itself. That keeps the proof attached to the mechanism rather than to the fixture filenames. The honesty of the page rests on that: the component is a narrow claim-audit gate over copied public fixtures, not a comprehension engine, a minimum-read-graph proof, a source-file changes lane, or any launch-scope decision.\n\n###### Prior Art Grounding\n\nThis component borrows from provenance modeling, structured fact-check metadata, schema validation, and supply-chain attestation. Useful anchors include:\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), which models entities, activities, and agents so readers can assess the quality, reliability, and trustworthiness of derived information.\n- Schema.org [ClaimReview](https://schema.org/ClaimReview), as a web metadata pattern for recording a reviewed claim and its fact-checking context.\n- [JSON Schema](https://json-schema.org/), for declaring expected structure and rejecting malformed or incomplete claim records.\n- [SLSA provenance](https://slsa.dev/spec/v1.2/), for the software-supply-chain pattern of tracing artifacts back to source and build metadata.\n\nMicrocosm borrows the provenance, claim-review, schema, and attestation shapes, but keeps this component to public fixture fact counts, code-loci existence, anchor presence, DAG references, and synthetic volatile numeric binding cases. It is not a comprehension engine, private-doctrine export, launch-scope decision, or a minimum-read-graph proof.\n\n###### Technical Mechanism\n\nThe runtime mechanism is a public fixture evaluator in `src/microcosm_core/organs/doctrine_fact_claim_audit.py`. The component declares a `CrownJewelSpec` with four required inputs: `fact_assertions.json`, `fact_dag.json`, `numeric_claims.json`, and `projection_protocol.json`. The shared crown-jewel runner handles source-manifest validation, result record writing, negative-case execution, and scope limit attachment; this module supplies the domain evaluator and the semantic negative-case mutator.\n\n`evaluate` first loads the fact assertion table and compares `expected_fact_count` to the number of fact rows. Each fact must carry at least one code locus. The evaluator resolves every relative code-locus path against the copied source-module bundle, then checks that the declared anchor text is present in the copied body. The DAG pass builds the set of audited fact ids and rejects any edge whose `from` or `to` endpoint is not in that set. These checks convert plausible documentation references into result record-backed paths, anchors, and graph edges.\n\nNumeric claims are checked by importing the copied `source_modules/system/lib/derived_fact_hologram.py` body from the exported bundle and calling its `find_unbound_numeric_claims` function. For each row in `numeric_claims.json`, the evaluator synthesizes `FactAssertion` instances for the declared sections, records unbound numeric detections, and blocks a case when a non-detector row leaves current-state numeric prose without a matching fact assertion. Detector rows are positive evidence only because they must surface the expected section and number.\n\nThe negative floor is semantic rather than label-trusting. `evaluate_negative_case` mutates the positive fixture in memory for `wrong_fact_count`, `missing_code_locus`, `dead_code_locus`, `dead_dag_ref`, and `unbound_numeric_claim`, then reruns the same evaluator in a temporary input directory. The tests deliberately overwrite the declared negative-case files with bogus pass rows and confirm that the component still derives the expected stable error codes from the evaluator itself. That keeps the proof tied to the mechanism, not to fixture labels.\n\nThe source-open body floor is separate from the result record floor. The exported bundle manifest names two copied bodies, `derived_fact_hologram.py` and `paper_modules.py`, with digests and line counts. Runtime result records carry refs, counts, verdicts, scope boundaries, and `body_in_receipt: false`; they do not embed copied source bodies or private operator material.\n\nHow to run it:\n\nRuntime bundle route:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.doctrine_fact_claim_audit run-doctrine-fact-bundle --input examples/doctrine_fact_claim_audit/exported_doctrine_fact_claim_audit_bundle --out receipts/runtime_shell/demo_project/organs/doctrine_fact_claim_audit\n```\n\n###### Shape\n- Subject: `doctrine_fact_claim_audit`, with mechanism `mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit`.\n- Runtime locus: `src/microcosm_core/organs/doctrine_fact_claim_audit.py`, especially `run`, `run_doctrine_fact_bundle`, `evaluate`, `_evaluate_numeric_claims`, `_load_derived_fact_module`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- The fixture checks an expected fact count, resolves declared code-locus paths, verifies required source anchors, rejects dead DAG references, and requires volatile numeric claim cases to be bound to fact assertions.\n- The accepted positive result record reports three facts, three verified code loci, two DAG edges, two numeric claim cases, and one detected unbound numeric detector case, while preserving `body_in_receipt: false`.\n- The negative floor is stable: `dead_code_locus`, `dead_dag_ref`, `missing_code_locus`, `unbound_numeric_claim`, and `wrong_fact_count`.\n- The public standard is `standards/std_microcosm_doctrine_fact_claim_audit.json`; the fixture manifest is `core/fixture_manifests/doctrine_fact_claim_audit.fixture_manifest.json`.\n\nSource refs\n\nfacts + expected_fact_count `fact_assertions.json` edges `fact_dag.json` cases `numeric_claims.json` Diagram source\n\n```text\nflowchart LR Facts[\"fact_assertions.json facts + expected_fact_count\"] --> Eval[\"evaluate\"] Dag[\"fact_dag.json edges\"] --> Eval Numerics[\"numeric_claims.json cases\"] --> Eval Manifest[\"source module manifest copied bodies\"] --> Eval Eval --> Count{\"declared fact count = table length?\"} Eval --> Loci{\"each code locus path on disk + anchor in body?\"} Eval --> DagRef{\"DAG endpoints are known fact ids?\"} Eval --> Bound{\"current-state numerics bound to a fact assertion section?\"} Count -->|mismatch| Block[\"typed blocking finding\"] Loci -->|missing path or anchor| Block DagRef -->|dead ref| Block Bound -->|unbound| Block Count -->|ok| Result record[\"metadata-only result record body_in_receipt: false\"] Loci -->|ok| Result record DagRef -->|ok| Result record Bound -->|ok| Result record Neg[\"evaluate_negative_case mutate fixture, rerun evaluator\"] --> Codes[\"expected stable error codes\"]\n```\n\n###### Named Proof Consumers\n- Fixture CLI consumer: PYTHONPATH=src ../repo-python -m microcosm_core.components.doctrine_fact_claim_audit run --input fixtures/first_wave/doctrine_fact_claim_audit/input --out /tmp/microcosm-doctrine-fact-claim-audit/fixture --sign-off-out /tmp/microcosm-doctrine-fact-claim-audit/sign-off.json --card. Expected proof shape: `status: pass`, three fact rows, three verified code loci, two DAG edges, two numeric-claim cases, one detector case, zero blocking unbound numerics, five semantic negative cases, and `body_in_receipt: false`.\n- Exported bundle consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.organs.doctrine_fact_claim_audit run-doctrine-fact-bundle --input examples/doctrine_fact_claim_audit/exported_doctrine_fact_claim_audit_bundle --out /tmp/microcosm-doctrine-fact-claim-audit/bundle --card`. Expected proof shape: the same evaluator runs through the exported bundle input mode, validates the source-module manifest, and writes metadata-only bundle result records.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider --basetemp=/tmp/microcosm_doctrine_fact_claim_audit_pytest tests/test_doctrine_fact_claim_audit.py -q`. Expected proof shape: the seven tests cover the positive fixture, dead code locus, missing code locus, dead DAG ref, unbound numeric claim, semantic negative-case derivation, and exported-bundle route.\n- Corpus parity consumer: `PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus`. Expected proof shape: the structured source record remains reproducible from the bundle and Markdown projection without hand-editing generated state.\n- structured source record readback consumer: `jq '{source_authority:.paper_module_payload.source_authority, mermaid:.paper_module_payload.generated_projections.mermaid.status, atlas:.paper_module_payload.generated_projections.atlas_card.status, edge_count:(.relationships.edges|length), unresolved:(.relationships.unpopulated_selective_relations|length)}' paper_modules/doctrine_fact_claim_audit.json`. Expected proof shape: `json_capsule`, `available_from_capsule_edges`, `linked_from_capsule_edges`, resolved bundle edges, and zero unpopulated selective relations.\n\n###### Reader Evidence Routing\n- Start with `paper_modules/doctrine_fact_claim_audit.json` as the primary reference, then open this Markdown page as a reader guide to that record.\n- Open `standards/std_microcosm_doctrine_fact_claim_audit.json` for the standard, required witnesses, negative floor, denied authority, and result record contract.\n- Open `core/fixture_manifests/doctrine_fact_claim_audit.fixture_manifest.json` for fixture inputs, copied-body counts, durable result record refs, and source-open body omission rules.\n- Open `examples/doctrine_fact_claim_audit/exported_doctrine_fact_claim_audit_bundle/source_module_manifest.json` before inspecting copied source modules; result records carry refs and digests, not copied source body text.\n- Run the fixture or bundle route from the `microcosm-substrate` directory and inspect the written JSON files. The component CLI exposes `--card`, but it does not expose a `--json` stdout mode.\n- Use `scripts/build_doctrine_projection.py --check-paper-module-corpus` to verify this paper-module projection stays inside the shared corpus contract.\n\n###### Claim-Rot Detection\n\nThis component treats documentation claims like cached values that need an invalidation strategy. The failure mode is not only a wrong number; it is a volatile number embedded in current-state prose with no attached route for re-deriving it.\n\nThe detector flags volatile numerics: a number near a countable noun inside a current-state section. Such a claim is admissible only when it is bound to a fact assertion that records how to recompute or revalidate the value. The same audit resolves every cited code locus on disk and checks that the quoted anchor is actually present, so stale file references and plausible-but-dead anchors are negative evidence rather than inert prose.\n\nThe public fixture does not claim natural-language comprehension. It proves the more useful contract: current-state numerics, fact assertions, DAG refs, code loci, and anchor text can be audited as result record-backed claims instead of untracked documentation drift.\n\nScope limit: Doctrine fact claim audit checks only public fixture fact counts, code-loci existence, anchor presence, DAG references, and synthetic volatile numeric claim binding cases. It is not a comprehension engine, does not establish a minimum read graph, does not export private doctrine, and excludes launch.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, validate with external result record outputs so the reader check does not churn tracked result records:\n\nA diagram view is generated for this module, and an atlas card links to it. Passing result records validate fact-count, code-locus, DAG-ref, numeric-claim, digest, and negative-case boundaries only. If copied source bodies drift, refresh the exact copy bundle through the owning lane before treating bundle red as a reader-page defect.\n\nNegative cases covered by the fixture manifest: dead_code_locus, dead_dag_ref, missing_code_locus, unbound_numeric_claim, wrong_fact_count.\n\nSource provenance is anchored by `examples/doctrine_fact_claim_audit/exported_doctrine_fact_claim_audit_bundle/source_module_manifest.json` and result records carry refs, digests, counts, verdicts, and scope boundaries only.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that doctrine fact assertions, code-locus refs, DAG refs, numeric claim bindings, copied source manifests, digest checks, anchor checks, secret-exclusion scans, metadata-only result records, and negative stale-claim cases are checked by the listed runtime witnesses.\n\nThis module may not claim doctrine comprehension, private doctrine export, minimum-read-graph proof, live launch-scope decision, hosted-public posture, source-file changes, candidate-axiom promotion, projection correctness beyond the listed witnesses, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThis module is the architecture-and-navigation contract specimen for turning current-state doctrine claims into auditable fact rows. The admitted mechanism, `mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit`, does not ask a model whether prose is true. It recomputes a bounded relation: declared fact count, code-locus anchors, route-DAG endpoints, volatile numeric claim bindings, source-module manifest anchors, and semantic negative cases must all agree with the copied public fixture basis before a result record can pass.\n\nThat relation is why the bundle binds the module to `concept.architecture_and_navigation_route_contract_bundle`. Architecture and navigation claims are only readable as doctrine when they can be traced through source rows, code loci, validator commands, and metadata-only result records. The bundle therefore treats the generated Mermaid and Atlas card as route projections of 15 resolved edges, not as independent proof that doctrine coverage is complete.\n\nThe principle edges are source-backed claim discipline, not decorative tags. `P-1` is exercised when the evaluator recomputes fixture truth rather than echoing declared labels. `P-2` is exercised by lowering the positive claim to the checker's strength: fact assertion, code-locus, DAG, numeric-claim, and manifest truth only. `P-7` is exercised by recording known unknowns without claiming the unmapped doctrine space is exhausted. `P-15` is exercised by keeping this Markdown, the structured source record, Mermaid, and Atlas below the bundle, source module, and validator result records.\n\nThe axiom bindings are likewise operational. `AX-1` requires a derivation before the page repeats a fact count or source claim. `AX-6` keeps the declared fixture domain open-world outside its explicit rows. `AX-7` makes failed preconditions typed blocking findings instead of meaningless green output. `AX-8` keeps public source refs, manifest digests, secret-exclusion status, and `body_in_receipt: false` attached as data moves from copied source bodies into result records and reader copy.\n\nThe proof consumer for this lattice relation is `tests/test_doctrine_fact_claim_audit.py`: its positive case, four direct mutation cases, semantic-negative-label override, and exported-bundle test prove that the mechanism is an executable claim-audit boundary. The fixture and bundle CLIs give the same boundary to a reader outside pytest; the corpus check proves only that the Markdown and generated structured source record still agree with the bundle, not that any new doctrine truth has been discovered.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 17198,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Documentation about a living system rots. A page states that there are forty-seven of something, or cites a function in a file, and both claims quietly go stale as the code moves underneath them. A reader cannot tell a current count from a number that was true once and never rechecked. This component exists to answer one question: which of a page's factual assertions can be re-derived from source right now, and which have become untracked drift? The approach treats a documentation claim like a cached value that needs an invalidation strategy. A bare number is not enough; the claim is admissible only when it is bound to a fact assertion that records how to recompute or revalidate the value.\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component borrows from provenance modeling, structured fact-check metadata, schema validation, and supply-chain attestation. Useful anchors include: W3C PROV, which models entities, activities, and agents so readers can assess the quality, reliability, and trustworthiness of derived information. Schema.org ClaimReview, as a web metadata pattern for recording a reviewed claim and its fact-checking context. JSON Schema, for declaring expected structure and rejecting malformed or incomplete claim records. SLSA provenance, for the software-supply-chain pattern of tracing artifacts back to source and build metadata. Microcosm borrows the provenance, claim-review, schema, and attestation sha\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism is a public fixture evaluator in src/microcosmcore/components/doctrinefactclaimaudit.py. The component declares a CrownJewelSpec with four required inputs: fact_assertions.json, factdag.json, numericclaims.json, and projection_protocol.json. The shared crown-jewel runner handles source-manifest validation, result record writing, negative-case execution, and scope limit attachment; this module supplies the domain evaluator and the semantic negative-case mutator. evaluate first loads the fact assertion table and compares expectedfactcount to the number of fact rows. Each fact must carry at least one code locus. The evaluator resolves every relative code-locus path agains\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate, validate with external result record outputs so the reader check does not churn tracked result records: A diagram view is generated for this module, and an atlas card links to it. Passing result records validate fact-count, code-locus, DAG-ref, numeric-claim, digest, and negative-case boundaries only. If copied source bodies drift, refresh the exact copy bundle through the owning lane before treating bundle red as a reader-page defect. Negative cases covered by the fixture manifest: deadcodelocus, deaddagref, missingcodelocus, unboundnumericclaim, wrongfactcount. Source provenance is anchored by examples/doctrinefactclaimaudit/exporteddoctrinefactclaimauditbundle/s\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that doctrine fact assertions, code-locus refs, DAG refs, numeric claim bindings, copied source manifests, digest checks, anchor checks, secret-exclusion scans, metadata-only result records, and negative stale-claim cases are checked by the listed runtime witnesses. This module may not claim doctrine comprehension, private doctrine export, minimum-read-graph proof, live launch-scope decision, hosted-public posture, source-file changes, candidate-axiom promotion, projection correctness beyond the listed witnesses, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "This module is the architecture-and-navigation contract specimen for turning current-state doctrine claims into auditable fact rows. The admitted mechanism, mechanism.doctrinefactclaimaudit.validatespublicdoctrinefactclaimaudit, does not ask a model whether prose is true. It recomputes a bounded relation: declared fact count, code-locus anchors, route-DAG endpoints, volatile numeric claim bindings, source-module manifest anchors, and semantic negative cases must all agree with the copied public fixture basis before a result record can pass. That relation is why the bundle binds the module to concept.architectureandnavigationroutecontract_bundle. Architecture and navigation claims are only r\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Subject: doctrinefactclaim_audit, with mechanism mechanism.doctrinefactclaimaudit.validatespublicdoctrinefactclaimaudit. Runtime locus: src/microcosmcore/components/doctrinefactclaimaudit.py, especially run, rundoctrinefactbundle, evaluate, evaluatenumericclaims, loadderivedfactmodule, EXPECTEDNEGATIVECASES, and scope_limit. The fixture checks an expected fact count, resolves declared code-locus paths, verifies required source anchors, rejects dead DAG references, and requires volatile numeric claim cases to be bound to fact assertions. The accepted positive result record reports three facts, three verified code loci, two DAG edges, two numeric claim cases, and one detected unbound numeric\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "Fixture CLI consumer: PYTHONPATH=src ../repo-python -m microcosmcore.components.doctrinefactclaimaudit run --input fixtures/firstwave/doctrinefactclaimaudit/input --out /tmp/microcosm-doctrine-fact-claim-audit/fixture --sign-off-out /tmp/microcosm-doctrine-fact-claim-audit/sign-off.json --card. Expected proof shape: status: pass, three fact rows, three verified code loci, two DAG edges, two numeric-claim cases, one detector case, zero blocking unbound numerics, five semantic negative cases, and bodyinreceipt: false. Exported bundle consumer: PYTHONPATH=src ../repo-python -m microcosmcore.components.doctrinefactclaimaudit run-doctrine-fact-bundle --input examples/doctrinefactclaimaudit/expor\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with papermodules/doctrinefactclaimaudit.json as the primary reference, then open this Markdown page as a reader guide to that record. Open standards/stdmicrocosmdoctrinefactclaim_audit.json for the standard, required witnesses, negative floor, denied authority, and result record contract. Open core/fixturemanifests/doctrinefactclaimaudit.fixture_manifest.json for fixture inputs, copied-body counts, durable result record refs, and source-open body omission rules. Open examples/doctrinefactclaimaudit/exporteddoctrinefactclaimauditbundle/sourcemodulemanifest.json before inspecting copied source modules; result records carry refs and digests, not copied source body text. Run the fixture\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-rot-detection",
       "title": "Claim-Rot Detection",
       "level": 2,
       "excerpt": "This component treats documentation claims like cached values that need an invalidation strategy. The failure mode is not only a wrong number; it is a volatile number embedded in current-state prose with no attached route for re-deriving it. The detector flags volatile numerics: a number near a countable noun inside a current-state section. Such a claim is admissible only when it is bound to a fact assertion that records how to recompute or revalidate the value. The same audit resolves every cited code locus on disk and checks that the quoted anchor is actually present, so stale file references and plausible-but-dead anchors are negative evidence rather than inert prose. The public fixture\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.doctrine_fact_claim_audit.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Facts[\"fact_assertions.json facts + expected_fact_count\"] --> Eval[\"evaluate\"] Dag[\"fact_dag.json edges\"] --> Eval Numerics[\"numeric_claims.json cases\"] --> Eval Manifest[\"source module manifest copied bodies\"] --> Eval Eval --> Count{\"declared fact count = table length?\"} Eval --> Loci{\"each code locus path on disk + anchor in body?\"} Eval --> DagRef{\"DAG endpoints are known fact ids?\"} Eval --> Bound{\"current-state numerics bound to a fact assertion section?\"} Count -->|mismatch| Block[\"typed blocking finding\"] Loci -->|missing path or anchor| Block DagRef -->|dead ref| Block Bound -->|unbound| Block Count -->|ok| Result record[\"metadata-only result record body_in_receipt: false\"] Loci -->|ok| Result record DagRef -->|ok| Result record Bound -->|ok| Result record Neg[\"evaluate_negative_case mutate fixture, rerun evaluator\"] --> Codes[\"expected stable error codes\"]",
       "source_hash": "sha256:d4f5857e4034b44a959b14c6fdcb830850cdda55e26da350ce853621d437ba33",
       "html_url": "docs/paper-modules.html#paper-module-doctrine-fact-claim-audit-diagram-1",
       "html_anchor": "paper-module-doctrine-fact-claim-audit-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/doctrine_fact_claim_audit.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "ClaimReview",
       "url": "https://schema.org/ClaimReview",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "JSON Schema",
       "url": "https://json-schema.org/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SLSA provenance",
       "url": "https://slsa.dev/spec/v1.2/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        },
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.executable_doctrine_grammar",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Executable Doctrine Grammar",
         "url": "paper-modules.html#paper-module-executable-doctrine-grammar"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "doctrine_fact_claim_audit",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Doctrine Fact Claim Audit",
         "url": "components.html#component-doctrine_fact_claim_audit"
        },
        {
         "id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public doctrine fact claim audit",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-7",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Track known unknowns without claiming the unknown is mapped",
         "url": "doctrine.html#dcard-p-7"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/doctrine_fact_claim_audit.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 18210
    },
    {
     "id": "paper_module.self_ignorance_coverage_ledger",
     "title": "Self-Ignorance Coverage Ledger",
     "relative_href": "docs/paper-modules.html#paper-module-self-ignorance-coverage-ledger",
     "read_href": "docs/paper-modules.html#paper-module-self-ignorance-coverage-ledger",
     "context_href": "docs/rules-and-ideas.html#paper-module-self-ignorance-coverage-ledger",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Self-Ignorance Coverage Ledger counts known coverage debt while refusing unknown-unknown or absence-proof claims.",
     "summary": "Self-Ignorance Coverage Ledger validates a public known-debt coverage fixture: declared Kind Atlas gaps, missing coverage categories, negative cases, source-open body imports, and scope limits. It records what the system knows it has not covered without claiming omniscience, absence proof, total search, source-file changes, public sharing, launch-scope decision, or whole-system correctness.",
     "authority_ceiling": "Known Kind Atlas coverage-debt projection only; no literal unknown-unknown omniscience, no absence proof, no total repository search proof, no source-file changes, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "abstract": "Self-Ignorance Coverage Ledger counts known coverage debt while refusing unknown-unknown or absence-proof claims.",
     "teleology": {
      "section_id": "",
      "text": "Self-Ignorance Coverage Ledger counts known coverage debt while refusing unknown-unknown or absence-proof claims.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nA navigation system that lists what it knows is easy to build. A system that can state, precisely, what it has not yet covered is harder, and it is the more honest signal to a cold reader. This component answers one question: for a declared set of Kind Atlas families, how many rows does the option surface expose that the generated System Atlas has not yet materialised?\n\nThe answer is a small debt vector, computed rather than asserted. For each selected kind the component recomputes the live Kind Atlas row count through `system.lib.kind_atlas.build_kind_atlas`, counts the entities the `build_system_atlas.py` graph has actually materialised for that kind, and reports the difference as known coverage debt. Concepts, mechanisms and standards are checked back to real source source files so the materialised set cannot be inflated with names that have no file behind them.\n\nThe unusual part is what the validator refuses. It will not accept a fixture that claims its unknown-unknowns are exhaustive: declaring `claims_unknown_unknowns_exhaustive` raises a finding rather than passing. The ledger reports a bounded count of gaps it can see and explicitly declines to claim there are no others. Known debt is treated as typed residual pressure, not as a completeness proof, and absence of a row is never read as proof that nothing is missing.\n\n###### Abstract\n\n`self_ignorance_coverage_ledger` is a public Microcosm Crown Jewel component that measures a narrow, source-grounded form of self-ignorance: known row-level coverage debt between live Kind Atlas option-surface counts and generated System Atlas materialization evidence. It recomputes the selected Kind Atlas families, derives materialized entity IDs from a `build_system_atlas.py` graph snapshot, source-validates graph-derived entity IDs, replays semantic negative cases, and emits metadata-only result records with scope boundaries.\n\nThe current exported bundle is a realness-rung R4 check when the source repo is available: live Kind Atlas counts are bound, the System Atlas graph slice is builder-bound, the live System Atlas graph is cross-checked, expected entity IDs are source-backed, and copied source source bodies are digest-bound through a manifest. The claim is only `known_kind_atlas_coverage_debt_projection_only`: it is not absence proof, unknown-unknown omniscience, total repository search proof, source-file changes, launch-scope decision, publishing-scope decision, private-system equivalence, provider affiliation, or whole-system correctness.\n\n###### Problem\n\nNavigation systems can overstate themselves in two opposite ways. A vague \"coverage is incomplete\" tells a cold reader nothing operational. A confident \"nothing else is missing\" is worse: it converts absence of evidence into evidence of absence. This component exists to occupy the narrow technical middle: for a declared finite domain of Kind Atlas families, compute the gap between what the option surface exposes and what the System Atlas graph has materialized.\n\nThe result is a self-ignorance ledger, not a universal discovery engine. Its positive output is a bounded debt vector. Its negative output is equally important: the validator must refuse fixtures that claim exhaustive unknown-unknown coverage, hand-author materialization counts, substitute entity IDs, use stale/baked expected IDs as authority, tamper with the System Atlas builder result record, or repair a copied-source manifest into a self-reference.\n\n###### Mechanism\n\nThe runtime locus is `src/microcosm_core/organs/self_ignorance_coverage_ledger.py`. The exported-bundle entrypoint is `run_self_ignorance_bundle`; the core evaluator is `evaluate`; the semantic negative-case replayer is `evaluate_negative_case`; the local scope limit is `AUTHORITY_CEILING`.\n\nThe evaluator consumes four public bundle files:\n\nInput Required semantics Main checks `kind_atlas_rows.json` Declared Kind Atlas families, expected entity IDs, known-debt floors, and absence policy. Recompute live row counts through `system.lib.kind_atlas.build_kind_atlas`; reject forbidden unknown-unknown exhaustiveness. `system_atlas_graph.json` Generated graph slice carrying materialized System Atlas entity IDs. Require non-empty entities and `generated_by == tools/meta/factory/build_system_atlas.py`; derive materialized IDs from graph rows. `materialized_entities.json` Declared materialization rows and snapshot metadata. Check declared counts against graph-derived counts; use graph-derived counts as authority. `projection_protocol.json` Result record for the System Atlas check and coverage scope. Require the exact coverage scope and a valid `build_system_atlas.py --check` result record or blocked-refresh result record.\n\nAlgorithmically, the component performs this loop:\n1. Load bundle inputs and the source-module manifest through the Crown Jewel common runner.\n2. Recompute selected Kind Atlas rows from the source repo when `system/lib/kind_atlas.py` is available.\n3. Load `system_atlas_graph.json`, require the System Atlas builder marker, and derive materialized IDs by kind.\n4. Cross-check the bundled graph slice against `state/system_atlas/system_atlas.graph.json` when the source repo is available.\n5. For concepts, mechanisms, and standards, verify that graph-derived expected IDs resolve to real source source files.\n6. Compute `known_coverage_debt_count = live_kind_atlas_row_count - graph_derived_materialized_count` by kind.\n7. Replay semantic negative cases from clean input copies instead of trusting declared error labels.\n8. Write result records with refs, counts, hashes, findings, realness evidence, and scope boundaries; copied body text stays out of result records.\n\nFor the current exported bundle, the public count vector is:\n\nKind Live Kind Atlas rows Graph-derived materialized entities Known debt `concepts` 41 30 11 `mechanisms` 36 28 8 `paper_modules` 225 220 5 `standards` 201 29 172 **Total** **503** **307** **196**\n\nThose numbers come from `examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle/kind_atlas_rows.json`, `materialized_entities.json`, and `system_atlas_graph.json`, and are proof-consuming snapshot facts. They are not stable doctrine constants; rerun the validator after Kind Atlas, System Atlas, or source manifests move.\n\n###### Projection Protocol Result record\n\n`projection_protocol.json` is the result record that prevents a static graph slice from masquerading as live authority. The accepted bundle must carry:\n\nField Accepted value Meaning `coverage_scope` `live_kind_atlas_vs_generated_system_atlas_materialization_snapshot` The domain is live Kind Atlas rows against generated System Atlas materialization. `system_atlas_check_command` `./repo-python tools/meta/factory/build_system_atlas.py --check` The refresh/check route is named, not implied. `system_atlas_check_status` `pass` or `blocked_source_inputs_changed_since_artifact_generation` A blocked refresh is admissible only when declared as such; it does not upgrade the snapshot. `system_atlas_refresh_blocked_by_active_source_claims` Boolean `body_in_receipt` `false` Result record fields carry metadata and verdicts, not copied source bodies.\n\nThe focused tests `test_self_ignorance_coverage_ledger_rejects_projection_scope_tamper` and `test_self_ignorance_coverage_ledger_rejects_system_atlas_receipt_tamper` are the proof consumers for this protocol.\n\n###### Mermaid Flow\n\nSource refs\n\nscope + build_system_atlas.py result record `projection_protocol.json` Source source files `concept/mechanism/standard ids` Manifest `source_module_manifest.json` `copied_non_secret_macro_body` Diagram source\n\n```text\nflowchart LR KA[\"Live Kind Atlas rows 503 selected rows\"] Graph[\"System Atlas graph slice 307 materialized entities\"] Proto[\"projection_protocol.json scope + build_system_atlas.py result record\"] Source[\"Source source files concept/mechanism/standard ids\"] Manifest[\"source_module_manifest.json copied_non_secret_macro_body\"] Eval[\"evaluate()\"] Neg[\"semantic negative-case replay\"] Debt[\"known debt vector 196 units\"] Result record[\"metadata-only result records counts, refs, hashes, scope boundaries\"] Ceiling[\"scope limit known debt projection only\"] KA --> Eval Graph --> Eval Proto --> Eval Source --> Eval Manifest --> Eval Eval --> Debt Eval --> Neg Debt --> Result record Neg --> Result record Result record --> Ceiling\n```\n\nThis diagram is the human proof path and must stay subordinate to the bundle and generated projection.\n\n###### Real-Good / Real-Bad / Perturbation Evidence\n\nThe positive case is `test_self_ignorance_coverage_ledger_projects_real_bundle_known_debt` plus the bundle route:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.self_ignorance_coverage_ledger run-self-ignorance-bundle --input examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle --out /tmp/microcosm-self-ignorance-coverage-ledger/bundle --card\n```\n\nThe accepted result must report status `pass`, known debt `196`, observed negative cases `forbidden_absence_inference` and `coverage_debt_mismatch`, `realness_rung: R4`, `live_kind_atlas_recompute_used: true`, `live_system_atlas_graph_crosscheck_used: true`, and source-module digest success.\n\nThe real-bad cases are not marketing examples; they are the contract. Treat a guard as validated only when the focused pytest route passes in the current checkout:\n\nEvidence class Test / mutation Required refusal Missing real graph `test_self_ignorance_static_fixture_blocks_without_real_graph` `CROWN_JEWEL_INPUT_MISSING` and `SELF_IGNORANCE_REAL_ATLAS_GRAPH_EMPTY`. Absence overclaim `test_self_ignorance_coverage_ledger_rejects_absence_omniscience` `SELF_IGNORANCE_FORBIDDEN_ABSENCE_INFERENCE`. Expected ID mismatch `test_self_ignorance_coverage_ledger_rejects_coverage_debt_mismatch` `SELF_IGNORANCE_EXPECTED_ENTITY_IDS_MISMATCH`. Baked IDs without graph authority `test_self_ignorance_coverage_ledger_rejects_baked_expected_ids_without_source` `SELF_IGNORANCE_EXPECTED_ENTITY_IDS_NOT_SOURCE_BACKED`; realness rank falls. Declared entity substitution `test_self_ignorance_coverage_ledger_rejects_declared_entity_id_substitution` Missing-from-graph and missing-from-expected mismatch rows. Count tamper `test_self_ignorance_coverage_ledger_rejects_materialized_count_tamper` `SELF_IGNORANCE_MATERIALIZATION_COUNT_NOT_GRAPH_DERIVED`. Graph materialization tamper `test_self_ignorance_coverage_ledger_rejects_graph_materialization_tamper` Expected-ID mismatch and changed debt vector. Graph builder tamper `test_self_ignorance_coverage_ledger_rejects_graph_builder_tamper` `SELF_IGNORANCE_ATLAS_GRAPH_BUILDER_MISMATCH`. Protocol scope/check tamper projection protocol tests Scope or check result record blocked; R4 cannot stand. Declared negative labels lie `test_self_ignorance_negative_cases_are_semantic_not_declared_labels` Semantic evaluator still finds the expected error codes. Copied source self-reference `test_self_ignorance_bundle_rejects_stale_copied_target_source_ref` `CROWN_JEWEL_SOURCE_SELF_REFERENCE_UNVERIFIED`. Copied source digest drift `test_self_ignorance_bundle_rejects_source_module_digest_mismatch` `CROWN_JEWEL_SOURCE_DIGEST_MISMATCH`.\n\nPerturbation evidence is `test_self_ignorance_coverage_debt_moves_with_materialized_entity_graph`: adding a real, source-backed standard entity moves the known-debt count from 196 to 195 and keeps the result passing. That proves the ledger is coupled to the graph-derived materialization set, not to a fixed prose number.\n\nThe unsourced-materialization guard target is `test_self_ignorance_coverage_ledger_rejects_coherent_fake_standard_entity`. Its intended refusal is `SELF_IGNORANCE_EXPECTED_ENTITY_ID_SOURCE_MISSING`, but the paper must not count that guard as validated unless the focused pytest route currently blocks the fake standard entity. If it regresses, lower the source-validation claim to the passing guards above and route the source/test issue through the work log before completion.\n\n###### Source-Backed Concept / Mechanism / Law Links\n\nLink Source-backed support Claim supported Component `self_ignorance_coverage_ledger` `organs/self_ignorance_coverage_ledger.json` and `core/organ_atlas.json::organs[51:self_ignorance_coverage_ledger]` This is an accepted public component with the named runtime locus and paper-module drilldown. Mechanism `mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger` `core/mechanism_sources.json` and `mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json` The mechanism validates known Kind Atlas coverage-debt fixtures while refusing overclaims. Concept `concept.architecture_and_navigation_route_contract_bundle` `concepts/concept.architecture_and_navigation_route_contract_bundle.json` The component is part of the executable architecture/navigation route-contract family. Principle `P-2` `principles/P-2.json` Claim strength must be no stronger than the named checker and result record. Principle `P-7` `principles/P-7.json` Known gaps remain typed residual pressure, not completeness claims. Principle `P-11` `principles/P-11.json` Freshness-sensitive claims require dated result records and refresh routes. Principle `P-15` `principles/P-15.json` Generated projections stay below source registries and result records. Axiom `AX-6` `axioms/AX-6.json` Closed-world coverage is valid only inside declared finite domains; absence is not negation. Axiom `AX-7` `axioms/AX-7.json` Partial computation must totalize as pass or typed refusal with evidence. Axiom `AX-8` `axioms/AX-8.json` Provenance and labels must survive source-to-projection and body-import boundaries. Axiom `AX-10` `axioms/AX-10.json` Live-state counts require freshness, basis, and rederive contracts.\n\n`P-19` appears in the component atlas row as an adjacent governing principle for residual classification, but it is not part of the paper-module bundle's `principle_refs`. Treat it as component-level context unless the bundle is later updated through the JSON authority lane.\n\n###### Evidence Contract\n\nThe fixture contract lives at `core/fixture_manifests/self_ignorance_coverage_ledger.fixture_manifest.json`. The active standard lives at `standards/std_microcosm_self_ignorance_coverage_ledger.json`. Together they admit public synthetic fixtures, copied source source bodies, hashes, anchors, validator refs, and generated result records. They forbid private repo bodies outside copied public fixtures, model-output data bodies, account secret or account-bound material, operator private notes, raw thread bodies, and result record body text for copied material.\n\nThe exported bundle manifest at `examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle/source_module_manifest.json` currently carries one source module: `tools/meta/factory/build_system_atlas.py`, copied into the bundle under `source_modules/tools/meta/factory/build_system_atlas.py`. The manifest records the source/target relation, digests, line count, required anchors `System Atlas` and `kind`, replacements, and the boundary that transform result records record hashes and replacement classes rather than source bodies.\n\nThe standard's result record contract requires a real runtime result record, a source-module manifest for the exported bundle, a secret-exclusion scan, at least the `forbidden_absence_inference` negative case, and `body_in_receipt: false`. Synthetic result records are not accepted as stand-ins for this component's authority.\n\n###### Reader Evidence Routing\n\nRead this module in this order:\n1. `paper_modules/self_ignorance_coverage_ledger.json` for the generated paper-module projection and relationship edges.\n2. `core/paper_module_capsules.json::paper_modules[49:paper_module.self_ignorance_coverage_ledger]` for source authority.\n3. `standards/std_microcosm_self_ignorance_coverage_ledger.json` for the public/private boundary, validator contract, result record expectations, and scope limit.\n4. `src/microcosm_core/organs/self_ignorance_coverage_ledger.py` for `evaluate`, `evaluate_negative_case`, `run`, and `run_self_ignorance_bundle`.\n5. `examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle/` for the current public evidence bundle.\n6. `tests/test_self_ignorance_coverage_ledger.py` for proof consumers, bad cases, and perturbation cases.\n\nTreat negative cases as part of the positive claim. The paper should cite only guards that the focused validation route blocks in the current checkout. The validated guard set must include forbidden absence inference, coverage mismatch, baked expected IDs without source, declared entity substitution, materialized count tamper, graph materialization tamper, graph builder tamper, projection protocol tamper, stale source self-reference, and digest mismatch. Fake-but-coherent standard entities remain a required unsourced-materialization guard target, but not an observed passing guard unless the focused test route blocks that perturbation.\n\n###### Prior Art Grounding\n\nThe nearest ordinary analogue is software coverage measurement: coverage tools report what was exercised or missed over a declared surface, not all possible missing behaviors. `coverage.py` is useful as a reference pattern for bounded observed coverage over a source set.\n\nThe health-signal side is adjacent to automated repository checks such as OpenSSF Scorecard: bounded checks can produce useful risk signals without becoming complete security or quality proof. Microcosm applies that pattern to navigation coverage debt and keeps the scope boundary in the same result record frame as the count.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, run:\n\n```text\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_self_ignorance_coverage_ledger.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check\n```\n\nUse a throwaway result record directory for manual bundle checks:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.self_ignorance_coverage_ledger run-self-ignorance-bundle --input examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle --out /tmp/microcosm-self-ignorance-coverage-ledger/bundle --card\n```\n\nPassing validation proves that the declared public bundle, source-module manifest, negative cases, and paper-module corpus remain coherent. It does not establish freshness beyond the checked snapshot or authorize generated projection edits by hand.\n\n###### Scope boundary\n\n###### Limitations\n\nThis component is intentionally closed-world over selected artifact kinds. It does not discover arbitrary missing files, prove that all System Atlas materialization gaps are known, or search every repo surface. It counts row-level debt over selected Kind Atlas families and only within the graph/materialization/protocol evidence supplied to the bundle.\n\nFreshness is conditional. `projection_protocol.json` can record that a System Atlas refresh was blocked by active source claims. In that state, the component reports a bounded snapshot plus a refresh boundary; it does not silently upgrade stale generated materialization into live truth.\n\nSource-open evidence is public-safe, not public-total. The bundle may carry copied source bodies with transformed non-public paths, hashes, line counts, and anchors. That does not export source notes, model-output data bodies, account or browser state, account secrets, browser UI state, or private source-root equivalence.\n\nThe current generated paper-module JSON has resolved bundle edges and `relationships.unpopulated_selective_relations: []`. That is a discoverability and lattice-coherence statement. It is not implementation-correctness proof, launch-scope decision, provider authority, or proof that every related concept/principle/axiom has full empirical support.\n\n###### Scope limit\n\nThe scope limit is narrow. Self-Ignorance Coverage Ledger can claim that public fixture evidence, graph-derived materialization rows, live Kind Atlas recomputation, source-backed expected entity IDs, copied source evidence, semantic negative cases, and result records make declared Kind Atlas coverage debt visible, recomputable, and checkable.\n\nIt cannot claim literal unknown-unknown omniscience, absence proof, total repository search proof, source-file changes, live Atlas mutation, private-source export, launch-scope decision, publishing-scope decision, provider affiliation, product readiness, or whole-system correctness. The active v2 standard status is a source JSON contract state only and does not expand the scope limit.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 20798,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A navigation system that lists what it knows is easy to build. A system that can state, precisely, what it has not yet covered is harder, and it is the more honest signal to a cold reader. This component answers one question: for a declared set of Kind Atlas families, how many rows does the option surface expose that the generated System Atlas has not yet materialised? The answer is a small debt vector, computed rather than asserted. For each selected kind the component recomputes the live Kind Atlas row count through system.lib.kindatlas.buildkindatlas, counts the entities the buildsystem_atlas.py graph has actually materialised for that kind, and reports the difference as known coverage d\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "selfignorancecoverageledger is a public Microcosm Crown Jewel component that measures a narrow, source-grounded form of self-ignorance: known row-level coverage debt between live Kind Atlas option-surface counts and generated System Atlas materialization evidence. It recomputes the selected Kind Atlas families, derives materialized entity IDs from a buildsystem_atlas.py graph snapshot, source-validates graph-derived entity IDs, replays semantic negative cases, and emits metadata-only result records with scope boundaries. The current exported bundle is a realness-rung R4 check when the source repo is available: live Kind Atlas counts are bound, the System Atlas graph slice is builder-bound,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "problem",
       "title": "Problem",
       "level": 2,
       "excerpt": "Navigation systems can overstate themselves in two opposite ways. A vague \"coverage is incomplete\" tells a cold reader nothing operational. A confident \"nothing else is missing\" is worse: it converts absence of evidence into evidence of absence. This component exists to occupy the narrow technical middle: for a declared finite domain of Kind Atlas families, compute the gap between what the option surface exposes and what the System Atlas graph has materialized. The result is a self-ignorance ledger, not a universal discovery engine. Its positive output is a bounded debt vector. Its negative output is equally important: the validator must refuse fixtures that claim exhaustive unknown-unknown\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism",
       "title": "Mechanism",
       "level": 2,
       "excerpt": "The runtime locus is src/microcosmcore/components/selfignorancecoverageledger.py. The exported-bundle entrypoint is runselfignorancebundle; the core evaluator is evaluate; the semantic negative-case replayer is evaluatenegativecase; the local scope limit is AUTHORITYCEILING. The evaluator consumes four public bundle files: Algorithmically, the component performs this loop: Load bundle inputs and the source-module manifest through the Crown Jewel common runner. Recompute selected Kind Atlas rows from the source repo when system/lib/kind_atlas.py is available. Load systematlasgraph.json, require the System Atlas builder marker, and derive materialized IDs by kind. Cross-check the bundled grap\u2026",
       "block_kinds": [
        "list",
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "projection-protocol-receipt",
       "title": "Projection Protocol Result record",
       "level": 2,
       "excerpt": "projection_protocol.json is the result record that prevents a static graph slice from masquerading as live authority. The accepted bundle must carry: The focused tests testselfignorancecoverageledgerrejectsprojectionscopetamper and testselfignorancecoverageledgerrejectssystematlasreceipt_tamper are the proof consumers for this protocol.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "mermaid-flow",
       "title": "Mermaid Flow",
       "level": 2,
       "excerpt": "This diagram is the human proof path and must stay subordinate to the bundle and generated projection.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "real-good-real-bad-perturbation-evidence",
       "title": "Real-Good / Real-Bad / Perturbation Evidence",
       "level": 2,
       "excerpt": "The positive case is testselfignorancecoverageledgerprojectsrealbundleknown_debt plus the bundle route: The accepted result must report status pass, known debt 196, observed negative cases forbiddenabsenceinference and coveragedebtmismatch, realnessrung: R4, livekindatlasrecomputeused: true, livesystematlasgraphcrosscheckused: true, and source-module digest success. The real-bad cases are not marketing examples; they are the contract. Treat a guard as validated only when the focused pytest route passes in the current checkout: Perturbation evidence is testselfignorancecoveragedebtmoveswithmaterializedentity_graph: adding a real, source-backed standard entity moves the known-debt count from\u2026",
       "block_kinds": [
        "code",
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "source-backed-concept-mechanism-law-links",
       "title": "Source-Backed Concept / Mechanism / Law Links",
       "level": 2,
       "excerpt": "P-19 appears in the component atlas row as an adjacent governing principle for residual classification, but it is not part of the paper-module bundle's principle_refs. Treat it as component-level context unless the bundle is later updated through the JSON authority lane.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "evidence-contract",
       "title": "Evidence Contract",
       "level": 2,
       "excerpt": "The fixture contract lives at core/fixturemanifests/selfignorancecoverageledger.fixturemanifest.json. The active standard lives at standards/stdmicrocosmselfignorancecoverageledger.json. Together they admit public synthetic fixtures, copied source source bodies, hashes, anchors, validator refs, and generated result records. They forbid private repo bodies outside copied public fixtures, model-output data bodies, account secret or account-bound material, operator private notes, raw thread bodies, and result record body text for copied material. The exported bundle manifest at examples/selfignorancecoverageledger/exportedselfignorancecoverageledgerbundle/sourcemodulemanifest.json currently ca\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module in this order: papermodules/selfignorancecoverageledger.json for the generated paper-module projection and relationship edges. core/papermodulecapsules.json::papermodules[49:papermodule.selfignorancecoverage_ledger] for source authority. standards/stdmicrocosmselfignorancecoverage_ledger.json for the public/private boundary, validator contract, result record expectations, and scope limit. src/microcosmcore/components/selfignorancecoverageledger.py for evaluate, evaluatenegativecase, run, and runselfignorance_bundle. examples/selfignorancecoverageledger/exportedselfignorancecoverageledgerbundle/ for the current public evidence bundle. tests/testselfignorancecoverageledger.py\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate, run: Use a throwaway result record directory for manual bundle checks: Passing validation proves that the declared public bundle, source-module manifest, negative cases, and paper-module corpus remain coherent. It does not establish freshness beyond the checked snapshot or authorize generated projection edits by hand.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "This component is intentionally closed-world over selected artifact kinds. It does not discover arbitrary missing files, prove that all System Atlas materialization gaps are known, or search every repo surface. It counts row-level debt over selected Kind Atlas families and only within the graph/materialization/protocol evidence supplied to the bundle. Freshness is conditional. projection_protocol.json can record that a System Atlas refresh was blocked by active source claims. In that state, the component reports a bounded snapshot plus a refresh boundary; it does not silently upgrade stale generated materialization into live truth. Source-open evidence is public-safe, not public-total. The\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The scope limit is narrow. Self-Ignorance Coverage Ledger can claim that public fixture evidence, graph-derived materialization rows, live Kind Atlas recomputation, source-backed expected entity IDs, copied source evidence, semantic negative cases, and result records make declared Kind Atlas coverage debt visible, recomputable, and checkable. It cannot claim literal unknown-unknown omniscience, absence proof, total repository search proof, source-file changes, live Atlas mutation, private-source export, launch-scope decision, public sharing decision, provider affiliation, product readiness, or whole-system correctness. The active v2 standard status is a source JSON contract state only and d\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The nearest ordinary analogue is software coverage measurement: coverage tools report what was exercised or missed over a declared surface, not all possible missing behaviors. coverage.py is useful as a reference pattern for bounded observed coverage over a source set. The health-signal side is adjacent to automated repository checks such as OpenSSF Scorecard: bounded checks can produce useful risk signals without becoming complete security or quality proof. Microcosm applies that pattern to navigation coverage debt and keeps the scope boundary in the same result record frame as the count.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.self_ignorance_coverage_ledger.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR KA[\"Live Kind Atlas rows 503 selected rows\"] Graph[\"System Atlas graph slice 307 materialized entities\"] Proto[\"projection_protocol.json scope + build_system_atlas.py result record\"] Source[\"Source source files concept/mechanism/standard ids\"] Manifest[\"source_module_manifest.json copied_non_secret_macro_body\"] Eval[\"evaluate()\"] Neg[\"semantic negative-case replay\"] Debt[\"known debt vector 196 units\"] Result record[\"metadata-only result records counts, refs, hashes, scope boundaries\"] Ceiling[\"scope limit known debt projection only\"] KA --> Eval Graph --> Eval Proto --> Eval Source --> Eval Manifest --> Eval Eval --> Debt Eval --> Neg Debt --> Result record Neg --> Result record Result record --> Ceiling",
       "source_hash": "sha256:7cf316b0fbd9f77a37d11eb5d9720fbdad90f3a8c9ef853388af9971eb46fdde",
       "html_url": "docs/paper-modules.html#paper-module-self-ignorance-coverage-ledger-diagram-1",
       "html_anchor": "paper-module-self-ignorance-coverage-ledger-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/self_ignorance_coverage_ledger.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.doctrine_fact_claim_audit",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Doctrine Fact Claim Audit",
         "url": "paper-modules.html#paper-module-doctrine-fact-claim-audit"
        },
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        },
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "self_ignorance_coverage_ledger",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Self Ignorance Coverage Ledger",
         "url": "components.html#component-self_ignorance_coverage_ledger"
        },
        {
         "id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public self ignorance coverage ledger",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-7",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Track known unknowns without claiming the unknown is mapped",
         "url": "doctrine.html#dcard-p-7"
        },
        {
         "id": "P-11",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind volatile facts to refresh routes",
         "url": "doctrine.html#dcard-p-11"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/self_ignorance_coverage_ledger.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 21704
    },
    {
     "id": "paper_module.tool_server_pressure_inventory",
     "title": "Tool Server Pressure Inventory",
     "relative_href": "docs/paper-modules.html#paper-module-tool-server-pressure-inventory",
     "read_href": "docs/paper-modules.html#paper-module-tool-server-pressure-inventory",
     "context_href": "docs/rules-and-ideas.html#paper-module-tool-server-pressure-inventory",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Tool Server Pressure Inventory validates public pressure-inventory fixtures without reading or mutating live host process state.",
     "summary": "Tool Server Pressure Inventory validates the public tool-server pressure membrane: synthetic process rows, active-owner descendants, over-budget owner launch requests, redaction findings, source-module digests, metadata-only result records, negative cases, and scope limits. It treats pressure inventory rows as fixture evidence, not live process control, process signalling, host mutation, provider authority, launch-scope decision, public sharing, or whole-system correctness.",
     "authority_ceiling": "Declared public helper-process pressure inventory fixture and source-module digest evidence only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, private-data equivalence, publishing-scope decision, or whole-system correctness.",
     "abstract": "Tool Server Pressure Inventory validates public pressure-inventory fixtures without reading or mutating live host process state.",
     "teleology": {
      "section_id": "",
      "text": "Tool Server Pressure Inventory validates public pressure-inventory fixtures without reading or mutating live host process state.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`tool_server_pressure_inventory` is the public read-only import of the source helper-process pressure inventory pattern from `tools/meta/control/orphan_reaper.py`. It validates the classifier without exposing live host state: fixtures inject a synthetic ps-shaped process table, synthetic helper-kind policy rows, and a synthetic owner-status taxonomy.\n\nThe accepted component keeps the load-bearing mechanism:\n- parse helper processes from ps-shaped rows\n- classify helper kind and owner status\n- distinguish detached orphan candidates from active-owner descendants\n- emit launch requests for over-budget active owners\n- keep all rows digest-only through `command_hash`\n\nThe exported bundle carries a source module manifest plus a source-faithful refactor body under `source_modules/tools/meta/control/`. That manifest records the source source ref, target digest, source digest, relation, material class, and required anchors. Result records carry refs, hashes, counts, and verdicts only; they do not inline the copied/refactored body.\n\nThe component rejects seven boundary failures:\n- active-owner descendants marked as safe-close candidates\n- unknown-owner processes marked as safe-close candidates\n- detached processes younger than the minimum age marked safe-close\n- process-signal results on the public surface\n- live command bodies instead of digest-only rows\n- absolute host paths\n- active-owner launch requests that overclaim kill or termination\n\n###### Purpose\n\nLong-running agent sessions leave helper processes behind: MCP servers, dev servers, keepalives. Over time these accumulate and the host slows down. The obvious fix is a reaper that walks the process table and kills stale helpers, and the source tool this component is ported from does exactly that. But a reaper is dangerous. The hard case is telling a genuinely abandoned process apart from a helper that a live session is still using. Kill the wrong one and you break the work in flight.\n\nThis component answers a single question: given a process table, which helper processes are safe to close, and which must be left alone because a live owner still depends on them? It does so by reconstructing each process's owner chain. A helper whose parent is `launchd` (`ppid == 1`) has been detached from any session and is a candidate. A helper that still traces back through a live agent session is not. The decision is deliberately narrow: a process is a safe-close candidate only when it is detached, its kind is on an allowlist, and it has been idle past a minimum age. Everything else routes to \"needs an owner check\" or \"keep\".\n\nWhat is unusual is the second half of the design. When an active owner is over its helper budget, the component does not propose a kill. It emits a launch *request*: a row that asks the owning session to launch or reuse its own lease. The inventory is explicitly not a kill list. The central invariant, enforced by an audit pass over the component's own output, is that an active-owner descendant can never become a safe-close candidate.\n\nThe public version keeps that classifier and that invariant but removes every actuator. There is no `os.kill`, no signal, no live `ps` call. Input is synthetic process text from a fixture, rows carry a `command_hash` rather than a command line, and a redaction guard rejects any fixture that smuggles an absolute path, a live command body, or a process-signal claim onto the public surface. The result is the safety reasoning of a reaper presented as a read-only validator, with the part that could actually harm a host left out.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR Fixture[\"Synthetic pressure fixture process_table, pressure_policy, owner_classes\"] Classifier[\"Classify helper kind, walk owner chain (up to 8 hops), hash command to command_hash\"] Owner{\"Owner status?\"} Detached[\"Detached orphan ppid == 1\"] Keep[\"Active owner or keep runtime\"] SafeClose[\"candidate_safe_close only if allowlisted and age >= min\"] Check[\"requires_owner_check or keep\"] launch[\"Over-budget owner: launch REQUEST, never a kill\"] Negative[\"Boundary failures unsafe safe-close, command leak, process signal, absolute path, launch overclaim\"] Source[\"Source manifest public refactor digest + anchors\"] Result records[\"metadata-only result records result, board, validation, fixture sign-off\"] Fixture --> Classifier Classifier --> Owner Owner --> Detached Owner --> Keep Detached --> SafeClose Detached --> Check Keep --> Check Keep --> launch Classifier --> Negative SafeClose --> Result records Check --> Result records launch --> Result records Negative --> Result records Source --> Result records\n```\n\n###### Technical Mechanism\n\nThe runtime mechanism is an actuatorless port of the read-only pressure path in `tools/meta/control/orphan_reaper.py`. The component receives injected synthetic `ps_text` plus `pressure_policy.json` and `owner_classes.json`; it never shells out to `ps`, imports process-control modules, or sends signals. `_parse_process_rows` normalizes process rows, `_process_kind` maps command tokens to helper kinds, and `_owner_status_for_process` walks parent links up to eight hops to separate `launchd_detached` helpers from active owner chains and keep runtimes.\n\nThe decision law is deliberately narrow. `_inventory_owner_and_decision` emits `candidate_safe_close` only when a helper is detached (`ppid == 1`), its kind is allowlisted, and its age exceeds the configured threshold. Active-owner chains, unknown parents, young detached helpers, and keep runtimes route to `requires_owner_check` or `keep`. Over-budget active-owner groups are summarized by `_active_owner_pressure_groups`, but the emitted `helper_owner_release_request_v1` can only ask the owner to launch the helper; it cannot claim that Microcosm killed, terminated, or safely closed a process.\n\nThe source-open body floor and the public result records enforce the same membrane. `_source_module_manifest_result` verifies the exported `orphan_reaper_pressure_inventory_public_refactor` body, its `source_faithful_public_refactor` relation, target digest, and required anchors. `_redaction_findings` rejects command previews, absolute host paths, and process-signal claims before result record writing. The result is a pressure classifier with executable evidence and a hard no-actuator boundary, not a live host cleanup tool.\n\n###### Reader Evidence Routing\n\nRead the positive fixture as pressure-inventory evidence, not host process control. The fixture supplies `process_table.json`, `pressure_policy.json`, and `owner_classes.json`; the component classifies helper kind, owner status, detached safe-close eligibility, active-owner descendants, keep runtimes, and over-budget active-owner groups. Active-owner pressure becomes a launch request row, not a kill, terminate, or signal action.\n\nRead the negative cases as the scope limit. The required failures are `active_owner_kill_candidate.json`, `unknown_owner_kill.json`, `premature_safe_close.json`, `process_signal_sent.json`, `command_preview_leak.json`, `absolute_path_leak.json`, and `owner_release_overclaim.json`. They prove the public surface rejects unsafe safe-close candidates, live command bodies, absolute host paths, process-signal claims, and launch-overclaim language.\n\nRead source-open evidence through the source module manifest. The exported bundle includes one copied public refactor body at `examples/tool_server_pressure_inventory/exported_tool_server_pressure_inventory_bundle/source_modules/tools/meta/control/orphan_reaper_pressure_inventory.py`. The manifest binds source and target digests, declares `source_faithful_public_refactor`, requires anchors such as `build_tool_server_pressure_inventory`, `build_pressure_hygiene_relief_receipt`, `no_process_signal_sent`, and `request_owner_release`, and keeps `body_in_receipt` and `body_text_in_receipt` false.\n\n###### Named Proof Consumers\n- Runtime fixture consumer: `microcosm_core.organs.tool_server_pressure_inventory run` consumes the synthetic pressure fixture and writes the result, board, validation result record, and sign-off result record.\n- Source-body consumer: `microcosm_core.organs.tool_server_pressure_inventory run-pressure-bundle` consumes the exported source-module bundle and blocks on missing manifests, target-ref mismatch, digest mismatch, unsafe body classes, or redaction hits.\n- Focused pytest consumer: `tests/test_tool_server_pressure_inventory.py` asserts every expected negative case, verifies that active-owner descendants are never safe-close candidates, checks owner-launch requests instead of kill actions, scans the component and public refactor AST for process-control imports or `.kill(...)`, validates target-ref/digest parity, and checks compact card omission result records.\n- Scope limit consumer: the standard `standards/std_microcosm_tool_server_pressure_inventory.json` and the scope limit in the component require `process_signal_authority`, `live_process_table_read_authorized`, `host_mutation_authorized`, `release_authorized`, `provider_calls_authorized`, and `whole_system_correctness_claim` to remain false.\n\n###### Prior Art Grounding\n\nThis component draws on process-inventory, tool-server, and owner-reference patterns. `psutil.process_iter()` is a common API for iterating over process metadata without shelling out to ad hoc `ps` parsing. Kubernetes garbage collection uses owner references to distinguish objects that may be collected from objects still owned by live controllers. The Model Context Protocol's tool-server model gives the local \"server exposes callable tools\" shape. The Microcosm version keeps the result deliberately weaker: synthetic rows are classified for pressure and safe-close eligibility, but the component does not read live host state or send signals.\n\nPrior-art anchors:\n- psutil process iteration: https://psutil.readthedocs.io/en/latest/#psutil.process_iter\n- Kubernetes owner-reference garbage collection: https://kubernetes.io/docs/concepts/architecture/garbage-collection/\n- Model Context Protocol tool servers: https://modelcontextprotocol.io/docs/concepts/tools\n\nScope limit: this is projection and validation only. It does not read the live process table, signal processes, mutate host state, include launch operations, use external model services, export private account or browser state, or prove whole-system correctness.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, validate with result records under `/tmp`:\n\nPassing result records prove synthetic inventory classification and source-manifest shape only; they do not read live host process state, send process signals, mutate host state, authorize cleanup, use external model services, or certify launch-scope decision. A diagram view and an atlas entry are generated for this module from the same source row.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can claim that synthetic process-table fixtures, owner-status policy rows, digest-only command rows, boundary-failure cases, source manifest evidence, and metadata-only result records validate a public tool-server pressure classifier. It cannot claim live host inspection, process signaling, safe cleanup authority, host-state mutation, provider authority, launch-scope decision, private account or session export, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe generated row binds this module to mechanism `mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory`, concept `concept.import_projection_and_drift_control_bundle`, principles `P-2`, `P-4`, `P-6`, and `P-9`, axioms `AX-3`, `AX-5`, `AX-7`, and `AX-8`, and the runtime code locus `src/microcosm_core/organs/tool_server_pressure_inventory.py`. Those edges make the module a Microcosm import-and-validation proof: source-open digest evidence is allowed, while private host state, process control, provider authority, launch-scope decision, and whole-system correctness stay outside the claim.\n\nThe dependency edges to `mission_transaction_work_spine`, `provider_context_recipe_budget`, and `world_model_projection_drift_control_room` define the reader route. This module can explain how a helper-pressure row becomes a metadata-only result record and an owner-launch request, but it must borrow mission-landing, provider-budget, and projection-drift boundaries from those sibling modules before any broader operational or launch claim is made.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12488,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Long-running agent sessions leave helper processes behind: MCP servers, dev servers, keepalives. Over time these accumulate and the host slows down. The obvious fix is a reaper that walks the process table and kills stale helpers, and the source tool this component is ported from does exactly that. But a reaper is dangerous. The hard case is telling a genuinely abandoned process apart from a helper that a live session is still using. Kill the wrong one and you break the work in flight. This component answers a single question: given a process table, which helper processes are safe to close, and which must be left alone because a live owner still depends on them? It does so by reconstructing\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism is an actuatorless port of the read-only pressure path in tools/meta/control/orphan_reaper.py. The component receives injected synthetic pstext plus pressurepolicy.json and owner_classes.json; it never shells out to ps, imports process-control modules, or sends signals. parseprocess_rows normalizes process rows, processkind maps command tokens to helper kinds, and ownerstatusforprocess walks parent links up to eight hops to separate launchd_detached helpers from active owner chains and keep runtimes. The decision law is deliberately narrow. inventoryowneranddecision emits candidatesafeclose only when a helper is detached (ppid == 1), its kind is allowlisted, and its ag\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The generated row binds this module to mechanism mechanism.toolserverpressureinventory.validatespublictoolserverpressureinventory, concept concept.importprojectionanddriftcontrol_bundle, principles P-2, P-4, P-6, and P-9, axioms AX-3, AX-5, AX-7, and AX-8, and the runtime code locus src/microcosmcore/components/toolserverpressureinventory.py. Those edges make the module a Microcosm import-and-validation proof: source-open digest evidence is allowed, while private host state, process control, provider authority, launch-scope decision, and whole-system correctness stay outside the claim. The dependency edges to missiontransactionwork_spine, providercontextrecipe_budget, and worldmodelprojecti\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module can claim that synthetic process-table fixtures, owner-status policy rows, digest-only command rows, boundary-failure cases, source manifest evidence, and metadata-only result records validate a public tool-server pressure classifier. It cannot claim live host inspection, process signaling, safe cleanup authority, host-state mutation, provider authority, launch-scope decision, private account or session export, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read the positive fixture as pressure-inventory evidence, not host process control. The fixture supplies processtable.json, pressurepolicy.json, and owner_classes.json; the component classifies helper kind, owner status, detached safe-close eligibility, active-owner descendants, keep runtimes, and over-budget active-owner groups. Active-owner pressure becomes a launch request row, not a kill, terminate, or signal action. Read the negative cases as the scope limit. The required failures are activeownerkillcandidate.json, unknownowner_kill.json, prematuresafeclose.json, processsignalsent.json, commandpreviewleak.json, absolutepathleak.json, and ownerreleaseoverclaim.json. They prove the publi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "Runtime fixture consumer: microcosmcore.components.toolserverpressureinventory run consumes the synthetic pressure fixture and writes the result, board, validation result record, and sign-off result record. Source-body consumer: microcosmcore.components.toolserverpressureinventory run-pressure-bundle consumes the exported source-module bundle and blocks on missing manifests, target-ref mismatch, digest mismatch, unsafe body classes, or redaction hits. Focused pytest consumer: tests/testtoolserverpressureinventory.py asserts every expected negative case, verifies that active-owner descendants are never safe-close candidates, checks owner-launch requests instead of kill actions, scans the com\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component draws on process-inventory, tool-server, and owner-reference patterns. psutil.process_iter() is a common API for iterating over process metadata without shelling out to ad hoc ps parsing. Kubernetes garbage collection uses owner references to distinguish objects that may be collected from objects still owned by live controllers. The Model Context Protocol's tool-server model gives the local \"server exposes callable tools\" shape. The Microcosm version keeps the result deliberately weaker: synthetic rows are classified for pressure and safe-close eligibility, but the component does not read live host state or send signals. Prior-art anchors: psutil process iteration: https://ps\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate, validate with result records under /tmp: Passing result records prove synthetic inventory classification and source-manifest shape only; they do not read live host process state, send process signals, mutate host state, authorize cleanup, use external model services, or certify launch readiness. A diagram view and an atlas entry are generated for this module from the same source row.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.tool_server_pressure_inventory.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Fixture[\"Synthetic pressure fixture process_table, pressure_policy, owner_classes\"] Classifier[\"Classify helper kind, walk owner chain (up to 8 hops), hash command to command_hash\"] Owner{\"Owner status?\"} Detached[\"Detached orphan ppid == 1\"] Keep[\"Active owner or keep runtime\"] SafeClose[\"candidate_safe_close only if allowlisted and age >= min\"] Check[\"requires_owner_check or keep\"] launch[\"Over-budget owner: launch REQUEST, never a kill\"] Negative[\"Boundary failures unsafe safe-close, command leak, process signal, absolute path, launch overclaim\"] Source[\"Source manifest public refactor digest + anchors\"] Result records[\"metadata-only result records result, board, validation, fixture sign-off\"] Fixture --> Classifier Classifier --> Owner Owner --> Detached Owner --> Keep Detached --> SafeClose Detached --> Check Keep --> Check Keep --> launch Classifier --> Negative SafeClose --> Result records Check --> Result records launch --> Result records Negative --> Result records Source --> Result records",
       "source_hash": "sha256:b4217e2ab162bd24f55837b837186b1721eb085944e138cfa1de5519704c37b1",
       "html_url": "docs/paper-modules.html#paper-module-tool-server-pressure-inventory-diagram-1",
       "html_anchor": "paper-module-tool-server-pressure-inventory-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tool_server_pressure_inventory.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-3",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Authority by derivation, not possession",
         "url": "doctrine.html#dcard-ax-3"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        },
        {
         "id": "paper_module.provider_context_recipe_budget",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Provider Context Recipe Budget",
         "url": "paper-modules.html#paper-module-provider-context-recipe-budget"
        },
        {
         "id": "paper_module.world_model_projection_drift_control_room",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "World-Model Projection Drift Control Room",
         "url": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "tool_server_pressure_inventory",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Tool Server Pressure Inventory",
         "url": "components.html#component-tool_server_pressure_inventory"
        },
        {
         "id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public tool server pressure inventory",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-4",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Possession is not permission",
         "url": "doctrine.html#dcard-p-4"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tool_server_pressure_inventory.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 13540
    },
    {
     "id": "paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "title": "Mechanistic Interpretability Circuit Attribution Replay",
     "relative_href": "docs/paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay",
     "read_href": "docs/paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-mechanistic-interpretability-circuit-attribution-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Mechanistic interpretability replay validates public circuit-attribution result record contracts without live model access or private activation export.",
     "summary": "Mechanistic Interpretability Circuit Attribution Replay checks that public circuit-attribution replay rows carry feature-to-edge links, intervention deltas, sufficiency and faithfulness limits, target/source refs, source-module digest evidence, secret-exclusion scans, negative cases, and scope limits. It validates the result record contract only, not live model transparency, private weights, raw activations, proprietary prompts, hidden reasoning, external model access, benchmark claims, launch, public sharing, or whole-system correctness.",
     "authority_ceiling": "Declared public circuit-attribution runtime result record and source-module import evidence only; no live model access, model-transparency product claim, export of private weights, raw activations, proprietary prompts, hidden reasoning, external model access, benchmark claims, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Mechanistic interpretability replay validates public circuit-attribution result record contracts without live model access or private activation export.",
     "teleology": {
      "section_id": "",
      "text": "Mechanistic interpretability replay validates public circuit-attribution result record contracts without live model access or private activation export.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nInterpretability writing is unusually easy to overstate. A named feature can read like understanding, a graph picture can read like a discovered circuit, and a small local script can read like access to a real model. This component exists to hold one kind of claim to a smaller, checkable size. It answers a single question: before Microcosm lets a circuit-attribution story stand as public evidence, does the story survive a deterministic replay rather than being taken on trust?\n\nThe part worth noticing is how narrow the proof is, and how that narrowness is the point. The component does not attempt to interpret a trained model. It carries a tiny two-layer toy transformer with weights declared in the fixture, recomputes its forward pass, gradient attribution, and per-feature ablation, and then compares the recomputed top feature against the feature the fixture claims. A row passes only when the declared winner still matches after recomputation. Perturb the toy weights and leave the old claim in place and the row is rejected, because the recomputed answer has moved while the prose has not. That is the failure mode the component is built to catch: an interpretability statement that was once true of its inputs but no longer is.\n\nAround that recomputation sit three further gates. Graph evidence must be machine-readable and traversable from declared sparse features to public error nodes, so a screenshot cannot stand in for a circuit. Transparency language needs a causal-intervention reference and faithfulness language needs an explicit limit, so the strongest words carry the strongest evidence requirements. Private weights, raw activations, proprietary prompts, and hidden reasoning are kept out of every result record. What the component produces is an accounting result record for a public fixture, not a transparency tool for any real model.\n\n###### Abstract\n\n`mechanistic_interpretability_circuit_attribution_replay` is a public Microcosm component that validates whether circuit-attribution claims are safe to represent as result record evidence. It is not a model-transparency product and does not inspect a live provider model. The component checks a fixture and exported bundle for machine-readable feature graph rows, causal-intervention references, faithfulness limits, source-module digest evidence, negative cases, and a small input-coupled toy-transformer replay.\n\nThe technical proof is deliberately modest. A replay passes only when its declared circuit-attribution story agrees with recomputed toy-transformer forward, gradient, and ablation winners; when graph evidence is traversable from public sparse features to public error nodes; when public result records omit private or raw bodies; and when the source-open body floor is backed by copied, source source modules with matching digests. A stale declared top feature is disconfirmed by perturbing the input fixture while leaving the old claim in place.\n\n###### Problem Statement\n\nInterpretability prose is easy to overclaim: a feature name can sound like transparency, a graph screenshot can sound like a circuit, and a local fixture can sound like model access. This module makes the public claim smaller and more testable. It asks: before Microcosm lets a circuit-attribution story become public evidence, can the story survive a deterministic replay membrane that checks structure, causality refs, source provenance, and explicit scope boundaries?\n\nThe answer is local and result record-scoped. Microcosm may claim public circuit-attribution replay accounting for this fixture and exported bundle. It may not claim live model internals, private weights, raw activations, proprietary prompts, hidden reasoning, provider behavior, benchmark claims, publishing-scope decision, hosting, launch-scope decision, or whole-system interpretability correctness.\n\nThe technical contribution is therefore an accounting membrane, not a new interpretability algorithm. The membrane turns an interpretability-shaped fixture into a pass/fail public result record by requiring all claim-bearing rows to cross four gates:\n\nGate Accepts Rejects Replay schema Feature ids, graph rows, causal refs, sufficiency and faithfulness limits, contradiction refs, cold-replay refs, target refs, and metadata-only result record flags. Missing required fields, unverifiable feature labels, screenshot-only graph evidence, transparency claims without causal-intervention refs, and faithfulness claims without limits. Graph traversal Machine-readable nodes and edges with a path from declared sparse features to public error nodes. Disconnected edges and decorative constant-delta edge-weight sequences. Toy recomputation Fixture-coupled forward, gradient, ablation, weight digest, and declared-winner comparison. Internal default toy specs, stale declared winners, or uncoupled cached result records. Source/body boundary Copied source bodies with digest, class, anchor, and metadata-only result record checks. Private weights, raw activations, proprietary prompt bodies, hidden reasoning, model-output data, body text in result records, and launch-scope decision.\n\n###### Technical Mechanism\n\nSource refs\n\nJSON bundle `paper_module.mechanistic_interpretability_circuit_attribution_replay` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.mechanistic_interpretability_circuit_attribution_replay\"] Fixture[\"Fixture / exported bundle feature catalog, replay rows, toy-transformer spec\"] Policy[\"Policy gates required fields, forbidden private/raw exports, faithfulness limits\"] Graph[\"Graph analyzer feature ids -> edges -> public error nodes\"] Toy[\"Toy-transformer replay forward + gradient + ablation recomputation\"] Source[\"Source-open body floor copied source bodies + digest checks\"] Result records[\"metadata-only result records refs, digests, counts, verdicts\"] Ceiling[\"Scope limit public replay accounting only\"] Bundle --> Fixture Fixture --> Policy Fixture --> Graph Fixture --> Toy Fixture --> Source Policy --> Result records Graph --> Result records Toy --> Result records Source --> Result records Result records --> Ceiling\n```\n\nThe component has four coupled checks:\n1. Replay policy validation: each positive row must carry toy prompt refs, sparse feature ids, machine-readable graph nodes and edges, replacement-model approximation scores, causal inhibition and injection refs, causal-intervention result record refs, sufficiency labels, faithfulness limits, contradiction-case refs, cold-replay refs, target refs, and `body_in_receipt: false`.\n2. Graph analysis: `_graph_analysis_for_replay` verifies that graph edges resolve to declared nodes and that at least one path exists from the row's sparse feature ids to a public error node. `_weight_sequence_analysis` rejects simple decorative arithmetic edge-weight sequences across replay rows.\n3. Toy-transformer replay: `_toy_transformer_attribution_runtime` recomputes a pure-Python two-layer toy transformer from fixture-provided `token_ids`, `embeddings`, `layer1`, `layer2`, and `target_logit_index`, then compares the recomputed top attribution and ablation features against declared winners.\n4. Source/body boundary: `_source_module_manifest_result`, `_source_open_body_import_summary`, `scan_paths`, `_write_receipts`, and `result_card` verify copied source bodies while keeping result record payloads metadata-only and public-safe.\n\n###### Implementation Contract\n\nRuntime locus Role in the mechanism Evidence surface `run` First-wave fixture validator. It loads the public input directory, negative cases, source-module manifest, secret-exclusion policy, and sign-off output. `tests/test_mechanistic_interpretability_circuit_attribution_replay.py::test_mechanistic_interpretability_circuit_attribution_replay_observes_negative_cases` `run_attribution_bundle` Exported-bundle validator for the runtime-shell and public demo path. It uses the same replay gates without requiring first-wave negative-case files. `test_mechanistic_interpretability_exported_bundle_validates_runtime_shape` `_replay_policy_findings` Row-level policy checker for required fields and forbidden interpretability overclaims. Negative fixtures in `fixtures/.../input/*` and `EXPECTED_NEGATIVE_CASES` `_graph_analysis_for_replay` / `_weight_sequence_analysis` Circuit-graph shape checks: resolvable nodes/edges, feature-to-error paths, and non-decorative weights. `test_mechanistic_interpretability_rejects_disconnected_graph_edges` and `test_mechanistic_interpretability_rejects_decorative_weight_sequences` `_toy_transformer_attribution_runtime` Pure-Python recomputation harness for target logit, attribution scores, ablation deltas, declared winners, and fixture digest. Toy runtime, stale-claim, perturbation, and cache-reuse tests `_source_module_manifest_result` / `_source_open_body_import_summary` Source-open body floor: copied source body checks with digest, class, anchor, and metadata-only result record constraints. Source-module exact-import and body-text rejection tests `_write_receipts` / `result_card` Public output membrane. Result records and cards carry refs, digests, counts, omitted-payload flags, and scope limits rather than source bodies or private state. Result record-boundary and card-reuse tests\n\n###### Toy-Transformer Attribution Mechanism\n\nThe toy-transformer runtime is intentionally small enough to audit. The fixture in `fixtures/first_wave/mechanistic_interpretability_circuit_attribution_replay/input/attribution_replays.json` declares:\n- `token_ids`: `[0, 1, 2]`\n- a three-row embedding table over two dimensions\n- a two-by-three first layer\n- a three-by-two second layer\n- `target_logit_index`: `1`\n- expected top feature by attribution and ablation: `toy_hidden_feature_1`\n\nThe runtime computes token embeddings, averages them into a context vector, applies the first layer, applies a `tanh` hidden activation, applies the second layer, and reads the target logit. It then computes activation-gradient scores for each hidden feature, using the analytic `tanh` derivative `1 - h^2` so the attribution score is grounded in the same forward pass rather than a separate estimate. It also ablates each hidden feature in turn, zeroing it and re-reading the target logit, to measure the output delta that feature is responsible for. The fixture currently produces target logit `0.044176`; both the gradient attribution and the ablation delta select `toy_hidden_feature_1`, and the row passes only because those two independent paths agree with each other and with the fixture's declaration.\n\nThe important point is not that this is a serious transformer. It is a deterministic proof harness for the public replay claim. The result record can say the declared top feature agrees with recomputation only because the verifier recomputes from input fields and compares the result. The result record also records a weight digest so cached or exported bundle cards can prove which fixture basis they are coupled to.\n\n###### Discriminating Tests\n\nThe proof is strongest where it distinguishes a real coupling from a plausible but stale story. The focused tests exercise those distinctions directly:\n\nTest Fixture move Expected verdict Why it matters `test_mechanistic_interpretability_toy_transformer_input_perturbation_moves_verdict` Changes `layer2[0][1]` to `-0.5` and updates declared winners to `toy_hidden_feature_0`. Passes with target logit `-0.116939`; both attribution and ablation move to `toy_hidden_feature_0`. The result record follows changed input when declaration and recomputation remain coupled. `test_mechanistic_interpretability_input_perturbation_rejects_stale_claims` Applies the same perturbation but leaves declared winners at `toy_hidden_feature_1`. Blocks with `INTERPRETABILITY_TOY_TRANSFORMER_DECLARED_TOP_FEATURE_MISMATCH`. The verifier disconfirms stale interpretability claims instead of trusting old fixture prose. `test_mechanistic_interpretability_rejects_internal_default_toy_runtime` Removes `toy_transformer_runtime` from the exported bundle. Blocks with `INTERPRETABILITY_TOY_TRANSFORMER_FIXTURE_SPEC_REQUIRED`. The public proof must be input-coupled, not backed by an internal default. `test_mechanistic_interpretability_bundle_card_rejects_uncoupled_cached_receipt` Edits a cached result record so `input_coupled_fixture` and `input_coupled_verdict` are false. The command-card path is a freshness optimization, not permission to reuse uncoupled evidence. `test_mechanistic_interpretability_rejects_decorative_weight_sequences` Rewrites graph-edge weights into simple arithmetic sequences. Blocks as suspected decorative graph evidence. Machine-readable graph rows still need anti-fabrication checks. `test_mechanistic_interpretability_rejects_disconnected_graph_edges` Breaks an edge path to a declared public error node. Blocks with zero path count for the affected row. A circuit-shaped graph must be traversable, not merely present. `test_mechanistic_interpretability_source_modules_reject_body_text_in_receipt` Marks source body text as present in result record material. Blocks the source/body import. Source-open evidence remains metadata-only at result record boundaries.\n\n###### Evidence Contract\n\nEvidence class Local authority What it proves What it does not establish Bundle binding `core/paper_module_capsules.json` row 52 The paper module, component, mechanism, source locus, and generated projection statuses are linked. Markdown is not promoted to source authority. Replay rows `fixtures/.../input/attribution_replays.json` and exported bundle mirror Six public replay rows with feature ids, graph edges, causal refs, faithfulness limits, contradiction refs, cold replay refs, and metadata-only target refs. The refs are fixture/accounting evidence, not live model internals. Feature catalog `fixtures/.../input/feature_catalog.json` Six public sparse-feature summary ids with labels and no private weights or activation dumps. It does not disclose trained-model features or raw activations. Toy runtime `_toy_transformer_attribution_runtime` and focused tests Forward, gradient, ablation, digest, and stale-declaration checks are recomputed from the input fixture. The toy runtime is not a general interpretability method. Graph analysis `_graph_analysis_for_replay` and `_weight_sequence_analysis` Graph rows are machine-readable, traversable, and not decorative constant-delta weight sequences. It does not validate a real neural circuit. Source-open body floor `source_module_manifest.json` plus `source_modules/` Eleven copied source bodies have digest/anchor/material-class checks. Bodies are not copied into result records and do not authorize private/live export. Result record set `receipts/first_wave/...`, result records/sign-off/..., runtime-shell lens Public outputs carry refs, digests, counts, verdicts, omitted-payload flags, and scope limits. Result records do not publish private model data or launch-scope decision.\n\n###### Reader Evidence Routing\n\nThe proof consumer for this reader slice is the focused interpretability replay suite plus the paper-module corpus parity check. The table below is the route a rank/projection reader should follow before trusting any claim in this module:\n\nReader question Source surface Focused proof consumer Scope limit Is this module bound to a real component and mechanism? `core/paper_module_capsules.json::paper_module.mechanistic_interpretability_circuit_attribution_replay` and `paper_modules/mechanistic_interpretability_circuit_attribution_replay.json` `scripts/build_doctrine_projection.py --check-paper-module-corpus` Does the replay recompute the attribution claim? `_toy_transformer_attribution_runtime` over fixture-provided `token_ids`, weights, and `target_logit_index` `test_mechanistic_interpretability_toy_transformer_runtime_computes_attribution`, perturbation, and stale-claim tests Proves fixture-local recomputation, not a general interpretability method. Are graph rows actual circuit evidence rather than screenshots? `_graph_analysis_for_replay` and `_weight_sequence_analysis` over declared graph nodes, edges, and public error nodes disconnected-graph and decorative-weight regression tests Proves machine-readable traversability and anti-decoration checks, not a real neural circuit. Do source-open bodies stay out of result records? `source_module_manifest.json`, copied `source_modules/`, `_source_module_manifest_result`, and `_write_receipts` source-module exact-import and body-text-in-result record rejection tests Proves copied body floor and metadata-only result records, not private/live export authority. Where does a reader start when projections disagree? source record, generated JSON instance, runtime source, focused tests, then result records corpus check and focused pytest together\n\n###### Failure Modes And Limitations\n- Missing required replay fields block with `INTERPRETABILITY_REPLAY_FIELD_REQUIRED`.\n- Feature names without catalog-backed ids block with `INTERPRETABILITY_FEATURE_NAME_UNVERIFIABLE`.\n- Graph screenshots or disconnected graph rows block because machine-readable edges and traversable paths are required.\n- Transparency language without a causal-intervention result record blocks with `INTERPRETABILITY_INTERVENTION_RECEIPT_REQUIRED`.\n- Faithfulness language without explicit limits blocks with `INTERPRETABILITY_FAITHFULNESS_REQUIRES_LIMITS`.\n- Private model weights, raw activation dumps, proprietary prompt exports, hidden chain-of-thought exports, model-output data bodies, and launch-scope decision are forbidden public outputs.\n- Decorative graph-weight sequences block as suspected fabrication.\n- Stale declared toy-transformer winners block when recomputation selects a different top feature.\n- The proof is fixture-local. It verifies a public replay membrane and copied source evidence; it does not certify real-world model faithfulness.\n\n###### Relation To Interpretability Literature\n\nThe module borrows its accounting shape from the transformer-circuits and mechanistic-interpretability tradition: circuits should be graph-structured, features should be identifiable, causal language should be backed by interventions, and faithfulness language should be bounded. Useful prior-art anchors include Anthropic's transformer-circuits framing, causal scrubbing, and SAE/sparse-feature circuit work.\n\nMicrocosm does not reproduce those methods. The local contribution is a public replay boundary around an interpretability-shaped claim: machine-readable edges instead of screenshots, causal-intervention refs instead of bare transparency language, fixture recomputation instead of stale row trust, and explicit scope boundaries before a claim becomes public evidence.\n\n###### Relation To Microcosm Concepts, Mechanisms, And Principles\n\nThe bundle binds this module to:\n- `concept.research_and_science_replay_evidence_bundle`\n- `mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay`\n- principles `P-2`, `P-4`, `P-8`, and `P-9`\n- axioms `AX-3`, `AX-5`, `AX-7`, and `AX-8`\n\nThe practical reading is:\n- `P-2`: claim language stays below the strength of the checker.\n- `P-4`: public proof routes through result records and explicit evidence refs.\n- `P-8`: failed preconditions are typed refusals, not vague warnings.\n- `P-9`: provenance crosses from fixture, source source, and result record without upgrading authority.\n- `AX-3`: dereferenced proof and policy refs matter more than prose labels.\n- `AX-5`: status fails closed across all required parts.\n- `AX-7`: partial computation returns a typed refusal.\n- `AX-8`: public fixture and copied-source labels propagate without becoming private model access.\n\n###### Named Proof Consumers\n\nRun from `microcosm-substrate`:\n\nThis consumes the first-wave fixture, negative cases, source-module mirror, secret scan, toy-transformer replay, and result record writer.\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.mechanistic_interpretability_circuit_attribution_replay run-attribution-bundle \\\n  --input examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle \\\n  --out /tmp/microcosm-mechanistic-interpretability-circuit-attribution-replay/bundle \\\n  --card\n```\n\nThis consumes the exported circuit-attribution bundle, copied body floor, digest checks, metadata-only result records, command-card omission contract, and runtime-shell validation shape.\n\n```text\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_mechanistic_interpretability_circuit_attribution_replay.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe focused regression pins recomputation, stale-row rejection, graph and source-body gates, card result record reuse, and body-text exclusions.\n\n###### Reader Route\n\nA cold reader should inspect in this order:\n1. `core/paper_module_capsules.json` row 52 for authority and projection binding.\n2. `paper_modules/mechanistic_interpretability_circuit_attribution_replay.json` for generated relationship edges.\n3. `src/microcosm_core/organs/mechanistic_interpretability_circuit_attribution_replay.py` for runtime logic.\n4. `tests/test_mechanistic_interpretability_circuit_attribution_replay.py` for the stale-row, perturbation, graph, source-body, and result record-boundary proof.\n5. `fixtures/first_wave/mechanistic_interpretability_circuit_attribution_replay/input` for the fixture.\n6. `examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle` for the public bundle.\n7. `receipts/first_wave/mechanistic_interpretability_circuit_attribution_replay` and `receipts/runtime_shell/public_mechanistic_interpretability_circuit_attribution_replay_lens.json` for metadata-only public result record evidence.\n\n###### Prior Art Grounding\n\nThis replay exercises a circuit-attribution pass that traces which internal components account for a behaviour. It is grounded in mechanistic interpretability, the study of the internal circuits of neural networks ( [Anthropic, Transformer Circuits](https://transformer-circuits.pub/)). Microcosm borrows the attribution-replay shape over synthetic fixtures; the result is fixture-bound runtime evidence, not live model access, a transparency product, or a correctness claim about any real model.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src python3 -m pytest tests/test_mechanistic_interpretability_circuit_attribution_replay.py -q\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThese are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Authority And Evidence Boundary\n- Source authority: `core/paper_module_capsules.json::paper_modules[52:paper_module.mechanistic_interpretability_circuit_attribution_replay]` with `source_authority: json_capsule`.\n- Generated instance: `paper_modules/mechanistic_interpretability_circuit_attribution_replay.json`.\n- Runtime: `src/microcosm_core/organs/mechanistic_interpretability_circuit_attribution_replay.py`.\n- Focused tests: `tests/test_mechanistic_interpretability_circuit_attribution_replay.py`.\n- Governing standard: `standards/std_microcosm_mechanistic_interpretability_circuit_attribution_replay.json`.\n\nThis Markdown is a human-readable paper projection. The bundle JSON binds the component, mechanism, source locus, generated Mermaid status `available_from_capsule_edges`, and Atlas status `linked_from_capsule_edges`. The runtime, fixtures, tests, result records, and manifests are the technical evidence for the claims below.\n\n###### Scope limit\n\nThis module may claim:\n- public, cold-replayable circuit-attribution accounting for the named fixture and exported bundle;\n- feature ids tied to machine-readable graph edges and traversable public error-node paths;\n- causal-intervention result record refs and faithfulness-limit refs are required before transparency or faithfulness language passes;\n- the toy-transformer declaration is input-coupled to recomputed forward, gradient, and ablation evidence;\n- stale toy-transformer declarations are rejected by focused tests;\n- copied source source bodies are verified by manifest and digest checks while result records remain metadata-only.\n\nIt may not claim:\n- live model access or external model access;\n- private weights, raw activation tensors/dumps, proprietary prompts, hidden chain-of-thought, hidden reasoning, or model-output data export;\n- real model-transparency product status;\n- benchmark claims authority;\n- public sharing, hosted-product readiness, launch-scope decision, or recipient-send authority;\n- whole-system interpretability correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open body floor is declared in:\n- `examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle/source_module_manifest.json`\n- `fixtures/first_wave/mechanistic_interpretability_circuit_attribution_replay/input/source_module_manifest.json`\n\nThe manifest covers copied source bodies: Oracle attribution maps, pattern-ledger rows, high-novelty scout records, component projection IR, projection readiness code, mission transaction preflight code, execution trace code, strict JSON code, and trace/readiness standards. The runtime verifies classification, material class, body-copied status, body-not-in-result record status, target digest, source/target digest agreement, line count when the source is available, and required anchors.\n\nThe body floor excludes private model weights, raw activations, proprietary prompts, hidden reasoning, model-output data, account or browser state, browser or HUD state, account secret material, private source-root material, public sharing, hosting, and launch-scope decision.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 26061,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Interpretability writing is unusually easy to overstate. A named feature can read like understanding, a graph picture can read like a discovered circuit, and a small local script can read like access to a real model. This component exists to hold one kind of claim to a smaller, checkable size. It answers a single question: before Microcosm lets a circuit-attribution story stand as public evidence, does the story survive a deterministic replay rather than being taken on trust? The part worth noticing is how narrow the proof is, and how that narrowness is the point. The component does not attempt to interpret a trained model. It carries a tiny two-layer toy transformer with weights declared i\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "mechanisticinterpretabilitycircuitattributionreplay is a public Microcosm component that validates whether circuit-attribution claims are safe to represent as result record evidence. It is not a model-transparency product and does not inspect a live provider model. The component checks a fixture and exported bundle for machine-readable feature graph rows, causal-intervention references, faithfulness limits, source-module digest evidence, negative cases, and a small input-coupled toy-transformer replay. The technical proof is deliberately modest. A replay passes only when its declared circuit-attribution story agrees with recomputed toy-transformer forward, gradient, and ablation winners; wh\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "problem-statement",
       "title": "Problem Statement",
       "level": 2,
       "excerpt": "Interpretability prose is easy to overclaim: a feature name can sound like transparency, a graph screenshot can sound like a circuit, and a local fixture can sound like model access. This module makes the public claim smaller and more testable. It asks: before Microcosm lets a circuit-attribution story become public evidence, can the story survive a deterministic replay membrane that checks structure, causality refs, source provenance, and explicit scope boundaries? The answer is local and result record-scoped. Microcosm may claim public circuit-attribution replay accounting for this fixture and exported bundle. It may not claim live model internals, private weights, raw activations, propri\u2026",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "authority-and-evidence-boundary",
       "title": "Authority And Evidence Boundary",
       "level": 2,
       "excerpt": "Source authority: core/papermodulecapsules.json::papermodules[52:papermodule.mechanisticinterpretabilitycircuitattributionreplay] with sourceauthority: jsoncapsule. papermodules/mechanisticinterpretabilitycircuitattribution_replay.md. Generated instance: papermodules/mechanisticinterpretabilitycircuitattribution_replay.json. Runtime: src/microcosmcore/components/mechanisticinterpretabilitycircuitattribution_replay.py. Focused tests: tests/testmechanisticinterpretabilitycircuitattribution_replay.py. Governing standard: standards/stdmicrocosmmechanisticinterpretabilitycircuitattributionreplay.json. This Markdown is a human-readable paper projection. The bundle JSON binds the component, mechan\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The component has four coupled checks: Replay policy validation: each positive row must carry toy prompt refs, sparse feature ids, machine-readable graph nodes and edges, replacement-model approximation scores, causal inhibition and injection refs, causal-intervention result record refs, sufficiency labels, faithfulness limits, contradiction-case refs, cold-replay refs, target refs, and bodyinreceipt: false. Graph analysis: graphanalysisforreplay verifies that graph edges resolve to declared nodes and that at least one path exists from the row's sparse feature ids to a public error node. weightsequence_analysis rejects simple decorative arithmetic edge-weight sequences across replay rows. T\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "implementation-contract",
       "title": "Implementation Contract",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "table"
       ]
      },
      {
       "section_id": "toy-transformer-attribution-mechanism",
       "title": "Toy-Transformer Attribution Mechanism",
       "level": 2,
       "excerpt": "The toy-transformer runtime is intentionally small enough to audit. The fixture in fixtures/firstwave/mechanisticinterpretabilitycircuitattributionreplay/input/attributionreplays.json declares: token_ids: [0, 1, 2] a three-row embedding table over two dimensions a two-by-three first layer a three-by-two second layer targetlogitindex: 1 expected top feature by attribution and ablation: toyhiddenfeature_1 The runtime computes token embeddings, averages them into a context vector, applies the first layer, applies a tanh hidden activation, applies the second layer, and reads the target logit. It then computes activation-gradient scores for each hidden feature, using the analytic tanh derivative\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "discriminating-tests",
       "title": "Discriminating Tests",
       "level": 2,
       "excerpt": "The proof is strongest where it distinguishes a real coupling from a plausible but stale story. The focused tests exercise those distinctions directly:",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "evidence-contract",
       "title": "Evidence Contract",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "table"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "The proof consumer for this reader slice is the focused interpretability replay suite plus the paper-module corpus parity check. The table below is the route a rank/projection reader should follow before trusting any claim in this module:",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "failure-modes-and-limitations",
       "title": "Failure Modes And Limitations",
       "level": 2,
       "excerpt": "Missing required replay fields block with INTERPRETABILITYREPLAYFIELD_REQUIRED. Feature names without catalog-backed ids block with INTERPRETABILITYFEATURENAME_UNVERIFIABLE. Graph screenshots or disconnected graph rows block because machine-readable edges and traversable paths are required. Transparency language without a causal-intervention result record blocks with INTERPRETABILITYINTERVENTIONRECEIPT_REQUIRED. Faithfulness language without explicit limits blocks with INTERPRETABILITYFAITHFULNESSREQUIRES_LIMITS. Private model weights, raw activation dumps, proprietary prompt exports, hidden chain-of-thought exports, model-output data bodies, and launch authority are forbidden public output\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "relation-to-interpretability-literature",
       "title": "Relation To Interpretability Literature",
       "level": 2,
       "excerpt": "The module borrows its accounting shape from the transformer-circuits and mechanistic-interpretability tradition: circuits should be graph-structured, features should be identifiable, causal language should be backed by interventions, and faithfulness language should be bounded. Useful prior-art anchors include Anthropic's transformer-circuits framing, causal scrubbing, and SAE/sparse-feature circuit work. Microcosm does not reproduce those methods. The local contribution is a public replay boundary around an interpretability-shaped claim: machine-readable edges instead of screenshots, causal-intervention refs instead of bare transparency language, fixture recomputation instead of stale row\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "relation-to-microcosm-concepts-mechanisms-and-principles",
       "title": "Relation To Microcosm Concepts, Mechanisms, And Principles",
       "level": 2,
       "excerpt": "The bundle binds this module to: concept.researchandsciencereplayevidence_bundle mechanism.mechanisticinterpretabilitycircuitattributionreplay.validatespublicmechanisticinterpretabilitycircuitattributionreplay principles P-2, P-4, P-8, and P-9 axioms AX-3, AX-5, AX-7, and AX-8 The practical reading is: P-2: claim language stays below the strength of the checker. P-4: public proof routes through result records and explicit evidence refs. P-8: failed preconditions are typed refusals, not vague warnings. P-9: provenance crosses from fixture, source source, and result record without upgrading authority. AX-3: dereferenced proof and policy refs matter more than prose labels. AX-5: status fails c\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "Run from microcosm-substrate: This consumes the first-wave fixture, negative cases, source-module mirror, secret scan, toy-transformer replay, and result record writer. This consumes the exported circuit-attribution bundle, copied body floor, digest checks, metadata-only result records, command-card omission contract, and runtime-shell validation shape. The focused regression pins recomputation, stale-row rejection, graph and source-body gates, card result record reuse, and body-text exclusions. The corpus generated structured source record. Microcosm projections.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open body floor is declared in: examples/mechanisticinterpretabilitycircuitattributionreplay/exportedcircuitattributionbundle/sourcemodule_manifest.json fixtures/firstwave/mechanisticinterpretabilitycircuitattributionreplay/input/sourcemodule_manifest.json The manifest covers copied source bodies: Oracle attribution maps, pattern-ledger rows, high-novelty scout records, component projection IR, projection readiness code, mission transaction preflight code, execution trace code, strict JSON code, and trace/readiness standards. The runtime verifies classification, material class, body-copied status, body-not-in-result record status, target digest, source/target digest agreement, li\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim: public, cold-replayable circuit-attribution accounting for the named fixture and exported bundle; feature ids tied to machine-readable graph edges and traversable public error-node paths; causal-intervention result record refs and faithfulness-limit refs are required before transparency or faithfulness language passes; the toy-transformer declaration is input-coupled to recomputed forward, gradient, and ablation evidence; stale toy-transformer declarations are rejected by focused tests; copied source source bodies are verified by manifest and digest checks while result records remain metadata-only. It may not claim: live model access or external model access; private\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-route",
       "title": "Reader Route",
       "level": 2,
       "excerpt": "A cold reader should inspect in this order: core/papermodulecapsules.json row 52 for authority and projection binding. papermodules/mechanisticinterpretabilitycircuitattribution_replay.json for generated relationship edges. src/microcosmcore/components/mechanisticinterpretabilitycircuitattribution_replay.py for runtime logic. tests/testmechanisticinterpretabilitycircuitattribution_replay.py for the stale-row, perturbation, graph, source-body, and result record-boundary proof. fixtures/firstwave/mechanisticinterpretabilitycircuitattribution_replay/input for the fixture. examples/mechanisticinterpretabilitycircuitattributionreplay/exportedcircuitattribution_bundle for the public bundle. resul\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This replay exercises a circuit-attribution pass that traces which internal components account for a behaviour. It is grounded in mechanistic interpretability, the study of the internal circuits of neural networks (Anthropic, Transformer Circuits). Microcosm borrows the attribution-replay shape over synthetic fixtures; the result is fixture-bound runtime evidence, not live model access, a transparency product, or a correctness claim about any real model.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: These are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.mechanistic_interpretability_circuit_attribution_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"JSON bundle paper_module.mechanistic_interpretability_circuit_attribution_replay\"] Fixture[\"Fixture / exported bundle feature catalog, replay rows, toy-transformer spec\"] Policy[\"Policy gates required fields, forbidden private/raw exports, faithfulness limits\"] Graph[\"Graph analyzer feature ids -> edges -> public error nodes\"] Toy[\"Toy-transformer replay forward + gradient + ablation recomputation\"] Source[\"Source-open body floor copied source bodies + digest checks\"] Result records[\"metadata-only result records refs, digests, counts, verdicts\"] Ceiling[\"Scope limit public replay accounting only\"] Bundle --> Fixture Fixture --> Policy Fixture --> Graph Fixture --> Toy Fixture --> Source Policy --> Result records Graph --> Result records Toy --> Result records Source --> Result records Result records --> Ceiling",
       "source_hash": "sha256:2d52fb4301ef5a928a1787bc70375a34a8482a4ae0dff9a170c310bd2af3c6c1",
       "html_url": "docs/paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay-diagram-1",
       "html_anchor": "paper-module-mechanistic-interpretability-circuit-attribution-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Anthropic, Transformer Circuits",
       "url": "https://transformer-circuits.pub/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-3",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Authority by derivation, not possession",
         "url": "doctrine.html#dcard-ax-3"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.research_replication_rubric_artifact_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Research Replication Rubric Artifact Replay",
         "url": "paper-modules.html#paper-module-research-replication-rubric-artifact-replay"
        },
        {
         "id": "paper_module.world_model_projection_drift_control_room",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "World-Model Projection Drift Control Room",
         "url": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
        },
        {
         "id": "paper_module.public_reveal_walkthrough",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Public Reveal Walkthrough",
         "url": "paper-modules.html#paper-module-public-reveal-walkthrough"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "mechanistic_interpretability_circuit_attribution_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Mechanistic Interpretability Circuit Attribution Replay",
         "url": "components.html#component-mechanistic_interpretability_circuit_attribution_replay"
        },
        {
         "id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public mechanistic interpretability circuit attribution replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-4",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Possession is not permission",
         "url": "doctrine.html#dcard-p-4"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.research_and_science_replay_evidence_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "research and science replay validators as reproducibility scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 27325
    },
    {
     "id": "paper_module.spatial_world_model_counterfactual_simulation_replay",
     "title": "Spatial World Model Counterfactual Simulation Replay",
     "relative_href": "docs/paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay",
     "read_href": "docs/paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-spatial-world-model-counterfactual-simulation-replay",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Spatial world-model replay validates synthetic counterfactual metadata without robot operation, simulator product claims, or real-world accuracy claims.",
     "summary": "Spatial World Model Counterfactual Simulation Replay validates public synthetic counterfactual rows: scene-state refs, action traces, predicted-state refs, transition diffs, oracle-check refs, public sensor-packet refs, limitation labels, source-module digest evidence, negative cases, and scope limits. It keeps generated-video and metadata evidence below real-world geographic accuracy, robot or AV operation, simulator product claims, benchmark claims, external model access, hosting, launch, public sharing, and whole-system correctness.",
     "authority_ceiling": "Declared public synthetic spatial counterfactual-replay metadata and source-module import evidence only; no robot or AV operation, real-world geographic accuracy, simulator product validation, generated-video authority, benchmark claims, external model access, hosting, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Spatial world-model replay validates synthetic counterfactual metadata without robot operation, simulator product claims, or real-world accuracy claims.",
     "teleology": {
      "section_id": "",
      "text": "Spatial world-model replay validates synthetic counterfactual metadata without robot operation, simulator product claims, or real-world accuracy claims.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nSpatial world-model demos are unusually easy to oversell. A plausible-looking video, or a row that simply asserts \"the model predicted the next state correctly\", can pass for understanding without anything having been checked. This component exists to answer one narrow question: does a declared spatial counterfactual row actually bind a source state, an event, and a predicted outcome that survive an independent recomputation, or is it just a shape that looks right?\n\nThe approach is the unusual part. The predicted actor count, transition delta, event label, and spawn cells are derived from the inputs (sensor-packet refs, consistency budget, topology), so a stale or hand-edited prediction no longer matches and the row blocks. The point is not a good simulator. The point is that a spatial-AI claim cannot pass on appearance alone: it has to agree with a recomputation a reader can audit in one screen.\n\n###### Abstract\n\n`spatial_world_model_counterfactual_simulation_replay` is a Microcosm component for checking spatial world-model counterfactual claims as metadata transitions, not as generated video, robotics control, AV simulation, geographic truth, or benchmark authority. The component validates six synthetic scene-state rows, six counterfactual replay rows, six predicted transition rows, eight forbidden-claim negative cases, and an exported source-module bundle whose result record stays metadata-only.\n\nThe technical claim is deliberately small: for each replay row, the runtime recomputes a deterministic toy gridworld next state from the declared scene state, counterfactual event, sensor-packet refs, consistency budget, topology ref, and limitation labels; it then compares that actual transition against the declared predicted state, transition diff, and oracle check. A green run proves the public replay rows are internally consistent and bounded by their scope limit. It does not establish real-world spatial accuracy, trained simulator quality, generated-video correctness, robot or AV operation, provider behavior, hosting, public sharing, launch-scope decision, or whole-system correctness.\n\n###### Telos\n\nWorld-model demos are easy to overstate because visual plausibility can hide whether any state transition was checked. This component makes the proof surface inspectable: a reader can see the scene-state ref, action trace, predicted-state ref, transition-diff ref, oracle-check ref, fidelity limit, limitation labels, negative cases, and source-module digest evidence before accepting any spatial counterfactual claim.\n\nThe useful result is not a better simulator. The useful result is an evidence spine that refuses to let a spatial-AI claim advance unless the public row binds input state, counterfactual event, predicted output, actual recomputation, and scope boundary boundary in one result record.\n\n###### Mechanism\n\nThe positive fixture has six scene states and six matching replay rows: warehouse occlusion, crosswalk emergence, drone-corridor gust recovery, mobile robot reflective-floor detour, loading-dock pallet shift, and unprotected-turn late yield. Each row declares a source scene-state ref, action-trace ref, counterfactual event, predicted-state ref, transition-diff ref, oracle-state-check ref, two public sensor-packet refs, a rare-event label, a fidelity-limit label, limitation labels, and explicit false values for private video, raw sensor export, live operation, geography, simulator-product, generated-video-only, benchmark, and launch claims.\n\nRuntime transition checking happens in `_state_transition_analysis`:\n1. The component resolves each replay to exactly one state-transition row.\n2. It builds an 8 x 8 toy gridworld from the source scene's actor count and topology ref.\n3. It maps the counterfactual event to a deterministic event action such as `new_dynamic_actor`.\n4. It recomputes the actual next state and transition diff from the input row.\n5. It compares predicted actor count, transition delta, event label, spawn cell or cells, predicted-state ref, diff ref, oracle-check ref, and metadata-only result record status.\n\nThe input-driven part matters. Actor-count delta is not copied from the expected fixture. It is recomputed as:\n\n```text\nmin(\n  base_event_actor_count_delta\n  + max(0, sensor_packet_count - max_timestep_lag - base_event_actor_count_delta),\n  4,\n  free_cell_count\n)\n```\n\nSpawn cells are also input-derived: the runtime hashes the event, replay id, scene-state ref, topology ref, sensor-packet refs, consistency budget, limitation labels, and source actor count, then walks the bounded grid from the declared event cell. This makes the row sensitive to real input changes while remaining small enough to audit.\n\n###### Transition Evidence\n\nThe current fixture proves a narrow but useful invariant: all six declared predicted states match the runtime's actual toy-gridworld step. The focused test expects:\n- `scene_state_count == 6`\n- `replay_count == 6`\n- `state_transition_count == 6`\n- `predicted_state_body_count == 6`\n- `deterministic_simulation_pass_count == 6`\n- `gridworld_step_count == 6`\n- `predicted_actual_match_count == 6`\n- `transition_diff_count == 6`\n- `oracle_state_check_count == 6`\n- `sensor_packet_ref_count == 12`\n\nThose counts are technical evidence only because the runtime recomputes the state transition before accepting them. The result record cannot be read as a learned world-model score; it is a public replay consistency check over synthetic metadata and copied source-module digests.\n\n###### Real-Bad Mutation Contract\n\nThe regression suite includes deliberately bad mutations that show the proof is not just shape validation:\n- If a transition row changes `actor_count_delta` from the recomputed value, `run_simulation_bundle` blocks with `SPATIAL_STATE_TRANSITION_SIMULATION_MISMATCH`.\n- If the predicted state misses the gridworld step, the transition row records `predicted_state_actor_count_mismatch` while the recomputed actual state still shows the expected gridworld execution.\n- If a replay gains an extra sensor-packet ref, the recomputed actor delta moves from 1 to 2. The stale expected transition blocks until the predicted actor count, actor delta, and spawn cells are updated to match the new actual transition.\n- If the source scene actor count and topology ref change, the recomputed source and spawn-cell state moves. The stale predicted state blocks until the transition row is updated.\n- If a source-module manifest tries to place copied body text inside a result record, the source-module summary blocks with `SPATIAL_SOURCE_BODY_TEXT_IN_RECEIPT_FORBIDDEN` and `SPATIAL_SOURCE_MODULE_BODY_TEXT_IN_RECEIPT_FORBIDDEN`.\n\nThe negative payload cases are similarly typed: private video export, raw sensor export, live robot or AV operation, real-world location claims, simulator-product claims, generated-video-only authority, geographic accuracy claims, and benchmark-score claims without state-diff result records all have explicit forbidden-code coverage.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Scene[\"Scene-state row actor count + topology\"] --> Replay[\"Counterfactual replay row event + sensor refs + budget\"] Replay --> Step[\"Deterministic toy gridworld step 8x8 bounded recomputation\"] Step --> Actual[\"Actual next state actor delta + spawn cells\"] Replay --> Expected[\"Declared predicted state transition diff + oracle check\"] Actual --> Compare{\"Actual matches declared transition?\"} Expected --> Compare Compare -->|yes| Result record[\"metadata-only pass result record counts + refs + digests\"] Compare -->|no| Finding[\"Typed mismatch finding blocked status\"] Replay --> Boundary{\"Forbidden payload or claim?\"} Boundary -->|no| Result record Boundary -->|yes| Finding\n```\n\nThis diagram is a reader map for the runtime proof. The generated doctrine lattice Mermaid remains the bundle-derived edge proof.\n\n###### Reader Evidence Routing\n\nRead this page from source authority outward:\n1. Open `core/paper_module_capsules.json::paper_modules[53:paper_module.spatial_world_model_counterfactual_simulation_replay]` for the JSON bundle and scope limit.\n2. Open `paper_modules/spatial_world_model_counterfactual_simulation_replay.json` for generated relationship edges, Mermaid status, Atlas status, and `source_authority: json_capsule`.\n3. Inspect `src/microcosm_core/organs/spatial_world_model_counterfactual_simulation_replay.py`, especially `_state_transition_analysis`, `_gridworld_step`, `_gridworld_actor_count_delta`, `_gridworld_spawn_cells`, `_replay_policy_findings`, and `_source_module_manifest_result`.\n4. Inspect fixture inputs under `fixtures/first_wave/spatial_world_model_counterfactual_simulation_replay/input` and exported-bundle inputs under `examples/spatial_world_model_counterfactual_simulation_replay/exported_spatial_world_model_simulation_bundle`.\n5. Inspect `tests/test_spatial_world_model_counterfactual_simulation_replay.py` for the positive replay, public-relative result record, source-module import, body-text rejection, transition-delta mutation, predicted-state mutation, input-perturbation, scene-perturbation, and fresh-card reuse contracts.\n\n###### Runtime Command\n\n```text\nmicrocosm spatial-world-model-counterfactual-simulation-replay run-simulation-bundle --input examples/spatial_world_model_counterfactual_simulation_replay/exported_spatial_world_model_simulation_bundle --out receipts/runtime_shell/demo_project/organs/spatial_world_model_counterfactual_simulation_replay\n```\n\nThe runtime shell also exposes the compressed lens at:\n\n```text\nmicrocosm spatial-simulation\n```\n\n###### Prior Art Grounding\n\nThis replay exercises a spatial world model under counterfactual interventions. It is grounded in the world-models line of work ( [Ha and Schmidhuber, World Models](https://arxiv.org/abs/1803.10122)), where an agent learns a compressed model of its environment it can roll forward under hypothetical actions. Microcosm borrows the counterfactual-rollout shape over synthetic metadata; the result is fixture-bound replay evidence, not robot or AV operation, real-world geography, or a calibrated simulator.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\nThe expected bundle projection is Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, and 20 generated relationship edges. These checks prove the public synthetic replay and source-module import boundary only; they do not validate real geography, robot or AV operation, simulator-product claims, benchmark claims, public sharing, hosting, or launch.\n\n###### Scope boundary\n\n###### Public Boundary\n\nThe exported bundle may include copied Station geometry source bodies as public source-open material, but result records carry refs, digests, counts, and verdicts only. They must not carry private video bodies, raw sensor payloads, GPS trace bodies, model-output data, account or browser state, account secrets, or live-access material.\n\nThe scope limit is therefore:\n- allowed: synthetic scene-state refs, action-trace refs, predicted-state refs, transition-diff refs, oracle-check refs, source-open public sensor-packet refs, rare-event labels, fidelity-limit labels, limitation labels, source-module digests, negative-case result records, and metadata-only validation result records;\n- not allowed: simulator-product authority, private video export, raw sensor export, live robot or AV operation, real-world geography claims, benchmark claims, external model access, hosting, public sharing, launch-scope decision, private-system equivalence, or whole-system correctness.\n\n###### Limitations\n\nThe dynamics are toy dynamics. The 8 x 8 gridworld models actor counts and spawn cells from public metadata; it does not model perception, control, physics, sensor calibration, camera geometry, lidar, maps, vehicle dynamics, human behavior, or material truth. The synthetic events are useful because they force state-diff accounting, not because they approximate the real world.\n\nThe fixture is also finite. It covers six public replay rows, six transition rows, two sensor refs per replay, eight negative claim families, and three copied source modules. It does not establish all possible spatial counterfactuals, full secret absence outside the scanner envelope, complete robotics safety, simulator correctness, or future fixture coverage.\n\nThe source-open body floor is limited to exact copied Station geometry guardrail bodies named by the source-module manifest and verified by digest. That does not certify private source-root equivalence, private video or raw sensor availability, account or browser state, provider behavior, hidden GPS trace bodies, live-access material, or launch-scope decision.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Declared public synthetic spatial counterfactual-replay metadata and source-module import evidence only; no robot or AV operation, real-world geographic accuracy, simulator product validation, generated-video authority, benchmark claims, external model access, hosting, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13374,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Spatial world-model demos are unusually easy to oversell. A plausible-looking video, or a row that simply asserts \"the model predicted the next state correctly\", can pass for understanding without anything having been checked. This component exists to answer one narrow question: does a declared spatial counterfactual row actually bind a source state, an event, and a predicted outcome that survive an independent recomputation, or is it just a shape that looks right? The approach is the unusual part. Rather than trust the predicted state in the declared scene and event and steps it forward itself, then compares its own result against what the row claims. The predicted actor count, transition\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "spatialworldmodelcounterfactualsimulation_replay is a Microcosm component for checking spatial world-model counterfactual claims as metadata transitions, not as generated video, robotics control, AV simulation, geographic truth, or benchmark authority. The component validates six synthetic scene-state rows, six counterfactual replay rows, six predicted transition rows, eight forbidden-claim negative cases, and an exported source-module bundle whose result record stays metadata-only. The technical claim is deliberately small: for each replay row, the runtime recomputes a deterministic toy gridworld next state from the declared scene state, counterfactual event, sensor-packet refs, consistenc\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "telos",
       "title": "Telos",
       "level": 2,
       "excerpt": "World-model demos are easy to overstate because visual plausibility can hide whether any state transition was checked. This component makes the proof surface inspectable: a reader can see the scene-state ref, action trace, predicted-state ref, transition-diff ref, oracle-check ref, fidelity limit, limitation labels, negative cases, and source-module digest evidence before accepting any spatial counterfactual claim. The useful result is not a better simulator. The useful result is an evidence spine that refuses to let a spatial-AI claim advance unless the public row binds input state, counterfactual event, predicted output, actual recomputation, and scope boundary boundary in one result reco\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism",
       "title": "Mechanism",
       "level": 2,
       "excerpt": "The positive fixture has six scene states and six matching replay rows: warehouse occlusion, crosswalk emergence, drone-corridor gust recovery, mobile robot reflective-floor detour, loading-dock pallet shift, and unprotected-turn late yield. Each row declares a source scene-state ref, action-trace ref, counterfactual event, predicted-state ref, transition-diff ref, oracle-state-check ref, two public sensor-packet refs, a rare-event label, a fidelity-limit label, limitation labels, and explicit false values for private video, raw sensor export, live operation, geography, simulator-product, generated-video-only, benchmark, and launch claims. Runtime transition checking happens in statetransit\u2026",
       "block_kinds": [
        "code",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "transition-evidence",
       "title": "Transition Evidence",
       "level": 2,
       "excerpt": "The current fixture proves a narrow but useful invariant: all six declared predicted states match the runtime's actual toy-gridworld step. The focused test expects: scenestatecount == 6 replay_count == 6 statetransitioncount == 6 predictedstatebody_count == 6 deterministicsimulationpass_count == 6 gridworldstepcount == 6 predictedactualmatch_count == 6 transitiondiffcount == 6 oraclestatecheck_count == 6 sensorpacketref_count == 12 Those counts are technical evidence only because the runtime recomputes the state transition before accepting them. The result record cannot be read as a learned world-model score; it is a public replay consistency check over synthetic metadata and copied source-\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "real-bad-mutation-contract",
       "title": "Real-Bad Mutation Contract",
       "level": 2,
       "excerpt": "The regression suite includes deliberately bad mutations that show the proof is not just shape validation: If a transition row changes actorcountdelta from the recomputed value, runsimulationbundle blocks with SPATIALSTATETRANSITIONSIMULATIONMISMATCH. If the predicted state misses the gridworld step, the transition row records predictedstateactorcountmismatch while the recomputed actual state still shows the expected gridworld execution. If a replay gains an extra sensor-packet ref, the recomputed actor delta moves from 1 to 2. The stale expected transition blocks until the predicted actor count, actor delta, and spawn cells are updated to match the new actual transition. If the source scen\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-boundary",
       "title": "Public Boundary",
       "level": 2,
       "excerpt": "The exported bundle may include copied Station geometry source bodies as public source-open material, but result records carry refs, digests, counts, and verdicts only. They must not carry private video bodies, raw sensor payloads, GPS trace bodies, model-output data, account or browser state, account secrets, or live-access material. The scope limit is therefore: allowed: synthetic scene-state refs, action-trace refs, predicted-state refs, transition-diff refs, oracle-check refs, source-open public sensor-packet refs, rare-event labels, fidelity-limit labels, limitation labels, source-module digests, negative-case result records, and metadata-only validation result records; not allowed: si\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This diagram is a reader map for the runtime proof. The generated doctrine lattice Mermaid remains the bundle-derived edge proof.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this page from source authority outward: Open core/papermodulecapsules.json::papermodules[53:papermodule.spatialworldmodelcounterfactualsimulation_replay] for the JSON bundle and scope limit. Open papermodules/spatialworldmodelcounterfactualsimulationreplay.json for generated relationship edges, Mermaid status, Atlas status, and sourceauthority: jsoncapsule. Inspect src/microcosmcore/components/spatialworldmodelcounterfactualsimulationreplay.py, especially statetransitionanalysis, gridworld_step, gridworldactorcountdelta, gridworldspawn_cells, replaypolicyfindings, and sourcemodulemanifest_result. Inspect fixture inputs under fixtures/firstwave/spatialworldmodelcounterfactualsimulation\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-command",
       "title": "Runtime Command",
       "level": 2,
       "excerpt": "The runtime shell also exposes the compressed lens at:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run from microcosm-substrate: The expected bundle projection is Mermaid availablefromcapsule_edges, Atlas linkedfromcapsule_edges, and 20 generated relationship edges. These checks prove the public synthetic replay and source-module import boundary only; they do not validate real geography, robot or AV operation, simulator-product claims, benchmark claims, public sharing, hosting, or launch.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The dynamics are toy dynamics. The 8 x 8 gridworld models actor counts and spawn cells from public metadata; it does not model perception, control, physics, sensor calibration, camera geometry, lidar, maps, vehicle dynamics, human behavior, or material truth. The synthetic events are useful because they force state-diff accounting, not because they approximate the real world. The fixture is also finite. It covers six public replay rows, six transition rows, two sensor refs per replay, eight negative claim families, and three copied source modules. It does not establish all possible spatial counterfactuals, full secret absence outside the scanner envelope, complete robotics safety, simulator\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page. It may not claim more than its bundle scope limit allows: Declared public synthetic spatial counterfactual-replay metadata and source-module import evidence only; no robot or AV operation, real-world geographic accuracy, simulator product validation, generated-video authority, benchmark claims, external model access, hosting, launch-scope decision, public sharing decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This replay exercises a spatial world model under counterfactual interventions. It is grounded in the world-models line of work (Ha and Schmidhuber, World Models), where an agent learns a compressed model of its environment it can roll forward under hypothetical actions. Microcosm borrows the counterfactual-rollout shape over synthetic metadata; the result is fixture-bound replay evidence, not robot or AV operation, real-world geography, or a calibrated simulator.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.spatial_world_model_counterfactual_simulation_replay.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Scene[\"Scene-state row actor count + topology\"] --> Replay[\"Counterfactual replay row event + sensor refs + budget\"] Replay --> Step[\"Deterministic toy gridworld step 8x8 bounded recomputation\"] Step --> Actual[\"Actual next state actor delta + spawn cells\"] Replay --> Expected[\"Declared predicted state transition diff + oracle check\"] Actual --> Compare{\"Actual matches declared transition?\"} Expected --> Compare Compare -->|yes| Result record[\"metadata-only pass result record counts + refs + digests\"] Compare -->|no| Finding[\"Typed mismatch finding blocked status\"] Replay --> Boundary{\"Forbidden payload or claim?\"} Boundary -->|no| Result record Boundary -->|yes| Finding",
       "source_hash": "sha256:dd35214cb2a9d31144afab9f482d2f2be5bb892406e7ff63a1beb747973ca3f0",
       "html_url": "docs/paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay-diagram-1",
       "html_anchor": "paper-module-spatial-world-model-counterfactual-simulation-replay-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/spatial_world_model_counterfactual_simulation_replay.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Ha and Schmidhuber, World Models",
       "url": "https://arxiv.org/abs/1803.10122",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.research_replication_rubric_artifact_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Research Replication Rubric Artifact Replay",
         "url": "paper-modules.html#paper-module-research-replication-rubric-artifact-replay"
        },
        {
         "id": "paper_module.world_model_projection_drift_control_room",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "World-Model Projection Drift Control Room",
         "url": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
        },
        {
         "id": "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Materials Chemistry Closed-Loop Lab-Safety Replay",
         "url": "paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "spatial_world_model_counterfactual_simulation_replay",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Spatial World Model Counterfactual Simulation Replay",
         "url": "components.html#component-spatial_world_model_counterfactual_simulation_replay"
        },
        {
         "id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public spatial world model counterfactual simulation replay",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.research_and_science_replay_evidence_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "research and science replay validators as reproducibility scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/spatial_world_model_counterfactual_simulation_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14624
    },
    {
     "id": "paper_module.prediction_oracle_reconciliation",
     "title": "Prediction Oracle Reconciliation",
     "relative_href": "docs/paper-modules.html#paper-module-prediction-oracle-reconciliation",
     "read_href": "docs/paper-modules.html#paper-module-prediction-oracle-reconciliation",
     "context_href": "docs/rules-and-ideas.html#paper-module-prediction-oracle-reconciliation",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Prediction Oracle Reconciliation exercises synthetic forecast reconciliation gates without forecasting, trading, provider, or live-market authority.",
     "summary": "Prediction Oracle Reconciliation validates synthetic prediction packets through CP1 fork preservation, CP2 target-universe checks, pre-target evidence limits, oracle-diff grading, bounded dossier edits, numeric reconciliation rows, source-module imports, negative cases, and scope limits. It is a projection-mechanics replay, not a forecasting correctness claim, investment or trading decisions, live market data call, external model access, private-data equivalence, public sharing, launch, or whole-system correctness.",
     "authority_ceiling": "Synthetic invented prediction packet and source-module import evidence only; no forecasting correctness or accuracy, no trading, financial, or investment-related actions, no live market data, no external model access, no prediction public sharing, no performance track record, no non-public data import, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "abstract": "Prediction Oracle Reconciliation exercises synthetic forecast reconciliation gates without forecasting, trading, provider, or live-market authority.",
     "teleology": {
      "section_id": "",
      "text": "Prediction Oracle Reconciliation exercises synthetic forecast reconciliation gates without forecasting, trading, provider, or live-market authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`prediction_oracle_reconciliation` is a source-available runtime fixture component for the prediction-engine slice. It compresses the source pattern group around CP1 bifurcation resolution, CP2 valid target universes, oracle grounding firewalls, diff grading, and dossier mutation into a synthetic packet a cold reader can run.\n\nIt is deliberately not a market product. The component has no live data, no external model access, no trading authority, no financial or investment-related actions authority, no publishing-scope decision, and no launch-scope decision. Its job is to make the reasoning shape inspectable without making performance or action claims. The result record contract is source-open by default: public fixture packets, exported bundle refs, source refs, and runtime result records carry the evidence, while `secret_exclusion_scan` blocks only live market feeds, model-output data bodies, account or browser material, private dossiers, and account secret-equivalent access.\n\n###### Purpose\n\nA forecast that gets the direction right can still be badly wrong about the number, and a forecast can look accurate only because it quietly used evidence that arrived after the outcome it was meant to predict. This component exists to make those two failures visible on a synthetic packet, before any reasoning is dressed up as a track record. The single question it answers is narrow: does this prediction packet keep its evidence honest and its grading recomputable, or does it cut a corner?\n\nThe unusual choice is that the component does not trust the numbers the packet reports. For every numeric row it recomputes the absolute error, the percent error, and the direction hit from the snapshot, predicted, and realized prices, then rejects any claimed value that contradicts the recompute. It also surfaces a direction hit that is still a large numeric miss rather than letting the correct arrow hide the size of the error. Evidence is split at the prediction time: a reference that points past the target window is refused, not silently scored.\n\nNone of this is forecasting. There is no live market data, no external model access, no trading or investment-related actions, and no performance claim. The packet, its target universe, and its realized values are invented fixtures. A direction hit or a numeric miss inside a result record is a statement about the fixture and the grading mechanics, nothing more.\n\n###### Public Contract\n\nThe input packet names:\n- `source_pattern_ids` for the source pattern family being projected.\n- `valid_prediction_targets` and `target_universe` for the CP2 gate.\n- `cp1_branches` with selected side, rationale refs, and opposite-side invalidation refs.\n- `cp2_predictions` with pre-target evidence refs and grounding ids.\n- `oracle_diff` rows that grade synthetic realized direction against prediction.\n- `dossier_mutations` constrained to fixture deltas.\n- `public_runtime_refs` for the public fixture, exported bundle, and paper module system refs.\n- `authority_ceiling` values that explicitly keep trading, advice, provider, live-market, public sharing, launch, and secret-export authority false.\n\n###### How it works\n\n`validate_reconciliation_packet` runs five checks over the packet and folds the findings into one status. Each check guards a specific way a forecast can flatter itself.\n\nCP1 resolution. Every `cp1_branches` row must name the side it chose, carry rationale refs, and keep an `opposite_side_invalidation_ref`, the record of why the losing side lost. A branch that asserts a winner without retaining the discarded alternative is rejected as an unresolved bifurcation. Equity or market-lane branches additionally need an explicit confirmation bit before they count.\n\nCP2 universe and pre-target evidence. Predictions must name a `target_id` inside the declared `valid_prediction_targets`, so the set of things being predicted is fixed before the outcome rather than chosen afterwards. Evidence refs must be pre-target: a ref is accepted only if it carries the `T-` time prefix, and a reference that points past the target window raises `PREDICTION_ORACLE_POST_T_EVIDENCE_FORBIDDEN`. This is the gate that stops a packet from grading itself with hindsight.\n\nRecomputed numeric grading. This is the part that does real arithmetic. For each graded row the component takes the snapshot, predicted, and realized prices and recomputes the absolute delta, the percent delta against the snapshot, and the direction hit. If the row also reports its own `abs_error`, `pred_error_pct`, or `direction_hit`, the claimed value must match the recompute or the row is rejected. Two further rules matter. A row whose direction is correct but whose error clears the floor (ten in absolute terms, or five percent) is surfaced as a large miss, so a right arrow cannot conceal a large numeric error. A row with no realized price is not fabricated into a graded row, a row marked degraded is gated out of grading rather than scored, and the STOCK and ETF asset classes are kept as separate counts rather than blended.\n\nOracle diff and bounded mutation. The `oracle_diff` rows grade synthetic realized direction against each prediction, and `dossier_mutations` may only add a contradiction, revise a confidence band, or retire a claim. A high-severity mutation needs two evidence refs and an explicit public-delta allowlist before it is allowed.\n\nA run passes only when at least two CP1 branches, two CP2 predictions, two graded numeric rows across both asset classes, and one bounded mutation are present, the recompute and evidence gates raise no findings, the source-module digests match, and the secret scan is clean. The result record records counts, verdicts, and authority booleans; the packet body, claimed numbers, and source bodies stay out of it.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Packet[\"Synthetic prediction packet target universe, CP1 branches, CP2 predictions, oracle diff, numeric rows, dossier mutations\"] CP1[\"CP1 resolution chosen side + rationale + why the opposite side lost; equity lane needs confirmation\"] CP2[\"CP2 universe + evidence target inside declared universe; evidence must be pre-target (T-)\"] Numeric[\"Recomputed numeric grading abs error, percent error, direction hit recomputed; claimed values must match\"] Oracle[\"Oracle diff + mutation realized vs predicted direction; bounded dossier deltas\"] LargeMiss[\"Direction-right, numeric-miss surfaced, not hidden\"] Gated[\"Degraded / missing-truth rows gated, not fabricated\"] Result records[\"metadata-only result records result, board, validation, sign-off; counts and verdicts\"] Ceiling[\"Scope limit synthetic fixture only; no trading, advice, provider, live market, publish, launch\"] Packet --> CP1 Packet --> CP2 Packet --> Numeric Packet --> Oracle Numeric --> LargeMiss Numeric --> Gated CP1 --> Result records CP2 --> Result records LargeMiss --> Result records Gated --> Result records Oracle --> Result records Result records --> Ceiling\n```\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[54:paper_module.prediction_oracle_reconciliation]` sets `source_authority: json_capsule`, binds the component, binds `mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation`, and resolves `src/microcosm_core/organs/prediction_oracle_reconciliation.py`.\n- Generated instance: `paper_modules/prediction_oracle_reconciliation.json` reports `paper_module_payload.source_authority: json_capsule`, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, 15 relationship edges, and no unpopulated selective relations.\n- Runtime and fixture floor: `src/microcosm_core/organs/prediction_oracle_reconciliation.py` exposes `run`, `run_prediction_bundle`, `validate_source_module_imports`, `validate_reconciliation_packet`, `_source_open_body_import_summary`, `write_receipts`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`. `fixtures/first_wave/prediction_oracle_reconciliation/input/reconciliation_packet.json` carries the synthetic CP1/CP2, oracle-diff, target-universe, and dossier-mutation evidence shape.\n- Exported bundle and result records: `examples/prediction_oracle_reconciliation/exported_prediction_oracle_bundle/source_module_manifest.json` and the exported source artifacts provide source-open replay evidence. `receipts/first_wave/prediction_oracle_reconciliation/prediction_oracle_reconciliation_result.json`, `prediction_oracle_validation_receipt.json`, and result records/sign-off/first_wave/prediction_oracle_reconciliation_fixture_acceptance.json keep the result record metadata-only and fixture-bounded.\n- Test and claim boundary: `tests/test_prediction_oracle_reconciliation.py` checks invalid target universes, unresolved CP1 branches, post-target evidence, unsafe dossier mutation, live-market/trading/advice overclaims, exported-bundle validation, and source-module digest gates. The structured source record scope limit excludes forecasting correctness, financial decisions, trading authority, live market data, external model access, prediction public sharing, performance track record, non-public data import, launch-scope decision, publishing-scope decision, and whole-system correctness.\n\n###### Reader Evidence Routing\n\nOpen this module as a reader map, not as prediction evidence. Use the runtime fixture input for packet shape, the exported bundle for source-open replay, the structured source record for relationship edges, and the test file for the negative cases that enforce the scope limit.\n\nRoute evidence in this order:\n1. Read the structured lattice bindings section to confirm the source record path and subject edges.\n2. Inspect the fixture input for declared target universes, CP1 branches, CP2 prediction evidence, oracle-diff rows, and fixture-bounded dossier mutations.\n3. Run the fixture and exported-bundle commands to produce metadata-only result records.\n4. Check `tests/test_prediction_oracle_reconciliation.py` for the negative cases that reject target-universe escapes, unresolved CP1 branches, post-target evidence, live-market overclaims, and authority overclaims.\n5. Use `paper_modules/prediction_oracle_reconciliation.json` as the generated relationship graph for this module.\n\n###### Negative Cases\n\nThe fixture rejects:\n- a CP2 prediction outside the target universe;\n- an unresolved CP1 bifurcation;\n- post-target evidence used as prediction evidence;\n- unconfirmed equity or market-lane claims;\n- unsafe high-severity dossier mutation;\n- trading, advice, live-provider, public sharing, launch, or secret-export authority overclaims.\n\n###### Prior Art Grounding\n\nThis component is grounded in probabilistic forecast evaluation and prediction market infrastructure. The [Brier score](https://journals.ametsoc.org/doi/10.1175/1520-0493%281950%29078%3C0001%3AVOFEIT%3E2.0.CO%3B2) is an early probability-forecast verification anchor, proper-scoring-rule work such as [Gneiting and Raftery](https://sites.stat.washington.edu/people/raftery/Research/PDF/Gneiting2007jasa.pdf) motivates incentive-compatible forecast scoring, and Hanson's [logarithmic market scoring rule](https://hanson.gmu.edu/mktscore.pdf) grounds the prediction-market idea that forecasts can be updated and evaluated through explicit scoring mechanisms. Forecasting tournament work around tracking and calibration also motivates separating prediction evidence from post-outcome explanation.\n\nMicrocosm borrows the reconciliation pattern: declare the target universe before the outcome, keep pre-target evidence separate from post-target evidence, grade against a synthetic oracle diff, and constrain dossier mutation to declared fixture deltas. It does not trade, advise, publish predictions, or claim forecast performance.\n\n###### Commands\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.prediction_oracle_reconciliation run \\\n  --input fixtures/first_wave/prediction_oracle_reconciliation/input \\\n  --out receipts/first_wave/prediction_oracle_reconciliation\n\nPYTHONPATH=src python3 -m microcosm_core.organs.prediction_oracle_reconciliation run-prediction-bundle \\\n  --input examples/prediction_oracle_reconciliation/exported_prediction_oracle_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/prediction_oracle_reconciliation\n```\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.prediction_oracle_reconciliation run \\\n  --input fixtures/first_wave/prediction_oracle_reconciliation/input \\\n  --out /tmp/microcosm-prediction-oracle-reconciliation/fixture \\\n  --card\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.prediction_oracle_reconciliation run-prediction-bundle \\\n  --input examples/prediction_oracle_reconciliation/exported_prediction_oracle_bundle \\\n  --out /tmp/microcosm-prediction-oracle-reconciliation/bundle \\\n  --card\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_prediction_oracle_reconciliation.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nA passing run proves only synthetic target-universe reconciliation, CP1/CP2 accounting, oracle-diff grading, and fixture-bounded dossier mutation; it does not establish forecasting performance, financial decisions, trading authority, live market access, public sharing, or launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module covers only fixture-bounded prediction-oracle reconciliation: synthetic target-universe accounting, CP1/CP2 separation, oracle-diff grading, dossier mutation constraints, copied source-module import evidence, negative cases, and public result records. They do not prove forecasting accuracy, financial decisions, trading authority, live-market access, provider behavior, prediction public sharing, performance track record, private-data import, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\n###### Limitations\n\nThe target universe, CP1 branches, CP2 evidence, realized values, oracle diff, and dossier mutations are fixture artifacts. They exercise the shape of a reconciliation pipeline, but they are not live market data, a validated forecasting track record, an investment strategy, or a prediction public sharing surface. A direction hit or numeric miss inside the result record is evidence about the synthetic packet only.\n\nThe exported bundle is source-open in the narrow body-floor sense. It digest checks copied source contracts, node manifests, tool code, pattern rows, and route-decision artifacts while keeping body text out of result records. That does not certify private source-root equivalence, provider behavior, account or session state, hidden market feeds, private dossiers, or launch-scope decision.\n\nThe negative cases are scoped regression guards. They reject invalid targets, unresolved bifurcations, post-target evidence, unconfirmed equity-lane claims, unsafe dossier mutation, trading/advice overclaims, degraded feed misuse, missing realized numeric truth, and asset-class mixing. Those refusals do not prove full financial safety, whole-system correctness, runtime correctness outside the named component, or complete secret absence beyond the declared scanner envelope.\n\n###### Scope limit\n\nSynthetic invented prediction packet and source-module import evidence only; no forecasting correctness or accuracy, no trading, financial, or investment-related actions, no live market data, no external model access, no prediction public sharing, no performance track record, no non-public data import, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.\n\n###### Scope boundary\n\nThis module demonstrates synthetic prediction-reconciliation mechanics only. It does not trade, give financial or investment-related actions, call live market providers, publish predictions, claim forecasting performance, import non-public data, or include launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n- source record: `core/paper_module_capsules.json::paper_modules[54:paper_module.prediction_oracle_reconciliation]`.\n- Subject edges: explains component `prediction_oracle_reconciliation` and mechanism `mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation`.\n- Doctrine edges: governed by principles `P-2`, `P-6`, `P-8`, and `P-9`; abides by axioms `AX-5`, `AX-7`, `AX-8`, and `AX-10`.\n- Dependency edges: depends on `paper_module.finance_forecast_evaluation_spine`, `paper_module.world_model_projection_drift_control_room`, and `paper_module.research_replication_rubric_artifact_replay`.\n- Runtime code locus: `src/microcosm_core/organs/prediction_oracle_reconciliation.py`, including `run`, `run_prediction_bundle`, `validate_source_module_imports`, `validate_reconciliation_packet`, `_source_open_body_import_summary`, `_build_result`, `write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- Generated row proof: 15 resolved relationship edges, no unpopulated selective relations, Mermaid `available_from_capsule_edges`, and Atlas `linked_from_capsule_edges`.\n\nThe governing lattice turns the component into a bounded reconciliation checker rather than a forecast authority. `P-2` lowers every positive claim to the checker strength: CP1/CP2 accounting, oracle-diff grading, numeric-row gates, source-module digest checks, negative cases, and metadata-only result records. `P-6` fails closed when a branch is unresolved, a target escapes the declared universe, a source digest mismatches, or an authority flag tries to rise above the accepted component ceiling. `P-8` makes those refusals typed outcomes instead of prose warnings. `P-9` carries source refs, public runtime refs, copied-body material status, and result record refs across the fixture and exported bundle.\n\nThe axiom layer supplies the same boundary. `AX-5` prevents the fixture from upgrading synthetic reconciliation evidence into trading, advice, live-market, provider, public sharing, launch, or performance-track-record authority. `AX-7` permits partiality: degraded feed health, missing realized numeric truth, and asset-class split pressure are surfaced as scoped findings rather than hidden successes. `AX-8` keeps copied source bodies while excluding live market data, model-output data bodies, private dossiers, and account secret-equivalent material. `AX-10` requires the target-universe, CP1/CP2, oracle-diff, and source-module evidence to be tied to the current fixture or bundle result records before the Markdown projection is treated as current.\n\nThe structured source record's 15 edges prove route parity only.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 18733,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A forecast that gets the direction right can still be badly wrong about the number, and a forecast can look accurate only because it quietly used evidence that arrived after the outcome it was meant to predict. This component exists to make those two failures visible on a synthetic packet, before any reasoning is dressed up as a track record. The single question it answers is narrow: does this prediction packet keep its evidence honest and its grading recomputable, or does it cut a corner? The unusual choice is that the component does not trust the numbers the packet reports. For every numeric row it recomputes the absolute error, the percent error, and the direction hit from the snapshot,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "The input packet names: sourcepatternids for the source pattern family being projected. validpredictiontargets and target_universe for the CP2 gate. cp1_branches with selected side, rationale refs, and opposite-side invalidation refs. cp2_predictions with pre-target evidence refs and grounding ids. oracle_diff rows that grade synthetic realized direction against prediction. dossier_mutations constrained to fixture deltas. publicruntimerefs for the public fixture, exported bundle, and paper module system refs. scope_limit values that explicitly keep trading, advice, provider, live-market, public sharing, launch, and secret-export authority false.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "validatereconciliationpacket runs five checks over the packet and folds the findings into one status. Each check guards a specific way a forecast can flatter itself. CP1 resolution. Every cp1_branches row must name the side it chose, carry rationale refs, and keep an oppositesideinvalidation_ref, the record of why the losing side lost. A branch that asserts a winner without retaining the discarded alternative is rejected as an unresolved bifurcation. Equity or market-lane branches additionally need an explicit confirmation bit before they count. CP2 universe and pre-target evidence. Predictions must name a target_id inside the declared validpredictiontargets, so the set of things being pred\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "source record: core/papermodulecapsules.json::papermodules[54:papermodule.predictionoraclereconciliation]. Subject edges: explains component predictionoraclereconciliation and mechanism mechanism.predictionoraclereconciliation.validatespublicpredictionoraclereconciliation. Doctrine edges: governed by principles P-2, P-6, P-8, and P-9; abides by axioms AX-5, AX-7, AX-8, and AX-10. Dependency edges: depends on papermodule.financeforecastevaluationspine, papermodule.worldmodelprojectiondriftcontrolroom, and papermodule.researchreplicationrubricartifact_replay. Runtime code locus: src/microcosmcore/components/predictionoracle_reconciliation.py, including run, runpredictionbundle, validatesource\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Evidence/accounting: Bundle authority: core/papermodulecapsules.json::papermodules[54:papermodule.predictionoraclereconciliation] sets sourceauthority: jsoncapsule, binds the component, binds mechanism.predictionoraclereconciliation.validatespublicpredictionoraclereconciliation, and resolves src/microcosmcore/components/predictionoracle_reconciliation.py. Generated instance: papermodules/predictionoracle_reconciliation.json reports papermodulepayload.sourceauthority: jsoncapsule, Mermaid availablefromcapsuleedges, Atlas linkedfromcapsuleedges, 15 relationship edges, and no unpopulated selective relations. Runtime and fixture floor: src/microcosmcore/components/predictionoracle_reconciliatio\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Open this module as a reader map, not as prediction evidence. Use the runtime fixture input for packet shape, the exported bundle for source-open replay, the structured source record for relationship edges, and the test file for the negative cases that enforce the scope limit. Route evidence in this order: Read the structured lattice bindings section to confirm the source record path and subject edges. Inspect the fixture input for declared target universes, CP1 branches, CP2 prediction evidence, oracle-diff rows, and fixture-bounded dossier mutations. Run the fixture and exported-bundle commands to produce metadata-only result records. Check tests/testpredictionoracle_reconciliation.py for\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module covers only fixture-bounded prediction-oracle reconciliation: synthetic target-universe accounting, CP1/CP2 separation, oracle-diff grading, dossier mutation constraints, copied source-module import evidence, negative cases, and public result records. They do not prove forecasting accuracy, financial decisions, trading authority, live-market access, provider behavior, prediction public sharing, performance track record, private-data import, launch-scope decision, public sharing decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The target universe, CP1 branches, CP2 evidence, realized values, oracle diff, and dossier mutations are fixture artifacts. They exercise the shape of a reconciliation pipeline, but they are not live market data, a validated forecasting track record, an investment strategy, or a prediction public sharing surface. A direction hit or numeric miss inside the result record is evidence about the synthetic packet only. The exported bundle is source-open in the narrow body-floor sense. It digest checks copied source contracts, node manifests, tool code, pattern rows, and route-decision artifacts while keeping body text out of result records. That does not certify private source-root equivalence, p\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The fixture rejects: a CP2 prediction outside the target universe; an unresolved CP1 bifurcation; post-target evidence used as prediction evidence; unconfirmed equity or market-lane claims; unsafe high-severity dossier mutation; trading, advice, live-provider, public sharing, launch, or secret-export authority overclaims.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in probabilistic forecast evaluation and prediction market infrastructure. The Brier score is an early probability-forecast verification anchor, proper-scoring-rule work such as Gneiting and Raftery motivates incentive-compatible forecast scoring, and Hanson's logarithmic market scoring rule grounds the prediction-market idea that forecasts can be updated and evaluated through explicit scoring mechanisms. Forecasting tournament work around tracking and calibration also motivates separating prediction evidence from post-outcome explanation. Microcosm borrows the reconciliation pattern: declare the target universe before the outcome, keep pre-target evidence separat\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "commands",
       "title": "Commands",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run from microcosm-substrate: A passing run proves only synthetic target-universe reconciliation, CP1/CP2 accounting, oracle-diff grading, and fixture-bounded dossier mutation; it does not establish forecasting performance, financial decisions, trading authority, live market access, public sharing, or launch.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "Synthetic invented prediction packet and source-module import evidence only; no forecasting correctness or accuracy, no trading, financial, or investment-related actions, no live market data, no external model access, no prediction public sharing, no performance track record, no non-public data import, no launch-scope decision, no public sharing decision, and no whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module demonstrates synthetic prediction-reconciliation mechanics only. It does not trade, give financial or investment-related actions, call live market providers, publish predictions, claim forecasting performance, import non-public data, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.prediction_oracle_reconciliation.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Packet[\"Synthetic prediction packet target universe, CP1 branches, CP2 predictions, oracle diff, numeric rows, dossier mutations\"] CP1[\"CP1 resolution chosen side + rationale + why the opposite side lost; equity lane needs confirmation\"] CP2[\"CP2 universe + evidence target inside declared universe; evidence must be pre-target (T-)\"] Numeric[\"Recomputed numeric grading abs error, percent error, direction hit recomputed; claimed values must match\"] Oracle[\"Oracle diff + mutation realized vs predicted direction; bounded dossier deltas\"] LargeMiss[\"Direction-right, numeric-miss surfaced, not hidden\"] Gated[\"Degraded / missing-truth rows gated, not fabricated\"] Result records[\"metadata-only result records result, board, validation, sign-off; counts and verdicts\"] Ceiling[\"Scope limit synthetic fixture only; no trading, advice, provider, live market, publish, launch\"] Packet --> CP1 Packet --> CP2 Packet --> Numeric Packet --> Oracle Numeric --> LargeMiss Numeric --> Gated CP1 --> Result records CP2 --> Result records LargeMiss --> Result records Gated --> Result records Oracle --> Result records Result records --> Ceiling",
       "source_hash": "sha256:191721619721d20cd10449cd88dd7593711a7c8639515f1104ddddc48bd40fee",
       "html_url": "docs/paper-modules.html#paper-module-prediction-oracle-reconciliation-diagram-1",
       "html_anchor": "paper-module-prediction-oracle-reconciliation-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/prediction_oracle_reconciliation.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Brier score",
       "url": "https://journals.ametsoc.org/doi/10.1175/1520-0493%281950%29078%3C0001%3AVOFEIT%3E2.0.CO%3B2",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Gneiting and Raftery",
       "url": "https://sites.stat.washington.edu/people/raftery/Research/PDF/Gneiting2007jasa.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "logarithmic market scoring rule",
       "url": "https://hanson.gmu.edu/mktscore.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.finance_forecast_evaluation_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Finance Forecast Evaluation Spine",
         "url": "paper-modules.html#paper-module-finance-forecast-evaluation-spine"
        },
        {
         "id": "paper_module.world_model_projection_drift_control_room",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "World-Model Projection Drift Control Room",
         "url": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
        },
        {
         "id": "paper_module.research_replication_rubric_artifact_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Research Replication Rubric Artifact Replay",
         "url": "paper-modules.html#paper-module-research-replication-rubric-artifact-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "prediction_oracle_reconciliation",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Prediction Oracle Reconciliation",
         "url": "components.html#component-prediction_oracle_reconciliation"
        },
        {
         "id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public prediction oracle reconciliation",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.research_and_science_replay_evidence_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "research and science replay validators as reproducibility scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/prediction_oracle_reconciliation.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 19978
    },
    {
     "id": "paper_module.provider_context_recipe_budget",
     "title": "Provider Context Recipe Budget",
     "relative_href": "docs/paper-modules.html#paper-module-provider-context-recipe-budget",
     "read_href": "docs/paper-modules.html#paper-module-provider-context-recipe-budget",
     "context_href": "docs/rules-and-ideas.html#paper-module-provider-context-recipe-budget",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Provider Context Recipe Budget validates context-budget projection mechanics without authorizing external model access or truth-side material.",
     "summary": "Provider Context Recipe Budget validates provider-context recipe mechanics: fixed byte ceilings, ordered section fill, omitted-section manifests, deliverable routing, digest-checked source-body imports, forbidden-body rejection, negative cases, and scope limits. It emits context metadata and verdicts only, without provider/API authorization, Lean/Lake execution, proof or oracle truth-side material, formal-result correctness, domain-level conclusions, launch, public sharing, or whole-system correctness.",
     "authority_ceiling": "Context-budget projection fixture and source-body import evidence only; no provider or API call authorization, no Lean or Lake execution, no proof or oracle truth-side material, no theorem or domain-level conclusions, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "abstract": "Provider Context Recipe Budget validates context-budget projection mechanics without authorizing external model access or truth-side material.",
     "teleology": {
      "section_id": "",
      "text": "Provider Context Recipe Budget validates context-budget projection mechanics without authorizing external model access or truth-side material.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`provider_context_recipe_budget_policy` is the public Microcosm component for turning retrieved proof-support metadata into bounded provider context recipes.\n\nIt validates six public recipe shapes: `minimal_4kb`, `premise_16kb`, `skill_32kb`, `repair_32kb`, `fewshot_64kb`, and `strategy_classification_4kb`. Each recipe has a fixed byte ceiling, ordered section fill, a graph role, a reducer deliverable type, and an omitted-sections manifest when a section cannot fit.\n\n###### Purpose\n\nThis component answers one question: when a proof-support pipeline is about to hand material to a model, which sections fit inside a fixed byte budget, in what order, and which sections are dropped? It treats the context window as a budget to spend rather than a place to dump everything retrieved. The board records this stance directly as `context_is_budget_not_dump`.\n\nThe byte sizes are not asserted by the fixture. The validator imports the copied benchmark harness, runs its real `_provider_context_pack` over each recipe, and measures the actual byte size of each packed section. A recipe is filled in declared order, admitting a section only while the running total stays under the ceiling, so an over-budget section is omitted and named in an explicit manifest rather than silently truncated. If the harness is unavailable the component falls back to declared sizes and says so, rather than guessing.\n\nThe second deliberate choice is what cannot enter context at all. A small fixed set of section ids and field keys, covering proof bodies, oracle-only premise ids, ideal answers, and provider output bodies, is rejected structurally, not by convention. Any recipe or section material carrying one of them is blocked before a packet is built. The output is metadata about the context shape: byte ceilings, the admitted and omitted section ids, the deliverable route, and a set of authority claims that stay false. No provider is called and no answer is produced.\n\n###### Shape\n\nSource refs\n\nJSON bundle `paper_module.provider_context_recipe_budget` `provider_context_recipe_budget.md` 6 public recipe budgets `provider_context_recipes.json` Runtime `provider_context_recipe_budget_policy.py` 9 source-backed sections `section_materials.json` 8 copied bodies `source_module_manifest.json` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.provider_context_recipe_budget\"] --> Instance[\"Generated instance 19 relationships, no selective residuals\"] Bundle --> Markdown[\"Reader projection provider_context_recipe_budget.md\"] Recipes[\"provider_context_recipes.json 6 public recipe budgets\"] --> Runtime[\"provider_context_recipe_budget_policy.py\"] Sections[\"section_materials.json 9 source-backed sections\"] --> Runtime SourceManifest[\"source_module_manifest.json 8 copied bodies\"] --> Runtime NegativeCases[\"negative fixtures 7 forbidden-boundary cases\"] --> Runtime Runtime --> Projection[\"context_packets included/omitted sections, byte counts, routes\"] Runtime --> Result records[\"metadata-only result records result, board, validation, sign-off\"] Projection --> Ceiling[\"scope limit no provider/proof/launch-scope decision\"] Result records --> Ceiling\n```\n\nEvidence and accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[55:paper_module.provider_context_recipe_budget]` sets `source_authority: json_capsule`, subjects the component `provider_context_recipe_budget_policy` plus mechanism `mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary`, and names `generated_projections.mermaid.status: available_from_capsule_edges` plus `generated_projections.atlas_card.status: linked_from_capsule_edges`.\n- Generated instance: `paper_modules/provider_context_recipe_budget.json::relationships.edges` contains 19 bundle-derived relationship edges, and `relationships.unpopulated_selective_relations` is empty. That is lattice wiring evidence, not implementation-correctness proof.\n- Runtime accounting: `src/microcosm_core/organs/provider_context_recipe_budget_policy.py` defines `EXPECTED_RECIPE_BUDGETS` for the six recipes, `EXPECTED_DELIVERABLES` for their reducer routes, `_recipe_projection` for included/omitted section accounting, `_recipe_findings` and `_section_findings` for boundary errors, and `_write_receipts` for metadata-only result record output.\n- Fixture inputs: `fixtures/first_wave/provider_context_recipe_budget_policy/input/provider_context_recipes.json` carries six public recipes with byte budgets from 4096 to 65536, while `.../section_materials.json` carries nine section rows with source refs and anchors.\n- Body-floor and result records: `core/fixture_manifests/provider_context_recipe_budget_policy.fixture_manifest.json` records `body_copied_material_count: 8`, seven `negative_case_ids`, four expected fixture result record paths, and `source_open_body_imports.authority_ceiling` fields that keep external model access, Lean/Lake execution, proof authority, truth-side material, payload export, runtime-correctness claims, and launch-scope decision false.\n- Focused tests: `tests/test_provider_context_recipe_budget_policy.py` checks the six recipe ids, expected negative cases, source-backed section materials, public-relative redacted result records, exported bundle validation, omitted-section movement when section size changes, digest mismatch rejection, and manifest body-text result record-boundary rejection.\n\n###### Technical Mechanism\n\nThe runtime mechanism is a context-packet compiler plus boundary validator. It does not ask a provider for an answer. `run` loads fixture inputs with negative cases enabled; `run_budget_bundle` loads the exported bundle shape without the fixture-only negative cases. Both routes call `_build_result`, which loads recipe rows, section rows, copied source-module bodies, and the non-public-state scan policy before it constructs any result record.\n\nRecipe projection is deterministic. `_recipe_projection` walks each recipe's ordered section ids, computes each section's byte size with `_byte_size`, admits a section only while the running total stays within the recipe's `byte_budget`, and records omitted sections when the next section would exceed the budget. The projection records graph role, deliverable type, included and omitted section ids, included bytes, approximate tokens, and whether the omitted-sections manifest is emitted. The six public recipes are the closed set in `EXPECTED_RECIPE_BUDGETS`: `minimal_4kb`, `premise_16kb`, `skill_32kb`, `repair_32kb`, `fewshot_64kb`, and `strategy_classification_4kb`.\n\nThe validator then checks three independent boundaries. `_recipe_findings` rejects budget changes, forbidden truth-side section ids, proof/provider body fields, provider-call authorization, deliverable-route drift, and over-budget context with no omitted-sections manifest. `_section_findings` requires each public section to cite an allowed source ref and source anchor, verifies those anchors against the copied source bodies, and rejects synthetic or truth-side section material. `_source_module_findings` checks the source-module manifest, expected module ids, metadata-only result record flags, target presence, source/target digest equality, and required anchors for the eight copied source bodies.\n\nThe result record mechanism is deliberately metadata-only. `_write_receipts` writes the fixture result, board, validation result record, and sign-off result record for fixture mode; bundle mode writes only the exported-bundle validation result. `result_card` emits a compact command card while omitting context packets, source-module imports, source refs, result record paths, private scan hit bodies, and the scope boundary payload. The full result records keep counts, ids, hashes, routes, and verdicts, bounded evidence bodies or provider answers.\n\nIn lattice terms, the JSON bundle binds this Markdown projection to `provider_context_recipe_budget_policy`, to `mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary`, and to `concept.agent_reliability_and_safety_validator_bundle`. The principle and axiom refs in the bundle (`P-1`, `P-2`, `P-3`, `P-6`, `P-8`, `P-16` and `AX-1`, `AX-2`, `AX-5`, `AX-7`, `AX-8`, `AX-9`) are implemented here as admission control over public evidence: bounded context metadata is allowed, truth-side material and provider authority are not.\n\n###### Runtime Surfaces\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.provider_context_recipe_budget_policy run \\\n  --input fixtures/first_wave/provider_context_recipe_budget_policy/input \\\n  --out receipts/first_wave/provider_context_recipe_budget_policy\nPYTHONPATH=src python3 -m microcosm_core.cli provider-context-recipe-budget-policy run-budget-bundle \\\n  --input examples/provider_context_recipe_budget_policy/exported_provider_context_budget_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/provider_context_recipe_budget_policy\n```\n\n###### Named Proof Consumers\n\nThe named proof consumer is `tests/test_provider_context_recipe_budget_policy.py`. It verifies streaming hash and line-count helpers, real-text byte sizing, all six expected recipe ids, all seven negative cases, source-backed section material, public-relative and redacted result records, exported-bundle validation, omitted-section movement when a section becomes small enough to fit, source-module digest mismatch rejection, source/target digest mismatch rejection, manifest and row body-text result record boundary rejection, compact `--card` output, exact copied source body imports, and fixture-manifest source-open body-floor counts.\n\nThe runtime proof consumers are the two module commands in the Validation Result record Path: `provider_context_recipe_budget_policy run` for fixture mode and `provider_context_recipe_budget_policy run-budget-bundle` for exported-bundle mode. Fixture mode must observe the negative-case set and write result, board, validation, and sign-off result records. Bundle mode must validate the exported runtime shape and write one metadata-only bundle validation result.\n\nThe corpus proof consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`.\n\n###### Reader Evidence Routing\n- Start with the JSON Bundle Binding to identify the source record and the launch-safe scope limit before reading any validation result as a capability claim.\n- Use Structured Lattice Bindings for navigation: it names the component, mechanism, generated row, and runtime code locus that the bundle binds.\n- Use Validation Result record Path for reproducibility: fixture and bundle commands produce metadata-only result records, the focused pytest exercises negative cases, and the corpus check verifies paper-module projection parity.\n- The lattice wiring for this module supports discoverability and internal consistency checks; it does not establish external model service, Lean/Lake execution, formal-result correctness, launch-scope decision, or public-send permission.\n\n###### Negative Cases\n- `budget_overflow_recipe` rejects recipes above the public byte ceiling.\n- `truth_side_section` rejects oracle-only section ids.\n- `proof_body_leakage` rejects proof and provider body fields.\n- `provider_call_authorized` rejects any public fixture that authorizes a external model access.\n- `deliverable_type_route_mismatch` rejects a recipe whose reducer output type changed.\n- `omitted_sections_suppressed` rejects over-budget context without an omitted-sections manifest.\n- `synthetic_section_materials` rejects section material that lacks an allowed source ref or source anchor, or that is otherwise synthetic.\n\n###### Why It Matters\n\nMicrocosm needs provider context to look like a small operating system, not a prompt dump. This component makes the context boundary inspectable: a cold reader can see the exact byte ceilings, section order, omitted material, and deliverable routes before any provider or proof authority is even in scope.\n\n###### Prior Art Grounding\n\nThe recipe budget is grounded in retrieval-augmented generation and context packing practice. Lewis et al.'s [Retrieval-Augmented Generation](https://arxiv.org/abs/2005.11401) paper is the direct research anchor for conditioning generation on retrieved supporting material rather than relying only on model parameters. Microcosm narrows that idea into recipe metadata: retrieved proof-support sections are budgeted, ordered, and omitted explicitly before any external model access is in scope.\n\nThe command-facing budget style also borrows from the [Command Line Interface Guidelines](https://clig.dev/) principle of saying enough but not too much. The component turns that UX pressure into fixed byte ceilings, omitted-section manifests, and deliverable-type routing so \"more context\" does not silently become proof authority or provider authorization.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.provider_context_recipe_budget_policy run \\\n  --input fixtures/first_wave/provider_context_recipe_budget_policy/input \\\n  --out /tmp/microcosm-provider-context-recipe-budget-policy/fixture \\\n  --card\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.provider_context_recipe_budget_policy run-budget-bundle \\\n  --input examples/provider_context_recipe_budget_policy/exported_provider_context_budget_bundle \\\n  --out /tmp/microcosm-provider-context-recipe-budget-policy/bundle \\\n  --card\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_provider_context_recipe_budget_policy.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nA green result record proves only public context-recipe metadata, byte ceilings, omitted sections, deliverable routing, copied source-module refs, and negative cases; it does not use external model services, run Lean or Lake, prove formal-result correctness, export proof bodies, expose oracle-only material, include launch operations, or convert context metadata into proof authority.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component does not use external model services, run Lean or Lake, prove a theorem, expose a proof body, or reveal oracle-only truth-side material. Its output is context metadata: which sections would be admitted, which sections were omitted, which deliverable route is allowed, and which authority claims remain false.\n\nThe `strategy_classification_4kb` route emits only `strategy_id_classification`. It is not a proof-body route and cannot carry a provider answer body.\n\n###### Scope limit\n\nThis module covers only public context-recipe metadata: byte ceilings, ordered section admission, omitted-section manifests, deliverable routing, copied source-module refs, digest and anchor checks, negative cases, and metadata-only result records. They do not authorize provider or API calls, Lean or Lake execution, formal-result correctness, proof-body export, oracle-only truth-side material, provider answer bodies, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe public bundle carries exact source bodies for the context recipe compiler, formal ladder consumer, provider result record reducer, set calibration report, transform-job ABI, provider adapter policy, compute-provider policy, and provider-navigation transform result record policy. The validator checks every copied module by digest and required anchors; result records report only paths, hashes, counts, anchor status, and verdicts.\n\nThe body floor is deliberately metadata-only at the result record edge: runtime result records may prove copied-module paths, digests, anchor presence, counts, and verdicts, but they must not expose proof bodies, oracle-only truth-side material, provider answer bodies, account state, account secrets, or launch-send authority.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 15940,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This component answers one question: when a proof-support pipeline is about to hand material to a model, which sections fit inside a fixed byte budget, in what order, and which sections are dropped? It treats the context window as a budget to spend rather than a place to dump everything retrieved. The board records this stance directly as contextisbudgetnotdump. The byte sizes are not asserted by the fixture. The validator imports the copied benchmark harness, runs its real providercontext_pack over each recipe, and measures the actual byte size of each packed section. A recipe is filled in declared order, admitting a section only while the running total stays under the ceiling, so an over-\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This component does not use external model services, run Lean or Lake, prove a theorem, expose a proof body, or reveal oracle-only truth-side material. Its output is context metadata: which sections would be admitted, which sections were omitted, which deliverable route is allowed, and which authority claims remain false. The strategyclassification4kb route emits only strategyidclassification. It is not a proof-body route and cannot carry a provider answer body.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module covers only public context-recipe metadata: byte ceilings, ordered section admission, omitted-section manifests, deliverable routing, copied source-module refs, digest and anchor checks, negative cases, and metadata-only result records. They do not authorize provider or API calls, Lean or Lake execution, formal-result correctness, proof-body export, oracle-only truth-side material, provider answer bodies, launch-scope decision, public sharing decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Evidence and accounting: Bundle authority: core/papermodulecapsules.json::papermodules[55:papermodule.providercontextrecipe_budget] sets sourceauthority: jsoncapsule, subjects the component providercontextrecipebudgetpolicy plus mechanism mechanism.providercontextrecipebudgetpolicy.validatespubliccontextbudgetboundary, and names `generated_projections.mermaid.status: availablefromcapsuleedges plus generatedprojections.atlas_card.status: linkedfromcapsule_edges`. Generated instance: papermodules/providercontextrecipebudget.json::relationships.edges contains 19 bundle-derived relationship edges, and relationships.unpopulatedselectiverelations is empty. That is lattice wiring evidence, not imp\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism is a context-packet compiler plus boundary validator. It does not ask a provider for an answer. run loads fixture inputs with negative cases enabled; runbudgetbundle loads the exported bundle shape without the fixture-only negative cases. Both routes call buildresult, which loads recipe rows, section rows, copied source-module bodies, and the non-public-state scan policy before it constructs any result record. Recipe projection is deterministic. recipeprojection walks each recipe's ordered section ids, computes each section's byte size with bytesize, admits a section only while the running total stays within the recipe's byte_budget, and records omitted sections when t\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-surfaces",
       "title": "Runtime Surfaces",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run from microcosm-substrate: A green result record proves only public context-recipe metadata, byte ceilings, omitted sections, deliverable routing, copied source-module refs, and negative cases; it does not use external model services, run Lean or Lake, prove formal-result correctness, export proof bodies, expose oracle-only material, include launch operations, or convert context metadata into proof authority.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "The named proof consumer is tests/testprovidercontextrecipebudget_policy.py. It verifies streaming hash and line-count helpers, real-text byte sizing, all six expected recipe ids, all seven negative cases, source-backed section material, public-relative and redacted result records, exported-bundle validation, omitted-section movement when a section becomes small enough to fit, source-module digest mismatch rejection, source/target digest mismatch rejection, manifest and row body-text result record boundary rejection, compact --card output, exact copied source body imports, and fixture-manifest source-open body-floor counts. The runtime proof consumers are the two module commands in the Vali\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The public bundle carries exact source bodies for the context recipe compiler, formal ladder consumer, provider result record reducer, set calibration report, transform-job ABI, provider adapter policy, compute-provider policy, and provider-navigation transform result record policy. The validator checks every copied module by digest and required anchors; result records report only paths, hashes, counts, anchor status, and verdicts. The body floor is deliberately metadata-only at the result record edge: runtime result records may prove copied-module paths, digests, anchor presence, counts, and verdicts, but they must not expose proof bodies, oracle-only truth-side material, provider answer b\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with the JSON Bundle Binding to identify the source record and the launch-safe scope limit before reading any validation result as a capability claim. Use Structured Lattice Bindings for navigation: it names the component, mechanism, generated row, and runtime code locus that the bundle binds. Use Validation Result record Path for reproducibility: fixture and bundle commands produce metadata-only result records, the focused pytest exercises negative cases, and the corpus check verifies paper-module projection parity. The lattice wiring for this module supports discoverability and internal consistency checks; it does not establish external model service, Lean/Lake execution, formal-res\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "budgetoverflowrecipe rejects recipes above the public byte ceiling. truthsidesection rejects oracle-only section ids. proofbodyleakage rejects proof and provider body fields. providercallauthorized rejects any public fixture that authorizes a external model access. deliverabletyperoute_mismatch rejects a recipe whose reducer output type changed. omittedsectionssuppressed rejects over-budget context without an omitted-sections manifest. syntheticsectionmaterials rejects section material that lacks an allowed source ref or source anchor, or that is otherwise synthetic.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "why-it-matters",
       "title": "Why It Matters",
       "level": 2,
       "excerpt": "Microcosm needs provider context to look like a small operating system, not a prompt dump. This component makes the context boundary inspectable: a cold reader can see the exact byte ceilings, section order, omitted material, and deliverable routes before any provider or proof authority is even in scope.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The recipe budget is grounded in retrieval-augmented generation and context packing practice. Lewis et al.'s Retrieval-Augmented Generation paper is the direct research anchor for conditioning generation on retrieved supporting material rather than relying only on model parameters. Microcosm narrows that idea into recipe metadata: retrieved proof-support sections are budgeted, ordered, and omitted explicitly before any external model access is in scope. The command-facing budget style also borrows from the Command Line Interface Guidelines principle of saying enough but not too much. The component turns that UX pressure into fixed byte ceilings, omitted-section manifests, and deliverable-ty\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.provider_context_recipe_budget.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"JSON bundle paper_module.provider_context_recipe_budget\"] --> Instance[\"Generated instance 19 relationships, no selective residuals\"] Bundle --> Markdown[\"Reader projection provider_context_recipe_budget.md\"] Recipes[\"provider_context_recipes.json 6 public recipe budgets\"] --> Runtime[\"provider_context_recipe_budget_policy.py\"] Sections[\"section_materials.json 9 source-backed sections\"] --> Runtime SourceManifest[\"source_module_manifest.json 8 copied bodies\"] --> Runtime NegativeCases[\"negative fixtures 7 forbidden-boundary cases\"] --> Runtime Runtime --> Projection[\"context_packets included/omitted sections, byte counts, routes\"] Runtime --> Result records[\"metadata-only result records result, board, validation, sign-off\"] Projection --> Ceiling[\"scope limit no provider/proof/launch-scope decision\"] Result records --> Ceiling",
       "source_hash": "sha256:35fc396f20ff56ed971d7167445dd746b608bdc4e4f3c26a4752db3823e55e69",
       "html_url": "docs/paper-modules.html#paper-module-provider-context-recipe-budget-diagram-1",
       "html_anchor": "paper-module-provider-context-recipe-budget-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/provider_context_recipe_budget.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Retrieval-Augmented Generation",
       "url": "https://arxiv.org/abs/2005.11401",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Command Line Interface Guidelines",
       "url": "https://clig.dev/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-9",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Compensable transactional effects",
         "url": "doctrine.html#dcard-ax-9"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.formal_math_readiness_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Readiness Gate",
         "url": "paper-modules.html#paper-module-formal-math-readiness-gate"
        },
        {
         "id": "paper_module.undeclared_library_prior_classifier",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Undeclared Library Prior Classifier",
         "url": "paper-modules.html#paper-module-undeclared-library-prior-classifier"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "provider_context_recipe_budget_policy",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Provider Context Recipe Budget Policy",
         "url": "components.html#component-provider_context_recipe_budget_policy"
        },
        {
         "id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public context budget boundary",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-16",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind authority to transaction scope",
         "url": "doctrine.html#dcard-p-16"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/provider_context_recipe_budget.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 17072
    },
    {
     "id": "paper_module.undeclared_library_prior_classifier",
     "title": "Undeclared Library Prior Classifier",
     "relative_href": "docs/paper-modules.html#paper-module-undeclared-library-prior-classifier",
     "read_href": "docs/paper-modules.html#paper-module-undeclared-library-prior-classifier",
     "context_href": "docs/rules-and-ideas.html#paper-module-undeclared-library-prior-classifier",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Undeclared Library Prior Classifier scores extracted Lean symbol observations against an allowed premise set without running Lean or treating libraries as implicit allowlists.",
     "summary": "Undeclared Library Prior Classifier validates copied Lean/Std premise rows and pre-extracted symbol observations, classifying undeclared library priors and premise-budget violations with route outcomes, source-module digest checks, secret-exclusion scans, negative cases, and scope limits. It does not read proof source, run Lean or Lake, prove formal-result correctness, treat the whole standard library as an implicit allowlist, claim Mathlib availability, use external model services, launch, publish, or prove whole-system correctness.",
     "authority_ceiling": "Symbol-boundary classification fixture over copied Lean/Std premise rows and pre-extracted symbol observations only; no proof-source reads, Lean or Lake execution, formal-result correctness, whole-library implicit allowlist, Mathlib availability, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Undeclared Library Prior Classifier scores extracted Lean symbol observations against an allowed premise set without running Lean or treating libraries as implicit allowlists.",
     "teleology": {
      "section_id": "",
      "text": "Undeclared Library Prior Classifier scores extracted Lean symbol observations against an allowed premise set without running Lean or treating libraries as implicit allowlists.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This module is the Microcosm projection of the formal-prover rule that a Lean-accepted proof can still violate the evaluation contract when it uses a real library symbol that was not in the allowed premise set. It is a provenance-bearing symbol-boundary component, not a proof checker.\n\nThe fixture carries copied Lean/Std premise rows from the real Ring2 premise-index system and real Ring2 problem ids / candidate artifact digests for the symbol-boundary examples. It records extracted qualified symbol refs and classifies a known symbol outside `allowed_premise_ids` as `UNDECLARED_LIBRARY_PRIOR`. If `cited_unallowed_premise_ids` is present, that explicit budget violation takes precedence and routes as `PREMISE_BUDGET_VIOLATION`.\n\nThe source chain is digest-bearing: the real Ring2 premise index `sha256:c78b176388a5e81bd8a785950e7db0c9a65fd38e556515134146163b48604df1`, Ring2 run summary `sha256:93304410f32d40f5cad1c161c1d01a5d6f353ee10b7cf3fecbaaf7b068b43008`, copied Lean/Std premise fixture `sha256:0be36ba5b75b40d2ede2d90cefa5181829420df7abbae216d18282b92a30f869`, and the adjacent corpus-readiness / tactic-availability result records anchor the Mathlib-absent toolchain boundary.\n\nThe exported bundle carries a source-open body floor at `examples/undeclared_library_prior_symbol_classifier/exported_symbol_classifier_bundle/source_module_manifest.json`. It imports the reducer and set-calibration builder source bodies exactly, plus run bodies for the Ring2 premise index, Ring2 run summary, recipe policy metrics, and result record reduction matrix. The two run-state bodies are path-normalized to `<repo-root>` and `<lean-toolchain-root>` while preserving source and target digests, line counts, byte counts, and required anchors.\n\n###### Purpose\n\nA theorem prover can return a proof that Lean accepts, yet that proof can still break the rules of the evaluation it was run under. The usual reason is simple: the proof reached for a library lemma that the recipe never put on the table. The symbol is real and the proof is sound, but the run quietly used a fact it was not allowed to assume. This component answers one question. Given a set of premises a candidate was allowed to use and the symbols it actually reached for, did it cite a known library symbol that was outside that allowed set?\n\nThe unusual choice is what the classifier refuses to do. It does not run Lean, it does not read the proof body, and it does not treat the standard library as an implicit allowlist where anything that exists is fair game. It works only from a copied premise index and a list of symbol observations that were extracted beforehand, and it compares the two. That keeps the check cheap and keeps proof material out of the public result record, but it also means the allowed set is closed by construction: a symbol is admissible only because a premise row names it, never because it happens to live in Lean's standard library.\n\nThe check also separates two failure modes that are easy to confuse. An explicit budget breach, where the candidate names a premise id the recipe did not allow, is not the same as a residual breach, where the candidate used an allowed-looking symbol that turns out to be undeclared. The first is settled directly from the cited ids and takes precedence; the second is what the symbol comparison is for. Treating both as one class would either over-escalate honest retries or let genuine out-of-recipe library use slip through as a budget note. Keeping them apart is the point.\n\n###### Shape\n\nSource refs\n\nJSON source record `paper_module.undeclared_library_prior_classifier` Runtime component `undeclared_library_prior_symbol_classifier.py` Pre-extracted symbol observations `Nat/List/Bool/Iff/Eq refs` Budget `cited_unallowed_premise_ids present` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record paper_module.undeclared_library_prior_classifier\"] structured source record[\"structured source record 19 edges, no selective residuals\"] runtime[\"Runtime component undeclared_library_prior_symbol_classifier.py\"] premise[\"Copied Lean/Std premise index 11 sanctioned symbols\"] observations[\"Pre-extracted symbol observations Nat/List/Bool/Iff/Eq refs\"] budget[\"cited_unallowed_premise_ids present\"] residual[\"Known qualified symbol outside allowed_premise_ids\"] clean[\"Allowed symbol or no known undeclared symbol\"] retry[\"PREMISE_BUDGET_VIOLATION route: retry\"] escalate[\"UNDECLARED_LIBRARY_PRIOR route: bridge_escalate\"] advisory[\"NONE route: accept_as_advisory\"] result records[\"Result record stream fixture, board, validation, sign-off\"] ceiling[\"Scope limit no Lean/Lake, proof, provider, launch, private-system claim\"] bundle --> structured source record structured source record --> runtime runtime --> premise runtime --> observations observations --> budget observations --> residual observations --> clean budget --> retry residual --> escalate clean --> advisory retry --> result records escalate --> result records advisory --> result records result records --> ceiling\n```\n\n###### Technical Mechanism\n\nThe component separates three questions that are easy to conflate in proof evaluation: whether a candidate explicitly cites a premise outside the recipe, whether it uses a known Lean/Std symbol that was not in the allowed premise set, and whether the theorem is actually correct. Only the first two are in scope. `validate_premise_index` builds the closed allowlist from copied Lean/Std premise rows, `validate_symbol_observations` reads pre-extracted qualified symbol observations, and `_classify_row` applies the precedence rule: `cited_unallowed_premise_ids` yields `PREMISE_BUDGET_VIOLATION` with `retry`; otherwise a known qualified symbol outside `allowed_premise_ids` yields `UNDECLARED_LIBRARY_PRIOR` with `bridge_escalate`; clean or unknown observations remain advisory. The classifier records observed symbols and computed/asserted classes, but it never evaluates proof bodies or runs Lean.\n\nThe exported-bundle mechanism is a second boundary rather than a richer proof. `validate_source_module_manifest` requires `source_module_manifest.json`, rejects manifest or row-level `body_in_receipt: true`, verifies six declared body imports against source/target digests, line counts, byte counts, required anchors, material classes, and relation type, and keeps path-normalized Ring2 run-state bodies separate from exact copied reducer bodies. `secret_exclusion_scan` then checks the declared public fixture and bundle inputs for proof-body, provider-payload, private-ref, and host-path sentinel classes. `_write_receipts` writes result, board, validation, and sign-off result records; `result_card` deliberately emits a small pass/fail card that omits source modules, source digests, proof bodies, non-public source refs, secret-scan detail, and scope limit bodies. This is why the module can be source-open about the symbol-boundary system without becoming a proof-body export.\n\nThe governing lattice follows the same separation. The bundle binds the component to `mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary`, `concept.formal_math_and_proof_witness_bundle`, principles `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-9`, and axioms `AX-1`, `AX-2`, `AX-5`, `AX-7`, `AX-8`, and `AX-10`. The technical claim is therefore limited to public symbol-budget classification over copied, digest-bearing premise evidence. It does not establish theorem truth, Mathlib availability, Lean/Lake execution, launch-scope decision, provider correctness, or complete library allowlisting.\n\n###### Reader Evidence Routing\n\nStart with the source record, not this prose: `core/paper_module_capsules.json::paper_modules[56:paper_module.undeclared_library_prior_classifier]` is the source authority that names the component subject `undeclared_library_prior_symbol_classifier`, the mechanism `mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary`, the code locus `src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py`, the concept `concept.formal_math_and_proof_witness_bundle`, the governing principles `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-9`, the axioms `AX-1`, `AX-2`, `AX-5`, `AX-7`, `AX-8`, and `AX-10`, and the sibling modules `paper_module.corpus_readiness_mathlib_absence_gate`, `paper_module.tactic_portfolio_availability`, and `paper_module.lean_std_premise_index`.\n\nThen read the generated structured source record `paper_modules/undeclared_library_prior_classifier.json`. It is the parity projection from the bundle, carrying `source_authority: json_capsule`, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, 19 generated relationship edges, and no unpopulated selective relations. The structured source record is evidence that the reader page is wired into the doctrine lattice; it is not theorem-correctness, launch, or runtime-correctness authority.\n\nFor runtime behavior, inspect `src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py`. The named locus validates projection protocol, premise index, classifier policy, source-module manifest, symbol observations, secret-exclusion scan, result construction, result record writing, and result-card compaction. The load-bearing classifier rule is `_classify_row`: explicit `cited_unallowed_premise_ids` short-circuit as `PREMISE_BUDGET_VIOLATION` with `retry`; otherwise a known qualified Lean/Std symbol outside `allowed_premise_ids` classifies as `UNDECLARED_LIBRARY_PRIOR` with `bridge_escalate`. Negative cases reject proof bodies, non-public source refs, theorem-correctness overclaims, allowed-symbol false positives, unqualified-token overclaims, and missing escalation.\n\nFor public fixture evidence, use `fixtures/first_wave/undeclared_library_prior_symbol_classifier/input/`. The fixture carries the premise index, classifier policy, projection protocol, symbol observations, and the seven negative-case files named by `EXPECTED_NEGATIVE_CASES`. For exported source-open body-floor evidence, use `examples/undeclared_library_prior_symbol_classifier/exported_symbol_classifier_bundle/source_module_manifest.json`. That manifest verifies six source body imports: reducer source, set-calibration builder source, path-normalized Ring2 premise-index state, path-normalized Ring2 run summary, recipe policy metrics, and result record reduction matrix. The manifest keeps `body_in_receipt` false and checks source/target digests plus required anchors; it does not export proof bodies, model-output data bodies, account or browser state, source notes, or private source-root bodies.\n\nFor result records, read `receipts/first_wave/undeclared_library_prior_symbol_classifier/undeclared_library_prior_symbol_classifier_result.json`, `receipts/first_wave/undeclared_library_prior_symbol_classifier/undeclared_library_prior_symbol_classifier_board.json`, `receipts/first_wave/undeclared_library_prior_symbol_classifier/undeclared_library_prior_symbol_classifier_validation_receipt.json`, and result records/sign-off/first_wave/undeclared_library_prior_symbol_classifier_fixture_acceptance.json. The fixture result record reports 11 premises, 3 classifications, 1 undeclared-library prior, 1 premise-budget-precedence case, 1 bridge escalation, 1 retry, zero blocking secret-exclusion hits, and the scope boundary that this is not Lean/Lake, formal-result correctness, provider, private-ref, whole-library-allowlist, or launch-scope decision.\n\nFocused regression coverage lives in `tests/test_undeclared_library_prior_symbol_classifier.py`. It runs both the fixture command and `run-symbol-bundle`, checks public-relative result records, verifies digest/manifest boundary failures, and confirms the compact card reuses a fresh result record without exporting source modules, body ids, secret-scan details, source digests, proof bodies, or non-public source refs. The paper-module coverage contract also names this module in `tests/test_microcosm_paper_module_coverage_contract.py`; that is route coverage evidence, not runtime proof evidence.\n\n###### Named Proof Consumers\n\nThe fixture consumer is `microcosm_core.organs.undeclared_library_prior_symbol_classifier run` over `fixtures/first_wave/undeclared_library_prior_symbol_classifier/input`. It proves the public example still classifies 11 copied premise rows and 3 symbol observations into one undeclared-library-prior escalation, one premise-budget retry, and one advisory clean case, while the expected negative cases cover proof-body export, non-public refs, theorem-correctness overclaim, allowed-symbol false positives, unqualified-token overclaims, and missing escalation.\n\nThe exported-bundle consumer is `microcosm_core.organs.undeclared_library_prior_symbol_classifier run-symbol-bundle` over `examples/undeclared_library_prior_symbol_classifier/exported_symbol_classifier_bundle`. It proves the six source-open body imports remain digest/size/anchor checked and public-safe, including the exact copied reducer and calibration-builder bodies plus path-normalized Ring2 state, recipe metrics, and reduction-matrix bodies. It is the consumer that catches source-module digest drift and manifest-boundary violations; it does not certify formal-result correctness.\n\nThe focused regression consumer is `tests/test_undeclared_library_prior_symbol_classifier.py`. It ties the fixture and bundle commands to public-relative result records, source-module digest mismatch blocking, manifest and row-level `body_in_receipt` rejection, compact-card redaction, and fresh-card reuse. The corpus consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`, which proves the Markdown remains part of the 98-module Microcosm paper-module corpus. That corpus check is routing and projection parity evidence only; it is not a runtime proof substitute.\n\n###### Public Mechanics\n- Qualified symbol refs are restricted to `Nat`, `List`, `Bool`, `Iff`, and `Eq` namespaces in this public fixture.\n- The closed premise index is an allowlist boundary, not permission to use the whole standard library.\n- `UNDECLARED_LIBRARY_PRIOR` routes to `bridge_escalate` because the proof may be informative while still out of recipe.\n- `PREMISE_BUDGET_VIOLATION` routes to `retry` and short-circuits the residual symbol classifier.\n- Result records expose ids, candidate artifact digests, symbols, counts, failure classes, source refs, source digests, and scope limits.\n- `secret_exclusion_scan` records zero blocking hits for the declared sentinel classes in the public result record stream; it is not a complete secret audit, launch clearance, or proof that no private material exists anywhere.\n\n###### Prior Art Grounding\n\nThis classifier is grounded in formal-methods work on premise control and library-aware proof search. Isabelle/Sledgehammer makes relevant-fact selection an explicit part of automated proof search, and Lean/Mathlib practice makes clear that accepted proofs can depend on a large library context. Microcosm uses that insight as a boundary check: an accepted proof artifact is not enough if it quietly used symbols outside the declared premise set. The component classifies the symbol-budget violation without judging theorem truth or exporting proof bodies.\n\nPrior-art anchors:\n- Isabelle Sledgehammer and relevant-fact selection: https://isabelle.in.tum.de/doc/sledgehammer.pdf\n- Lean community Mathlib overview: https://leanprover-community.github.io/mathlib-overview.html\n- Lean 4 tactic and proof environment context: https://lean-lang.org/theorem_proving_in_lean4/Tactics/\n\n###### Regression Cases\n\nThe forbidden proof-body, private-ref, allowed-symbol false-positive, unqualified-token, and theorem-correctness cases are regression-only leakage guards. They are not product evidence and cannot stand in for the copied Lean/Std symbol-boundary system.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\nThe expected bundle projection is Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, and 19 generated relationship edges with no unpopulated selective relations. A green result record proves only the allowed-premise and symbol-budget classification boundary; it does not establish formal-result correctness, run Lean or Lake, expose proof bodies, authorize external model access, claim Mathlib availability, or broaden all Std and Mathlib declarations into allowed priors.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe JSON bundle and generated row prove only allowed-premise and symbol-budget classification evidence: copied Lean/Std premise rows, real Ring2 ids and digests, extracted qualified symbol refs, declared budget-violation cases, source-open body-floor digest evidence, leakage regression cases, negative cases, and validation result records. They do not prove formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, claim Mathlib availability, treat all Std or Mathlib declarations as allowed priors, include launch operations, authorize public sharing, or prove whole-system correctness. They also do not expose model-output data bodies, account or browser state, source notes, or private source-root bodies.\n\n###### Limitations\n\nThe classifier depends on copied, premise rows and pre-extracted qualified symbol observations. It does not parse arbitrary Lean syntax, expand imports, normalize proof terms, or run Lean/Lake to discover symbols. Unknown or unqualified tokens are deliberately kept outside the positive undeclared-library-prior claim unless the public observation and closed premise index make the boundary explicit.\n\nThe public source-open body floor is a provenance check, not semantic equivalence for the full private source system. Exact copied bodies and path-normalized run-state bodies are checked for source/target digests, line counts, byte counts, and required anchors; that does not certify every upstream private root, model-output data, account state, or operator context that may have informed the original source run.\n\nThe leakage and launch boundaries are also scoped. `secret_exclusion_scan` checks declared sentinel classes in the public fixture and bundle inputs, while the focused pytest checks regression cases for proof-body export, non-public refs, overclaims, and compact-card redaction. Those checks do not replace a whole-repo secret audit, a public sharing review, theorem-correctness evidence, or a Mathlib availability proof. The paper-module corpus and generated-row checks prove routing parity only.\n\n###### Scope limit\n\nThis module is allowed-premise and symbol-budget classification evidence only. It does not establish formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, treat all Std or Mathlib declarations as allowed priors, claim Mathlib availability, or include launch operations.\n\n###### Scope boundary\n\nThis module does not establish formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, treat all Std/Mathlib declarations as allowed priors, claim Mathlib availability, or include launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing relation is the path from bundle authority to a bounded proof consumer. The source row binds this module to the `undeclared_library_prior_symbol_classifier` component, the mechanism `mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary`, the runtime locus `src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py`, the concept `concept.formal_math_and_proof_witness_bundle`, six principles, six axioms, and the sibling paper modules for corpus readiness, tactic availability, and Lean/Std premise indexing.\n\nThe principle layer explains why the classifier is a boundary component rather than a theorem authority. `P-1` requires the symbol class to be recomputed from premise rows and observations instead of echoed from prose. `P-2` lowers the claim to what the checker actually tests: allowed-premise and symbol-budget classification. `P-3` concentrates trust in the small component and source-module manifest validators. `P-6` fails closed on missing or stale evidence. `P-8` turns inadmissible computations into typed outcomes such as `PREMISE_BUDGET_VIOLATION` and `UNDECLARED_LIBRARY_PRIOR`. `P-9` carries source refs, target refs, digests, and body-material status through the fixture, bundle, and result record layers.\n\nThe axiom layer supplies the same ceiling in machine-checkable form. `AX-1` requires derivation before assertion, so the page points to fixture and bundle result records instead of declaring theorem truth. `AX-2` keeps verification inside kernelized validators. `AX-5` prevents an authority upgrade without stronger evidence. `AX-7` allows typed partiality and refusal when the proof body, non-public refs, or theorem-correctness claim is inadmissible. `AX-8` preserves provenance while keeping proof/provider/private bodies out of public result records.\n\nThe generated JSON row currently contributes 19 relationship edges with no unpopulated selective relations. Those edges are evidence of route parity, not new authority: the source authority remains the JSON bundle and the proof authority remains the focused fixture, bundle, and regression consumers.\n\nThis page treats those generated navigation surfaces as bundle-derived projections while explaining the resolved symbol-boundary component, code-locus, law, and sibling-paper links.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 21647,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A theorem prover can return a proof that Lean accepts, yet that proof can still break the rules of the evaluation it was run under. The usual reason is simple: the proof reached for a library lemma that the recipe never put on the table. The symbol is real and the proof is sound, but the run quietly used a fact it was not allowed to assume. This component answers one question. Given a set of premises a candidate was allowed to use and the symbols it actually reached for, did it cite a known library symbol that was outside that allowed set? The unusual choice is what the classifier refuses to do. It does not run Lean, it does not read the proof body, and it does not treat the standard librar\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The component separates three questions that are easy to conflate in proof evaluation: whether a candidate explicitly cites a premise outside the recipe, whether it uses a known Lean/Std symbol that was not in the allowed premise set, and whether the theorem is actually correct. Only the first two are in scope. validatepremiseindex builds the closed allowlist from copied Lean/Std premise rows, validatesymbolobservations reads pre-extracted qualified symbol observations, and classifyrow applies the precedence rule: citedunallowedpremiseids yields PREMISEBUDGET_VIOLATION with retry; otherwise a known qualified symbol outside allowedpremiseids yields UNDECLAREDLIBRARYPRIOR with bridge_escalate\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with the source record, not this prose: core/papermodulecapsules.json::papermodules[56:papermodule.undeclaredlibraryprior_classifier] is the source authority that names the component subject undeclaredlibrarypriorsymbolclassifier, the mechanism mechanism.undeclaredlibrarypriorsymbolclassifier.validatespublicsymbol_boundary, the code locus src/microcosmcore/components/undeclaredlibrarypriorsymbol_classifier.py, the concept concept.formalmathandproofwitness_bundle, the governing principles P-1, P-2, P-3, P-6, P-8, and P-9, the axioms AX-1, AX-2, AX-5, AX-7, AX-8, and AX-10, and the sibling modules papermodule.corpusreadinessmathlibabsence_gate, papermodule.tacticportfolio_availability,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "The fixture consumer is microcosmcore.components.undeclaredlibrarypriorsymbol_classifier run over fixtures/firstwave/undeclaredlibrarypriorsymbol_classifier/input. It proves the public example still classifies 11 copied premise rows and 3 symbol observations into one undeclared-library-prior escalation, one premise-budget retry, and one advisory clean case, while the expected negative cases cover proof-body export, non-public refs, theorem-correctness overclaim, allowed-symbol false positives, unqualified-token overclaims, and missing escalation. The exported-bundle consumer is microcosmcore.components.undeclaredlibrarypriorsymbol_classifier run-symbol-bundle over examples/undeclaredlibrary\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-mechanics",
       "title": "Public Mechanics",
       "level": 2,
       "excerpt": "Qualified symbol refs are restricted to Nat, List, Bool, Iff, and Eq namespaces in this public fixture. The closed premise index is an allowlist boundary, not permission to use the whole standard library. UNDECLAREDLIBRARYPRIOR routes to bridge_escalate because the proof may be informative while still out of recipe. PREMISEBUDGETVIOLATION routes to retry and short-circuits the residual symbol classifier. Result records expose ids, candidate artifact digests, symbols, counts, failure classes, source refs, source digests, and scope limits. secretexclusionscan records zero blocking hits for the declared sentinel classes in the public result record stream; it is not a complete secret audit, lau\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This classifier is grounded in formal-methods work on premise control and library-aware proof search. Isabelle/Sledgehammer makes relevant-fact selection an explicit part of automated proof search, and Lean/Mathlib practice makes clear that accepted proofs can depend on a large library context. Microcosm uses that insight as a boundary check: an accepted proof artifact is not enough if it quietly used symbols outside the declared premise set. The component classifies the symbol-budget violation without judging theorem truth or exporting proof bodies. Prior-art anchors: Isabelle Sledgehammer and relevant-fact selection: https://isabelle.in.tum.de/doc/sledgehammer.pdf Lean community Mathlib o\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "regression-cases",
       "title": "Regression Cases",
       "level": 2,
       "excerpt": "The forbidden proof-body, private-ref, allowed-symbol false-positive, unqualified-token, and theorem-correctness cases are regression-only leakage guards. They are not product evidence and cannot stand in for the copied Lean/Std symbol-boundary system.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The governing relation is the path from bundle authority to a bounded proof consumer. The source row binds this module to the undeclaredlibrarypriorsymbolclassifier component, the mechanism mechanism.undeclaredlibrarypriorsymbolclassifier.validatespublicsymbol_boundary, the runtime locus src/microcosmcore/components/undeclaredlibrarypriorsymbol_classifier.py, the concept concept.formalmathandproofwitness_bundle, six principles, six axioms, and the sibling paper modules for corpus readiness, tactic availability, and Lean/Std premise indexing. The principle layer explains why the classifier is a boundary component rather than a theorem authority. P-1 requires the symbol class to be recomputed\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The JSON bundle and generated row prove only allowed-premise and symbol-budget classification evidence: copied Lean/Std premise rows, real Ring2 ids and digests, extracted qualified symbol refs, declared budget-violation cases, source-open body-floor digest evidence, leakage regression cases, negative cases, and validation result records. They do not prove formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, claim Mathlib availability, treat all Std or Mathlib declarations as allowed priors, include launch operations, authorize public sharing, or prove whole-system correctness. They also do not expose model-output data\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The classifier depends on copied, premise rows and pre-extracted qualified symbol observations. It does not parse arbitrary Lean syntax, expand imports, normalize proof terms, or run Lean/Lake to discover symbols. Unknown or unqualified tokens are deliberately kept outside the positive undeclared-library-prior claim unless the public observation and closed premise index make the boundary explicit. The public source-open body floor is a provenance check, not semantic equivalence for the full private source system. Exact copied bodies and path-normalized run-state bodies are checked for source/target digests, line counts, byte counts, and required anchors; that does not certify every upstream\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run from microcosm-substrate: The expected bundle projection is Mermaid availablefromcapsule_edges, Atlas linkedfromcapsule_edges, and 19 generated relationship edges with no unpopulated selective relations. A green result record proves only the allowed-premise and symbol-budget classification boundary; it does not establish formal-result correctness, run Lean or Lake, expose proof bodies, authorize external model access, claim Mathlib availability, or broaden all Std and Mathlib declarations into allowed priors.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module is allowed-premise and symbol-budget classification evidence only. It does not establish formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, treat all Std or Mathlib declarations as allowed priors, claim Mathlib availability, or include launch operations.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not establish formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, treat all Std/Mathlib declarations as allowed priors, claim Mathlib availability, or authorize launch.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.undeclared_library_prior_classifier.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON source record paper_module.undeclared_library_prior_classifier\"] structured source record[\"structured source record 19 edges, no selective residuals\"] runtime[\"Runtime component undeclared_library_prior_symbol_classifier.py\"] premise[\"Copied Lean/Std premise index 11 sanctioned symbols\"] observations[\"Pre-extracted symbol observations Nat/List/Bool/Iff/Eq refs\"] budget[\"cited_unallowed_premise_ids present\"] residual[\"Known qualified symbol outside allowed_premise_ids\"] clean[\"Allowed symbol or no known undeclared symbol\"] retry[\"PREMISE_BUDGET_VIOLATION route: retry\"] escalate[\"UNDECLARED_LIBRARY_PRIOR route: bridge_escalate\"] advisory[\"NONE route: accept_as_advisory\"] result records[\"Result record stream fixture, board, validation, sign-off\"] ceiling[\"Scope limit no Lean/Lake, proof, provider, launch, private-system claim\"] bundle --> structured source record structured source record --> runtime runtime --> premise runtime --> observations observations --> budget observations --> residual observations --> clean budget --> retry residual --> escalate clean --> advisory retry --> result records escalate --> result records advisory --> result records result records --> ceiling",
       "source_hash": "sha256:cb516b3ee00f0b842b65a4096a7b0065d1517061f09a2c46a780aa8da562edf1",
       "html_url": "docs/paper-modules.html#paper-module-undeclared-library-prior-classifier-diagram-1",
       "html_anchor": "paper-module-undeclared-library-prior-classifier-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/undeclared_library_prior_classifier.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.corpus_readiness_mathlib_absence_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Corpus Readiness Mathlib Absence Gate",
         "url": "paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate"
        },
        {
         "id": "paper_module.tactic_portfolio_availability",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Tactic Portfolio Availability",
         "url": "paper-modules.html#paper-module-tactic-portfolio-availability"
        },
        {
         "id": "paper_module.lean_std_premise_index",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Lean/Std Premise Index",
         "url": "paper-modules.html#paper-module-lean-std-premise-index"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "undeclared_library_prior_symbol_classifier",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Undeclared Library Prior Symbol Classifier",
         "url": "components.html#component-undeclared_library_prior_symbol_classifier"
        },
        {
         "id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public symbol boundary",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/undeclared_library_prior_classifier.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 22924
    },
    {
     "id": "paper_module.voice_to_doctrine_self_improvement_loop",
     "title": "Voice to Doctrine Self-Improvement Loop",
     "relative_href": "docs/paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop",
     "read_href": "docs/paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop",
     "context_href": "docs/rules-and-ideas.html#paper-module-voice-to-doctrine-self-improvement-loop",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Voice to Doctrine Self-Improvement Loop validates lesson propagation without exporting source notes or granting doctrine mutation authority.",
     "summary": "Voice to Doctrine Self-Improvement Loop validates whether declared lessons refined a named owner surface with validation or were captured with a re-entry condition. It checks projection protocol, policy, owner surfaces, lesson rows, negative cases, source-open body imports, and scope limits while rejecting source notes export, private thread bodies, model-output data, direct doctrine-node edits, unvalidated global promotion, live work log mutation, public sharing, launch, and whole-system correctness.",
     "authority_ceiling": "Declared lesson-propagation fixture only; no source notes export, non-public body export, model-output data export, source or doctrine mutation authority, global-promotion authority, live work log mutation, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
     "abstract": "Voice to Doctrine Self-Improvement Loop validates lesson propagation without exporting source notes or granting doctrine mutation authority.",
     "teleology": {
      "section_id": "",
      "text": "Voice to Doctrine Self-Improvement Loop validates lesson propagation without exporting source notes or granting doctrine mutation authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This module is the public Microcosm projection of the source system's recursive self-improvement metabolism. It is not a synthetic result record layer. It imports the real source shape from `recursive_self_improvement_operating_loop`, `doctrine_population_loop`, and `local_to_general_propagation`: local pressure is sensed, classified, assigned to an owner surface, mutated or captured there, validated, closed out, and given a concrete re-entry condition.\n\nThe exported bundle also carries exact copies of the source bodies that make this loop real: recursive self-improvement, doctrine population, local-to-general propagation, the plane-home decision table, work log metacontrol, work log skill doctrine, and the work log standard. Result records report only source refs, hashes, counts, and scan status; the body text lives under `examples/.../source_modules/ai_workflow/`.\n\n###### Purpose\n\nThe component answers one question: did a declared lesson actually change a named owner surface and pass that surface's own validation, or did it only produce a result record that says so? \"The system learned from its work\" is an easy claim to assert and a hard one to back. Without a check, a log entry, a closed ticket, or a confident summary all read as progress. This validator refuses that shortcut.\n\nEach lesson row must name the surface it changed (a skill, a paper module, a standard, or a captured Work item), the action it took there, and the validation and completion refs that show the change held. Every ref must resolve to a real file in the exported bundle, the copied source modules, or the public Microcosm tree. A lesson then lands in exactly one of four outcomes: `refined_existing_surface` (a surface changed and was validated), `workitem_captured` (deferred work, but only with a concrete re-entry condition), `nothing_to_refine` (a typed null result that still required stewardship and a next-best-lane check), or `already_propagated_verified`. Anything that does not fit one of these is a finding, not an outcome.\n\nThe unusual part is the defence against self-grading. A lesson row may carry an `expected_label` or `expected_status` field, but the validator ignores it and recomputes the verdict from the evidence. If the row is not genuinely backed, its own asserted label cannot rescue it, and the case is recorded as `VOICE_DOCTRINE_BAKED_EXPECTED_LABEL_IGNORED`. A fixture cannot pass by declaring its own success. The same instinct runs through the negative floor: source notes, private thread bodies, model-output data, direct edits to doctrine nodes, and global promotion without owner validation are each rejected, keeping \"the system improves itself\" separate from \"this public artifact may rewrite doctrine or export private voice.\"\n\n###### Shape\n\nSource refs\n\nchanged ref + validation `refined_existing_surface` Already `already_propagated_verified` Diagram source\n\n```text\nflowchart LR Signal[\"Local pressure mistake, route gap, validation finding, residual\"] Classify[\"Classify owner surface + action\"] Owner[\"Owner surface skill, paper module, standard, Work item\"] Refused[\"Refused raw voice, private body, direct node edit, result record-only, unvalidated promotion\"] subgraph Outcome[\"One of four typed outcomes\"] Refined[\"refined_existing_surface changed ref + validation\"] Captured[\"workitem_captured with re-entry condition\"] Null[\"nothing_to_refine stewardship + next-lane checked\"] Already[\"already_propagated_verified\"] end Recompute[\"Recompute verdict from evidence expected_label ignored\"] Validate[\"Validation owner evidence + completion ref; every ref must resolve\"] Source[\"Exact source bodies 8 manifest rows: hashes, anchors\"] Result records[\"metadata-only result records result, board, validation, fixture sign-off\"] Signal --> Classify Classify --> Owner Owner --> Refused Owner --> Outcome Outcome --> Recompute Recompute --> Validate Source --> Result records Validate --> Result records Refused --> Result records\n```\n\n###### Public Mechanics\n- Local lessons carry source pattern refs, evidence refs, owner-surface ids, owner actions, validation refs, completion refs, and outcomes.\n- Owner surfaces are explicit: skills, paper modules, standards, and residual captures each retain their own mutation authority.\n- `refined_existing_surface` requires a changed owner surface and validation.\n- `workitem_captured` requires a concrete re-entry condition.\n- `nothing_to_refine` requires stewardship and next-best-lane checks.\n- source notes, private thread bodies, model-output data, live work log bodies, direct doctrine-node edits, and global promotion claims are rejected by negative cases.\n- Exported bundle validation requires `source_module_manifest.json`, verifies each copied body hash/line/byte/anchor contract, and scans copied bodies for forbidden public material.\n\n###### Reader Evidence Routing\n\nRead this module as a lesson-propagation validator, not as a general doctrine mutation license. The fixture proves that local pressure must choose a named owner surface, perform an owner-authorized action, carry validation and completion refs, and either refine an existing surface, capture a Work item with a re-entry condition, record a typed `nothing_to_refine`, or verify an already-propagated result.\n\nRead source-open evidence through the exported bundle manifest. It carries eight copied source bodies: three paper modules, four skills or skill companions, and the work log standard. Each manifest row records byte and line counts, exact source and target hashes, required anchors, and `body_in_receipt: false`. The source bodies make the source loop inspectable, while result records remain refs, hashes, counts, scan status, and scope limits.\n\nRead the negative floor as equally load-bearing. source notes bodies, private thread bodies, model-output data bodies, direct doctrine-node edits, result record-only progress, live work log mutation, and unvalidated global promotion are rejected. Those rejections keep \"the system learns from work\" separate from \"this public artifact can mutate doctrine or export private state.\"\n\n###### Prior Art Grounding\n\nThis component is grounded in after-action review, lessons-learned, and pattern language practices. NASA's Lessons Learned Information System is a public example of preserving operational lessons so future work can reuse them, while pattern-language practice gives a vocabulary for turning repeated local solutions into named, reusable forms. Microcosm adopts that direction without collapsing operator voice into doctrine: a local lesson only becomes durable when it has evidence, an owner surface, a validation result record, and a bounded re-entry path.\n\nPrior-art anchors:\n- NASA Lessons Learned Information System: https://llis.nasa.gov/\n- Pattern language background: https://hillside.net/patterns/\n\n###### Runtime\n\n```text\nPYTHONPATH=src python -m microcosm_core.organs.voice_to_doctrine_self_improvement_loop run \\\n  --input fixtures/first_wave/voice_to_doctrine_self_improvement_loop/input \\\n  --out receipts/first_wave/voice_to_doctrine_self_improvement_loop\n```\n\nThe exported bundle uses the same validator without negative-case inputs:\n\n```text\nPYTHONPATH=src python -m microcosm_core.organs.voice_to_doctrine_self_improvement_loop run-bundle \\\n  --input examples/voice_to_doctrine_self_improvement_loop/exported_voice_to_doctrine_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/voice_to_doctrine_self_improvement_loop\n```\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\nA green fixture or bundle result record proves only the public lesson-propagation boundary above; it does not grant source-file changes, live work log mutation, global doctrine-promotion, launch, or whole-system authority.\n\n###### Scope boundary\n\n###### Scope boundary\n\nThis module does not export source note, source notes, private thread bodies, model-output data, account or browser state, live work log rows, proof authority, source-file changes, publishing-scope decision, or private-system equivalence. It shows the public mechanics of system learning under owner-surface evidence gates.\n\n###### Scope limit\n\nThis paper module can claim a lesson-propagation fixture. It can explain owner-surface checks, negative cases, copied source-module manifests, and metadata-only result records. A diagram view and atlas card are generated for this module.\n\nIt cannot claim source notes export, non-public body export, model-output data export, source-file changes, doctrine mutation authority, global-promotion authority, live work log mutation, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 8713,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The component answers one question: did a declared lesson actually change a named owner surface and pass that surface's own validation, or did it only produce a result record that says so? \"The system learned from its work\" is an easy claim to assert and a hard one to back. Without a check, a log entry, a closed ticket, or a confident summary all read as progress. This validator refuses that shortcut. Each lesson row must name the surface it changed (a skill, a paper module, a standard, or a captured Work item), the action it took there, and the validation and completion refs that show the change held. Every ref must resolve to a real file in the exported bundle, the copied source modules,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "public-mechanics",
       "title": "Public Mechanics",
       "level": 2,
       "excerpt": "Local lessons carry source pattern refs, evidence refs, owner-surface ids, owner actions, validation refs, completion refs, and outcomes. Owner surfaces are explicit: skills, paper modules, standards, and residual captures each retain their own mutation authority. refinedexistingsurface requires a changed owner surface and validation. workitem_captured requires a concrete re-entry condition. nothingtorefine requires stewardship and next-best-lane checks. source notes, private thread bodies, model-output data, live work log bodies, direct doctrine-node edits, and global promotion claims are rejected by negative cases. Exported bundle validation requires sourcemodulemanifest.json, verifies ea\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module as a lesson-propagation validator, not as a general doctrine mutation license. The fixture proves that local pressure must choose a named owner surface, perform an owner-authorized action, carry validation and completion refs, and either refine an existing surface, capture a Work item with a re-entry condition, record a typed nothingtorefine, or verify an already-propagated result. Read source-open evidence through the exported bundle manifest. It carries eight copied source bodies: three paper modules, four skills or skill companions, and the work log standard. Each manifest row records byte and line counts, exact source and target hashes, required anchors, and bodyinrecei\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in after-action review, lessons-learned, and pattern language practices. NASA's Lessons Learned Information System is a public example of preserving operational lessons so future work can reuse them, while pattern-language practice gives a vocabulary for turning repeated local solutions into named, reusable forms. Microcosm adopts that direction without collapsing operator voice into doctrine: a local lesson only becomes durable when it has evidence, an owner surface, a validation result record, and a bounded re-entry path. Prior-art anchors: NASA Lessons Learned Information System: https://llis.nasa.gov/ Pattern language background: https://hillside.net/patterns/",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "runtime",
       "title": "Runtime",
       "level": 2,
       "excerpt": "The exported bundle uses the same validator without negative-case inputs:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Run from microcosm-substrate: A green fixture or bundle result record proves only the public lesson-propagation boundary above; it does not grant source-file changes, live work log mutation, global doctrine-promotion, launch, or whole-system authority.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not export source note, source notes, private thread bodies, model-output data, account or browser state, live work log rows, proof authority, source-file changes, public sharing decision, or private-system equivalence. It shows the public mechanics of system learning under owner-surface evidence gates.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim a lesson-propagation fixture. It can explain owner-surface checks, negative cases, copied source-module manifests, and metadata-only result records. A diagram view and atlas card are generated for this module. It cannot claim source notes export, non-public body export, model-output data export, source-file changes, doctrine mutation authority, global-promotion authority, live work log mutation, public sharing decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.voice_to_doctrine_self_improvement_loop.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Signal[\"Local pressure mistake, route gap, validation finding, residual\"] Classify[\"Classify owner surface + action\"] Owner[\"Owner surface skill, paper module, standard, Work item\"] Refused[\"Refused raw voice, private body, direct node edit, result record-only, unvalidated promotion\"] subgraph Outcome[\"One of four typed outcomes\"] Refined[\"refined_existing_surface changed ref + validation\"] Captured[\"workitem_captured with re-entry condition\"] Null[\"nothing_to_refine stewardship + next-lane checked\"] Already[\"already_propagated_verified\"] end Recompute[\"Recompute verdict from evidence expected_label ignored\"] Validate[\"Validation owner evidence + completion ref; every ref must resolve\"] Source[\"Exact source bodies 8 manifest rows: hashes, anchors\"] Result records[\"metadata-only result records result, board, validation, fixture sign-off\"] Signal --> Classify Classify --> Owner Owner --> Refused Owner --> Outcome Outcome --> Recompute Recompute --> Validate Source --> Result records Validate --> Result records Refused --> Result records",
       "source_hash": "sha256:2c67518e56832066010bd26e7e6c33cefbe8292042f9963d49138c0487372e12",
       "html_url": "docs/paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop-diagram-1",
       "html_anchor": "paper-module-voice-to-doctrine-self-improvement-loop-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/voice_to_doctrine_self_improvement_loop.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        },
        {
         "id": "paper_module.pattern_binding_contract",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Pattern Binding Contract",
         "url": "paper-modules.html#paper-module-pattern-binding-contract"
        },
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "voice_to_doctrine_self_improvement_loop",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Voice To Doctrine Self Improvement Loop",
         "url": "components.html#component-voice_to_doctrine_self_improvement_loop"
        },
        {
         "id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public voice to doctrine self improvement loop",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 6,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-7",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Track known unknowns without claiming the unknown is mapped",
         "url": "doctrine.html#dcard-p-7"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-13",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Apply the same floor to meta artifacts",
         "url": "doctrine.html#dcard-p-13"
        },
        {
         "id": "concept.voice_to_doctrine_self_improvement_loop_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "local pressure rows as typed candidates for owner-surface refinement",
         "url": "rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/voice_to_doctrine_self_improvement_loop.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 9879
    },
    {
     "id": "paper_module.routing_anti_patterns_registry",
     "title": "Routing Anti-Patterns Registry",
     "relative_href": "docs/paper-modules.html#paper-module-routing-anti-patterns-registry",
     "read_href": "docs/paper-modules.html#paper-module-routing-anti-patterns-registry",
     "context_href": "docs/rules-and-ideas.html#paper-module-routing-anti-patterns-registry",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Routing Anti-Patterns Registry validates public anti-pattern registry rows without becoming route source authority or mutating routes.",
     "summary": "Routing Anti-Patterns Registry validates the public routing anti-pattern registry contract: kind/version, unique row ids, text fields, required navigation anchors, source-module digest evidence, negative cases, and scope limits. It treats the registry as a checked public artifact, not route source authority, route mutation authority, private routing-note export, provider authority, launch, public sharing, or whole-system correctness.",
     "authority_ceiling": "Declared public routing anti-pattern registry fixture and copied source body evidence only; no route source authority, no route mutation, no private routing-note export, no external model access, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "abstract": "Routing Anti-Patterns Registry validates public anti-pattern registry rows without becoming route source authority or mutating routes.",
     "teleology": {
      "section_id": "",
      "text": "Routing Anti-Patterns Registry validates public anti-pattern registry rows without becoming route source authority or mutating routes.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`routing_anti_patterns_registry` is the public contract diagnostic for the source system's typed navigation failure rows. It validates the copied `codex/doctrine/routing_anti_patterns.json` registry as runnable Microcosm system: the input must declare `kind: routing_anti_patterns`, carry a positive version, and expose stable `anti_patterns` rows with unique ids and plain explanatory text.\n\nThe positive fixture imports the real source registry body. The exported bundle also carries a source module manifest and a byte-for-byte copy under `source_modules/codex/doctrine/routing_anti_patterns.json`, with sha256 hashes and anchors for `kernel_before_grep`, `bridge_before_scope`, and `mode_in_chat_only`. Result records carry refs, hashes, counts, and verdicts only; they do not inline the copied body.\n\nThe component rejects five boundary failures:\n- missing `kind`\n- duplicate anti-pattern ids\n- anti-pattern rows missing explanatory text\n- launch, provider, source-file changes, route-policy mutation, maturity, or whole-system-correctness overclaims\n- private routing bodies, source note bodies, model-output data bodies, or secret values in public inputs\n\n###### Purpose\n\nA navigation system can fail quietly. An agent reaches for `grep` when a kernel route would have narrowed the space first, or changes execution mode in chat without updating the disk contract, and nothing complains until the work is already off the rails. This component answers one question: does the public registry of known routing failures hold its declared shape, and does the copied source body that backs it stay byte-honest? It names recurring navigation mistakes as typed rows so they can be recognised, not rediscovered.\n\nThe registry is treated as a checked artifact, not as authority. A page describing routing failures is easy to read as a router or as policy. The component refuses both: a row may project a public anti-pattern, but it may not declare `source_authority`, `route_authority`, or any internal control role, and the validator rejects rows that try. So the document can describe how navigation goes wrong without itself becoming the thing that decides how navigation should go.\n\nOne design choice sits in how each row's route-repair state is decided. Rather than trust a label baked into the row, the checker derives the repair state from the row's own id and explanatory text: `kernel_before_grep` only earns `kernel_first_navigation` if its text actually mentions grep, kernel, and route. A row carrying a pre-written `expected_route_repair_state` is flagged, and `baked_expected_labels_sufficient` is fixed to false. The point is to stop a registry from grading itself by self-asserted labels, and to keep the meaning grounded in the text a reader can see.\n\n###### Shape\n\nThis module is a projection over a bundle-backed public routing diagnostic, not route source authority. Cold readers should read it as a bounded chain: the JSON bundle and standard name the contract; the runtime component validates fixtures and an exported source bundle; result records preserve hashes, counts, verdicts, and negative cases; generated Mermaid and Atlas rows expose the bundle edges; the scope limit remains projection-only.\n\nSource refs\n\nBundle `core/paper_module_capsules.json` `paper_module.routing_anti_patterns_registry` Standard `standards/std_microcosm_routing_anti_patterns_registry.json` `paper_modules/routing_anti_patterns_registry.md` run / run-bundle / result record writer `src/microcosm_core/organs/routing_anti_patterns_registry.py` registry + negative cases `fixtures/first_wave/routing_anti_patterns_registry/input` source_module_manifest + exact copied body `examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle` Tests `tests/test_routing_anti_patterns_registry.py` refs, hashes, counts, verdicts `receipts/.../routing_anti_patterns_registry*.json` 22 edges; Mermaid available; Atlas linked `paper_modules/routing_anti_patterns_registry.json` Diagram source\n\n```text\nflowchart TD Bundle[\"core/paper_module_capsules.json paper_module.routing_anti_patterns_registry\"] Standard[\"standards/std_microcosm_routing_anti_patterns_registry.json\"] Markdown[\"paper_modules/routing_anti_patterns_registry.md reader projection; not route authority\"] Runtime[\"src/microcosm_core/components/routing_anti_patterns_registry.py run / run-bundle / result record writer\"] Fixture[\"fixtures/first_wave/routing_anti_patterns_registry/input registry + negative cases\"] Bundle[\"examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle source_module_manifest + exact copied body\"] Tests[\"tests/test_routing_anti_patterns_registry.py\"] Result records[\"result records/.../routing_anti_patterns_registry*.json refs, hashes, counts, verdicts\"] structured source record[\"paper_modules/routing_anti_patterns_registry.json 22 edges; Mermaid available; Atlas linked\"] Ceiling[\"Scope limit no route authority, mutation, external model access, launch, or whole-system proof\"] Bundle --> Markdown Bundle --> structured source record Standard --> Runtime Fixture --> Runtime Bundle --> Runtime Runtime --> Tests Runtime --> Result records Tests --> Result records structured source record --> Ceiling Result records --> Ceiling Markdown --> Ceiling\n```\n\n###### Technical Mechanism\n\nThe component is a contract checker around a public routing-registry copy, not a router. `run` loads the first-wave fixture and asks `_build_result` to validate the positive `routing_anti_patterns.json` payload, all declared negative cases, the secret-exclusion scan, and the metadata-only result record bundle. The positive path requires `kind: routing_anti_patterns`, a positive integer `version`, stable anti-pattern ids, explanatory text, and the named source anchors `kernel_before_grep`, `bridge_before_scope`, and `mode_in_chat_only`.\n\nThe failure lattice is explicit. `_payload_findings` records typed evidence for missing kind, non-positive version, missing rows, missing ids, duplicate ids, missing text, forbidden authority-role masquerade, private-source fields, and overclaims about launch, external model access, source-file changes, route-policy mutation, maturity, readiness, or whole-system correctness. A pass is admitted only when every expected negative case appears with its expected error code and `missing_negative_cases` is empty. That makes the negative cases proof obligations rather than illustrative examples.\n\nThe exported-bundle path adds source-copy accountability. `run-bundle` calls `run_routing_anti_patterns_bundle`, which requires `bundle_manifest.json`, `source_module_manifest.json`, and the copied body under `source_modules/codex/doctrine/routing_anti_patterns.json`. The manifest checker streams sha256 over the copied target, verifies `sha256`, `source_sha256`, and `target_sha256`, checks required anchors, classifies the material as `copied_non_secret_macro_body`, and rejects any body-in-result record claim. The source body is available in the exported source-module tree; result records keep only refs, hashes, counts, verdicts, and omission fields.\n\nThe governing lattice is deliberately narrow. The bundle binds this mechanism to `concept.architecture_and_navigation_route_contract_bundle`, `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-8`, `P-9`, `P-12`, `P-15`, and `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, `AX-11`, but the checker consumes those refs as a scope limit: evidence must be replayable, typed, public-safe, and below projection authority. It also depends on `navigation_hologram_route_plane`, `agent_route_observability_runtime`, and `cold_reader_route_map`, so the registry can describe navigation failure shapes without becoming the internal control route source.\n\n###### Reader Evidence Routing\n\nRead this module through the following source-to-proof route:\n1. Start at the source record `core/paper_module_capsules.json::paper_modules[58:paper_module.routing_anti_patterns_registry]`. It is the source authority for `source_authority: json_capsule`, the component subject, mechanism subject, runtime source locus, concept, principles, axioms, dependency modules, and the projection statuses.\n2. Read the generated structured source record `paper_modules/routing_anti_patterns_registry.json` only as a projection from that source record.\n3. Follow the runtime proof path through `src/microcosm_core/organs/routing_anti_patterns_registry.py`, `fixtures/first_wave/routing_anti_patterns_registry/input/`, and `examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle/`. Those surfaces carry the public registry fixture, negative cases, `source_module_manifest.json`, copied body target, required anchors, and digest checks.\n4. Confirm the public result record floor with the named fixture command, bundle command, focused regression, and corpus check below. Result records may carry ids, refs, hashes, counts, verdicts, and omission fields, but not private routing bodies or model-output data.\n5. Treat generated diagram, Atlas, search, object-map, and site cards as reachability projections from the same source row. They help a public reader find the module; they do not outrank the bundle, runtime, manifest, tests, or metadata-only result records.\n\n###### Named Proof Consumers\n- First-wave fixture consumer: PYTHONPATH=src ../repo-python -m microcosm_core.components.routing_anti_patterns_registry run --input fixtures/first_wave/routing_anti_patterns_registry/input --out /tmp/microcosm-routing-anti-patterns-registry/fixture --sign-off-out /tmp/microcosm-routing-anti-patterns-registry/sign-off.json --card consumes the public registry fixture, six expected negative-case families, private-source rejection, secret-exclusion scan, metadata-only result record writer, and command-card omission boundary.\n- Exported-bundle consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.organs.routing_anti_patterns_registry run-bundle --input examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle --out /tmp/microcosm-routing-anti-patterns-registry/bundle --card` consumes the source-module manifest, exact copied source registry body, sha256 digest floor, required anchors, material class, and source-open summary while keeping body text out of result records.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_routing_anti_patterns_registry.py -q` pins negative-case coverage, source-authority masquerade rejection, digest mismatch blockers, exact copied-body imports, secret-exclusion result record policy, and fresh-card reuse behavior.\n- It is a read-only result record for this Markdown slice, not permission to hand-edit generated projections.\n\n###### Prior Art Grounding\n\nThis registry follows the same family as pattern and anti-pattern catalogs: name recurring failure shapes so future operators can recognize and avoid them. The [Hillside patterns library](https://hillside.net/patterns/) is the positive pattern-language ancestor, and the software anti-pattern literature supplies the inverse move: documenting repeated practices that look useful but produce bad outcomes.\n\nThe routing-specific presentation also borrows from CLI usability practice. The [Command Line Interface Guidelines](https://clig.dev/) emphasize discoverability, clear errors, and suggested next actions; this component applies that pressure to navigation failures by requiring stable ids and explanatory text while keeping the registry projection below route-source authority.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, validate the public routing-registry diagnostic without writing tracked result records:\n\nPassing validation proves the public anti-pattern registry fixture and copied-body digest floor only. It does not make this registry route source authority, and it excludes route-policy mutation, external model access, launch, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that anti-pattern row shape, stable anti-pattern ids, source-module digest checks, private-leak rejection, negative cases, and validation result records support the declared routing anti-pattern registry contract. It may also claim that the JSON row resolves the accepted component subject, mechanism subject, runtime source locus, governed concept, principles, axioms, and dependency modules.\n\nThis module may not claim route source authority, live route freshness, route-policy mutation, provider authorization, private routing-note disclosure, maturity proof, hosted-public posture, launch-scope decision, publishing-scope decision, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope limit\n\nThis is a projection-only diagnostic. It can explain public anti-pattern registry validation, copied-body digest checks, private-leak rejection, negative cases, and validation result records. It does not become route source authority, mutate routes, expose private routing notes, authorize providers, include launch operations, or prove whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13129,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A navigation system can fail quietly. An agent reaches for grep when a kernel route would have narrowed the space first, or changes execution mode in chat without updating the disk contract, and nothing complains until the work is already off the rails. This component answers one question: does the public registry of known routing failures hold its declared shape, and does the copied source body that backs it stay byte-honest? It names recurring navigation mistakes as typed rows so they can be recognised, not rediscovered. The registry is treated as a checked artifact, not as authority. A page describing routing failures is easy to read as a router or as policy. The component refuses both:\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This module is a projection over a bundle-backed public routing diagnostic, not route source authority. Cold readers should read it as a bounded chain: the JSON bundle and standard name the contract; the runtime component validates fixtures and an exported source bundle; result records preserve hashes, counts, verdicts, and negative cases; generated Mermaid and Atlas rows expose the bundle edges; the scope limit remains projection-only.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The component is a contract checker around a public routing-registry copy, not a router. run loads the first-wave fixture and asks buildresult to validate the positive routingantipatterns.json payload, all declared negative cases, the secret-exclusion scan, and the metadata-only result record bundle. The positive path requires kind: routingantipatterns, a positive integer version, stable anti-pattern ids, explanatory text, and the named source anchors kernelbeforegrep, bridgebeforescope, and modeinchat_only. The failure lattice is explicit. payloadfindings records typed evidence for missing kind, non-positive version, missing rows, missing ids, duplicate ids, missing text, forbidden authori\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that anti-pattern row shape, stable anti-pattern ids, source-module digest checks, private-leak rejection, negative cases, and validation result records support the declared routing anti-pattern registry contract. It may also claim that the JSON row resolves the accepted component subject, mechanism subject, runtime source locus, governed concept, principles, axioms, and dependency modules. This module may not claim route source authority, live route freshness, route-policy mutation, provider authorization, private routing-note disclosure, maturity proof, hosted-public posture, launch-scope decision, public sharing approval, implementation corre\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module through the following source-to-proof route: Start at the source record core/papermodulecapsules.json::papermodules[58:papermodule.routingantipatterns_registry]. It is the source authority for sourceauthority: jsoncapsule, the component subject, mechanism subject, runtime source locus, concept, principles, axioms, dependency modules, and the projection statuses. Read the generated structured source record papermodules/routingantipatternsregistry.json only as a projection from that source record. Its 22 relationship edges, zero unresolved selective route authority. Follow the runtime proof path through src/microcosmcore/components/routingantipatternsregistry.py, fixtures/fir\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "First-wave fixture consumer: PYTHONPATH=src ../repo-python -m microcosmcore.components.routingantipatternsregistry run --input fixtures/firstwave/routingantipatternsregistry/input --out /tmp/microcosm-routing-anti-patterns-registry/fixture --sign-off-out /tmp/microcosm-routing-anti-patterns-registry/sign-off.json --card consumes the public registry fixture, six expected negative-case families, private-source rejection, secret-exclusion scan, metadata-only result record writer, and command-card omission boundary. Exported-bundle consumer: PYTHONPATH=src ../repo-python -m microcosmcore.components.routingantipatternsregistry run-bundle --input examples/routingantipatternsregistry/exportedrouti\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is a projection-only diagnostic. It can explain public anti-pattern registry validation, copied-body digest checks, private-leak rejection, negative cases, and validation result records. It does not become route source authority, mutate routes, expose private routing notes, authorize providers, authorize launch, or prove whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This registry follows the same family as pattern and anti-pattern catalogs: name recurring failure shapes so future operators can recognize and avoid them. The Hillside patterns library is the positive pattern-language ancestor, and the software anti-pattern literature supplies the inverse move: documenting repeated practices that look useful but produce bad outcomes. The routing-specific presentation also borrows from CLI usability practice. The Command Line Interface Guidelines emphasize discoverability, clear errors, and suggested next actions; this component applies that pressure to navigation failures by requiring stable ids and explanatory text while keeping the registry projection be\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate, validate the public routing-registry diagnostic without writing tracked result records: Passing validation proves the public anti-pattern registry fixture and copied-body digest floor only. It does not make this registry route source authority, and it excludes route-policy mutation, external model access, launch, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.routing_anti_patterns_registry.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"core/paper_module_capsules.json paper_module.routing_anti_patterns_registry\"] Standard[\"standards/std_microcosm_routing_anti_patterns_registry.json\"] Markdown[\"paper_modules/routing_anti_patterns_registry.md reader projection; not route authority\"] Runtime[\"src/microcosm_core/components/routing_anti_patterns_registry.py run / run-bundle / result record writer\"] Fixture[\"fixtures/first_wave/routing_anti_patterns_registry/input registry + negative cases\"] Bundle[\"examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle source_module_manifest + exact copied body\"] Tests[\"tests/test_routing_anti_patterns_registry.py\"] Result records[\"result records/.../routing_anti_patterns_registry*.json refs, hashes, counts, verdicts\"] structured source record[\"paper_modules/routing_anti_patterns_registry.json 22 edges; Mermaid available; Atlas linked\"] Ceiling[\"Scope limit no route authority, mutation, external model access, launch, or whole-system proof\"] Bundle --> Markdown Bundle --> structured source record Standard --> Runtime Fixture --> Runtime Bundle --> Runtime Runtime --> Tests Runtime --> Result records Tests --> Result records structured source record --> Ceiling Result records --> Ceiling Markdown --> Ceiling",
       "source_hash": "sha256:a9e129ddfc8118e910060c8c9a3db1e27300f3bc456a58ad2ceeff869de03405",
       "html_url": "docs/paper-modules.html#paper-module-routing-anti-patterns-registry-diagram-1",
       "html_anchor": "paper-module-routing-anti-patterns-registry-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/routing_anti_patterns_registry.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Hillside patterns library",
       "url": "https://hillside.net/patterns/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Command Line Interface Guidelines",
       "url": "https://clig.dev/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "routing_anti_patterns_registry",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Routing Anti Patterns Registry",
         "url": "components.html#component-routing_anti_patterns_registry"
        },
        {
         "id": "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public routing anti patterns registry",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/routing_anti_patterns_registry.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14153
    },
    {
     "id": "paper_module.batch8_audio_level_rms_port",
     "title": "Set 8 Audio Level RMS Port",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-audio-level-rms-port",
     "read_href": "docs/paper-modules.html#paper-module-batch8-audio-level-rms-port",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-audio-level-rms-port",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 8 Audio Level RMS Port validates deterministic RMS math parity over public synthetic samples without audio capture, microphone permission, or UI readiness authority.",
     "summary": "Set 8 Audio Level RMS Port ports the Swift AudioLevelMonitor normalizedLevel RMS calculation into a bounded Python component and checks float, int16, clamp, empty-buffer, and unsupported-format cases over public synthetic sample arrays. It carries source-module refs, digests, anchors, sample counts, parity verdicts, negative cases, and an scope limit while excluding AVCaptureSession startup, microphone permission, recorded audio, device state, UI readiness, source-file changes, launch, public sharing, and whole-system correctness.",
     "authority_ceiling": "Deterministic RMS parity evidence over public fixture inputs and copied source refs only; no macOS audio-session evidence, microphone permission authority, device capture, recorded audio, UI readiness, source-file changes, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Set 8 Audio Level RMS Port validates deterministic RMS math parity over public synthetic samples without audio capture, microphone permission, or UI readiness authority.",
     "teleology": {
      "section_id": "",
      "text": "Set 8 Audio Level RMS Port validates deterministic RMS math parity over public synthetic samples without audio capture, microphone permission, or UI readiness authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This component ports the pure `AudioLevelMonitor.normalizedLevel` RMS math from Swift to Python and exercises it over public synthetic sample arrays.\n\nThe bundle is bounded to numeric parity. It does not start an `AVCaptureSession`, request microphone permission, read recorded audio, capture a device, claim UI readiness, authorize public sharing, or approve launch.\n\n###### Purpose\n\nThe Swift `AudioLevelMonitor` feeds a live microphone level meter in a recording app. Most of that file is platform machinery: opening a capture session, selecting a device, reading sample buffers off a callback. Buried inside is one small, pure function, `normalizedLevel`, that turns a block of audio samples into a single number between zero and one. That number is the only part that can be checked without a microphone, so it is the only part this component ports.\n\nThe single question this component answers is: does the Python re-implementation of that calculation produce the same level value as the Swift original, on inputs we can publish? Everything device-specific, permission-gated, or stateful is deliberately left on the Swift side. What crosses into Python is the arithmetic alone.\n\nThe interesting choice here is what is held out, not what is included. A live level meter is hard to test because it depends on real audio hardware and OS permissions that cannot live in a public fixture. By isolating the pure amplitude maths and exercising it over synthetic sample arrays, the component keeps a checkable parity claim about the part that matters for the meter reading, while making no claim at all about capture, permission, or device state. The test is scoped to being a maths port and nothing more.\n\n###### How it works\n\n`normalized_level` takes a sequence of samples and a format tag. It accepts only `float32` and `int16`; any other tag raises `ValueError`, which is how the \"unsupported format\" case is exercised. An empty buffer returns `0.0` immediately, before any arithmetic.\n\nFor each sample it accumulates the square of the value. Float samples are used as-is; int16 samples are first divided by `32767.0` (the Swift `Int16.max`) to map the integer range onto roughly minus-one to one. It then takes the root mean square, `sqrt(total / count)`, which summarises the block's energy as a single amplitude. That value is multiplied by `8.0` and clamped to the `[0.0, 1.0]` range with `min(max(rms * 8.0, 0.0), 1.0)`. The gain of eight is a display choice carried over verbatim from the Swift source: quiet speech sits low on a zero-to-one meter without it, so the level is scaled up and then capped so loud input cannot overshoot one. These two lines, the int16 divisor and the `rms * 8` clamp, are the anchors the bundle requires to match the copied Swift text.\n\nThe runtime checks three reference cases drawn from a public probe manifest (`float32`, `int16`, and an over-one buffer that must clamp), optionally decodes mono 16-bit PCM WAV byte fixtures and recomputes their level from the raw bytes, and runs three negative exercises: empty buffer must read zero, an over-one buffer must clamp to one, and an unknown format must be refused. Each case compares the observed level against the manifest's expected value within a small tolerance. A mismatch, a missing expected case, or a failed refusal is recorded as a finding, and any finding turns the verdict from `pass` to `blocked`.\n\n###### Shape\n\nRead this module as a bounded RMS-parity pipeline: the JSON bundle names the reader authority, runtime locus, standard, and generated navigation edges; the runtime ports Swift `normalizedLevel` math over public fixture arrays; tests and result records verify numeric parity and metadata-only evidence. Generated Mermaid and Atlas links are navigation status, not macOS audio-session, microphone, device, source-file changes, public sharing, or launch-scope decision.\n\nDiagram source\n\n```text\nflowchart TD swift[\"Copied Swift source AudioLevelMonitor.normalizedLevel metadata-only; anchors only\"] manifest[\"Public probe manifest synthetic sample arrays + WAV bytes expected level per case\"] samples[\"normalized_level(samples, format)\"] fmt{\"format tag?\"} refuse[\"raise ValueError unsupported format refused\"] empty{\"buffer empty?\"} zero[\"return 0.0\"] scale[\"square + accumulate int16 divided by 32767\"] rms[\"rms = sqrt(total / count)\"] clamp[\"min(max(rms * 8, 0), 1) scaled, then clamped to 0..1\"] compare[\"compare observed vs expected within tolerance\"] verdict{\"any finding?\"} blocked[\"status: blocked\"] passed[\"status: pass\"] ceiling[\"Scope limit RMS parity over public fixtures only no audio session, microphone, device, source-file changes, public sharing, or launch\"] swift --> samples manifest --> samples samples --> fmt fmt -->|\"not float32/int16\"| refuse fmt -->|\"float32 or int16\"| empty empty -->|\"yes\"| zero empty -->|\"no\"| scale scale --> rms rms --> clamp clamp --> compare refuse --> compare zero --> compare compare --> verdict verdict -->|\"yes\"| blocked verdict -->|\"no\"| passed blocked --> ceiling passed --> ceiling\n```\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[59]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_audio_level_rms_port.json` for the current generated instance derived from the source record.\n- Bundle route: inspect `examples/batch8_audio_level_rms_port/exported_batch8_audio_level_rms_port_bundle` for copied Swift source refs and digest evidence.\n- Runtime route: run `tests/test_batch8_audio_level_rms_port.py` and the commands in ## Validation Result record Path for recomputation evidence.\n\n###### Prior Art Grounding\n\nThe component is grounded in standard digital-audio metering practice: root mean square amplitude is a common way to summarize signal energy for level displays, while OS capture APIs and media tools are kept outside pure numeric tests. Useful anchors include:\n- Apple's [AVFoundation](https://developer.apple.com/av-foundation/) media framework family for time-based audiovisual capture and processing on Apple platforms.\n- [FFmpeg audio/video documentation](https://www.ffmpeg.org/documentation.html), as a broad media-processing toolchain where audio streams and levels are handled as explicit inputs and transforms.\n\nMicrocosm borrows only the pure RMS-level calculation shape and ports it to fixture-bound Python parity tests. It does not start an audio session, request microphone permission, read recorded audio, capture a device, or approve UI or launch-scope decision.\n\n###### Source Reference\n\nThe exported bundle copies `apps/demo-take-console/Sources/DemoTakeConsoleApp/AudioLevelMonitor.swift` under `examples/batch8_audio_level_rms_port/exported_batch8_audio_level_rms_port_bundle/source_modules/`. Result records carry refs, digests, anchors, sample counts, and parity verdicts, not copied body text, recorded audio, or private device state.\n\n###### Mechanism Set\n\nThe validator requires float32 parity, int16 parity, over-one clamp behavior, empty-buffer zero behavior, and unsupported-format refusal. Shared registry, sign-off, runtime-shell, CLI, atlas, package-data, and generated docs wiring is intentionally deferred while the existing shared Microcosm core lease is active.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded RMS parity result record and sign-off JSON. The bundle command validates the copied Swift source module, digest anchors, negative exercises, body-exclusion scan, and source-ref boundary. The focused test checks the Python port, bundle validation, result record body scan, and scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not start an audio session, request microphone permission, read recorded audio, prove device capture, approve UI readiness, change source files, authorize public sharing, or approve launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is deterministic Python-port evidence over fixture inputs only. It is not macOS audio-session evidence, not microphone permission authority, not device capture, not UI readiness, not source-file changes, and not launch-scope decision.\n\n###### Scope limit\n\nThis paper module can claim a deterministic Python port of the audio-level RMS calculation with a diagram view generated for this module and navigation links available from the same source row. It can explain deterministic numeric RMS/level behavior over fixture inputs and metadata-only result records.\n\nIt cannot claim macOS audio-session evidence, microphone permission authority, device capture, UI readiness, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness. Those claims would need new supporting evidence before this module could narrate them.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 8883,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The Swift AudioLevelMonitor feeds a live microphone level meter in a recording app. Most of that file is platform machinery: opening a capture session, selecting a device, reading sample buffers off a callback. Buried inside is one small, pure function, normalizedLevel, that turns a block of audio samples into a single number between zero and one. That number is the only part that can be checked without a microphone, so it is the only part this component ports. The single question this component answers is: does the Python re-implementation of that calculation produce the same level value as the Swift original, on inputs we can publish? Everything device-specific, permission-gated, or state\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "normalized_level takes a sequence of samples and a format tag. It accepts only float32 and int16; any other tag raises ValueError, which is how the \"unsupported format\" case is exercised. An empty buffer returns 0.0 immediately, before any arithmetic. For each sample it accumulates the square of the value. Float samples are used as-is; int16 samples are first divided by 32767.0 (the Swift Int16.max) to map the integer range onto roughly minus-one to one. It then takes the root mean square, sqrt(total / count), which summarises the block's energy as a single amplitude. That value is multiplied by 8.0 and clamped to the [0.0, 1.0] range with min(max(rms * 8.0, 0.0), 1.0). The gain of eight is\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Read this module as a bounded RMS-parity pipeline: the JSON bundle names the reader authority, runtime locus, standard, and generated navigation edges; the runtime ports Swift normalizedLevel math over public fixture arrays; tests and result records verify numeric parity and metadata-only evidence. Generated Mermaid and Atlas links are navigation status, not macOS audio-session, microphone, device, source-file changes, public sharing, or launch-scope decision.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: read core/papermodulecapsules.json::paper_modules[59] before treating this Markdown as explanation. Generated route: inspect papermodules/batch8audiolevelrms_port.json for the current generated instance derived from the source record. Bundle route: inspect examples/batch8audiolevelrmsport/exportedbatch8audiolevelrmsportbundle for copied Swift source refs and digest evidence. Runtime route: run tests/testbatch8audiolevelrms_port.py and the commands in ## Validation Result record Path for recomputation evidence.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "first-command",
       "title": "First Command",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the bounded RMS parity result record and sign-off JSON. The bundle command validates the copied Swift source module, digest anchors, negative exercises, body-exclusion scan, and source-ref boundary. The focused test checks the Python port, bundle validation, result record body scan, and scope limit. This result record path is reader-verifiable evidence only. It does not start an audio session, request microphone permission, read recorded audio, prove device capture, approve UI readiness, change source files, authorize public sharing, or approve launch.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is deterministic Python-port evidence over fixture inputs only. It is not macOS audio-session evidence, not microphone permission authority, not device capture, not UI readiness, not source-file changes, and not launch approval.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim a deterministic Python port of the audio-level RMS calculation with a diagram view generated for this module and navigation links available from the same source row. It can explain deterministic numeric RMS/level behavior over fixture inputs and metadata-only result records. It cannot claim macOS audio-session evidence, microphone permission authority, device capture, UI readiness, source-file changes, public sharing decision, launch approval, or whole-system correctness. Those claims would need new supporting evidence before this module could narrate them.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in standard digital-audio metering practice: root mean square amplitude is a common way to summarize signal energy for level displays, while OS capture APIs and media tools are kept outside pure numeric tests. Useful anchors include: Apple's AVFoundation media framework family for time-based audiovisual capture and processing on Apple platforms. FFmpeg audio/video documentation, as a broad media-processing toolchain where audio streams and levels are handled as explicit inputs and transforms. Microcosm borrows only the pure RMS-level calculation shape and ports it to fixture-bound Python parity tests. It does not start an audio session, request microphone permissio\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-reference",
       "title": "Source Reference",
       "level": 2,
       "excerpt": "The exported bundle copies apps/demo-take-console/Sources/DemoTakeConsoleApp/AudioLevelMonitor.swift under examples/batch8audiolevelrmsport/exportedbatch8audiolevelrmsportbundle/source_modules/. Result records carry refs, digests, anchors, sample counts, and parity verdicts, not copied body text, recorded audio, or private device state.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-set",
       "title": "Mechanism Set",
       "level": 2,
       "excerpt": "The validator requires float32 parity, int16 parity, over-one clamp behavior, empty-buffer zero behavior, and unsupported-format refusal. Shared registry, sign-off, runtime-shell, CLI, atlas, package-data, and generated docs wiring is intentionally deferred while the existing shared Microcosm core lease is active.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch8_audio_level_rms_port.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD swift[\"Copied Swift source AudioLevelMonitor.normalizedLevel metadata-only; anchors only\"] manifest[\"Public probe manifest synthetic sample arrays + WAV bytes expected level per case\"] samples[\"normalized_level(samples, format)\"] fmt{\"format tag?\"} refuse[\"raise ValueError unsupported format refused\"] empty{\"buffer empty?\"} zero[\"return 0.0\"] scale[\"square + accumulate int16 divided by 32767\"] rms[\"rms = sqrt(total / count)\"] clamp[\"min(max(rms * 8, 0), 1) scaled, then clamped to 0..1\"] compare[\"compare observed vs expected within tolerance\"] verdict{\"any finding?\"} blocked[\"status: blocked\"] passed[\"status: pass\"] ceiling[\"Scope limit RMS parity over public fixtures only no audio session, microphone, device, source-file changes, public sharing, or launch\"] swift --> samples manifest --> samples samples --> fmt fmt -->|\"not float32/int16\"| refuse fmt -->|\"float32 or int16\"| empty empty -->|\"yes\"| zero empty -->|\"no\"| scale scale --> rms rms --> clamp clamp --> compare refuse --> compare zero --> compare compare --> verdict verdict -->|\"yes\"| blocked verdict -->|\"no\"| passed blocked --> ceiling passed --> ceiling",
       "source_hash": "sha256:9661d52ab724bdec4978dd913e85c2213b16ef150570e75f13731b38d23655ec",
       "html_url": "docs/paper-modules.html#paper-module-batch8-audio-level-rms-port-diagram-1",
       "html_anchor": "paper-module-batch8-audio-level-rms-port-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_audio_level_rms_port.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "AVFoundation",
       "url": "https://developer.apple.com/av-foundation/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "FFmpeg audio/video documentation",
       "url": "https://www.ffmpeg.org/documentation.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 5,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.batch7_demo_take_console_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 7 Demo Take Console Bundle",
         "url": "paper-modules.html#paper-module-batch7-demo-take-console-capsule"
        },
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.public_reveal_walkthrough",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Public Reveal Walkthrough",
         "url": "paper-modules.html#paper-module-public-reveal-walkthrough"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch8_audio_level_rms_port",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Audio Level RMS Port",
         "url": "components.html#component-batch8_audio_level_rms_port"
        },
        {
         "id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public audio level rms port",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_audio_level_rms_port.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 10089
    },
    {
     "id": "paper_module.batch8_compliance_pipeline_capsule",
     "title": "Set 8 Compliance Pipeline Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-compliance-pipeline-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-compliance-pipeline-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-compliance-pipeline-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 8 Compliance Pipeline Bundle validates copied compliance scanner and observe-pipeline mechanics without refreshing the full ledger or dispatching bridge/provider work.",
     "summary": "Set 8 Compliance Pipeline Bundle imports compliance scanner registry, bounded compliance ledger builder, and observe-loop pipeline helper bodies into a runnable component. It checks registry shape, bounded no-write compliance checks, baseline scanner truth accounting, pure pipeline helper behavior, source-module digests, negative cases, and scope limits while excluding full compliance-ledger refresh, bridge/external model access, source note mutation, repository mutation, launch, public sharing, and complete compliance proof.",
     "authority_ceiling": "Declared public compliance and pipeline fixture evidence plus copied source-module digest checks only; no full compliance-ledger refresh, bridge/external model access authority, source note mutation, repository mutation, complete compliance proof, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Set 8 Compliance Pipeline Bundle validates copied compliance scanner and observe-pipeline mechanics without refreshing the full ledger or dispatching bridge/provider work.",
     "teleology": {
      "section_id": "",
      "text": "Set 8 Compliance Pipeline Bundle validates copied compliance scanner and observe-pipeline mechanics without refreshing the full ledger or dispatching bridge/provider work.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`batch8_compliance_pipeline_capsule` copies two source subsystems into Microcosm as source bodies and then exercises them. The first is the compliance scanner registry and its bounded ledger builder. The second is the six-stage observe pipeline that turns a source note into a synthesis seed. The component runs six engines over the copied bodies and writes metadata-only result records.\n\n###### Purpose\n\nMost of the bundle components in this set are shape linters: they grep the copied source for expected tokens and pass when the tokens are present. This one goes further. Four of its six engines run the copied bodies on synthetic inputs, importing the pipeline and scanner helpers directly or driving the ledger builder as a subprocess, so the result record records observed behaviour rather than mere presence. The question it answers is narrow and testable: when these two subsystems are imported as copied bodies, do they still behave as their source contracts say, without touching the live ledger or dispatching any work?\n\nThe behaviour worth singling out is digest preservation. The pipeline compresses a long source note down to a short digest before deciding what to inspect next. If that compression silently drops an instruction, the agent downstream loses it. The component feeds the real `digest_raw_seed` an eighty-line block of low-signal text with one directive line buried inside, then checks the directive survives the compression. The matching negative case removes the directive marker from the copied source and confirms the directive is then lost. That pairing is what the page is really about: a compression step that is asserted to keep the one line that matters, with a test that fails when it does not.\n\nThe standing limit is just as deliberate. The bounded compliance check runs the ledger builder in `--check --report` mode, which reads and reports but never writes the ledger. The pipeline engines stop before any bridge or external model access. The bundle is evidence that the imported mechanics work on a sample, not a claim that the full compliance ledger is fresh or that every branch is covered.\n\n###### Role\n\nThis module imports the source compliance scanner registry, the bounded compliance ledger builder, and the observe-loop pipeline stages into Microcosm as copied source bodies with a runnable component.\n\n###### Imported system\n- `system/lib/compliance/__init__.py`\n- `system/lib/compliance/compliance_coverage_adapter.py`\n- `system/lib/compliance/standard_baseline_adapter.py`\n- `system/lib/compliance/microcosm_adapter.py`\n- `tools/meta/factory/build_compliance_ledger.py`\n- `system/lib/pipeline/stage_extract.py`\n- `system/lib/pipeline/stage_select.py`\n- `system/lib/pipeline/stage_emit.py`\n- `system/lib/pipeline/stage_compile.py`\n- `system/lib/pipeline/stage_execute.py`\n- `system/lib/pipeline/stage_process.py`\n\n###### What the engines check\n\nThe component runs six engines and passes only if all six pass and every required source body is present.\n- `compliance_registry_runtime_witness` confirms the copied registry exposes the adapter table, the domain and baseline standard-id sets, and a `scan_all` entry point, that the coverage adapter carries its self-audit fields, and that the ledger builder carries its bounded-check command. When the live registry is importable it also reads the adapter, domain, and baseline counts as a shape witness, never as a freshness claim.\n- `compliance_coverage_bounded_check` runs the ledger builder with `--check --report` for two named standards. The pass condition is strict: the check reports `ok`, `wrote_ledger` is false, there are no error findings, and a next-step ratchet command is present. The point is a check that reads and reports without writing. Stale ledger rows that were not selected stay outside the claim.\n- `baseline_companion_scanner_contract` runs the baseline scanner on a sample standard and checks the returned row is honest about its own shallowness: it must be marked a baseline-inventory row with no domain-specific adapter, so a bare file-exists check can never read as a real compliance pass.\n- `pipeline_digest_and_shard_normalization` exercises three pure helpers from the extract stage. It checks the buried directive survives digest compression, that an unknown shard status is normalised to `pending` while the original value is preserved as a variant, and that diverse-shard selection caps how many shards one group can contribute.\n- `pipeline_observe_compile_helpers` runs the compile-stage helpers on a small fixture and checks they pull the right known-file mentions from free text, order follow-up files, and lift probe questions from a plan while skipping synthesis and summary roles.\n- `pipeline_dispatch_process_boundary_contract` confirms the execute and process stages keep the dispatch boundary explicit. It checks the copied bodies carry the `observe_dispatch_skipped` and `observe_dispatch_started` markers and the result record-selection helper, so the page can state plainly that bridge dispatch stays disabled.\n\nEach engine carries its own scope limit in the result record. The six negative cases each remove one load-bearing token from a copied body and confirm the matching engine then reports `blocked`, so a pass means the contract was actually exercised rather than skipped.\n\n###### Shape\n\nThe authoritative source record is `core/paper_module_capsules.json::paper_modules[60:paper_module.batch8_compliance_pipeline_capsule]`. The generated JSON instance is `paper_modules/batch8_compliance_pipeline_capsule.json`, whose `source_refs` mark that source record as the source of record and this Markdown as `legacy_markdown_projection_not_source_authority`.\n\nSource refs\n\nDispatch and process boundary `observe_dispatch_skipped` Diagram source\n\n```text\nflowchart LR bundle[\"Copied source bundle 11 source bodies body_in_receipt: false\"] subgraph Compliance[\"Compliance subsystem (3 engines)\"] reg[\"Registry runtime witness adapter table, scan_all, coverage self-audit\"] bounded[\"Bounded ledger check --check --report reports ok, wrote_ledger: false\"] base[\"Baseline scanner contract row admits no domain adapter\"] end subgraph Pipeline[\"Observe pipeline (3 engines)\"] digest[\"Digest and shard helpers buried directive survives; status normalised, variant kept\"] compile[\"Compile helpers file mentions, follow-ups, probe questions\"] boundary[\"Dispatch and process boundary observe_dispatch_skipped\"] end neg[\"6 negative cases remove one token per body; matching engine reports blocked\"] result records[\"metadata-only result records result, board, validation\"] ceiling[\"Scope limit no ledger refresh, no provider/bridge dispatch, no source note or source-file changes, no public sharing or launch\"] bundle --> reg & bounded & base bundle --> digest & compile & boundary bundle --> neg reg & bounded & base --> result records digest & compile & boundary --> result records neg --> result records result records --> ceiling\n```\n\nThe shape is a bounded compliance and observe-pipeline witness. The bundle names the component subject `batch8_compliance_pipeline_capsule`, the mechanism subject `mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule`, the resolved runtime/source locus `src/microcosm_core/organs/batch8_compliance_pipeline_capsule.py`, and the dependency/concept/law edges.\n\nThe local standard, when read as `standards/std_microcosm_batch8_compliance_pipeline_capsule.json`, keeps the same boundary: public engine ids, stable negative-case codes, source refs, digests, line counts, required anchors, bounded synthetic outcomes, scope limits, and scope boundaries are public-safe; keys, account secrets, browser state, account or browser state, model-output data bodies, browser UI live-access material, raw operator transcripts, private artifact bodies, live observe dispatch state, and source note bodies are forbidden public inputs. Its validator contract expects eleven copied source source modules and six negative cases, with the runtime command routed through `microcosm_core.organs.batch8_compliance_pipeline_capsule`.\n\nThe runtime locus writes and validates result records through `run`, `run_batch8_compliance_pipeline_bundle`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`. The fixture path `fixtures/first_wave/batch8_compliance_pipeline_capsule/input` and the example bundle `examples/batch8_compliance_pipeline_capsule/exported_batch8_compliance_pipeline_capsule_bundle` carry the public exercise inputs, source-module manifest, and copied compliance/pipeline source bodies. The manifest currently records `source_import_class: copied_non_secret_macro_body`, `module_count: 11`, and `body_in_receipt: false`.\n\nValidation evidence is the focused test `tests/test_batch8_compliance_pipeline_capsule.py`, the first-wave result record set under `receipts/first_wave/batch8_compliance_pipeline_capsule/`, the sign-off result record result records/sign-off/first_wave/batch8_compliance_pipeline_capsule_fixture_acceptance.json, the runtime-shell exported validation result record under `receipts/runtime_shell/demo_project/organs/batch8_compliance_pipeline_capsule/`, and the verifier cycle result record `state/microcosm_verifier/receipts/20260604T0346Z_batch8_compliance_pipeline_capsule_cycle.json`. Those result records can show pass status, exact-copy digest/anchor checks, stable negative cases, no-write behavior, secret/body exclusion scans, and `body_in_receipt: false`; they do not become full compliance-ledger freshness, pipeline dispatch, external model access, source-file changes, public sharing, launch, or whole-system correctness authority.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[60]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_compliance_pipeline_capsule.json` for the current generated instance (relationship graph, diagram availability, and lattice position).\n- Bundle route: inspect `examples/batch8_compliance_pipeline_capsule/exported_batch8_compliance_pipeline_capsule_bundle` for copied compliance and pipeline source refs.\n- Runtime route: run `tests/test_batch8_compliance_pipeline_capsule.py` and the commands in ## Validation Result record Path for recomputation evidence.\n\n###### Prior Art Grounding\n\nThis bundle borrows from control-assessment, policy-as-code, provenance, and observability practice. Useful anchors include:\n- NIST [SP 800-53 Rev. 5](https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final), as a control-catalog pattern for naming, assessing, and reporting control posture.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), as a general-purpose policy engine pattern for evaluating structured inputs without embedding every rule in the caller.\n- [SLSA provenance](https://slsa.dev/spec/v1.2/provenance), for treating artifact origin and process metadata as explicit attestations.\n- [OpenTelemetry](https://opentelemetry.io/docs/), for instrumentation patterns around pipeline stages, traces, metrics, and logs.\n\nMicrocosm borrows the scanner, policy, provenance, and pipeline-stage shape, but the component only validates bounded no-write behavior and pure helper mechanics. It stays with bounded registry/helper checks; broader compliance refresh, provider work, source-record changes, and complete branch certification are outside this fixture.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded compliance/pipeline exercise result record and sign-off JSON. The bundle command validates copied compliance and pipeline source modules, manifest digests, observed negative cases, result record body scans, and public/private boundary checks. The focused test confirms the no-write runtime boundary, bundle validation, omission posture, and scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not refresh the full compliance ledger, dispatch bridge or provider work, change source records, certify every compliance branch, authorize public sharing, or approve launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe bundle validates registry shape, bounded no-write compliance checks, baseline scanner truth accounting, and pure pipeline helper behavior. It does not refresh the full compliance ledger, dispatch bridge/provider work, change source records, or certify every compliance and pipeline branch.\n\n###### Scope limit\n\nThis paper module can claim a compliance pipeline fixture with a diagram view generated for this module and a navigable atlas card. It can explain registry shape checks, bounded no-write compliance probes, scanner truth accounting, pure pipeline helper behavior, and metadata-only result records.\n\nIt cannot claim full compliance-ledger refresh, bridge or external model access, source-record changes, complete compliance branch certification, public sharing, launch, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13052,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Most of the bundle components in this set are shape linters: they grep the copied source for expected tokens and pass when the tokens are present. This one goes further. Four of its six engines run the copied bodies on synthetic inputs, importing the pipeline and scanner helpers directly or driving the ledger builder as a subprocess, so the result record records observed behaviour rather than mere presence. The question it answers is narrow and testable: when these two subsystems are imported as copied bodies, do they still behave as their source contracts say, without touching the live ledger or dispatching any work? The behaviour worth singling out is digest preservation. The pipeline com\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "role",
       "title": "Role",
       "level": 2,
       "excerpt": "This module imports the source compliance scanner registry, the bounded compliance ledger builder, and the observe-loop pipeline stages into Microcosm as copied source bodies with a runnable component.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "imported-substrate",
       "title": "Imported system",
       "level": 2,
       "excerpt": "system/lib/compliance/init.py system/lib/compliance/compliancecoverageadapter.py system/lib/compliance/standardbaselineadapter.py system/lib/compliance/microcosm_adapter.py tools/meta/factory/buildcomplianceledger.py system/lib/pipeline/stage_extract.py system/lib/pipeline/stage_select.py system/lib/pipeline/stage_emit.py system/lib/pipeline/stage_compile.py system/lib/pipeline/stage_execute.py system/lib/pipeline/stage_process.py",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "what-the-engines-check",
       "title": "What the engines check",
       "level": 2,
       "excerpt": "The component runs six engines and passes only if all six pass and every required source body is present. complianceregistryruntime_witness confirms the copied registry exposes the adapter table, the domain and baseline standard-id sets, and a scan_all entry point, that the coverage adapter carries its self-audit fields, and that the ledger builder carries its bounded-check command. When the live registry is importable it also reads the adapter, domain, and baseline counts as a shape witness, never as a freshness claim. compliancecoveragebounded_check runs the ledger builder with `--check --report` for two named standards. The pass condition is strict: the check reports ok, wrote_ledger is\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The authoritative source record is core/papermodulecapsules.json::papermodules[60:papermodule.batch8compliancepipeline_capsule]. The generated JSON instance is papermodules/batch8compliancepipelinecapsule.json, whose source_refs mark that source record as the source of record and this Markdown as legacymarkdownprojectionnotsource_authority. This section is therefore a The shape is a bounded compliance and observe-pipeline witness. The bundle names the component subject batch8compliancepipeline_capsule, the mechanism subject mechanism.batch8compliancepipelinecapsule.validatespubliccompliancepipeline_capsule, the resolved runtime/source locus src/microcosmcore/components/batch8compliancepipel\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: read core/papermodulecapsules.json::paper_modules[60] before treating this Markdown as explanation. Generated route: inspect papermodules/batch8compliancepipelinecapsule.json for the current generated instance (relationship graph, diagram availability, and lattice position). Bundle route: inspect examples/batch8compliancepipelinecapsule/exportedbatch8compliancepipelinecapsulebundle for copied compliance and pipeline source refs. Runtime route: run tests/testbatch8compliancepipelinecapsule.py and the commands in ## Validation Result record Path for recomputation evidence.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This bundle borrows from control-assessment, policy-as-code, provenance, and observability practice. Useful anchors include: NIST SP 800-53 Rev. 5, as a control-catalog pattern for naming, assessing, and reporting control posture. Open Policy Agent, as a general-purpose policy engine pattern for evaluating structured inputs without embedding every rule in the caller. SLSA provenance, for treating artifact origin and process metadata as explicit attestations. OpenTelemetry, for instrumentation patterns around pipeline stages, traces, metrics, and logs. Microcosm borrows the scanner, policy, provenance, and pipeline-stage shape, but the component only validates bounded no-write behavior and p\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The bundle validates registry shape, bounded no-write compliance checks, baseline scanner truth accounting, and pure pipeline helper behavior. It does not refresh the full compliance ledger, dispatch bridge/provider work, change source records, or certify every compliance and pipeline branch.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim a compliance pipeline fixture with a diagram view generated for this module and a navigable atlas card. It can explain registry shape checks, bounded no-write compliance probes, scanner truth accounting, pure pipeline helper behavior, and metadata-only result records. It cannot claim full compliance-ledger refresh, bridge or external model access, source-record changes, complete compliance branch certification, public sharing, launch, or whole-system correctness. Higher claims belong in the JSON bundle",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the bounded compliance/pipeline exercise result record and sign-off JSON. The bundle command validates copied compliance and pipeline source modules, manifest digests, observed negative cases, result record body scans, and public/private boundary checks. The focused test confirms the no-write runtime boundary, bundle validation, omission posture, and scope limit. This result record path is reader-verifiable evidence only. It does not refresh the full compliance ledger, dispatch bridge or provider work, change source records, certify every compliance branch, authorize public sharing, or appr\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch8_compliance_pipeline_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR bundle[\"Copied source bundle 11 source bodies body_in_receipt: false\"] subgraph Compliance[\"Compliance subsystem (3 engines)\"] reg[\"Registry runtime witness adapter table, scan_all, coverage self-audit\"] bounded[\"Bounded ledger check --check --report reports ok, wrote_ledger: false\"] base[\"Baseline scanner contract row admits no domain adapter\"] end subgraph Pipeline[\"Observe pipeline (3 engines)\"] digest[\"Digest and shard helpers buried directive survives; status normalised, variant kept\"] compile[\"Compile helpers file mentions, follow-ups, probe questions\"] boundary[\"Dispatch and process boundary observe_dispatch_skipped\"] end neg[\"6 negative cases remove one token per body; matching engine reports blocked\"] result records[\"metadata-only result records result, board, validation\"] ceiling[\"Scope limit no ledger refresh, no provider/bridge dispatch, no source note or source-file changes, no public sharing or launch\"] bundle --> reg & bounded & base bundle --> digest & compile & boundary bundle --> neg reg & bounded & base --> result records digest & compile & boundary --> result records neg --> result records result records --> ceiling",
       "source_hash": "sha256:38fab06954fb63ac1c22135cdd8b08dbf79e3ad57a5549099dc6471d716c9f17",
       "html_url": "docs/paper-modules.html#paper-module-batch8-compliance-pipeline-capsule-diagram-1",
       "html_anchor": "paper-module-batch8-compliance-pipeline-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_compliance_pipeline_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "SP 800-53 Rev. 5",
       "url": "https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs/latest",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SLSA provenance",
       "url": "https://slsa.dev/spec/v1.2/provenance",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "OpenTelemetry",
       "url": "https://opentelemetry.io/docs/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 5,
       "links": [
        {
         "id": "paper_module.engine_room_egress_self_compliance_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Egress Self-Compliance Gate",
         "url": "paper-modules.html#paper-module-engine-room-egress-self-compliance-gate"
        },
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.batch11_saturation_engines_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 11 Saturation Engines Bundle",
         "url": "paper-modules.html#paper-module-batch11-saturation-engines-capsule"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch8_compliance_pipeline_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Compliance Pipeline Bundle",
         "url": "components.html#component-batch8_compliance_pipeline_capsule"
        },
        {
         "id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public compliance pipeline bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 9,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-13",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Apply the same floor to meta artifacts",
         "url": "doctrine.html#dcard-p-13"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_compliance_pipeline_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14288
    },
    {
     "id": "paper_module.batch8_policy_engines_capsule",
     "title": "Set 8 Policy Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-policy-engines-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-policy-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-policy-engines-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 8 Policy Engines Bundle validates three deterministic public policy-engine exercises without running campaigns, providers, markets, or repository mutations.",
     "summary": "Set 8 Policy Engines Bundle imports Lab contract audit red/green gating, market-fusion fail-closed claim preflight, and campaign dispatch transition adjudication as exact copied source bodies with bounded public exercises. It checks source-module manifests, stable negative cases, exercise outcomes, source digests, and scope limits while excluding live campaigns, external model access, repository mutation, private artifact export, market-level conclusions, launch, public sharing, and whole-system safety.",
     "authority_ceiling": "Deterministic public policy-engine fixture evidence and copied source source refs only; no live campaign execution, external model access, repository mutation, private artifact export, market validation, publishing-scope decision, launch-scope decision, or whole-system correctness.",
     "abstract": "Set 8 Policy Engines Bundle validates three deterministic public policy-engine exercises without running campaigns, providers, markets, or repository mutations.",
     "teleology": {
      "section_id": "",
      "text": "Set 8 Policy Engines Bundle validates three deterministic public policy-engine exercises without running campaigns, providers, markets, or repository mutations.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This component imports three Set-8 policy engines as exact copied source source bodies plus bounded public exercises: Lab contract audit red/green gating, market-fusion fail-closed claim preflight, and campaign dispatch transition adjudication.\n\nThe bundle is source-open and bounded. It exercises deterministic policy mechanics over synthetic public fixtures. It does not run live campaigns, use external model services, mutate repositories, export private artifacts, claim market-level conclusions, authorize public sharing, or approve launch.\n\n###### Purpose\n\nThe three engines copied here share one design idea: a machine-checkable gate that runs before any judgement, model call, or downstream action, and refuses by default rather than passing on absent evidence. The bundle answers a single question for a cold reader: do these copied gate bodies still make the same deterministic decisions when run against public fixture inputs?\n\nThe Lab contract audit reads persisted Lab node artifacts from disk and applies fixed structural rules: a ban on question marks in compute-node outputs (an output carrying a `?` is treated as an unresolved hedge, not an answer), tuple formatting and two-sentence annotation rules, exact thesis inheritance between nodes, prediction targets grounded against an allowed set, and contradiction reconciliation. Any hard fail flips the report from `green` to `red`. The interesting choice is that this audit is deterministic and runs ahead of any semantic interpretation, so a runtime gate can fail closed on structure without asking a model whether the output looks right.\n\nThe market-fusion readiness gate decides whether a consumer may turn raw feed presence into a cross-feed claim. Every registered candidate situation is currently set to refuse, each for named, specific reasons (a missing provider, an absent event window, relation edges that are not measurement-conditioned). An unregistered situation also refuses, but with the distinct reason `candidate_situation_gate_missing`. That distinction is the point: the gate fails closed on anything it has not explicitly reasoned about, and the bundle checks that a registered refusal and a fail-closed refusal stay legible as different things.\n\nThe campaign dispatch adjudicator is a small state machine over a fixed table of legal status transitions. It returns `legal_transition` for an allowed move, `already_target` for a no-op, and raises an error for an illegal one. Its load- bearing rule is that `completed` is terminal: a `completed` dispatch cannot move back to `running` without an explicit superseding event.\n\n###### Shape\n\nRead this module as a bounded evidence pipeline: the JSON bundle names the paper-module authority, runtime locus, standard, and generated projections; the runtime exercises copied policy sources against public fixtures; the tests and result record commands verify those fixture mechanics and scope boundaries. Everything below the bundle is reader or navigation evidence, not live policy, source-file changes, market, public sharing, provider, production, or launch-scope decision.\n\nSource refs\n\nCopied source source bodies `lab_contract_audit.py` `market_fusion_readiness.py` `campaign_state_transition.py` question-mark ban, tuple/annotation, thesis inheritance, target grounding `compute_lab_contract_audit` Mkrun `preflight_candidate_situation` fail-closed default `refuse: candidate_situation_gate_missing` Cprun `validate_dispatch_transition` Diagram source\n\n```text\nflowchart TD bundle[\"Copied source source bodies lab_contract_audit.py market_fusion_readiness.py campaign_state_transition.py\"] fixtures[\"Public synthetic fixtures Lab node artifacts, candidate claims, dispatch status pairs\"] subgraph Lab[\"Lab contract audit\"] labrun[\"compute_lab_contract_audit question-mark ban, tuple/annotation, thesis inheritance, target grounding\"] labgreen[\"green no hard fails\"] labred[\"red QUESTION_MARK_OUTPUT and others\"] end subgraph Market[\"Market-fusion readiness\"] mkrun[\"preflight_candidate_situation\"] mknamed[\"refuse: named reasons registered situation\"] mkmissing[\"refuse: candidate_situation_gate_missing fail-closed default\"] end subgraph Campaign[\"Campaign dispatch adjudicator\"] cprun[\"validate_dispatch_transition\"] cplegal[\"legal_transition / already_target\"] cpillegal[\"CampaignTransitionError completed is terminal\"] end exercises[\"Bundle evaluator three engines must pass, three stable negative cases\"] ceiling[\"Scope limit fixture evidence and copied source refs only no live campaign, provider, market, repo, or launch-scope decision\"] bundle --> labrun bundle --> mkrun bundle --> cprun fixtures --> labrun fixtures --> mkrun fixtures --> cprun labrun --> labgreen labrun --> labred mkrun --> mknamed mkrun --> mkmissing cprun --> cplegal cprun --> cpillegal labred --> exercises mkmissing --> exercises cpillegal --> exercises exercises --> ceiling\n```\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[61]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_policy_engines_capsule.json` for the current generated instance of this module.\n- Bundle route: inspect `examples/batch8_policy_engines_capsule/exported_batch8_policy_engines_capsule_bundle` for the three copied source policy sources.\n- Runtime route: run `tests/test_batch8_policy_engines_capsule.py` and the commands in ## Validation Result record Path for recomputation evidence.\n\n###### Prior Art Grounding\n\nThis bundle borrows from policy-as-code, risk-management, and market-claim boundary practice. Useful anchors include:\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), which treats policy as a separately evaluated engine over structured input.\n- NIST's [AI Risk Management Framework](https://www.nist.gov/itl/ai-risk-management-framework), whose govern/map/measure/manage posture is a useful precedent for explicit risk gates and red/green decision surfaces.\n- The CFTC's [prediction markets](https://www.cftc.gov/LearnandProtect/PredictionMarkets) explainer, as a boundary reminder for market-facing claims and event-contract language.\n\nMicrocosm borrows the deterministic policy-gate and market-claim-preflight shape, but keeps the component to fixture inputs and copied public source. It does not run campaigns, use external model services, claim market-level conclusions, mutate repositories, or approve launch.\n\n###### Source Modules\n\nThe exported bundle copies the relevant source sources under `examples/batch8_policy_engines_capsule/exported_batch8_policy_engines_capsule_bundle/source_modules/`. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.\n\n###### Mechanism Set\n\nThe validator requires exactly these three engine rows: Lab contract audit deterministic red gate, market-fusion readiness fail-closed gate, and campaign dispatch status transition adjudicator. The source module manifest requires three exact copied source source modules. The fixture requires three stable negative cases, one per engine row.\n\nEach engine exercise runs the copied body and checks a concrete decision, so a silent change in gate behaviour shows up as a blocked exercise:\n- Lab contract audit: a green artifact set must return `green`, and the same set with a banned `?` injected into a compute-node output must return `red` with `QUESTION_MARK_OUTPUT` in its hard fails. The negative case `BATCH8_LAB_CONTRACT_QUESTION_MARK_RED_GATE` confirms the red gate fires.\n- Market-fusion readiness: a registered candidate situation must refuse with named reasons, while an unregistered situation and a malformed payload must both refuse with `candidate_situation_gate_missing`. The negative case `BATCH8_MARKET_FUSION_MISSING_GATE_REFUSED` confirms the fail-closed default.\n- Campaign dispatch adjudicator: `candidate -> blocked` is a `legal_transition`, `completed -> completed` is `already_target`, and `completed -> running` raises a terminal-state error. The negative case `BATCH8_CAMPAIGN_COMPLETED_TO_RUNNING_REFUSED` confirms the refusal.\n\nShared registry, sign-off, runtime-shell, CLI, atlas, package-data, and generated docs wiring is intentionally deferred while the existing shared Microcosm core lease is active.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded policy-engine result record and sign-off JSON. The bundle command validates copied source policy sources, manifest digests, negative cases, source-body exclusion, and scope limit posture. The focused test checks deterministic red/green gates, bundle validation, private-boundary scans, and the no-launch scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not run live campaigns, use external model services, mutate repositories, validate markets, certify whole system safety, authorize public sharing, or approve launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is deterministic public-system evidence over fixture inputs only. It is not Lab correctness, not live campaign execution authority, not market validation, not whole-system safety, not repository mutation authority, not external model access, and not launch-scope decision.\n\n###### Scope limit\n\nThis paper module covers a bounded policy-engines fixture. A diagram view and atlas card are generated for this module. It can explain deterministic policy checks over public fixture inputs and metadata-only source-module result records.\n\nIt cannot claim Lab correctness, live campaign execution authority, market validation, whole-system safety, repository mutation authority, external model access, publishing-scope decision, launch-scope decision, or private-system equivalence.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 9846,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The three engines copied here share one design idea: a machine-checkable gate that runs before any judgement, model call, or downstream action, and refuses by default rather than passing on absent evidence. The bundle answers a single question for a cold reader: do these copied gate bodies still make the same deterministic decisions when run against public fixture inputs? The Lab contract audit reads persisted Lab node artifacts from disk and applies fixed structural rules: a ban on question marks in compute-node outputs (an output carrying a ? is treated as an unresolved hedge, not an answer), tuple formatting and two-sentence annotation rules, exact thesis inheritance between nodes, predi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Read this module as a bounded evidence pipeline: the JSON bundle names the paper-module authority, runtime locus, standard, and generated projections; the runtime exercises copied policy sources against public fixtures; the tests and result record commands verify those fixture mechanics and scope boundaries. Everything below the bundle is reader or navigation evidence, not live policy, source-file changes, market, public sharing, provider, production, or launch authority.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: read core/papermodulecapsules.json::paper_modules[61] before treating this Markdown as explanation. Generated route: inspect papermodules/batch8policyenginescapsule.json for the current generated instance of this module. Bundle route: inspect examples/batch8policyenginescapsule/exportedbatch8policyenginescapsulebundle for the three copied source policy sources. Runtime route: run tests/testbatch8policyenginescapsule.py and the commands in ## Validation Result record Path for recomputation evidence.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This bundle borrows from policy-as-code, risk-management, and market-claim boundary practice. Useful anchors include: Open Policy Agent, which treats policy as a separately evaluated engine over structured input. NIST's AI Risk Management Framework, whose govern/map/measure/manage posture is a useful precedent for explicit risk gates and red/green decision surfaces. The CFTC's prediction markets explainer, as a boundary reminder for market-facing claims and event-contract language. Microcosm borrows the deterministic policy-gate and market-claim-preflight shape, but keeps the component to fixture inputs and copied public source. It does not run campaigns, use external model services, claim\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "first-command",
       "title": "First Command",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the bounded policy-engine result record and sign-off JSON. The bundle command validates copied source policy sources, manifest digests, negative cases, source-body exclusion, and scope limit posture. The focused test checks deterministic red/green gates, bundle validation, private-boundary scans, and the no-launch scope limit. This result record path is reader-verifiable evidence only. It does not run live campaigns, use external model services, mutate repositories, validate markets, certify whole system safety, authorize public sharing, or approve launch.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is deterministic public-system evidence over fixture inputs only. It is not Lab correctness, not live campaign execution authority, not market validation, not whole-system safety, not repository mutation authority, not external model access, and not launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module covers a bounded policy-engines fixture. A diagram view and atlas card are generated for this module. It can explain deterministic policy checks over public fixture inputs and metadata-only source-module result records. It cannot claim Lab correctness, live campaign execution authority, market validation, whole-system safety, repository mutation authority, external model access, public sharing decision, launch-scope decision, or private-system equivalence.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-modules",
       "title": "Source Modules",
       "level": 2,
       "excerpt": "The exported bundle copies the relevant source sources under examples/batch8policyenginescapsule/exportedbatch8policyenginescapsulebundle/source_modules/. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-set",
       "title": "Mechanism Set",
       "level": 2,
       "excerpt": "The validator requires exactly these three engine rows: Lab contract audit deterministic red gate, market-fusion readiness fail-closed gate, and campaign dispatch status transition adjudicator. The source module manifest requires three exact copied source source modules. The fixture requires three stable negative cases, one per engine row. Each engine exercise runs the copied body and checks a concrete decision, so a silent change in gate behaviour shows up as a blocked exercise: Lab contract audit: a green artifact set must return green, and the same set with a banned ? injected into a compute-node output must return red with QUESTIONMARKOUTPUT in its hard fails. The negative case BATCH8LA\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch8_policy_engines_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"Copied source source bodies lab_contract_audit.py market_fusion_readiness.py campaign_state_transition.py\"] fixtures[\"Public synthetic fixtures Lab node artifacts, candidate claims, dispatch status pairs\"] subgraph Lab[\"Lab contract audit\"] labrun[\"compute_lab_contract_audit question-mark ban, tuple/annotation, thesis inheritance, target grounding\"] labgreen[\"green no hard fails\"] labred[\"red QUESTION_MARK_OUTPUT and others\"] end subgraph Market[\"Market-fusion readiness\"] mkrun[\"preflight_candidate_situation\"] mknamed[\"refuse: named reasons registered situation\"] mkmissing[\"refuse: candidate_situation_gate_missing fail-closed default\"] end subgraph Campaign[\"Campaign dispatch adjudicator\"] cprun[\"validate_dispatch_transition\"] cplegal[\"legal_transition / already_target\"] cpillegal[\"CampaignTransitionError completed is terminal\"] end exercises[\"Bundle evaluator three engines must pass, three stable negative cases\"] ceiling[\"Scope limit fixture evidence and copied source refs only no live campaign, provider, market, repo, or launch-scope decision\"] bundle --> labrun bundle --> mkrun bundle --> cprun fixtures --> labrun fixtures --> mkrun fixtures --> cprun labrun --> labgreen labrun --> labred mkrun --> mknamed mkrun --> mkmissing cprun --> cplegal cprun --> cpillegal labred --> exercises mkmissing --> exercises cpillegal --> exercises exercises --> ceiling",
       "source_hash": "sha256:4aa2e749e1f916922a2885d974a1352e00d688de84f049cd920c0c06f4c6abcc",
       "html_url": "docs/paper-modules.html#paper-module-batch8-policy-engines-capsule-diagram-1",
       "html_anchor": "paper-module-batch8-policy-engines-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_policy_engines_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs/latest",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "AI Risk Management Framework",
       "url": "https://www.nist.gov/itl/ai-risk-management-framework",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "prediction markets",
       "url": "https://www.cftc.gov/LearnandProtect/PredictionMarkets",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-3",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Authority by derivation, not possession",
         "url": "doctrine.html#dcard-ax-3"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.batch7_macro_engines_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 7 Source Engines Bundle",
         "url": "paper-modules.html#paper-module-batch7-macro-engines-capsule"
        },
        {
         "id": "paper_module.proof_derived_governed_mutation_authorization",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Proof-Derived Governed Mutation Authorization",
         "url": "paper-modules.html#paper-module-proof-derived-governed-mutation-authorization"
        },
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch8_policy_engines_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Policy Engines Bundle",
         "url": "components.html#component-batch8_policy_engines_capsule"
        },
        {
         "id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public policy engines bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 9,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-4",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Possession is not permission",
         "url": "doctrine.html#dcard-p-4"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_policy_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 10988
    },
    {
     "id": "paper_module.batch8_structural_theses_capsule",
     "title": "Set 8 Structural Theses Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-structural-theses-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-structural-theses-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-structural-theses-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 8 Structural Theses Bundle validates public synthetic thesis-family replay without financial decisions, live-market validation, external model access, or portfolio authority.",
     "summary": "Set 8 Structural Theses Bundle imports tools/finance/structural_theses.py as exact copied source source and exercises CP1/CP2 thesis-family validation over public synthetic winner, loser, and control rows. It checks source digest parity, anchors, public family evidence, loser evidence, negative controls, survivor-only rejection, forward-gate-breach rejection, control-leak rejection, runtime verdicts, and scope limits while excluding financial decisions, investment recommendations, live market data, external model access, portfolio action, launch, public sharing, and whole-system correctness.",
     "authority_ceiling": "Deterministic fixture evidence over public synthetic thesis rows and copied source refs only; no financial decisions, investment recommendation, live-market validation, external model access, portfolio authority, publishing-scope decision, launch-scope decision, or whole-system correctness.",
     "abstract": "Set 8 Structural Theses Bundle validates public synthetic thesis-family replay without financial decisions, live-market validation, external model access, or portfolio authority.",
     "teleology": {
      "section_id": "",
      "text": "Set 8 Structural Theses Bundle validates public synthetic thesis-family replay without financial decisions, live-market validation, external model access, or portfolio authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This component imports `tools/finance/structural_theses.py` as exact copied source source and exercises it over public synthetic structural-thesis fixtures.\n\nThe bundle is bounded to replayable CP1/CP2 thesis-family validation. It excludes financial decisions, investment recommendations, live market data, external model access, portfolio action, public sharing, or launch.\n\n###### Purpose\n\nThe copied source, `tools/finance/structural_theses.py`, takes a tempting idea and disciplines it. The tempting idea is that some market moves look structurally obvious, so a corpus of \"obvious\" theses ought to predict the next one. The trap is survivorship: it is easy to assemble a list of patterns that worked in hindsight and call the list a method.\n\nThe single question the source answers is narrower and harder. Given claims that looked structurally obvious at the time they were written, which reasoning families still survive once you resolve every claim forward and keep the ones that failed? The load-bearing inversion is that \"obvious\" is treated as a claim-status frozen at commitment time, never as a label applied to outcomes afterwards. A thesis whose meaning shifts once the result is known is a post-hoc mutation, and the leakage guard rejects it.\n\nWhat is unusual is that losers and negative controls are first-class, required evidence rather than noise. A refuted thesis must flow through the same pipeline as a confirmed one and stay legible as valid evidence; a negative control must be present and must not resolve into a confirmed claim. The output vocabulary deliberately has no tradable \"winner\": the strongest a surviving pattern can earn is `review_candidate`, a flag for human review and nothing more.\n\nThis bundle does not assert any of those findings as market-level conclusions. It imports the source verbatim, runs it over public synthetic rows, and checks that the discipline holds. It is not financial decisions, an investment recommendation, or live-market validation.\n\n###### What it validates\n\nThe component loads the copied finance source, builds one public winner, loser, and control family from a synthetic probe, and then exercises the source's own validator over both the clean family and three deliberately broken variants.\n\nThe clean path confirms the at-time semantics survive a full run: the winner resolves `claim_confirmed_forward`, the loser resolves `claim_refuted_forward` and is marked valid evidence, the control resolves as a control without becoming a confirmed claim, the surviving pattern lands in family memory as a `candidate_set`, and the authority boundary keeps `investment_recommendation_authorized` false. Under the hood the source maps each thesis onto the existing forecast-claim shape and drives the real CP1 admission, CP2 resolution, proper-scoring replay, and purged walk-forward replay with deterministic fixture prices rather than building a new evaluator.\n\nThe three negative exercises are the substance of the proof, because each one forces a specific discipline to fire:\n- **Survivor-only.** A family built from winners alone, with no failed thesis, must be rejected. The source raises `NO_LOSER_FLOWED_THROUGH`, `NO_NEGATIVE_CONTROL`, and `SURVIVORSHIP_SAMPLE`; the component confirms all three appear (error code `BATCH8_STRUCTURAL_THESES_SURVIVOR_ONLY_REJECTED`).\n- **Forward-gate breach.** A refuted pattern is smuggled into the forward review candidates. The source must raise `FORWARD_GATE_BREACH`, because only a pattern that survived at-time replay may produce a `review_candidate` (`BATCH8_STRUCTURAL_THESES_FORWARD_GATE_BREACH_REJECTED`).\n- **Control leak.** A negative control is mutated to claim it confirmed forward. The source must raise `CONTROL_LEAK` (`BATCH8_STRUCTURAL_THESES_CONTROL_LEAK_REJECTED`).\n\nIf any of these refusals fails to fire, the component records a blocked finding rather than a pass. Alongside the family check it verifies exact digest parity and required anchors for the copied source, so the page cannot drift away from the code it claims to exercise. Result records carry verdicts, counts, error codes, and refs only; copied bodies, market data, and model-output data stay out.\n\n###### Shape\n\nThis module's shape is bundle-first and projection-bounded. The source row is `core/paper_module_capsules.json::paper_modules[63:paper_module.batch8_structural_theses_capsule]`; the generated JSON instance is `paper_modules/batch8_structural_theses_capsule.json`, and it preserves `source_authority: json_capsule`.\n\nSource refs\n\nJSON source record `core/paper_module_capsules.json[63]` Runtime locus `organs/batch8_structural_theses_capsule.py` Exact copied source `tools/finance/structural_theses.py` CP1 admit forward-only CP2 resolve vs frozen criterion proper-scoring + purged replay `build_structural_thesis_family` on the clean family `validate_structural_thesis_family` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON source record core/paper_module_capsules.json[63]\"] --> Runtime[\"Runtime locus components/batch8_structural_theses_capsule.py\"] Source[\"Exact copied source tools/finance/structural_theses.py\"] -->|digest + anchor parity| Runtime Probe[\"Public synthetic probe winner, loser, control rows plus realized returns\"] --> Runtime Runtime --> Build[\"build_structural_thesis_family CP1 admit forward-only CP2 resolve vs frozen criterion proper-scoring + purged replay\"] Build --> Clean[\"validate_structural_thesis_family on the clean family\"] Clean --> CleanCheck{\"Winner confirmed, loser refuted + valid evidence, control not confirmed?\"} Runtime --> Neg[\"Three broken variants\"] Neg --> Survivor[\"Survivor-only family NO_LOSER_FLOWED_THROUGH NO_NEGATIVE_CONTROL SURVIVORSHIP_SAMPLE\"] Neg --> Forward[\"Refuted pattern smuggled into forward candidates FORWARD_GATE_BREACH\"] Neg --> Control[\"Control mutated to confirmed CONTROL_LEAK\"] CleanCheck -->|yes| Pass[\"Bounded pass result record\"] CleanCheck -->|no| Block[\"Blocked finding\"] Survivor -->|refusal fires| Pass Forward -->|refusal fires| Pass Control -->|refusal fires| Pass Survivor -->|refusal missing| Block Forward -->|refusal missing| Block Control -->|refusal missing| Block Pass --> Ceiling[\"Scope limit public synthetic fixture + copied source only\"] Ceiling -. forbids .-> NoClaims[\"No advice, recommendation, live market data, external model access, portfolio action, public sharing, launch\"]\n```\n\nThe standards lane is split deliberately. The module-specific public runtime standard, `standards/std_microcosm_batch8_structural_theses_capsule.json`, governs the fixture fields, public/private boundary, result record contract, validator command, negative-case count, and explicit anti-purpose. The wider `codex/standards/std_microcosm.json::paper_module_coverage_contract` governs how paper-module coverage, Atlas cards, generated Mermaid, and context-pack depth stay navigable without promoting generated projections into source truth.\n\nThe runtime/source lane is likewise bounded. The Microcosm component `src/microcosm_core/organs/batch8_structural_theses_capsule.py` loads the copied structural-theses source, builds the winner/loser/control family, evaluates survivor-only, forward-gate-breach, and control-leak negative exercises, and writes metadata-only result records. The exported bundle at `examples/batch8_structural_theses_capsule/exported_batch8_structural_theses_capsule_bundle` contains `source_module_manifest.json`; that manifest records 12 exact copied source modules for bundle validation, including `source_modules/tools/finance/structural_theses.py`, while the first-wave result record narrows the copied-source proof to the structural-theses module itself.\n\nThe proof lane is fixture-level. The public fixture input under `fixtures/first_wave/batch8_structural_theses_capsule/input` and the focused regression `tests/test_batch8_structural_theses_capsule.py` validate digest and anchor parity, thesis-family replay, winner/loser/control semantics, stable negative cases, body exclusion, scope limits, and the runtime-shell bundle path. Result record evidence lives under `receipts/first_wave/batch8_structural_theses_capsule/`, result records/sign-off/first_wave/batch8_structural_theses_capsule_fixture_acceptance.json, and `receipts/runtime_shell/demo_project/organs/batch8_structural_theses_capsule/exported_batch8_structural_theses_capsule_bundle_validation_result.json`.\n\nThe generated Mermaid and Atlas statuses are useful only as navigation result records: `available_from_capsule_edges` and `linked_from_capsule_edges` mean the JSON bundle edges are walkable. They do not authorize financial decisions, investment recommendations, live-market validation, external model access, portfolio action, public sharing, launch, private-system equivalence, or whole-system correctness.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[63]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_structural_theses_capsule.json` for current generated state.\n- Bundle route: inspect `examples/batch8_structural_theses_capsule/exported_batch8_structural_theses_capsule_bundle` for copied source refs and digest evidence.\n- Runtime route: run `tests/test_batch8_structural_theses_capsule.py` and the commands in ## Validation Result record Path.\n\n###### Prior Art Grounding\n\nThis bundle borrows from empirical-finance validation and bias-control patterns. Useful anchors include:\n- Fama and French's [common risk factors](https://mba.tuck.dartmouth.edu/pages/faculty/ken.french/data_library.html) work and data-library tradition, as a precedent for decomposing structural market claims into named factor families and testable rows.\n- MacKinlay's [event-study methodology](https://www.bu.edu/econ/files/2011/01/MacKinlay-1996-Event-Studies-in-Economics-and-Finance.pdf), as a prior pattern for separating an event window, expected baseline, and abnormal-return evidence.\n- Brown, Goetzmann, Ibbotson, and Ross on [survivorship bias](https://terpconnect.umd.edu/~wermers/ftpsite/FAME/Brown_Goetzmann_Ibbotson_Ross.pdf), which motivates explicit loser/control cases rather than winner-only thesis replay.\n\nMicrocosm borrows the factor-family, event-window, and bias-control shape, but keeps the component to public synthetic thesis rows and copied source. It is not financial decisions, an investment recommendation, live-market validation, portfolio authority, publishing-scope decision, or launch-scope decision.\n\n###### Source Reference\n\nThe exported bundle copies `tools/finance/structural_theses.py` under `examples/batch8_structural_theses_capsule/exported_batch8_structural_theses_capsule_bundle/source_modules/`. Result records carry refs, digests, anchors, counts, and runtime verdicts, not copied body text, model-output data, market data, or private runtime state.\n\n###### Mechanism Set\n\nThe validator requires exact source digest parity, structural-thesis source anchors, a public winner/loser/control family, valid loser evidence, a negative control that does not become a confirmed claim, and rejection of survivor-only, forward-gate-breach, and control-leak exercises. Shared registry, sign-off, runtime-shell, CLI, atlas, package-data, and generated docs wiring is intentionally deferred while shared Microcosm core leases are active.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded thesis-family result record and sign-off JSON. The bundle command validates copied source refs, digest anchors, public winner/loser/control cases, negative controls, body-exclusion posture, and scope limit fields. The focused test checks fixture validation, bundle validation, survivor-bias refusal, control-leak refusal, and claim boundaries.\n\nThis result record path is reader-verifiable evidence only. It is not financial decisions, not an investment recommendation, not live-market validation, not external model access, not portfolio authority, not publishing-scope decision, and not launch-scope decision.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is deterministic fixture evidence over public synthetic thesis rows and exact copied source only. It is not advice, not an investment recommendation, not live-market validation, not external model access, not portfolio authority, not publishing-scope decision, and not launch-scope decision.\n\n###### Scope limit\n\nThis paper module demonstrates a bounded structural-theses fixture: deterministic validation over public synthetic thesis rows, exact copied source refs, and metadata-only result records. A diagram view is generated for this module and it appears in the Atlas navigation surface.\n\nIt cannot claim advice, investment recommendation, live-market validation, external model access, portfolio authority, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness. Higher claims must be authorized by the JSON bundle and generated projection state first.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13066,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The copied source, tools/finance/structural_theses.py, takes a tempting idea and disciplines it. The tempting idea is that some market moves look structurally obvious, so a corpus of \"obvious\" theses ought to predict the next one. The trap is survivorship: it is easy to assemble a list of patterns that worked in hindsight and call the list a method. The single question the source answers is narrower and harder. Given claims that looked structurally obvious at the time they were written, which reasoning families still survive once you resolve every claim forward and keep the ones that failed? The load-bearing inversion is that \"obvious\" is treated as a claim-status frozen at commitment time,\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-validates",
       "title": "What it validates",
       "level": 2,
       "excerpt": "The component loads the copied finance source, builds one public winner, loser, and control family from a synthetic probe, and then exercises the source's own validator over both the clean family and three deliberately broken variants. The clean path confirms the at-time semantics survive a full run: the winner resolves claimconfirmedforward, the loser resolves claimrefutedforward and is marked valid evidence, the control resolves as a control without becoming a confirmed claim, the surviving pattern lands in family memory as a candidate_set, and the authority boundary keeps investmentrecommendationauthorized false. Under the hood the source maps each thesis onto the existing forecast-claim\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This module's shape is bundle-first and projection-bounded. The source row is core/papermodulecapsules.json::papermodules[63:papermodule.batch8structuraltheses_capsule]; the generated JSON instance is papermodules/batch8structuralthesescapsule.json, and it preserves sourceauthority: jsoncapsule. that JSON row, not a source-authority flip. The standards lane is split deliberately. The module-specific public runtime standard, standards/stdmicrocosmbatch8structuraltheses_capsule.json, governs the fixture fields, public/private boundary, result record contract, validator command, negative-case count, and explicit anti-purpose. The wider codex/standards/stdmicrocosm.json::papermodulecoveragecont\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: read core/papermodulecapsules.json::paper_modules[63] before treating this Markdown as explanation. Generated route: inspect papermodules/batch8structuralthesescapsule.json for current generated state. Bundle route: inspect examples/batch8structuralthesescapsule/exportedbatch8structuralthesescapsulebundle for copied source refs and digest evidence. Runtime route: run tests/testbatch8structuralthesescapsule.py and the commands in ## Validation Result record Path.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This bundle borrows from empirical-finance validation and bias-control patterns. Useful anchors include: Fama and French's common risk factors work and data-library tradition, as a precedent for decomposing structural market claims into named factor families and testable rows. MacKinlay's event-study methodology, as a prior pattern for separating an event window, expected baseline, and abnormal-return evidence. Brown, Goetzmann, Ibbotson, and Ross on survivorship bias, which motivates explicit loser/control cases rather than winner-only thesis replay. Microcosm borrows the factor-family, event-window, and bias-control shape, but keeps the component to public synthetic thesis rows and copied\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "first-command",
       "title": "First Command",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the bounded thesis-family result record and sign-off JSON. The bundle command validates copied source refs, digest anchors, public winner/loser/control cases, negative controls, body-exclusion posture, and scope limit fields. The focused test checks fixture validation, bundle validation, survivor-bias refusal, control-leak refusal, and claim boundaries. This result record path is reader-verifiable evidence only. It is not financial decisions, not an investment recommendation, not live-market validation, not external model access, not portfolio authority, not public sharing decision, and not\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is deterministic fixture evidence over public synthetic thesis rows and exact copied source only. It is not advice, not an investment recommendation, not live-market validation, not external model access, not portfolio authority, not public sharing decision, and not launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module demonstrates a bounded structural-theses fixture: deterministic validation over public synthetic thesis rows, exact copied source refs, and metadata-only result records. A diagram view is generated for this module and it appears in the Atlas navigation surface. It cannot claim advice, investment recommendation, live-market validation, external model access, portfolio authority, public sharing decision, launch-scope decision, private-system equivalence, or whole-system correctness. Higher claims must be authorized by the JSON bundle and generated projection state first.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-reference",
       "title": "Source Reference",
       "level": 2,
       "excerpt": "The exported bundle copies tools/finance/structural_theses.py under examples/batch8structuralthesescapsule/exportedbatch8structuralthesescapsulebundle/source_modules/. Result records carry refs, digests, anchors, counts, and runtime verdicts, not copied body text, model-output data, market data, or private runtime state.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-set",
       "title": "Mechanism Set",
       "level": 2,
       "excerpt": "The validator requires exact source digest parity, structural-thesis source anchors, a public winner/loser/control family, valid loser evidence, a negative control that does not become a confirmed claim, and rejection of survivor-only, forward-gate-breach, and control-leak exercises. Shared registry, sign-off, runtime-shell, CLI, atlas, package-data, and generated docs wiring is intentionally deferred while shared Microcosm core leases are active.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch8_structural_theses_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Bundle[\"JSON source record core/paper_module_capsules.json[63]\"] --> Runtime[\"Runtime locus components/batch8_structural_theses_capsule.py\"] Source[\"Exact copied source tools/finance/structural_theses.py\"] -->|digest + anchor parity| Runtime Probe[\"Public synthetic probe winner, loser, control rows plus realized returns\"] --> Runtime Runtime --> Build[\"build_structural_thesis_family CP1 admit forward-only CP2 resolve vs frozen criterion proper-scoring + purged replay\"] Build --> Clean[\"validate_structural_thesis_family on the clean family\"] Clean --> CleanCheck{\"Winner confirmed, loser refuted + valid evidence, control not confirmed?\"} Runtime --> Neg[\"Three broken variants\"] Neg --> Survivor[\"Survivor-only family NO_LOSER_FLOWED_THROUGH NO_NEGATIVE_CONTROL SURVIVORSHIP_SAMPLE\"] Neg --> Forward[\"Refuted pattern smuggled into forward candidates FORWARD_GATE_BREACH\"] Neg --> Control[\"Control mutated to confirmed CONTROL_LEAK\"] CleanCheck -->|yes| Pass[\"Bounded pass result record\"] CleanCheck -->|no| Block[\"Blocked finding\"] Survivor -->|refusal fires| Pass Forward -->|refusal fires| Pass Control -->|refusal fires| Pass Survivor -->|refusal missing| Block Forward -->|refusal missing| Block Control -->|refusal missing| Block Pass --> Ceiling[\"Scope limit public synthetic fixture + copied source only\"] Ceiling -. forbids .-> NoClaims[\"No advice, recommendation, live market data, external model access, portfolio action, public sharing, launch\"]",
       "source_hash": "sha256:312a758ff1895b9074020305f21fe7290cb311adfbf16eaf9dc62f380bcb24c2",
       "html_url": "docs/paper-modules.html#paper-module-batch8-structural-theses-capsule-diagram-1",
       "html_anchor": "paper-module-batch8-structural-theses-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_structural_theses_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "common risk factors",
       "url": "https://mba.tuck.dartmouth.edu/pages/faculty/ken.french/data_library.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "event-study methodology",
       "url": "https://www.bu.edu/econ/files/2011/01/MacKinlay-1996-Event-Studies-in-Economics-and-Finance.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "survivorship bias",
       "url": "https://terpconnect.umd.edu/~wermers/ftpsite/FAME/Brown_Goetzmann_Ibbotson_Ross.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.prediction_oracle_reconciliation",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Prediction Oracle Reconciliation",
         "url": "paper-modules.html#paper-module-prediction-oracle-reconciliation"
        },
        {
         "id": "paper_module.batch12_prediction_market_board_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 12 Prediction Market Board Bundle",
         "url": "paper-modules.html#paper-module-batch12-prediction-market-board-capsule"
        },
        {
         "id": "paper_module.world_model_projection_drift_control_room",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "World-Model Projection Drift Control Room",
         "url": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch8_structural_theses_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Structural Theses Finance Bundle",
         "url": "components.html#component-batch8_structural_theses_capsule"
        },
        {
         "id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public structural theses bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_structural_theses_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14346
    },
    {
     "id": "paper_module.batch8_tools_tail_primitives_capsule",
     "title": "Set 8 Tools-Tail Primitives Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-tools-tail-primitives-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 8 Tools-Tail Primitives Bundle validates four public tools-tail primitive exercises without Oracle truth, external model access, live bridge work, or repository mutation authority.",
     "summary": "Set 8 Tools-Tail Primitives Bundle imports observer set diffing, JSON patch interpretation, ledger identity hashing, and shadow envelope parse coverage as exact copied source source bodies with bounded public exercises. It checks source-module manifests, stable negative cases, exercise outcomes, mechanism rows, digests, and scope limits while excluding GodMode execution, external model access, live bridge work, repository mutation, private lab artifact export, oracle truth, launch, public sharing, and whole-system correctness.",
     "authority_ceiling": "Deterministic public tools-tail fixture evidence and copied source source refs only; no oracle truth, prediction correctness, semantic edit correctness, Lab execution authority, live bridge authority, repository mutation authority, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Set 8 Tools-Tail Primitives Bundle validates four public tools-tail primitive exercises without Oracle truth, external model access, live bridge work, or repository mutation authority.",
     "teleology": {
      "section_id": "",
      "text": "Set 8 Tools-Tail Primitives Bundle validates four public tools-tail primitive exercises without Oracle truth, external model access, live bridge work, or repository mutation authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This component imports four Set-8 tools-tail primitives as exact copied source source bodies plus bounded public exercises: observer set diffing, JSON patch interpretation, ledger identity hashing, and shadow envelope parse coverage.\n\nThe bundle is intentionally source-open and bounded. It exercises pure mechanics over synthetic public fixtures. It does not run GodMode, use external model services, execute live bridge work, mutate repositories, export private lab artifacts, claim oracle truth, authorize public sharing, or approve launch.\n\n###### Purpose\n\nWhen a piece of tooling is copied from the private system into the public system, the obvious question is whether the copy still behaves the way the original did, or whether it has quietly drifted into a stub that only looks right. This bundle answers that one question for four small \"tools-tail\" primitives: does the copied source body, when run on a fixed public input, still produce the exact output the original would?\n\nThe unusual choice here is that the bundle does not re-describe the primitives or re-implement them. It loads the copied module straight from the exported bundle and runs the real functions, then checks the results against hard-coded expected values. If the copy were a hollow shell, the assertion would fail rather than pass with a green tick. The evidence is therefore behavioural, not merely a digest match: the code is executed, not just hashed.\n\nWhat it deliberately does not do is treat any of that execution as truth about the world. Diffing two sets of observer rows is set arithmetic, not a claim that either set is correct. Applying a JSON patch is interpreting an edit script, not a claim that the edit is the right one. The bundle keeps the gap between \"the mechanism runs as copied\" and \"the answer is correct\" explicit, which is why the scope limit refuses oracle truth, prediction correctness, and semantic edit correctness even though real code ran.\n\n###### Shape\n\nThe shape is a tools-tail primitive evidence map.\n\nSource refs\n\nJSON source record source basis: source record `core/paper_module_capsules.json[64]` Generated JSON instance 20 edges; 0 unresolved selective relations `paper_modules/batch8_tools_tail_primitives_capsule.json` `paper_modules/batch8_tools_tail_primitives_capsule.md` Local standard `standards/std_microcosm_batch8_tools_tail_primitives_capsule.json` Runtime/source locus loads copied modules, runs four exercises, checks exact output `src/microcosm_core/organs/batch8_tools_tail_primitives_capsule.py` Public fixture input four primitives + negative cases `fixtures/first_wave/batch8_tools_tail_primitives_capsule/input` Copied source bundle `examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle` `source_module_manifest.json` Tests and result records result records/first_wave + sign-off + bundle validation `tests/test_batch8_tools_tail_primitives_capsule.py` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record core/paper_module_capsules.json[64] source basis: source record\"] instance[\"Generated JSON instance paper_modules/batch8_tools_tail_primitives_capsule.json 20 edges; 0 unresolved selective relations\"] markdown[\"Reader projection paper_modules/batch8_tools_tail_primitives_capsule.md\"] standard[\"Local standard standards/std_microcosm_batch8_tools_tail_primitives_capsule.json\"] runtime[\"Runtime/source locus src/microcosm_core/components/batch8_tools_tail_primitives_capsule.py loads copied modules, runs four exercises, checks exact output\"] exercises[\"Four primitive exercises observer set diff | JSON-patch VM ledger-id hash | shadow envelope parse each: accept path + negative case\"] fixture[\"Public fixture input fixtures/first_wave/batch8_tools_tail_primitives_capsule/input four primitives + negative cases\"] bundle[\"Copied source bundle examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle source_module_manifest.json\"] tests[\"Tests and result records tests/test_batch8_tools_tail_primitives_capsule.py result records/first_wave + sign-off + bundle validation\"] projections[\"Generated navigation Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] ceiling[\"Scope limit deterministic public primitive exercises and metadata-only source refs only no oracle truth, semantic edit correctness, live bridge/Lab execution, external model access, repo mutation, public sharing, launch, or whole-system proof\"] bundle --> instance bundle --> runtime instance --> projections instance --> markdown standard --> runtime runtime --> bundle bundle --> runtime fixture --> runtime runtime --> exercises exercises --> tests fixture --> tests bundle --> tests tests --> ceiling projections --> ceiling markdown --> ceiling\n```\n\nThe bundle explains the `batch8_tools_tail_primitives_capsule` component and the public tools-tail mechanism, binds the import/projection drift concept plus the principle and axiom edges, and resolves the runtime locus to `src/microcosm_core/organs/batch8_tools_tail_primitives_capsule.py`. The local standard keeps the evidence to four primitive mechanics: observer set diffs, JSON-patch interpretation, ledger identity hashing, and shadow-envelope parse coverage. Public evidence may include primitive ids, source refs, digests, anchors, counts, stable negative cases, metadata-only result record posture, and scope limits; it must not include private lab artifacts, model-output data, bridge payloads, account or browser state, or account secret-equivalent material.\n\nThe fixture path `fixtures/first_wave/batch8_tools_tail_primitives_capsule/input` and exported bundle `examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle` hold the public inputs and exact copied source modules. The focused test and result records prove fixture mechanics, bundle validation, negative cases, source-module digest/anchor posture, and no body text in result records. Generated Mermaid and Atlas links only make the bundle edges walkable; they do not authorize live tool execution, bridge work, external model access, repository mutation, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### How it works\n\nThe evaluator loads four copied modules by manifest reference and runs one bounded exercise against each, comparing the live output to a fixed expected value. A primitive passes only when every checked field matches.\n- Observer set diff. The copied `diff_evidence` and `diff_predictions` functions take two lists of rows keyed by id and partition them. For evidence, three lab rows and two oracle rows resolve to one overlap, one missed id, and one extra id; a row with no `ledger_id` is dropped rather than crashing the diff. For predictions, rows are split into matching, divergent, and missing-target sets. The exercise also asserts the dropped malformed row never appears in the serialised result, so a parse gap cannot leak through as silent data.\n- Version committer JSON-patch VM. The copied `_apply_op` interprets a small set of edit operations (`set`, `merge`, `append`) over a nested document by path. The exercise applies four ops, checks the resulting document exactly, and confirms that attempting to traverse into a scalar (`/profile/name` where `profile` is a string) raises `VersionCommitterError` instead of corrupting the document. The interesting property is the refusal: a malformed path is a controlled error, not a partial write.\n- Ledger-id identity hash. The copied `generate_ledger_id` produces a stable id from a lane and a record. The exercise checks that the lane alias `poly` and `POLYMARKET` normalise to the same canonical lane and hash to the same id, so the id is identity-stable across spelling; an unknown lane falls back to an `X_` prefix; and a record missing the identity field its lane requires raises `ValueError` rather than hashing a blank.\n- Shadow envelope parser coverage. The copied `run` parses a small envelope DSL (miner tuples, a spine line, prediction rows) written into a temporary run directory. The exercise feeds it one well-formed line and one malformed tuple per node, then checks that parsing did not hard-fail, that the well-formed rows parsed, and that the malformed tuple was counted as a `comma_arity` coverage gap. The point is that the parser reports its own coverage holes rather than swallowing them.\n\nEach exercise also has a matching negative case (`EXPECTED_NEGATIVE_CASES`) that re-runs the same code on input designed to be rejected and confirms the rejection. So for every primitive the page shows both the accepting path and the refusing path. None of these checks open a network, a provider, or the live bridge; they run copied source bodies in process and keep the bodies out of the result records.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[64]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_tools_tail_primitives_capsule.json` for the current generated instance.\n- Bundle route: inspect `examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle` for the copied source source modules.\n- Runtime route: run `tests/test_batch8_tools_tail_primitives_capsule.py` and the commands in ## Validation Result record Path.\n\n###### Prior Art Grounding\n\nThis bundle borrows from standardized patch formats, transparency-log identity patterns, provenance metadata, and parser coverage practice. Useful anchors include:\n- IETF [RFC 6902](https://datatracker.ietf.org/doc/html/rfc6902), which defines JSON Patch operations such as add, remove, replace, move, copy, and test.\n- IETF [RFC 9162](https://www.rfc-editor.org/rfc/rfc9162), where Certificate Transparency uses an append-only Merkle tree as an auditable log pattern.\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), for representing the provenance of derived artifacts and their generating activities.\n\nMicrocosm borrows the patch-operation, identity-hash, append-only-log, and provenance shapes, but keeps this bundle at deterministic fixture exercises. It does not claim oracle truth, semantic edit correctness, live bridge authority, external model access, repository mutation authority, or launch-scope decision.\n\n###### Source Modules\n\nThe exported bundle copies the relevant source sources under `examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle/source_modules/`. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.\n\n###### Mechanism Set\n\nThe validator requires exactly these four mechanism rows: observer set diff kernel, version-committer JSON patch VM, ledger-id identity hash engine, and shadow envelope DSL parser coverage.\n\nThe source module manifest requires four exact copied source source modules. The fixture requires four stable negative cases, one per mechanism row. Shared registry, sign-off, runtime-shell, CLI, atlas, and generated docs wiring is intentionally deferred while the existing shared Microcosm core lease is active.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded tools-tail primitives result record and sign-off JSON. The bundle command validates copied source sources, manifest digests, observer-diff, JSON-patch, ledger-id, and shadow-envelope exercises, body-exclusion posture, and scope limit fields. The focused test checks fixture mechanics, bundle validation, negative cases, and the no-live-bridge scope limit.\n\nThis result record path is reader-verifiable evidence only. It is not oracle truth, not prediction correctness, not semantic edit correctness, not live bridge or Lab execution authority, not external model access, not repository mutation authority, not publishing-scope decision, and not launch-scope decision.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is deterministic public-system evidence over fixture inputs only. It is not oracle truth, not prediction correctness, not semantic edit correctness, not provenance by itself, not Lab execution authority, not live Oracle bridge authority, not repository mutation authority, not external model access, and not launch-scope decision.\n\n###### Scope limit\n\nThis paper module can claim a tools-tail primitives fixture with a diagram view generated for navigation. It can explain deterministic public-system checks over fixture inputs and metadata-only source-module result records.\n\nIt cannot claim oracle truth, prediction correctness, semantic edit correctness, provenance sufficiency by itself, Lab execution authority, live Oracle bridge authority, repository mutation authority, external model access, publishing-scope decision, launch-scope decision, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12953,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "When a piece of tooling is copied from the private system into the public system, the obvious question is whether the copy still behaves the way the original did, or whether it has quietly drifted into a stub that only looks right. This bundle answers that one question for four small \"tools-tail\" primitives: does the copied source body, when run on a fixed public input, still produce the exact output the original would? The unusual choice here is that the bundle does not re-describe the primitives or re-implement them. It loads the copied module straight from the exported bundle and runs the real functions, then checks the results against hard-coded expected values. If the copy were a hollo\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is a tools-tail primitive evidence map. The JSON source record core/papermodulecapsules.json::papermodules[64:papermodule.batch8toolstailprimitivescapsule] is the source of record; the generated instance papermodules/batch8toolstailprimitives_capsule.json carries the that graph. The bundle explains the batch8toolstailprimitivescapsule component and the public tools-tail mechanism, binds the import/projection drift concept plus the principle and axiom edges, and resolves the runtime locus to src/microcosmcore/components/batch8toolstailprimitives_capsule.py. The local standard keeps the evidence to four primitive mechanics: observer set diffs, JSON-patch interpretation, ledger ident\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "The evaluator loads four copied modules by manifest reference and runs one bounded exercise against each, comparing the live output to a fixed expected value. A primitive passes only when every checked field matches. Observer set diff. The copied diffevidence and diffpredictions functions take two lists of rows keyed by id and partition them. For evidence, three lab rows and two oracle rows resolve to one overlap, one missed id, and one extra id; a row with no ledger_id is dropped rather than crashing the diff. For predictions, rows are split into matching, divergent, and missing-target sets. The exercise also asserts the dropped malformed row never appears in the serialised result, so a pa\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: read core/papermodulecapsules.json::paper_modules[64] before treating this Markdown as explanation. Generated route: inspect papermodules/batch8toolstailprimitives_capsule.json for the current generated instance. Bundle route: inspect examples/batch8toolstailprimitivescapsule/exportedbatch8toolstailprimitivescapsulebundle for the copied source source modules. Runtime route: run tests/testbatch8toolstailprimitives_capsule.py and the commands in ## Validation Result record Path.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This bundle borrows from standardized patch formats, transparency-log identity patterns, provenance metadata, and parser coverage practice. Useful anchors include: IETF RFC 6902, which defines JSON Patch operations such as add, remove, replace, move, copy, and test. IETF RFC 9162, where Certificate Transparency uses an append-only Merkle tree as an auditable log pattern. W3C PROV, for representing the provenance of derived artifacts and their generating activities. Microcosm borrows the patch-operation, identity-hash, append-only-log, and provenance shapes, but keeps this bundle at deterministic fixture exercises. It does not claim oracle truth, semantic edit correctness, live bridge author\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "first-command",
       "title": "First Command",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the bounded tools-tail primitives result record and sign-off JSON. The bundle command validates copied source sources, manifest digests, observer-diff, JSON-patch, ledger-id, and shadow-envelope exercises, body-exclusion posture, and scope limit fields. The focused test checks fixture mechanics, bundle validation, negative cases, and the no-live-bridge scope limit. This result record path is reader-verifiable evidence only. It is not oracle truth, not prediction correctness, not semantic edit correctness, not live bridge or Lab execution authority, not external model access, not repository\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is deterministic public-system evidence over fixture inputs only. It is not oracle truth, not prediction correctness, not semantic edit correctness, not provenance by itself, not Lab execution authority, not live Oracle bridge authority, not repository mutation authority, not external model access, and not launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim a tools-tail primitives fixture with a diagram view generated for navigation. It can explain deterministic public-system checks over fixture inputs and metadata-only source-module result records. It cannot claim oracle truth, prediction correctness, semantic edit correctness, provenance sufficiency by itself, Lab execution authority, live Oracle bridge authority, repository mutation authority, external model access, public sharing approval, launch-scope decision, or whole-system correctness. Stronger claims must",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-modules",
       "title": "Source Modules",
       "level": 2,
       "excerpt": "The exported bundle copies the relevant source sources under examples/batch8toolstailprimitivescapsule/exportedbatch8toolstailprimitivescapsulebundle/source_modules/. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-set",
       "title": "Mechanism Set",
       "level": 2,
       "excerpt": "The validator requires exactly these four mechanism rows: observer set diff kernel, version-committer JSON patch VM, ledger-id identity hash engine, and shadow envelope DSL parser coverage. The source module manifest requires four exact copied source source modules. The fixture requires four stable negative cases, one per mechanism row. Shared registry, sign-off, runtime-shell, CLI, atlas, and generated docs wiring is intentionally deferred while the existing shared Microcosm core lease is active.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch8_tools_tail_primitives_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON source record core/paper_module_capsules.json[64] source basis: source record\"] instance[\"Generated JSON instance paper_modules/batch8_tools_tail_primitives_capsule.json 20 edges; 0 unresolved selective relations\"] markdown[\"Reader projection paper_modules/batch8_tools_tail_primitives_capsule.md\"] standard[\"Local standard standards/std_microcosm_batch8_tools_tail_primitives_capsule.json\"] runtime[\"Runtime/source locus src/microcosm_core/components/batch8_tools_tail_primitives_capsule.py loads copied modules, runs four exercises, checks exact output\"] exercises[\"Four primitive exercises observer set diff | JSON-patch VM ledger-id hash | shadow envelope parse each: accept path + negative case\"] fixture[\"Public fixture input fixtures/first_wave/batch8_tools_tail_primitives_capsule/input four primitives + negative cases\"] bundle[\"Copied source bundle examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle source_module_manifest.json\"] tests[\"Tests and result records tests/test_batch8_tools_tail_primitives_capsule.py result records/first_wave + sign-off + bundle validation\"] projections[\"Generated navigation Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] ceiling[\"Scope limit deterministic public primitive exercises and metadata-only source refs only no oracle truth, semantic edit correctness, live bridge/Lab execution, external model access, repo mutation, public sharing, launch, or whole-system proof\"] bundle --> instance bundle --> runtime instance --> projections instance --> markdown standard --> runtime runtime --> bundle bundle --> runtime fixture --> runtime runtime --> exercises exercises --> tests fixture --> tests bundle --> tests tests --> ceiling projections --> ceiling markdown --> ceiling",
       "source_hash": "sha256:d7a03dd97ac2480e2247b0737cb6ae16ab5a122685f3b0ce8be2709b9b3fe877",
       "html_url": "docs/paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule-diagram-1",
       "html_anchor": "paper-module-batch8-tools-tail-primitives-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_tools_tail_primitives_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "RFC 6902",
       "url": "https://datatracker.ietf.org/doc/html/rfc6902",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "RFC 9162",
       "url": "https://www.rfc-editor.org/rfc/rfc9162",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-9",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Compensable transactional effects",
         "url": "doctrine.html#dcard-ax-9"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.batch7_oracle_sibling_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 7 Oracle Sibling Bundle",
         "url": "paper-modules.html#paper-module-batch7-oracle-sibling-capsule"
        },
        {
         "id": "paper_module.batch7_macro_engines_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 7 Source Engines Bundle",
         "url": "paper-modules.html#paper-module-batch7-macro-engines-capsule"
        },
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch8_tools_tail_primitives_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Tools-Tail Primitives Bundle",
         "url": "components.html#component-batch8_tools_tail_primitives_capsule"
        },
        {
         "id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public tools tail primitives bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_tools_tail_primitives_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14225
    },
    {
     "id": "paper_module.batch8_validator_checker_capsule",
     "title": "Set 8 Validator Checker Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-validator-checker-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-validator-checker-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-validator-checker-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 8 Validator Checker Bundle validates selected public checker groups without becoming launch-scope decision or a complete validator-suite proof.",
     "summary": "Set 8 Validator Checker Bundle imports the real idea_microcosm validators body and exercises policy well-formedness, status transition judging, private-boundary scanning, zero-failure, specimen, launch-gate, source-bundle, source-shuttle, concurrency, native-guard, launch-root compiler, and no-write validate entrypoint groups. It carries source anchors, public runtime-only evidence, negative cases, and scope limits while excluding launch-scope decision, hosted-public proof, source-file changes, full validator-suite proof, external model access, public sharing, and whole-system correctness.",
     "authority_ceiling": "Selected public checker-group fixture and copied validator-source evidence only; no launch-scope decision, hosted-public proof, source-file changes, complete validator-suite proof, external model access authority, publishing-scope decision, launch-scope decision, or whole-system correctness.",
     "abstract": "Set 8 Validator Checker Bundle validates selected public checker groups without becoming launch-scope decision or a complete validator-suite proof.",
     "teleology": {
      "section_id": "",
      "text": "Set 8 Validator Checker Bundle validates selected public checker groups without becoming launch-scope decision or a complete validator-suite proof.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Role\n\nThis module imports the real self-indexing-cognitive-system/src/idea_microcosm/validators.py body into Microcosm and exercises individual checker functions that were not covered by the earlier status-judge-only import.\n\n###### Purpose\n\nAn earlier import brought across only one entry point from `validators.py`, the status-judge function. That left most of the validator body imported as text but never actually run. This bundle answers a single question: when the real checker functions are invoked, do they still behave the way their names claim? It picks six groups of checkers from the copied body and runs them, rather than asserting from a distance that the file is correct.\n\nThe groups are chosen to span the kinds of judgement the validator makes: whether a status policy blocks a poisoned transition, whether the private boundary scanner finds a planted home path and email address, whether the specimen and launch-gate checkers report zero failures on the existing fixture, and whether the no-write `validate(root, write_receipt=False)` entry point runs without mutating anything. Each group reaches into a different part of the imported body.\n\nThe design choice worth noting is what happens when the private source state is not present. In that case the component does not pretend the checkers passed. It falls back to reading the copied source for the named anchors and marks the remaining engines `public_runtime_source_only`, recording that as a stated limit rather than a hidden success. The second unusual choice is that the negative cases are judged from the engine outputs themselves, so a check cannot pass merely because a fixture file happens to contain the right error string. Both choices exist to stop a green run from claiming more than it observed.\n\n###### Prior Art Grounding\n\nThis bundle borrows from schema validation, fixture-driven testing, and policy/checker separation. Useful anchors include:\n- [JSON Schema](https://json-schema.org/), as a general pattern for declaring structural expectations and validating data instances against them.\n- [pytest fixtures](https://docs.pytest.org/en/stable/reference/fixtures.html), as a common test pattern for isolating public inputs and expected negative cases.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), as a prior art pattern for separating policy evaluation from the application code that invokes it.\n\nMicrocosm borrows the validator/checker and fixture-negative-case shape, but keeps this component to bounded checker exercises over copied public source. It is not launch-scope decision, hosted-public proof, source-file changes, or a complete validator-suite proof.\n\n###### Imported system\n- self-indexing-cognitive-system/src/idea_microcosm/validators.py\n\n###### Technical Mechanism\n\nThe runtime does not ask the reader to trust the phrase \"validator checker.\" It builds a small checker membrane around a single imported source body and then records how far that membrane reaches.\n\nThe source-anchor phase reads `examples/batch8_validator_checker_capsule/exported_batch8_validator_checker_capsule_bundle/source_module_manifest.json`. That manifest declares one exact copied module under the public bundle-relative locus source_modules/self-indexing-cognitive-system/src/idea_microcosm/validators.py, with a 12,747-line body and digest `4b2d44810cb9db2c5f62fd39da55deb7f20f6bd44ed1a8b0ae4324d38012a1d4`. Here the root segment is a manifest-included public synthetic Microcosm root. The private source-root path is lineage-only and remains excluded from public copy; the checker validates the copied bundle body, not live private source. `_validator_source_anchor_matrix` checks that the copied body still contains the named validator anchors: `private_boundary_hits`, `policy_wellformedness_failures`, `judge_status_request`, `_status_collapse_suite_failures`, `_source_shuttle_specimen_failures`, and `validate(root: Path)`.\n\nThe checker-exercise phase then runs six bounded engines when source state is available: source anchoring, status-policy judging, private-boundary scanning, specimen checker groups, launch-gate checker groups, and the no-write `validate(root, write_receipt=False)` witness. In exported-bundle mode, where a public runtime should not import private source state, the same component falls back to copied-source anchor evidence and marks the remaining engines as `public_runtime_source_only`. That fallback is a scope limit, not a hidden pass-through to private state.\n\nThe negative-case phase is semantic rather than fixture-string-only. The component declares six failure modes: missing validator source, policy poisoning, blind private-boundary scanning, missing specimen checkers, missing launch gates, and bypassing the validate entrypoint. `evaluate_negative_case` observes those cases from the engine outputs, so the tests can prove the negative cases move with runtime evidence instead of passing because a fixture file contains the right error code.\n\nThe result record phase uses the shared crown-jewel runner to write result, board, validation, and sign-off artifacts, then `result_card` deliberately compresses them into an authority floor and body floor. Those card fields keep `release_authorized`, `publication_authorized`, `provider_dispatch`, `model_dispatch`, `source_mutation_authorized`, `full_validator_suite_freshness_claim`, `public_clone_or_hosting_authority`, and `test_completeness_proof` false while also preserving `body_in_receipt: false`.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD A[\"Fixture input or exported bundle\"] --> B[\"Source manifest validation\"] B --> C[\"Exact copied validators.py digest and required anchors\"] C --> D{\"Source state available?\"} D -- \"yes\" --> E[\"Six runtime checker engines\"] D -- \"no\" --> F[\"Copied-source anchors plus source-only witnesses\"] E --> G[\"Semantic negative-case evaluator\"] F --> G G --> H[\"Crown-jewel result, board, validation, sign-off result records\"] H --> I[\"Result card authority_floor and body_floor\"] I --> J[\"Reader claim: bounded checker membrane, not launch-scope decision\"]\n```\n\n###### Doctrine Relation\n\nThe generated JSON row binds this page to `mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule` and `concept.agent_reliability_and_safety_validator_bundle`; that relation is bundle-declared rather than inferred from this prose. The bundle also names the axiom refs `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, `AX-11`, and `AX-12` and the principle refs `P-1`, `P-2`, `P-5`, `P-6`, `P-8`, `P-9`, `P-13`, and `P-15`. In this module those refs matter because the component separates evidence from authority, keeps JSON as the navigable contract, prevents body leakage, and refuses to promote a selected checker run into a launch or proof claim.\n\nThe dependency edges also explain the reader route. `microcosm_axiom_substrate` owns the axiom vocabulary this module abides by; `engine_room_generated_projection_drift_gate` owns the generated-projection freshness posture this page must not bypass; and `public_reveal_walkthrough` owns the reading lane for result records, source refs, and scope boundaries.\n\n###### Evidence Model and Limitations\n\nThe strongest positive evidence is narrow and useful: the focused regression checks that all expected engines are present, the exact copied source body matches the source source digest, exported-bundle validation does not import source validators, source-anchor corruption blocks validation, result cards omit private bodies, and semantic negative cases fail when runtime evidence is weakened.\n\nThe limitations are just as important. Exported-bundle mode validates copied source anchors and public-runtime witness fields; it does not re-run the full source validator suite. The fixture proves selected checker groups and selected negative cases, not all future validator behavior. The copied source body being large does not itself increase the claim; only the named anchors, engines, digests, negative cases, and result record fields are evidence. A green run therefore supports a bounded checker-membrane claim and nothing broader.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[65]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_validator_checker_capsule.json` for current relationship state and projection details.\n- Bundle route: inspect `examples/batch8_validator_checker_capsule/exported_batch8_validator_checker_capsule_bundle` for copied validator source refs and digest evidence.\n- Runtime route: run `tests/test_batch8_validator_checker_capsule.py` and the commands in ## Validation Result record Path.\n\n###### Exercised checker groups\n- Policy well-formedness and status transition judging.\n- Private boundary scanning without putting private body text into result records.\n- Status collapse, internal control, correction, self-comprehension, task-ledger, and atlas navigation specimen checkers.\n- launch standards, source bundle, source shuttle, concurrency, native guard, and launch-root compiler gate checkers.\n- The no-write `validate(root, write_receipt=False)` entrypoint.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded validator-checker result record and sign-off JSON. The bundle command validates copied checker source, manifest digests, selected checker-group exercises, body-exclusion scans, and scope limit fields. The focused test checks fixture validation, bundle validation, private-boundary scanning, and the no-complete-suite-proof scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not establish the complete validator suite, authorize source-file changes, provide hosted-public proof, dispatch providers, authorize public sharing, or approve launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe bundle is not launch-scope decision, not hosted-public proof, not source-file changes, and not a complete validator-suite proof.\n\n###### Scope limit\n\nThis paper module can claim a bounded validator/checker fixture with a diagram view and Atlas navigation generated for it. It can explain the declared checker groups, no-write validation entrypoint, and metadata-only result record boundary.\n\nIt cannot claim launch-scope decision, hosted-public proof, source-file changes, complete validator-suite proof, publishing-scope decision, provider authority, or whole-system correctness. Any broader checker claim must be grounded in the JSON bundle and its generated projection.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 10655,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "role",
       "title": "Role",
       "level": 2,
       "excerpt": "This module imports the real self-indexing-cognitive-system/src/idea_microcosm/validators.py body into Microcosm and exercises individual checker functions that were not covered by the earlier status-judge-only import.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "An earlier import brought across only one entry point from validators.py, the status-judge function. That left most of the validator body imported as text but never actually run. This bundle answers a single question: when the real checker functions are invoked, do they still behave the way their names claim? It picks six groups of checkers from the copied body and runs them, rather than asserting from a distance that the file is correct. The groups are chosen to span the kinds of judgement the validator makes: whether a status policy blocks a poisoned transition, whether the private boundary scanner finds a planted home path and email address, whether the specimen and launch-gate checkers\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This bundle borrows from schema validation, fixture-driven testing, and policy/checker separation. Useful anchors include: JSON Schema, as a general pattern for declaring structural expectations and validating data instances against them. pytest fixtures, as a common test pattern for isolating public inputs and expected negative cases. Open Policy Agent, as a prior art pattern for separating policy evaluation from the application code that invokes it. Microcosm borrows the validator/checker and fixture-negative-case shape, but keeps this component to bounded checker exercises over copied public source. It is not launch-scope decision, hosted-public proof, source-file changes, or a complete\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "imported-substrate",
       "title": "Imported system",
       "level": 2,
       "excerpt": "self-indexing-cognitive-system/src/idea_microcosm/validators.py",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime does not ask the reader to trust the phrase \"validator checker.\" It builds a small checker membrane around a single imported source body and then records how far that membrane reaches. The source-anchor phase reads examples/batch8validatorcheckercapsule/exportedbatch8validatorcheckercapsulebundle/sourcemodulemanifest.json. That manifest declares one exact copied module under the public bundle-relative locus sourcemodules/self-indexing-cognitive-system/src/ideamicrocosm/validators.py, with a 12,747-line body and digest 4b2d44810cb9db2c5f62fd39da55deb7f20f6bd44ed1a8b0ae4324d38012a1d4. Here the root segment is a manifest-included public synthetic Microcosm root. The private source-\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "doctrine-relation",
       "title": "Doctrine Relation",
       "level": 2,
       "excerpt": "The generated JSON row binds this page to mechanism.batch8validatorcheckercapsule.validatespublicvalidatorchecker_capsule and concept.agentreliabilityandsafetyvalidator_bundle; that relation is bundle-declared rather than inferred from this prose. The bundle also names the axiom refs AX-1, AX-4, AX-5, AX-7, AX-8, AX-11, and AX-12 and the principle refs P-1, P-2, P-5, P-6, P-8, P-9, P-13, and P-15. In this module those refs matter because the component separates evidence from authority, keeps JSON as the navigable contract, prevents body leakage, and refuses to promote a selected checker run into a launch or proof claim. The dependency edges also explain the reader route. microcosmaxiomsubst\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-model-and-limitations",
       "title": "Evidence Model and Limitations",
       "level": 2,
       "excerpt": "The strongest positive evidence is narrow and useful: the focused regression checks that all expected engines are present, the exact copied source body matches the source source digest, exported-bundle validation does not import source validators, source-anchor corruption blocks validation, result cards omit private bodies, and semantic negative cases fail when runtime evidence is weakened. The limitations are just as important. Exported-bundle mode validates copied source anchors and public-runtime witness fields; it does not re-run the full source validator suite. The fixture proves selected checker groups and selected negative cases, not all future validator behavior. The copied source b\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Bundle route: read core/papermodulecapsules.json::paper_modules[65] before treating this Markdown as explanation. Generated route: inspect papermodules/batch8validatorcheckercapsule.json for current relationship state and projection details. Bundle route: inspect examples/batch8validatorcheckercapsule/exportedbatch8validatorcheckercapsulebundle for copied validator source refs and digest evidence. Runtime route: run tests/testbatch8validatorcheckercapsule.py and the commands in ## Validation Result record Path.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "exercised-checker-groups",
       "title": "Exercised checker groups",
       "level": 2,
       "excerpt": "Policy well-formedness and status transition judging. Private boundary scanning without putting private body text into result records. Status collapse, internal control, correction, self-comprehension, task-ledger, and atlas navigation specimen checkers. launch standards, source bundle, source shuttle, concurrency, native guard, and launch-root compiler gate checkers. The no-write validate(root, write_receipt=False) entrypoint.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The bundle is not launch-scope decision, not hosted-public proof, not source-file changes, and not a complete validator-suite proof.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim a bounded validator/checker fixture with a diagram view and Atlas navigation generated for it. It can explain the declared checker groups, no-write validation entrypoint, and metadata-only result record boundary. It cannot claim launch-scope decision, hosted-public proof, source-file changes authority, complete validator-suite proof, public sharing decision, provider authority, or whole-system correctness. Any broader checker claim must be grounded in the JSON bundle and its generated projection.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the bounded validator-checker result record and sign-off JSON. The bundle command validates copied checker source, manifest digests, selected checker-group exercises, body-exclusion scans, and scope limit fields. The focused test checks fixture validation, bundle validation, private-boundary scanning, and the no-complete-suite-proof scope limit. This result record path is reader-verifiable evidence only. It does not establish the complete validator suite, authorize source-file changes, provide hosted-public proof, dispatch providers, authorize public sharing, or approve launch.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch8_validator_checker_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Fixture input or exported bundle\"] --> B[\"Source manifest validation\"] B --> C[\"Exact copied validators.py digest and required anchors\"] C --> D{\"Source state available?\"} D -- \"yes\" --> E[\"Six runtime checker engines\"] D -- \"no\" --> F[\"Copied-source anchors plus source-only witnesses\"] E --> G[\"Semantic negative-case evaluator\"] F --> G G --> H[\"Crown-jewel result, board, validation, sign-off result records\"] H --> I[\"Result card authority_floor and body_floor\"] I --> J[\"Reader claim: bounded checker membrane, not launch-scope decision\"]",
       "source_hash": "sha256:549ea6d5b2d5f43b4a40d320800c4d2ee5e3529637a07807a2b051c3b2a5b392",
       "html_url": "docs/paper-modules.html#paper-module-batch8-validator-checker-capsule-diagram-1",
       "html_anchor": "paper-module-batch8-validator-checker-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_validator_checker_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "JSON Schema",
       "url": "https://json-schema.org/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "pytest fixtures",
       "url": "https://docs.pytest.org/en/stable/reference/fixtures.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs/latest",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 7,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.microcosm_axiom_substrate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Microcosm Axiom System",
         "url": "paper-modules.html#paper-module-microcosm-axiom-substrate"
        },
        {
         "id": "paper_module.engine_room_generated_projection_drift_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Generated Projection Drift Gate",
         "url": "paper-modules.html#paper-module-engine-room-generated-projection-drift-gate"
        },
        {
         "id": "paper_module.public_reveal_walkthrough",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Public Reveal Walkthrough",
         "url": "paper-modules.html#paper-module-public-reveal-walkthrough"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch8_validator_checker_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Validator Checker Bundle",
         "url": "components.html#component-batch8_validator_checker_capsule"
        },
        {
         "id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public validator checker bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 9,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-13",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Apply the same floor to meta artifacts",
         "url": "doctrine.html#dcard-p-13"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_validator_checker_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11872
    },
    {
     "id": "paper_module.batch12_market_dashboard_read_model_capsule",
     "title": "Set 12 Market Dashboard Read-Model Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch12-market-dashboard-read-model-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 12 Market Dashboard Read-Model Bundle validates copied read-model helpers over public fixtures without market-level conclusions, external model access, or launch-scope decision.",
     "summary": "Set 12 Market Dashboard Read-Model Bundle runs market-dashboard read-model over public synthetic fixtures. It validates market dashboard import stubs, validator-case derivation, runtime feed freshness overlays, related-situation rows, source anchors, digest checks, negative cases, and scope limits while excluding launch-scope decision, external model access, private-system equivalence, live market-level conclusions, investment-related actions, public sharing, and whole-system correctness.",
     "authority_ceiling": "Fixture-bound market-dashboard read-model evidence and copied source refs only; no launch-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, publishing-scope decision, or whole-system correctness.",
     "abstract": "Set 12 Market Dashboard Read-Model Bundle validates copied read-model helpers over public fixtures without market-level conclusions, external model access, or launch-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "Set 12 Market Dashboard Read-Model Bundle validates copied read-model helpers over public fixtures without market-level conclusions, external model access, or launch-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nThe underlying source module compiles a generated market-situation graph into a backend read model: a trust strip, a ranked situation queue, a detail index, a graph slice, facets, drilldowns, and an API contract. The read model is the shape a dashboard consumes. It runs the copied read-model helpers over small synthetic fixtures and asks one question: does the read-model layer hold its own claim boundary, or does it quietly become a market-truth or advice surface?\n\nThe interesting part is what the validator refuses rather than what it accepts. A presentation layer is the easy place for an overclaim to leak in: a label like \"strong buy\", an `auto_apply_allowed` flag left true, a freshness state that reports green from a stale or missing artifact. The copied `validate_market_dashboard_read_model` scans for trading and action-claim language, requires `oracle_evolve.auto_apply_allowed` to be false and `review_gated` to be true, requires `no_advice_mode` to be enabled, and requires the silent-omission count to be zero. The bundle drives those checks with fixtures designed to trip each one, then records whether the source actually flagged them.\n\nThe other two mechanisms guard the read path itself. A feed-freshness overlay classifies the current run into a small set of honest states so historical green proof cannot stand in for live-feed capability, and a related-situations scorer groups situations by shared entities or matching type without inventing links. Everything is fixture-bound: there is no live market data, no external model access, and no investment-related actions anywhere in scope.\n\n###### Mechanisms\n- `validate_market_dashboard_read_model`\n- `_runtime_feed_freshness_overlay`\n- `_related_situations`\n\n###### What the checks do\n\n`validate_market_dashboard_read_model` is the structural and overclaim gate. It first checks the read model is well formed: the schema version matches, every situation in the queue resolves to a detail entry, every graph-slice edge points at a node that exists, and each drilldown source-ref returns metadata only with no arbitrary file read and no `..` traversal in its route. It then enforces the claim boundary. `auto_apply_allowed` must be false, `review_gated` must be true, `no_advice_mode` must be enabled, the silent-omission count must be zero, and any copied source text is scanned for trading or action-claim language (buy, sell, short, price target, stop loss, and similar). The bundle feeds it five negative fixtures, one per failure shape, and confirms the source emits the matching error string for each. A read model that passed these checks but stayed silent on a planted overclaim would be the real failure, so the bundle treats a missing error as a finding.\n\n`_runtime_feed_freshness_overlay` reads a per-run readiness summary and reports one of three honest states. `fresh_green_feed` requires the run to be ready, all targets met, no blockers, and same-day generation. `stale_green_feed` is artifact-backed but no longer same-day. `blocked_missing_artifact` covers the run that is missing its readiness file, falls short on targets, or carries blockers. The point is that a stale or absent run never reports green: historical proof cannot stand in for live-feed capability, and the state carries a plain truth-statement saying so. The bundle writes synthetic readiness files for each case and checks the classifier returns the expected state.\n\n`_related_situations` builds the \"see also\" cohort for a situation. It collects other situations that either share an entity or match the situation type, ranks them, excludes the focus situation itself, and caps the list at six. The bundle checks one boundary case in particular: a situation with no entity overlap and a different type produces an empty cohort rather than a spurious link.\n\n###### Shape\n\nSource refs\n\nValidate market dashboard read model `validate_market_dashboard_read_model` Blocked missing artifact `blocked_missing_artifact` Diagram source\n\n```text\nflowchart TD A[\"Synthetic dashboard, freshness, related fixtures\"] --> B[\"Copied read-model helpers (market_dashboard_read_model.py)\"] B --> C[\"validate_market_dashboard_read_model\"] C --> C1[\"Structure: schema, queue-to-detail, graph edges, drilldown route safety\"] C --> C2[\"Scope limit: no auto-apply, review-gated, no-advice, no trading language, zero silent omissions\"] B --> D[\"_runtime_feed_freshness_overlay\"] D --> D1[\"fresh_green_feed\"] D --> D2[\"stale_green_feed\"] D --> D3[\"blocked_missing_artifact\"] B --> E[\"_related_situations\"] E --> E1[\"Entity overlap or type match; self-excluded, capped at six; no overlap means empty\"] C1 --> F[\"metadata-only result record and card (refs, digests, counts, verdicts)\"] C2 --> F D1 --> F D2 --> F D3 --> F E1 --> F\n```\n\n###### Reader Evidence Routing\n\nStart with `paper_modules/batch12_market_dashboard_read_model_capsule.json` for bundle-derived source authority, then read this Markdown as the explanatory projection. Use `examples/batch12_market_dashboard_read_model_capsule/exported_batch12_market_dashboard_read_model_capsule_bundle/source_module_manifest.json` to inspect copied-source digest status before opening copied source modules. Use `tests/test_batch12_market_dashboard_read_model_capsule.py` to verify the fixture and bundle expectations.\n\nThe useful evidence is dashboard read-model accounting over synthetic public fixtures: validation rows, freshness overlays, related-situation joins, negative cases, metadata-only result records, and scope limit fields.\n\n###### Prior Art Grounding\n\nThe component is grounded in CQRS/read-model and dashboard-observability patterns: derive presentation-ready projections from source data, make freshness visible, and keep the read surface separate from mutation authority. Useful anchors include:\n- Microsoft's [CQRS pattern](https://learn.microsoft.com/en-us/azure/architecture/patterns/cqrs), where read models are optimized for queries and presentation rather than command handling.\n- [Grafana dashboards](https://grafana.com/docs/grafana/latest/visualizations/dashboards/), which query and transform data sources into operational panels.\n\nMicrocosm borrows the read-model shape for dashboard validation, runtime feed freshness overlays, and related-situation joins. The result is fixture-bound mechanism evidence; it does not become market-level conclusions, external model access, investment-related actions, or launch-scope decision.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the dashboard read-model result record and sign-off JSON. The bundle command validates copied source system, manifest digests, freshness overlay rows, related-situation joins, negative cases, and metadata-only result record posture. The focused test checks fixture validation, bundle validation, digest/anchor coverage, and scope limits.\n\nThis result record path is reader-verifiable evidence only. It excludes launch, external model access, private-system equivalence, market-level conclusions, investment-related actions, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the copied source system produced market-dashboard read-model rows, runtime feed freshness overlays, related-situation joins, negative-case checks, metadata-only result record posture, and validation result records over synthetic inputs.\n\nThis module may not claim launch-scope decision, external model access, private-system equivalence, live market-level conclusions, investment-related actions, deployment posture, source-file changes, publishing-scope decision, or whole-system correctness.\n\n###### Scope limit\n\nThis is fixture-bound market-dashboard read-model mechanism evidence. It excludes launch, external model access, private-system equivalence, market-level conclusions, investment-related actions, deployment posture, source-file changes, publishing-scope decision, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 8058,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The underlying source module compiles a generated market-situation graph into a backend read model: a trust strip, a ranked situation queue, a detail index, a graph slice, facets, drilldowns, and an API contract. The read model is the shape a dashboard consumes. It runs the copied read-model helpers over small synthetic fixtures and asks one question: does the read-model layer hold its own claim boundary, or does it quietly become a market-truth or advice surface? The interesting part is what the validator refuses rather than what it accepts. A presentation layer is the easy place for an overclaim to leak in: a label like \"strong buy\", an autoapplyallowed flag left true, a freshness state t\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that the copied source system produced market-dashboard read-model rows, runtime feed freshness overlays, related-situation joins, negative-case checks, metadata-only result record posture, and validation result records over synthetic inputs. This module may not claim launch-scope decision, external model access, private-system equivalence, live market-level conclusions, investment-related actions, deployment posture, source-file changes, public sharing decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanisms",
       "title": "Mechanisms",
       "level": 2,
       "excerpt": "validatemarketdashboardreadmodel runtimefeedfreshnessoverlay relatedsituations",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "what-the-checks-do",
       "title": "What the checks do",
       "level": 2,
       "excerpt": "validatemarketdashboardreadmodel is the structural and overclaim gate. It first checks the read model is well formed: the schema version matches, every situation in the queue resolves to a detail entry, every graph-slice edge points at a node that exists, and each drilldown source-ref returns metadata only with no arbitrary file read and no .. traversal in its route. It then enforces the claim boundary. autoapplyallowed must be false, review_gated must be true, noadvicemode must be enabled, the silent-omission count must be zero, and any copied source text is scanned for trading or action-claim language (buy, sell, short, price target, stop loss, and similar). The bundle feeds it five negat\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with papermodules/batch12marketdashboardreadmodelcapsule.json for bundle-derived source authority, then read this Markdown as the explanatory projection. Use examples/batch12marketdashboardreadmodelcapsule/exportedbatch12marketdashboardreadmodelcapsulebundle/sourcemodulemanifest.json to inspect copied-source digest status before opening copied source modules. Use tests/testbatch12marketdashboardreadmodelcapsule.py to verify the fixture and bundle expectations. The useful evidence is dashboard read-model accounting over synthetic public fixtures: validation rows, freshness overlays, related-situation joins, negative cases, metadata-only result records, and scope limit fields.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the dashboard read-model result record and sign-off JSON. The bundle command validates copied source system, manifest digests, freshness overlay rows, related-situation joins, negative cases, and metadata-only result record posture. The focused test checks fixture validation, bundle validation, digest/anchor coverage, and scope limits. This result record path is reader-verifiable evidence only. It excludes launch, external model access, private-system equivalence, market-level conclusions, investment-related actions, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is fixture-bound market-dashboard read-model mechanism evidence. It excludes launch, external model access, private-system equivalence, market-level conclusions, investment-related actions, deployment posture, source-file changes, public sharing decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in CQRS/read-model and dashboard-observability patterns: derive presentation-ready projections from source data, make freshness visible, and keep the read surface separate from mutation authority. Useful anchors include: Microsoft's CQRS pattern, where read models are optimized for queries and presentation rather than command handling. Grafana dashboards, which query and transform data sources into operational panels. Microcosm borrows the read-model shape for dashboard validation, runtime feed freshness overlays, and related-situation joins. The result is fixture-bound mechanism evidence; it does not become market-level conclusions, external model access, investme\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch12_market_dashboard_read_model_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Synthetic dashboard, freshness, related fixtures\"] --> B[\"Copied read-model helpers (market_dashboard_read_model.py)\"] B --> C[\"validate_market_dashboard_read_model\"] C --> C1[\"Structure: schema, queue-to-detail, graph edges, drilldown route safety\"] C --> C2[\"Scope limit: no auto-apply, review-gated, no-advice, no trading language, zero silent omissions\"] B --> D[\"_runtime_feed_freshness_overlay\"] D --> D1[\"fresh_green_feed\"] D --> D2[\"stale_green_feed\"] D --> D3[\"blocked_missing_artifact\"] B --> E[\"_related_situations\"] E --> E1[\"Entity overlap or type match; self-excluded, capped at six; no overlap means empty\"] C1 --> F[\"metadata-only result record and card (refs, digests, counts, verdicts)\"] C2 --> F D1 --> F D2 --> F D3 --> F E1 --> F",
       "source_hash": "sha256:ddeef4898f215927976ba86697e7b8e23a427ca48fdf5391b46cb84934863bfb",
       "html_url": "docs/paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule-diagram-1",
       "html_anchor": "paper-module-batch12-market-dashboard-read-model-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_market_dashboard_read_model_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "CQRS pattern",
       "url": "https://learn.microsoft.com/en-us/azure/architecture/patterns/cqrs",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Grafana dashboards",
       "url": "https://grafana.com/docs/grafana/latest/visualizations/dashboards/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.prediction_oracle_reconciliation",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Prediction Oracle Reconciliation",
         "url": "paper-modules.html#paper-module-prediction-oracle-reconciliation"
        },
        {
         "id": "paper_module.world_model_projection_drift_control_room",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "World-Model Projection Drift Control Room",
         "url": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch12_market_dashboard_read_model_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Market Dashboard Read-Model Bundle",
         "url": "components.html#component-batch12_market_dashboard_read_model_capsule"
        },
        {
         "id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public market dashboard read model bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.research_and_science_replay_evidence_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "research and science replay validators as reproducibility scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_market_dashboard_read_model_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 9225
    },
    {
     "id": "paper_module.batch12_prediction_market_board_capsule",
     "title": "Set 12 Prediction Market Board Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-prediction-market-board-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch12-prediction-market-board-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch12-prediction-market-board-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 12 Prediction Market Board Bundle validates copied prediction-board and quant-mart diagnostics over public fixtures without market-level conclusions or provider authority.",
     "summary": "Set 12 Prediction Market Board Bundle runs prediction-market board and quant-mart diagnostics over public synthetic fixtures. It validates prediction-market joins, Polymarket identity by slug, provider drift monitors, missingness boards, prior green deltas, source lifecycle vintage enrichment, source-module digests, negative cases, and scope limits while excluding launch-scope decision, external model access, private-system equivalence, market-level conclusions, provider truth, investment-related actions, public sharing, and whole-system correctness.",
     "authority_ceiling": "Fixture-bound prediction-board and quant-mart diagnostic evidence plus copied source refs only; no market-level conclusions, provider truth, investment-related actions, external model access, private-system equivalence, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "abstract": "Set 12 Prediction Market Board Bundle validates copied prediction-board and quant-mart diagnostics over public fixtures without market-level conclusions or provider authority.",
     "teleology": {
      "section_id": "",
      "text": "Set 12 Prediction Market Board Bundle validates copied prediction-board and quant-mart diagnostics over public fixtures without market-level conclusions or provider authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nMarket and source dashboards have a recurring failure: a row looks like a fact when it is really a guess. A duplicate listing inflates a volume figure, an unmatched market slug grows a fabricated identity, a feed reports zero rows but the board shows it as healthy, and a \"change since last time\" number appears even when there is no prior baseline to compare against. The single question this component answers is whether the copied presentation-mart logic keeps those distinctions honest when run over public synthetic inputs.\n\nIt does that by importing the real `quant_presentation_mart` helper body and running it against fixtures that are built to expose each trap, then asserting the exact diagnostic the body should produce. The interesting choice is that the board never asserts what a market price means. It computes accounting about the data: which event a market belongs to, whether its identity was actually matched, how providers drifted, where rows went missing, and whether a vintage date is genuinely present. Aggregation is deliberately conservative. A missing value stays missing rather than defaulting to a confident zero, and an unmatched slug is reported as `missing_from_feed_artifact` instead of being given a synthetic event id.\n\nThe result is fixture-bound evidence, not a forecast. The board is a diagnostic surface over public synthetic rows. It does not read live markets, use external model services, or claim that any number is tradeable.\n\n###### Mechanisms\n- `_prediction_market_board`\n- `_polymarket_identity_by_slug`\n- `_provider_drift_monitor`\n- `_missingness_board`\n- `_delta_since_previous_green`\n- `_macro_lifecycle_by_slug`\n- `_macro_regime_board`\n\n###### How it works\n\nThe bundle loads three fixtures, runs the copied helpers, and checks eight named invariants. Each check targets a specific way a board can quietly mislead.\n\nThe event-join engine (`_prediction_market_board` with `_polymarket_identity_by_slug`) groups raw market rows into events using the Polymarket identity snapshot. Identity is matched by `market_slug`. When two rows share the same slug and outcome, only the higher-volume one is kept, so a duplicate listing cannot double a market count or inflate an aggregate. A slug with no identity match is not dropped and is not given a made-up event id. Its `event_identity_status` becomes `missing_from_feed_artifact` and its `max_liquidity` stays at `0.0`. The fixture proves all three: the duplicate fold (top volume 900000 with one surviving market), the orphan with a null event id, and the deduped aggregate.\n\nThe provider-drift monitor (`_provider_drift_monitor`) reads each feed's diagnostics and raises typed flags rather than a single health score. Generic transport problems (`provider_fallback_used`, `html_response_seen`, `fetch_failures`) are kept distinct from FRED-specific ones (`fred_invalid_series`, `fred_network_warning`). The fixture checks that the stock feed surfaces the generic set, the news feed stays clean, and the source feed surfaces the FRED set. Keeping the families apart means a source data-source fault is not laundered into a generic warning.\n\nThe missingness board (`_missingness_board`) lists only feeds that are not both non-empty and `ok`. A feed with zero rows is labelled `zero_rows`; a populated but low-quality feed is labelled `quality_degraded`; a healthy feed is omitted entirely. The fixture confirms the healthy feed is absent and the two failing lanes carry the correct reason, so an empty feed cannot read as present.\n\nThe prior-green delta (`_delta_since_previous_green`) only computes a \"change since last run\" when a previous green run actually exists. With no baseline it returns `status: unavailable` and an empty `row_deltas_by_lane`, which the fixture asserts directly. This is the guard against a delta number that has nothing to compare against.\n\nThe source lifecycle enrichment (`_macro_lifecycle_by_slug` feeding `_macro_regime_board`) buckets source series, then binds each bucket's `vintage_status` and `release_calendar_status` to whether the lifecycle structured source record genuinely carries that metadata. The fixture proves a series with a present vintage reads `available` with the expected observation date, while a series whose lifecycle row is absent reads `missing_from_feed_artifact`. A vintage date is shown only when it is really there.\n\n###### Shape\n\nSource refs\n\nno fabricated event id `missing_from_feed_artifact` Diagram source\n\n```text\nflowchart TD Rows[\"Synthetic market rows\"] --> Join[\"Event join + identity match _prediction_market_board\"] Identity[\"Polymarket identity snapshot\"] --> Join Helpers[\"Quant-mart helper fixtures\"] --> Drift[\"Provider drift monitor generic vs FRED flags\"] Helpers --> Miss[\"Missingness board zero_rows vs quality_degraded\"] Helpers --> Delta[\"Prior-green delta unavailable with no baseline\"] Helpers --> Source[\"Source regime board vintage status bound to structured source record\"] Join --> Dedup{\"Slug + outcome seen before?\"} Dedup -->|yes| Keep[\"Keep higher-volume market\"] Dedup -->|no, unmatched| Orphan[\"missing_from_feed_artifact no fabricated event id\"] Dedup -->|no, matched| Append[\"Append to event aggregate\"] Keep --> Result record[\"metadata-only result record and card diagnostic rows, negative cases, scope limit\"] Orphan --> Result record Append --> Result record Drift --> Result record Miss --> Result record Delta --> Result record Source --> Result record\n```\n\n###### Reader Evidence Routing\n\nStart with `paper_modules/batch12_prediction_market_board_capsule.json` for bundle-derived source authority, then read this Markdown as the explanatory projection. Use `examples/batch12_prediction_market_board_capsule/exported_batch12_prediction_market_board_capsule_bundle/source_module_manifest.json` to inspect copied-source digest status before opening copied source modules. Use `tests/test_batch12_prediction_market_board_capsule.py` to verify the fixture and bundle expectations.\n\nThe useful evidence is diagnostic accounting over synthetic public fixtures: provider identity matching, drift rows, missingness boards, prior-green deltas, lifecycle/vintage rows, source-regime enrichment, negative cases, metadata-only result records, and scope limit fields.\n\n###### Prior Art Grounding\n\nThe component borrows from prediction-market information aggregation and public market-data integration practice: event contracts expose market prices and settlement states, while dashboards must keep provider identity, missingness, and vintage drift visible. Relevant anchors include:\n- Robin Hanson's [information markets](https://mason.gmu.edu/~rhanson/infomkts.html) framing, where markets are used to aggregate dispersed information about uncertain events.\n- The CFTC's [prediction markets explainer](https://www.cftc.gov/LearnandProtect/PredictionMarkets), which frames event contracts, market prices, and consumer cautions.\n- [Polymarket API documentation](https://docs.polymarket.com/api-reference), as a concrete public API family for market, event, tag, series, and profile data.\n\nMicrocosm borrows the information-aggregation and provider-join shape, then keeps the board explicitly diagnostic: identity matching, provider drift, missingness, prior-green deltas, lifecycle vintage, and source-regime enrichment are tested over public synthetic fixtures. It is not market-level conclusions, provider truth, investment-related actions, or launch-scope decision.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the prediction-market board result record and sign-off JSON. The bundle command validates copied source system, manifest digests, provider identity and drift diagnostics, missingness rows, lifecycle rows, negative cases, and metadata-only result record posture. The focused test checks fixture validation, bundle validation, digest/anchor coverage, and scope limits.\n\nThis result record path is reader-verifiable evidence only. It excludes launch, external model access, private-system equivalence, market-level conclusions, provider truth, investment-related actions, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is fixture-bound mechanism evidence for prediction-market joining, quant-mart diagnostics, and source-lifecycle vintage enrichment. It excludes launch, external model access, private-system equivalence, market-level conclusions, provider truth, investment-related actions, source-file changes, publishing-scope decision, or whole-system correctness.\n\n###### Scope limit\n\nIt does not establish live market-level conclusions, provider truth, external model access, investment-related actions, source-file changes, launch-scope decision, publishing-scope decision, private-system equivalence, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 8875,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Market and source dashboards have a recurring failure: a row looks like a fact when it is really a guess. A duplicate listing inflates a volume figure, an unmatched market slug grows a fabricated identity, a feed reports zero rows but the board shows it as healthy, and a \"change since last time\" number appears even when there is no prior baseline to compare against. The single question this component answers is whether the copied presentation-mart logic keeps those distinctions honest when run over public synthetic inputs. It does that by importing the real quantpresentationmart helper body and running it against fixtures that are built to expose each trap, then asserting the exact diagnost\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanisms",
       "title": "Mechanisms",
       "level": 2,
       "excerpt": "predictionmarket_board polymarketidentitybyslug providerdrift_monitor missingnessboard deltasincepreviousgreen macrolifecyclebyslug macroregime_board",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "The bundle loads three fixtures, runs the copied helpers, and checks eight named invariants. Each check targets a specific way a board can quietly mislead. The event-join engine (predictionmarketboard with polymarketidentitybyslug) groups raw market rows into events using the Polymarket identity snapshot. Identity is matched by marketslug. When two rows share the same slug and outcome, only the higher-volume one is kept, so a duplicate listing cannot double a market count or inflate an aggregate. A slug with no identity match is not dropped and is not given a made-up event id. Its eventidentitystatus becomes missingfromfeedartifact and its maxliquidity stays at 0.0. The fixture proves all t\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with papermodules/batch12predictionmarketboard_capsule.json for bundle-derived source authority, then read this Markdown as the explanatory projection. Use examples/batch12predictionmarketboardcapsule/exportedbatch12predictionmarketboardcapsulebundle/sourcemodulemanifest.json to inspect copied-source digest status before opening copied source modules. Use tests/testbatch12predictionmarketboard_capsule.py to verify the fixture and bundle expectations. The useful evidence is diagnostic accounting over synthetic public fixtures: provider identity matching, drift rows, missingness boards, prior-green deltas, lifecycle/vintage rows, source-regime enrichment, negative cases, metadata-only r\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the prediction-market board result record and sign-off JSON. The bundle command validates copied source system, manifest digests, provider identity and drift diagnostics, missingness rows, lifecycle rows, negative cases, and metadata-only result record posture. The focused test checks fixture validation, bundle validation, digest/anchor coverage, and scope limits. This result record path is reader-verifiable evidence only. It excludes launch, external model access, private-system equivalence, market-level conclusions, provider truth, investment-related actions, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is fixture-bound mechanism evidence for prediction-market joining, quant-mart diagnostics, and source-lifecycle vintage enrichment. It excludes launch, external model access, private-system equivalence, market-level conclusions, provider truth, investment-related actions, source-file changes, public sharing decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that copied prediction-market board system can run over public synthetic fixtures, produce provider identity, drift, missingness, lifecycle, and source-regime diagnostics, and keep metadata-only result record evidence linked to JSON-bundle It does not establish live market-level conclusions, provider truth, external model access, investment-related actions, source-file changes, launch-scope decision, public sharing decision, private-system equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows from prediction-market information aggregation and public market-data integration practice: event contracts expose market prices and settlement states, while dashboards must keep provider identity, missingness, and vintage drift visible. Relevant anchors include: Robin Hanson's information markets framing, where markets are used to aggregate dispersed information about uncertain events. The CFTC's prediction markets explainer, which frames event contracts, market prices, and consumer cautions. Polymarket API documentation, as a concrete public API family for market, event, tag, series, and profile data. Microcosm borrows the information-aggregation and provider-join sh\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch12_prediction_market_board_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Rows[\"Synthetic market rows\"] --> Join[\"Event join + identity match _prediction_market_board\"] Identity[\"Polymarket identity snapshot\"] --> Join Helpers[\"Quant-mart helper fixtures\"] --> Drift[\"Provider drift monitor generic vs FRED flags\"] Helpers --> Miss[\"Missingness board zero_rows vs quality_degraded\"] Helpers --> Delta[\"Prior-green delta unavailable with no baseline\"] Helpers --> Source[\"Source regime board vintage status bound to structured source record\"] Join --> Dedup{\"Slug + outcome seen before?\"} Dedup -->|yes| Keep[\"Keep higher-volume market\"] Dedup -->|no, unmatched| Orphan[\"missing_from_feed_artifact no fabricated event id\"] Dedup -->|no, matched| Append[\"Append to event aggregate\"] Keep --> Result record[\"metadata-only result record and card diagnostic rows, negative cases, scope limit\"] Orphan --> Result record Append --> Result record Drift --> Result record Miss --> Result record Delta --> Result record Source --> Result record",
       "source_hash": "sha256:3d1db58db99a74e9088e3971fd9e23146e339885532339b579d06a85ad900c10",
       "html_url": "docs/paper-modules.html#paper-module-batch12-prediction-market-board-capsule-diagram-1",
       "html_anchor": "paper-module-batch12-prediction-market-board-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_prediction_market_board_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "information markets",
       "url": "https://mason.gmu.edu/~rhanson/infomkts.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "prediction markets explainer",
       "url": "https://www.cftc.gov/LearnandProtect/PredictionMarkets",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Polymarket API documentation",
       "url": "https://docs.polymarket.com/api-reference",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.prediction_oracle_reconciliation",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Prediction Oracle Reconciliation",
         "url": "paper-modules.html#paper-module-prediction-oracle-reconciliation"
        },
        {
         "id": "paper_module.batch8_structural_theses_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 8 Structural Theses Bundle",
         "url": "paper-modules.html#paper-module-batch8-structural-theses-capsule"
        },
        {
         "id": "paper_module.finance_forecast_evaluation_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Finance Forecast Evaluation Spine",
         "url": "paper-modules.html#paper-module-finance-forecast-evaluation-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch12_prediction_market_board_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Prediction Market Board Bundle",
         "url": "components.html#component-batch12_prediction_market_board_capsule"
        },
        {
         "id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public prediction market board bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "concept.research_and_science_replay_evidence_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "research and science replay validators as reproducibility scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_prediction_market_board_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 10121
    },
    {
     "id": "paper_module.batch12_release_claim_language_gate",
     "title": "Set 12 launch claim-Language Gate",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-release-claim-language-gate",
     "read_href": "docs/paper-modules.html#paper-module-batch12-release-claim-language-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch12-release-claim-language-gate",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 12 launch claim-Language Gate checks public claim language against result record-backed scope limits without approving launch or public sharing.",
     "summary": "Set 12 launch claim-Language Gate runs launch claim-language over public fixtures. It classifies phrases against evidence class and scope limit, checks typed ordinal evidence ranks, real-system flags, fail-closed defaults, boundary-context negation, main --assert-clear behavior, source digests, negative cases, and scope limits while excluding launch-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, public sharing, and whole-system correctness.",
     "authority_ceiling": "Fixture-bound launch-claim language gate evidence and copied source refs only; no launch-scope decision, publishing-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, or whole-system correctness.",
     "abstract": "Set 12 launch claim-Language Gate checks public claim language against result record-backed scope limits without approving launch or public sharing.",
     "teleology": {
      "section_id": "",
      "text": "Set 12 launch claim-Language Gate checks public claim language against result record-backed scope limits without approving launch or public sharing.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nPublic copy drifts towards over-claiming. A page that started as \"fixture-proven, not yet published\" gets edited over months until someone writes launch, licensing, or maturity language without noticing that nothing changed underneath. This component answers one question: does a piece of public copy claim more than the result records behind it can support, and would the launch gate catch it if it did?\n\nThe mechanism it wraps is a deterministic regex scan, not a language model. The copied gate body reads a public sharing manifest, walks every claim-bearing file it lists, and matches each line against fixed families of risky launch, licensing, maturity, and private launch-control wording. What makes the scan more than a grep is the classification step. The same family of wording is read three ways depending on context: a bare affirmative launch or maturity claim becomes an `active_claim_blocker`; the same wording inside a forbidden-example block or near a negation marker becomes `boundary_or_negative_context` and is allowed; and a phrase that has neither an affirmative verb nor a clear negation marker is parked in a `needs_review` queue rather than waved through.\n\nThat last branch is the interesting design choice. The gate fails closed. An ambiguous claim does not pass quietly; it lands in a no-go review state, and `main --assert-clear` exits non-zero whenever any active blocker or unresolved review item remains. The scan never rewrites a file, never authorises launch, and treats marketing copy as just another claim surface with an evidence ledger rather than a looser register of speech.\n\nThis paper module is the public, fixture-bound check that the wrapped gate behaves as described over the shipped fixtures. The component runs the copied gate over a safe fixture and an active fixture, then checks that boundary-context language clears, that bare launch language blocks, and that the assert-clear exit code is 2 when blockers remain. It is a check on the checker, held behind digest, result record, and scope limit boundaries.\n\n###### Mechanisms\n- `_classify_hit`\n- `build_gate`\n- `main --assert-clear`\n\n###### Shape\n- Runtime locus: `src/microcosm_core/organs/batch12_release_claim_language_gate.py`, especially `_blocked_exercise`, `_write_gate_fixture`, `_run_main_assert_clear`, `_evaluate`, `run`, `run_batch12_release_claim_language_gate_bundle`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- Source source import: `tools/meta/dissemination/release_claim_language_gate.py`, copied into the exported bundle as one source body with digest equality and anchors `RISKY_PHRASES`, `NEGATIVE_CONTEXT_MARKERS`, `def _classify_hit`, and `def build_gate`.\n- Positive fixture shape: one safe boundary-context claim surface passes because limiting language keeps `does_not_authorize_release: true`.\n- Active fixture shape: two active claim blockers are reported for bare unsupported launch-language surfaces, while boundary/negative context remains counted separately.\n- Negative floor: `affirmative_open_source_production_ready_blocks` and `assert_clear_returns_exit_2`, with stable error codes `BATCH12_RELEASE_CLAIM_ACTIVE_BLOCKER` and `BATCH12_RELEASE_CLAIM_ASSERT_CLEAR_EXIT_2`.\n- Public result record posture: real-system bundle, source manifest pass, secret-exclusion scan pass, result record body scan pass, and a false `body_in_receipt` flag.\n\nSource refs\n\nsafe and active public copy surfaces `release_gate_fixture.json` exact copied source gate body `source_module_manifest.json` negation marker or forbidden example => allowed `boundary_or_negative_context` Diagram source\n\n```text\nflowchart TD Fixture[\"release_gate_fixture.json safe and active public copy surfaces\"] Manifest[\"source_module_manifest.json exact copied source gate body\"] Loader[\"load source module digest equality and required anchors\"] SafeRoot[\"safe fixture root _write_gate_fixture(active=false)\"] ActiveRoot[\"active fixture root _write_gate_fixture(active=true)\"] Scan[\"build_gate scan manifest files for RISKY_PHRASES\"] Classify{\"_classify_hit read each phrase in context\"} Boundary[\"boundary_or_negative_context negation marker or forbidden example => allowed\"] Active[\"active_claim_blocker affirmative line, no downgrade => status active_claim_blocked\"] Review[\"needs_review no clear marker either way => fail-closed no-go queue\"] Assert[\"main --assert-clear exit 2 when not public_copy_clean\"] Negatives[\"computed negative cases affirmative claim blocks assert-clear exits 2 private internal control leak blocks\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"scope limit no launch, public sharing, NLP truth, secret completeness, or whole-system claim\"] Fixture --> SafeRoot Fixture --> ActiveRoot Manifest --> Loader Loader --> Scan SafeRoot --> Scan ActiveRoot --> Scan Scan --> Classify Classify -->|allowed| Boundary Classify -->|blocked| Active Classify -->|ambiguous| Review Active --> Assert Review --> Assert Boundary --> Negatives Active --> Negatives Assert --> Negatives Negatives --> Result records Result records --> Ceiling\n```\n\nThis component is the public copy gate for result record-backed evidence accounting. It does not ask whether a phrase sounds impressive; it asks whether the phrase is within the evidence class and scope limit that result records can support.\n\nEvidence strength is typed ordinal data, not vibes: ranks, real-system flags, and fail-closed defaults constrain how far public language may climb. Independent validators reconcile each component's declared class against result record-backed facts so over-claiming is blocked and stale under-claiming can be surfaced for review. Result record scanners may downgrade when bodies or account secret-equivalent payloads leak; they cannot upgrade merely because a narrative is strong.\n\nThe boundary-context classifier is allowed to pass negated or limiting language such as \"not a hosted product\" while blocking bare maturity claims when no launch-scope decision exists. Marketing copy is therefore treated as another claim surface with an accounting ledger, not as a looser mode of speech.\n\n###### Reader Evidence Routing\n- Start with `paper_modules/batch12_release_claim_language_gate.json` for source authority, then read this Markdown as the projection.\n- Open `standards/std_microcosm_batch12_release_claim_language_gate.json` for the required witnesses, negative floor, denied authority, result record contract, validator command, and runtime bundle command.\n- Open `core/fixture_manifests/batch12_release_claim_language_gate.fixture_manifest.json` for source-open body import count, source manifest refs, and durable result record refs.\n- Open `examples/batch12_release_claim_language_gate/exported_batch12_release_claim_language_gate_bundle/source_module_manifest.json` before inspecting copied source modules; result records carry refs, hashes, counts, verdicts, and omissions rather than copied body text.\n- Open `tests/test_batch12_release_claim_language_gate.py` for assertions on pass result records, digest mismatch rejection, fixture path safety, duplicate-key rejection, duplicate fixture names, exact source body import, and card body omission.\n- Run fixture and bundle routes from `microcosm-substrate/`. The CLI supports `--card`, but it does not expose a `--json` flag.\n- Use `scripts/build_doctrine_projection.py --check-paper-module-corpus` to verify this Markdown projection still satisfies the shared paper-module coverage contract.\n\n###### Prior Art Grounding\n\nThe component borrows a narrow pattern from advertising-substantiation and regulated-communication practice: public claims should stay within evidence actually held, and stronger language requires stronger support. This is prior art for the proof-consumer shape only. The module does not implement legal compliance, include launch operations, or decide whether public copy is fit to publish.\n\nExternal source result record, checked 2026-06-05:\n\nSource Exact URL Why it matters here Local boundary FTC advertising substantiation policy `https://www.ftc.gov/legal-library/browse/ftc-policy-statement-regarding-advertising-substantiation` Objective claims need a reasonable basis before dissemination, and express or implied support claims must match the support actually held. Microcosm maps this to result record-backed evidence classes and fail-closed launch-language blockers, not to legal sufficiency. FINRA Rule 2210 `https://www.finra.org/rules-guidance/rulebooks/finra-rules/2210` Public communications must be fair and balanced, give a sound factual basis, and avoid false, exaggerated, unwarranted, promissory, or misleading claims. The module only uses this as a prior-art analogue for keeping benefits, risks, and qualifications in the same local claim context. SEC investment adviser marketing guide `https://www.sec.gov/resources-small-businesses/small-business-compliance-guides/investment-adviser-marketing` The marketing rule guide summarizes general prohibitions on untrue or misleading material statements, unsupported material facts, unfair treatment of risks, and constrained performance or endorsement claims. The module's investment-advice scope boundary stays negative: a green result record is not adviser marketing compliance or investment-related actions. SEC marketing compliance FAQ `https://www.sec.gov/rules-regulations/staff-guidance/division-investment-management-frequently-asked-questions/marketing-compliance-frequently-asked-questions` Current staff FAQ entries still route extracted performance and characteristics through Rule 206(4)-1 general prohibitions. This is a currency/source-link result record for scope limit posture, not a new Microcosm capability or finance claim.\n\nMicrocosm adapts the substantiation pattern to launch and evidence language. Result record-backed classes, ordinal evidence strength, real-system flags, boundary-context exceptions, and fail-closed defaults constrain what public copy may say. The gate blocks unsupported elevation without turning itself into public launch permission, market-level conclusions, investment-related actions, legal review, or whole-system correctness.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the claim-language gate result record and sign-off JSON. The bundle command validates copied source system, source manifest digests, active-blocker and boundary-context classification, negative cases, metadata-only result records, and scope limit fields. The focused test checks pass result records, digest mismatch rejection, fixture path safety, duplicate-key and duplicate-fixture rejection, exact source body import, and card body omission.\n\nThis result record path is reader-verifiable evidence only. It excludes launch, public sharing, external model access, semantic NLP truth, complete secret detection, private-system equivalence, portability proof, market-level conclusions, investment-related actions, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the Set 12 public launch-language gate can classify result record-backed public copy against an scope limit. Positive claims stay within typed claim hits, evidence strength ranks, real-system flags, boundary-context classification, fail-closed defaults, active blockers, negative cases, copied source source-module refs and bodies, source-manifest pass status, metadata-only result record scan status, secret-exclusion scan status, and validation result records.\n\nThis module may not claim public launch permission, public sharing posture, hosted product status, external model dispatch authority, semantic NLP truth, complete secret detection, private-system equivalence, portability proof, market-level conclusions, investment-related actions, source editing authority, deployment maturity, formal-result correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Limitations\n\nThe gate is a lexical and fixture-driven proof consumer, not a launch oracle. It exercises copied `release_claim_language_gate.py` behavior over bounded public markdown fixtures, so it can detect active over-claiming phrases, boundary-context exceptions, digest drift, fixture path hazards, and stable negative-case regressions. It cannot prove that public copy is semantically complete, market-accurate, legally sufficient, safe for public sharing, or free of all secrets.\n\nThe exact-copy evidence floor is intentionally narrow. The source-module manifest proves one copied source body, required anchors, digest equality, and metadata-only result record posture; it excludes refreshing the source module, accepting private-system equivalence, mutating launch policy, or publishing copied bodies into result records. Any change to the copied source body, fixture corpus, negative cases, or scope limit belongs in the source, standard, and bundle lanes before this Markdown can expand its claim.\n\nThe focused test proves the runtime contract only for the shipped fixtures and bundle shape. Passing `test_batch12_release_claim_language_gate.py` means the public proof consumer still rejects digest mismatch, unsafe fixture names, duplicate fixture inputs, unstable negative labels, and result record body leakage in that bundle. It does not establish launch-scope decision for other documents, providers, frontends, markets, or future site projections.\n\n###### Scope limit\n\nThis is fixture-bound launch claim-language gate evidence. Its scope stops before public launch permission, public sharing posture, external model dispatch, semantic NLP truth, complete secret detection, private-system equivalence, portability proof, market-level conclusions, investment-related actions, source editing authority, deployment maturity, formal-result correctness beyond the listed witnesses, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThis paper module sits under `concept.import_projection_and_drift_control_bundle`: a copied source mechanism is imported into the public system, exercised through public fixtures, and held behind digest, result record, and projection boundaries. The bundle therefore does not treat Markdown prose as authority; it treats the JSON bundle, generated instance, mechanism row, standard, source manifest, and result records as the lattice that the prose must explain.\n\nThe governing principles `P-2`, `P-6`, `P-13`, and `P-15` map onto the component's operational checks. Typed evidence ranks and real-system flags keep public claims below the result record-backed ceiling; public/private boundary rules keep source bodies and private launch state out of result records; negative fixtures and fail-closed defaults prevent optimistic marketing language from bypassing the validator; and generated Mermaid/Atlas rows remain projections of bundle edges, not independent launch-scope decision.\n\nThe axiom boundary is the hard scope limit. `AX-5`, `AX-7`, `AX-11`, and `AX-12` require the gate to preserve source truth, avoid projection drift, route public copy through explicit authority checks, and block unsupported launch language. That is why the mechanism couples `_write_gate_fixture`, `_evaluate`, `run_batch12_release_claim_language_gate_bundle`, exact-copy source manifest validation, and metadata-only result records instead of asking a prose reviewer to decide whether a claim sounds acceptable.\n\nThe sibling dependencies define how to read the result. `public_reveal_walkthrough` supplies the public-copy setting, `proof_derived_governed_mutation_authorization` supplies the proof-before-mutation posture, and `batch8_validator_checker_capsule` supplies the validator/checker pattern. This module is the claim-language checker within that lattice, not the public launch decision itself.\n\nThe generated JSON row currently contributes 15 relationship edges: two `paper_module.explains.organ_or_mechanism` edges, one `paper_module.governed_by.concept` edge, four `paper_module.governed_by.principle` edges, four `paper_module.abides_by.axiom` edges, three sibling `paper_module.depends_on.paper_module` edges, and one resolved `paper_module.cites.code_locus` edge.\n\nAt this HEAD the generated instance reports zero unresolved selective relations. If future bundle edits introduce residuals, this Markdown may name them but must not invent concept ids or promote candidate doctrine.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 16565,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Public copy drifts towards over-claiming. A page that started as \"fixture-proven, not yet published\" gets edited over months until someone writes launch, licensing, or maturity language without noticing that nothing changed underneath. This component answers one question: does a piece of public copy claim more than the result records behind it can support, and would the launch gate catch it if it did? The mechanism it wraps is a deterministic regex scan, not a language model. The copied gate body reads a public sharing manifest, walks every claim-bearing file it lists, and matches each line against fixed families of risky launch, licensing, maturity, and private launch-control wording. What\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound evidence that the Set 12 public launch-language gate can classify result record-backed public copy against an scope limit. Positive claims stay within typed claim hits, evidence strength ranks, real-system flags, boundary-context classification, fail-closed defaults, active blockers, negative cases, copied source source-module refs and bodies, source-manifest pass status, metadata-only result record scan status, secret-exclusion scan status, and validation result records. This module may not claim public launch permission, public sharing posture, hosted product status, external model dispatch authority, semantic NLP truth, complete secret detection, priva\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The gate is a lexical and fixture-driven proof consumer, not a launch oracle. It exercises copied releaseclaimlanguage_gate.py behavior over bounded public markdown fixtures, so it can detect active over-claiming phrases, boundary-context exceptions, digest drift, fixture path hazards, and stable negative-case regressions. It cannot prove that public copy is semantically complete, market-accurate, legally sufficient, safe for public sharing, or free of all secrets. The exact-copy evidence floor is intentionally narrow. The source-module manifest proves one copied source body, required anchors, digest equality, and metadata-only result record posture; it excludes refreshing the source module\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "This paper module sits under concept.importprojectionanddriftcontrol_bundle: a copied source mechanism is imported into the public system, exercised through public fixtures, and held behind digest, result record, and projection boundaries. The bundle therefore does not treat Markdown prose as authority; it treats the JSON bundle, generated instance, mechanism row, standard, source manifest, and result records as the lattice that the prose must explain. The governing principles P-2, P-6, P-13, and P-15 map onto the component's operational checks. Typed evidence ranks and real-system flags keep public claims below the result record-backed ceiling; public/private boundary rules keep source bod\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanisms",
       "title": "Mechanisms",
       "level": 2,
       "excerpt": "classifyhit build_gate main --assert-clear",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Runtime locus: src/microcosmcore/components/batch12releaseclaimlanguage_gate.py, especially blockedexercise, writegate_fixture, runmainassertclear, _evaluate, run, runbatch12releaseclaimlanguagegatebundle, result_card, EXPECTEDNEGATIVECASES, and scope_limit. Source source import: tools/meta/dissemination/releaseclaimlanguage_gate.py, copied into the exported bundle as one source body with digest equality and anchors RISKYPHRASES, NEGATIVECONTEXTMARKERS, def classify_hit, and def build_gate. Positive fixture shape: one safe boundary-context claim surface passes because limiting language keeps doesnotauthorize_release: true. Active fixture shape: two active claim blockers are reported for bar\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start with papermodules/batch12releaseclaimlanguage_gate.json for source authority, then read this Markdown as the projection. Open standards/stdmicrocosmbatch12releaseclaimlanguagegate.json for the required witnesses, negative floor, denied authority, result record contract, validator command, and runtime bundle command. Open core/fixturemanifests/batch12releaseclaimlanguagegate.fixturemanifest.json for source-open body import count, source manifest refs, and durable result record refs. Open examples/batch12releaseclaimlanguagegate/exportedbatch12releaseclaimlanguagegatebundle/sourcemodulemanifest.json before inspecting copied source modules; result records carry refs, hashes, counts, verd\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the claim-language gate result record and sign-off JSON. The bundle command validates copied source system, source manifest digests, active-blocker and boundary-context classification, negative cases, metadata-only result records, and scope limit fields. The focused test checks pass result records, digest mismatch rejection, fixture path safety, duplicate-key and duplicate-fixture rejection, exact source body import, and card body omission. This result record path is reader-verifiable evidence only. It excludes launch, public sharing, external model access, semantic NLP truth, complete secr\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is fixture-bound launch claim-language gate evidence. Its scope stops before public launch permission, public sharing posture, external model dispatch, semantic NLP truth, complete secret detection, private-system equivalence, portability proof, market-level conclusions, investment-related actions, source editing authority, deployment maturity, formal-result correctness beyond the listed witnesses, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows a narrow pattern from advertising-substantiation and regulated-communication practice: public claims should stay within evidence actually held, and stronger language requires stronger support. This is prior art for the proof-consumer shape only. The module does not implement legal compliance, include launch operations, or decide whether public copy is fit to publish. External source result record, checked 2026-06-05: Microcosm adapts the substantiation pattern to launch and evidence language. Result record-backed classes, ordinal evidence strength, real-system flags, boundary-context exceptions, and fail-closed defaults constrain what public copy may say. The gate bloc\u2026",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch12_release_claim_language_gate.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Fixture[\"release_gate_fixture.json safe and active public copy surfaces\"] Manifest[\"source_module_manifest.json exact copied source gate body\"] Loader[\"load source module digest equality and required anchors\"] SafeRoot[\"safe fixture root _write_gate_fixture(active=false)\"] ActiveRoot[\"active fixture root _write_gate_fixture(active=true)\"] Scan[\"build_gate scan manifest files for RISKY_PHRASES\"] Classify{\"_classify_hit read each phrase in context\"} Boundary[\"boundary_or_negative_context negation marker or forbidden example => allowed\"] Active[\"active_claim_blocker affirmative line, no downgrade => status active_claim_blocked\"] Review[\"needs_review no clear marker either way => fail-closed no-go queue\"] Assert[\"main --assert-clear exit 2 when not public_copy_clean\"] Negatives[\"computed negative cases affirmative claim blocks assert-clear exits 2 private internal control leak blocks\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"scope limit no launch, public sharing, NLP truth, secret completeness, or whole-system claim\"] Fixture --> SafeRoot Fixture --> ActiveRoot Manifest --> Loader Loader --> Scan SafeRoot --> Scan ActiveRoot --> Scan Scan --> Classify Classify -->|allowed| Boundary Classify -->|blocked| Active Classify -->|ambiguous| Review Active --> Assert Review --> Assert Boundary --> Negatives Active --> Negatives Assert --> Negatives Negatives --> Result records Result records --> Ceiling",
       "source_hash": "sha256:b8792efc4879dfecf6bd03ab118f299b203a7f8fa7d84f6e22816ccf1de756ef",
       "html_url": "docs/paper-modules.html#paper-module-batch12-release-claim-language-gate-diagram-1",
       "html_anchor": "paper-module-batch12-release-claim-language-gate-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_release_claim_language_gate.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.public_reveal_walkthrough",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Public Reveal Walkthrough",
         "url": "paper-modules.html#paper-module-public-reveal-walkthrough"
        },
        {
         "id": "paper_module.proof_derived_governed_mutation_authorization",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Proof-Derived Governed Mutation Authorization",
         "url": "paper-modules.html#paper-module-proof-derived-governed-mutation-authorization"
        },
        {
         "id": "paper_module.batch8_validator_checker_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 8 Validator Checker Bundle",
         "url": "paper-modules.html#paper-module-batch8-validator-checker-capsule"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch12_release_claim_language_gate",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Release Public Wording Gate",
         "url": "components.html#component-batch12_release_claim_language_gate"
        },
        {
         "id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public launch claim language gate",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-13",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Apply the same floor to meta artifacts",
         "url": "doctrine.html#dcard-p-13"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_release_claim_language_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 17682
    },
    {
     "id": "paper_module.batch10_cold_eval_honesty_capsule",
     "title": "Set 10 Cold Eval Honesty Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch10-cold-eval-honesty-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 10 Cold Eval Honesty Bundle runs cold-eval over public fixtures without benchmark, navigation-truth, or launch-scope decision.",
     "summary": "Set 10 Cold Eval Honesty Bundle imports the real cold_eval.py source body and runs its route-quality simulator over a synthetic public workspace. It audits the all-B idea-first scorecard shape, expected-ref injection policy, private fixture refs, missing-task refusals, negative cases, and scope limits while excluding live benchmark results, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, and whole-system correctness.",
     "authority_ceiling": "Fixture-bound route-quality scorecard and copied source refs only; no live benchmark, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.",
     "abstract": "Set 10 Cold Eval Honesty Bundle runs cold-eval over public fixtures without benchmark, navigation-truth, or launch-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "Set 10 Cold Eval Honesty Bundle runs cold-eval over public fixtures without benchmark, navigation-truth, or launch-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\n`batch10_cold_eval_honesty_capsule` answers one narrow question: can the public Microcosm copy of the source `cold_eval.py` route-quality simulator run over a synthetic workspace, expose its measured scorecard shape, and refuse to promote that shape into a benchmark or navigation-truth claim?\n\nThe useful evidence is deliberately small. A green run means the copied source body executed, the all- `B.idea_first_packet` winner shape was recomputed from fixture rows, and the scope limit blocked benchmark, hosted-readiness, and launch language. It does not say idea-first routing wins in the live system.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD A[\"Public cold-eval workspace (tasks, navigation packets)\"] --> B[\"Copied cold_eval.py runner\"] B --> A1[\"Arm A: flat repo entry (README, quickstart, pyproject)\"] B --> A2[\"Arm B: idea-first packet (entry packet, atlas, index)\"] A1 --> SC[\"Score each task by declared route refs covered (refs scored, never injected)\"] A2 --> SC SC --> W[\"Winner per task, idea-first win count\"] W --> C[\"Scorecard shape audit all-B win + route asymmetry + no non-public refs\"] C --> D[\"Scope limit gate injection off, forbidden benchmark/launch claims named\"] D --> E[\"metadata-only result record and card\"]\n```\n\n###### Prior Art Grounding\n\nThis component is grounded in evaluation-transparency and benchmark-hygiene practice: scorecards should expose what was measured, what fixture assumptions were injected, and what claims the result can and cannot support. Useful anchors include:\n- [HELM](https://crfm.stanford.edu/helm/index.html), which frames model evaluation as a transparent, scenario-bound benchmark surface rather than a single global capability claim.\n- [Model Cards for Model Reporting](https://arxiv.org/abs/1810.03993), which established the pattern of pairing performance results with intended use, limitations, and caveats.\n\nMicrocosm borrows the scorecard-plus-limitations shape, then narrows it to a deterministic route-quality fixture. The all- `B.idea_first_packet` winner row is accounting evidence for this fixture only; it is not promoted into navigation truth, hosted readiness, or launch-scope decision.\n\n###### Reader Evidence Routing\n\nRead the scorecard as evidence accounting, not as a leaderboard. The fixture intentionally creates a public workspace where the idea-first packet wins. The component then checks that the expected-ref injection policy is off, that non-public refs are not present, and that forbidden claims are named in the manifest.\n\nThe honesty of that win turns on one design choice in the copied scorer. Each task lists the route refs an answer should reach, but those expected refs are only ever used to *score* coverage. They are never added to either arm's route, so neither arm is handed the answer. Arm A is scored on the refs a flat reader reaches from `README.md`, `docs/quickstart.md`, and `pyproject.toml`. Arm B is scored on the refs the navigation packets actually declare. The scoring policy is named in every row as `declared_route_refs_no_expected_ref_injection_v1`, and every row carries `expected_ref_injection_used: false`. The idea-first arm wins because the entry packets genuinely declare more of the relevant files, not because the scorer leaked the target into the route. That distinction is the difference between a measured route-quality result and a rigged one, and the scope limit gate reports `blocked` rather than `pass` if the injection flag is ever turned on.\n\nThe engine ids are:\n- `cold_eval_original_runner`: dynamically loads the copied source body and runs `run_cold_eval` in a temporary public workspace.\n- `cold_eval_scorecard_shape_audit`: verifies the all-B winner shape and records visible route-surface asymmetry without upgrading it into proof.\n- `cold_eval_claim_ceiling_gate`: checks expected-ref injection policy and forbidden benchmark/launch claims.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the route-quality scorecard result record and sign-off JSON. The bundle command validates copied source source, source manifests, metadata-only cards, expected-ref injection policy, and private-ref negative cases. The focused test covers missing tasks, flat-route wins, expected-ref injection, private fixture refs, and the no-benchmark/no-launch scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not establish live benchmark results, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the copied `cold_eval.py` source body executed over the synthetic workspace, the expected scorecard shape was recomputed, expected-ref injection was refused, non-public refs were excluded, negative fixtures were checked, metadata-only cards were emitted, and validation result records enforced the listed scope limit.\n\nThis module may not claim live benchmark results, navigation truth, hosted readiness, route-quality superiority, external model access, deployment posture, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Scope limit\n\nFixture-bound route-quality scorecard and copied source refs only; no live benchmark, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 5556,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "batch10coldevalhonestycapsule answers one narrow question: can the public Microcosm copy of the source cold_eval.py route-quality simulator run over a synthetic workspace, expose its measured scorecard shape, and refuse to promote that shape into a benchmark or navigation-truth claim? The useful evidence is deliberately small. A green run means the copied source body executed, the all-B.ideafirstpacket winner shape was recomputed from fixture rows, and the scope limit blocked benchmark, hosted-readiness, and launch language. It does not say idea-first routing wins in the live system.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that the copied cold_eval.py source body executed over the synthetic workspace, the expected scorecard shape was recomputed, expected-ref injection was refused, non-public refs were excluded, negative fixtures were checked, metadata-only cards were emitted, and validation result records enforced the listed scope limit. This module may not claim live benchmark results, navigation truth, hosted readiness, route-quality superiority, external model access, deployment posture, source-file changes, public sharing decision, launch-scope decision, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in evaluation-transparency and benchmark-hygiene practice: scorecards should expose what was measured, what fixture assumptions were injected, and what claims the result can and cannot support. Useful anchors include: HELM, which frames model evaluation as a transparent, scenario-bound benchmark surface rather than a single global capability claim. Model Cards for Model Reporting, which established the pattern of pairing performance results with intended use, limitations, and caveats. Microcosm borrows the scorecard-plus-limitations shape, then narrows it to a deterministic route-quality fixture. The all-B.ideafirstpacket winner row is accounting evidence for this\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read the scorecard as evidence accounting, not as a leaderboard. The fixture intentionally creates a public workspace where the idea-first packet wins. The component then checks that the expected-ref injection policy is off, that non-public refs are not present, and that forbidden claims are named in the manifest. The honesty of that win turns on one design choice in the copied scorer. Each task lists the route refs an answer should reach, but those expected refs are only ever used to score coverage. They are never added to either arm's route, so neither arm is handed the answer. Arm A is scored on the refs a flat reader reaches from README.md, docs/quickstart.md, and pyproject.toml. Arm B\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the route-quality scorecard result record and sign-off JSON. The bundle command validates copied source source, source manifests, metadata-only cards, expected-ref injection policy, and private-ref negative cases. The focused test covers missing tasks, flat-route wins, expected-ref injection, private fixture refs, and the no-benchmark/no-launch scope limit. This result record path is reader-verifiable evidence only. It does not establish live benchmark results, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "Fixture-bound route-quality scorecard and copied source refs only; no live benchmark, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch10_cold_eval_honesty_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Public cold-eval workspace (tasks, navigation packets)\"] --> B[\"Copied cold_eval.py runner\"] B --> A1[\"Arm A: flat repo entry (README, quickstart, pyproject)\"] B --> A2[\"Arm B: idea-first packet (entry packet, atlas, index)\"] A1 --> SC[\"Score each task by declared route refs covered (refs scored, never injected)\"] A2 --> SC SC --> W[\"Winner per task, idea-first win count\"] W --> C[\"Scorecard shape audit all-B win + route asymmetry + no non-public refs\"] C --> D[\"Scope limit gate injection off, forbidden benchmark/launch claims named\"] D --> E[\"metadata-only result record and card\"]",
       "source_hash": "sha256:5278f9079a9b8309211673fa9214cb364e564f57b571294eb553ed960af9e9c0",
       "html_url": "docs/paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule-diagram-1",
       "html_anchor": "paper-module-batch10-cold-eval-honesty-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_cold_eval_honesty_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "HELM",
       "url": "https://crfm.stanford.edu/helm/index.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Model Cards for Model Reporting",
       "url": "https://arxiv.org/abs/1810.03993",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.agent_benchmark_integrity_anti_gaming_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Benchmark Integrity Anti-Gaming Replay",
         "url": "paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay"
        },
        {
         "id": "paper_module.research_replication_rubric_artifact_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Research Replication Rubric Artifact Replay",
         "url": "paper-modules.html#paper-module-research-replication-rubric-artifact-replay"
        },
        {
         "id": "paper_module.batch8_validator_checker_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 8 Validator Checker Bundle",
         "url": "paper-modules.html#paper-module-batch8-validator-checker-capsule"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch10_cold_eval_honesty_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Cold Evaluation Honesty Bundle",
         "url": "components.html#component-batch10_cold_eval_honesty_capsule"
        },
        {
         "id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public cold eval honesty bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-13",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Apply the same floor to meta artifacts",
         "url": "doctrine.html#dcard-p-13"
        },
        {
         "id": "concept.agent_reliability_and_safety_validator_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "agent reliability and safety validators as bounded public scope limits",
         "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_cold_eval_honesty_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 6544
    },
    {
     "id": "paper_module.batch10_live_source_drift_capsule",
     "title": "Set 10 Live Source Drift Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-live-source-drift-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch10-live-source-drift-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch10-live-source-drift-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 10 Live Source Drift Bundle validates copied current internal control source bodies without route, ledger-mutation, or launch-scope decision.",
     "summary": "Set 10 Live Source Drift Bundle imports exact current internal control Python bodies after source source drift. It validates stale-versus-current digest rows, copied-source compileability without import execution, required behavioral anchors, source-manifest boundaries, negative cases, and scope limits while excluding route authority, work log or work log mutation authority, mission execution, git approval, source-file changes, launch, public sharing, external model access, and non-public runtime export.",
     "authority_ceiling": "Fixture-bound source-digest, anchor, compile, and scope limit evidence only; no route authority, Work or work log mutation, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.",
     "abstract": "Set 10 Live Source Drift Bundle validates copied current internal control source bodies without route, ledger-mutation, or launch-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "Set 10 Live Source Drift Bundle validates copied current internal control source bodies without route, ledger-mutation, or launch-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\n`batch10_live_source_drift_capsule` answers one narrow question: can Microcosm prove that selected internal control source copies match the current source source bytes, still compile without import execution, and still carry the scope limit that prevents copied code from becoming route or mutation authority?\n\nThe component imports exact current Python source bodies for four source internal control files:\n- `system/lib/standard_option_surface.py`\n- `system/lib/mission_transaction_landing_preflight.py`\n- `tools/meta/control/work_landing.py`\n- tools/meta/factory/work_ledger.py\n\nThe bundle exists because the source source moved ahead of older public source-module records. The interesting part is that it keeps the old, wrong digest visible on purpose. Each digest row carries three fingerprints that must agree before a copy passes: the copied public body, the manifest target it claims to match, and the current source source. In the same row it keeps the stale recorded digest and asserts it differs from the current one, so the proof of freshness and the evidence of the earlier drift sit side by side.\n\nThat makes the component a drift sentinel rather than a one-off check. It is built to go red when the public copies fall behind the source source again, and a red result is the signal to refresh the copies through the exact-copy source lane, not a defect in the page. Two cheap checks back the freshness claim without running anything dangerous: the copied Python is compiled but never imported, so a malformed body is caught without executing source code, and a small set of named anchors is matched in each body so a copy that compiles but has quietly lost a command or contract surface is still flagged.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD A[\"Probe manifest stale + current digests\"] --> C B[\"Copied internal control bodies and source manifest\"] --> C C[\"Digest refresh matrix copied = target = current, stale differs from current\"] --> F B --> D[\"Compile gate py_compile, no import\"] B --> E[\"Anchor matrix named command and contract surfaces present\"] D --> F E --> F F[\"Scope limit gate import is not route or mutation authority\"] --> G[\"metadata-only result record and card\"] C -. mismatch .-> H[\"Blocked: refresh copies via exact-copy source lane\"]\n```\n\n###### Prior Art Grounding\n\nThe component borrows from reproducible-build and supply-chain provenance practice: declared source inputs are fingerprinted, generated or copied artifacts are checked against those fingerprints, and result records avoid shipping unnecessary private state. Useful anchors include:\n- [Bazel hermeticity](https://bazel.build/concepts/hermeticity), especially the emphasis on source identity, declared inputs, and repeatable outputs.\n- [SLSA provenance](https://slsa.dev/spec/), which records how software artifacts relate to build inputs and supply-chain guarantees.\n\nMicrocosm applies that pattern to live source-copy drift: stale digest rows remain visible as regression fixtures, current public copies must match source digests byte-for-byte, and result records carry digest/anchor/negative-case evidence instead of private source bodies or runtime state.\n\n###### Reader Evidence Routing\n\nThe copied bodies are real system, not result record-only metadata. The evidence route is still metadata-only at result record time: result records keep digest rows, required anchors, negative-case outcomes, compile status, and scope limit evidence.\n\nThe engine ids are:\n- `live_source_drift_digest_refresh_matrix`: compares stale recorded digests, current source digests, copied target digests, and target digest status.\n- `copied_python_source_compile_gate`: compiles each copied Python target without importing or executing it.\n- `control_surface_anchor_matrix`: checks that each copied body still exposes expected command, route, landing, claim, or read-result record anchors.\n- `claim_ceiling_gate`: verifies the copied-body import excludes live route decisions, work log mutation, work log mutation, mission execution, git staging, source-file changes, launch, public sharing, external model access, or non-public runtime export.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThis component is also a drift sentinel. The fixture command writes digest-refresh, compile-gate, anchor-matrix, and scope limit result records, and it is allowed to exit blocked when copied public source no longer matches current source source. That blocked result is evidence for the exact-copy/source-refresh owner lane, not a paper-module corpus defect. Re-entry after a blocked result is to refresh the copied public source bodies and manifest digests through the source-open exact-copy lane, then rerun the fixture, bundle, and focused test.\n\nThe bundle command validates current copied source digests, source manifests, compile-without-import checks, stale-digest negative cases, metadata-only cards, and scope limit fields when the exact-copy refresh is current. The focused pytest command is therefore a green-gate after refresh: if the sentinel is blocked, that test file is expected to fail on pass-status or exact-body equality and should be reported with the same exact-copy refresh residual. When current, the focused test covers stale digest replay, compile bypass, private runtime state export, and live mutation-authority claims.\n\nThis result record path is reader-verifiable evidence only. It does not provide route authority, Work or work log mutation authority, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.\n\n###### Scope boundary\n\n###### Scope limit\n\nFixture-bound source-digest, anchor, compile, and scope limit evidence only; no route authority, Work or work log mutation, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that selected internal control source copies can be compared with current source digests, compiled without import execution, checked for required anchors, and guarded by stale-digest and scope limit negative cases when the exact-copy lane is current. A green result does not grant route authority, Work or work log mutation authority, mission execution, git approval, source-file changes, launch-scope decision, publishing-scope decision, external model access, non-public runtime export, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 6581,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "batch10livesourcedriftcapsule answers one narrow question: can Microcosm prove that selected internal control source copies match the current source source bytes, still compile without import execution, and still carry the scope limit that prevents copied code from becoming route or mutation authority? The component imports exact current Python source bodies for four source internal control files: system/lib/standardoptionsurface.py system/lib/missiontransactionlanding_preflight.py tools/meta/control/work_landing.py tools/meta/factory/work_ledger.py The bundle exists because the source source moved ahead of older public source-module records. The interesting part is that it keeps the old, w\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows from reproducible-build and supply-chain provenance practice: declared source inputs are fingerprinted, generated or copied artifacts are checked against those fingerprints, and result records avoid shipping unnecessary private state. Useful anchors include: Bazel hermeticity, especially the emphasis on source identity, declared inputs, and repeatable outputs. SLSA provenance, which records how software artifacts relate to build inputs and supply-chain guarantees. Microcosm applies that pattern to live source-copy drift: stale digest rows remain visible as regression fixtures, current public copies must match source digests byte-for-byte, and result records carry diges\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "The copied bodies are real system, not result record-only metadata. The evidence route is still metadata-only at result record time: result records keep digest rows, required anchors, negative-case outcomes, compile status, and scope limit evidence. The engine ids are: livesourcedriftdigestrefresh_matrix: compares stale recorded digests, current source digests, copied target digests, and target digest status. copiedpythonsourcecompilegate: compiles each copied Python target without importing or executing it. controlsurfaceanchor_matrix: checks that each copied body still exposes expected command, route, landing, claim, or read-result record anchors. claimceilinggate: verifies the copied-bod\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: This component is also a drift sentinel. The fixture command writes digest-refresh, compile-gate, anchor-matrix, and scope limit result records, and it is allowed to exit blocked when copied public source no longer matches current source source. That blocked result is evidence for the exact-copy/source-refresh owner lane, not a paper-module corpus defect. Re-entry after a blocked result is to refresh the copied public source bodies and manifest digests through the source-open exact-copy lane, then rerun the fixture, bundle, and focused test. The bundle command validates current copied source digests, source manifests\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "Fixture-bound source-digest, anchor, compile, and scope limit evidence only; no route authority, Work or work log mutation, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that selected internal control source copies can be compared with current source digests, compiled without import execution, checked for required anchors, and guarded by stale-digest and scope limit negative cases when the exact-copy lane is current. A green result does not grant route authority, Work or work log mutation authority, mission execution, git approval, source-file changes, launch-scope decision, public sharing decision, external model access, non-public runtime export, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch10_live_source_drift_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Probe manifest stale + current digests\"] --> C B[\"Copied internal control bodies and source manifest\"] --> C C[\"Digest refresh matrix copied = target = current, stale differs from current\"] --> F B --> D[\"Compile gate py_compile, no import\"] B --> E[\"Anchor matrix named command and contract surfaces present\"] D --> F E --> F F[\"Scope limit gate import is not route or mutation authority\"] --> G[\"metadata-only result record and card\"] C -. mismatch .-> H[\"Blocked: refresh copies via exact-copy source lane\"]",
       "source_hash": "sha256:bb9094da55129e842750bf452405b24a7645783d72f721cabace1322f290a1a2",
       "html_url": "docs/paper-modules.html#paper-module-batch10-live-source-drift-capsule-diagram-1",
       "html_anchor": "paper-module-batch10-live-source-drift-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_live_source_drift_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Bazel hermeticity",
       "url": "https://bazel.build/concepts/hermeticity",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SLSA provenance",
       "url": "https://slsa.dev/spec/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        },
        {
         "id": "paper_module.concurrency_mission_control",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Concurrency Mission Control",
         "url": "paper-modules.html#paper-module-concurrency-mission-control"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch10_live_source_drift_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Live Source Drift Bundle",
         "url": "components.html#component-batch10_live_source_drift_capsule"
        },
        {
         "id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public live source drift bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_live_source_drift_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 7670
    },
    {
     "id": "paper_module.batch7_macro_engines_capsule",
     "title": "Set 7 Source Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-macro-engines-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch7-macro-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch7-macro-engines-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 7 Source Engines Bundle imports source engine bodies and exercises trace, graph, scheduling, source-index, patch, numeric, rank, and regression-selection invariants.",
     "summary": "Set 7 Source Engines Bundle binds the accepted batch7_macro_engines_capsule component to its public source-open bundle. It checks copied trace parser, codemap layout, DAG scheduling, launch-root, source-surgeon, clean-clone, calculator, PageRank, and regression-selection witnesses, negative cases, digest boundaries, and scope limits while excluding launch-scope decision, private-system equivalence, semantic truth, investment-related actions, sandbox completeness, and selected-test sufficiency proof.",
     "authority_ceiling": "Fixture-bound public source-body import and deterministic exercise evidence only; no launch-scope decision, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, external model access, or source-file changes.",
     "abstract": "Set 7 Source Engines Bundle imports source engine bodies and exercises trace, graph, scheduling, source-index, patch, numeric, rank, and regression-selection invariants.",
     "teleology": {
      "section_id": "",
      "text": "Set 7 Source Engines Bundle imports source engine bodies and exercises trace, graph, scheduling, source-index, patch, numeric, rank, and regression-selection invariants.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### TLDR\n\n`batch7_macro_engines_capsule` imports the Set-7 source engines as source bodies and runs focused exercises around them. It is a real-system bundle: source copies, original JS/TS witnesses, deterministic Python exercises, negative cases, digest checks, and fenced claims.\n\n###### What It Makes Visible\n- `tools/agent_trace_structurer/parser.mjs` as a trace-IR/edit-claim witness with `node --test parser.test.mjs`.\n- `system/server/ui/src/lib/codemap/` as a code-map layout witness with Vitest.\n- DAG wave scheduling, source indexing, patch context validation, network blocking, robust numeric center/scale, PageRank mass preservation, and never-empty regression-test selection.\n\n###### What Each Exercise Proves\n\nEach engine has a single deterministic check with a known answer, plus a paired negative case that must keep failing. The exercises are concrete:\n- **Trace IR parser** (`agent_trace_ir_compiler`). Runs `node --test parser.test.mjs` against the copied parser. The paired negative case is a commit claim with no diff evidence, which the parser's own test rejects, so a pass means the edit-claim gate is intact rather than merely that the file copied.\n- **Code-map layout** (`codemap_orbit_layout`). Runs the Vitest suite for the layout module and, in process, places five nodes on an orbit and measures every pair distance. The pass condition requires zero circle overlaps, so the layout proves geometric non-collision, not route meaning.\n- **DAG scheduler** (`constitutional_dag_kernel`). Calls `compute_waves` on a six-node graph and checks the schedule is exactly `[[\"a\",\"f\"], [\"b\",\"c\"], [\"d\"], [\"e\"]]`. A two-node cycle must raise, and an impure config path must be flagged, so the kernel proves wave ordering and cycle rejection together.\n- **launch-root index** (`release_root_compiler`). Parses the copied module's AST and confirms the expected report-building functions exist and that a missing-reference count is reported. This is source indexing, not launch-scope decision.\n- **Source surgeon** (`source_surgeon_patch`). Applies a one-line unified diff and checks the result is exactly `a = 'B'`. A diff whose context does not match must raise, and broken Python must fail to parse, so the engine proves patch-context and syntax validation, not semantic correctness.\n- **Clean clone** (`hermetic_clean_clone`). Temporarily replaces the socket factory and confirms an outbound connection raises a network-disabled error. It proves a hermetic baseline, not complete sandboxing.\n- **Robust calculator** (`calculator_standard_actor`). Feeds `[1, 2, 3, 4, 5, 100]` to the robust centre/scale routine. The robust centre stays at `3.5` while the naive mean is dragged above `19`, so the outlier is resisted. It is a numeric primitive, not market data or investment-related actions.\n- **PageRank ranker** (`personalized_pagerank_ranker`). Ranks a four-node graph and checks the score mass sums to `1.0`; an unknown source node must return an empty map. It proves the rank invariant and missing-source refusal, not semantic understanding.\n- **Regression selection** (`regression_test_selection`). Confirms the impacted- test selector never returns an empty set: an empty selection must fall back to a non-empty bundle. It proves the never-empty contract, not that the selected tests are sufficient.\n\nWhen the input is the exported source-open bundle rather than the live fixture, the same nine engine rows are gated on the copied source manifest instead: every expected digest must match and every required anchor must be present before any row passes. The exercises stay metadata-only throughout; result records carry status, counts, digests, and refs, never the copied source or command output.\n\n###### Prior Art Grounding\n\nThe component is grounded in trace instrumentation, graph analysis, and regression selection practice: parse execution traces into structured spans, project code or route graphs into navigable layouts, preserve graph-rank invariants, and choose focused tests without claiming sufficiency. Relevant anchors include:\n- [OpenTelemetry](https://opentelemetry.io/docs/), especially traces/spans as a vendor-neutral model for representing units of work and their relationships.\n- [D3 force layouts](https://github.com/d3/d3-force), a common graph layout pattern for visualizing networks and hierarchies.\n- [NetworkX PageRank](https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.link_analysis.pagerank_alg.pagerank.html), which documents the PageRank family for graph-link analysis.\n\nMicrocosm borrows the structured-trace, graph-layout, and invariant-checking shape across its mixed Set-7 engines. The bundle remains a bundle of focused source witnesses and deterministic exercises; it is not a complete sandbox, semantic truth engine, or proof that selected tests are sufficient.\n\n###### Source Body Imports\n\nThe source-module manifest at `examples/batch7_macro_engines_capsule/exported_batch7_macro_engines_capsule_bundle/source_module_manifest.json` lists the exact copied source bodies and required anchors. Result records store digests and counts, not source bodies.\n\n###### Purpose\n\nThis module is the reader-facing instrument for the accepted `batch7_macro_engines_capsule` component. Its source authority is the JSON source record in `core/paper_module_capsules.json`; this Markdown explains the proof boundary for a cold reader and points back to the runtime component, copied source manifest, and focused tests.\n\nThe component answers one narrow question: do nine unrelated source engines, copied out of the larger system as source, still behave the way their own tests and invariants say they should? Rather than describe them in prose, the bundle runs each one. A trace-IR parser is checked by its own Node test runner; a code-map layout is checked by its Vitest suite; a dependency-graph scheduler, a robust numeric scorer, a PageRank ranker, a patch applier, a network-isolation guard, an AST source index, and a regression-test selector are each driven through a small deterministic exercise with a known correct answer.\n\nWhat is worth noting is the mix. Most validators in this set check one shape of evidence. This one deliberately binds several kinds under a single fixture and a single scope limit: an external JavaScript test process, an external TypeScript test process, in-process Python function calls, and static AST reads. The point is not that any one engine is impressive in isolation. It is that nine engines with quite different runtimes can be exercised together, each with a concrete pass condition, while every exercise stays below launch, semantic-truth, and source-file changes.\n\nThe failure mode this guards against is the comfortable assumption that copied code still works. A source body can be copied faithfully, pass a digest check, and still be broken or subtly different from the original. The bundle refuses to treat a digest match as behaviour: each engine has to produce the expected output, and each negative case has to keep failing, before the row is allowed to pass.\n\n###### Shape\n\nSource refs\n\nNine engine rows `source_open_manifest_verified` Diagram source\n\n```text\nflowchart LR input[\"Input dir\"] mode{\"Live fixture or exported bundle?\"} subgraph Live[\"Live fixture: run each engine\"] trace[\"Trace IR parser node --test\"] codemap[\"Code-map layout Vitest + orbit non-overlap\"] dag[\"DAG scheduler waves + cycle reject\"] rest[\"launch index, source surgeon, clean clone, calculator, PageRank, regression selection\"] end subgraph Bundle[\"Exported bundle: gate on manifest\"] manifest[\"Source manifest: digests match + anchors present\"] rows[\"Nine engine rows source_open_manifest_verified\"] end neg[\"Negative cases must keep failing\"] result[\"metadata-only result status, counts, digests\"] ceiling[\"scope limit no launch, no semantic truth, no source-file changes\"] input --> mode mode -->|live| trace mode -->|live| codemap mode -->|live| dag mode -->|live| rest mode -->|bundle| manifest manifest --> rows trace --> neg codemap --> neg dag --> neg rest --> neg rows --> result neg --> result result --> ceiling\n```\n\n###### Reader Evidence Routing\n\nStart from the component source when checking behavior:\n- `EXPECTED_NEGATIVE_CASES` names the rejected cases.\n- `AUTHORITY_CEILING` names the forbidden claims.\n- `_source_open_bundle_exercises` and `_evaluate` assemble the accepted public witness set.\n- `run_batch7_bundle` and `result_card` expose the reproducible command and metadata-only summary.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the Set-7 source-engine result record and sign-off JSON. The exported-bundle command validates copied trace, codemap, DAG, source-rank, and regression-selection witnesses without emitting private bodies. The focused test covers the runtime component, exported bundle shape, exact-copy source imports, negative cases, card body omission, and numeric dependencies. The corpus and projection checks prove only that the generated paper-module instance remains fresh for this bundle-backed Markdown state.\n\nThis result record path is public fixture evidence only. It does not establish semantic truth, selected-test sufficiency, sandbox completeness, private-system equivalence, launch-scope decision, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis bundle is not launch-scope decision, hosted-public authority, semantic truth, investment-related actions, a complete sandbox, or proof that selected tests are sufficient. It excludes raw operator transcripts, provider/browser state, wallet/account state, account secrets, and live market fetches.\n\n###### Scope limit\n\nThe module can support only fixture-bound public source-body import evidence and deterministic exercise result records. It cannot authorize external model access, source-file changes, launch, public sharing, investment-related actions, private-system equivalence, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 10106,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "tldr",
       "title": "TLDR",
       "level": 2,
       "excerpt": "batch7macroengines_capsule imports the Set-7 source engines as source bodies and runs focused exercises around them. It is a real-system bundle: source copies, original JS/TS witnesses, deterministic Python exercises, negative cases, digest checks, and fenced claims.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-makes-visible",
       "title": "What It Makes Visible",
       "level": 2,
       "excerpt": "tools/agenttracestructurer/parser.mjs as a trace-IR/edit-claim witness with node --test parser.test.mjs. system/server/ui/src/lib/codemap/ as a code-map layout witness with Vitest. DAG wave scheduling, source indexing, patch context validation, network blocking, robust numeric center/scale, PageRank mass preservation, and never-empty regression-test selection.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "what-each-exercise-proves",
       "title": "What Each Exercise Proves",
       "level": 2,
       "excerpt": "Each engine has a single deterministic check with a known answer, plus a paired negative case that must keep failing. The exercises are concrete: Trace IR parser (agenttraceir_compiler). Runs `node --test parser.test.mjs` against the copied parser. The paired negative case is a commit claim with no diff evidence, which the parser's own test rejects, so a pass means the edit-claim gate is intact rather than merely that the file copied. Code-map layout (codemaporbitlayout). Runs the Vitest suite for the layout module and, in process, places five nodes on an orbit and measures every pair distance. The pass condition requires zero circle overlaps, so the layout proves geometric non-collision, n\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "first-command",
       "title": "First Command",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This bundle is not launch-scope decision, hosted-public authority, semantic truth, investment-related actions, a complete sandbox, or proof that selected tests are sufficient. It excludes raw operator transcripts, provider/browser state, wallet/account state, account secrets, and live market fetches.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in trace instrumentation, graph analysis, and regression selection practice: parse execution traces into structured spans, project code or route graphs into navigable layouts, preserve graph-rank invariants, and choose focused tests without claiming sufficiency. Relevant anchors include: OpenTelemetry, especially traces/spans as a vendor-neutral model for representing units of work and their relationships. D3 force layouts, a common graph layout pattern for visualizing networks and hierarchies. NetworkX PageRank, which documents the PageRank family for graph-link analysis. Microcosm borrows the structured-trace, graph-layout, and invariant-checking shape across its\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-body-imports",
       "title": "Source Body Imports",
       "level": 2,
       "excerpt": "The source-module manifest at examples/batch7macroenginescapsule/exportedbatch7macroenginescapsulebundle/sourcemodulemanifest.json lists the exact copied source bodies and required anchors. Result records store digests and counts, not source bodies.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This module is the reader-facing instrument for the accepted batch7macroengines_capsule component. Its source authority is the JSON bundle row in core/papermodulecapsules.json; this Markdown explains the proof boundary for a cold reader and points back to the runtime component, copied source manifest, and focused tests. The component answers one narrow question: do nine unrelated source engines, copied out of the larger system as source, still behave the way their own tests and invariants say they should? Rather than describe them in prose, the bundle runs each one. A trace-IR parser is checked by its own Node test runner; a code-map layout is checked by its Vitest suite; a dependency-graph\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start from the component source when checking behavior: EXPECTEDNEGATIVECASES names the rejected cases. scope_limit names the forbidden claims. sourceopenbundleexercises and _evaluate assemble the accepted public witness set. runbatch7bundle and result_card expose the reproducible command and metadata-only summary.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the Set-7 source-engine result record and sign-off JSON. The exported-bundle command validates copied trace, codemap, DAG, source-rank, and regression-selection witnesses without emitting private bodies. The focused test covers the runtime component, exported bundle shape, exact-copy source imports, negative cases, card body omission, and numeric dependencies. The corpus and projection checks prove only that the generated paper-module instance remains fresh for this bundle-backed Markdown state. This result record path is public fixture evidence only. It does not establish semantic truth, s\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "The module can support only fixture-bound public source-body import evidence and deterministic exercise result records. It cannot authorize external model access, source-file changes, launch, public sharing, investment-related actions, private-system equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch7_macro_engines_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR input[\"Input dir\"] mode{\"Live fixture or exported bundle?\"} subgraph Live[\"Live fixture: run each engine\"] trace[\"Trace IR parser node --test\"] codemap[\"Code-map layout Vitest + orbit non-overlap\"] dag[\"DAG scheduler waves + cycle reject\"] rest[\"launch index, source surgeon, clean clone, calculator, PageRank, regression selection\"] end subgraph Bundle[\"Exported bundle: gate on manifest\"] manifest[\"Source manifest: digests match + anchors present\"] rows[\"Nine engine rows source_open_manifest_verified\"] end neg[\"Negative cases must keep failing\"] result[\"metadata-only result status, counts, digests\"] ceiling[\"scope limit no launch, no semantic truth, no source-file changes\"] input --> mode mode -->|live| trace mode -->|live| codemap mode -->|live| dag mode -->|live| rest mode -->|bundle| manifest manifest --> rows trace --> neg codemap --> neg dag --> neg rest --> neg rows --> result neg --> result result --> ceiling",
       "source_hash": "sha256:60feec778abd5e8471761fd25cb27381410f9f0b76ab7082ad764954cabd38dd",
       "html_url": "docs/paper-modules.html#paper-module-batch7-macro-engines-capsule-diagram-1",
       "html_anchor": "paper-module-batch7-macro-engines-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_macro_engines_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "OpenTelemetry",
       "url": "https://opentelemetry.io/docs/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "D3 force layouts",
       "url": "https://github.com/d3/d3-force",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "NetworkX PageRank",
       "url": "https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.link_analysis.pagerank_alg.pagerank.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.computer_use_action_trace_replay",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Computer-Use Action Trace Replay",
         "url": "paper-modules.html#paper-module-computer-use-action-trace-replay"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch7_macro_engines_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Trace, Code-Map & Scheduling Engines Bundle",
         "url": "components.html#component-batch7_macro_engines_capsule"
        },
        {
         "id": "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public source engines bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_macro_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11263
    },
    {
     "id": "paper_module.batch9_macro_engines_capsule",
     "title": "Set 9 Source Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch9-macro-engines-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch9-macro-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch9-macro-engines-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 9 Source Engines Bundle imports backend and governance source-engine bodies and exercises provenance, approval, AST, finance-news, mission graph, dependency, config, edge, WorkAtlas, host-pressure, doctrine-enrichment, worker-budget, and milestone-quality invariants.",
     "summary": "Set 9 Source Engines Bundle binds the accepted batch9_macro_engines_capsule component to its public source-open bundle. It checks thirteen copied source engines for provenance lineage, approval adjudication, Python AST indexing, finance headline clustering, mission graph compilation, dependency pin drift, config authority audit, heterogeneous edge extraction, WorkAtlas aggregation, host-pressure admission, doctrine enrichment, worker job budget gating, and milestone-relative quality accounting while excluding live lineage truth, approval authority, market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, and launch-scope decision.",
     "authority_ceiling": "Fixture-bound public source-body import and deterministic exercise evidence only; no live lineage truth, human approval authority, real market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
     "abstract": "Set 9 Source Engines Bundle imports backend and governance source-engine bodies and exercises provenance, approval, AST, finance-news, mission graph, dependency, config, edge, WorkAtlas, host-pressure, doctrine-enrichment, worker-budget, and milestone-quality invariants.",
     "teleology": {
      "section_id": "",
      "text": "Set 9 Source Engines Bundle imports backend and governance source-engine bodies and exercises provenance, approval, AST, finance-news, mission graph, dependency, config, edge, WorkAtlas, host-pressure, doctrine-enrichment, worker-budget, and milestone-quality invariants.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nCopying a file into a public bundle proves only that the bytes match. It does not establish that the imported logic still behaves the way it did in the larger system it came from. This component exists to close that gap for thirteen backend, governance, and frontend data-shaping modules. The single question it answers is: do these copied source bodies still compute what they claim to compute, when run against bounded fixtures, here in the public repository?\n\nThe unusual part is how it checks. Rather than asserting against pre-baked result files, the component loads each copied module and calls its real functions. It imports `system/lib/approval_registry.py` and runs `decide_approval` against a temporary approvals tree to confirm a pre-acquired claim is refused. It imports `system/lib/python_documentation_tree.py` and runs `build_file_entry` over written-out Python to read symbols back. It runs the copied mission-graph compiler, the dependency-pin parser, the config-authority registry validator, the host-pressure admission builder, the worker budget guard, and the milestone metric computer, each on its own fixture. The three TypeScript bodies for finance clustering, edge extraction, and WorkAtlas aggregation are parsed for their load-bearing constants and branches, then mirrored deterministically. Each exercise carries both a positive shape and a paired negative case, so the proof moves with source behaviour, not with a static result record.\n\nThe reader should treat the result as fixture-bound evidence and nothing more. A passing bundle shows that representative mechanics still match the imported bodies under positive and negative cases. It does not assert live lineage truth, approval authority, real market or news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, or launch-scope decision.\n\n###### Abstract\n\nSet 9 Source Engines Bundle is a public Microcosm paper module for a source-open, body-import-backed component. The component copies thirteen source source bodies into `examples/batch9_macro_engines_capsule/exported_batch9_macro_engines_capsule_bundle/source_modules/`, checks their digests and required anchors, then runs deterministic public exercises over fixture data. The result is a reproducible evidence bundle for backend, governance, frontend data-shaping, worker-gate, and quality-accounting mechanics without granting live system authority.\n\nThe useful claim is narrow: the copied bodies and public fixtures can show that representative mechanics still behave like the imported source bodies under bounded positive and negative cases. They do not prove live lineage truth, approval authority, market or news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, private-system equivalence, or whole-system correctness.\n\n###### Telos\n\nThis module exists to make the Set-9 import legible as technical evidence rather than as generic public copy. A cold reader should be able to answer four questions:\n- Which source bodies were copied, and how are they checked?\n- Which mechanisms are exercised, and which ones are source-body-sensitive?\n- Which result records prove only fixture truth, and which claims remain forbidden?\n- How does this component relate to the Microcosm concept/mechanism/principle lattice?\n\n###### Mechanism Map\n\nSource refs\n\n13 copied source bodies `source_module_manifest.json` run / run_batch9_bundle `batch9_macro_engines_capsule.py` Diagram source\n\n```text\nflowchart TD manifest[\"source_module_manifest.json 13 copied source bodies\"] fixtures[\"first_wave fixture input probe manifest + 13 negative cases\"] runtime[\"batch9_macro_engines_capsule.py run / run_batch9_bundle\"] digest[\"Digest + anchor check copied bytes match source, required anchors present\"] exercise[\"Re-execute imported logic _run_all_exercises\"] py[\"10 Python bodies importlib load, call real functions (lineage, approval, AST, mission graph, pin drift, config, host pressure, doctrine, worker gate, milestone)\"] ts[\"3 TS-backed bodies parse constants/branches, mirror (finance, WorkAtlas, edge extractor)\"] pos[\"Positive case expected shape\"] neg[\"Negative case e.g. self-loop pruned, preacquired claim refused, forbidden surface blocked\"] result records[\"metadata-only result records result, board, validation, sign-off; body_in_receipt false\"] ceiling[\"Scope limit fixture evidence only\"] manifest --> runtime fixtures --> runtime runtime --> digest runtime --> exercise exercise --> py exercise --> ts py --> pos py --> neg ts --> pos ts --> neg digest --> result records pos --> result records neg --> result records result records --> ceiling\n```\n\nThe runtime source is `src/microcosm_core/organs/batch9_macro_engines_capsule.py`. Its load-bearing symbols are `EXPECTED_MECHANISMS`, `EXPECTED_MODULE_IDS`, `EXPECTED_NEGATIVE_CASES`, `SOURCE_REQUIRED_ANCHORS`, `AUTHORITY_CEILING`, `run`, `run_batch9_bundle`, and `result_card`.\n\n###### Set-9 Pipeline\n\nThe Set-9 pipeline has four stages.\n1. **Source import.** `source_module_manifest.json` declares thirteen copied source bodies, each with `source_ref`, copied target path, digest equality fields, line and byte counts, material class, and required anchors. The manifest states `source_import_class: copied_non_secret_macro_body`, `body_copied_material_count: 13`, and `body_in_receipt: false`.\n1. **Fixture execution.** `run` consumes `fixtures/first_wave/batch9_macro_engines_capsule/input`, including `batch9_macro_engines_capsule_probe_manifest.json` plus thirteen negative-case files. It writes the result, board, validation result record, and optional sign-off JSON.\n1. **Exported-bundle validation.** `run_batch9_bundle` validates `examples/batch9_macro_engines_capsule/exported_batch9_macro_engines_capsule_bundle`. The bundle manifest names `exported_batch9_macro_engines_capsule_bundle` as the input mode, points at `source_module_manifest.json`, and declares thirteen negative cases.\n1. **Result record and ceiling.** The public result records may expose refs, digests, anchors, counts, verdicts, negative-case outcomes, and omission evidence. They must not inline copied source bodies or private/live payloads.\n\n###### Mechanism Set\n\nMechanism id Imported source body What the public exercise checks `lineage_temporal_provenance_chain_resolver` `system/server/lineage.py` Parent/truth lineage chain behavior and self-loop pruning. `approval_sign_off_claim_adjudicator` `system/lib/approval_registry.py` Approval decision shape and claim-conflict enforcement. `python_ast_symbol_index_doc_tree` `system/lib/python_documentation_tree.py` Python AST symbol extraction, including async/function/class coverage. `finance_news_dedup_cluster_ranker` `system/server/ui/src/lib/financePresentation.ts` Headline fingerprinting, stopword behavior, and duplicate clustering. `mission_graph_topological_compiler` `system/server/graph.py` DAG compilation, group closure, upstream dependency walk, and missing-target handling. `dependency_pin_drift_auditor` `tools/dev/check_pin_drift.py` Requirement parsing and drift/missing/unparseable classification. `config_authority_drift_audit` `system/lib/config_authority_registry.py` Config authority registry validation and mutation-allowed rejection. `heterogeneous_graph_edge_extractor` `system/server/ui/src/pages/RootNavigator.tsx` Generic edge-field map extraction and relation normalization. `work_atlas_cell_histogram_aggregator` `system/server/ui/src/components/intelligence/WorkAtlas.tsx` Cell aggregation and the unrouted-only route-reason histogram gate. `host_pressure_admission_decision_gate` `system/lib/admission_consumer.py` Admission normalization and summary-first blocking behavior. `doctrine_file_enrichment_multihop_join` `system/server/doctrine_enrichment.py` File-to-doctrine enrichment join and empty-envelope detection. `worker_job_budget_forbidden_surface_gate` `system/lib/type_a_worker_harness.py` Provider budget and forbidden-surface pre-dispatch gates. `milestone_relative_promotion_quality_accounting` `system/lib/population_lane_metrics.py` Milestone-relative promotion metrics and blocker-to-next-action classification.\n\nSeveral tests deliberately mutate copied source bodies in a temporary public bundle and refresh the manifest digest. Finance, lineage, approval, AST, mission graph, dependency, config, WorkAtlas, heterogeneous edge, doctrine, worker-gate, host-pressure, and milestone tests prove the exercise result moves with source-body behavior rather than with static result record fixtures alone. Two tamper modes are load-bearing: an unapproved copied-body edit without a manifest digest refresh fails `CROWN_JEWEL_SOURCE_DIGEST_MISMATCH`, while a body edit with a refreshed digest is only accepted when the required witnesses and semantic exercise still pass. Removing a required witness while refreshing the digest still fails `CROWN_JEWEL_SOURCE_ANCHOR_MISSING`. The fixture path also resolves through the copied source-module manifest, so a fixture-only or static result record replacement is outside the accepted proof shape.\n\n###### Copied-Body and Import Authority\n\nThe source-module manifest is the body-import authority for this paper module. It proves that the public bundle contains copied bodies and that the runtime can compare copied target digests with expected source digests and required anchors. It does not make the Markdown source authority.\n\nThe authority chain is:\n- `core/paper_module_capsules.json::paper_modules[73:paper_module.batch9_macro_engines_capsule]` is the paper-module bundle source row.\n- `paper_modules/batch9_macro_engines_capsule.json` is the governed generated instance derived from that bundle.\n- `organs/batch9_macro_engines_capsule.json` and `mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json` bind the accepted component and mechanism to the runtime, result records, and scope limit.\n- `standards/std_microcosm_batch9_macro_engines_capsule.json` defines the public standard: exactly thirteen mechanisms, exactly thirteen copied source source modules, metadata-only result records, and forbidden live-authority claims.\n\n###### Current Partial-Realness Limitations\n\nSet 9 is real system progress because it copies source bodies and verifies source-sensitive behavior in public fixtures. It is still partial-realness, not live authority.\n- The lineage exercise is a public provenance specimen, not live lineage truth.\n- The approval exercise checks adjudication mechanics, not human approval authority.\n- The finance exercise checks headline clustering over synthetic rows, not real market-level conclusions, investment-related actions, or news-truth authority.\n- The host-pressure exercise checks admission-consumer behavior over quoted fixtures, not host-state truth.\n- The WorkAtlas, worker-gate, and milestone exercises validate bounded mechanics, not live work log authority or external model access readiness.\n- The generated Markdown/JSON/site projections remain navigation and reader surfaces; source authority stays in JSON contracts, source manifests, tests, and result records.\n\n###### Failure Modes\n\nThe standard and tests protect against these failure modes:\n- Mechanism count drifts away from thirteen.\n- Source-module count drifts away from thirteen without manifest and test updates.\n- The source manifest stops declaring `copied_non_secret_macro_body`.\n- A copied source body changes without a matching manifest digest update.\n- A copied source body loses required anchors, even if the manifest digest is refreshed.\n- Runtime exercises stop checking named engine semantics and become result record-only assertions.\n- Negative-case files declare error codes that the semantic evaluator does not actually observe.\n- Result records include copied body text, raw operator transcripts, provider/browser state, account secrets, live market data, private runtime state, or source bodies.\n- Public prose expands fixture evidence into launch, public sharing, provider, source-file changes, live-system, or private-system-equivalence authority.\n\n###### Evidence Contract\n\nRun these commands from `microcosm-substrate/`:\n\nThe fixture command proves the public fixture path. The bundle command proves the exported bundle path. The focused test suite covers exact-copy source imports, source-sensitive behavior shifts, copied-body digest mismatch blocking, source-import-class perturbation, required-witness removal with a refreshed digest, semantic negative cases, bundle validation, and metadata-only command cards. The doctrine projection checks prove only that the bundle-backed generated instance remains fresh for the current corpus. Rank saturation, rerank, and projection inheritance remain downstream routing work; this paper module does not apply or claim those projection mutations.\n\n###### Reader Evidence Routing\n\nUse this order when auditing the module:\n1. Read `standards/std_microcosm_batch9_macro_engines_capsule.json` for the governing standard and scope boundaries.\n2. Read `src/microcosm_core/organs/batch9_macro_engines_capsule.py` for expected mechanisms, expected modules, required source anchors, negative-case semantics, and scope limit.\n3. Read `examples/batch9_macro_engines_capsule/exported_batch9_macro_engines_capsule_bundle/source_module_manifest.json` for copied-body authority.\n4. Run the fixture and bundle validators, then the focused tests.\n5. Treat result records as metadata-only evidence summaries, not as copied body storage or live-system proof.\n\n###### Prior Art Grounding\n\nThis bundle imports copied source engine bodies and exercises them over fixtures. It follows the characterization, or golden-master, testing tradition ( [Feathers, Working Effectively with Legacy Code](https://en.wikipedia.org/wiki/Characterization_test)), which pins existing behaviour with deterministic fixtures before trusting it. Microcosm borrows the pin-then-exercise shape; the result is fixture-bound import evidence, not lineage truth, human-approval authority, or market-level conclusions.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src python3 -m pytest tests/test_batch9_macro_engines_capsule.py -q\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThese are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Fixture-bound public source-body import and deterministic exercise evidence only; no live lineage truth, human approval authority, real market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 15206,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Copying a file into a public bundle proves only that the bytes match. It does not establish that the imported logic still behaves the way it did in the larger system it came from. This component exists to close that gap for thirteen backend, governance, and frontend data-shaping modules. The single question it answers is: do these copied source bodies still compute what they claim to compute, when run against bounded fixtures, here in the public repository? The unusual part is how it checks. Rather than asserting against pre-baked result files, the component loads each copied module and calls its real functions. It imports system/lib/approvalregistry.py and runs decideapproval against a tem\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "Set 9 Source Engines Bundle is a public Microcosm paper module for a source-open, body-import-backed component. The component copies thirteen source source bodies into examples/batch9macroenginescapsule/exportedbatch9macroenginescapsulebundle/source_modules/, checks their digests and required anchors, then runs deterministic public exercises over fixture data. The result is a reproducible evidence bundle for backend, governance, frontend data-shaping, worker-gate, and quality-accounting mechanics without granting live system authority. The useful claim is narrow: the copied bodies and public fixtures can show that representative mechanics still behave like the imported source bodies under b\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "telos",
       "title": "Telos",
       "level": 2,
       "excerpt": "This module exists to make the Set-9 import legible as technical evidence rather than as generic public copy. A cold reader should be able to answer four questions: Which source bodies were copied, and how are they checked? Which mechanisms are exercised, and which ones are source-body-sensitive? Which result records prove only fixture truth, and which claims remain forbidden? How does this component relate to the Microcosm concept/mechanism/principle lattice?",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-map",
       "title": "Mechanism Map",
       "level": 2,
       "excerpt": "The runtime source is src/microcosmcore/components/batch9macroenginescapsule.py. Its load-bearing symbols are EXPECTEDMECHANISMS, EXPECTEDMODULE_IDS, EXPECTEDNEGATIVECASES, SOURCEREQUIREDANCHORS, scope_limit, run, runbatch9bundle, and result_card.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "batch-9-pipeline",
       "title": "Set-9 Pipeline",
       "level": 2,
       "excerpt": "The Set-9 pipeline has four stages. Source import. sourcemodulemanifest.json declares thirteen copied source bodies, each with source_ref, copied target path, digest equality fields, line and byte counts, material class, and required anchors. The manifest states `sourceimportclass: copiednonsecretmacrobody, bodycopiedmaterial_count: 13`, and bodyinreceipt: false. Fixture execution. run consumes fixtures/firstwave/batch9macroenginescapsule/input, including batch9macroenginescapsuleprobe_manifest.json plus thirteen negative-case files. It writes the result, board, validation result record, and optional sign-off JSON. Exported-bundle validation. runbatch9bundle validates examples/batch9macroen\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-set",
       "title": "Mechanism Set",
       "level": 2,
       "excerpt": "Several tests deliberately mutate copied source bodies in a temporary public bundle and refresh the manifest digest. Finance, lineage, approval, AST, mission graph, dependency, config, WorkAtlas, heterogeneous edge, doctrine, worker-gate, host-pressure, and milestone tests prove the exercise result moves with source-body behavior rather than with static result record fixtures alone. Two tamper modes are load-bearing: an unapproved copied-body edit without a manifest digest refresh fails CROWNJEWELSOURCEDIGESTMISMATCH, while a body edit with a refreshed digest is only accepted when the required witnesses and semantic exercise still pass. Removing a required witness while refreshing the diges\u2026",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "copied-body-and-import-authority",
       "title": "Copied-Body and Import Authority",
       "level": 2,
       "excerpt": "The source-module manifest is the body-import authority for this paper module. It proves that the public bundle contains copied bodies and that the runtime can compare copied target digests with expected source digests and required anchors. It does not make the Markdown source authority. The authority chain is: core/papermodulecapsules.json::papermodules[73:papermodule.batch9macroengines_capsule] is the paper-module bundle source row. papermodules/batch9macroenginescapsule.json is the governed generated instance derived from that bundle. components/batch9macroengines_capsule.json and mechanisms/mechanism.batch9macroenginescapsule.validatespublicmacroengines_capsule.json bind the accepted co\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "current-partial-realness-limitations",
       "title": "Current Partial-Realness Limitations",
       "level": 2,
       "excerpt": "Set 9 is real system progress because it copies source bodies and verifies source-sensitive behavior in public fixtures. It is still partial-realness, not live authority. The lineage exercise is a public provenance specimen, not live lineage truth. The approval exercise checks adjudication mechanics, not human approval authority. The finance exercise checks headline clustering over synthetic rows, not real market-level conclusions, investment-related actions, or news-truth authority. The host-pressure exercise checks admission-consumer behavior over quoted fixtures, not host-state truth. The WorkAtlas, worker-gate, and milestone exercises validate bounded mechanics, not live work log author\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "failure-modes",
       "title": "Failure Modes",
       "level": 2,
       "excerpt": "The standard and tests protect against these failure modes: Mechanism count drifts away from thirteen. Source-module count drifts away from thirteen without manifest and test updates. The source manifest stops declaring copiednonsecretmacrobody. A copied source body changes without a matching manifest digest update. A copied source body loses required anchors, even if the manifest digest is refreshed. Runtime exercises stop checking named engine semantics and become result record-only assertions. Negative-case files declare error codes that the semantic evaluator does not actually observe. Result records include copied body text, raw operator transcripts, provider/browser state, account sec\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-contract",
       "title": "Evidence Contract",
       "level": 2,
       "excerpt": "Run these commands from microcosm-substrate/: The fixture command proves the public fixture path. The bundle command proves the exported bundle path. The focused test suite covers exact-copy source imports, source-sensitive behavior shifts, copied-body digest mismatch blocking, source-import-class perturbation, required-witness removal with a refreshed digest, semantic negative cases, bundle validation, and metadata-only command cards. The doctrine projection checks prove only that the bundle-backed generated instance remains fresh for the current corpus. Rank saturation, rerank, and projection inheritance remain downstream routing work; this paper module does not apply or claim those proje\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Use this order when auditing the module: Read standards/stdmicrocosmbatch9macroengines_capsule.json for the governing standard and scope boundaries. Read src/microcosmcore/components/batch9macroenginescapsule.py for expected mechanisms, expected modules, required source anchors, negative-case semantics, and scope limit. Read examples/batch9macroenginescapsule/exportedbatch9macroenginescapsulebundle/sourcemodulemanifest.json for copied-body authority. Run the fixture and bundle validators, then the focused tests. Treat result records as metadata-only evidence summaries, not as copied body storage or live-system proof.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page. It may not claim more than its bundle scope limit allows: Fixture-bound public source-body import and deterministic exercise evidence only; no live lineage truth, human approval authority, real market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This bundle imports copied source engine bodies and exercises them over fixtures. It follows the characterization, or golden-master, testing tradition (Feathers, Working Effectively with Legacy Code), which pins existing behaviour with deterministic fixtures before trusting it. Microcosm borrows the pin-then-exercise shape; the result is fixture-bound import evidence, not lineage truth, human-approval authority, or market-level conclusions.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: These are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch9_macro_engines_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD manifest[\"source_module_manifest.json 13 copied source bodies\"] fixtures[\"first_wave fixture input probe manifest + 13 negative cases\"] runtime[\"batch9_macro_engines_capsule.py run / run_batch9_bundle\"] digest[\"Digest + anchor check copied bytes match source, required anchors present\"] exercise[\"Re-execute imported logic _run_all_exercises\"] py[\"10 Python bodies importlib load, call real functions (lineage, approval, AST, mission graph, pin drift, config, host pressure, doctrine, worker gate, milestone)\"] ts[\"3 TS-backed bodies parse constants/branches, mirror (finance, WorkAtlas, edge extractor)\"] pos[\"Positive case expected shape\"] neg[\"Negative case e.g. self-loop pruned, preacquired claim refused, forbidden surface blocked\"] result records[\"metadata-only result records result, board, validation, sign-off; body_in_receipt false\"] ceiling[\"Scope limit fixture evidence only\"] manifest --> runtime fixtures --> runtime runtime --> digest runtime --> exercise exercise --> py exercise --> ts py --> pos py --> neg ts --> pos ts --> neg digest --> result records pos --> result records neg --> result records result records --> ceiling",
       "source_hash": "sha256:8e656d3df0255ab6ef0a084804720799b7357cd0ce6f9a9142b0ede8864c0733",
       "html_url": "docs/paper-modules.html#paper-module-batch9-macro-engines-capsule-diagram-1",
       "html_anchor": "paper-module-batch9-macro-engines-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch9_macro_engines_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Feathers, Working Effectively with Legacy Code",
       "url": "https://en.wikipedia.org/wiki/Characterization_test",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.batch7_macro_engines_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 7 Source Engines Bundle",
         "url": "paper-modules.html#paper-module-batch7-macro-engines-capsule"
        },
        {
         "id": "paper_module.work_landing_control_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Work Landing Control Spine",
         "url": "paper-modules.html#paper-module-work-landing-control-spine"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch9_macro_engines_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Backend & Governance Engines Bundle",
         "url": "components.html#component-batch9_macro_engines_capsule"
        },
        {
         "id": "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public source engines bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch9_macro_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 16776
    },
    {
     "id": "paper_module.pattern_assimilation",
     "title": "Pattern Assimilation",
     "relative_href": "docs/paper-modules.html#paper-module-pattern-assimilation",
     "read_href": "docs/paper-modules.html#paper-module-pattern-assimilation",
     "context_href": "docs/rules-and-ideas.html#paper-module-pattern-assimilation",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Pattern Assimilation validates public completion-learning metadata, owner-routed refinement result records, typed nothing-to-refine decisions, and copied body-import manifests without promoting local lessons into global doctrine.",
     "summary": "Pattern Assimilation binds the accepted pattern_assimilation_step component to the public sign-off validator, first-wave fixture, exported assimilation bundle, source-module manifest, standard row, and metadata-only result records. It checks same-lane completion decisions, owner-surface refinement evidence, stewardship and re-entry fields, duplicate result record rejection, local-lesson scope limits, source note exclusion, copied body imports, and public-relative result record paths while excluding live ledger mutation, source notes ingestion, model-output data, global doctrine changes, launch, public sharing, behavior-change proof, and private-data equivalence.",
     "authority_ceiling": "Public fixture metadata, exported assimilation bundle metadata, copied body-import digest evidence, and metadata-only result records only; no live work log or work log mutation, source note ingestion, global doctrine changes, launch or publishing-scope decision, external model access, behavior-change proof, private-data equivalence, or whole-system correctness.",
     "abstract": "Pattern Assimilation validates public completion-learning metadata, owner-routed refinement result records, typed nothing-to-refine decisions, and copied body-import manifests without promoting local lessons into global doctrine.",
     "teleology": {
      "section_id": "",
      "text": "Pattern Assimilation validates public completion-learning metadata, owner-routed refinement result records, typed nothing-to-refine decisions, and copied body-import manifests without promoting local lessons into global doctrine.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`pattern_assimilation_step` is the public completion-learning contract for landed components. It validates that every component recorded as landed in a fixture set carries exactly one same-lane completion decision, and that the decision resolves to a result record that can be inspected rather than to a phrase.\n\n###### Purpose\n\nWhen a development pass claims that local work taught the system something, that claim is usually prose: a note that the run \"improved the fixture\" or \"found nothing to refine\". Prose is easy to assert and impossible to check. This component answers a single question: did each landed component actually deposit an inspectable completion decision, or is the learning claim unbacked?\n\nThe decision is forced into one of two typed shapes. Either a concrete refinement result record that names the owner surface it changed and the artifact it touched, or a typed `nothing_to_refine` result record that proves stewardship was checked, the next-best lane was considered, and a re-entry condition was recorded. A landed component with no completion, or with a completion that points at a result record that does not exist or does not match, is rejected. So is a duplicate result record id that would let one lesson be counted twice.\n\nThe interesting constraint is the one the component refuses to relax. A local lesson may route to the owner surface that owns the affected artifact, but it may not promote itself into global doctrine. A refinement row that sets `claims_global_doctrine_authority` is blocked outright. The point is that learning has to land on a specific board with a named steward, not become a free-floating rule, which is the failure mode that turns a useful local note into unsupported general advice.\n\n###### Route Card\n- Component id: `pattern_assimilation_step`\n- JSON bundle authority: `core/paper_module_capsules.json::paper_module.pattern_assimilation`\n- Accepted-component evidence class: `semantic_validator`\n- Standard: `standards/std_microcosm_pattern_assimilation_step.json`\n- Validator authority: src/microcosm_core/validators/sign-off.py\n- Fixture manifest: `core/fixture_manifests/pattern_assimilation_step.fixture_manifest.json`\n- Fixture input: `fixtures/first_wave/pattern_assimilation_step/input`\n- Runtime bundle: `examples/pattern_assimilation_step/exported_assimilation_bundle`\n- Primary result records: `receipts/first_wave/pattern_assimilation_acceptance.json`, `receipts/first_wave/pattern_assimilation_receipt.json`, and `receipts/first_wave/pattern_assimilation_step/exported_assimilation_bundle_validation_result.json`\n- Projection posture: the JSON bundle is the paper-module source authority. This Markdown is the cold-reader explanation.\n\n###### Shape\n\nSource refs\n\nLanded component rows each names a completion result and result record ref `organ_landing_summaries.jsonl` Validator `acceptance.py` `validate_pattern_assimilation` metadata-only result records `receipts/first_wave/pattern_assimilation_*` Diagram source\n\n```text\nflowchart TD landings[\"Landed component rows organ_landing_summaries.jsonl each names a completion result and result record ref\"] refinement[\"Refinement result records owner_surface, changed artifact\"] nothing[\"Nothing-to-refine result records stewardship, next-best lane, re-entry\"] validator[\"sign-off.py validate_pattern_assimilation\"] filter[\"Pre-filter valid result records refinement: named owner, no doctrine upgrade nothing: all three fields present\"] match{\"Per landed component: exactly one completion, ref resolves to a matching row?\"} pass[\"Accepted typed, owner-routed completion learning\"] negatives[\"Negative cases recorded MISSING_PATTERN_ASSIMILATION_Completion MISSING_REFINEMENT_OWNER_SURFACE DUPLICATE_REFINEMENT_RECEIPT_ID LOCAL_LESSON_AUTHORITY_UPGRADE RAW_SEED_BODY_IN_ASSIMILATION_FIXTURE\"] result records[\"metadata-only result records result records/first_wave/pattern_assimilation_*\"] ceiling[\"Scope limit public fixture metadata, no doctrine changes\"] landings --> match refinement --> filter nothing --> filter filter --> match validator --> filter match -->|resolved| pass match -->|missing, dangling, duplicate, upgraded| negatives pass --> result records negatives --> result records result records --> ceiling\n```\n\nThe bundle is present, so the cold-reader path starts from `core/paper_module_capsules.json::paper_module.pattern_assimilation`, not from a legacy-only boundary. That bundle binds this Markdown to the accepted `pattern_assimilation_step` component, the sign-off.py validator locus, the standard, first-wave fixture manifest, exported assimilation bundle, focused tests, metadata-only result records, and generated Mermaid/Atlas navigation status.\n\nRead the diagram as the validation flow, not an authority upgrade. The validator pre-filters the refinement and nothing-to-refine result records, then walks each landed component row and checks that its declared completion resolves to a matching valid result record; unresolved, missing, duplicate, or doctrine-upgraded rows become recorded negative cases. The ceiling remains public fixture and exported-bundle metadata plus metadata-only result records, with no live ledger mutation, source-file changes, source note ingestion, private-system equivalence, global doctrine changes, launch or publishing-scope decision, behavior-change proof, or whole-system correctness.\n\n###### First Command\n\nFrom `microcosm-substrate`:\n\nUse the exported bundle validator when the question is whether the public source-open body imports still match their declared source bodies:\n\n###### What It Proves\n\nPattern assimilation is the public completion-learning contract for landed components. It validates that each landed component in the fixture set has exactly one same-lane completion decision: either a concrete refinement result record naming the owner surface and changed artifact, or a typed `nothing_to_refine` result record with stewardship checked, next-best-lane checked, and a re-entry condition.\n\nA cold agent should use this component when a pass claims that local work taught the system something. The validator makes that claim inspectable: it checks owner-surface evidence, duplicate result record ids, off-lane completions, missing completion decisions, residual lifecycle posture, and attempts to promote a local lesson into global doctrine authority without the governing lane.\n\n###### Bundle-Bound Reader Shape\n\nThe paper-module bundle binds this Markdown to two explained subjects: `pattern_assimilation_step` and `mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step`. It also carries the route-contract concept `concept.architecture_and_navigation_route_contract_bundle`.\n\nThe executable locus is src/microcosm_core/validators/sign-off.py, specifically `validate_pattern_assimilation`, `run_assimilation_bundle`, `validate_source_module_manifest`, `_write_jsonl_upsert`, `EXPECTED_NEGATIVE_CASES`, `PATTERN_ASSIMILATION_AUTHORITY_CEILING`, and `main`.\n\nIts law edges are bounded to the local completion-learning scope limit: `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-7`, `P-8`, `P-9`, `P-12`, `P-13`, `P-15`, `AX-1`, `AX-4`, `AX-5`, `AX-6`, `AX-7`, `AX-8`, `AX-11`, and `AX-12`. Its paper-module neighbors are `cold_reader_route_map`, `pattern_binding_contract`, and `voice_to_doctrine_self_improvement_loop`.\n\nIf the generated JSON instance disagrees with the bundle or validator source, the bundle and validator win; refresh the projection rather than editing it.\n\n###### Source-Backed System\n\nThis component is more than a prose rule. The exported assimilation bundle imports four bodies by manifest:\n- `macro_pattern_autonomy_process_contract_body_import` from `state/microcosm_portfolio/reconstruction/macro_pattern_autonomy_process_contract_v1.json`\n- `macro_pattern_assimilation_fixture_manifest_body_import` from `state/microcosm_portfolio/reconstruction/fixture_manifests/pattern_assimilation_step.fixture_manifest.json`\n- `pattern_assimilation_retracted_adapter_receipt_body_import` from `state/microcosm_portfolio/reconstruction/pattern_assimilation_step_real_substrate_adapter_receipt_v1.json`\n- `pattern_assimilation_acceptance_validator_source_body_import` from src/microcosm_core/validators/sign-off.py\n\nThe manifest is `examples/pattern_assimilation_step/exported_assimilation_bundle/source_module_manifest.json`. It must keep `body_in_receipt: false`, exact source and target digests, required anchors, and validation refs. The copied validator body anchors `validate_pattern_assimilation`, `run_assimilation_bundle`, and `PATTERN_ASSIMILATION_AUTHORITY_CEILING`.\n\n###### Result record Floor\n\nA passing fixture run emits:\n- `receipts/first_wave/pattern_assimilation_acceptance.json`\n- `receipts/first_wave/pattern_assimilation_receipt.json`\n- `state/microcosm_portfolio/reconstruction/macro_pattern_autonomy_process_runs_v1.jsonl`\n\nA passing exported-bundle run emits:\n- `receipts/first_wave/pattern_assimilation_step/exported_assimilation_bundle_validation_result.json`\n\nThe first-wave result records must include public-relative paths, no private root paths, no copied body text, a redacted non-public-state scan with zero blocking hits, observed negative cases, error codes, scope limit, scope boundary, and the exact result record paths. The bundle result record must show `source_module_manifest_status: pass`, `body_copied_material_count: 4`, the four body-material ids above, `body_in_receipt: false`, `body_text_in_receipt: false`, and only public replacement refs.\n\n###### Reader Evidence Routing\n\nA cold reader should inspect the evidence in this order:\n1. Open the JSON source record to confirm subject ids, dependency ids, principle and axiom refs, and code locus.\n2. Run the focused sign-off test or fixture command to prove the completion learning shape still accepts valid fixture rows and rejects the required negative cases.\n3. Run the exported bundle validator when source-module digest, anchor, copied body, or replacement posture is the question.\n4. Treat generated JSON, Mermaid, Atlas, and coverage as projection evidence only; if they drift, refresh them through the doctrine-lattice builder.\n5. Use the result record floor to check public-relative paths, metadata-only source verification, source note exclusion, and local-lesson scope limits.\n\n###### Negative Cases\n\nThe current negative-case floor is:\n- `MISSING_PATTERN_ASSIMILATION_CLOSEOUT` for a landed component without a refinement or typed no-op completion.\n- `MISSING_REFINEMENT_OWNER_SURFACE`, `MISSING_STEWARDSHIP_CHECK`, and `MISSING_REENTRY_CONDITION` for refinement result records that cannot route the lesson to an owner surface and re-entry condition.\n- `DUPLICATE_REFINEMENT_RECEIPT_ID` for duplicate refinement result records.\n- `LOCAL_LESSON_AUTHORITY_UPGRADE` for local lessons that claim global doctrine authority.\n- `RAW_SEED_BODY_IN_ASSIMILATION_FIXTURE` for source notes or private source note bodies in the public fixture.\n- `ASSIMILATION_BUNDLE_SOURCE_MODULE_INVALID` for exported source-module digest or anchor mismatch.\n\nThese are not ornamental checks. If a run stops observing them, the module can no longer support the claim that Microcosm learns from landed work without turning local notes into unsupported global doctrine.\n\n###### Prior Art Grounding\n\nPattern assimilation is grounded in software pattern-language practice: recurring engineering lessons should be named, bounded, reviewed, and connected to the context where they apply. The [Hillside patterns library](https://hillside.net/patterns/) is the direct prior-art family for treating patterns as a shared engineering vocabulary rather than one-off notes.\n\nThe result record and trace shape also borrows from provenance and observability practice. [W3C PROV](https://www.w3.org/TR/prov-overview/) informs the requirement that each refinement cite its owner surface and evidence relation, while [OpenTelemetry traces](https://opentelemetry.io/docs/concepts/signals/traces/) are a useful analogue for linking spans of work into an inspectable causal chain. Microcosm uses those inspirations for completion learning only; a local lesson still needs the owning lane before it can become broader doctrine.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, keep validation result records outside tracked first-wave paths unless the owning result record lane intends to refresh them:\n\nThe fixture and bundle result records prove same-lane completion-learning shape over the public fixtures and copied body imports only; they do not promote a local lesson to global doctrine authority. Source-copy or result record drift is an owning validator/manifest lane issue, not Markdown source authority.\n\nFocused pytest re-entry is:\n\n```text\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_pattern_assimilation_step.py -q --basetemp=/tmp/microcosm_pattern_assimilation_pytest\n```\n\nUse an isolated `/tmp` basetemp for focused pytest runs so result record scratch paths do not rewrite source-run rows inside the checkout.\n\n###### Validation Anchors\n\nFocused coverage lives in `tests/test_pattern_assimilation_step.py` and checks:\n- streamed JSONL loading and upsert behavior;\n- required negative-case observation;\n- public-relative redacted result records;\n- source result record field floors from the fixture manifest;\n- exported assimilation bundle runtime shape;\n- source-module digest mismatch rejection;\n- exported bundle result records;\n- exact copied source body imports.\n\n###### Scope boundary\n\n###### Scope limit\n\nPattern assimilation validates public completion-learning metadata plus regression fixtures. It does not ingest private lessons, read source note bodies, mutate live work log or work log state, promote global doctrine, include launch operations or public sharing, make external model access, claim private-data equivalence, prove behavior changes, or certify public runtime behavior.\n\nIts useful claim is narrower: over the supplied fixtures and copied public body imports, the component shows that completion learning has a typed, same-lane, owner-routed shape and that invalid completion claims are rejected before they become doctrine.\n\n###### Scope limit\n\nThis module may claim public completion-learning validation over the supplied fixtures and copied body-import manifests: same-lane completion decisions, owner-surface refinement evidence, typed `nothing_to_refine` result records, stewardship and re-entry fields, duplicate result record rejection, local-lesson scope limits, source note exclusion, public-relative result records, and metadata-only source-module verification.\n\nIt does not claim complete pattern coverage, private source-root equivalence, live work log or work log mutation, source note ingestion, external model access, global doctrine changes, behavior-change proof, launch or publishing-scope decision, or whole-system correctness. The generated diagram and atlas views are navigation surfaces; they do not upgrade local lessons into global doctrine.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 15037,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "When a development pass claims that local work taught the system something, that claim is usually prose: a note that the run \"improved the fixture\" or \"found nothing to refine\". Prose is easy to assert and impossible to check. This component answers a single question: did each landed component actually deposit an inspectable completion decision, or is the learning claim unbacked? The decision is forced into one of two typed shapes. Either a concrete refinement result record that names the owner surface it changed and the artifact it touched, or a typed nothingtorefine result record that proves stewardship was checked, the next-best lane was considered, and a re-entry condition was recorded.\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "route-card",
       "title": "Route Card",
       "level": 2,
       "excerpt": "Component id: patternassimilationstep JSON bundle authority: core/papermodulecapsules.json::papermodule.patternassimilation Accepted-component evidence class: semantic_validator Standard: standards/stdmicrocosmpatternassimilationstep.json Validator authority: src/microcosm_core/validators/sign-off.py Fixture manifest: core/fixturemanifests/patternassimilationstep.fixturemanifest.json Fixture input: fixtures/firstwave/patternassimilation_step/input Runtime bundle: examples/patternassimilationstep/exportedassimilationbundle Primary result records: result records/firstwave/patternassimilation_acceptance.json, result records/firstwave/patternassimilation_receipt.json, and result records/firstwa\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The bundle is present, so the cold-reader path starts from core/papermodulecapsules.json::papermodule.patternassimilation, not from a legacy-only boundary. That bundle binds this Markdown to the accepted patternassimilationstep component, the sign-off.py validator locus, the standard, first-wave fixture manifest, exported assimilation bundle, focused tests, metadata-only result records, and generated Mermaid/Atlas navigation status. Read the diagram as the validation flow, not an authority upgrade. The validator pre-filters the refinement and nothing-to-refine result records, then walks each landed component row and checks that its declared completion resolves to a matching valid result rec\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "first-command",
       "title": "First Command",
       "level": 2,
       "excerpt": "From microcosm-substrate: Use the exported bundle validator when the question is whether the public source-open body imports still match their declared source bodies:",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "From microcosm-substrate, keep validation result records outside tracked first-wave paths unless the owning result record lane intends to refresh them: The fixture and bundle result records prove same-lane completion-learning shape over the public fixtures and copied body imports only; they do not promote a local lesson to global doctrine authority. Source-copy or result record drift is an owning validator/manifest lane issue, not Markdown source authority. Focused pytest re-entry is: Use an isolated /tmp basetemp for focused pytest runs so result record scratch paths do not rewrite source-run rows inside the checkout.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-proves",
       "title": "What It Proves",
       "level": 2,
       "excerpt": "Pattern assimilation is the public completion-learning contract for landed components. It validates that each landed component in the fixture set has exactly one same-lane completion decision: either a concrete refinement result record naming the owner surface and changed artifact, or a typed nothingtorefine result record with stewardship checked, next-best-lane checked, and a re-entry condition. A cold agent should use this component when a pass claims that local work taught the system something. The validator makes that claim inspectable: it checks owner-surface evidence, duplicate result record ids, off-lane completions, missing completion decisions, residual lifecycle posture, and attem\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "capsule-bound-reader-shape",
       "title": "Bundle-Bound Reader Shape",
       "level": 2,
       "excerpt": "The paper-module bundle binds this Markdown to two explained subjects: patternassimilationstep and mechanism.patternassimilationstep.validatespublicpatternassimilationstep. It also carries the route-contract concept concept.architectureandnavigationroutecontract_bundle. The executable locus is src/microcosm_core/validators/sign-off.py, specifically validatepatternassimilation, runassimilationbundle, validatesourcemodulemanifest, writejsonlupsert, EXPECTEDNEGATIVECASES, PATTERNASSIMILATIONAUTHORITY_CEILING, and main. Its law edges are bounded to the local completion-learning scope limit: P-1, P-2, P-3, P-5, P-6, P-7, P-8, P-9, P-12, P-13, P-15, AX-1, AX-4, AX-5, AX-6, AX-7, AX-8, AX-11, and\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-backed-substrate",
       "title": "Source-Backed System",
       "level": 2,
       "excerpt": "This component is more than a prose rule. The exported assimilation bundle imports four bodies by manifest: macropatternautonomyprocesscontractbodyimport from state/microcosmportfolio/reconstruction/macropatternautonomyprocesscontractv1.json macropatternassimilationfixturemanifestbodyimport from state/microcosmportfolio/reconstruction/fixturemanifests/patternassimilationstep.fixture_manifest.json patternassimilationretractedadapterreceiptbodyimport from state/microcosmportfolio/reconstruction/patternassimilationsteprealsubstrateadapterreceiptv1.json patternassimilationacceptancevalidatorsourcebodyimport from microcosm-substrate/src/microcosm_core/validators/sign-off.py The manifest is examp\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "receipt-floor",
       "title": "Result record Floor",
       "level": 2,
       "excerpt": "A passing fixture run emits: result records/firstwave/patternassimilation_acceptance.json result records/firstwave/patternassimilation_receipt.json state/microcosmportfolio/reconstruction/macropatternautonomyprocessrunsv1.jsonl A passing exported-bundle run emits: result records/firstwave/patternassimilationstep/exportedassimilationbundlevalidation_result.json The first-wave result records must include public-relative paths, no private root paths, no copied body text, a redacted non-public-state scan with zero blocking hits, observed negative cases, error codes, scope limit, scope boundary, and the exact result record paths. The bundle result record must show sourcemodulemanifeststatus: pas\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "A cold reader should inspect the evidence in this order: Open the JSON source record to confirm subject ids, dependency ids, principle and axiom refs, and code locus. Run the focused sign-off test or fixture command to prove the completion learning shape still accepts valid fixture rows and rejects the required negative cases. Run the exported bundle validator when source-module digest, anchor, copied body, or replacement posture is the question. Treat generated JSON, Mermaid, Atlas, and coverage as projection evidence only; if they drift, refresh them through the doctrine-lattice builder. Use the result record floor to check public-relative paths, metadata-only source verification, source\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "negative-cases",
       "title": "Negative Cases",
       "level": 2,
       "excerpt": "The current negative-case floor is: MISSINGPATTERNASSIMILATION_Completion for a landed component without a refinement or typed no-op completion. MISSINGREFINEMENTOWNERSURFACE, MISSINGSTEWARDSHIP_CHECK, and MISSINGREENTRYCONDITION for refinement result records that cannot route the lesson to an owner surface and re-entry condition. DUPLICATEREFINEMENTRECEIPT_ID for duplicate refinement result records. LOCALLESSONAUTHORITY_UPGRADE for local lessons that claim global doctrine authority. RAWSEEDBODYINASSIMILATION_FIXTURE for source notes or private source note bodies in the public fixture. ASSIMILATIONBUNDLESOURCEMODULEINVALID for exported source-module digest or anchor mismatch. These are not\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "Pattern assimilation validates public completion-learning metadata plus regression fixtures. It does not ingest private lessons, read source note bodies, mutate live work log or work log state, promote global doctrine, include launch operations or public sharing, make external model access, claim private-data equivalence, prove behavior changes, or certify public runtime behavior. Its useful claim is narrower: over the supplied fixtures and copied public body imports, the component shows that completion learning has a typed, same-lane, owner-routed shape and that invalid completion claims are rejected before they become doctrine.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public completion-learning validation over the supplied fixtures and copied body-import manifests: same-lane completion decisions, owner-surface refinement evidence, typed nothingtorefine result records, stewardship and re-entry fields, duplicate result record rejection, local-lesson scope limits, source note exclusion, public-relative result records, and metadata-only source-module verification. It does not claim complete pattern coverage, private source-root equivalence, live work log or work log mutation, source note ingestion, external model access, global doctrine changes, behavior-change proof, launch or public sharing authority, or whole-system correctness. The\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-anchors",
       "title": "Validation Anchors",
       "level": 2,
       "excerpt": "Focused coverage lives in tests/testpatternassimilation_step.py and checks: streamed JSONL loading and upsert behavior; required negative-case observation; public-relative redacted result records; source result record field floors from the fixture manifest; exported assimilation bundle runtime shape; source-module digest mismatch rejection; exported bundle result records; exact copied source body imports.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "Pattern assimilation is grounded in software pattern-language practice: recurring engineering lessons should be named, bounded, reviewed, and connected to the context where they apply. The Hillside patterns library is the direct prior-art family for treating patterns as a shared engineering vocabulary rather than one-off notes. The result record and trace shape also borrows from provenance and observability practice. W3C PROV informs the requirement that each refinement cite its owner surface and evidence relation, while OpenTelemetry traces are a useful analogue for linking spans of work into an inspectable causal chain. Microcosm uses those inspirations for completion learning only; a loc\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.pattern_assimilation.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD landings[\"Landed component rows organ_landing_summaries.jsonl each names a completion result and result record ref\"] refinement[\"Refinement result records owner_surface, changed artifact\"] nothing[\"Nothing-to-refine result records stewardship, next-best lane, re-entry\"] validator[\"sign-off.py validate_pattern_assimilation\"] filter[\"Pre-filter valid result records refinement: named owner, no doctrine upgrade nothing: all three fields present\"] match{\"Per landed component: exactly one completion, ref resolves to a matching row?\"} pass[\"Accepted typed, owner-routed completion learning\"] negatives[\"Negative cases recorded MISSING_PATTERN_ASSIMILATION_Completion MISSING_REFINEMENT_OWNER_SURFACE DUPLICATE_REFINEMENT_RECEIPT_ID LOCAL_LESSON_AUTHORITY_UPGRADE RAW_SEED_BODY_IN_ASSIMILATION_FIXTURE\"] result records[\"metadata-only result records result records/first_wave/pattern_assimilation_*\"] ceiling[\"Scope limit public fixture metadata, no doctrine changes\"] landings --> match refinement --> filter nothing --> filter filter --> match validator --> filter match -->|resolved| pass match -->|missing, dangling, duplicate, upgraded| negatives pass --> result records negatives --> result records result records --> ceiling",
       "source_hash": "sha256:43220412a5cfccc5dbbbcff3642b09465b5ef19affb488a9c8c810cad82f4608",
       "html_url": "docs/paper-modules.html#paper-module-pattern-assimilation-diagram-1",
       "html_anchor": "paper-module-pattern-assimilation-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_assimilation.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Hillside patterns library",
       "url": "https://hillside.net/patterns/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "OpenTelemetry traces",
       "url": "https://opentelemetry.io/docs/concepts/signals/traces/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 8,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        },
        {
         "id": "paper_module.pattern_binding_contract",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Pattern Binding Contract",
         "url": "paper-modules.html#paper-module-pattern-binding-contract"
        },
        {
         "id": "paper_module.voice_to_doctrine_self_improvement_loop",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Voice to Doctrine Self-Improvement Loop",
         "url": "paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "pattern_assimilation_step",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Pattern Assimilation Step",
         "url": "components.html#component-pattern_assimilation_step"
        },
        {
         "id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public pattern assimilation step",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 12,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-7",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Track known unknowns without claiming the unknown is mapped",
         "url": "doctrine.html#dcard-p-7"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-13",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Apply the same floor to meta artifacts",
         "url": "doctrine.html#dcard-p-13"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_assimilation.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 16553
    },
    {
     "id": "paper_module.batch10_governance_compilers_capsule",
     "title": "Set 10 Governance And Compilers Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-governance-compilers-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch10-governance-compilers-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch10-governance-compilers-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 10 Governance And Compilers Bundle imports governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source bodies as public source-open evidence without granting live ledger, public sharing, launch, market, or source-file changes.",
     "summary": "Set 10 Governance And Compilers Bundle binds the accepted batch10_governance_compilers_capsule component to a refreshed source-open bundle. It exercises governed-mutation intent, observe/apply compilation, public-proof review, launch blocker triage, public sharing path contracts, result record reuse, no-lookahead horizons, session-wave execution, claim-conflict wait tax, role-aware DAG blocking, frontend table shaping, reference grouping, recent-change coalescing, and the deferred Set-9 lane-width repair while preserving copied source digests, negative cases, and scope limits.",
     "authority_ceiling": "Fixture-bound public source-body import, source-faithful public refactor evidence, deterministic exercise evidence, and metadata-only result records only; no live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, market advice, private-system equivalence, neutral benchmark claim, or whole-system correctness.",
     "abstract": "Set 10 Governance And Compilers Bundle imports governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source bodies as public source-open evidence without granting live ledger, public sharing, launch, market, or source-file changes.",
     "teleology": {
      "section_id": "",
      "text": "Set 10 Governance And Compilers Bundle imports governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source bodies as public source-open evidence without granting live ledger, public sharing, launch, market, or source-file changes.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nThis bundle answers one question: when the wider system claims that a governance gate, a compiler, or a launch check behaves correctly, can a cold reader confirm that claim from copied source and a re-run, rather than taking the claim on trust? It collects fourteen mechanisms that already exist in the main system, copies their source bodies into the public bundle, and re-runs a small, source-faithful port of each one against controlled inputs.\n\nThe mechanisms span the work they were drawn from: a mutation gate that reads the latest user message and blocks file writes when the intent is diagnostic; an observe/apply compiler that turns an artifact into an apply plan and refuses malformed input; a reviewer gauntlet that checks a public proof bundle from several reader personas; launch-blocker triage; a public sharing path-contract check; result record-reuse staleness; a no-lookahead finance horizon; a session dependency wave; claim-conflict detection; role-aware blocking in a task graph; and three frontend helpers for table shaping, reference grouping, and recent-change coalescing.\n\nWhat is unusual is the stance towards its own fixtures. The negative-case files on disk hold only a label and an expected error code. The bundle does not treat that error code as proof of anything. For each negative case it recomputes the outcome itself, in code, and compares the computed result against the expectation. A fixture that merely declares the right error code, without the ported logic actually producing it, is flagged rather than passed. The point is to stop a test from grading itself green by assertion.\n\n###### Route Card\n- Component id: `batch10_governance_compilers_capsule`\n- JSON bundle authority: `core/paper_module_capsules.json::paper_module.batch10_governance_compilers_capsule`\n- Accepted-component evidence class: `verified_macro_body_import`\n- Runtime source: `src/microcosm_core/organs/batch10_governance_compilers_capsule.py`\n- Fixture input: `fixtures/first_wave/batch10_governance_compilers_capsule/input`\n- Runtime bundle: `examples/batch10_governance_compilers_capsule/exported_batch10_governance_compilers_capsule_bundle`\n- Exact-copy authority: the bundle `source_module_manifest.json` plus copied source modules; refresh through `macro_projection_import_protocol`, not by hand.\n\nThis Microcosm component imports and exercises Set-10 source system for governed mutation, observe/apply compilation, public-proof review, launch blocker triage, public sharing path contracts, result record reuse, no-lookahead horizons, session-wave execution, claim conflict wait tax, role-aware DAG blocking, frontend data shaping, reference grouping, and recent-change coalescing.\n\nThe bundle carries exact source source snapshots where safe. `publication_manifest_selector_contract_verifier` is represented as a source-faithful public refactor because the source source contains a private home-path example. `weighted_lane_width_apportionment_solver` is recorded as a binding repair deferred to the Set-9 RootNavigator body, not as a fresh Set-10 import.\n\nIntegrity hardening: negative-case fixture files are labels and stable-code rows only. The result record's `exercise.integrity_matrix` is the verdict surface: each Set-10 mechanism records source relation, positive computed output, negative input shape, negative computed output, scope limit, and whether the result was computed by the bundle evaluator. A fixture-supplied `error_codes` row is never enough to prove refusal behavior.\n\n###### Shape\n\nThe source row is `core/paper_module_capsules.json::paper_modules[75:paper_module.batch10_governance_compilers_capsule]`; the generated instance is `paper_modules/batch10_governance_compilers_capsule.json`; and the runtime source locus is `src/microcosm_core/organs/batch10_governance_compilers_capsule.py`. The specific standard is `standards/std_microcosm_batch10_governance_compilers_capsule.json`, with Microcosm-wide coverage and entry boundaries governed by `std_microcosm`.\n\nSource refs\n\nJSON bundle source row `core/paper_module_capsules.json` `paper_module.batch10_governance_compilers_capsule` Generated JSON instance `paper_modules/batch10_governance_compilers_capsule.json` `paper_modules/batch10_governance_compilers_capsule.md` Standards std_microcosm `std_microcosm_batch10_governance_compilers_capsule` Runtime/source loci exercise 14 mechanism ports resolve source evidence per mechanism recompute each negative case `batch10_governance_compilers_capsule.py` `flag fixture_verdict_echo_risk` Fixtures and source bundle fixtures/first_wave/.../input (labels + expected codes) exported bundle: 13 copied source modules `source_module_manifest.json` Tests and result records `tests/test_batch10_governance_compilers_capsule.py` `receipts/runtime_shell/demo_project/organs/batch10_governance_compilers_capsule` Diagram source\n\n```text\nflowchart LR Bundle[\"JSON bundle source row core/paper_module_capsules.json paper_module.batch10_governance_compilers_capsule\"] Instance[\"Generated JSON instance paper_modules/batch10_governance_compilers_capsule.json\"] Markdown[\"Markdown reader projection paper_modules/batch10_governance_compilers_capsule.md\"] Standard[\"Standards std_microcosm_batch10_governance_compilers_capsule std_microcosm\"] Runtime[\"Runtime/source loci batch10_governance_compilers_capsule.py exercise 14 mechanism ports resolve source evidence per mechanism recompute each negative case flag fixture_verdict_echo_risk\"] Fixtures[\"Fixtures and source bundle fixtures/first_wave/.../input (labels + expected codes) exported bundle: 13 copied source modules source_module_manifest.json\"] Tests[\"Tests and result records tests/test_batch10_governance_compilers_capsule.py result records/runtime_shell/demo_project/components/batch10_governance_compilers_capsule\"] Projections[\"Generated navigation projections Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] Ceiling[\"Scope limit fixture-bound public source-open evidence only no live ledger truth, source-file changes, public sharing, launch, provider, private-system, benchmark, or market authority\"] Bundle -->|seeds| Instance Bundle -->|bounds prose| Markdown Bundle -->|names laws and source authority| Standard Bundle -->|cites code locus| Runtime Runtime -->|computes integrity matrix and result records| Tests Fixtures -->|public inputs, exact copies, declared refactor| Runtime Fixtures -->|manifest and source bundle validate| Tests Instance -->|derives edges| Projections Projections -->|navigation only| Markdown Tests -->|result record evidence remains below| Ceiling Standard -->|enforces public/private and launch boundary| Ceiling Markdown -->|must not outrank| Bundle\n```\n\nThe bundle makes the module actual by binding five reader questions to typed authority surfaces:\n- What is the source of record? The source record and generated JSON instance, not this Markdown file and not generated Mermaid or Atlas output.\n- What is being exercised? The accepted `batch10_governance_compilers_capsule` component, the `mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule` mechanism, and the `concept.import_projection_and_drift_control_bundle` concept edge named by the bundle.\n- Which runtime and source artifacts matter? The component module computes the integrity matrix, negative-case verdicts, source evidence, fixture run, bundle validation, result card, and `AUTHORITY_CEILING`; the exported bundle carries `source_module_manifest.json`, copied source modules, and the declared public refactor for the private-path-bearing public sharing manifest selector body.\n- Which result records and tests are binding? The focused test file verifies the fixture run, bundle validation, digest mismatch rejection, private-body omission, negative-case semantics, source-evidence classifications, source helper parity, and reviewer-gauntlet behavior; the result record directory under `receipts/runtime_shell/demo_project/organs/batch10_governance_compilers_capsule` holds the runtime shell validation result, board, and validation result record.\n- What is the honest ceiling? The module can claim fixture-bound public source-open import/refactor evidence, deterministic exercise evidence, integrity-matrix verdicts, metadata-only result records, and validation result records. It cannot claim live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, private root equivalence, neutral benchmark evidence, market advice, deployment posture, or whole-system correctness.\n\n###### Bundle-Bound Reader Shape\n\nThe JSON bundle binds this paper module to one accepted subject: the `batch10_governance_compilers_capsule` component. The executable proof locus is `src/microcosm_core/organs/batch10_governance_compilers_capsule.py`, especially `_build_integrity_matrix`, `_source_evidence`, `_evaluate`, `run`, `run_batch10_governance_compilers_bundle`, `result_card`, `EXPECTED_MECHANISMS`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n\nThe bundle keeps the mechanism and concept layer intentionally narrow: it names the resolving governance/compiler mechanism subject and the `concept.import_projection_and_drift_control_bundle` concept, while additional concept or mechanism edges stay residual until resolving Microcosm rows exist. Its law edges are bounded to content-addressed reuse, provenance, freshness, and projection-below-source rules: `P-2`, `P-5`, `P-9`, `P-15`, `AX-4`, `AX-8`, `AX-10`, and `AX-11`. Its sibling paper-module dependencies are `macro_projection_import_protocol`, `batch10_live_source_drift_capsule`, and `batch9_macro_engines_capsule`.\n\nIf a projection disagrees with the bundle or refreshed source-open bundle, refresh the projection; do not edit generated output by hand.\n\n###### How it works\n\nThe run takes a public input directory, validates the source-module manifest, and exercises each of the fourteen mechanisms against inputs the evaluator constructs itself. `_build_integrity_matrix` then writes one row per mechanism. Each row records the source evidence for that mechanism, the positive computed output, the attached negative cases with their computed outputs, the scope limit, and a `current_action` of keep, harden, or block.\n\nSource evidence is resolved per mechanism by `_source_evidence`. A mechanism's named source reference is looked up in the manifest. If the body was copied exactly, the row carries the copy's digest status and anchor-match count. If the body could not be copied verbatim, the row instead names a declared source-faithful public refactor and records the original source digest. Two mechanisms are honest about not being plain copies. `publication_manifest_selector_contract_verifier` is a public refactor, because the source source carried a private home-path example that cannot ship. `weighted_lane_width_apportionment_binding_repair` is recorded as an under-bound repair deferred to the Set-9 RootNavigator body, so it is held as a block rather than presented as a fresh Set-10 import.\n\nThe negative cases are handled the same way. For each case, `_compute_negative_case_probe` runs the ported logic over the case's declared input and reads the result at a named path. For example, the mutation case feeds a diagnostic message and confirms `prohibit_file_writes` is true; the finance case feeds an unparseable horizon and confirms it is rejected; the public sharing case feeds a non-public paths against a hard-exclude rule and confirms it is caught. A row counts as proven only when the computed value matches the expectation. If any negative case lacks computed evidence, the summary raises `fixture_verdict_echo_risk`, and the run is blocked. The bundle also requires exactly thirteen copied source modules, so a thinned bundle fails rather than passes quietly.\n\n###### Prior Art Grounding\n\nThe component is grounded in policy-as-code, admission-control, and supply-chain assurance patterns: compile rules into deterministic checks, reject unsupported actions before they mutate state, and preserve provenance for the decision. Relevant anchors include:\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), which decouples policy decisions from enforcement and evaluates structured input against machine-readable rules.\n- Kubernetes [validating admission policies](https://kubernetes.io/docs/concepts/policy), which can block, warn, or audit non-compliant API requests before admission.\n- [SLSA](https://slsa.dev/spec/) and [OpenSSF Scorecard](https://openssf.org/scorecard/), which represent the broader software-supply-chain pattern of typed assurance levels, checks, and provenance.\n\nMicrocosm borrows the compiler/gate shape for governed mutation, public sharing path contracts, blocker triage, result record reuse, and claim-conflict accounting. The bundle remains fixture-bound evidence over copied or refactored source system; it is not live work log truth, source-file changes, publishing-scope decision, or investment-related actions.\n\n###### Reader Evidence Routing\n\nA cold reader should inspect the evidence in this order:\n1. Open the JSON source record to confirm source authority, subject ids, dependency ids, principle and axiom refs, code locus, Mermaid status, Atlas status, and the absence of unresolved selective relations.\n2. Run the focused component test to prove the public fixture still computes the integrity matrix and observes the required negative cases.\n3. Run the exported bundle validator when copied source digests, declared public refactors, metadata-only result records, or source-evidence rows are the question.\n4. Treat generated JSON, Mermaid, Atlas, and coverage as projection evidence only; if they drift, refresh them through the doctrine-lattice builder.\n5. Use the result record floor to verify source relations, positive and negative computed outputs, scope limits, and metadata-only result record payloads.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the governance/compiler integrity-matrix result record and sign-off JSON. The bundle command validates copied or source-faithful source system, source evidence, positive and negative exercise rows, metadata-only result records, and scope limit fields. The focused test verifies the mechanism matrix, negative floor, bundle validation, and scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not establish live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, neutral benchmark evidence, private-system equivalence, or investment-related actions.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the copied or declared governance/compiler source system produced source-evidence rows, computed positive and negative exercise rows, integrity-matrix verdicts, metadata-only result records, and validation result records with explicit scope limits.\n\nThis module may not claim live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, neutral benchmark evidence, private-system equivalence, investment-related actions, deployment posture, or whole-system correctness.\n\n###### Scope limit\n\nThis is not live work log truth, not live work log truth, not source-file changes, not public sharing or launch-scope decision, not external model access, not neutral benchmark evidence, not private-system equivalence, and not investment-related actions.\n\nThe useful claim is narrower: over the public fixtures and refreshed source-open bundle, the component shows that the Set-10 governance/compiler mechanisms have copied or declared source evidence, computed positive and negative exercise rows, and metadata-only result records with explicit scope limits.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 16014,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This bundle answers one question: when the wider system claims that a governance gate, a compiler, or a launch check behaves correctly, can a cold reader confirm that claim from copied source and a re-run, rather than taking the claim on trust? It collects fourteen mechanisms that already exist in the main system, copies their source bodies into the public bundle, and re-runs a small, source-faithful port of each one against controlled inputs. The mechanisms span the work they were drawn from: a mutation gate that reads the latest user message and blocks file writes when the intent is diagnostic; an observe/apply compiler that turns an artifact into an apply plan and refuses malformed input\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "route-card",
       "title": "Route Card",
       "level": 2,
       "excerpt": "Component id: batch10governancecompilers_capsule JSON bundle authority: core/papermodulecapsules.json::papermodule.batch10governancecompilerscapsule Accepted-component evidence class: verifiedmacrobody_import Runtime source: src/microcosmcore/components/batch10governancecompilerscapsule.py Fixture input: fixtures/firstwave/batch10governancecompilerscapsule/input Runtime bundle: examples/batch10governancecompilerscapsule/exportedbatch10governancecompilerscapsulebundle Exact-copy authority: the bundle sourcemodulemanifest.json plus copied source modules; refresh through macroprojectionimport_protocol, not by hand. This Microcosm component imports and exercises Set-10 source system for governe\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "authority, not the authority itself. The source row is core/papermodulecapsules.json::papermodules[75:papermodule.batch10governancecompilers_capsule]; the generated instance is papermodules/batch10governancecompilerscapsule.json; and the runtime source locus is src/microcosmcore/components/batch10governancecompilerscapsule.py. The specific standard is standards/stdmicrocosmbatch10governancecompilers_capsule.json, with Microcosm-wide coverage and entry boundaries governed by std_microcosm. The bundle makes the module actual by binding five reader questions to typed authority surfaces: What is the source of record? The source record and generated JSON instance, not this Markdown file and not\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "capsule-bound-reader-shape",
       "title": "Bundle-Bound Reader Shape",
       "level": 2,
       "excerpt": "The JSON bundle binds this paper module to one accepted subject: the batch10governancecompilers_capsule component. The executable proof locus is src/microcosmcore/components/batch10governancecompilerscapsule.py, especially buildintegritymatrix, sourceevidence, evaluate, run, runbatch10governancecompilersbundle, result_card, EXPECTEDMECHANISMS, EXPECTEDNEGATIVECASES, and AUTHORITYCEILING. The bundle keeps the mechanism and concept layer intentionally narrow: it names the resolving governance/compiler mechanism subject and the concept.importprojectionanddriftcontrol_bundle concept, while additional concept or mechanism edges stay residual until resolving Microcosm rows exist. Its law edges ar\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "The run takes a public input directory, validates the source-module manifest, and exercises each of the fourteen mechanisms against inputs the evaluator constructs itself. buildintegrity_matrix then writes one row per mechanism. Each row records the source evidence for that mechanism, the positive computed output, the attached negative cases with their computed outputs, the scope limit, and a current_action of keep, harden, or block. Source evidence is resolved per mechanism by sourceevidence. A mechanism's named source reference is looked up in the manifest. If the body was copied exactly, the row carries the copy's digest status and anchor-match count. If the body could not be copied verb\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim public fixture evidence that the copied or declared governance/compiler source system produced source-evidence rows, computed positive and negative exercise rows, integrity-matrix verdicts, metadata-only result records, and validation result records with explicit scope limits. This module may not claim live work log truth, live work log truth, source-file changes, public sharing decision, launch-scope decision, external model access, neutral benchmark evidence, private-system equivalence, investment-related actions, deployment posture, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is not live work log truth, not live work log truth, not source-file changes, not public sharing or launch-scope decision, not external model access, not neutral benchmark evidence, not private-system equivalence, and not investment-related actions. The useful claim is narrower: over the public fixtures and refreshed source-open bundle, the component shows that the Set-10 governance/compiler mechanisms have copied or declared source evidence, computed positive and negative exercise rows, and metadata-only result records with explicit scope limits.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in policy-as-code, admission-control, and supply-chain assurance patterns: compile rules into deterministic checks, reject unsupported actions before they mutate state, and preserve provenance for the decision. Relevant anchors include: Open Policy Agent, which decouples policy decisions from enforcement and evaluates structured input against machine-readable rules. Kubernetes validating admission policies, which can block, warn, or audit non-compliant API requests before admission. SLSA and OpenSSF Scorecard, which represent the broader software-supply-chain pattern of typed assurance levels, checks, and provenance. Microcosm borrows the compiler/gate shape for go\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "A cold reader should inspect the evidence in this order: Open the JSON source record to confirm source authority, subject ids, dependency ids, principle and axiom refs, code locus, Mermaid status, Atlas status, and the absence of unresolved selective relations. Run the focused component test to prove the public fixture still computes the integrity matrix and observes the required negative cases. Run the exported bundle validator when copied source digests, declared public refactors, metadata-only result records, or source-evidence rows are the question. Treat generated JSON, Mermaid, Atlas, and coverage as projection evidence only; if they drift, refresh them through the doctrine-lattice bu\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the governance/compiler integrity-matrix result record and sign-off JSON. The bundle command validates copied or source-faithful source system, source evidence, positive and negative exercise rows, metadata-only result records, and scope limit fields. The focused test verifies the mechanism matrix, negative floor, bundle validation, and scope limit. This result record path is reader-verifiable evidence only. It does not establish live work log truth, live work log truth, source-file changes, public sharing decision, launch-scope decision, external model access, neutral benchmark evidence, p\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch10_governance_compilers_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Bundle[\"JSON bundle source row core/paper_module_capsules.json paper_module.batch10_governance_compilers_capsule\"] Instance[\"Generated JSON instance paper_modules/batch10_governance_compilers_capsule.json\"] Markdown[\"Markdown reader projection paper_modules/batch10_governance_compilers_capsule.md\"] Standard[\"Standards std_microcosm_batch10_governance_compilers_capsule std_microcosm\"] Runtime[\"Runtime/source loci batch10_governance_compilers_capsule.py exercise 14 mechanism ports resolve source evidence per mechanism recompute each negative case flag fixture_verdict_echo_risk\"] Fixtures[\"Fixtures and source bundle fixtures/first_wave/.../input (labels + expected codes) exported bundle: 13 copied source modules source_module_manifest.json\"] Tests[\"Tests and result records tests/test_batch10_governance_compilers_capsule.py result records/runtime_shell/demo_project/components/batch10_governance_compilers_capsule\"] Projections[\"Generated navigation projections Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] Ceiling[\"Scope limit fixture-bound public source-open evidence only no live ledger truth, source-file changes, public sharing, launch, provider, private-system, benchmark, or market authority\"] Bundle -->|seeds| Instance Bundle -->|bounds prose| Markdown Bundle -->|names laws and source authority| Standard Bundle -->|cites code locus| Runtime Runtime -->|computes integrity matrix and result records| Tests Fixtures -->|public inputs, exact copies, declared refactor| Runtime Fixtures -->|manifest and source bundle validate| Tests Instance -->|derives edges| Projections Projections -->|navigation only| Markdown Tests -->|result record evidence remains below| Ceiling Standard -->|enforces public/private and launch boundary| Ceiling Markdown -->|must not outrank| Bundle",
       "source_hash": "sha256:03a9f24bf12d2ecb936ec4be57fea41c03dffe0e853ccc3123cc293af7eef1df",
       "html_url": "docs/paper-modules.html#paper-module-batch10-governance-compilers-capsule-diagram-1",
       "html_anchor": "paper-module-batch10-governance-compilers-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_governance_compilers_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs/latest",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "validating admission policies",
       "url": "https://kubernetes.io/docs/concepts/policy",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SLSA",
       "url": "https://slsa.dev/spec/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "OpenSSF Scorecard",
       "url": "https://openssf.org/scorecard/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.batch10_live_source_drift_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 10 Live Source Drift Bundle",
         "url": "paper-modules.html#paper-module-batch10-live-source-drift-capsule"
        },
        {
         "id": "paper_module.batch9_macro_engines_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 9 Source Engines Bundle",
         "url": "paper-modules.html#paper-module-batch9-macro-engines-capsule"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch10_governance_compilers_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Governance & Compiler Mechanisms Bundle",
         "url": "components.html#component-batch10_governance_compilers_capsule"
        },
        {
         "id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public governance compilers bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_governance_compilers_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 17568
    },
    {
     "id": "paper_module.batch11_saturation_engines_capsule",
     "title": "Set 11 Saturation Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch11-saturation-engines-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch11-saturation-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch11-saturation-engines-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 11 Saturation Engines Bundle imports saturation, diagnostic, wayfinding, market-board, secret-scan, and demo-take source bodies as public source-open evidence without granting live runtime, launch, market, or navigation authority.",
     "summary": "Set 11 Saturation Engines Bundle binds the accepted batch11_saturation_engines_capsule component to a refreshed source-open bundle. It exercises run-affinity scoring, calculator cluster insight derivation, std_python delta gating, exogenous navigation grading, portability supersession rollup, shard browse priority, holographic evidence selection, projection secret scanning, stockgrid flow normalization, source-regime board bucketing, frontend wayfinding, agent-session diagnostic lenses, and demo-take coverage auditing while preserving copied source digests, computed negative probes, and scope limits.",
     "authority_ceiling": "Fixture-bound public source-body import, source-faithful public port evidence, computed negative-probe evidence, and metadata-only result records only; no live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
     "abstract": "Set 11 Saturation Engines Bundle imports saturation, diagnostic, wayfinding, market-board, secret-scan, and demo-take source bodies as public source-open evidence without granting live runtime, launch, market, or navigation authority.",
     "teleology": {
      "section_id": "",
      "text": "Set 11 Saturation Engines Bundle imports saturation, diagnostic, wayfinding, market-board, secret-scan, and demo-take source bodies as public source-open evidence without granting live runtime, launch, market, or navigation authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\n`batch11_saturation_engines_capsule` is a Microcosm component for the Set-11 saturation pass. It takes thirteen unrelated pieces of internal machinery, copies their source bodies into a public bundle, and re-runs each one against small synthetic fixtures so a reader can see the logic behave rather than take a claim on trust. The thirteen targets are deliberately mixed:\n- run affinity session scoring\n- calculator cluster insight derivation\n- std_python delta ratchet gating\n- exogenous navigation ladder grading\n- portability gate supersession rollup\n- shard browse context-priority sectioning\n- holographic research evidence selection\n- projection secret scanning\n- stockgrid flow multisource merge and unit normalization\n- source regime bucketing and z-score board construction\n- frontend navigation wayfinding\n- agent session diagnostic lenses\n- demo-take story coverage auditing\n\nThe single question the bundle answers is narrow: for each of these mechanisms, does the imported source actually compute the guard it claims to, on inputs designed to fail? It is a saturation pass because the targets share nothing except that pattern. They are a route ranker, a few financial-data normalisers, a navigation grader, a secret scanner, a graph wayfinder, and so on, swept up together so a reviewer can audit a broad slice of the codebase from one place.\n\nThe part worth noticing is how a negative case is treated. A fixture file named `..._stale_terminal_rejected` is only a label. The bundle never lets that label stand in for a result. It re-runs the real function on the fixture's own `probe_input`, computes whether the guard fired, and refuses to mark the case verified unless the mechanism's own exercise and the independent probe both agree. A fixture that asserts a failure it cannot demonstrate is flagged, not counted. That guard against self-congratulating fixtures is the reason the page exists.\n\n###### How it works\n\nThe run loop is the same for every target. The bundle first imports the copied source bundle and checks each module against the recorded source digest, line count, and a handful of required provenance anchors, so a drifted or partial copy is caught before any logic runs. It then exercises all thirteen mechanisms in a fixed order, and any reordering, blocked exercise, or missing module fails the run.\n\nEach mechanism's exercise feeds an integrity matrix row. A row pairs the mechanism's own computed output with an independently computed fixture probe and a binding disposition that records how the mechanism relates to the rest of the system: a new import, an already-bound gate the bundle is only re-checking, or an under-bound path it is extending. The two computed values must agree. The matrix marks a row's negative result verified only when the mechanism exercise and the fixture probe both come out true, and it sets `fixture_verdict_echo_risk` on any row where they do not. A non-zero echo-risk count is a finding that blocks the whole run.\n\nTwo short examples show what the probes actually compute. For run affinity, the probe builds a recommendation over candidate runs and confirms that a stale terminal run, even when made sticky and feed-rich, is not the one selected. For projection secret scanning, the probe runs the redaction patterns over a file carrying a synthetic key shape and a private ledger path and confirms both are blocked. The fixtures are synthetic and the key shapes are deliberate test strings, never live material.\n\nThe failure mode all of this guards against is the quiet pass: a fixture whose filename promises a rejection while the code underneath was never exercised, or was exercised and did not reject. By recomputing the guard from the fixture's own input and refusing to count a label it cannot reproduce, the bundle keeps the negative cases honest. The result records carry refs, digests, counts, and the computed verdicts; the copied bodies stay in the bundle's `source_modules` tree and are never inlined.\n\n###### Shape\n\nThis module's shape is a reader map over source-backed artifacts, not a new authority layer. The source record in `core/paper_module_capsules.json` is the source of record for subjects, code loci, doctrine refs, dependency edges, and projection status; `paper_modules/batch11_saturation_engines_capsule.json` is the governed JSON parity seed; this Markdown only narrates the proof boundary.\n\nSource refs\n\npaper_modules[76:paper_module.batch11_saturation_engines_bundle] source basis: source record `core/paper_module_capsules.json` governed JSON instance `paper_modules/batch11_saturation_engines_capsule.json` `markdown: legacy_import_projection_until_roundtrip_builder` active public runtime standard boundary: not live navigation/ledger/market/secret authority `standards/std_microcosm_batch11_saturation_engines_capsule.json` run, validate-bundle, result_card, scope_limit `src/microcosm_core/organs/batch11_saturation_engines_capsule.py` public mechanism and negative-case probes `fixtures/first_wave/batch11_saturation_engines_capsule/input` source_module_manifest.json: 12 copied/refactored public source modules `examples/batch11_saturation_engines_capsule/exported_batch11_saturation_engines_capsule_bundle` Tests `tests/test_batch11_saturation_engines_capsule.py` `scripts/build_doctrine_projection.py --check-paper-module-corpus` `scripts/build_doctrine_projection.py --check` status: pass; accepted: true; body_in_receipt: false `receipts/first_wave/batch11_saturation_engines_capsule/*` `receipts/acceptance/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json` Diagram source\n\n```text\nflowchart TD bundle[\"core/paper_module_capsules.json paper_modules[76:paper_module.batch11_saturation_engines_capsule] source basis: source record\"] instance[\"paper_modules/batch11_saturation_engines_capsule.json governed JSON instance markdown: legacy_import_projection_until_roundtrip_builder\"] standard[\"standards/std_microcosm_batch11_saturation_engines_capsule.json active public runtime standard boundary: not live navigation/ledger/market/secret authority\"] runtime[\"src/microcosm_core/components/batch11_saturation_engines_capsule.py run, validate-bundle, result_card, scope_limit\"] fixture[\"fixtures/first_wave/batch11_saturation_engines_capsule/input public mechanism and negative-case probes\"] bundle[\"examples/batch11_saturation_engines_capsule/exported_batch11_saturation_engines_capsule_bundle source_module_manifest.json: 12 copied/refactored public source modules\"] tests[\"tests/test_batch11_saturation_engines_capsule.py scripts/build_doctrine_projection.py --check-paper-module-corpus scripts/build_doctrine_projection.py --check\"] result records[\"result records/first_wave/batch11_saturation_engines_capsule/* result records/sign-off/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json status: pass; accepted: true; body_in_receipt: false\"] atlas[\"atlas/doctrine_lattice_graph.mmd and doctrine_lattice_projection.json Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] ceiling[\"Scope limit fixture-bound source-body import, source-faithful public ports, computed negative probes, metadata-only result records only\"] bundle -->|seeds subjects, dependencies, code locus, projection status| instance bundle -->|governed by| standard instance -->|cites resolved runtime/source locus| runtime standard -->|requires fixture and result record contract| fixture standard -->|requires copied/source-faithful public bundle| bundle runtime -->|exercises| fixture runtime -->|validates exact-copy/source-faithful evidence| bundle runtime -->|writes metadata-only result and validation result records| result records tests -->|checks runtime, bundle, corpus, projection freshness| result records instance -->|generated projection edge status| atlas result records -->|bounded evidence, not launch-scope decision| ceiling atlas -->|projection, source-linked only| ceiling\n```\n\nThe public/private and launch boundary stays narrow: the fixture inputs, source refs, digest rows, computed values, negative-probe labels, sign-off status, and metadata-only result records are evidence for the standalone `microcosm-substrate` bundle. They do not authorize live work log claims, navigation decisions, market or investment conclusions, complete secret detection, transcript or video authority, source-file changes, external model access, publishing-scope decision, launch-scope decision, private-system equivalence, generated-lattice source authority, or whole-system correctness.\n\n###### Reader Evidence Routing\n\nRead this module through the fixture, exported-bundle, focused-test, and generated-row surfaces. The fixture and bundle commands prove public source-body import discipline: exact copied-source digests, source-faithful public ports, computed negative-probe values, and metadata-only result cards. The structured source record proves that the paper module is bundle-backed and that Mermaid and Atlas availability come from bundle edges rather than prose.\n\nThe mixed Set-11 target list remains evidence routing, not an authority expansion. The reader should treat each target as a public fixture exercise inside the accepted saturation-engines component, not as live work log truth, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, publishing-scope decision, or launch-scope decision.\n\n###### Prior Art Grounding\n\nThe component borrows from overload management, backpressure, and observability practice: systems need explicit signals for saturation, queue pressure, freshness, and recoverability instead of relying on a single success/failure bit. Relevant anchors include:\n- Google's SRE guidance on [identifying and recovering from overload](https://sre.google/workbook/overload/), which treats overload as a measurable operational condition with mitigation strategies.\n- The Reactive Streams [backpressure specification](https://www.reactive-streams.org/), which standardizes asynchronous stream processing with non-blocking backpressure.\n- Google's SRE chapter on [monitoring distributed systems](https://sre.google/sre-book/monitoring-distributed-systems/), especially the distinction between symptoms and causes.\n\nMicrocosm borrows the saturation-signal and pressure-accounting pattern across its mixed Set-11 targets: route affinity, delta gates, shard browse priorities, evidence selection, secret scanning, market boards, wayfinding, and diagnostic lenses. The bundle computes public fixture verdicts; it is not live work log truth, complete secret detection, live market data, or launch-scope decision.\n\n###### Binding Dispositions\n\nSet-11 contained a mixed target set. The bundle records the distinction explicitly:\n- New or under-bound imports: run affinity, calculator insight, exogenous nav grading, shard browsing, holographic evidence selection, quant stockgrid, source regime board, frontend wayfinding, and session diagnostics.\n- Already-bound validations: projection secret scan and portability gate are covered by the engine-room public projection leak gate family; demo-take coverage is already represented by the Set-7 demo-take component. Set-11 validates the relevant scoring or gate behavior rather than claiming a standalone authority surface.\n- Partial existing system: the std_python ratchet path had existing assay coverage; the Set-11 bundle adds a bounded delta-regression witness.\n\n###### Shared Wiring Status\n\nThe component-owned system can validate independently. Shared registry, atlas, sign-off, Components, ARCHITECTURE, preflight, and package wiring must be serialized behind the live shared Microcosm binding owner before this component is promoted to whole-surface discoverability.\n\n###### Validation Result record Path\n\nNegative-case fixture files are inputs, not verdicts. Each file carries a public `probe_input`; the component computes the corresponding fixture probe and records `fixture_probe_input_digest`, `fixture_computed_value`, and `mechanism_computed_value` in the integrity matrix before counting a negative case as verified.\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the Set-11 saturation-engine result record and sign-off JSON. The bundle command validates copied source-source digests, source-faithful public port evidence, computed negative-probe evidence, and metadata-only cards. The focused test covers the runtime component, exported bundle shape, exact-copy imports, private body omission, stable negative cases, and tier-B mechanism output coverage. The corpus and projection checks prove only that the generated paper-module instance remains fresh for this bundle-backed Markdown state.\n\nThis result record path is public fixture evidence only. It does not establish live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, publishing-scope decision, launch-scope decision, external model access, or whole-system correctness.\n\n###### Scope boundary\n\n###### Boundary\n\nThis bundle is not live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, publishing-scope decision, or launch-scope decision. Result records expose only refs, digests, counts, computed verdicts, public negative-case probe digests, and omission result records; copied source source bodies remain under the public bundle's `source_modules` tree.\n\n###### Scope limit\n\nThis bundle is fixture-bound public source-body import, source-faithful public port evidence, computed negative-probe evidence, and metadata-only result record evidence only. It does not establish live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.\n\n###### Scope limit\n\nThose result records do not prove live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, external model access, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 14497,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "batch11saturationengines_capsule is a Microcosm component for the Set-11 saturation pass. It takes thirteen unrelated pieces of internal machinery, copies their source bodies into a public bundle, and re-runs each one against small synthetic fixtures so a reader can see the logic behave rather than take a claim on trust. The thirteen targets are deliberately mixed: run affinity session scoring calculator cluster insight derivation std_python delta ratchet gating exogenous navigation ladder grading portability gate supersession rollup shard browse context-priority sectioning holographic research evidence selection projection secret scanning stockgrid flow multisource merge and unit normaliza\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "boundary",
       "title": "Boundary",
       "level": 2,
       "excerpt": "This bundle is not live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, public sharing decision, or launch-scope decision. Result records expose only refs, digests, counts, computed verdicts, public negative-case probe digests, and omission result records; copied source source bodies remain under the public bundle's source_modules tree.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "The run loop is the same for every target. The bundle first imports the copied source bundle and checks each module against the recorded source digest, line count, and a handful of required provenance anchors, so a drifted or partial copy is caught before any logic runs. It then exercises all thirteen mechanisms in a fixed order, and any reordering, blocked exercise, or missing module fails the run. Each mechanism's exercise feeds an integrity matrix row. A row pairs the mechanism's own computed output with an independently computed fixture probe and a binding disposition that records how the mechanism relates to the rest of the system: a new import, an already-bound gate the bundle is only\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This module's shape is a reader map over source-backed artifacts, not a new authority layer. The source record in core/papermodulecapsules.json is the source of record for subjects, code loci, doctrine refs, dependency edges, and projection status; papermodules/batch11saturationenginescapsule.json is the governed JSON parity seed; this Markdown only narrates the proof boundary. The public/private and launch boundary stays narrow: the fixture inputs, source refs, digest rows, computed values, negative-probe labels, sign-off status, and metadata-only result records are evidence for the standalone microcosm-substrate bundle. They do not authorize live work log claims, navigation decisions, mar\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module through the fixture, exported-bundle, focused-test, and generated-row surfaces. The fixture and bundle commands prove public source-body import discipline: exact copied-source digests, source-faithful public ports, computed negative-probe values, and metadata-only result cards. The structured source record proves that the paper module is bundle-backed and that Mermaid and Atlas availability come from bundle edges rather than prose. The mixed Set-11 target list remains evidence routing, not an authority expansion. The reader should treat each target as a public fixture exercise inside the accepted saturation-engines component, not as live work log truth, complete secret dete\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows from overload management, backpressure, and observability practice: systems need explicit signals for saturation, queue pressure, freshness, and recoverability instead of relying on a single success/failure bit. Relevant anchors include: Google's SRE guidance on identifying and recovering from overload, which treats overload as a measurable operational condition with mitigation strategies. The Reactive Streams backpressure specification, which standardizes asynchronous stream processing with non-blocking backpressure. Google's SRE chapter on monitoring distributed systems, especially the distinction between symptoms and causes. Microcosm borrows the saturation-signal a\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "binding-dispositions",
       "title": "Binding Dispositions",
       "level": 2,
       "excerpt": "Set-11 contained a mixed target set. The bundle records the distinction explicitly: New or under-bound imports: run affinity, calculator insight, exogenous nav grading, shard browsing, holographic evidence selection, quant stockgrid, source regime board, frontend wayfinding, and session diagnostics. Already-bound validations: projection secret scan and portability gate are covered by the engine-room public projection leak gate family; demo-take coverage is already represented by the Set-7 demo-take component. Set-11 validates the relevant scoring or gate behavior rather than claiming a standalone authority surface. Partial existing system: the std_python ratchet path had existing assay cove\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Negative-case fixture files are inputs, not verdicts. Each file carries a public probeinput; the component computes the corresponding fixture probe and records fixtureprobeinputdigest, fixturecomputedvalue, and mechanismcomputedvalue in the integrity matrix before counting a negative case as verified. Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the Set-11 saturation-engine result record and sign-off JSON. The bundle command validates copied source-source digests, source-faithful public port evidence, computed negative-probe evidence, and metadata-only cards. The focused test covers the runtime component, exported bundle shape, exact-\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This bundle is fixture-bound public source-body import, source-faithful public port evidence, computed negative-probe evidence, and metadata-only result record evidence only. It does not establish live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, public sharing decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module supports only the reader-verifiable claim that the Set-11 saturation bundle imports selected source bodies, exercises them against public fixtures, preserves computed negative-probe evidence, and emits Those result records do not prove live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, external model access, source-file changes, public sharing approval, launch-scope decision, private-system equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shared-wiring-status",
       "title": "Shared Wiring Status",
       "level": 2,
       "excerpt": "The component-owned system can validate independently. Shared registry, atlas, sign-off, Components, ARCHITECTURE, preflight, and package wiring must be serialized behind the live shared Microcosm binding owner before this component is promoted to whole-surface discoverability.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch11_saturation_engines_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"core/paper_module_capsules.json paper_modules[76:paper_module.batch11_saturation_engines_capsule] source basis: source record\"] instance[\"paper_modules/batch11_saturation_engines_capsule.json governed JSON instance markdown: legacy_import_projection_until_roundtrip_builder\"] standard[\"standards/std_microcosm_batch11_saturation_engines_capsule.json active public runtime standard boundary: not live navigation/ledger/market/secret authority\"] runtime[\"src/microcosm_core/components/batch11_saturation_engines_capsule.py run, validate-bundle, result_card, scope_limit\"] fixture[\"fixtures/first_wave/batch11_saturation_engines_capsule/input public mechanism and negative-case probes\"] bundle[\"examples/batch11_saturation_engines_capsule/exported_batch11_saturation_engines_capsule_bundle source_module_manifest.json: 12 copied/refactored public source modules\"] tests[\"tests/test_batch11_saturation_engines_capsule.py scripts/build_doctrine_projection.py --check-paper-module-corpus scripts/build_doctrine_projection.py --check\"] result records[\"result records/first_wave/batch11_saturation_engines_capsule/* result records/sign-off/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json status: pass; accepted: true; body_in_receipt: false\"] atlas[\"atlas/doctrine_lattice_graph.mmd and doctrine_lattice_projection.json Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] ceiling[\"Scope limit fixture-bound source-body import, source-faithful public ports, computed negative probes, metadata-only result records only\"] bundle -->|seeds subjects, dependencies, code locus, projection status| instance bundle -->|governed by| standard instance -->|cites resolved runtime/source locus| runtime standard -->|requires fixture and result record contract| fixture standard -->|requires copied/source-faithful public bundle| bundle runtime -->|exercises| fixture runtime -->|validates exact-copy/source-faithful evidence| bundle runtime -->|writes metadata-only result and validation result records| result records tests -->|checks runtime, bundle, corpus, projection freshness| result records instance -->|generated projection edge status| atlas result records -->|bounded evidence, not launch-scope decision| ceiling atlas -->|projection, source-linked only| ceiling",
       "source_hash": "sha256:8987d39d975f0189a02d1956a79018c569cfaa74074fe04bdac1c6b47bd0d7a2",
       "html_url": "docs/paper-modules.html#paper-module-batch11-saturation-engines-capsule-diagram-1",
       "html_anchor": "paper-module-batch11-saturation-engines-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch11_saturation_engines_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "identifying and recovering from overload",
       "url": "https://sre.google/workbook/overload/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "backpressure specification",
       "url": "https://www.reactive-streams.org/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "monitoring distributed systems",
       "url": "https://sre.google/sre-book/monitoring-distributed-systems/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 4,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.batch8_compliance_pipeline_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 8 Compliance Pipeline Bundle",
         "url": "paper-modules.html#paper-module-batch8-compliance-pipeline-capsule"
        },
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch11_saturation_engines_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Saturation Engines Bundle",
         "url": "components.html#component-batch11_saturation_engines_capsule"
        },
        {
         "id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public saturation engines bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch11_saturation_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 16071
    },
    {
     "id": "paper_module.batch4_proof_authority_runtime",
     "title": "Set 4 Proof, Authority, and Runtime Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch4-proof-authority-runtime",
     "read_href": "docs/paper-modules.html#paper-module-batch4-proof-authority-runtime",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch4-proof-authority-runtime",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 4 Proof, Authority, and Runtime Bundle imports proof-search, reasoning-authority, completion, Codex runtime, bitemporal, taskpolicy, and context-yield source bodies as public source-open evidence without claiming proof success, benchmark claims, live runtime control, or launch-scope decision.",
     "summary": "Set 4 Proof, Authority, and Runtime Bundle binds the accepted batch4_proof_authority_runtime component to a refreshed source-open bundle. It exercises Lean strategy-control and prover-skill witnesses, VeriSoftBench harness and calibration rows, Erdos #257 certificate-kernel static checks, Lean packet integrity, reasoning grant and plan authority fences, forward-integration policy, completion executor deferral, Codex driver and idle heartbeat diagnostics, metabolism claim logs, taskpolicy passthrough, and context-yield attribution while preserving copied source digests, bounded negative cases, and scope limits.",
     "authority_ceiling": "Fixture-bound public source-body import, static proof-placeholder checks, dry-run authority-boundary evidence, source-anchor evidence, negative-case evidence, and metadata-only result records only; no theorem success, Erdos #257 solution, official benchmark claims, live sandbox enforcement, live Codex orchestration, external model access, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
     "abstract": "Set 4 Proof, Authority, and Runtime Bundle imports proof-search, reasoning-authority, completion, Codex runtime, bitemporal, taskpolicy, and context-yield source bodies as public source-open evidence without claiming proof success, benchmark claims, live runtime control, or launch-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "Set 4 Proof, Authority, and Runtime Bundle imports proof-search, reasoning-authority, completion, Codex runtime, bitemporal, taskpolicy, and context-yield source bodies as public source-open evidence without claiming proof success, benchmark claims, live runtime control, or launch-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`batch4_proof_authority_runtime` is the public source-open evidence membrane for fourteen source mechanisms that are easy to overclaim: proof search, machine-checked mathematics, reasoning-authority fences, completion planning, Codex runtime diagnostics, bitemporal coordination, taskpolicy wrapping, and context-yield attribution.\n\n###### Purpose\n\nThese fourteen mechanisms sit close to claims a reader will want to make on their behalf. A proof-search benchmark looks like solving open problems. A copied `CertificateKernel.lean` for Erdos #257 looks like a solution. A reasoning-grant fence looks like a live sandbox. The single question this bundle answers is narrow and deliberately so: can each of these mechanisms be shown to a cold reader as copied, anchored, public source, without any of them quietly inheriting an authority it does not have?\n\nThe unusual part is how the bundle resists the easy inflation. It does not run the mechanisms; it imports their source bodies, checks each one against named required anchors, and then recomputes a stable negative case per mechanism from that source rather than trusting a fixture to declare its own verdict. For the Erdos #257 row it runs a static token scan over the copied Lean source and rejects `sorry`, `admit`, and `axiom`, so an absent proof obligation cannot be smuggled in. An optional local Lean/Lake compile probe is wired in too, but a pass means only that the copied kernel elaborated without error, and the code records that as a non-authoritative availability signal, never as formal-result correctness.\n\nThe result is a membrane, not a flagship. The interesting claim is the one it refuses: source import is made auditable, every result record stays metadata-only, and each tempting stronger statement is forced into a visible scope boundary with the authority delta held at `none`.\n\n###### Abstract\n\n`batch4_proof_authority_runtime` is a technical paper module for the Set 4 proof/authority/runtime bundle. Its positive claim is deliberately narrow: Microcosm imports exact copied source source modules into a public bundle, checks source digests and required anchors, runs bounded fixture and bundle validators, records semantic negative cases, and emits metadata-only result records with explicit scope limits.\n\nThis module does not claim formal formal-result correctness. It is not a Lean/Lake execution component, not an Erdos #257 solution, not an official benchmark result, not live sandbox enforcement, not live Codex orchestration, not external model access, not source-file changes, not publishing-scope decision, not launch-scope decision, not private-system equivalence, and not whole-system correctness. Where the paper mentions Lean/Lake, it distinguishes Set 4's static copied-source checks from sibling witness components that actually run local Lean/Lake processes.\n\n###### Telos\n\nThe Set 4 bundle exists to make proof-adjacent runtime claims inspectable without leaking private roots or inflating source import into proof authority. It gathers fourteen mechanism families that otherwise invite overclaiming: strategy-control proof search, prover-skill foundry work, VeriSoftBench harness diagnostics, Erdos #257 certificate-kernel source anchors, Lean packet replay, dry-run authority grants, completion planning, Codex runtime diagnostics, bitemporal coordination, macOS taskpolicy wrapping, and context-yield attribution.\n\nThe paper's job is not to make those systems authoritative by prose. Its job is to explain the public result record membrane: what was copied, what was checked, what negative cases were observed, what was omitted from result records, and which scope limit remains in force.\n\n###### Mechanism Overview\n\nThe public fixture manifest names fourteen mechanism rows and one stable negative case per mechanism:\n- `lean_strategy_control_benchmark`\n- `prover_skill_foundry`\n- `verisoftbench_harness_differential`\n- `verisoftbench_calibration_executor`\n- `erdos257_certificate_kernel`\n- `lean_full_fidelity_packet_verifier`\n- `reasoning_execution_authority_grant`\n- `forward_integration_policy_fence`\n- `closeout_executor_state_machine`\n- `codex_cdp_driver`\n- `codex_idle_heartbeat_fsm`\n- `metabolism_bitemporal_claim_log`\n- `macos_taskpolicy_actuator`\n- `context_yield_attribution`\n\nThe exported bundle contains nineteen exact copied source source modules. Validation checks their manifest rows, SHA-256 digests, line counts, required anchors, and per-mechanism public exercise clauses. Result records carry source refs, digests, anchors, counts, verdicts, negative-case ids, and scope limits; they do not inline copied body text or private runtime state.\n\n###### Runtime Mechanism\n\nThe runtime has two public entry shapes:\n1. `run` consumes `fixtures/first_wave/batch4_proof_authority_runtime/input`, evaluates the Set 4 fixture manifest, writes the public result board, and emits sign-off JSON.\n2. `validate-bundle` consumes `examples/batch4_proof_authority_runtime/exported_batch4_proof_authority_runtime_bundle`, validates the copied-source manifest, and emits a bundle validation result record.\n\nBoth paths enforce the same ceiling. They validate public fixture evidence and copied-source integrity; they do not run providers, dispatch live Codex state, execute a live sandbox, change source files, submit benchmark results, approve public sharing, approve launch, or establish formal-result correctness.\n\nFor the Erdos #257 certificate-kernel row, Set 4 performs a static placeholder-token scan over copied Lean source and ties that scan to target-runner anchor evidence. That scan may reject `sorry`, `admit`, and `axiom` mutations in the copied source floor. It is not a Lean proof check and not a certificate that the open problem has been solved.\n\n###### Diagram\n\nDiagram source\n\n```text\nflowchart TD fixture[\"Public fixture manifest 14 mechanism rows + 14 negative cases\"] bundle[\"Exported public bundle 19 copied source modules\"] runtime[\"Set 4 runtime run / validate-bundle\"] anchors[\"Per-mechanism source check module present + required anchors in body\"] scan[\"Erdos #257 static scan reject sorry / admit / axiom\"] probe[\"Optional Lean/Lake probe copied kernel elaborates? availability only\"] negatives[\"Negative cases recomputed verdict derived from source, not declared\"] result records[\"metadata-only result records refs, digests, anchors, counts, verdicts\"] ceiling[\"Scope limit authority delta = none\"] leanWitness[\"Sibling Lean/Lake components actually run local proofs\"] fixture --> runtime bundle --> runtime runtime --> anchors runtime --> scan scan --> probe runtime --> negatives anchors --> result records scan --> result records probe --> result records negatives --> result records result records --> ceiling leanWitness -. \"separate execution evidence\" .-> ceiling\n```\n\nThe dashed edge is intentional. Lean/Lake subprocess evidence informs the technical boundary, but Set 4 itself does not inherit proof authority from sibling components.\n\n###### Semantic Negatives And Threat Model\n\nThe negative cases are not decoration. They are the public failure floor that prevents a source-import bundle from becoming an unbounded proof or runtime claim. The fixture includes negatives for weak proof skeletons, low-repair foundry promotion, benchmark truth leakage, prefix-answer leakage, Erdos solution overclaim, packet hash corruption, forbidden authority grants, dirty forward integration targets, stale completion heads, absent CDP ports, stale idle snapshots, expired bitemporal claims, missing taskpolicy binaries, and accepted read guards.\n\nThe threat model is overclaiming. A green result record must not be interpreted as:\n- a formal proof of a theorem;\n- a solution to Erdos #257;\n- an official benchmark result or leaderboard submission;\n- a live provider, browser, sandbox, Codex, or metabolism run;\n- authorization to change source files, publish, launch, or export private state;\n- evidence that public copied modules are equivalent to a private root.\n\n###### Result Interpretation\n\nA passing fixture command evidences that the public manifest, mechanism rows, negative cases, result record body scan, and scope limit are internally consistent for the Set 4 fixture. A passing bundle command evidences that the exported copied-source manifest matches expected digests and anchors while keeping result records metadata-only. A passing focused pytest evidences regression coverage for fixture execution, bundle validation, source digest mismatch, mutated Lean body rejection, exact-copy imports, private-body omission, and semantic negative-case evaluation.\n\nThese are engineering result records. They are not formal proof certificates. They support public reader confidence in the bundle's source-open evidence membrane; they do not certify theorem truth, benchmark claims, launch-scope decision, or whole-system correctness.\n\n###### Relationship To Formal-Proof Concepts\n\nSet 4 relates to formal-proof practice through boundary discipline, not through theorem authority. The local concept edge is `concept.formal_math_and_proof_witness_bundle`: proof-adjacent claims must pass through explicit witness artifacts, source refs, digests, declaration or anchor metadata, negative cases, and metadata-only result records before they become reader evidence.\n\nThe sibling `formal_math_lean_proof_witness` component supplies the small public Lean/Lake witness pattern. The sibling `certificate_kernel_execution_lab` component supplies the bounded certificate-kernel execution pattern. Set 4 imports and validates copied source-body evidence around those themes, but it keeps the authority delta at `none`.\n\nThis distinction is the main technical result of the paper: a source-open public bundle can be useful without pretending to be a formal proof. It can make evidence auditable, show exactly where a proof-adjacent route stops, and force every tempting stronger claim into a visible scope boundary.\n\n###### Data And Artifact Availability\n\nThe public artifact boundary is the standalone `microcosm-substrate` root. A cold reader should use the paper module, generated structured source record, standard, fixture manifest, exported bundle manifest, focused test, and metadata-only result records inside that root. Public links and public sharing surfaces must resolve to the public Microcosm system, not private source roots, model-output data stores, browser state, prompt-shelf bodies, or operator-voice material.\n\n###### Prior Art Grounding\n\nThe runtime keeps the authority to act separate from the evidence that an action is permitted. This is the idea behind proof-carrying code ( [Necula, 1997](https://en.wikipedia.org/wiki/Proof-carrying_code)) and capability-based security, where a request arrives with evidence of its own legitimacy rather than relying on ambient trust. Microcosm borrows the proof-before-authority ordering over fixtures; the result is fixture-bound evidence, not a verified authorization system or launch-scope decision.\n\n###### Reproducibility Route\n\nRun these commands from `microcosm-substrate/` when validating this module without changing durable generated projections:\n\nThe projection checks for the broader paper-module corpus remain:\n\n```text\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check\n```\n\nThe direct runtime commands and focused pytest are the minimum useful validation.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src python3 -m pytest tests/test_batch4_proof_authority_runtime.py -q\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThese are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Source Authority And Projection Boundary\n\nThe source authority for this paper-module identity is the JSON source record:\n- `core/paper_module_capsules.json::paper_modules[77:paper_module.batch4_proof_authority_runtime]`\n- generated structured source record: `paper_modules/batch4_proof_authority_runtime.json`\n- local standard: `standards/std_microcosm_batch4_proof_authority_runtime.json`\n- runtime locus: `src/microcosm_core/organs/batch4_proof_authority_runtime.py`\n- focused validator: `tests/test_batch4_proof_authority_runtime.py`\n\nIt may explain the source record, the generated relationship set, and the validation route, but it does not mint new subject edges, proof authority, Mermaid authority, Atlas authority, or launch status. Future relationship changes belong in the source record plus builder regeneration, not in hand-authored Markdown.\n\n###### Lean/Lake Witness Boundary\n\nSet 4 should be read as the import/result record bundle, not as the Lean/Lake executor. Actual local Lean/Lake subprocess evidence lives in sibling public components:\n- `formal_math_lean_proof_witness` runs a tiny public Lean/Lake fixture and exported witness bundle, records local tool availability, build status, declaration metadata, four negative-case observations, and metadata-only result records. Its scope limit is toy public witness evidence only; it rejects Mathlib, Aesop, and Batteries authority unless a wider authority plane is introduced.\n- `certificate_kernel_execution_lab` runs a bounded public certificate-kernel lab through Lean/Lake machinery, records command identity, transition rows, accepted/residual counts, copied-source manifest status, negative cases, and metadata-only result records. Its scope limit is bounded certificate-kernel evidence, not general theorem authority.\n\nTherefore the correct reading is layered:\n- Set 4 validates source-open source-body import, static placeholder scanning, authority-boundary fields, and semantic negatives.\n- The Lean/Lake witness components validate that specific public fixtures can route through local Lean/Lake subprocesses under their own ceilings.\n- None of these pages, individually or together, claim arbitrary formal-result correctness, Mathlib-dependent proof authority, benchmark claims, Erdos #257 solution status, publishing-scope decision, launch-scope decision, or private-system equivalence.\n\n###### Public/Private Boundary\n\nAllowed public material:\n- mechanism ids, source-module ids, negative-case ids, and stable error codes;\n- exact copied source modules in the exported public bundle;\n- source refs, SHA-256 digests, line counts, required anchors, and bounded outcomes;\n- scope limits, scope boundaries, and metadata-only validation verdicts.\n\nForbidden public material:\n- keys, account secrets, browser state, account or browser state, model-output data bodies, browser UI live-access material, live Codex state exports, live metabolism DB exports, private runtime state, source notes, prompt-shelf bodies, theorem work-product bodies, raw command-output bodies, public sharing operation state, and official benchmark submission state.\n\nThe exported bundle may contain approved copied source modules. The result records are stricter: they identify copied modules by refs, digests, anchors, classes, counts, and verdicts, not by inlining source bodies.\n\n###### Limitations\n\nThe current module has these hard limits:\n- Set 4 does not execute Lean/Lake; it performs static checks over copied source and validates public manifest evidence.\n- Static placeholder-token scanning is bounded evidence checking.\n- Digest and anchor equality do not prove semantic equivalence to a private root.\n- Negative-case coverage is finite and fixture-bound.\n- metadata-only result records improve public safety, but they are not a substitute for formal proof review.\n- Generated Mermaid, Atlas, and JSON structured source record are projections; they do not create source authority.\n- Accepted-component status means accepted current public result record inventory for this verified source-body import, not launch, public sharing, benchmark, or theorem authority.\n\n###### Scope limit\n\nThis module may claim fixture-bound public source-body import, exact copied source-module digest checks, required-anchor checks, static placeholder-token scan evidence, dry-run authority-boundary evidence, semantic negative-case evidence, and metadata-only result record discipline.\n\nIt may not claim theorem success, Lean formal-result correctness, Erdos #257 solution status, official benchmark claims, live sandbox enforcement, live Codex orchestration, external model access, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 16706,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "These fourteen mechanisms sit close to claims a reader will want to make on their behalf. A proof-search benchmark looks like solving open problems. A copied CertificateKernel.lean for Erdos #257 looks like a solution. A reasoning-grant fence looks like a live sandbox. The single question this bundle answers is narrow and deliberately so: can each of these mechanisms be shown to a cold reader as copied, anchored, public source, without any of them quietly inheriting an authority it does not have? The unusual part is how the bundle resists the easy inflation. It does not run the mechanisms; it imports their source bodies, checks each one against named required anchors, and then recomputes a\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "abstract",
       "title": "Abstract",
       "level": 2,
       "excerpt": "batch4proofauthority_runtime is a technical paper module for the Set 4 proof/authority/runtime bundle. Its positive claim is deliberately narrow: Microcosm imports exact copied source source modules into a public bundle, checks source digests and required anchors, runs bounded fixture and bundle validators, records semantic negative cases, and emits metadata-only result records with explicit scope limits. This module does not claim formal formal-result correctness. It is not a Lean/Lake execution component, not an Erdos #257 solution, not an official benchmark result, not live sandbox enforcement, not live Codex orchestration, not external model access, not source-file changes, not public s\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "telos",
       "title": "Telos",
       "level": 2,
       "excerpt": "The Set 4 bundle exists to make proof-adjacent runtime claims inspectable without leaking private roots or inflating source import into proof authority. It gathers fourteen mechanism families that otherwise invite overclaiming: strategy-control proof search, prover-skill foundry work, VeriSoftBench harness diagnostics, Erdos #257 certificate-kernel source anchors, Lean packet replay, dry-run authority grants, completion planning, Codex runtime diagnostics, bitemporal coordination, macOS taskpolicy wrapping, and context-yield attribution. The paper's job is not to make those systems authoritative by prose. Its job is to explain the public result record membrane: what was copied, what was che\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-authority-and-projection-boundary",
       "title": "Source Authority And Projection Boundary",
       "level": 2,
       "excerpt": "The source authority for this paper-module identity is the JSON source record: core/papermodulecapsules.json::papermodules[77:papermodule.batch4proofauthority_runtime] generated structured source record: papermodules/batch4proofauthorityruntime.json local standard: standards/stdmicrocosmbatch4proofauthority_runtime.json runtime locus: src/microcosmcore/components/batch4proofauthorityruntime.py focused validator: tests/testbatch4proofauthorityruntime.py It may explain the source record, the generated relationship set, and the validation route, but it does not mint new subject edges, proof authority, Mermaid authority, Atlas authority, or launch status. Future relationship changes belong in t\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-overview",
       "title": "Mechanism Overview",
       "level": 2,
       "excerpt": "The public fixture manifest names fourteen mechanism rows and one stable negative case per mechanism: leanstrategycontrol_benchmark proverskillfoundry verisoftbenchharnessdifferential verisoftbenchcalibrationexecutor erdos257certificatekernel leanfullfidelitypacketverifier reasoningexecutionauthority_grant forwardintegrationpolicy_fence completionexecutorstate_machine codexcdpdriver codexidleheartbeat_fsm metabolismbitemporalclaim_log macostaskpolicyactuator contextyieldattribution The exported bundle contains nineteen exact copied source source modules. Validation checks their manifest rows, SHA-256 digests, line counts, required anchors, and per-mechanism public exercise clauses. Result r\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "runtime-mechanism",
       "title": "Runtime Mechanism",
       "level": 2,
       "excerpt": "The runtime has two public entry shapes: run consumes fixtures/firstwave/batch4proofauthorityruntime/input, evaluates the Set 4 fixture manifest, writes the public result board, and emits sign-off JSON. validate-bundle consumes examples/batch4proofauthorityruntime/exportedbatch4proofauthorityruntimebundle, validates the copied-source manifest, and emits a bundle validation result record. Both paths enforce the same ceiling. They validate public fixture evidence and copied-source integrity; they do not run providers, dispatch live Codex state, execute a live sandbox, change source files, submit benchmark results, approve public sharing, approve launch, or establish formal-result correctness.\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "lean-lake-witness-boundary",
       "title": "Lean/Lake Witness Boundary",
       "level": 2,
       "excerpt": "Set 4 should be read as the import/result record bundle, not as the Lean/Lake executor. Actual local Lean/Lake subprocess evidence lives in sibling public components: formalmathleanproofwitness runs a tiny public Lean/Lake fixture and exported witness bundle, records local tool availability, build status, declaration metadata, four negative-case observations, and metadata-only result records. Its scope limit is toy public witness evidence only; it rejects Mathlib, Aesop, and Batteries authority unless a wider authority plane is introduced. certificatekernelexecution_lab runs a bounded public certificate-kernel lab through Lean/Lake machinery, records command identity, transition rows, accep\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "diagram",
       "title": "Diagram",
       "level": 2,
       "excerpt": "The dashed edge is intentional. Lean/Lake subprocess evidence informs the technical boundary, but Set 4 itself does not inherit proof authority from sibling components.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "semantic-negatives-and-threat-model",
       "title": "Semantic Negatives And Threat Model",
       "level": 2,
       "excerpt": "The negative cases are not decoration. They are the public failure floor that prevents a source-import bundle from becoming an unbounded proof or runtime claim. The fixture includes negatives for weak proof skeletons, low-repair foundry promotion, benchmark truth leakage, prefix-answer leakage, Erdos solution overclaim, packet hash corruption, forbidden authority grants, dirty forward integration targets, stale completion heads, absent CDP ports, stale idle snapshots, expired bitemporal claims, missing taskpolicy binaries, and accepted read guards. The threat model is overclaiming. A green result record must not be interpreted as: a formal proof of a theorem; a solution to Erdos #257; an of\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-private-boundary",
       "title": "Public/Private Boundary",
       "level": 2,
       "excerpt": "Allowed public material: mechanism ids, source-module ids, negative-case ids, and stable error codes; exact copied source modules in the exported public bundle; source refs, SHA-256 digests, line counts, required anchors, and bounded outcomes; scope limits, scope boundaries, and metadata-only validation verdicts. Forbidden public material: keys, account secrets, browser state, account or browser state, model-output data bodies, browser UI live-access material, live Codex state exports, live metabolism DB exports, private runtime state, source notes, prompt-shelf bodies, theorem work-product bodies, raw command-output bodies, public sharing operation state, and official benchmark submission\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reproducibility-route",
       "title": "Reproducibility Route",
       "level": 2,
       "excerpt": "Run these commands from microcosm-substrate/ when validating this module without changing durable generated projections: The projection checks for the broader paper-module corpus remain: The direct runtime commands and focused pytest are the minimum useful validation. The projection checks verify that the generated corpus remains",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "result-interpretation",
       "title": "Result Interpretation",
       "level": 2,
       "excerpt": "A passing fixture command evidences that the public manifest, mechanism rows, negative cases, result record body scan, and scope limit are internally consistent for the Set 4 fixture. A passing bundle command evidences that the exported copied-source manifest matches expected digests and anchors while keeping result records metadata-only. A passing focused pytest evidences regression coverage for fixture execution, bundle validation, source digest mismatch, mutated Lean body rejection, exact-copy imports, private-body omission, and semantic negative-case evaluation. These are engineering result records. They are not formal proof certificates. They support public reader confidence in the bun\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "relationship-to-formal-proof-concepts",
       "title": "Relationship To Formal-Proof Concepts",
       "level": 2,
       "excerpt": "Set 4 relates to formal-proof practice through boundary discipline, not through theorem authority. The local concept edge is concept.formalmathandproofwitness_bundle: proof-adjacent claims must pass through explicit witness artifacts, source refs, digests, declaration or anchor metadata, negative cases, and metadata-only result records before they become reader evidence. The sibling formalmathleanproofwitness component supplies the small public Lean/Lake witness pattern. The sibling certificatekernelexecution_lab component supplies the bounded certificate-kernel execution pattern. Set 4 imports and validates copied source-body evidence around those themes, but it keeps the authority delta a\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The current module has these hard limits: Set 4 does not execute Lean/Lake; it performs static checks over copied source and validates public manifest evidence. Static placeholder-token scanning is bounded evidence checking. Digest and anchor equality do not prove semantic equivalence to a private root. Negative-case coverage is finite and fixture-bound. metadata-only result records improve public safety, but they are not a substitute for formal proof review. Generated Mermaid, Atlas, and JSON structured source record are projections; they do not create source authority. Accepted-component status means accepted current public result record inventory for this verified source-body import, not\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "data-and-artifact-availability",
       "title": "Data And Artifact Availability",
       "level": 2,
       "excerpt": "The public artifact boundary is the standalone microcosm-substrate root. A cold reader should use the paper module, generated structured source record, standard, fixture manifest, exported bundle manifest, focused test, and metadata-only result records inside that root. Public links and public sharing surfaces must resolve to the public Microcosm system, not private source roots, model-output data stores, browser state, prompt-shelf bodies, or operator-voice material.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim fixture-bound public source-body import, exact copied source-module digest checks, required-anchor checks, static placeholder-token scan evidence, dry-run authority-boundary evidence, semantic negative-case evidence, and metadata-only result record discipline. It may not claim theorem success, Lean formal-result correctness, Erdos #257 solution status, official benchmark claims, live sandbox enforcement, live Codex orchestration, external model access, source-file changes, public sharing decision, launch approval, private-system equivalence, or whole-system correctness. If any of those claims becomes supported later, the authority must come from changed source Markdown\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The runtime keeps the authority to act separate from the evidence that an action is permitted. This is the idea behind proof-carrying code (Necula, 1997) and capability-based security, where a request arrives with evidence of its own legitimacy rather than relying on ambient trust. Microcosm borrows the proof-before-authority ordering over fixtures; the result is fixture-bound evidence, not a verified authorization system or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: These are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch4_proof_authority_runtime.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD fixture[\"Public fixture manifest 14 mechanism rows + 14 negative cases\"] bundle[\"Exported public bundle 19 copied source modules\"] runtime[\"Set 4 runtime run / validate-bundle\"] anchors[\"Per-mechanism source check module present + required anchors in body\"] scan[\"Erdos #257 static scan reject sorry / admit / axiom\"] probe[\"Optional Lean/Lake probe copied kernel elaborates? availability only\"] negatives[\"Negative cases recomputed verdict derived from source, not declared\"] result records[\"metadata-only result records refs, digests, anchors, counts, verdicts\"] ceiling[\"Scope limit authority delta = none\"] leanWitness[\"Sibling Lean/Lake components actually run local proofs\"] fixture --> runtime bundle --> runtime runtime --> anchors runtime --> scan scan --> probe runtime --> negatives anchors --> result records scan --> result records probe --> result records negatives --> result records result records --> ceiling leanWitness -. \"separate execution evidence\" .-> ceiling",
       "source_hash": "sha256:98f5eaa11a715e1d2414b66a3fb9694c60d077342dd674dbc1bae2f9e288ef3d",
       "html_url": "docs/paper-modules.html#paper-module-batch4-proof-authority-runtime-diagram-1",
       "html_anchor": "paper-module-batch4-proof-authority-runtime-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch4_proof_authority_runtime.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Necula, 1997",
       "url": "https://en.wikipedia.org/wiki/Proof-carrying_code",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 5,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.formal_math_readiness_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Formal Math Readiness Gate",
         "url": "paper-modules.html#paper-module-formal-math-readiness-gate"
        },
        {
         "id": "paper_module.proof_derived_governed_mutation_authorization",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Proof-Derived Governed Mutation Authorization",
         "url": "paper-modules.html#paper-module-proof-derived-governed-mutation-authorization"
        },
        {
         "id": "paper_module.mission_transaction_work_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Mission Transaction Work Spine",
         "url": "paper-modules.html#paper-module-mission-transaction-work-spine"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch4_proof_authority_runtime",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Proof / Control / Runtime Import Bundle",
         "url": "components.html#component-batch4_proof_authority_runtime"
        },
        {
         "id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public proof authority runtime bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch4_proof_authority_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 18432
    },
    {
     "id": "paper_module.batch6_unsurfaced_primitives_capsule",
     "title": "Set 6 Unsurfaced Primitives Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch6-unsurfaced-primitives-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 6 Unsurfaced Primitives Bundle imports provenance, operator-handoff, market, finance, provider-recovery, and demo-take source primitives as public source-open evidence without granting live operator memory, market, provider, media, public sharing, or launch-scope decision.",
     "summary": "Set 6 Unsurfaced Primitives Bundle binds the accepted batch6_unsurfaced_primitives_capsule component to source-open primitive exercises. It checks source note keyphrase scoring, schema-loose distillation, operator handoff linkage, observed-turn window merging, market situation graphs, finance numeric assurance, fail-closed policy judgment, clone-local concurrency, market-clock scheduling, provider-recovery scoping, and demo-take temporal remapping while preserving public fixture inputs, exact-source digest expectations, negative cases, and scope limits.",
     "authority_ceiling": "Fixture-bound public source-body import, copied-module digest/anchor evidence, synthetic source-exercise evidence, and metadata-only result records only; no live operator memory, prompt-shelf capture authority, live market data, provider/browser state, media launch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
     "abstract": "Set 6 Unsurfaced Primitives Bundle imports provenance, operator-handoff, market, finance, provider-recovery, and demo-take source primitives as public source-open evidence without granting live operator memory, market, provider, media, public sharing, or launch-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "Set 6 Unsurfaced Primitives Bundle imports provenance, operator-handoff, market, finance, provider-recovery, and demo-take source primitives as public source-open evidence without granting live operator memory, market, provider, media, public sharing, or launch-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This component imports the Set-6 source primitives that the scout identified as real but under-surfaced. It is a source-open bundle: exact copied source source bodies plus bounded public exercises and stable negative cases.\n\nThe bundle covers text structuring, provenance reconciliation, epistemic display guards, governance policy judgment, clone-local concurrency, market-clock scheduling, provider recovery scoping, and demo-take temporal remapping. It does not import raw operator transcripts, prompt-shelf private logs, browser/provider state, live market data, account secrets, audio, video, or public sharing state.\n\n###### Purpose\n\nA scout found eleven small primitives scattered across the wider system that were real and load-bearing but had never been surfaced as public evidence. They are the sort of utility code that quietly decides whether a larger feature is correct: a finance unit-scale check, a clock that fires market events once per session, a function that subtracts paused time from a recorded video offset. This bundle exists to bring those eleven into the public system without pretending they are anything grander than they are.\n\nThe single question it answers is narrow but useful: do the copied bodies still behave as claimed? It is easy to copy a function into a public bundle, check its file hash, and call that proof. That only shows the bytes match. It says nothing about whether the logic is right. This bundle goes one step further. For each primitive it imports the copied body and runs it on a small public synthetic input, then asserts the specific output the real code should produce.\n\nThe unusual part is that the eleven primitives are checked by execution, not by description. The Markdown prose and the JSON bundle say what each one is meant to do; the component proves it by calling the real function and comparing the answer. Each primitive also carries a paired negative case, a deliberately malformed input that the code must reject or correct, so the bundle shows both the working path and the guard. No private bodies, transcripts, or live data enter the result records; only refs, digests, anchor names, and the pass or fail of each exercise.\n\n###### Prior Art Grounding\n\nThis bundle borrows from provenance modeling, risk-governance frameworks, policy-engine design, and temporal modeling. Useful anchors include:\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), for reconciling derived artifacts back to entities, activities, and responsible agents.\n- NIST's [AI Risk Management Framework](https://www.nist.gov/itl/ai-risk-management-framework), as a governance vocabulary for mapping, measuring, and managing system risk without turning every guard into a launch claim.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), which separates policy evaluation from application code through a general-purpose policy engine.\n- Martin Fowler's [bitemporal history](https://martinfowler.com/articles/bitemporal-history.html), as a prior pattern for preserving event time separately from record time.\n\nMicrocosm borrows the provenance, governance, policy-evaluation, and temporal separation patterns, but keeps this bundle at source-open public fixtures. It does not expose private operator memory, live market data, provider state, or publishing-scope decision.\n\n###### Shape\n\nStart from the bundle JSON, not from this prose. The source row `core/paper_module_capsules.json::paper_modules[78:paper_module.batch6_unsurfaced_primitives_capsule]` is the authority for the component subject, mechanism subject, concept edge, principle and axiom refs, dependency modules, runtime locus, generated projection statuses, and the scope limit. The generated JSON instance is `paper_modules/batch6_unsurfaced_primitives_capsule.json`; it is the parity projection that carries `source_authority: json_capsule`, the resolved relationship edges, the generated Mermaid and Atlas statuses, and the explicit scope boundaries.\n\nSource refs\n\nJSON bundle source row `core/paper_module_capsules.json` `paper_module.batch6_unsurfaced_primitives_capsule` Generated JSON instance source basis: source record `paper_modules/batch6_unsurfaced_primitives_capsule.json` `paper_modules/batch6_unsurfaced_primitives_capsule.md` Standards std_microcosm public Microcosm boundary `standards/std_microcosm_batch6_unsurfaced_primitives_capsule.json` Runtime/source loci runtime_shell and source_engines_gallery routes `src/microcosm_core/organs/batch6_unsurfaced_primitives_capsule.py` Fixtures, examples, source bundle `fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input` `examples/.../exported_batch6_unsurfaced_primitives_capsule_bundle` `source_module_manifest.json` Tests and result records `tests/test_batch6_unsurfaced_primitives_capsule.py` `receipts/first_wave/... validation/result/board` `receipts/acceptance/... fixture_acceptance.json` Diagram source\n\n```text\nflowchart LR Bundle[\"JSON bundle source row core/paper_module_capsules.json paper_module.batch6_unsurfaced_primitives_capsule\"] Instance[\"Generated JSON instance paper_modules/batch6_unsurfaced_primitives_capsule.json source basis: source record\"] Markdown[\"Markdown reader projection paper_modules/batch6_unsurfaced_primitives_capsule.md\"] Standards[\"Standards standards/std_microcosm_batch6_unsurfaced_primitives_capsule.json std_microcosm public Microcosm boundary\"] Runtime[\"Runtime/source loci src/microcosm_core/components/batch6_unsurfaced_primitives_capsule.py runtime_shell and macro_engines_gallery routes\"] Fixtures[\"Fixtures, examples, source bundle fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input examples/.../exported_batch6_unsurfaced_primitives_capsule_bundle source_module_manifest.json\"] Result records[\"Tests and result records tests/test_batch6_unsurfaced_primitives_capsule.py result records/first_wave/... validation/result/board result records/sign-off/... fixture_acceptance.json\"] Projections[\"Generated navigation projections Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] Ceiling[\"Scope limit fixture-bound public source-body import digest/anchor checks, synthetic exercises, negative cases, metadata-only result records only\"] Forbidden[\"Not authorized live operator memory, prompt capture authority, live market data, provider/browser state, media launch, source-file changes, public sharing or launch-scope decision, private-system equivalence, whole-system correctness\"] Bundle -->|seeds| Instance Bundle -->|bounds| Markdown Bundle -->|names standard contract and ceiling| Standards Bundle -->|cites resolved code locus| Runtime Runtime -->|runs fixture and bundle validators| Result records Fixtures -->|public inputs and exact copied source bodies| Runtime Fixtures -->|26 copied modules; sha256 and anchor checks; body_in_receipt false| Result records Instance -->|derives relationship edges| Projections Projections -->|navigation projection only| Markdown Standards -->|public/private and launch boundary| Ceiling Result records -->|pass/fail evidence remains bounded by| Ceiling Ceiling -->|excludes| Forbidden Markdown -->|must not outrank| Bundle\n```\n\nThe module is \"actual\" only because the reader can traverse these concrete surfaces:\n- **Bundle/source row:** `paper_module.batch6_unsurfaced_primitives_capsule` binds the accepted `batch6_unsurfaced_primitives_capsule` component, the `mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule` mechanism, `concept.import_projection_and_drift_control_bundle`, principles `P-2`, `P-5`, `P-9`, `P-15`, axioms `AX-4`, `AX-8`, `AX-10`, `AX-11`, and the dependency modules named in the structured lattice table below.\n- **Generated instance:** `paper_modules/batch6_unsurfaced_primitives_capsule.json` reports active status, `public_paper_module_json_seeded_from_capsule_registry_not_legacy_markdown_authority`, generated Mermaid `available_from_capsule_edges`, generated Atlas `linked_from_capsule_edges`, no unpopulated selective relations, and scope boundaries that the row is not runtime-correctness, launch-readiness, or whole-system authority.\n- **Standards:** `standards/std_microcosm_batch6_unsurfaced_primitives_capsule.json` is the specific public bundle standard, backed by `std_microcosm` for the wider Microcosm entry and public/private boundary. It allows public mechanism ids, source refs, digests, anchors, exact copied source modules, synthetic outcomes, scope limits, and scope boundaries; it forbids account secrets, account or browser state, model-output data bodies, browser UI live-access material, raw operator transcripts, prompt-shelf private logs, live market data responses, media assets, and public sharing operation state.\n- **Runtime/source loci:** the resolved locus is `src/microcosm_core/organs/batch6_unsurfaced_primitives_capsule.py`, with the runtime shell bundle-validation route and source-engines gallery route as readers over the same public component. The source bundle manifest records 26 copied source bodies with exact-copy source-to-target relations, SHA-256 matches, required anchors, and `body_in_receipt: false`.\n- **Fixtures/examples/source bundle:** fixture inputs live under `fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input`; the exported bundle lives under `examples/batch6_unsurfaced_primitives_capsule/exported_batch6_unsurfaced_primitives_capsule_bundle`; `source_module_manifest.json` is the source-open body-floor manifest for copied modules and metadata-only result record handling.\n- **Tests/result records:** `tests/test_batch6_unsurfaced_primitives_capsule.py` covers the runtime component, copied subengine proofs, exact-copy imports, bundle shape, and private body omission. Result record authority is the fixture sign-off row plus `receipts/first_wave/batch6_unsurfaced_primitives_capsule/batch6_unsurfaced_primitives_capsule_result.json`, `batch6_unsurfaced_primitives_capsule_board.json`, `batch6_unsurfaced_primitives_capsule_validation_receipt.json`, and result records/sign-off/first_wave/batch6_unsurfaced_primitives_capsule_fixture_acceptance.json; the validation result record reports pass for source-module manifest status, exercise status, negative-case status, secret exclusion, and result record body scan.\n- **Scope limit:** this page can claim fixture-bound public source-body import, copied-module digest/anchor evidence, synthetic source-exercise evidence, negative-case coverage, and metadata-only result records only. It cannot claim live operator memory, prompt-shelf capture authority, live market data, provider/browser state, media launch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.\n\n###### Source Modules\n\nThe exported bundle copies the relevant source sources under `examples/batch6_unsurfaced_primitives_capsule/exported_batch6_unsurfaced_primitives_capsule_bundle/source_modules/`. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.\n\n###### Reader Evidence Routing\n\nRead this module through the fixture command, exported-bundle validation, focused pytest, structured source record, and result record paths. The fixture proves a public source-open Set-6 exercise, while the bundle proves copied source digests, anchors, synthetic source exercises, negative cases, copied-subengine proofs, and metadata-only cards. The generated structured source record proves that Mermaid and Atlas availability come from bundle edges.\n\nThe validator's mechanism set remains evidence for the accepted Set-6 component result record. It does not turn this page into live operator memory, prompt-shelf capture authority, trading decisions, live provider recovery, browser state, demo media launch, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Mechanism Set\n\nThe validator requires exactly these 11 mechanism rows: source note keyphrase engine, schema-loose distillation index, operator handoff linkage, observed-turn window merge, market situation graph, finance numeric assurance, fail-closed status judge, idea-microcosm concurrency guard, metabolism market clock, population-lane provider recovery, and demo-take temporal join.\n\nThe source module manifest requires 14 exact copied source source/support modules. The fixture requires 11 stable negative cases, one per mechanism row. The command card is the intended cold-reader first surface; the full result record is the drilldown.\n\n###### How it works\n\nFor each mechanism the component loads the copied source body, runs it on a fixed public synthetic input, and checks the exact result. A few of the exercises make the idea concrete.\n- **Demo-take temporal join.** `video_t_seconds` converts a wall-clock offset into a position in a recorded video by subtracting elapsed paused time. The exercise feeds it a 120-second wall offset with one pause and resume fifteen seconds apart, and asserts the result is exactly 105.0. A second call with a pause that has not yet resumed checks the open-pause branch returns 15.0. The negative case confirms a still-open pause is handled rather than ignored.\n- **Finance numeric assurance.** `build_finance_numeric_assurance` recomputes declared numbers instead of trusting them. The exercise hands it a flow row tagged `usd_millions` whose `flow` and `flow_usd` fields disagree by orders of magnitude, plus a probability declared as 70.2. The check raises `stockgrid_flow_unit_scale_mismatch` and `probability_bounds`, and the result record's `display_state` becomes `blocked` rather than `trusted`. The point is that a mislabelled unit or an out-of-range probability fails closed.\n- **Operator handoff linkage.** `score_pair` compares an agent's suggestion (a Type B capture) against what the operator later typed (a Type A input) using containment, token overlap, and anchor matching. The exercise scores a related pair above the 0.8 floor with containment true, then scores an unrelated \"summarize the weather\" input and asserts it falls below 0.3. This is how the primitive tells a real handoff from a coincidence.\n- **Market-clock scheduling.** `due_fire_points` decides which scheduled market events are due at a given moment. The exercise sets the clock to 15:31 UTC with the open event already fired earlier that day, then asserts the hourly points fire while the already-fired open event is suppressed. The guard is idempotence: an event that already fired must not fire again in the same session.\n\nThe other mechanisms follow the same shape: keyphrase ranking returns ranked phrases for real text but an empty list for stopword-only input; the schema-loose distiller keeps assistant text and operator tail as separate roles without persisting either body; the fail-closed status judge blocks a transition when its policy is malformed; the concurrency guard reports that a parent directory and a child path overlap. Every exercise records only its pass or fail and a few summary numbers, never the copied body it ran against.\n\n###### Copied-Subengine Proofs\n\nThe post-Set-12 proof surface exercises two copied dormant subengines directly from the exported source bundle:\n- `operator_thread_memory` is loaded from the copied manifest and checked with synthetic observed-window cases for `observed_window_within_memory` and `preserved_existing_no_overlap`.\n- `market_situation_graph` is loaded from the same copied bundle and checked with a public synthetic mart that covers fixture scoring, counterevidence, context rows, and source refs.\n\nThese are public test-level proofs in `tests/test_batch6_unsurfaced_primitives_capsule.py`. They do not add an accepted component, do not widen the fixture scope limit, and do not export private thread memory or live market data.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the Set-6 public primitive-import result record and sign-off JSON. The bundle command validates copied source digests, anchor evidence, synthetic source exercises, negative cases, and metadata-only cards. The focused test covers the runtime component, copied subengine proofs, exported bundle shape, exact-copy imports, and private body omission. The corpus and projection checks prove only that the generated paper-module instance remains fresh for this bundle-backed Markdown state.\n\nThis result record path is public fixture evidence only. It does not establish live operator memory, capture authority, live market data, provider/browser state, media launch, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is not live operator memory, not capture authority, not trading decisions, not live provider recovery, not demo media launch, not publishing-scope decision, and not launch-scope decision. It is an exact-source public bundle with digest checks, source exercises, and negative-case coverage.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 17095,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A scout found eleven small primitives scattered across the wider system that were real and load-bearing but had never been surfaced as public evidence. They are the sort of utility code that quietly decides whether a larger feature is correct: a finance unit-scale check, a clock that fires market events once per session, a function that subtracts paused time from a recorded video offset. This bundle exists to bring those eleven into the public system without pretending they are anything grander than they are. The single question it answers is narrow but useful: do the copied bodies still behave as claimed? It is easy to copy a function into a public bundle, check its file hash, and call tha\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This bundle borrows from provenance modeling, risk-governance frameworks, policy-engine design, and temporal modeling. Useful anchors include: W3C PROV, for reconciling derived artifacts back to entities, activities, and responsible agents. NIST's AI Risk Management Framework, as a governance vocabulary for mapping, measuring, and managing system risk without turning every guard into a launch claim. Open Policy Agent, which separates policy evaluation from application code through a general-purpose policy engine. Martin Fowler's bitemporal history, as a prior pattern for preserving event time separately from record time. Microcosm borrows the provenance, governance, policy-evaluation, and t\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "Start from the bundle JSON, not from this prose. The source row core/papermodulecapsules.json::papermodules[78:papermodule.batch6unsurfacedprimitives_capsule] is the authority for the component subject, mechanism subject, concept edge, principle and axiom refs, dependency modules, runtime locus, generated projection statuses, and the scope limit. The generated JSON instance is papermodules/batch6unsurfacedprimitivescapsule.json; it is the parity projection that carries sourceauthority: jsoncapsule, the resolved relationship edges, the generated Mermaid and Atlas statuses, and the explicit scope boundaries. The module is \"actual\" only because the reader can traverse these concrete surfaces:\u2026",
       "block_kinds": [
        "diagram",
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the Set-6 public primitive-import result record and sign-off JSON. The bundle command validates copied source digests, anchor evidence, synthetic source exercises, negative cases, and metadata-only cards. The focused test covers the runtime component, copied subengine proofs, exported bundle shape, exact-copy imports, and private body omission. The corpus and projection checks prove only that the generated paper-module instance remains fresh for this bundle-backed Markdown state. This result record path is public fixture evidence only. It does not establish live operator memory, capture aut\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is not live operator memory, not capture authority, not trading decisions, not live provider recovery, not demo media launch, not public sharing decision, and not launch-scope decision. It is an exact-source public bundle with digest checks, source exercises, and negative-case coverage.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-modules",
       "title": "Source Modules",
       "level": 2,
       "excerpt": "The exported bundle copies the relevant source sources under examples/batch6unsurfacedprimitivescapsule/exportedbatch6unsurfacedprimitivescapsulebundle/source_modules/. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read this module through the fixture command, exported-bundle validation, focused pytest, structured source record, and result record paths. The fixture proves a public source-open Set-6 exercise, while the bundle proves copied source digests, anchors, synthetic source exercises, negative cases, copied-subengine proofs, and metadata-only cards. The generated structured source record proves that Mermaid and Atlas availability come from bundle edges. The validator's mechanism set remains evidence for the accepted Set-6 component result record. It does not turn this page into live operator memory, prompt-shelf capture authority, trading decisions, live provider recovery, browser state, demo me\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "mechanism-set",
       "title": "Mechanism Set",
       "level": 2,
       "excerpt": "The validator requires exactly these 11 mechanism rows: source note keyphrase engine, schema-loose distillation index, operator handoff linkage, observed-turn window merge, market situation graph, finance numeric assurance, fail-closed status judge, idea-microcosm concurrency guard, metabolism market clock, population-lane provider recovery, and demo-take temporal join. The source module manifest requires 14 exact copied source source/support modules. The fixture requires 11 stable negative cases, one per mechanism row. The command card is the intended cold-reader first surface; the full result record is the drilldown.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "how-it-works",
       "title": "How it works",
       "level": 2,
       "excerpt": "For each mechanism the component loads the copied source body, runs it on a fixed public synthetic input, and checks the exact result. A few of the exercises make the idea concrete. Demo-take temporal join. videotseconds converts a wall-clock offset into a position in a recorded video by subtracting elapsed paused time. The exercise feeds it a 120-second wall offset with one pause and resume fifteen seconds apart, and asserts the result is exactly 105.0. A second call with a pause that has not yet resumed checks the open-pause branch returns 15.0. The negative case confirms a still-open pause is handled rather than ignored. Finance numeric assurance. buildfinancenumeric_assurance recomputes\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "copied-subengine-proofs",
       "title": "Copied-Subengine Proofs",
       "level": 2,
       "excerpt": "The post-Set-12 proof surface exercises two copied dormant subengines directly from the exported source bundle: operatorthreadmemory is loaded from the copied manifest and checked with synthetic observed-window cases for observedwindowwithinmemory and preservedexistingnooverlap. marketsituationgraph is loaded from the same copied bundle and checked with a public synthetic mart that covers fixture scoring, counterevidence, context rows, and source refs. These are public test-level proofs in tests/testbatch6unsurfacedprimitivescapsule.py. They do not add an accepted component, do not widen the fixture scope limit, and do not export private thread memory or live market data.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch6_unsurfaced_primitives_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR Bundle[\"JSON bundle source row core/paper_module_capsules.json paper_module.batch6_unsurfaced_primitives_capsule\"] Instance[\"Generated JSON instance paper_modules/batch6_unsurfaced_primitives_capsule.json source basis: source record\"] Markdown[\"Markdown reader projection paper_modules/batch6_unsurfaced_primitives_capsule.md\"] Standards[\"Standards standards/std_microcosm_batch6_unsurfaced_primitives_capsule.json std_microcosm public Microcosm boundary\"] Runtime[\"Runtime/source loci src/microcosm_core/components/batch6_unsurfaced_primitives_capsule.py runtime_shell and macro_engines_gallery routes\"] Fixtures[\"Fixtures, examples, source bundle fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input examples/.../exported_batch6_unsurfaced_primitives_capsule_bundle source_module_manifest.json\"] Result records[\"Tests and result records tests/test_batch6_unsurfaced_primitives_capsule.py result records/first_wave/... validation/result/board result records/sign-off/... fixture_acceptance.json\"] Projections[\"Generated navigation projections Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] Ceiling[\"Scope limit fixture-bound public source-body import digest/anchor checks, synthetic exercises, negative cases, metadata-only result records only\"] Forbidden[\"Not authorized live operator memory, prompt capture authority, live market data, provider/browser state, media launch, source-file changes, public sharing or launch-scope decision, private-system equivalence, whole-system correctness\"] Bundle -->|seeds| Instance Bundle -->|bounds| Markdown Bundle -->|names standard contract and ceiling| Standards Bundle -->|cites resolved code locus| Runtime Runtime -->|runs fixture and bundle validators| Result records Fixtures -->|public inputs and exact copied source bodies| Runtime Fixtures -->|26 copied modules; sha256 and anchor checks; body_in_receipt false| Result records Instance -->|derives relationship edges| Projections Projections -->|navigation projection only| Markdown Standards -->|public/private and launch boundary| Ceiling Result records -->|pass/fail evidence remains bounded by| Ceiling Ceiling -->|excludes| Forbidden Markdown -->|must not outrank| Bundle",
       "source_hash": "sha256:47412d0482125e4117e7f8c0c59ab75fc007ff979097422f66c5d3f94b3f22dc",
       "html_url": "docs/paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule-diagram-1",
       "html_anchor": "paper-module-batch6-unsurfaced-primitives-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch6_unsurfaced_primitives_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "AI Risk Management Framework",
       "url": "https://www.nist.gov/itl/ai-risk-management-framework",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs/latest",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "bitemporal history",
       "url": "https://martinfowler.com/articles/bitemporal-history.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 4,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        },
        {
         "id": "paper_module.agent_route_observability_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Agent Route Observability Runtime",
         "url": "paper-modules.html#paper-module-agent-route-observability-runtime"
        },
        {
         "id": "paper_module.batch12_market_dashboard_read_model_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 12 Market Dashboard Read-Model Bundle",
         "url": "paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule"
        },
        {
         "id": "paper_module.batch7_demo_take_console_capsule",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Set 7 Demo Take Console Bundle",
         "url": "paper-modules.html#paper-module-batch7-demo-take-console-capsule"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch6_unsurfaced_primitives_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Unsurfaced Source Primitives Bundle",
         "url": "components.html#component-batch6_unsurfaced_primitives_capsule"
        },
        {
         "id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public unsurfaced primitives bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch6_unsurfaced_primitives_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 18641
    },
    {
     "id": "paper_module.engine_room_public_projection_leak_gate",
     "title": "Engine Room Public Projection Leak Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-public-projection-leak-gate",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-public-projection-leak-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-public-projection-leak-gate",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The Engine Room public projection leak gate validates rendered public projection roots for account secret-shaped strings, non-public paths shapes, symlink escapes, policy-exception handling, and optional gitleaks status while keeping findings hash-only.",
     "summary": "Engine Room Public Projection Leak Gate is a DLP-style projection boundary. It scans rendered public projection files and paths, checks symlink escapes, records policy-exception hits as hash-only evidence, reports optional gitleaks status, and validates two positive plus three negative fixture cases without copying sensitive payloads, approving launch, or claiming general security, prompt-injection, sandbox, or information-flow authority.",
     "authority_ceiling": "Public projection leak-gate fixture and rendered-root scan result records only; no general security scanner, prompt-injection defense, sandbox, information-flow proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "abstract": "The Engine Room public projection leak gate validates rendered public projection roots for account secret-shaped strings, non-public paths shapes, symlink escapes, policy-exception handling, and optional gitleaks status while keeping findings hash-only.",
     "teleology": {
      "section_id": "",
      "text": "The Engine Room public projection leak gate validates rendered public projection roots for account secret-shaped strings, non-public paths shapes, symlink escapes, policy-exception handling, and optional gitleaks status while keeping findings hash-only.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This staged Engine Room bundle imports the runnable core of the source projection leak scan into Microcosm as a refactor.\n\n###### Purpose\n\nBefore a rendered set of files is exposed to a public reader, someone has to answer a narrow question: does this tree contain anything that should not leave the private workspace? account secret-shaped strings, a private home path, a provider-transport symbol, or a symlink that points outside the tree are all ways for private material to ride along with an otherwise public projection. This gate answers that one question over a directory of rendered files and returns a `green` or `red` verdict.\n\nThe interesting part is what the gate does with what it finds. A secret scanner that prints the secret it discovered into its own report has created a second copy of the leak. This gate never does that. Every match is recorded by category, path, line number, and a SHA-256 hash of the matched text, and the matched value itself is dropped (`_hit` builds the record without it). The verdict is auditable, the counts are honest, and the result record is itself safe to publish. A reviewer can confirm that a leak was found and where, without the report becoming the thing that leaks.\n\nThe gate is deliberately small and deterministic. It reads files and path names against a fixed set of regular expressions, treats a symlink that escapes the root as a hard blocker, and folds an optional `gitleaks` run into the same result record. It does not parse the files, follow data flow, or reason about intent. It is a data-loss-prevention boundary for one rendered tree, not a general security scanner, and the page is careful to keep it framed that way.\n\n###### What It Demonstrates\n- Content scans for account secret-shaped strings and private host-bound path markers.\n- Path scans for private raw-voice, task-history, prompt-history, Obsidian, and provider-transport path shapes.\n- Policy-exception paths remain visible as hash-only hits while avoiding a blocking verdict.\n- Symlink escapes are hard blockers with target hashes only.\n- Optional gitleaks execution records pass, red, unavailable, or fail-closed status without copying findings into the result record.\n\n###### Shape\n\nSource refs\n\nred result record `public_release_allowed_by_scan = false` Diagram source\n\n```text\nflowchart TD Root[\"Rendered projection root walk files and path names\"] Root --> Content[\"Content scan account secret and private-path regexes\"] Root --> PathScan[\"Path-name scan source note, ledger, Obsidian, transport\"] Root --> Symlink{\"Symlink escapes root?\"} Root --> Gitleaks[\"Optional gitleaks run pass / red / unavailable / fail-closed\"] Content --> Hash[\"Findings as hash-only records category, path, line, match_sha256 matched value dropped\"] PathScan --> Hash Hash --> Split{\"Path in policy exception list?\"} Split -- \"yes\" --> Allowed[\"Policy exception retained, non-blocking\"] Split -- \"no\" --> Blocking[\"Blocking hit\"] Verdict{\"Any blocking hit, symlink escape, or gitleaks red / fail-closed?\"} Blocking --> Verdict Symlink -- \"yes\" --> Verdict Gitleaks --> Verdict Allowed --> Green Verdict -- \"yes\" --> Red[\"red result record public_release_allowed_by_scan = false\"] Verdict -- \"no\" --> Green[\"green result record no blocker found in this scan\"]\n```\n\nThe shape is intentionally narrow. The gate reads rendered public files, file paths, policy-exception paths, symlinks, and optional gitleaks output; it emits counts and hashed evidence. It does not ingest source notes, private source bodies, model-output data, browser state, account state, browser UI/operator UI state, or recipient-send state.\n\n###### Technical Mechanism\n\nThe proof consumer is the runtime function `scan_projection(root, policy_exception_paths, run_gitleaks_check, require_gitleaks, gitleaks_binary)` in `src/microcosm_core/engine_room/public_projection_leak_gate.py`. It first resolves the supplied projection root and rejects a missing or non-directory root. It then normalizes policy-exception paths against `DEFAULT_POLICY_EXCEPTION_PATHS`, walks the rendered tree in stable path order, skips declared cache/build directories and bytecode suffixes, and treats symlink escapes as hard blockers while recording only the relative path and a hash of the escaped target.\n\nFor each non-skipped path, `_scan_path` checks private-history, raw-voice, Obsidian, and browser/provider transport path shapes. For each readable file, `_scan_file` applies `CONTENT_PATTERNS` for account secret-like strings, private home paths, private Chrome profile paths, private Obsidian markers, provider transport symbols, and browser debug ports. `_hit` stores the category, pattern, relative path, optional line number, source kind, policy-exception status, and `match_sha256`; it intentionally omits the matched value. The result record then splits hits into blocking and policy-exception sets, summarizes category counts, attaches optional `run_gitleaks` status, and derives `green` or `red` through `_overall_status`.\n\nThe focused fixture consumer is `evaluate_fixture_dir`, which materializes each JSON fixture into a temporary projection root and checks its expected status. `tests/test_engine_room_public_projection_leak_gate.py` exercises the same mechanism through unit cases and CLI result record output: clean projections stay green, private home paths and key-shaped strings go red without raw value leakage, policy-exception examples remain hash-only and non-blocking, required missing gitleaks fails closed, and the five-case fixture matrix returns `status: pass`.\n\n###### Prior Art Grounding\n\nThe component is grounded in data-loss-prevention and secret-scanning practice: scan artifacts before public sharing, detect account secret-shaped strings and non-public paths markers, preserve enough evidence for triage, and avoid copying the sensitive payload into the report. Relevant anchors include:\n- NIST's [Data Loss Prevention](https://www.nist.gov/publications/data-loss-prevention) public sharing, which frames leakage prevention around sensitive data leaving an enterprise boundary.\n- [GitHub secret scanning](https://docs.github.com/en/code-security/concepts/secret-security/about-secret-scanning), which raises alerts when account secret-like material appears in repositories.\n- [Gitleaks](https://github.com/gitleaks/gitleaks), a public scanner for hardcoded secrets in Git repositories and files.\n\nMicrocosm borrows the pre-public sharing leak-gate and secret-scanner shape, then narrows it to public projection artifacts: account secret-shaped content, non-public paths signatures, symlink escapes, policy exceptions, and optional gitleaks status. It is not a full security scanner or information-flow proof.\n\n###### Reader Evidence Routing\n\nRead `status: green` as \"this scan did not find a blocking leak in the supplied projection root.\" Do not read it as publishing-scope decision. The runtime's `public_release_allowed_by_scan` field means the projection passed this one DLP gate only; launch-scope decision, source-open authority, hosted-product authority, formal-result correctness authority, and private-system equivalence all remain false.\n\nRead `policy_exception_count` as \"the gate saw known boundary-document examples and retained hash-only evidence without blocking.\" Do not read it as permission to place non-public paths or account secret-shaped payloads in arbitrary public files.\n\nRead `gitleaks_status: unavailable` as an explicit optional-tool result record, not a green external scanner result. When `require_gitleaks` is true, missing gitleaks fails closed.\n\n###### Public Exercise\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.public_projection_leak_gate evaluate-fixtures --input fixtures/first_wave/engine_room_public_projection_leak_gate/input --json\n```\n\nThe fixture manifest names two positive cases (`clean_projection`, `policy_exception_hash_only`) and three negative cases (`planted_private_path`, `planted_key_shape`, `path_pattern_blocked`). The expected result record is `status: pass`, `case_count: 5`, and `passed_case_count: 5`.\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_public_projection_leak_gate.py -q --basetemp /tmp/microcosm-public-projection-leak-gate\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves only that the public fixture behavior and governed paper-module projection remain reproducible; it does not create an accepted component, approve launch, or prove whole-system public-safety.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is a DLP-style public projection gate. It is not a general security scanner, not prompt-injection defense, not sandboxing, not an information-flow proof, and not launch-scope decision.\n\n###### Limitations\n\nThis module is a deterministic projection scanner over the files it is given. It does not establish that the supplied root is the complete public site, that a builder selected the correct export set, or that a later public sharing step will reuse the same artifacts. Regex- and path-pattern detection can miss encoded, split, transformed, novel, or tool-specific secrets, and it can also flag benign boundary examples when they are not routed through the explicit policy-exception path list.\n\nOptional gitleaks integration is result record evidence only when the tool is available or required by the caller. `gitleaks_status: unavailable` is not an external scanner pass, and `public_release_allowed_by_scan: true` means only that this gate found no blockers in this scan. launch-scope decision, source-open authority, accepted-component status, aggregate doctrine-lattice coherence, private-system equivalence, and whole-system security remain outside this proof consumer.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe source authority for this paper-module projection is the JSON source record `core/paper_module_capsules.json::paper_modules[80:paper_module.engine_room_public_projection_leak_gate]`, projected into `paper_modules/engine_room_public_projection_leak_gate.json`. That row names the mechanism subject `mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate`, the code locus `src/microcosm_core/engine_room/public_projection_leak_gate.py`, the governing concept `concept.import_projection_and_drift_control_bundle`, six principle refs (`P-1`, `P-2`, `P-6`, `P-8`, `P-9`, `P-15`), five axiom refs (`AX-1`, `AX-5`, `AX-7`, `AX-8`, `AX-11`), and the dependency on `paper_module.engine_room_demo`.\n\nThe standard `standards/std_microcosm_engine_room_public_projection_leak_gate.json` narrows that lattice edge by declaring the staged-bundle authority boundary, the two positive and three negative fixture classes, the public target refs, the validator command, and the scope boundary that a green leak-gate result record is not a general security scanner, prompt-injection defense, sandbox, information-flow proof, launch-scope decision, or private-system equivalence claim.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 11216,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Before a rendered set of files is exposed to a public reader, someone has to answer a narrow question: does this tree contain anything that should not leave the private workspace? account secret-shaped strings, a private home path, a provider-transport symbol, or a symlink that points outside the tree are all ways for private material to ride along with an otherwise public projection. This gate answers that one question over a directory of rendered files and returns a green or red verdict. The interesting part is what the gate does with what it finds. A secret scanner that prints the secret it discovered into its own report has created a second copy of the leak. This gate never does that. E\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-demonstrates",
       "title": "What It Demonstrates",
       "level": 2,
       "excerpt": "Content scans for account secret-shaped strings and private host-bound path markers. Path scans for private raw-voice, task-history, prompt-history, Obsidian, and provider-transport path shapes. Policy-exception paths remain visible as hash-only hits while avoiding a blocking verdict. Symlink escapes are hard blockers with target hashes only. Optional gitleaks execution records pass, red, unavailable, or fail-closed status without copying findings into the result record.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is intentionally narrow. The gate reads rendered public files, file paths, policy-exception paths, symlinks, and optional gitleaks output; it emits counts and hashed evidence. It does not ingest source notes, private source bodies, model-output data, browser state, account state, browser UI/operator UI state, or recipient-send state.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The proof consumer is the runtime function `scanprojection(root, policyexceptionpaths, rungitleaks_check, requiregitleaks, gitleaksbinary)` in src/microcosmcore/engineroom/publicprojectionleak_gate.py. It first resolves the supplied projection root and rejects a missing or non-directory root. It then normalizes policy-exception paths against DEFAULTPOLICYEXCEPTION_PATHS, walks the rendered tree in stable path order, skips declared cache/build directories and bytecode suffixes, and treats symlink escapes as hard blockers while recording only the relative path and a hash of the escaped target. For each non-skipped path, scanpath checks private-history, raw-voice, Obsidian, and browser/provide\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The source authority for this paper-module projection is the JSON source record core/papermodulecapsules.json::papermodules[80:papermodule.engineroompublicprojectionleak_gate], projected into papermodules/engineroompublicprojectionleakgate.json. That row names the mechanism subject mechanism.engineroompublicprojectionleakgate.validatespublicprojectionleak_gate, the code locus src/microcosmcore/engineroom/publicprojectionleak_gate.py, the governing concept concept.importprojectionanddriftcontrol_bundle, six principle refs (P-1, P-2, P-6, P-8, P-9, P-15), five axiom refs (AX-1, AX-5, AX-7, AX-8, AX-11), and the dependency on papermodule.engineroom_demo. The standard standards/stdmicrocosmengi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is a DLP-style public projection gate. It is not a general security scanner, not prompt-injection defense, not sandboxing, not an information-flow proof, and not launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "This module is a deterministic projection scanner over the files it is given. It does not establish that the supplied root is the complete public site, that a builder selected the correct export set, or that a later public sharing step will reuse the same artifacts. Regex- and path-pattern detection can miss encoded, split, transformed, novel, or tool-specific secrets, and it can also flag benign boundary examples when they are not routed through the explicit policy-exception path list. Optional gitleaks integration is result record evidence only when the tool is available or required by the caller. gitleaks_status: unavailable is not an external scanner pass, and publicreleaseallowedbyscan\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in data-loss-prevention and secret-scanning practice: scan artifacts before public sharing, detect account secret-shaped strings and non-public paths markers, preserve enough evidence for triage, and avoid copying the sensitive payload into the report. Relevant anchors include: NIST's Data Loss Prevention public sharing, which frames leakage prevention around sensitive data leaving an enterprise boundary. GitHub secret scanning, which raises alerts when account secret-like material appears in repositories. Gitleaks, a public scanner for hardcoded secrets in Git repositories and files. Microcosm borrows the pre-public sharing leak-gate and secret-scanner shape, then\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read status: green as \"this scan did not find a blocking leak in the supplied projection root.\" Do not read it as public sharing decision. The runtime's publicreleaseallowedbyscan field means the projection passed this one DLP gate only; launch-scope decision, source-open authority, hosted-product authority, formal-result correctness authority, and private-system equivalence all remain false. Read policyexceptioncount as \"the gate saw known boundary-document examples and retained hash-only evidence without blocking.\" Do not read it as permission to place non-public paths or account secret-shaped payloads in arbitrary public files. Read gitleaks_status: unavailable as an explicit optional-to\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-exercise",
       "title": "Public Exercise",
       "level": 2,
       "excerpt": "The fixture manifest names two positive cases (clean_projection, policyexceptionhashonly) and three negative cases (plantedprivate_path, plantedkeyshape, pathpatternblocked). The expected result record is status: pass, casecount: 5, and passedcase_count: 5.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves only that the public fixture behavior and governed paper-module projection remain reproducible; it does not create an accepted component, approve launch, or prove whole-system public-safety.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_public_projection_leak_gate.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Root[\"Rendered projection root walk files and path names\"] Root --> Content[\"Content scan account secret and private-path regexes\"] Root --> PathScan[\"Path-name scan source note, ledger, Obsidian, transport\"] Root --> Symlink{\"Symlink escapes root?\"} Root --> Gitleaks[\"Optional gitleaks run pass / red / unavailable / fail-closed\"] Content --> Hash[\"Findings as hash-only records category, path, line, match_sha256 matched value dropped\"] PathScan --> Hash Hash --> Split{\"Path in policy exception list?\"} Split -- \"yes\" --> Allowed[\"Policy exception retained, non-blocking\"] Split -- \"no\" --> Blocking[\"Blocking hit\"] Verdict{\"Any blocking hit, symlink escape, or gitleaks red / fail-closed?\"} Blocking --> Verdict Symlink -- \"yes\" --> Verdict Gitleaks --> Verdict Allowed --> Green Verdict -- \"yes\" --> Red[\"red result record public_release_allowed_by_scan = false\"] Verdict -- \"no\" --> Green[\"green result record no blocker found in this scan\"]",
       "source_hash": "sha256:e3fa671efe58c604a58b4de05ea8e712615fc78b88113fe98381582d5fbf4a08",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-public-projection-leak-gate-diagram-1",
       "html_anchor": "paper-module-engine-room-public-projection-leak-gate-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_public_projection_leak_gate.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Data Loss Prevention",
       "url": "https://www.nist.gov/publications/data-loss-prevention",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "GitHub secret scanning",
       "url": "https://docs.github.com/en/code-security/concepts/secret-security/about-secret-scanning",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Gitleaks",
       "url": "https://github.com/gitleaks/gitleaks",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 5,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.engine_room_demo",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Demo",
         "url": "paper-modules.html#paper-module-engine-room-demo"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public projection leak gate",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_public_projection_leak_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 12476
    },
    {
     "id": "paper_module.batch5_authority_systems_capsule",
     "title": "Set 5 Authority and Systems Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch5-authority-systems-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch5-authority-systems-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch5-authority-systems-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 5 Authority and Systems Bundle imports post-execution authority, replay, proof-repair, process, generated-state, trace, blast-radius, and doctrine-graph source bodies as public source-open evidence without claiming live authority or launch-scope decision.",
     "summary": "Set 5 Authority and Systems Bundle binds the legacy Markdown projection, Set 5 runnable source locus, exported copied-source bundle, source-module digests, synthetic negative exercises, metadata-only result records, and scope limits to a mechanism-backed JSON bundle. It covers post-execution result record validation, reasoning replay scope and lineage, verifier-gated Lean repair harnessing, process orphan classification, generated-state fixpoint settlement, trace-tape compaction, code blast radius, and doctrine graph compilation while preserving fixture boundaries.",
     "authority_ceiling": "Fixture-bound public source-body import, copied-module digest and anchor evidence, synthetic source-exercise evidence, and metadata-only result records only; no live external model access, proof success, process signal authority, generated-state mutation authority, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
     "abstract": "Set 5 Authority and Systems Bundle imports post-execution authority, replay, proof-repair, process, generated-state, trace, blast-radius, and doctrine-graph source bodies as public source-open evidence without claiming live authority or launch-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "Set 5 Authority and Systems Bundle imports post-execution authority, replay, proof-repair, process, generated-state, trace, blast-radius, and doctrine-graph source bodies as public source-open evidence without claiming live authority or launch-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "Set 5 imports the next authority/systems contour as a bundle: post-execution result record validation, reasoning replay scope and lineage, verifier-gated Lean repair harnessing, process orphan classification, generated state fixpoint settlement, trace-tape compaction, code blast radius, and doctrine graph compilation.\n\nThe bundle carries exact copied source bodies in `examples/batch5_authority_systems_capsule/exported_batch5_authority_systems_capsule_bundle/source_modules/` and tests those copies against source-root digests and anchors. The runnable Microcosm exercise is deliberately bounded: it uses synthetic public inputs to prove the negative claim fences while preserving the real source source as the source-open system.\n\n###### Purpose\n\nThis page answers one question: can a cold reader inspect eight separate authority and systems mechanisms, and confirm each one refuses the wrong thing, without the reader having to run any of the real machinery?\n\nThe eight mechanisms are unrelated in subject. One validates post-execution result records; another decides when a reasoning step needs re-running; another gates a Lean proof attempt; another classifies a stray process; another settles generated-state residuals; another compacts a trace tape; another computes a code blast radius; another compiles a doctrine graph. What they share is a single discipline: each must decline to claim more than it has earned. The result record validator must not accept a drifted result record; the proof gate must not hand a placeholder proof to Lean; the orphan reaper must not signal a live process; the blast-radius pass must not invent coverage for a leaf with no dependents.\n\nThe unusual choice is that the bundle does not replay the real tools. It carries an exact copy of each source source body, checks those copies against the source-root digests and required anchors, and then runs a small synthetic re-derivation for each mechanism. Each re-derivation recomputes its own verdict from the fixture input rather than echoing a stored answer, so a negative case passes only when the exercise itself reaches the refusal, not when a fixture asserts it. The page is therefore a way to read eight refusal behaviours at once, with the genuine source bodies kept verifiable alongside.\n\n###### Shape\n\nSource refs\n\nRuntime component `batch5_authority_systems_capsule.py` metadata-only result records `receipts/first_wave/batch5_authority_systems_capsule` Diagram source\n\n```text\nflowchart TD Manifest[\"Copied source bundle + exercise manifest digests and required anchors checked first\"] --> Component[\"Runtime component batch5_authority_systems_capsule.py\"] Component --> E1[\"Result record validator flag provider/context/artifact drift\"] Component --> E2[\"Replay scope no_replay when changed context is disjoint\"] Component --> E3[\"Proof gate reject sorry/plan-only before Lean\"] Component --> E4[\"Orphan reaper live descendant -> requires_owner_check\"] Component --> E5[\"Fixpoint drainer residual source moved -> non-converging\"] Component --> E6[\"Trace tape over-budget -> pointer + omission result record\"] Component --> E7[\"Blast radius reverse closure; empty leaf stays empty\"] Component --> E8[\"Doctrine graph report deleted paths and tombstones\"] E1 --> Refusal[\"Shared refusal check each exercise recomputes its own verdict\"] E2 --> Refusal E3 --> Refusal E4 --> Refusal E5 --> Refusal E6 --> Refusal E7 --> Refusal E8 --> Refusal Refusal --> Result records[\"metadata-only result records result records/first_wave/batch5_authority_systems_capsule\"] Result records --> Ceiling[\"Scope limit: no external model access, mutation, proof success, launch, or private equivalence\"]\n```\n\nThe diagram starts where the runtime starts: the copied source bundle and the exercise manifest, checked against source-root digests and anchors. The component then fans out to the eight mechanism exercises, each recomputing its own pass or refusal verdict, and folds the results into metadata-only result records under a single scope limit. Generated-state mutation, external model access, proof-success claims, and launch-scope decision all stay outside that ceiling.\n\n###### What the eight exercises check\n\nEach exercise reads a small synthetic block from the fixture manifest and recomputes a verdict. None of them call a provider, run Lean, signal a process, or mutate generated state. What follows is the specific question each one answers.\n- Result record validator. Given a runtime grant and two post-execution result records, it recomputes the drift codes for the second result record: a substituted provider, a context class outside the grant's allowed set, an output artifact hash that diverges from the grant, or `runtime_execution` claimed when no runtime grant was issued. The valid result record must pass and the drifted one must be flagged; the exercise will not call drift \"absent\".\n- Replay scope. It compares the context classes a step consumed against the classes that changed. When the two sets are disjoint, the classification is `no_replay`. In the fixture, a step consumed a task spec and a public fixture while only ambient browser state changed, so re-running the step is not demanded.\n- Proof gate. It scans a candidate proof string before any Lean call. A `sorry` token, a plan-only phrasing such as \"plan:\" or \"I will\", or a proof that merely restates the declared theorem without an `exact` are each treated as failure classes, and the gate verdict becomes `rejected_before_lean`. The exercise records `0/8 historical banked attempts; no proof-success claim`.\n- Orphan reaper. A process marked as a live-session descendant is classified `requires_owner_check`, not `safe_close_candidate`, and no signal is sent even when the fixture requests `SIGKILL`. The refusal is the point: a stray-looking process that belongs to a live session must not be killed on inventory alone.\n- Fixpoint drainer. It walks residual signatures. If the same residual id reappears under a moved source signature, the settlement is classified `settlement_residual_source_moved`, which marks a non-converging residual rather than a settled one. No generated-state mutation is authorised either way.\n- Trace tape. When the joined trace text exceeds the byte budget, the exercise truncates to a head budget and appends a pointer row plus an omission result record that records the omitted byte count. A budget breach with no omission result record is treated as a failure, so compaction can never silently drop trace bytes.\n- Blast radius. It builds the reverse-dependency graph and takes the transitive closure of dependents for a target. A target with real dependents reports them; a leaf with no dependents reports an honestly empty bucket rather than inventing coverage.\n- Doctrine graph. It scans doctrine nodes for two conditions: a node whose code path no longer exists, reported as an authority gap, and a node marked `tombstone`, reported with its replacement id. The exercise passes only when both a drift finding and a tombstone candidate are present, so a deleted code path behind a doctrine claim cannot pass unnoticed.\n\n###### Reader Evidence Routing\n- A source-authenticity reader starts with the exported bundle `source_module_manifest.json`, then checks the copied files under `examples/batch5_authority_systems_capsule/exported_batch5_authority_systems_capsule_bundle/source_modules/` against the source source refs and anchor rows. The useful question is whether the public bundle is source-faithful, not whether it grants live generated-state authority.\n- A runtime reader runs the fixture command and the `run-batch5-bundle` command in the Validation Result record Path. The useful question is whether the synthetic exercise and exported bundle return bounded `pass` evidence while keeping body material out of result records.\n- A launch-boundary reader opens `tests/test_batch5_authority_systems_capsule.py` and the Scope limit before trusting any card copy. The useful question is whether negative fences block external model access, generated-state mutation, Lean proof-success claims, and launch-scope decision.\n\nIf any digest or exact-copy test is red, treat that as source-body import drift for the body-import owner. It does not make this Markdown a bundle source row, and it must not be patched here by hand.\n\n###### Prior Art Grounding\n\nThis bundle borrows from provenance interchange, trace instrumentation, and software supply-chain attestation practice. Useful anchors include:\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), which models the entities, activities, and agents involved in producing data so readers can assess reliability and trustworthiness.\n- [OpenTelemetry](https://opentelemetry.io/docs/), as a vendor-neutral pattern for traces, metrics, and logs across composed systems.\n- [SLSA provenance](https://slsa.dev/spec/v1.2/provenance), which treats artifact origin, builder identity, and build parameters as explicit attestable metadata.\n\nMicrocosm borrows the lineage, trace, and attestation shape, but keeps the exercise bounded to copied public source bodies, synthetic inputs, and negative claim fences. It excludes generated-state mutation, external model access, proof success, or launch.\n\n###### First Command\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.batch5_authority_systems_capsule run --input fixtures/first_wave/batch5_authority_systems_capsule/input --out /tmp/batch5_authority_systems_capsule --card\n```\n\n###### Source Bodies\n\nThe bundle imports these source bodies as exact public snapshots:\n- `tools/meta/factory/validate_reasoning_execution_receipt.py`\n- `tools/meta/factory/build_reasoning_execution_replay_scope.py`\n- `tools/meta/factory/build_reasoning_execution_lineage.py`\n- `tools/meta/factory/build_reasoning_execution_schedule_preflight.py`\n- `tools/meta/factory/run_verisoftbench_micro10_c_arm_provider_repair.py`\n- `tools/meta/control/orphan_reaper.py`\n- `system/lib/generated_state_drainer.py`\n- `system/lib/agent_execution_trace.py`\n- `system/lib/code_architecture_projection.py`\n- `system/lib/doctrine_graph.py`\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.batch5_authority_systems_capsule run \\\n  --input fixtures/first_wave/batch5_authority_systems_capsule/input \\\n  --out /tmp/microcosm-batch5-authority-systems-vrp \\\n  --card\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.batch5_authority_systems_capsule run-batch5-bundle \\\n  --input examples/batch5_authority_systems_capsule/exported_batch5_authority_systems_capsule_bundle \\\n  --out /tmp/microcosm-batch5-authority-systems-bundle-vrp \\\n  --card\nPYTHONPATH=src ../repo-pytest tests/test_batch5_authority_systems_capsule.py -q --basetemp /tmp/microcosm-batch5-authority-systems-tests\n```\n\nThe fixture command writes the bounded synthetic exercise result record. The exported-bundle command validates the copied authority-system source modules, manifest digests, anchor rows, and secret-exclusion posture while keeping source bodies out of the result record. The focused test file checks the runtime exercise, exported bundle, omission result records, body-scan boundary, and negative claim fences.\n\nThis result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, authorize generated-state mutation, dispatch providers, certify Lean proof success, claim launch-scope decision, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n- No live model/external model access.\n- No Lean proof-success or benchmark claim.\n- No process signals are sent.\n- No generated-state mutation is authorized.\n- No private-system equivalence, public sharing, or launch-scope decision.\n\n###### Scope limit\n\nLegacy Markdown path inventory only; no JSON bundle authority, typed subject coverage, runtime correctness, or launch proof.\n\nThis ceiling is deliberately lower than the runnable component evidence. The code and tests can show that the Batch5 exercise is inspectable and that its negative claim fences hold, but this page cannot promote itself into bundle authority, typed doctrine coverage, generated-state mutation permission, Lean proof success, provider correctness, publishing-scope decision, or aggregate doctrine-lattice health.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12396,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This page answers one question: can a cold reader inspect eight separate authority and systems mechanisms, and confirm each one refuses the wrong thing, without the reader having to run any of the real machinery? The eight mechanisms are unrelated in subject. One validates post-execution result records; another decides when a reasoning step needs re-running; another gates a Lean proof attempt; another classifies a stray process; another settles generated-state residuals; another compacts a trace tape; another computes a code blast radius; another compiles a doctrine graph. What they share is a single discipline: each must decline to claim more than it has earned. The result record validator\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The diagram starts where the runtime starts: the copied source bundle and the exercise manifest, checked against source-root digests and anchors. The component then fans out to the eight mechanism exercises, each recomputing its own pass or refusal verdict, and folds the results into metadata-only result records under a single scope limit. Generated-state mutation, external model access, proof-success claims, and launch-scope decision all stay outside that ceiling.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "what-the-eight-exercises-check",
       "title": "What the eight exercises check",
       "level": 2,
       "excerpt": "Each exercise reads a small synthetic block from the fixture manifest and recomputes a verdict. None of them call a provider, run Lean, signal a process, or mutate generated state. What follows is the specific question each one answers. Result record validator. Given a runtime grant and two post-execution result records, it recomputes the drift codes for the second result record: a substituted provider, a context class outside the grant's allowed set, an output artifact hash that diverges from the grant, or runtime_execution claimed when no runtime grant was issued. The valid result record must pass and the drifted one must be flagged; the exercise will not call drift \"absent\". Replay scope\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "A source-authenticity reader starts with the exported bundle sourcemodulemanifest.json, then checks the copied files under examples/batch5authoritysystemscapsule/exportedbatch5authoritysystemscapsulebundle/source_modules/ against the source source refs and anchor rows. The useful question is whether the public bundle is source-faithful, not whether it grants live generated-state authority. A runtime reader runs the fixture command and the run-batch5-bundle command in the Validation Result record Path. The useful question is whether the synthetic exercise and exported bundle return bounded pass evidence while keeping body material out of result records. A launch-boundary reader opens tests/t\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This bundle borrows from provenance interchange, trace instrumentation, and software supply-chain attestation practice. Useful anchors include: W3C PROV, which models the entities, activities, and agents involved in producing data so readers can assess reliability and trustworthiness. OpenTelemetry, as a vendor-neutral pattern for traces, metrics, and logs across composed systems. SLSA provenance, which treats artifact origin, builder identity, and build parameters as explicit attestable metadata. Microcosm borrows the lineage, trace, and attestation shape, but keeps the exercise bounded to copied public source bodies, synthetic inputs, and negative claim fences. It excludes generated-state\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "No live model/external model access. No Lean proof-success or benchmark claim. No process signals are sent. No generated-state mutation is authorized. No private-system equivalence, public sharing, or launch-scope decision.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "first-command",
       "title": "First Command",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The fixture command writes the bounded synthetic exercise result record. The exported-bundle command validates the copied authority-system source modules, manifest digests, anchor rows, and secret-exclusion posture while keeping source bodies out of the result record. The focused test file checks the runtime exercise, exported bundle, omission result records, body-scan boundary, and negative claim fences. This result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, authorize generated-state mutation, dispatch providers, certify Lean proof success, claim l\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "Legacy Markdown path inventory only; no JSON bundle authority, typed subject coverage, runtime correctness, or launch proof. This ceiling is deliberately lower than the runnable component evidence. The code and tests can show that the Batch5 exercise is inspectable and that its negative claim fences hold, but this page cannot promote itself into bundle authority, typed doctrine coverage, generated-state mutation permission, Lean proof success, provider correctness, public sharing decision, or aggregate doctrine-lattice health.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-bodies",
       "title": "Source Bodies",
       "level": 2,
       "excerpt": "The bundle imports these source bodies as exact public snapshots: tools/meta/factory/validatereasoningexecution_receipt.py tools/meta/factory/buildreasoningexecutionreplayscope.py tools/meta/factory/buildreasoningexecution_lineage.py tools/meta/factory/buildreasoningexecutionschedulepreflight.py tools/meta/factory/runverisoftbenchmicro10carmproviderrepair.py tools/meta/control/orphan_reaper.py system/lib/generatedstatedrainer.py system/lib/agentexecutiontrace.py system/lib/codearchitectureprojection.py system/lib/doctrine_graph.py",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch5_authority_systems_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Manifest[\"Copied source bundle + exercise manifest digests and required anchors checked first\"] --> Component[\"Runtime component batch5_authority_systems_capsule.py\"] Component --> E1[\"Result record validator flag provider/context/artifact drift\"] Component --> E2[\"Replay scope no_replay when changed context is disjoint\"] Component --> E3[\"Proof gate reject sorry/plan-only before Lean\"] Component --> E4[\"Orphan reaper live descendant -> requires_owner_check\"] Component --> E5[\"Fixpoint drainer residual source moved -> non-converging\"] Component --> E6[\"Trace tape over-budget -> pointer + omission result record\"] Component --> E7[\"Blast radius reverse closure; empty leaf stays empty\"] Component --> E8[\"Doctrine graph report deleted paths and tombstones\"] E1 --> Refusal[\"Shared refusal check each exercise recomputes its own verdict\"] E2 --> Refusal E3 --> Refusal E4 --> Refusal E5 --> Refusal E6 --> Refusal E7 --> Refusal E8 --> Refusal Refusal --> Result records[\"metadata-only result records result records/first_wave/batch5_authority_systems_capsule\"] Result records --> Ceiling[\"Scope limit: no external model access, mutation, proof success, launch, or private equivalence\"]",
       "source_hash": "sha256:ca57ed0a2df17b8745c20232a3de4e7cc1b6362ed335f8aea95a58bc7f8e59e7",
       "html_url": "docs/paper-modules.html#paper-module-batch5-authority-systems-capsule-diagram-1",
       "html_anchor": "paper-module-batch5-authority-systems-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch5_authority_systems_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "OpenTelemetry",
       "url": "https://opentelemetry.io/docs/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SLSA provenance",
       "url": "https://slsa.dev/spec/v1.2/provenance",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch5_authority_systems_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Authority Systems Source Bundle",
         "url": "components.html#component-batch5_authority_systems_capsule"
        },
        {
         "id": "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public authority systems bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch5_authority_systems_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 13917
    },
    {
     "id": "paper_module.batch7_oracle_sibling_capsule",
     "title": "Set 7 Oracle Sibling Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-oracle-sibling-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch7-oracle-sibling-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch7-oracle-sibling-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 7 Oracle Sibling Bundle imports Oracle sibling source bodies and exercises deterministic subject-index, snapshot, truth-diff, quartet-plan, and original pytest witness boundaries.",
     "summary": "Set 7 Oracle Sibling Bundle binds the runnable Oracle sibling source locus, exported copied-source bundle, source-module digests, original pytest witnesses, deterministic subject-index/snapshot/truth-diff/quartet-plan exercises, negative cases, metadata-only result records, and scope limits to a mechanism-backed JSON bundle without claiming accepted-component authority or semantic truth authority.",
     "authority_ceiling": "Fixture-bound public Oracle source-body import, copied-module digest and anchor evidence, deterministic local exercise evidence, original pytest witness evidence, and metadata-only result records only; no Oracle reasoning authority, semantic truth authority, external model access, bridge-backed reasoning, private orchestration engine invocation, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete Oracle coverage, or whole-system correctness.",
     "abstract": "Set 7 Oracle Sibling Bundle imports Oracle sibling source bodies and exercises deterministic subject-index, snapshot, truth-diff, quartet-plan, and original pytest witness boundaries.",
     "teleology": {
      "section_id": "",
      "text": "Set 7 Oracle Sibling Bundle imports Oracle sibling source bodies and exercises deterministic subject-index, snapshot, truth-diff, quartet-plan, and original pytest witness boundaries.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "###### Purpose\n\nThe Oracle is a sibling system that reasons about market evidence. Most of it depends on live data feeds and on a bridge-backed reasoning engine, so it cannot be shown to a public reader directly. This bundle answers a narrower question: which parts of the Oracle are pure, deterministic, and inspectable, and can those parts be run and checked without touching any feed, provider, or reasoning call?\n\nThe answer turns out to be the Oracle's grounding and bookkeeping layer. Before the Oracle reasons, it builds a map of what evidence supports which prediction target, hydrates artifacts from a recorded run, diffs two timed snapshots of the same feed, and plans how to repair a missing artifact chain. None of that needs the network or the reasoning engine. This bundle imports the exact source for those four tools, exercises each against synthetic in-memory runs, and re-runs the Oracle's own original tests as an independent witness.\n\nWhat is unusual is the discipline of the boundary rather than the cleverness of the code. The Oracle's repair planner can, if asked, call the bridge-backed `GodModeEngine` to fill a missing node by reasoning. The bundle exercises the planner up to the point where it would do so and stops: it builds the repair plan, materialises an alias for an artifact that can be copied, and records `run_missing_quartet` and `GodModeEngine` as explicitly excluded. The exclusion is part of the evidence, not a gap in it.\n\n###### Shape\n\nSource refs\n\nJSON bundle source row `core/paper_module_capsules.json::paper_modules[82:paper_module.batch7_oracle_sibling_capsule]` Generated JSON instance `paper_modules/batch7_oracle_sibling_capsule.json` `paper_modules/batch7_oracle_sibling_capsule.md` Standards `std_microcosm_paper_module` `std_microcosm_batch7_oracle_sibling_capsule` Mechanism subject `mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule` Runtime/source locus `src/microcosm_core/organs/batch7_oracle_sibling_capsule.py` Copied Oracle sibling source bundle `examples/batch7_oracle_sibling_capsule/exported_batch7_oracle_sibling_capsule_bundle` Fixture input `fixtures/first_wave/batch7_oracle_sibling_capsule/input` Focused tests `tests/test_batch7_oracle_sibling_capsule.py` Diagram source\n\n```text\nflowchart TD bundle[\"JSON bundle source row core/paper_module_capsules.json::paper_modules[82:paper_module.batch7_oracle_sibling_capsule]\"] instance[\"Generated JSON instance paper_modules/batch7_oracle_sibling_capsule.json\"] md[\"Reader projection paper_modules/batch7_oracle_sibling_capsule.md\"] standard[\"Standards std_microcosm_paper_module std_microcosm_batch7_oracle_sibling_capsule\"] mechanism[\"Mechanism subject mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule\"] runtime[\"Runtime/source locus src/microcosm_core/components/batch7_oracle_sibling_capsule.py\"] copied[\"Copied Oracle sibling source bundle examples/batch7_oracle_sibling_capsule/exported_batch7_oracle_sibling_capsule_bundle\"] fixture[\"Fixture input fixtures/first_wave/batch7_oracle_sibling_capsule/input\"] subgraph Exercise[\"Deterministic exercises (in-memory temp runs)\"] subjectIndex[\"subject_index admissible vs contextual evidence missing-support targets preserved\"] snapshot[\"subject_snapshot hydrate artifact, keep provenance\"] truthDiff[\"truth_diff_macro changed / new / dropped series\"] quartet[\"run_quartet plan + alias readiness BLOCKED, alias materialised\"] stop([\"STOP: run_missing_quartet / private orchestration engine excluded, not invoked\"]) pytest[\"original pytest witness focused Oracle v1 + quartet tests\"] quartet -.excluded.-> stop end tests[\"Focused tests tests/test_batch7_oracle_sibling_capsule.py\"] result records[\"metadata-only result records summaries, counts, digests, booleans; no source/stdout bodies\"] projections[\"Generated projection status Mermaid: available_from_capsule_edges Atlas: blocked_until_organ_atlas_owner_lane_binds_edges\"] ceiling[\"Scope limit fixture-bound local replay only; no Oracle reasoning, external model access, source-file changes, launch, or semantic truth authority\"] bundle --> instance bundle --> mechanism bundle --> runtime bundle --> projections instance --> md standard --> bundle standard --> tests runtime --> copied runtime --> fixture copied --> Exercise fixture --> Exercise Exercise --> tests tests --> result records result records --> md projections --> md ceiling --> md\n```\n\nThe source of record is the JSON source record `core/paper_module_capsules.json::paper_modules[82:paper_module.batch7_oracle_sibling_capsule]`. The generated JSON instance at `paper_modules/batch7_oracle_sibling_capsule.json` carries `paper_module_payload.source_authority: json_capsule` and derives its `relationships.edges` from that bundle, including the mechanism subject, concept, principles, axioms, and resolved code locus.\n\nThe governing standard stack is two-layered. The local bundle standard is `standards/std_microcosm_batch7_oracle_sibling_capsule.json`, which requires exact Oracle source copies, direct execution of subject-index, subject-snapshot, truth-diff, and quartet-plan paths, an original pytest witness, explicit exclusion of `run_missing_quartet` and `GodModeEngine`, negative cases, and the local scope limit.\n\nThe runtime locus is `src/microcosm_core/organs/batch7_oracle_sibling_capsule.py`, especially the source record's resolved symbols `_subject_index_engine`, `_subject_snapshot_engine`, `_truth_diff_macro_engine`, `_quartet_repair_engine`, `_run_original_pytest_witness`, `_evaluate`, `run`, `run_batch7_oracle_sibling_bundle`, `result_card`, `EXPECTED_ENGINES`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `main`. The reader-facing source bundle lives at `examples/batch7_oracle_sibling_capsule/exported_batch7_oracle_sibling_capsule_bundle/` with `source_module_manifest.json`; the fixture entrypoint is `fixtures/first_wave/batch7_oracle_sibling_capsule/input/batch7_oracle_sibling_exercise_manifest.json`.\n\nValidation is grounded in `tests/test_batch7_oracle_sibling_capsule.py`, the fixture result records under `receipts/first_wave/batch7_oracle_sibling_capsule/`, the bundle-validation result records under `receipts/first_wave/batch7_oracle_sibling_capsule/bundle_validation/`, and the sign-off result record result records/sign-off/first_wave/batch7_oracle_sibling_capsule_fixture_acceptance.json. That split is part of the truthful scope limit: this module proves a fixture-bound, public-safe, local Oracle sibling source-import replay and metadata-only result record path only. It does not establish Oracle reasoning authority, semantic truth authority, external model access, bridge-backed reasoning, `GodModeEngine` invocation, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete Oracle coverage, accepted-component authority, or whole-system correctness.\n\n###### Imported System\n- `oracle_subject_index_grounding_map` executes `tools.oracle.subject_index.run` against a temporary subject run and verifies admissible versus contextual grounding.\n- `oracle_subject_snapshot_hydration` executes `tools.oracle.subject_snapshot.run` and verifies subject artifact provenance hydration.\n- `oracle_truth_diff_macro_series_delta` executes `tools.oracle.truth_diff_macro.run` and verifies changed, new, and dropped source series.\n- `oracle_quartet_repair_alias_plan` executes `run_quartet.build_quartet_repair_plan` and `materialize_missing_aliases` on a temporary truth run.\n- `oracle_original_pytest_witness` runs the focused original pytest witness for the Oracle v1 tools and quartet planner tests.\n\n###### What each engine checks\n\nEach engine seeds a temporary run directory, calls the imported Oracle tool against it, and asserts the exact shape of the result. The fixtures are small but chosen to make the domain logic visible.\n\nThe subject-index engine seeds three pieces of evidence: a stock (`XOM`), an ETF (`XLE`), and a source instrument (`TLT`). The Oracle's rule is that evidence can ground a prediction only when its subject is a valid prediction target and its ledger id marks it as stock or ETF support (`S_` or `E_` prefix). So `XOM` and `XLE` land in the admissible bucket, while `TLT` stays contextual even though it is a valid target, because its support is source context that cannot anchor a price prediction. The engine checks that `TLT` is recorded in `missing_admissible_support_targets`: the Oracle does not silently drop a target it cannot ground, it carries the gap forward.\n\nThe subject-snapshot engine checks that hydrating a single named artifact preserves its provenance. The result must carry the source artifact id and the originating run id, so a downstream caller knows where a prediction payload came from. No artifact body is copied into the result record.\n\nThe truth-diff engine compares two timed snapshots of the same source feed. The subject snapshot is taken at one time and the truth snapshot later, and the engine confirms the diff identifies a changed series ranked by the strongest absolute delta (here `US10Y` moving from 4.10 to 4.35), a newly appeared series (`CPI`), and a dropped series (`OIL`). This is the difference between a number changing and the system knowing which number changed, by how much, and whether the series set itself shifted.\n\nThe quartet engine exercises the repair planner against a truth run that is missing most of its node chain. The plan must report readiness `BLOCKED`, name the deepest missing target (`oracle_cp2_emitter`), and list which artifacts can be repaired by aliasing rather than re-running. The engine then materialises one alias and confirms the written file records what it is an alias of. Crucially, it asserts that the bridge-backed `run_missing_quartet` path was not taken and `GodModeEngine` was not constructed.\n\n###### Reader Evidence Routing\n\nEvidence surface Authority ref What it supports Boundary Runnable component `src/microcosm_core/organs/batch7_oracle_sibling_capsule.py` The Microcosm bundle executes deterministic subject-index, subject-snapshot, truth-diff, quartet-plan, and original-pytest witness paths. Code locus evidence only; not a doctrine-lattice subject edge until JSON bundle admission. Standard `standards/std_microcosm_batch7_oracle_sibling_capsule.json` Required exact source copies, direct oracle tool execution, original pytest witness, run-missing exclusion, negative cases, and scope limit. Standard requirements are local bundle requirements, not launch-scope decision. Focused tests `tests/test_batch7_oracle_sibling_capsule.py` Runtime shape, exact source-module copies, private-body omission, and negative-case stability. Focused witness only; not whole Oracle coverage. Fixture manifest `core/fixture_manifests/batch7_oracle_sibling_capsule.fixture_manifest.json` Fixture root, exported bundle, and source manifest routing for reproducible local runs. Fixture availability is not semantic truth authority. Source manifest `examples/batch7_oracle_sibling_capsule/exported_batch7_oracle_sibling_capsule_bundle/source_module_manifest.json` Exact-copy hashes and required anchors for Oracle sibling source modules. copied bodies remain source evidence; result records keep bodies out. Sign-off result records result records/sign-off/first_wave/batch7_oracle_sibling_capsule_fixture_acceptance.json and `receipts/first_wave/batch7_oracle_sibling_capsule/` Prior fixture sign-off, board, validation result record, and bundle validation outputs. Result record presence does not flip Mermaid/Atlas status or aggregate coverage.\n\nThe selective relation boundary is intentionally narrow: this Markdown names walkable source routes for readers, but it does not infer governed concepts, principles, axioms, dependencies, or code-locus relations into the generated JSON row. Those edges must be populated through `core/paper_module_capsules.json` and the doctrine projection builder after an admitted source row exists.\n\n###### Prior Art Grounding\n\nThe component is grounded in software-test-oracle and data-provenance practice: automated checks compare observed outputs against admissible references, while provenance records make artifact origin and transformation visible. Useful anchors include:\n- Survey work on the [test oracle problem](https://discovery.ucl.ac.uk/1471263/), where an oracle determines whether a system's output is acceptable for a given test.\n- The W3C [PROV](https://www.w3.org/TR/prov-overview/) family, which defines a provenance model for describing entities, activities, agents, and derivation.\n\nMicrocosm borrows those ideas for deterministic subject indexing, snapshot hydration, truth-diff series deltas, and quartet alias planning. The bundle does not promote local oracle checks into semantic truth authority, external model access, source-file changes, or launch-scope decision.\n\n###### Validation Result record Path\n\nReader-verifiable fixture command, run from `microcosm-substrate/`:\n\nThe fixture run writes `receipts/first_wave/batch7_oracle_sibling_capsule/batch7_oracle_sibling_capsule_result.json`, `receipts/first_wave/batch7_oracle_sibling_capsule/batch7_oracle_sibling_capsule_validation_receipt.json`, and `receipts/first_wave/batch7_oracle_sibling_capsule/batch7_oracle_sibling_capsule_board.json`; the sign-off file records fixture sign-off. The exported-bundle re-run uses the `run-batch7-oracle-sibling-bundle` action over `exported_batch7_oracle_sibling_capsule_bundle`, and any bundle-validation result records stay under `receipts/first_wave/batch7_oracle_sibling_capsule/bundle_validation/`.\n\nThis result record path is reader-verifiable evidence only. It does not create accepted-component authority, link the Atlas card, invoke bridge-backed reasoning, dispatch providers, change source files, promote semantic truth authority, or prove aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is a deterministic local system bundle. It does not invoke `run_missing_quartet`, `GodModeEngine`, bridge-backed reasoning, browser access, external model access, launch-scope decision, source-file changes, or semantic truth authority.\n\n###### Scope limit\n\nThis paper module can claim mechanism-backed JSON bundle authority for the Oracle sibling source-import slice and a walkable reader route to deterministic subject-index, subject-snapshot, truth-diff, quartet-plan, original-pytest witness, standard, fixture, source manifest, and result record evidence. It cannot claim accepted-component authority, linked Atlas-card authority, semantic truth authority, bridge-backed reasoning, external model access, source-file changes, launch-scope decision, or whole Oracle coverage.\n\nA green fixture run or focused pytest result record proves only bounded local replay, source-copy provenance, body hygiene, negative-case behavior, and metadata-only result records for the Oracle sibling slice.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 14925,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The Oracle is a sibling system that reasons about market evidence. Most of it depends on live data feeds and on a bridge-backed reasoning engine, so it cannot be shown to a public reader directly. This bundle answers a narrower question: which parts of the Oracle are pure, deterministic, and inspectable, and can those parts be run and checked without touching any feed, provider, or reasoning call? The answer turns out to be the Oracle's grounding and bookkeeping layer. Before the Oracle reasons, it builds a map of what evidence supports which prediction target, hydrates artifacts from a recorded run, diffs two timed snapshots of the same feed, and plans how to repair a missing artifact chai\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The source of record is the JSON source record core/papermodulecapsules.json::papermodules[82:papermodule.batch7oraclesibling_capsule]. The generated JSON instance at papermodules/batch7oraclesiblingcapsule.json carries papermodulepayload.sourceauthority: jsoncapsule and derives its relationships.edges from that bundle, including the mechanism subject, concept, principles, axioms, and resolved code locus. This Markdown page is not an independent authority surface. The governing standard stack is two-layered. The general paper-module contract is standards/stdmicrocosmpaper_module.json: JSON bundles carry typed projections. The local bundle standard is standards/stdmicrocosmbatch7oraclesiblin\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "imported-substrate",
       "title": "Imported System",
       "level": 2,
       "excerpt": "oraclesubjectindexgroundingmap executes tools.oracle.subject_index.run against a temporary subject run and verifies admissible versus contextual grounding. oraclesubjectsnapshothydration executes tools.oracle.subjectsnapshot.run and verifies subject artifact provenance hydration. oracletruthdiffmacroseriesdelta executes tools.oracle.truthdiff_macro.run and verifies changed, new, and dropped source series. oraclequartetrepairaliasplan executes runquartet.buildquartetrepairplan and materializemissingaliases on a temporary truth run. oracleoriginalpytest_witness runs the focused original pytest witness for the Oracle v1 tools and quartet planner tests.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "what-each-engine-checks",
       "title": "What each engine checks",
       "level": 2,
       "excerpt": "Each engine seeds a temporary run directory, calls the imported Oracle tool against it, and asserts the exact shape of the result. The fixtures are small but chosen to make the domain logic visible. The subject-index engine seeds three pieces of evidence: a stock (XOM), an ETF (XLE), and a source instrument (TLT). The Oracle's rule is that evidence can ground a prediction only when its subject is a valid prediction target and its ledger id marks it as stock or ETF support (S or E prefix). So XOM and XLE land in the admissible bucket, while TLT stays contextual even though it is a valid target, because its support is source context that cannot anchor a price prediction. The engine checks tha\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is a deterministic local system bundle. It does not invoke runmissingquartet, private orchestration engine, bridge-backed reasoning, browser access, external model access, launch-scope decision, source-file changes, or semantic truth authority.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim mechanism-backed JSON bundle authority for the Oracle sibling source-import slice and a walkable reader route to deterministic subject-index, subject-snapshot, truth-diff, quartet-plan, original-pytest witness, standard, fixture, source manifest, and result record evidence. It cannot claim accepted-component authority, linked Atlas-card authority, semantic truth authority, bridge-backed reasoning, external model access, source-file changes authority, launch-scope decision, or whole Oracle coverage. mechanism subject and a resolved code locus. A green fixture run or focused pytest result record proves only bounded local replay, source-copy provenance, body hygiene\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "The selective relation boundary is intentionally narrow: this Markdown names walkable source routes for readers, but it does not infer governed concepts, principles, axioms, dependencies, or code-locus relations into the generated JSON row. Those edges must be populated through core/papermodulecapsules.json and the doctrine projection builder after an admitted source row exists.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable fixture command, run from microcosm-substrate/: The fixture run writes result records/firstwave/batch7oraclesiblingcapsule/batch7oraclesiblingcapsuleresult.json, result records/firstwave/batch7oraclesiblingcapsule/batch7oraclesiblingcapsulevalidation_receipt.json, and result records/firstwave/batch7oraclesiblingcapsule/batch7oraclesiblingcapsuleboard.json; the sign-off file records fixture sign-off. The exported-bundle re-run uses the run-batch7-oracle-sibling-bundle action over exportedbatch7oraclesiblingcapsule_bundle, and any bundle-validation result records stay under result records/firstwave/batch7oraclesiblingcapsule/bundle_validation/. This result record path is rea\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in software-test-oracle and data-provenance practice: automated checks compare observed outputs against admissible references, while provenance records make artifact origin and transformation visible. Useful anchors include: Survey work on the test oracle problem, where an oracle determines whether a system's output is acceptable for a given test. The W3C PROV family, which defines a provenance model for describing entities, activities, agents, and derivation. Microcosm borrows those ideas for deterministic subject indexing, snapshot hydration, truth-diff series deltas, and quartet alias planning. The bundle does not promote local oracle checks into semantic truth\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch7_oracle_sibling_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"JSON bundle source row core/paper_module_capsules.json::paper_modules[82:paper_module.batch7_oracle_sibling_capsule]\"] instance[\"Generated JSON instance paper_modules/batch7_oracle_sibling_capsule.json\"] md[\"Reader projection paper_modules/batch7_oracle_sibling_capsule.md\"] standard[\"Standards std_microcosm_paper_module std_microcosm_batch7_oracle_sibling_capsule\"] mechanism[\"Mechanism subject mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule\"] runtime[\"Runtime/source locus src/microcosm_core/components/batch7_oracle_sibling_capsule.py\"] copied[\"Copied Oracle sibling source bundle examples/batch7_oracle_sibling_capsule/exported_batch7_oracle_sibling_capsule_bundle\"] fixture[\"Fixture input fixtures/first_wave/batch7_oracle_sibling_capsule/input\"] subgraph Exercise[\"Deterministic exercises (in-memory temp runs)\"] subjectIndex[\"subject_index admissible vs contextual evidence missing-support targets preserved\"] snapshot[\"subject_snapshot hydrate artifact, keep provenance\"] truthDiff[\"truth_diff_macro changed / new / dropped series\"] quartet[\"run_quartet plan + alias readiness BLOCKED, alias materialised\"] stop([\"STOP: run_missing_quartet / private orchestration engine excluded, not invoked\"]) pytest[\"original pytest witness focused Oracle v1 + quartet tests\"] quartet -.excluded.-> stop end tests[\"Focused tests tests/test_batch7_oracle_sibling_capsule.py\"] result records[\"metadata-only result records summaries, counts, digests, booleans; no source/stdout bodies\"] projections[\"Generated projection status Mermaid: available_from_capsule_edges Atlas: blocked_until_organ_atlas_owner_lane_binds_edges\"] ceiling[\"Scope limit fixture-bound local replay only; no Oracle reasoning, external model access, source-file changes, launch, or semantic truth authority\"] bundle --> instance bundle --> mechanism bundle --> runtime bundle --> projections instance --> md standard --> bundle standard --> tests runtime --> copied runtime --> fixture copied --> Exercise fixture --> Exercise Exercise --> tests tests --> result records result records --> md projections --> md ceiling --> md",
       "source_hash": "sha256:4e01b6844447ee837154f370d9b4776bed85389ee0b881fea05dd2e437ebe331",
       "html_url": "docs/paper-modules.html#paper-module-batch7-oracle-sibling-capsule-diagram-1",
       "html_anchor": "paper-module-batch7-oracle-sibling-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_oracle_sibling_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "test oracle problem",
       "url": "https://discovery.ucl.ac.uk/1471263/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public oracle sibling bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_oracle_sibling_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 16224
    },
    {
     "id": "paper_module.batch7_demo_take_console_capsule",
     "title": "Set 7 Demo Take Console Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-demo-take-console-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch7-demo-take-console-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch7-demo-take-console-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 7 Demo Take Console Bundle imports Swift capture-console source bodies and exercises SwiftPM build, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, and transcribe-payload boundaries.",
     "summary": "Set 7 Demo Take Console Bundle binds the runnable Demo Take Console source locus, exported copied Swift source bundle, source-module digests, SwiftPM build-witness posture, deterministic recording-state/helper-bridge/recorder-store/hotkey-audio-meter/transcribe-payload exercises, negative cases, metadata-only result records, and scope limits to a mechanism-backed JSON bundle without claiming accepted-component authority, app launch authority, or recording authority.",
     "authority_ceiling": "Fixture-bound public Swift source-body import, copied-module digest and anchor evidence, deterministic local exercise evidence, SwiftPM build-witness evidence, and metadata-only result records only; no app launch authority, screen capture authority, microphone capture authority, recording-session export, FFmpeg execution, WhisperKit/model dispatch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete UI coverage, or whole-system correctness.",
     "abstract": "Set 7 Demo Take Console Bundle imports Swift capture-console source bodies and exercises SwiftPM build, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, and transcribe-payload boundaries.",
     "teleology": {
      "section_id": "",
      "text": "Set 7 Demo Take Console Bundle imports Swift capture-console source bodies and exercises SwiftPM build, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, and transcribe-payload boundaries.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This page documents the Swift source-body import for the Demo Take Console capture app as a mechanism-backed Microcosm paper-module bundle.\n\nThe component bundle verifies the SwiftPM app target, exact copied source-body digests, helper-bridge command contracts, recording state gates, hotkey and audio-meter guards, and the transcription payload builder. It does not launch the app, start FFmpeg, access screen or microphone devices, export recording sessions, or dispatch WhisperKit.\n\nScope limit: source-open capture-console mechanics over public fixtures only; not recording authority, launch-scope decision, or proof of complete UI coverage.\n\n###### Purpose\n\nThe Demo Take Console is a real macOS app that records screen and microphone takes, drives FFmpeg through a Python helper, and hands audio to an on-device WhisperKit transcriber. This bundle exists so a reader can inspect how that app is wired without the app ever running. It answers one question: do the safety gates and contracts in the Swift source actually hold, as source, before anyone trusts the app to capture anything?\n\nThe interesting choice is that the bundle checks behaviour, not just shape. It copies the relevant Swift files into a public bundle, then runs six small exercises that read those copies and assert specific invariants: that recording cannot start without a chosen display and free disk, that the global hotkey requires Control-Option-Command, that the audio meter clamps its level to the 0 to 1 range, that the transcriber refuses to run when its audio file is missing. None of these read the app's live state. They read the source that decides the app's behaviour.\n\nTo prove those checks are not vacuous, the bundle pairs them with six negative cases. Five of them copy the bundle into a scratch directory, delete one guard from the copy (the display blocker, the hotkey modifier, the audio clamp, the helper-script path, the missing-audio guard), and re-run the matching exercise. If the check still passes after the guard is gone, it was never testing the guard. This is the unusual part: the negative cases mutate the source and demand that the validator notices, so a green run means the gate is present rather than merely that the file parses. The sixth negative case runs `swift build` against an empty directory and expects it to fail, confirming the build witness is real rather than asserted.\n\nOne of the six engines is a real `swift build` of the app target. It records the exit code and a build-complete marker, never the build log body, and claims only that the copied sources compile as a SwiftPM target. It does not launch the app or grant any capture permission.\n\n###### Shape\n\nThe source row is `core/paper_module_capsules.json::paper_modules[84:paper_module.batch7_demo_take_console_capsule]`; the resolving source mechanism is `core/mechanism_sources.json::mechanisms[87:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule]`. The generated instance is `paper_modules/batch7_demo_take_console_capsule.json`, which carries `paper_module_payload.source_authority: json_capsule`.\n\nDiagram source\n\n```text\nflowchart TD bundle[\"Copied public Swift bundle eight exact-copy source files body_in_receipt = false\"] subgraph Engines[\"Six source-contract engines\"] build[\"swift build witness app target compiles exit code + build marker only\"] state[\"Recording state model eleven typed states present marker uses wall + video time\"] bridge[\"Helper-bridge contract eleven helper commands script bound to repo\"] fsm[\"RecorderStore state machine start needs display + disk pause / resume / stop-to-review\"] meter[\"Hotkey + audio meter Control-Option-Command-M level clamped 0 to 1\"] transcribe[\"Transcribe payload builder WhisperKit decode config guards missing audio\"] end subgraph Negatives[\"Paired negative cases\"] mutate[\"Copy bundle to scratch delete one guard token\"] rerun[\"Re-run that engine expect it to flip to blocked\"] end result records[\"metadata-only result records refs, digests, anchors, booleans no source bodies, no logs\"] ceiling[\"Scope limit source-copy + fixture evidence only no app launch, capture, FFmpeg, WhisperKit dispatch, or launch\"] bundle --> Engines bundle --> mutate mutate --> rerun Engines --> result records rerun --> result records result records --> ceiling\n```\n\nThe runtime component is the executable validation locus: it names six expected engines, six negative cases, source-copy anchor checks, metadata-only result record rules, and the local command/card surfaces. `runtime_shell.py` exposes the bundle validation step, while `cli.py` routes the bundle command. The fixture manifest binds fixture input to the exported source bundle manifest; the source bundle manifest records eight exact-copy public Swift modules with `body_in_receipt: false` and digest matches.\n\nValidation result records keep the proof narrow. The focused verifier result record reports fixture and bundle passes, tampered copied-source digest/anchor swaps blocked, focused pytest passing, and private-token scan matches at zero for the scratch cycle. Those result records support reader walkability and source-copy evidence only. They do not admit an accepted component/card edge, clear the Atlas block, authorize recording or device access, dispatch FFmpeg or WhisperKit, or make a launch/public-sharing claims.\n\n###### Reader Evidence Routing\n\nReaders can walk the local evidence without private payloads:\n- `src/microcosm_core/organs/batch7_demo_take_console_capsule.py` defines the component id, fixture id, validator id, scope limit, scope boundary, expected engines, negative cases, and required anchors for the eight imported Swift source files.\n- `standards/std_microcosm_batch7_demo_take_console_capsule.json` records the same scope limit, `body_in_receipt: false`, the required source refs, the SwiftPM witness command, negative-case count, and `copied_non_secret_macro_body` import class.\n- `core/fixture_manifests/batch7_demo_take_console_capsule.fixture_manifest.json` binds the fixture input to the exported source bundle manifest.\n- `tests/test_batch7_demo_take_console_capsule.py` validates the engine set, exact source-body copy digests, required anchors, negative cases, no-private-body card shape, and absence of local absolute paths in result records.\n- `receipts/import_binding/partial_import_binding_report.json` records the sign-off result record, fixture manifest, source bundle manifest, test file, and component source refs for this bundle.\n\nThis routing is because result records and cards keep source bodies out of result record payloads. It is not evidence for app launch, recording permission, provider/model dispatch, launch-scope decision, or whole-UI coverage.\n\n###### Prior Art Grounding\n\nThe component borrows from desktop media-capture and local transcription tooling: capture apps commonly combine OS capture APIs, command-line media encoders, recording state gates, hotkeys, level meters, and transcription handoff contracts. Useful anchors include:\n- Apple's [ScreenCaptureKit](https://developer.apple.com/documentation/ScreenCaptureKit) framework for selecting and streaming screen/audio content in macOS apps.\n- [FFmpeg](https://www.ffmpeg.org/ffmpeg.html), the established command-line media recording, conversion, and streaming toolchain.\n- [WhisperKit](https://github.com/argmaxinc/WhisperKit), an on-device speech recognition toolkit for Apple Silicon.\n\nMicrocosm borrows the capture-console contract shape but keeps the exercise at source-body and fixture validation. The bundle does not start capture devices, launch FFmpeg, invoke WhisperKit, or claim recording/launch-scope decision.\n\n###### Validation Result record Path\n\nReader-verifiable fixture command, run from `microcosm-substrate/`:\n\nThe fixture run writes `receipts/first_wave/batch7_demo_take_console_capsule/batch7_demo_take_console_capsule_result.json`, `receipts/first_wave/batch7_demo_take_console_capsule/batch7_demo_take_console_capsule_validation_receipt.json`, and `receipts/first_wave/batch7_demo_take_console_capsule/batch7_demo_take_console_capsule_board.json`; the sign-off file records fixture sign-off. The exported-bundle re-run uses the `validate-bundle` action over `exported_batch7_demo_take_console_capsule_bundle`, and any bundle-validation result records stay under `receipts/first_wave/batch7_demo_take_console_capsule/bundle_validation/`.\n\nThis result record path is reader-verifiable evidence only. It does not flip component-atlas status, launch the app, start capture devices, run FFmpeg, dispatch WhisperKit, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module can claim that the Demo Take Console bundle has a walkable reader route to its component file, standard, fixture manifest, source manifest, focused tests, result record path, Swift source-copy evidence, resolving mechanism row, and generated Mermaid availability. It cannot claim accepted-component authority, Atlas-card linkage, app launch, recording permission, device access, FFmpeg execution, WhisperKit/model dispatch, launch-scope decision, or complete UI coverage.\n\nThe generated structured source record is sourced from the JSON source record. A green fixture run or focused pytest result record proves only bounded replay, source-copy provenance, body hygiene, and negative-case behavior for the fixture. The remaining scope limit can only rise through a separate component-atlas owner lane that binds accepted component/card edges; this paper module does not create those edges by prose.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 9591,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The Demo Take Console is a real macOS app that records screen and microphone takes, drives FFmpeg through a Python helper, and hands audio to an on-device WhisperKit transcriber. This bundle exists so a reader can inspect how that app is wired without the app ever running. It answers one question: do the safety gates and contracts in the Swift source actually hold, as source, before anyone trusts the app to capture anything? The interesting choice is that the bundle checks behaviour, not just shape. It copies the relevant Swift files into a public bundle, then runs six small exercises that read those copies and assert specific invariants: that recording cannot start without a chosen display\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "authority source by itself. The source row is core/papermodulecapsules.json::papermodules[84:papermodule.batch7demotakeconsolecapsule]; the resolving source mechanism is core/mechanismsources.json::mechanisms[87:mechanism.batch7demotakeconsolecapsule.validatespublicdemotakeconsolecapsule]. The generated instance is papermodules/batch7demotakeconsole_capsule.json, which carries papermodulepayload.sourceauthority: jsoncapsule. The runtime component is the executable validation locus: it names six expected engines, six negative cases, source-copy anchor checks, metadata-only result record rules, and the local command/card surfaces. runtime_shell.py exposes the bundle validation step, while cli\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Readers can walk the local evidence without private payloads: src/microcosmcore/components/batch7demotakeconsole_capsule.py defines the component id, fixture id, validator id, scope limit, scope boundary, expected engines, negative cases, and required anchors for the eight imported Swift source files. standards/stdmicrocosmbatch7demotakeconsolecapsule.json records the same scope limit, bodyinreceipt: false, the required source refs, the SwiftPM witness command, negative-case count, and copiednonsecretmacrobody import class. core/fixturemanifests/batch7demotakeconsolecapsule.fixturemanifest.json binds the fixture input to the exported source bundle manifest. tests/testbatch7demotakeconsole_c\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This paper module can claim that the Demo Take Console bundle has a walkable reader route to its component file, standard, fixture manifest, source manifest, focused tests, result record path, Swift source-copy evidence, resolving mechanism row, and generated Mermaid availability. It cannot claim accepted-component authority, Atlas-card linkage, app launch, recording permission, device access, FFmpeg execution, WhisperKit/model dispatch, launch-scope decision, or complete UI coverage. The generated structured source record is sourced from the JSON source record. A green fixture run or focused pytest result record proves only bounded replay, source-copy provenance, body hygiene, and negative\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable fixture command, run from microcosm-substrate/: The fixture run writes result records/firstwave/batch7demotakeconsolecapsule/batch7demotakeconsolecapsuleresult.json, result records/firstwave/batch7demotakeconsolecapsule/batch7demotakeconsolecapsulevalidation_receipt.json, and result records/firstwave/batch7demotakeconsolecapsule/batch7demotakeconsolecapsuleboard.json; the sign-off file records fixture sign-off. The exported-bundle re-run uses the validate-bundle action over exportedbatch7demotakeconsolecapsulebundle, and any bundle-validation result records stay under result records/firstwave/batch7demotakeconsolecapsule/bundlevalidation/. This result record path is reader\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows from desktop media-capture and local transcription tooling: capture apps commonly combine OS capture APIs, command-line media encoders, recording state gates, hotkeys, level meters, and transcription handoff contracts. Useful anchors include: Apple's ScreenCaptureKit framework for selecting and streaming screen/audio content in macOS apps. FFmpeg, the established command-line media recording, conversion, and streaming toolchain. WhisperKit, an on-device speech recognition toolkit for Apple Silicon. Microcosm borrows the capture-console contract shape but keeps the exercise at source-body and fixture validation. The bundle does not start capture devices, launch FFmpeg,\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch7_demo_take_console_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"Copied public Swift bundle eight exact-copy source files body_in_receipt = false\"] subgraph Engines[\"Six source-contract engines\"] build[\"swift build witness app target compiles exit code + build marker only\"] state[\"Recording state model eleven typed states present marker uses wall + video time\"] bridge[\"Helper-bridge contract eleven helper commands script bound to repo\"] fsm[\"RecorderStore state machine start needs display + disk pause / resume / stop-to-review\"] meter[\"Hotkey + audio meter Control-Option-Command-M level clamped 0 to 1\"] transcribe[\"Transcribe payload builder WhisperKit decode config guards missing audio\"] end subgraph Negatives[\"Paired negative cases\"] mutate[\"Copy bundle to scratch delete one guard token\"] rerun[\"Re-run that engine expect it to flip to blocked\"] end result records[\"metadata-only result records refs, digests, anchors, booleans no source bodies, no logs\"] ceiling[\"Scope limit source-copy + fixture evidence only no app launch, capture, FFmpeg, WhisperKit dispatch, or launch\"] bundle --> Engines bundle --> mutate mutate --> rerun Engines --> result records rerun --> result records result records --> ceiling",
       "source_hash": "sha256:5726510915cbfb98e29f50aaddbe387712fa5899bc3a489f8ba6e85d59a48fe6",
       "html_url": "docs/paper-modules.html#paper-module-batch7-demo-take-console-capsule-diagram-1",
       "html_anchor": "paper-module-batch7-demo-take-console-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_demo_take_console_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "ScreenCaptureKit",
       "url": "https://developer.apple.com/documentation/ScreenCaptureKit",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "FFmpeg",
       "url": "https://www.ffmpeg.org/ffmpeg.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "WhisperKit",
       "url": "https://github.com/argmaxinc/WhisperKit",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public demo take console bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_demo_take_console_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11008
    },
    {
     "id": "paper_module.engine_room_generated_projection_drift_gate",
     "title": "Engine Room Generated Projection Drift Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-generated-projection-drift-gate",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-generated-projection-drift-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-generated-projection-drift-gate",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Public generated-projection drift fixture: owner-routed checks fingerprint declared sources and artifacts, reuse clean result records only under matching hashes, and fail planted-byte or missing-artifact cases.",
     "summary": "Engine Room Generated Projection Drift Gate is a generated-artifact freshness bundle. It validates projection owner selection from changed paths, declared source and artifact fingerprints, no-write check return codes, source-hash cache reuse, planted-byte detection, and missing-artifact failure over four public fixtures while keeping semantic drift proof, repair authority, full source registry validation, launch, and private-system claims out of scope.",
     "authority_ceiling": "Public owner-routed generated projection drift fixture and focused regression result records only; no semantic drift proof, full source registry validation, repair authority, launch-scope decision, private-system equivalence, source-file changes, external model access, or whole-system correctness.",
     "abstract": "Public generated-projection drift fixture: owner-routed checks fingerprint declared sources and artifacts, reuse clean result records only under matching hashes, and fail planted-byte or missing-artifact cases.",
     "teleology": {
      "section_id": "",
      "text": "Public generated-projection drift fixture: owner-routed checks fingerprint declared sources and artifacts, reuse clean result records only under matching hashes, and fail planted-byte or missing-artifact cases.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This staged Engine Room bundle imports the generated-projection drift control shape into Microcosm as a refactor.\n\n###### Purpose\n\nA repository that commits generated files alongside their sources has a standing problem: a generated artifact can quietly fall out of step with the source it was built from, and nothing fails until a reader trusts a stale file. This bundle answers one question. For a given set of changed paths, which generated artifacts might now be out of date, and is the owner's own check still passing?\n\nThe unusual choice is owner routing rather than a global snapshot. Each generated surface is modelled as a `ProjectionOwner` row that names its artifacts, its source authorities, and a no-write check command that is treated as the drift authority for that surface. A changed path is matched against those patterns, so a small edit selects only the owners it could plausibly affect instead of rerunning every builder in the repository. The check command itself, not this gate, decides whether a surface is fresh. The gate's job is to route to the right owner and record the evidence honestly.\n\nTwo properties keep that honest. The skip cache is deliberately strict: a prior clean result record is reused only when the source hash, the artifact hash, the check command, and artifact presence all still match, so any drift in any of those falls back to actually running the check. And a missing artifact counts as drift on its own, even when the owner's check command would pass, so an absent generated file cannot be laundered by a green command. The result is a freshness signal for declared owners, not a claim that every generated surface in the wider system is semantically correct.\n\n###### What It Demonstrates\n- Projection owners declare artifacts, source authorities, no-write checks, and repair commands.\n- Changed-path scoping selects the responsible owner instead of sweeping every generated surface.\n- Source and artifact files are content-addressed with `sha256` fingerprints.\n- Prior clean result records skip repeat checks only when source hash, artifact hash, check command, and artifact presence still match.\n- Missing artifacts drift even if an owner check command would otherwise pass.\n- A planted artifact byte is rejected when the owner's check command detects the mismatch.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR A[\"Changed path or owner id\"] --> B[\"Select projection owner\"] B --> C[\"Fingerprint source authorities\"] B --> D[\"Fingerprint generated artifacts\"] C --> E{\"Prior clean result record still matches?\"} D --> E E -- \"yes\" --> F[\"source-hash cache hit\"] E -- \"no\" --> G[\"Run owner's no-write check\"] F --> H{\"Artifact missing or check failed?\"} G --> H H -- \"yes\" --> I[\"drift result record\"] H -- \"no\" --> J[\"clean result record\"]\n```\n\nThe important property is owner routing, not global sweeping. A changed path selects the relevant owner row, the owner row names the artifact/source patterns and no-write check, and the result record records why the owner was checked or skipped. The gate can prove that a declared owner check was current for a fixture root; it cannot prove every generated surface in the source system is semantically fresh.\n\n###### Prior Art Grounding\n\nThe component is grounded in reproducible-build and regression-testing practices: declare source inputs, produce generated artifacts, compare content hashes, and rerun the owner check when either source or artifact identity changes. Useful prior-art anchors include:\n- [Bazel hermeticity](https://bazel.build/concepts/hermeticity), especially the emphasis on declared inputs, source identity, repeatable actions, and cache validity.\n- [pytest-regtest snapshot testing](https://pytest-regtest.readthedocs.io/en/stable/snapshots/), where recorded outputs are compared against reference outputs to detect unexpected changes.\n\nMicrocosm borrows the declared-input and artifact-fingerprint discipline, then routes drift checks through the projection owner instead of treating all generated files as one global snapshot. The result record proves owner-check freshness for declared artifacts; it is not semantic drift proof or launch-scope decision.\n\n###### Reader Evidence Routing\n\nRead `status: clean` as \"all selected owner rows had required artifacts present and either a current matching clean result record or a passing no-write check.\" Do not read it as proof that generated prose is semantically correct, that every source registry owner is valid, or that a repair command should run.\n\nRead `source_hash_cache.hit_count` as bounded skip evidence: source hash, artifact hash, artifact presence, and check command all matched a prior clean result record. If any of those change, the command path is the evidence lane again.\n\nRead `status_reasons: [\"artifact_missing\"]` as drift even when a check command would pass. The artifact presence check is part of the authority boundary; a missing generated output cannot be laundered by a passing owner command.\n\n###### Public Exercise\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.generated_projection_drift_gate evaluate-fixtures --input fixtures/first_wave/engine_room_generated_projection_drift_gate/input --json\n```\n\nThe fixture manifest names two positive cases (`clean_owner`, `scoped_changed_path`) and two negative cases (`planted_byte_detected`, `missing_artifact`). The expected result record is `status: pass`, `case_count: 4`, and `passed_case_count: 4`.\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_generated_projection_drift_gate.py -q --basetemp /tmp/microcosm-generated-projection-drift-gate\ncd microcosm-substrate && PYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves that the public fixture behavior and bundle-backed JSON projection remain reproducible. It does not establish semantic freshness for all generated surfaces, does not run repair commands, and excludes launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is an owner-routed generated projection drift gate over declared artifacts, source authorities, clean-result record fingerprints, and no-write check command return codes. It is not semantic drift proof, not full source registry validation, not repair authority, and not launch-scope decision. The long-tail source registry must still be judged by each owner's real check command.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 6548,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A repository that commits generated files alongside their sources has a standing problem: a generated artifact can quietly fall out of step with the source it was built from, and nothing fails until a reader trusts a stale file. This bundle answers one question. For a given set of changed paths, which generated artifacts might now be out of date, and is the owner's own check still passing? The unusual choice is owner routing rather than a global snapshot. Each generated surface is modelled as a ProjectionOwner row that names its artifacts, its source authorities, and a no-write check command that is treated as the drift authority for that surface. A changed path is matched against those pat\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-demonstrates",
       "title": "What It Demonstrates",
       "level": 2,
       "excerpt": "Projection owners declare artifacts, source authorities, no-write checks, and repair commands. Changed-path scoping selects the responsible owner instead of sweeping every generated surface. Source and artifact files are content-addressed with sha256 fingerprints. Prior clean result records skip repeat checks only when source hash, artifact hash, check command, and artifact presence still match. Missing artifacts drift even if an owner check command would otherwise pass. A planted artifact byte is rejected when the owner's check command detects the mismatch.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The important property is owner routing, not global sweeping. A changed path selects the relevant owner row, the owner row names the artifact/source patterns and no-write check, and the result record records why the owner was checked or skipped. The gate can prove that a declared owner check was current for a fixture root; it cannot prove every generated surface in the source system is semantically fresh.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is an owner-routed generated projection drift gate over declared artifacts, source authorities, clean-result record fingerprints, and no-write check command return codes. It is not semantic drift proof, not full source registry validation, not repair authority, and not launch-scope decision. The long-tail source registry must still be judged by each owner's real check command.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in reproducible-build and regression-testing practices: declare source inputs, produce generated artifacts, compare content hashes, and rerun the owner check when either source or artifact identity changes. Useful prior-art anchors include: Bazel hermeticity, especially the emphasis on declared inputs, source identity, repeatable actions, and cache validity. pytest-regtest snapshot testing, where recorded outputs are compared against reference outputs to detect unexpected changes. Microcosm borrows the declared-input and artifact-fingerprint discipline, then routes drift checks through the projection owner instead of treating all generated files as one global snaps\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Read status: clean as \"all selected owner rows had required artifacts present and either a current matching clean result record or a passing no-write check.\" Do not read it as proof that generated prose is semantically correct, that every source registry owner is valid, or that a repair command should run. Read sourcehashcache.hit_count as bounded skip evidence: source hash, artifact hash, artifact presence, and check command all matched a prior clean result record. If any of those change, the command path is the evidence lane again. Read statusreasons: [\"artifactmissing\"] as drift even when a check command would pass. The artifact presence check is part of the authority boundary; a missing\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-exercise",
       "title": "Public Exercise",
       "level": 2,
       "excerpt": "The fixture manifest names two positive cases (clean_owner, scopedchangedpath) and two negative cases (plantedbytedetected, missingartifact). The expected result record is status: pass, casecount: 4, and passedcasecount: 4.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves that the public fixture behavior and bundle-backed JSON projection remain reproducible. It does not establish semantic freshness for all generated surfaces, does not run repair commands, and does not include launch operations.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_generated_projection_drift_gate.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR A[\"Changed path or owner id\"] --> B[\"Select projection owner\"] B --> C[\"Fingerprint source authorities\"] B --> D[\"Fingerprint generated artifacts\"] C --> E{\"Prior clean result record still matches?\"} D --> E E -- \"yes\" --> F[\"source-hash cache hit\"] E -- \"no\" --> G[\"Run owner's no-write check\"] F --> H{\"Artifact missing or check failed?\"} G --> H H -- \"yes\" --> I[\"drift result record\"] H -- \"no\" --> J[\"clean result record\"]",
       "source_hash": "sha256:a327006cc65d938c1080b439ef16861d1be79475cbaa48b365ac535083d1bad0",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-generated-projection-drift-gate-diagram-1",
       "html_anchor": "paper-module-engine-room-generated-projection-drift-gate-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_generated_projection_drift_gate.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Bazel hermeticity",
       "url": "https://bazel.build/concepts/hermeticity",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "pytest-regtest snapshot testing",
       "url": "https://pytest-regtest.readthedocs.io/en/stable/snapshots/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public generated projection drift gate",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_generated_projection_drift_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 7770
    },
    {
     "id": "paper_module.engine_room_command_run_singleflight",
     "title": "Engine Room Command-Run Singleflight",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-command-run-singleflight",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-command-run-singleflight",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-command-run-singleflight",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Public command-run singleflight fixture: content-addressed subprocess keys collapse duplicate active runs and replay captured result records without claiming scheduler or daemon authority.",
     "summary": "Engine Room Command-Run Singleflight is a subprocess singleflight bundle. It validates content-addressed command keys, scoped dirty/content fingerprints, fcntl leader/follower election, completed-run reuse, captured output replay, and two negative boundaries over fixture commands while keeping scheduler, daemon, distributed-lock, live-state export, launch, and private-system claims out of scope.",
     "authority_ceiling": "Public subprocess singleflight fixture and focused regression result records only; no job scheduler, daemon, distributed lock service, live command_runs export, external model access authority, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "abstract": "Public command-run singleflight fixture: content-addressed subprocess keys collapse duplicate active runs and replay captured result records without claiming scheduler or daemon authority.",
     "teleology": {
      "section_id": "",
      "text": "Public command-run singleflight fixture: content-addressed subprocess keys collapse duplicate active runs and replay captured result records without claiming scheduler or daemon authority.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This staged Engine Room bundle imports the runnable core of the source `system/lib/command_run_singleflight.py` into Microcosm as a refactor.\n\n###### Purpose\n\nWhen several agents or background tasks fire the same command at the same moment, the naive outcome is several identical subprocesses doing the same work at once. That wastes the machine, and where the command has a side effect it can corrupt shared state by writing twice. The bundle answers one question: when two callers ask for the same command at the same time, can the system run it exactly once and hand the second caller the first caller's captured output?\n\nThe approach worth noticing is how it decides that two requests are \"the same\". It does not compare command names. It builds a content-addressed key over the argv, the working directory, a small slice of the environment, and, crucially, the scoped worktree state. Inside a Git repository that state includes HEAD, the porcelain status, and the diff and content hashes for the named scope paths. So two runs of the same command collapse into one only while the code they would see is identical. Edit a file in scope and the key changes, which forces a fresh run rather than serving a stale result. The `scope_mutation_changes_key` fixture exists precisely to pin that behaviour.\n\nThe coordination itself is deliberately small: an `fcntl` file lock per key elects one leader, the leader runs the subprocess and captures its output, and followers wait and replay that captured stdout, stderr, exit code, and run id rather than launching their own copy. There is no daemon, no queue, and no network lock service. The point of the bundle is to show that the collapse and the content-addressing both hold under a real two-process race, not to stand in for a scheduler.\n\n###### What It Demonstrates\n- Content-addressed command keys over argv, cwd digest, selected environment, scoped Git dirty state when available, and scoped file-content fallback.\n- `fcntl` leader/follower coordination so duplicate active invocations collapse to one subprocess execution.\n- Completed-run reuse when the caller opts in.\n- Captured stdout/stderr replay for followers and reuse result records.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD A[\"Command argv, cwd, env, scope paths\"] --> B[\"Build content-addressed key argv + cwd + env + scoped worktree state\"] B --> K[\"Hash key to key_hash\"] K --> C[\"Take per-key fcntl lock\"] C --> D{\"Active run for this key?\"} D -- \"running\" --> E[\"Follower waits on active result record\"] D -- \"completed and reuse allowed\" --> G[\"Reused: replay completed result record\"] D -- \"none, or stale\" --> H[\"Leader runs subprocess once\"] E --> F{\"Active finished in window?\"} F -- \"yes\" --> R[\"Follower: replay leader output shared run_id, same exit code\"] F -- \"no\" --> T[\"stale_or_timeout, exit 124 no rerun\"] H --> I[\"Capture stdout, stderr, exit code write run and latest-by-key result records\"] R --> Z[\"Return result record\"] G --> Z T --> Z I --> Z\n```\n\nThe shape is intentionally local. It proves a duplicate command key can elect one leader and make followers reuse that leader's captured result record. It does not claim a durable queue, daemon, distributed lock, scheduler, or export of the source `state/command_runs/` tree.\n\n###### Technical Mechanism\n\nThe runtime mechanism is a local subprocess singleflight, not a scheduler loop. `build_command_key` constructs a stable command key from argv, cwd label and digest, resource class, selected environment, and scoped state. When the cwd is inside Git, scoped state includes HEAD, porcelain status, binary diff hashes, staged diff hashes, and scoped file-content hashes; outside Git, the fallback is the scoped file-content fingerprint. The key hash is therefore an equality claim over command identity plus selected local state, not over command name alone.\n\n`run_command_singleflight` uses the key hash to locate a per-key `fcntl` lock, active result record, latest result record, run metadata, stdout file, and stderr file under the caller-provided state root. Under the lock, the first process writes active metadata and becomes the leader. A concurrent duplicate sees the active running metadata and becomes a follower. A caller that explicitly sets `reuse_completed=True` may replay a completed result record instead of launching a new subprocess.\n\nThe leader path `_run_leader` starts the subprocess once, writes active/run metadata, captures stdout and stderr, persists the final exit code, updates the latest-by-key result record, and appends leader lifecycle events. The follower path `_wait_for_active` polls the active result record until it is completed, then replays the same stdout, stderr, exit code, and `run_id`; if the active run is stale or does not finish before the wait window, the follower returns `stale_or_timeout` with exit code `124` and does not rerun the command. Empty argv is rejected before key construction.\n\nThe public fixture matrix exercises this mechanism through four named cases: `single_leader`, `completed_reuse`, `scope_mutation_changes_key`, and `missing_command_rejected`. The focused pytest adds the real OS-process race: two callers start the same command, the roles resolve to `leader` and `follower`, both result records share one `run_id`, both replay `counter=1`, and the side-effect counter increments exactly once.\n\n###### Concurrency Claim\n\nThe mechanism is cross-process singleflight, not just memoization. Its cache key is content-addressed over command identity and scoped state, including Git HEAD, porcelain status, and scoped dirty-file content when available. That means the same command can safely reuse or collapse while an edited scoped file creates a different key and must miss.\n\nThe `fcntl` lock is the leader/follower election. The leader executes the subprocess once and writes the captured result record; followers wait for the active run and replay the leader's captured stdout, stderr, return code, and metadata. The expected regression is a real OS-process race: two callers start with the same key and the side-effect counter increments exactly once.\n\nThe sibling idempotency pattern belongs in `metabolism_runtime`: active work is deduped with a SQLite partial unique index, while terminal work can be rerun. Together, the two patterns distinguish \"collapse duplicate active execution\" from \"cache completed results.\"\n\n###### Prior Art Grounding\n\nThe component is directly inspired by duplicate-call suppression and cache-stampede control patterns, especially Go's singleflight package:\n- [`golang.org/x/sync/singleflight`](https://pkg.go.dev/golang.org/x/sync/singleflight), which defines a namespace of work where duplicate calls for the same key share one in-flight execution.\n\nMicrocosm borrows the leader/follower and shared-result shape, then adapts it to local subprocess runs with content-addressed command identity, scoped worktree state, captured stdout/stderr replay, and an explicit distinction from completed-result caching. It is singleflight for command execution, not a general scheduler or distributed lock service.\n\n###### Reader Evidence Routing\n- `role: leader`: this process won the key lock and executed the subprocess.\n- `role: follower`: this process attached to the active run and replayed the leader's captured stdout, stderr, exit code, and metadata.\n- `role: reused`: completed-result reuse occurred because the caller explicitly set `reuse_completed`.\n- `dirty_fingerprint`: command-key invalidation is scoped to content. The `scope_mutation_changes_key` fixture mutates a scoped file and expects a new key, so edited scoped content is not laundered into an old singleflight run.\n- `status: stale_or_timeout` with exit code `124`: the wrapper refused to rerun while an active run failed to finish inside the wait window.\n- empty argv rejection: input validation only, not scheduler policy.\n- non-proof boundary: these result records do not prove daemon behavior, distributed locking, live `state/command_runs/` export, Atlas ownership, accepted-component status, launch-scope decision, or whole-system correctness.\n\n###### Public Exercise\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.command_run_singleflight evaluate-fixtures \\\n  --input fixtures/first_wave/engine_room_command_run_singleflight/input \\\n  --json\n```\n\nThe fixture manifest names two positive cases (`single_leader`, `completed_reuse`) and two negative-boundary cases (`scope_mutation_changes_key`, `missing_command_rejected`). The expected result record is `status: pass`, `case_count: 4`, and `passed_case_count: 4`.\n\n###### Named Proof Consumers\n\nThe named proof consumer is `tests/test_engine_room_command_run_singleflight.py`. Its focused tests cover: scoped file mutation changing the dirty fingerprint; completed-run reuse without rerunning; concurrent duplicate collapse with one leader, one follower, shared `run_id`, replayed output, and exactly one side effect; stale active-run timeout refusal without rerun; empty-command rejection; fixture-matrix parity; and the module CLI JSON result record.\n\nThe runtime proof consumer is `microcosm_core.engine_room.command_run_singleflight evaluate-fixtures`, which loads `fixtures/first_wave/engine_room_command_run_singleflight/input/*.json` and reports `status`, `case_count`, `passed_case_count`, source refs, `source_faithful_public_refactor`, scope limit, and scope boundaries.\n\nThe projection proof consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`, which keeps the bundle-backed Markdown/JSON corpus reproducible while preserving the generated Mermaid status and the blocked Atlas-card boundary named in the JSON bundle.\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_engine_room_command_run_singleflight.py \\\n  -q --basetemp /tmp/microcosm-command-run-singleflight\ncd microcosm-substrate && PYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves only that the public fixture behavior and bundle-backed JSON projection remain reproducible; it does not establish scheduler authority, daemon authority, distributed lock service behavior, launch-scope decision, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is a subprocess singleflight bundle, not a job scheduler, not a daemon, not a distributed lock service, and not an export of live `state/command_runs/` state. Its JSON bundle authority is limited to the paper-module relationships named in `core/paper_module_capsules.json`; it does not claim an accepted component, Atlas ownership, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.\n\n###### Subject Boundary Audit\n\nThe admitted subject is the mechanism row `mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight`. There is still no accepted `engine_room_command_run_singleflight` component claim, and `organ_atlas.engine_room_command_run_singleflight` remains blocked until the component-atlas owner binds its edges. The source authority is therefore enough for Mermaid and lattice walkability, but not enough for component readiness, Atlas readiness, scheduler authority, or launch-scope decision.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThis module sits in the Microcosm lattice as a mechanism-backed proof of duplicate active-command collapse. Its admitted subject is `mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight`, whose source row names the validating behavior: content-addressed subprocess keys, `fcntl` leader/follower election, completed-run reuse, scoped dirty/content fingerprint invalidation, captured stdout/stderr replay, and empty-command refusal. The Markdown is therefore a reader narrative over that mechanism row, not an independent source of authority.\n\nThe concept edge is `concept.import_projection_and_drift_control_bundle`: the public refactor imports the source `system/lib/command_run_singleflight.py` shape into Microcosm while keeping the proof surface bounded to fixture inputs, source refs, and metadata-only result records. The bundle's principles `P-1`, `P-2`, `P-6`, `P-8`, `P-9`, and `P-15`, plus axioms `AX-1`, `AX-5`, `AX-7`, `AX-8`, and `AX-11`, are the governing relationship edges reported by the structured source record; this page cites those ids rather than minting new doctrine to make the module look more complete.\n\nThe important dependency edge is `paper_module.engine_room_metabolism_runtime`. That sibling module shows the runtime idempotency pattern for active work, while this module isolates the command-run singleflight pattern. Read together, the pair separates two claims: active work can be deduped by a stateful runtime, and duplicate subprocess invocations can be collapsed by a content-addressed key plus per-key lock. The boundary matters because a green singleflight result record is not evidence for a durable scheduler, daemon, or distributed lock service.\n\nProjection status follows the same lattice boundary. The proof consumer for this relation is still `tests/test_engine_room_command_run_singleflight.py` plus the fixture CLI and paper-module corpus check named below.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13415,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "When several agents or background tasks fire the same command at the same moment, the naive outcome is several identical subprocesses doing the same work at once. That wastes the machine, and where the command has a side effect it can corrupt shared state by writing twice. The bundle answers one question: when two callers ask for the same command at the same time, can the system run it exactly once and hand the second caller the first caller's captured output? The approach worth noticing is how it decides that two requests are \"the same\". It does not compare command names. It builds a content-addressed key over the argv, the working directory, a small slice of the environment, and, cruciall\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-demonstrates",
       "title": "What It Demonstrates",
       "level": 2,
       "excerpt": "Content-addressed command keys over argv, cwd digest, selected environment, scoped Git dirty state when available, and scoped file-content fallback. fcntl leader/follower coordination so duplicate active invocations collapse to one subprocess execution. Completed-run reuse when the caller opts in. Captured stdout/stderr replay for followers and reuse result records.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is intentionally local. It proves a duplicate command key can elect one leader and make followers reuse that leader's captured result record. It does not claim a durable queue, daemon, distributed lock, scheduler, or export of the source state/command_runs/ tree.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism is a local subprocess singleflight, not a scheduler loop. buildcommandkey constructs a stable command key from argv, cwd label and digest, resource class, selected environment, and scoped state. When the cwd is inside Git, scoped state includes HEAD, porcelain status, binary diff hashes, staged diff hashes, and scoped file-content hashes; outside Git, the fallback is the scoped file-content fingerprint. The key hash is therefore an equality claim over command identity plus selected local state, not over command name alone. runcommandsingleflight uses the key hash to locate a per-key fcntl lock, active result record, latest result record, run metadata, stdout file, and\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "concurrency-claim",
       "title": "Concurrency Claim",
       "level": 2,
       "excerpt": "The mechanism is cross-process singleflight, not just memoization. Its cache key is content-addressed over command identity and scoped state, including Git HEAD, porcelain status, and scoped dirty-file content when available. That means the same command can safely reuse or collapse while an edited scoped file creates a different key and must miss. The fcntl lock is the leader/follower election. The leader executes the subprocess once and writes the captured result record; followers wait for the active run and replay the leader's captured stdout, stderr, return code, and metadata. The expected regression is a real OS-process race: two callers start with the same key and the side-effect count\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is a subprocess singleflight bundle, not a job scheduler, not a daemon, not a distributed lock service, and not an export of live state/command_runs/ state. Its JSON bundle authority is limited to the paper-module relationships named in core/papermodulecapsules.json; it does not claim an accepted component, Atlas ownership, launch-scope decision, private-system equivalence, source-file changes authority, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is directly inspired by duplicate-call suppression and cache-stampede control patterns, especially Go's singleflight package: golang.org/x/sync/singleflight, which defines a namespace of work where duplicate calls for the same key share one in-flight execution. Microcosm borrows the leader/follower and shared-result shape, then adapts it to local subprocess runs with content-addressed command identity, scoped worktree state, captured stdout/stderr replay, and an explicit distinction from completed-result caching. It is singleflight for command execution, not a general scheduler or distributed lock service.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "This module sits in the Microcosm lattice as a mechanism-backed proof of duplicate active-command collapse. Its admitted subject is mechanism.engineroomcommandrunsingleflight.validatespubliccommandrunsingleflight, whose source row names the validating behavior: content-addressed subprocess keys, fcntl leader/follower election, completed-run reuse, scoped dirty/content fingerprint invalidation, captured stdout/stderr replay, and empty-command refusal. The Markdown is therefore a reader narrative over that mechanism row, not an independent source of authority. The concept edge is concept.importprojectionanddriftcontrol_bundle: the public refactor imports the source system/lib/commandrunsingle\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "subject-boundary-audit",
       "title": "Subject Boundary Audit",
       "level": 2,
       "excerpt": "The admitted subject is the mechanism row mechanism.engineroomcommandrunsingleflight.validatespubliccommandrunsingleflight. There is still no accepted engineroomcommandrunsingleflight component claim, and organatlas.engineroomcommandrun_singleflight remains blocked until the component-atlas owner binds its edges. The source authority is therefore enough for Mermaid and lattice walkability, but not enough for component readiness, Atlas readiness, scheduler authority, or launch-scope decision.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "role: leader: this process won the key lock and executed the subprocess. role: follower: this process attached to the active run and replayed the leader's captured stdout, stderr, exit code, and metadata. role: reused: completed-result reuse occurred because the caller explicitly set reuse_completed. dirty_fingerprint: command-key invalidation is scoped to content. The scopemutationchanges_key fixture mutates a scoped file and expects a new key, so edited scoped content is not laundered into an old singleflight run. status: staleortimeout with exit code 124: the wrapper refused to rerun while an active run failed to finish inside the wait window. empty argv rejection: input validation only,\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-exercise",
       "title": "Public Exercise",
       "level": 2,
       "excerpt": "The fixture manifest names two positive cases (single_leader, completed_reuse) and two negative-boundary cases (scopemutationchangeskey, missingcommand_rejected). The expected result record is status: pass, casecount: 4, and passedcase_count: 4.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves only that the public fixture behavior and bundle-backed JSON projection remain reproducible; it does not establish scheduler authority, daemon authority, distributed lock service behavior, launch readiness, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "The named proof consumer is tests/testengineroomcommandrun_singleflight.py. Its focused tests cover: scoped file mutation changing the dirty fingerprint; completed-run reuse without rerunning; concurrent duplicate collapse with one leader, one follower, shared run_id, replayed output, and exactly one side effect; stale active-run timeout refusal without rerun; empty-command rejection; fixture-matrix parity; and the module CLI JSON result record. The runtime proof consumer is microcosmcore.engineroom.commandrunsingleflight evaluate-fixtures, which loads fixtures/firstwave/engineroomcommandrunsingleflight/input/.json and reports status, casecount, passedcase_count, source refs, sourcefaithful\u2026",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_command_run_singleflight.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Command argv, cwd, env, scope paths\"] --> B[\"Build content-addressed key argv + cwd + env + scoped worktree state\"] B --> K[\"Hash key to key_hash\"] K --> C[\"Take per-key fcntl lock\"] C --> D{\"Active run for this key?\"} D -- \"running\" --> E[\"Follower waits on active result record\"] D -- \"completed and reuse allowed\" --> G[\"Reused: replay completed result record\"] D -- \"none, or stale\" --> H[\"Leader runs subprocess once\"] E --> F{\"Active finished in window?\"} F -- \"yes\" --> R[\"Follower: replay leader output shared run_id, same exit code\"] F -- \"no\" --> T[\"stale_or_timeout, exit 124 no rerun\"] H --> I[\"Capture stdout, stderr, exit code write run and latest-by-key result records\"] R --> Z[\"Return result record\"] G --> Z T --> Z I --> Z",
       "source_hash": "sha256:863d2104afccbc946e1100e0c70c5cddb50c7cd4711cd7c07fa7f6ec90d24667",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-command-run-singleflight-diagram-1",
       "html_anchor": "paper-module-engine-room-command-run-singleflight-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_command_run_singleflight.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "`golang.org/x/sync/singleflight`",
       "url": "https://pkg.go.dev/golang.org/x/sync/singleflight",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 5,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.engine_room_metabolism_runtime",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Metabolism Runtime",
         "url": "paper-modules.html#paper-module-engine-room-metabolism-runtime"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public command run singleflight",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_command_run_singleflight.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14524
    },
    {
     "id": "paper_module.engine_room_metabolism_runtime",
     "title": "Engine Room Metabolism Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-metabolism-runtime",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-metabolism-runtime",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-metabolism-runtime",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Staged Engine Room component: synthetic SQLite metabolism runtime exercise for queues, leases, blackboard projection, and reconciliation.",
     "summary": "Engine Room Metabolism Runtime explains the metabolism runtime component inside the accepted Engine Room demo. It exercises synthetic SQLite queue state, lease recovery, blackboard claim projection, and cold-start reconciliation fixtures without exporting private runtime state or dispatching providers.",
     "authority_ceiling": "Component evidence for the accepted staged Engine Room demo only; not a live non-public runtime export, not external model service, not agent dispatch, not distributed database proof, not launch-scope decision, and not source-file changes.",
     "abstract": "Staged Engine Room component: synthetic SQLite metabolism runtime exercise for queues, leases, blackboard projection, and reconciliation.",
     "teleology": {
      "section_id": "",
      "text": "Staged Engine Room component: synthetic SQLite metabolism runtime exercise for queues, leases, blackboard projection, and reconciliation.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This staged Engine Room bundle imports the always-on metabolism runtime shape into Microcosm as a synthetic SQLite bundle.\n\n###### Purpose\n\nA long-running agent runtime keeps a durable record of work: jobs to do, leases held by workers, runs in flight, and claims asserted on a shared blackboard. That record drifts out of step with reality. A worker dies mid-run and its lease never gets released. A run finishes but the job it belonged to is still marked running. A launch log goes stale because nothing is writing to it. The question this component answers is narrow: given the durable state alone, which rows are inconsistent, and which of those should a person look at before anything touches them?\n\nThe interesting choice is what the reconciliation pass does not do. It reads the jobs and runs tables, applies its rules, and emits findings tagged `operator_review_required`. It does not auto-repair. An expired lease has a clean recovery path, so `requeue_expired_jobs` moves it back to `recoverable` on its own. But a running job with no run row, or a finished run whose job still reads running, is ambiguous: the safe move is to surface it, not to guess. The component draws that line deliberately and refuses to cross it.\n\nThe blackboard makes the same refusal. Claims are not edited or deleted in place. An assertion is one event row; a contradiction, expiry, or supersession is a separate event that points back at the assertion it invalidates. The active view is then projected by replaying the event log and dropping any assertion an invalidating event named. State is reconstructed from an append-only history rather than mutated, so the reason a claim is no longer active stays on the record.\n\nThis is a synthetic SQLite exercise, not the live runtime. It ships fixtures and a real database file, exercises the queue, lease, projection, and reconciliation paths, and emits a result record. It does not carry the private source database, dispatch any worker or provider, or stand in for distributed-database behaviour.\n\n###### Shape\n\nThe module is a staged, synthetic runtime model over a local SQLite database. It demonstrates durable queue state, lease recovery, blackboard claim-event projection, and cold-start reconciliation findings without exporting or operating the private source runtime. The public body is intentionally small: fixtures create jobs, claims, runs, launch logs, and blackboard events, then the runtime emits result records over those local artifacts.\n\nThe proof boundary is durable-state behavior, not live orchestration. A clean result record means the synthetic fixture exercised the declared queue, lease, projection, and reconciliation cases. It does not establish external model service, agent dispatch, distributed database behavior, ambiguous automatic repair, or launch-scope decision.\n\nSource refs\n\nappend_claim_event `build_blackboard_projection` reconcile running_job_no_run_row, `run_finalized_but_job_running,` `running_job_stale_launch_log` Diagram source\n\n```text\nflowchart TD Fixture[\"Public fixture cases queue recovery, blackboard projection, running-job reconciliation\"] Schema[\"connect / ensure_schema WAL SQLite jobs, runs, blackboard_claim_events\"] Queue[\"enqueue_job active-state idempotency\"] Lease[\"claim_next_job requeue_expired_jobs\"] Runs[\"start_run / complete_run run lifecycle rows\"] Blackboard[\"append_claim_event build_blackboard_projection\"] Reconcile[\"reconcile running_job_no_run_row, run_finalized_but_job_running, running_job_stale_launch_log\"] Result record[\"evaluate_fixture_dir JSON result record with counts, scope boundaries, and scope limit\"] Ceiling[\"Scope limit synthetic SQLite behavior only\"] Fixture --> Schema Schema --> Queue Queue --> Lease Lease --> Runs Schema --> Blackboard Runs --> Reconcile Blackboard --> Reconcile Reconcile --> Result record Result record --> Ceiling\n```\n\n###### What It Demonstrates\n- WAL-enabled SQLite schema for jobs, runs, and blackboard claim events.\n- Idempotent job insertion through a partial unique index on `idempotency_key` scoped to the active states. A duplicate enqueue while the job is still live is rejected; once the job reaches a terminal state the key is free to re-enqueue.\n- Lease claim and expired-claim recovery into `recoverable`: a claim carries an expiry, and `requeue_expired_jobs` returns any lapsed claim to the queue.\n- Blackboard claim-event projection that removes contradicted assertions.\n- Cold-start reconciliation findings for:\n- `running_job_no_run_row`\n- `run_finalized_but_job_running`\n- `running_job_stale_launch_log`\n\n###### Reader Evidence Routing\n- fixture CLI: inspect synthetic SQLite runtime behavior over public fixture roots.\n- focused pytest: inspect queue, lease recovery, blackboard projection, reconciliation findings, fixture replay, and CLI contract coverage.\n- paper-module coverage contract: verify that this slug has left the Engine Room legacy re-entry set because its JSON source record names source, subject, and code-locus evidence.\n- doctrine projection check: corpus/parity evidence only; it is not private-runtime export, external model access authority, accepted-component admission, or proof that live source metabolism state is healthy.\n- non-proof boundary: passing checks show the synthetic SQLite exercise is replayable and bounded by its scope limit.\n\n###### Prior Art Grounding\n\nThe component is grounded in autonomic-computing and durable-runtime control loops: observe work state, detect stale or inconsistent state, recover leases, and keep the durable log separate from the acting dispatcher. Relevant anchors include:\n- IBM's [autonomic-computing architecture](https://research.ibm.com/publications/autonomic-computing-architectural-approach-and-prototype) lineage, including the MAPE-K loop tradition that frames self-management as monitor, analyze, plan, execute, and knowledge.\n- [SQLite write-ahead logging](https://www.sqlite.org/wal.html), where a local database uses a WAL file for transactional durability and concurrency behavior.\n- Google's [SRE monitoring guidance](https://sre.google/sre-book/monitoring-distributed-systems/) as a practical lineage for separating symptoms, causes, and operational signals.\n\nMicrocosm borrows the self-management loop and durable local-state pattern, but keeps the component synthetic and public-safe: jobs, leases, blackboard assertions, and cold-start findings are exercised without exporting private runtime state or dispatching providers.\n\n###### Public Exercise\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.metabolism_runtime evaluate-fixtures \\\n  --input fixtures/first_wave/engine_room_metabolism_runtime/input \\\n  --json\n```\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_metabolism_runtime.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves only that the public fixture behavior and bundle-backed JSON projection remain reproducible; it does not establish live non-public runtime export, external model access, launch-scope decision, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is a synthetic SQLite bundle for durable queue, lease recovery, blackboard claim-event projection, and cold-start reconciliation taxonomy. It is not a live non-public runtime export, not an agent dispatcher, not external model service, not ambiguous auto-repair, and not a distributed database. Its JSON bundle authority is limited to component evidence for the accepted Engine Room demo mechanism and the relationships named in `core/paper_module_capsules.json`; it does not claim a standalone metabolism-runtime mechanism, an accepted component, Atlas ownership, or launch-scope decision. It never ships the private source metabolism database, runtime status JSON, operator sessions, provider state, or live logs.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nReaders should be able to inspect the public body through these local surfaces:\n- `src/microcosm_core/engine_room/metabolism_runtime.py` defines the SQLite schema, job queue, lease claim/recovery, run lifecycle, blackboard projection, reconciliation rules, fixture evaluator, and CLI.\n- `tests/test_engine_room_metabolism_runtime.py` checks WAL/idempotency, expired-claim recovery, contradicted blackboard assertions, each reconciliation finding, fixture replay, and the module CLI result record.\n- `fixtures/first_wave/engine_room_metabolism_runtime/input` carries the replayable public queue/reconciliation cases.\n- `core/fixture_manifests/engine_room_metabolism_runtime.fixture_manifest.json` binds the fixture set as an inspectable artifact.\n- `standards/std_microcosm_engine_room_metabolism_runtime.json` names the source-to-target relation, required positive and negative cases, validator command, and scope limit.\n\nThe source source refs in the standard are lineage anchors for the public refactor. They do not expose private runtime state, and they do not make this Markdown page a private-runtime export or broader launch-scope decision. Source authority for the paper-module row lives in the JSON bundle registry.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 9343,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A long-running agent runtime keeps a durable record of work: jobs to do, leases held by workers, runs in flight, and claims asserted on a shared blackboard. That record drifts out of step with reality. A worker dies mid-run and its lease never gets released. A run finishes but the job it belonged to is still marked running. A launch log goes stale because nothing is writing to it. The question this component answers is narrow: given the durable state alone, which rows are inconsistent, and which of those should a person look at before anything touches them? The interesting choice is what the reconciliation pass does not do. It reads the jobs and runs tables, applies its rules, and emits fin\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module is a staged, synthetic runtime model over a local SQLite database. It demonstrates durable queue state, lease recovery, blackboard claim-event projection, and cold-start reconciliation findings without exporting or operating the private source runtime. The public body is intentionally small: fixtures create jobs, claims, runs, launch logs, and blackboard events, then the runtime emits result records over those local artifacts. The proof boundary is durable-state behavior, not live orchestration. A clean result record means the synthetic fixture exercised the declared queue, lease, projection, and reconciliation cases. It does not establish external model service, agent dispatch,\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-demonstrates",
       "title": "What It Demonstrates",
       "level": 2,
       "excerpt": "WAL-enabled SQLite schema for jobs, runs, and blackboard claim events. Idempotent job insertion through a partial unique index on idempotency_key scoped to the active states. A duplicate enqueue while the job is still live is rejected; once the job reaches a terminal state the key is free to re-enqueue. Lease claim and expired-claim recovery into recoverable: a claim carries an expiry, and requeueexpiredjobs returns any lapsed claim to the queue. Blackboard claim-event projection that removes contradicted assertions. Cold-start reconciliation findings for: runningjobnorunrow runfinalizedbutjobrunning runningjobstalelaunchlog",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "Readers should be able to inspect the public body through these local surfaces: src/microcosmcore/engineroom/metabolism_runtime.py defines the SQLite schema, job queue, lease claim/recovery, run lifecycle, blackboard projection, reconciliation rules, fixture evaluator, and CLI. tests/testengineroommetabolismruntime.py checks WAL/idempotency, expired-claim recovery, contradicted blackboard assertions, each reconciliation finding, fixture replay, and the module CLI result record. fixtures/firstwave/engineroommetabolismruntime/input carries the replayable public queue/reconciliation cases. core/fixturemanifests/engineroommetabolismruntime.fixture_manifest.json binds the fixture set as an inspe\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "fixture CLI: inspect synthetic SQLite runtime behavior over public fixture roots. focused pytest: inspect queue, lease recovery, blackboard projection, reconciliation findings, fixture replay, and CLI contract coverage. paper-module coverage contract: verify that this slug has left the Engine Room legacy re-entry set because its JSON source record names source, subject, and code-locus evidence. doctrine projection check: corpus/parity evidence only; it is not private-runtime export, external model access authority, accepted-component admission, or proof that live source metabolism state is healthy. non-proof boundary: passing checks show the synthetic SQLite exercise is replayable and bound\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is a synthetic SQLite bundle for durable queue, lease recovery, blackboard claim-event projection, and cold-start reconciliation taxonomy. It is not a live non-public runtime export, not an agent dispatcher, not external model service, not ambiguous auto-repair, and not a distributed database. Its JSON bundle authority is limited to component evidence for the accepted Engine Room demo mechanism and the relationships named in core/papermodulecapsules.json; it does not claim a standalone metabolism-runtime mechanism, an accepted component, Atlas ownership, or launch-scope decision. It never ships the private source metabolism database, runtime status JSON, operator sessions, provider sta\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in autonomic-computing and durable-runtime control loops: observe work state, detect stale or inconsistent state, recover leases, and keep the durable log separate from the acting dispatcher. Relevant anchors include: IBM's autonomic-computing architecture lineage, including the MAPE-K loop tradition that frames self-management as monitor, analyze, plan, execute, and knowledge. SQLite write-ahead logging, where a local database uses a WAL file for transactional durability and concurrency behavior. Google's SRE monitoring guidance as a practical lineage for separating symptoms, causes, and operational signals. Microcosm borrows the self-management loop and durable l\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-exercise",
       "title": "Public Exercise",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves only that the public fixture behavior and bundle-backed JSON projection remain reproducible; it does not establish live non-public runtime export, external model access, launch-scope decision, or whole-system correctness.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_metabolism_runtime.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Fixture[\"Public fixture cases queue recovery, blackboard projection, running-job reconciliation\"] Schema[\"connect / ensure_schema WAL SQLite jobs, runs, blackboard_claim_events\"] Queue[\"enqueue_job active-state idempotency\"] Lease[\"claim_next_job requeue_expired_jobs\"] Runs[\"start_run / complete_run run lifecycle rows\"] Blackboard[\"append_claim_event build_blackboard_projection\"] Reconcile[\"reconcile running_job_no_run_row, run_finalized_but_job_running, running_job_stale_launch_log\"] Result record[\"evaluate_fixture_dir JSON result record with counts, scope boundaries, and scope limit\"] Ceiling[\"Scope limit synthetic SQLite behavior only\"] Fixture --> Schema Schema --> Queue Queue --> Lease Lease --> Runs Schema --> Blackboard Runs --> Reconcile Blackboard --> Reconcile Reconcile --> Result record Result record --> Ceiling",
       "source_hash": "sha256:169a7086286a897d7dfb5b4042a73e06f36f3018b2f6e59c77e5b3c10bd61f10",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-metabolism-runtime-diagram-1",
       "html_anchor": "paper-module-engine-room-metabolism-runtime-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_metabolism_runtime.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "autonomic-computing architecture",
       "url": "https://research.ibm.com/publications/autonomic-computing-architectural-approach-and-prototype",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SQLite write-ahead logging",
       "url": "https://www.sqlite.org/wal.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "SRE monitoring guidance",
       "url": "https://sre.google/sre-book/monitoring-distributed-systems/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.engine_room_demo",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Demo",
         "url": "paper-modules.html#paper-module-engine-room-demo"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public engine room demo",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_metabolism_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 10194
    },
    {
     "id": "paper_module.engine_room_bridge_campaign_dag",
     "title": "Engine Room Bridge Campaign DAG",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-bridge-campaign-dag",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-bridge-campaign-dag",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-bridge-campaign-dag",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Staged Engine Room component: pre-dispatch bridge-campaign DAG validator for typed nodes, acyclicity, synthesis reachability, and provider fan-out ceilings.",
     "summary": "Engine Room Bridge Campaign DAG binds the staged pre-dispatch campaign validator to the accepted Engine Room demo mechanism. It validates typed probe/reducer/synthesis graphs, rejects cycles, requires synthesis nodes to trace back to probe evidence, checks provider parallelism ceilings, and emits public fixture result records without dispatching providers or proving campaign execution safety.",
     "authority_ceiling": "Component evidence for the accepted staged Engine Room demo only; no external model access, campaign execution, reducer or synthesis correctness proof, provider safety proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "abstract": "Staged Engine Room component: pre-dispatch bridge-campaign DAG validator for typed nodes, acyclicity, synthesis reachability, and provider fan-out ceilings.",
     "teleology": {
      "section_id": "",
      "text": "Staged Engine Room component: pre-dispatch bridge-campaign DAG validator for typed nodes, acyclicity, synthesis reachability, and provider fan-out ceilings.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`engine_room_bridge_campaign_dag` is the first disjoint Engine Room bundle. It imports the source bridge-campaign contract shape as a refactor: validate a typed probe/reducer/synthesis graph, prove the graph is acyclic, make sure synthesis reaches probe evidence, and reject provider over-parallelism before any campaign reaches a dispatcher.\n\nSource refs:\n- `tools/meta/bridge/bridge_campaign.py`\n- `tools/meta/bridge/dispatch_validator.py`\n- `tools/meta/bridge/provider_capabilities.py`\n\n###### Purpose\n\nA bridge campaign fans one piece of work out across several agent providers, then folds their outputs back into a single synthesis. The cost of getting the graph wrong is paid after dispatch: a cycle that never terminates, a synthesis step that summarises nothing because it does not actually depend on any probe, or a fan-out that asks one provider for more parallel workers than it can take. This component answers one question before any of that happens. Is the campaign graph well formed enough to be safe to run?\n\nThe design choice that makes this useful is that it is a validator and nothing else. `validate_campaign` reads a small JSON spec and returns a list of typed rule decisions; it never dispatches an agent, calls a provider, or runs a reducer. The rule ids deliberately mirror the source contract's CR and VR rule families, so the public bundle carries a faithful subset of the same checks the private runtime applies, without carrying the runtime itself.\n\nThe check that is worth pausing on is reachability. It is not enough for the graph to be acyclic and for the node types to be valid. The single synthesis node must transitively depend on at least one probe, so that the conclusion can be traced back to evidence rather than to other conclusions. A graph that wires synthesis only to a reducer with no probe behind it is rejected. That is the difference between a structure that looks like a campaign and one whose output is grounded in something the campaign actually gathered.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD A[\"Typed campaign spec (JSON object)\"] --> B[\"Envelope checks schema, kind, kebab-case id, intent, plan path, continuation\"] B --> C[\"Node checks unique labels, probe/reducer/ synthesis roles, input modes, dependencies resolve\"] C --> D[\"Acyclicity check\"] D --> E[\"Exactly one synthesis node barrier binds that node\"] E --> F[\"Synthesis transitively reaches a probe\"] F --> G[\"Provider fan-out ceiling workers <= safe_parallelism\"] G --> H[\"Pass result record ValidationResult ok = true\"] B -.->|\"rule reject\"| R[\"Reject result record rule id, target, reason\"] C -.->|\"rule reject\"| R D -.->|\"rule reject\"| R E -.->|\"rule reject\"| R F -.->|\"rule reject\"| R G -.->|\"rule reject\"| R\n```\n\nThe shape is intentionally pre-dispatch. The module reads a typed campaign graph, validates node kinds and dependencies, rejects cycles, requires synthesis paths to reach probe evidence, checks provider fan-out ceilings, and emits a pass/reject result record. It does not dispatch bridge workers, use external model services, execute reducers, run synthesis, or prove provider safety.\n\n###### Technical Mechanism\n\nThe runtime mechanism is a deterministic graph validator in `src/microcosm_core/engine_room/bridge_campaign_dag.py`. `validate_campaign` normalizes one campaign JSON object, then emits rule decisions instead of performing side effects. The rule set checks the input envelope (`schema_version`, `kind`, kebab-case `campaign_id`, bounded `intent`, public-looking `plan_path`, and bounded continuation packet), then checks node structure: unique labels, valid `probe` / `reducer` / `synthesis` roles, declared dependencies, acyclicity, exactly one synthesis node, barrier binding, and transitive reachability from synthesis back to at least one probe.\n\nThe provider boundary is part of the same mechanism. `SAFE_PARALLELISM` gives a small local ceiling for `chatgpt`, `claude`, `gemini`, and `local`; rule `VR005` rejects a request whose worker count exceeds the selected provider ceiling. Because the validator returns a `ValidationResult` with decision rows, errors, and warnings, the result record explains why a graph passed or failed without dispatching any provider work.\n\n`validate_fixture_dir` is the public proof harness. It loads the four fixture campaigns, compares each fixture's declared `expected_ok` field against the observed validator result, and reports `status: pass` only if every positive and negative case behaves as declared. The positive case is a three-probe graph that fans into one reducer and one synthesis node. The negative cases are a cycle, a 99-worker provider ceiling violation, and a synthesis path that depends on a reducer with no probe evidence.\n\nThis mechanism sits under the bundle edge `paper_module.engine_room_bridge_campaign_dag -> mechanism.engine_room_demo.validates_public_engine_room_demo`. The doctrine relation is intentionally component-shaped: the structured source record records the existing Engine Room demo mechanism as the subject, the `concept.import_projection_and_drift_control_bundle` concept, principles `P-1`, `P-2`, `P-5`, `P-6`, `P-9`, and `P-15`, axioms `AX-1`, `AX-4`, `AX-5`, and `AX-8`, and the dependency on `paper_module.engine_room_demo`.\n\n###### Named Proof Consumers\n- Runtime CLI consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.engine_room.bridge_campaign_dag validate-fixtures --input fixtures/first_wave/engine_room_bridge_campaign_dag/input --json`. Expected proof shape: `status: pass`, `case_count: 4`, and all fixture expectations met.\n- Focused regression: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider --basetemp=/tmp/microcosm_engine_room_bridge_campaign_dag_pytest tests/test_engine_room_bridge_campaign_dag.py -q`. Expected proof shape: the six tests cover the valid campaign, cycle rejection, provider ceiling rejection, dangling synthesis rejection, fixture-matrix result record, and CLI JSON result record.\n- Bundle/corpus parity: `PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus`. Expected proof shape: the structured source record remains reproducible from the bundle and Markdown projection, with Mermaid available from bundle edges and Atlas honestly blocked behind the component-atlas owner lane.\n- structured source record readback: `jq '{source_authority:.paper_module_payload.source_authority, mermaid:.paper_module_payload.generated_projections.mermaid.status, atlas:.paper_module_payload.generated_projections.atlas_card.status, edge_count:(.relationships.edges|length), unresolved:(.relationships.unpopulated_selective_relations|length)}' paper_modules/engine_room_bridge_campaign_dag.json`. Expected proof shape: `json_capsule`, `available_from_capsule_edges`, `blocked_until_organ_atlas_owner_lane_binds_edges`, resolved bundle edges, and zero unpopulated selective relations.\n\n###### Reader Evidence Routing\n- valid fixture: the typed graph passed public pre-dispatch checks for probes, reducer fan-in, and synthesis reachability.\n- cycle failure: the local validator rejects a dependency cycle; this is a graph-shape proof only, not a statement about every private campaign graph.\n- over-parallel failure: the public fixture enforces the declared provider capacity ceiling; it is not live provider safety, quota authority, or launch clearance.\n- dangling synthesis failure: synthesis nodes must trace back to probe evidence before dispatch is allowed.\n- non-proof boundary: no fixture here executes a campaign, dispatches a provider, validates reducer output, proves synthesis correctness, creates a standalone component, or flips the generated Atlas card out of the component-atlas-owner lane.\n\n###### Prior Art Grounding\n\nThis staged component is grounded in workflow-orchestration prior art that models work as a directed acyclic graph with typed nodes, dependency edges, fan-in, and validation before execution. Useful reference points are:\n- [Apache Airflow DAGs](https://airflow.apache.org/docs/apache-airflow/2.4.3/core-concepts/dags.html), where tasks are grouped into a directed acyclic graph with explicit dependencies.\n- [BPMN](https://www.omg.org/spec/BPMN/2.0/) and related workflow notation traditions, where process graphs separate control-flow structure from the concrete execution system.\n\nMicrocosm borrows the graph validation and pre-dispatch accounting pattern: acyclicity, evidence reachability, and provider-capacity ceilings are checked before a campaign can run. This bundle stops at the contract/preflight layer; it does not dispatch agents or claim provider-safety proof.\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_bridge_campaign_dag.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves that the public fixture behavior and bundle JSON projection remain reproducible; it does not execute campaigns, validate reducer or synthesis correctness, prove provider safety, include launch operations, or create a standalone Engine Room component.\n\nPositive case: a three-probe campaign fans into one reducer and one synthesis node. Negative cases: a cycle, a 99-worker provider-ceiling violation, and a synthesis path that never reaches a probe.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis bundle is a contract/preflight validator. It does not dispatch agents, execute campaigns, prove provider safety, include launch operations, or claim equivalence to the private bridge runtime. It is staged under unshared Engine Room paths while the accepted-component registry, atlas, runtime shell, and CLI integration surfaces remain separate authority surfaces. The JSON bundle binds this module as component evidence for `mechanism.engine_room_demo.validates_public_engine_room_demo`; it does not invent a standalone `engine_room_bridge_campaign_dag` component or mechanism.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open floor for this module is the runnable Engine Room refactor plus its fixture and test surfaces:\n- runtime: `src/microcosm_core/engine_room/bridge_campaign_dag.py`\n- standard: `standards/std_microcosm_engine_room_bridge_campaign_dag.json`\n- fixture manifest: `core/fixture_manifests/engine_room_bridge_campaign_dag.fixture_manifest.json`\n- public fixtures: `fixtures/first_wave/engine_room_bridge_campaign_dag/input`\n- focused tests: `tests/test_engine_room_bridge_campaign_dag.py`\n- generated JSON source record: `paper_modules/engine_room_bridge_campaign_dag.json`\n\nThat floor is enough for a reader to replay the public preflight fixtures and inspect the DAG checks. It is not enough to claim private bridge-runtime parity, provider safety, campaign execution authority, accepted-component authority, or launch-scope decision.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 10997,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A bridge campaign fans one piece of work out across several agent providers, then folds their outputs back into a single synthesis. The cost of getting the graph wrong is paid after dispatch: a cycle that never terminates, a synthesis step that summarises nothing because it does not actually depend on any probe, or a fan-out that asks one provider for more parallel workers than it can take. This component answers one question before any of that happens. Is the campaign graph well formed enough to be safe to run? The design choice that makes this useful is that it is a validator and nothing else. validate_campaign reads a small JSON spec and returns a list of typed rule decisions; it never d\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is intentionally pre-dispatch. The module reads a typed campaign graph, validates node kinds and dependencies, rejects cycles, requires synthesis paths to reach probe evidence, checks provider fan-out ceilings, and emits a pass/reject result record. It does not dispatch bridge workers, use external model services, execute reducers, run synthesis, or prove provider safety.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism is a deterministic graph validator in src/microcosmcore/engineroom/bridgecampaigndag.py. validate_campaign normalizes one campaign JSON object, then emits rule decisions instead of performing side effects. The rule set checks the input envelope (schemaversion, kind, kebab-case campaignid, bounded intent, public-looking plan_path, and bounded continuation packet), then checks node structure: unique labels, valid probe / reducer / synthesis roles, declared dependencies, acyclicity, exactly one synthesis node, barrier binding, and transitive reachability from synthesis back to at least one probe. The provider boundary is part of the same mechanism. SAFE_PARALLELISM gives\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open floor for this module is the runnable Engine Room refactor plus its fixture and test surfaces: runtime: src/microcosmcore/engineroom/bridgecampaigndag.py standard: standards/stdmicrocosmengineroombridgecampaigndag.json fixture manifest: core/fixturemanifests/engineroombridgecampaigndag.fixturemanifest.json public fixtures: fixtures/firstwave/engineroombridgecampaign_dag/input focused tests: tests/testengineroombridgecampaign_dag.py generated JSON source record: papermodules/engineroombridgecampaign_dag.json That floor is enough for a reader to replay the public preflight fixtures and inspect the DAG checks. It is not enough to claim private bridge-runtime parity, provider sa\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This bundle is a contract/preflight validator. It does not dispatch agents, execute campaigns, prove provider safety, include launch operations, or claim equivalence to the private bridge runtime. It is staged under unshared Engine Room paths while the accepted-component registry, atlas, runtime shell, and CLI integration surfaces remain separate authority surfaces. The JSON bundle binds this module as component evidence for mechanism.engineroomdemo.validatespublicengineroomdemo; it does not invent a standalone engineroombridgecampaigndag component or mechanism.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves that the public fixture behavior and bundle JSON projection remain reproducible; it does not execute campaigns, validate reducer or synthesis correctness, prove provider safety, include launch operations, or create a standalone Engine Room component. Positive case: a three-probe campaign fans into one reducer and one synthesis node. Negative cases: a cycle, a 99-worker provider-ceiling violation, and a synthesis path that never reaches a probe.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "Runtime CLI consumer: PYTHONPATH=src ../repo-python -m microcosmcore.engineroom.bridgecampaigndag validate-fixtures --input fixtures/firstwave/engineroombridgecampaign_dag/input --json. Expected proof shape: status: pass, case_count: 4, and all fixture expectations met. Focused regression: PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider --basetemp=/tmp/microcosmengineroombridgecampaigndagpytest tests/testengineroombridgecampaign_dag.py -q. Expected proof shape: the six tests cover the valid campaign, cycle rejection, provider ceiling rejection, dangling synthesis rejection, fixture-matrix result record, and CLI JSON result record. Bundle/corpus parity: PYTHONPATH=src ../repo-pyt\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "valid fixture: the typed graph passed public pre-dispatch checks for probes, reducer fan-in, and synthesis reachability. cycle failure: the local validator rejects a dependency cycle; this is a graph-shape proof only, not a statement about every private campaign graph. over-parallel failure: the public fixture enforces the declared provider capacity ceiling; it is not live provider safety, quota authority, or launch clearance. dangling synthesis failure: synthesis nodes must trace back to probe evidence before dispatch is allowed. non-proof boundary: no fixture here executes a campaign, dispatches a provider, validates reducer output, proves synthesis correctness, creates a standalone compo\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This staged component is grounded in workflow-orchestration prior art that models work as a directed acyclic graph with typed nodes, dependency edges, fan-in, and validation before execution. Useful reference points are: Apache Airflow DAGs, where tasks are grouped into a directed acyclic graph with explicit dependencies. BPMN and related workflow notation traditions, where process graphs separate control-flow structure from the concrete execution system. Microcosm borrows the graph validation and pre-dispatch accounting pattern: acyclicity, evidence reachability, and provider-capacity ceilings are checked before a campaign can run. This bundle stops at the contract/preflight layer; it does\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_bridge_campaign_dag.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"Typed campaign spec (JSON object)\"] --> B[\"Envelope checks schema, kind, kebab-case id, intent, plan path, continuation\"] B --> C[\"Node checks unique labels, probe/reducer/ synthesis roles, input modes, dependencies resolve\"] C --> D[\"Acyclicity check\"] D --> E[\"Exactly one synthesis node barrier binds that node\"] E --> F[\"Synthesis transitively reaches a probe\"] F --> G[\"Provider fan-out ceiling workers <= safe_parallelism\"] G --> H[\"Pass result record ValidationResult ok = true\"] B -.->|\"rule reject\"| R[\"Reject result record rule id, target, reason\"] C -.->|\"rule reject\"| R D -.->|\"rule reject\"| R E -.->|\"rule reject\"| R F -.->|\"rule reject\"| R G -.->|\"rule reject\"| R",
       "source_hash": "sha256:99ea0e3c88d6734ebddb51aa7b9aad1c27bf51c6337bc23685ba59703a7a7328",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-bridge-campaign-dag-diagram-1",
       "html_anchor": "paper-module-engine-room-bridge-campaign-dag-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_bridge_campaign_dag.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Apache Airflow DAGs",
       "url": "https://airflow.apache.org/docs/apache-airflow/2.4.3/core-concepts/dags.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "BPMN",
       "url": "https://www.omg.org/spec/BPMN/2.0/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.engine_room_demo",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Demo",
         "url": "paper-modules.html#paper-module-engine-room-demo"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public engine room demo",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_bridge_campaign_dag.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 12015
    },
    {
     "id": "paper_module.engine_room_annex_knowledge_router",
     "title": "Engine Room Reference Knowledge Router",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-annex-knowledge-router",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-annex-knowledge-router",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-annex-knowledge-router",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Public Engine Room component: sanitized reference router for structured fields, note relevance, domain filters, and no-match boundaries.",
     "summary": "Engine Room Reference Knowledge Router binds the staged reference-routing bundle to a concrete mechanism. It scores structured routing metadata, family text, open-first summaries, and curated notes over public fixtures, then rejects domain-mismatch and empty-query cases without cloning repositories, exporting private reference material, or claiming BM25, TF-IDF, embedding, license, launch, or private-system authority.",
     "authority_ceiling": "Public sanitized-reference routing fixture and focused regression evidence only; no BM25, TF-IDF, embedding search, repository cloning, license authority, private reference corpus export, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "abstract": "Public Engine Room component: sanitized reference router for structured fields, note relevance, domain filters, and no-match boundaries.",
     "teleology": {
      "section_id": "",
      "text": "Public Engine Room component: sanitized reference router for structured fields, note relevance, domain filters, and no-match boundaries.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This staged Engine Room bundle imports the runnable route-selection core of the source reference registry into Microcosm as a refactor.\n\n###### Purpose\n\nThe private system keeps a registry of references: reusable bodies of borrowed technique, each tagged with the domains, clusters, and problem spaces it speaks to. When an agent has a problem in front of it, something has to decide which references are worth opening. The source side does this with `route_annexes`. This module is a source-faithful copy of that decision, narrowed so it can run in public without carrying the private corpus.\n\nIt answers one question: given a problem statement and a sanitized catalogue, which reference rows are relevant, and exactly why. The \"why\" is the point. Rather than return an opaque relevance number, the router decomposes every row's score into four named buckets, so a reader can see whether a row ranked because its structured routing fields matched, because its description happened to share words, or because a curated note carried the weight.\n\nThe design choice worth noting is the tiering. Structured routing metadata that someone deliberately authored scores far higher than free text that merely happens to contain a query word. An exact match on a `problem_spaces` field is worth 120 points; the same word appearing in a description is worth 6. This encodes a small but useful bias: trust the metadata an author chose over accidental word overlap in prose. It is a deliberately simple weighted-token scorer, not a learned retriever, and the page is careful not to dress it as one.\n\n###### What It Demonstrates\n- Structured routing fields score with the highest weights.\n- Family text, tags, and open-first summaries provide weaker fallback evidence.\n- Curated notes are sorted by relevance and contribute matched note ids.\n- Domain and cluster filters prevent unrelated references from ranking.\n- Every result carries a score decomposition via `match_breakdown`.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TB Problem[\"Problem statement normalized to tokens\"] --> Empty{\"Empty after normalization?\"} Empty -->|yes| NoMatch[\"No-match result record status: no_match\"] Empty -->|no| Loop[\"For each reference row in sanitized catalog\"] Loop --> Filter{\"Domain / cluster filter matches?\"} Filter -->|no| Drop[\"Excluded before scoring\"] Filter -->|yes| Score[\"Four-tier token scorer\"] subgraph Tiers[\"Weighted scoring (exact / phrase / per-token)\"] Structured[\"Structured routing fields 120 / 80 / 18\"] Family[\"Family text: slug, name, description, tags 32 / 24 / 6\"] OpenFirst[\"Open-first summaries 20 / 16 / 4\"] Notes[\"Curated notes, relevance-sorted 18 / 12 / 3\"] end Score --> Structured Score --> Family Score --> OpenFirst Score --> Notes Structured --> Sum[\"Sum tiers into total score + match_breakdown + matched_note_ids\"] Family --> Sum OpenFirst --> Sum Notes --> Sum Sum --> Threshold{\"total score > 0?\"} Threshold -->|no| Drop Threshold -->|yes| Ranked[\"Ranked reference matches highest score first, with score breakdown\"] Drop --> Loop Loop -->|no rows scored| NoMatch\n```\n\nThe shape is intentionally a router, not a corpus crawler. It reads a sanitized fixture catalog and a problem statement, applies field-weighted token scoring and optional filters, then emits ranked matches with visible score breakdowns. It does not clone reference repositories, inspect private reference bodies, run BM25/Lucene/embedding search, perform license review, or authorize use of the private reference corpus.\n\n###### Technical Mechanism\n\nThe runtime mechanism is a deterministic ranking pass over a caller-supplied catalog. `route_catalog()` is the result record boundary: it calls `route_annexes()`, records the problem text and optional domain/cluster filters, carries `source_refs`, and returns either a routed row set or an empty no-match row set with `status: routed` or `status: no_match`. The row score is intentionally decomposed into four buckets so readers can audit why a fixture ranked without reading private reference bodies.\n\nThe scoring path starts by normalizing punctuation, slashes, underscores, and hyphens into lowercase tokens, then drops a small local stopword set. Structured fields from `routing_summary` dominate the score: problem spaces, capabilities, domains, and clusters use weights of 120 for exact equality, 80 for phrase containment, and 18 per overlapping token. Family text is weaker: slug, display name, description, and tags use 32/24/6 weights. `open_first` summaries are weaker again at 20/16/4. Curated notes are sorted by bounded `relevance`, scored at 18/12/3, and contribute only their ids to `matched_note_ids`. The result record therefore exposes the rank cause as `match_breakdown` rather than asking the reader to trust an opaque relevance number.\n\nFilters run before scoring. If the caller supplies a domain or cluster, the candidate row must match the normalized field exactly or it is excluded before any text score can rescue it. Empty problem text returns no candidates. Fixture cases bind both sides of that mechanism: `provider_backoff_route` and `note_match` exercise positive structured and note-backed ranking, while `domain_filter_no_match` and `empty_problem_no_match` exercise the negative filter and empty-query paths. `evaluate_fixture_dir()` then turns the four JSON cases into a pass/fail result record with `case_count`, `passed_case_count`, `claim_ceiling`, and anti_claims.\n\n###### Prior Art Grounding\n\nThe component borrows the general information-retrieval pattern of scoring a candidate corpus with visible term evidence and returning ranked, inspectable matches. The closest prior-art families are classic TREC-style retrieval evaluation, BM25/Lucene explainable term scoring, and fielded/faceted search interfaces where structured fields carry different weights than body text:\n- [Text REtrieval Conference (TREC)](https://trec.nist.gov/) as the long-running benchmark lineage for retrieval tasks, relevance judgments, and scored runs.\n- [Apache Lucene `BM25Similarity`](https://lucene.apache.org/core/9_8_0/core/org/apache/lucene/search/similarities/BM25Similarity.html) as a concrete example of explainable sparse term scoring.\n\nMicrocosm takes the inspectable scoring and field-weighting inspiration, but this module intentionally remains a weighted-token router over a sanitized reference catalog. It does not claim to implement BM25, TF-IDF, embeddings, or private-corpus search.\n\n###### Reader Evidence Routing\n- Runtime route: `src/microcosm_core/engine_room/annex_knowledge_router.py` is the local source locus for the staged router. It supports replaying the sanitized fixture behavior under the mechanism subject; it does not create an component subject.\n- Positive fixtures: provider-backoff and curated-note fixtures show that structured routing fields and matched note ids affect ranking. Read a high `score` as local weighted-token relevance against the sanitized catalog only, not as semantic search, BM25/Lucene equivalence, embedding similarity, or proof about the private reference corpus.\n- Explanation surface: `match_breakdown` is the reader-facing account of why a row ranked. Structured fields carry more weight than notes and fallback text, and matched note ids explain which curated notes contributed. Do not treat matched notes as full reference-body disclosure.\n- Negative fixtures: domain-filtered no-match and empty-problem no-match cases are filter and threshold result records. They prove the public fixture rejects those cases; they do not prove that no real reference exists.\n- Corpus boundary: the fixture catalog is sanitized and finite. The page may name routes, fixtures, standards, counts, and result record shapes, but it must not expose private source reference bodies, source notes, model-output data, or live workspace state.\n\n###### Public Exercise\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.annex_knowledge_router evaluate-fixtures \\\n  --input fixtures/first_wave/engine_room_annex_knowledge_router/input \\\n  --json\n```\n\n###### Bundle Projection Packet\n- source authority now: `core/paper_module_capsules.json::paper_modules[89:paper_module.engine_room_annex_knowledge_router]`.\n- generated row now: `paper_modules/engine_room_annex_knowledge_router.json` reports `paper_module_payload.source_authority: json_capsule`.\n- generated projection status now: Mermaid `available_from_capsule_edges`; Atlas `blocked_until_organ_atlas_owner_lane_binds_edges`.\n- mechanism subject: `mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router`.\n- resolved source locus: `src/microcosm_core/engine_room/annex_knowledge_router.py`.\n- composition source locus: `src/microcosm_core/engine_room/demo.py`.\n- missing authority edge now: no accepted component JSON instance currently resolves for `engine_room_annex_knowledge_router`, so this page must not invent an component subject.\n- re-entry condition: after component admission or Atlas owner binding lands a broader edge, run `scripts/build_doctrine_projection.py --write-paper-module-corpus`, and verify the generated instance still reflects bundle authority without broadening the scope limit.\n- scope limit: this page can explain the staged public exercise and source loci; it cannot claim component admission, launch-scope decision, private-system equivalence, private-corpus search, or aggregate doctrine-lattice coverage.\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_annex_knowledge_router.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not unblock the Atlas owner lane, prove private-corpus search, or include launch operations.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is explainable tiered weighted-token retrieval over a sanitized reference catalog. It is not BM25, not TF-IDF, not embedding search, not repository cloning, not third-party license review, and not authority over the private reference corpus. Its JSON bundle authority is narrow: the bundle binds one staged mechanism subject, resolved source loci, fixtures, standard, tests, and result record surfaces. It does not admit an component, unblock the Atlas owner lane, or authorize public launch.\n\n###### Limitations\n- The scoring model is a simple weighted token overlap model. It has no inverse document frequency, term saturation, learned embedding space, semantic reranker, or benchmarked retrieval metric.\n- The catalog is finite and sanitized. A no-match result record only proves the public fixture did not route under the supplied filters; it does not establish that no useful private reference, public repository, or future corpus row exists.\n- `matched_note_ids` expose which curated notes contributed, but they are ids and summaries only. They do not disclose or validate private reference bodies.\n- Domain and cluster filters are exact normalized filters. They prevent obvious cross-domain ranking in the fixture, but they do not solve ontology drift, synonym expansion, or ambiguous route taxonomy.\n- The validator proves the public fixture matrix and CLI result record shape. It does not establish private source-corpus coverage, third-party license safety, accepted component admission, Atlas owner binding, launch-scope decision, or whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open floor for this module is the runnable Engine Room refactor plus its fixture and test surfaces:\n- runtime: `src/microcosm_core/engine_room/annex_knowledge_router.py`\n- standard: `standards/std_microcosm_engine_room_annex_knowledge_router.json`\n- fixture manifest: `core/fixture_manifests/engine_room_annex_knowledge_router.fixture_manifest.json`\n- public fixtures: `fixtures/first_wave/engine_room_annex_knowledge_router/input`\n- focused tests: `tests/test_engine_room_annex_knowledge_router.py`\n- generated JSON source record: `paper_modules/engine_room_annex_knowledge_router.json`\n\nThat floor is enough for a reader to replay the public routing fixtures and inspect how scores and filters are computed. It is not enough to claim private reference-corpus search, third-party license review, component admission, Atlas launch-scope decision, or launch-scope decision.\n\n###### Governing Lattice Relation\n\nThe governing lattice role is a staged mechanism, not an accepted component. `mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router` grounds the module in `src/microcosm_core/engine_room/annex_knowledge_router.py`, runs in the `engine_room_demo` host context, and connects to `concept.architecture_and_navigation_route_contract_bundle` plus `concept.import_projection_and_drift_control_bundle`. That relation says the module is evidence for route-selection behavior inside the Engine Room import and projection-control bundle; it does not upgrade the sanitized router into general reference search or launch-scope decision.\n\nThe standard row `std_microcosm_engine_room_annex_knowledge_router` supplies the hard public/private boundary: required positives are `provider_backoff_route` and `note_match`, required negatives are `domain_filter_no_match` and `empty_problem_no_match`, and the scope limit sets BM25, TF-IDF, embedding search, repository cloning, license authority, private-corpus authority, and launch-scope decision to false. Those edges are navigation and evidence-routing edges, source-linked only; the JSON source record and mechanism/standard rows remain the governing records.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 13832,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The private system keeps a registry of references: reusable bodies of borrowed technique, each tagged with the domains, clusters, and problem spaces it speaks to. When an agent has a problem in front of it, something has to decide which references are worth opening. The source side does this with route_annexes. This module is a source-faithful copy of that decision, narrowed so it can run in public without carrying the private corpus. It answers one question: given a problem statement and a sanitized catalogue, which reference rows are relevant, and exactly why. The \"why\" is the point. Rather than return an opaque relevance number, the router decomposes every row's score into four named buc\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-demonstrates",
       "title": "What It Demonstrates",
       "level": 2,
       "excerpt": "Structured routing fields score with the highest weights. Family text, tags, and open-first summaries provide weaker fallback evidence. Curated notes are sorted by relevance and contribute matched note ids. Domain and cluster filters prevent unrelated references from ranking. Every result carries a score decomposition via match_breakdown.",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is intentionally a router, not a corpus crawler. It reads a sanitized fixture catalog and a problem statement, applies field-weighted token scoring and optional filters, then emits ranked matches with visible score breakdowns. It does not clone reference repositories, inspect private reference bodies, run BM25/Lucene/embedding search, perform license review, or authorize use of the private reference corpus.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism is a deterministic ranking pass over a caller-supplied catalog. routecatalog() is the result record boundary: it calls routeannexes(), records the problem text and optional domain/cluster filters, carries source_refs, and returns either a routed row set or an empty no-match row set with status: routed or status: no_match. The row score is intentionally decomposed into four buckets so readers can audit why a fixture ranked without reading private reference bodies. The scoring path starts by normalizing punctuation, slashes, underscores, and hyphens into lowercase tokens, then drops a small local stopword set. Structured fields from routing_summary dominate the score: pr\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open floor for this module is the runnable Engine Room refactor plus its fixture and test surfaces: runtime: src/microcosmcore/engineroom/annexknowledgerouter.py standard: standards/stdmicrocosmengineroomannexknowledgerouter.json fixture manifest: core/fixturemanifests/engineroomannexknowledgerouter.fixturemanifest.json public fixtures: fixtures/firstwave/engineroomannexknowledge_router/input focused tests: tests/testengineroomannexknowledge_router.py generated JSON source record: papermodules/engineroomannexknowledge_router.json That floor is enough for a reader to replay the public routing fixtures and inspect how scores and filters are computed. It is not enough to claim priva\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is explainable tiered weighted-token retrieval over a sanitized reference catalog. It is not BM25, not TF-IDF, not embedding search, not repository cloning, not third-party license review, and not authority over the private reference corpus. Its JSON bundle authority is narrow: the bundle binds one staged mechanism subject, resolved source loci, fixtures, standard, tests, and result record surfaces. It does not admit an component, unblock the Atlas owner lane, or authorize public launch.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows the general information-retrieval pattern of scoring a candidate corpus with visible term evidence and returning ranked, inspectable matches. The closest prior-art families are classic TREC-style retrieval evaluation, BM25/Lucene explainable term scoring, and fielded/faceted search interfaces where structured fields carry different weights than body text: Text REtrieval Conference (TREC) as the long-running benchmark lineage for retrieval tasks, relevance judgments, and scored runs. Apache Lucene BM25Similarity as a concrete example of explainable sparse term scoring. Microcosm takes the inspectable scoring and field-weighting inspiration, but this module intentionally\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "The governing lattice role is a staged mechanism, not an accepted component. mechanism.engineroomannexknowledgerouter.validatespublicannexknowledgerouter grounds the module in src/microcosmcore/engineroom/annexknowledgerouter.py, runs in the engineroomdemo host context, and connects to concept.architectureandnavigationroutecontract_bundle plus concept.importprojectionanddriftcontrol_bundle. That relation says the module is evidence for route-selection behavior inside the Engine Room import and projection-control bundle; it does not upgrade the sanitized router into general reference search or launch-scope decision. The standard row stdmicrocosmengineroomannexknowledgerouter supplies the har\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Runtime route: src/microcosmcore/engineroom/annexknowledgerouter.py is the local source locus for the staged router. It supports replaying the sanitized fixture behavior under the mechanism subject; it does not create an component subject. Positive fixtures: provider-backoff and curated-note fixtures show that structured routing fields and matched note ids affect ranking. Read a high score as local weighted-token relevance against the sanitized catalog only, not as semantic search, BM25/Lucene equivalence, embedding similarity, or proof about the private reference corpus. Explanation surface: match_breakdown is the reader-facing account of why a row ranked. Structured fields carry more weig\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-exercise",
       "title": "Public Exercise",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not unblock the Atlas owner lane, prove private-corpus search, or include launch operations.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The scoring model is a simple weighted token overlap model. It has no inverse document frequency, term saturation, learned embedding space, semantic reranker, or benchmarked retrieval metric. The catalog is finite and sanitized. A no-match result record only proves the public fixture did not route under the supplied filters; it does not establish that no useful private reference, public repository, or future corpus row exists. matchednoteids expose which curated notes contributed, but they are ids and summaries only. They do not disclose or validate private reference bodies. Domain and cluster filters are exact normalized filters. They prevent obvious cross-domain ranking in the fixture, bu\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "capsule-projection-packet",
       "title": "Bundle Projection Packet",
       "level": 2,
       "excerpt": "source authority now: core/papermodulecapsules.json::papermodules[89:papermodule.engineroomannexknowledgerouter]. generated row now: papermodules/engineroomannexknowledge_router.json reports papermodulepayload.sourceauthority: jsoncapsule. generated projection status now: Mermaid availablefromcapsule_edges; Atlas blockeduntilorganatlasownerlanebinds_edges. mechanism subject: mechanism.engineroomannexknowledgerouter.validatespublicannexknowledgerouter. resolved source locus: src/microcosmcore/engineroom/annexknowledgerouter.py. composition source locus: src/microcosmcore/engineroom/demo.py. missing authority edge now: no accepted component JSON instance currently resolves for engineroomannex\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_annex_knowledge_router.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TB Problem[\"Problem statement normalized to tokens\"] --> Empty{\"Empty after normalization?\"} Empty -->|yes| NoMatch[\"No-match result record status: no_match\"] Empty -->|no| Loop[\"For each reference row in sanitized catalog\"] Loop --> Filter{\"Domain / cluster filter matches?\"} Filter -->|no| Drop[\"Excluded before scoring\"] Filter -->|yes| Score[\"Four-tier token scorer\"] subgraph Tiers[\"Weighted scoring (exact / phrase / per-token)\"] Structured[\"Structured routing fields 120 / 80 / 18\"] Family[\"Family text: slug, name, description, tags 32 / 24 / 6\"] OpenFirst[\"Open-first summaries 20 / 16 / 4\"] Notes[\"Curated notes, relevance-sorted 18 / 12 / 3\"] end Score --> Structured Score --> Family Score --> OpenFirst Score --> Notes Structured --> Sum[\"Sum tiers into total score + match_breakdown + matched_note_ids\"] Family --> Sum OpenFirst --> Sum Notes --> Sum Sum --> Threshold{\"total score > 0?\"} Threshold -->|no| Drop Threshold -->|yes| Ranked[\"Ranked reference matches highest score first, with score breakdown\"] Drop --> Loop Loop -->|no rows scored| NoMatch",
       "source_hash": "sha256:9da1ee85d0ed8416b49121d9a46349e7524575c50ae2d78c591d4e897fbcf71f",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-annex-knowledge-router-diagram-1",
       "html_anchor": "paper-module-engine-room-annex-knowledge-router-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_annex_knowledge_router.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Text REtrieval Conference (TREC)",
       "url": "https://trec.nist.gov/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Apache Lucene `BM25Similarity`",
       "url": "https://lucene.apache.org/core/9_8_0/core/org/apache/lucene/search/similarities/BM25Similarity.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 5,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.engine_room_demo",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Demo",
         "url": "paper-modules.html#paper-module-engine-room-demo"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public reference knowledge router",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 7,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_annex_knowledge_router.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 14856
    },
    {
     "id": "paper_module.engine_room_derived_fact_provider_engine",
     "title": "Engine Room Derived Fact Provider Engine",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-derived-fact-provider-engine",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-derived-fact-provider-engine",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-derived-fact-provider-engine",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Public Engine Room component: registry-backed derived fact provider over JSON pointers, glob counts, git-backed callables, and provider error rows.",
     "summary": "Engine Room Derived Fact Provider Engine binds the staged derived-fact bundle to a concrete mechanism. It resolves JSON-pointer, glob-count, and git-backed callable fact rows over public fixture roots, records provider errors as repairable data, and keeps derived-fact availability below truth-audit, semantic-claim-validation, full source registry, launch, and private-system authority.",
     "authority_ceiling": "Public fixture-root fact-provider evidence only; no doctrine truth audit, no semantic claim validation, no full source fact registry export, no launch-scope decision, no private-system equivalence, no source-file changes, and no whole-system correctness.",
     "abstract": "Public Engine Room component: registry-backed derived fact provider over JSON pointers, glob counts, git-backed callables, and provider error rows.",
     "teleology": {
      "section_id": "",
      "text": "Public Engine Room component: registry-backed derived fact provider over JSON pointers, glob counts, git-backed callables, and provider error rows.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This staged Engine Room bundle imports the provider side of the source derived fact hologram into Microcosm as a runnable refactor.\n\n###### Purpose\n\nA system that makes claims about itself needs a disciplined way to fetch the numbers behind those claims. How many files match a pattern, how many entries a registry holds, how many files git is tracking: these are facts about the current state of the repository, and a document that hard-codes them goes stale the moment the repository changes. This component answers a narrow question: for each authored fact row, what value does it resolve to against a supplied root, right now?\n\nA fact row declares how it resolves rather than what it equals. A `json_pointer` row names a file and a pointer into it. A `glob_count` row names a pattern and counts matching files. A `callable` row names one of a small fixed set of git-backed computations, such as the count of tracked Python files. The engine reads each declaration and produces the value, so the value is always derived from live state rather than copied by hand.\n\nThe design choice worth noting is how failures are handled. When a row cannot resolve, for example because its source file is missing, the engine does not raise and abandon the whole evaluation. It records the failure as an ordinary row carrying the error class, a human-readable message, and a suggested `required_next_action` such as restoring the named source path. One broken fact degrades to a single repairable row; the rest of the registry still resolves, and the ledger reports `degraded` rather than failing outright. This is the difference between a fact ledger that tells you which fact broke and one that gives you a stack trace.\n\nThe boundary is provider resolution, not truth adjudication. A clean result record means the declared rows resolved against the supplied root and the result record carried the expected lineage and accounting fields. It does not mean the underlying claims are true, that every source fact family is covered, or that anything is ready for launch.\n\n###### Shape\n\nThe module is a staged provider engine over a public fixture registry. It takes authored fact rows, resolves each declared provider type against a supplied root, and emits result record slices for ledger, audit, and navigation-cache consumers. The public body is deliberately small enough for readers to replay. Each row resolves through exactly one provider, and a row that fails to resolve becomes an error row rather than aborting the run, so the registry status is `ok` only when no row errored and `degraded` when any row did.\n\nDiagram source\n\n```text\nflowchart TD Registry[\"public fixture registry authored fact rows\"] Resolver[\"evaluate_provider selects provider_type branch\"] JsonPointer[\"json_pointer read value at pointer in a JSON file\"] GlobCount[\"glob_count count matching files, keep sample matches\"] Callable[\"callable git-backed repo-state count\"] Resolved[\"resolved fact row value + value_repr\"] ErrorRow[\"error-as-data row error_class, message, required_next_action\"] Registry2[\"evaluate_registry aggregate rows, count statuses\"] Status{\"any row errored?\"} Ok[\"status: ok\"] Degraded[\"status: degraded\"] Result record[\"public provider result record ledger + audit findings + navigation cache + sha256\"] Ceiling[\"scope limit provider resolution only; no truth audit, registry completeness, semantic validation, or launch-scope decision\"] Registry --> Resolver Resolver --> JsonPointer Resolver --> GlobCount Resolver --> Callable JsonPointer --> Resolved GlobCount --> Resolved Callable --> Resolved JsonPointer -. on failure .-> ErrorRow GlobCount -. on failure .-> ErrorRow Callable -. on failure .-> ErrorRow Resolved --> Registry2 ErrorRow --> Registry2 Registry2 --> Status Status -- no --> Ok Status -- yes --> Degraded Ok --> Result record Degraded --> Result record Result record --> Ceiling\n```\n\n###### What It Demonstrates\n- Authored fact registry rows resolve through JSON-pointer providers.\n- Glob-count providers count matching public fixture files and preserve sample matches for auditability.\n- Callable providers can shell through `git ls-files` to bind facts to tracked repo state instead of prose memory.\n- Provider failures become error-as-data rows with repair hints rather than crashing the whole ledger.\n- The output shape includes ledger, audit, and navigation-cache slices.\n\n###### Reader Evidence Routing\n- fixture CLI: inspect provider behavior over public fixture roots.\n- focused pytest: inspect JSON pointer, glob-count, git-callable, error-row, fixture, and CLI contract coverage.\n- paper-module coverage contract: verify that this slug explains its JSON bundle binding with an exact source ref and generated projection boundary.\n- doctrine projection check: corpus/parity evidence only; it is not semantic fact-audit authority, or proof that source facts are true.\n- non-proof boundary: passing checks show the staged provider exercise is replayable and bounded by its scope limit. Any later mechanism/component admission must land through its own lane; this paper module currently names a staged mechanism subject, not an accepted component subject.\n\n###### Prior Art Grounding\n\nThe component is grounded in database and data-platform patterns where derived facts are produced from declared sources, materialized for fast reads, and carried with lineage or freshness metadata:\n- [PostgreSQL materialized views](https://www.postgresql.org/docs/16/rules-materializedviews.html), where a stored relation is derived from a query and refreshed from source data.\n- [OpenLineage](https://openlineage.io/) as an open lineage model for recording jobs, datasets, and run metadata across data systems.\n\nMicrocosm borrows the registered-provider and lineage-accounting pattern: fact rows declare how they resolve, provider errors become data with repair hints, and output is shaped for ledger, audit, and navigation-cache consumers. This does not make the module a doctrine truth auditor or a semantic claim verifier.\n\n###### Public Exercise\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.derived_fact_provider_engine evaluate-fixtures \\\n  --input fixtures/first_wave/engine_room_derived_fact_provider_engine/input \\\n  --json\n```\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_derived_fact_provider_engine.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not admit an component, unblock the Atlas owner lane, or include launch operations.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is the fact-provider/resolver engine over public fixture roots. It is not a doctrine truth auditor, not a full export of the source fact registry, not semantic claim validation, and not launch-scope decision. It is also not JSON bundle authority by itself for `paper_module.engine_room_derived_fact_provider_engine`; that authority lives in `core/paper_module_capsules.json`.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nReaders should be able to inspect the public body through these local surfaces:\n- `src/microcosm_core/engine_room/derived_fact_provider_engine.py` defines the provider resolver, callable map, error-as-data rows, result record digests, and CLI.\n- `tests/test_engine_room_derived_fact_provider_engine.py` checks JSON pointer escaping, glob-count samples, git-backed callables, provider failure rows, fixture replay, and the module CLI result record.\n- `fixtures/first_wave/engine_room_derived_fact_provider_engine/input` carries the replayable public registry cases.\n- `core/fixture_manifests/engine_room_derived_fact_provider_engine.fixture_manifest.json` binds the fixture set as an inspectable artifact.\n- `standards/std_microcosm_engine_room_derived_fact_provider_engine.json` names the source-to-target relation, required cases, validator command, and scope limit.\n\nThe source source refs in the standard are lineage anchors for the public refactor.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 8262,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A system that makes claims about itself needs a disciplined way to fetch the numbers behind those claims. How many files match a pattern, how many entries a registry holds, how many files git is tracking: these are facts about the current state of the repository, and a document that hard-codes them goes stale the moment the repository changes. This component answers a narrow question: for each authored fact row, what value does it resolve to against a supplied root, right now? A fact row declares how it resolves rather than what it equals. A json_pointer row names a file and a pointer into it. A glob_count row names a pattern and counts matching files. A callable row names one of a small fi\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module is a staged provider engine over a public fixture registry. It takes authored fact rows, resolves each declared provider type against a supplied root, and emits result record slices for ledger, audit, and navigation-cache consumers. The public body is deliberately small enough for readers to replay. Each row resolves through exactly one provider, and a row that fails to resolve becomes an error row rather than aborting the run, so the registry status is ok only when no row errored and degraded when any row did.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-demonstrates",
       "title": "What It Demonstrates",
       "level": 2,
       "excerpt": "Authored fact registry rows resolve through JSON-pointer providers. Glob-count providers count matching public fixture files and preserve sample matches for auditability. Callable providers can shell through git ls-files to bind facts to tracked repo state instead of prose memory. Provider failures become error-as-data rows with repair hints rather than crashing the whole ledger. The output shape includes ledger, audit, and navigation-cache slices.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "Readers should be able to inspect the public body through these local surfaces: src/microcosmcore/engineroom/derivedfactprovider_engine.py defines the provider resolver, callable map, error-as-data rows, result record digests, and CLI. tests/testengineroomderivedfactproviderengine.py checks JSON pointer escaping, glob-count samples, git-backed callables, provider failure rows, fixture replay, and the module CLI result record. fixtures/firstwave/engineroomderivedfactproviderengine/input carries the replayable public registry cases. core/fixturemanifests/engineroomderivedfactproviderengine.fixture_manifest.json binds the fixture set as an inspectable artifact. standards/stdmicrocosmengineroom\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "fixture CLI: inspect provider behavior over public fixture roots. focused pytest: inspect JSON pointer, glob-count, git-callable, error-row, fixture, and CLI contract coverage. paper-module coverage contract: verify that this slug explains its JSON bundle binding with an exact source ref and generated projection boundary. doctrine projection check: corpus/parity evidence only; it is not semantic fact-audit authority, or proof that source facts are true. non-proof boundary: passing checks show the staged provider exercise is replayable and bounded by its scope limit. Any later mechanism/component admission must land through its own lane; this paper module currently names a staged mechanism s\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is the fact-provider/resolver engine over public fixture roots. It is not a doctrine truth auditor, not a full export of the source fact registry, not semantic claim validation, and not launch-scope decision. It is also not JSON bundle authority by itself for papermodule.engineroomderivedfactproviderengine; that authority lives in core/papermodulecapsules.json. A clean provider result record means the registered facts resolved against the supplied root, while",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component is grounded in database and data-platform patterns where derived facts are produced from declared sources, materialized for fast reads, and carried with lineage or freshness metadata: PostgreSQL materialized views, where a stored relation is derived from a query and refreshed from source data. OpenLineage as an open lineage model for recording jobs, datasets, and run metadata across data systems. Microcosm borrows the registered-provider and lineage-accounting pattern: fact rows declare how they resolve, provider errors become data with repair hints, and output is shaped for ledger, audit, and navigation-cache consumers. This does not make the module a doctrine truth auditor o\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-exercise",
       "title": "Public Exercise",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not admit an component, unblock the Atlas owner lane, or include launch operations.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_derived_fact_provider_engine.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Registry[\"public fixture registry authored fact rows\"] Resolver[\"evaluate_provider selects provider_type branch\"] JsonPointer[\"json_pointer read value at pointer in a JSON file\"] GlobCount[\"glob_count count matching files, keep sample matches\"] Callable[\"callable git-backed repo-state count\"] Resolved[\"resolved fact row value + value_repr\"] ErrorRow[\"error-as-data row error_class, message, required_next_action\"] Registry2[\"evaluate_registry aggregate rows, count statuses\"] Status{\"any row errored?\"} Ok[\"status: ok\"] Degraded[\"status: degraded\"] Result record[\"public provider result record ledger + audit findings + navigation cache + sha256\"] Ceiling[\"scope limit provider resolution only; no truth audit, registry completeness, semantic validation, or launch-scope decision\"] Registry --> Resolver Resolver --> JsonPointer Resolver --> GlobCount Resolver --> Callable JsonPointer --> Resolved GlobCount --> Resolved Callable --> Resolved JsonPointer -. on failure .-> ErrorRow GlobCount -. on failure .-> ErrorRow Callable -. on failure .-> ErrorRow Resolved --> Registry2 ErrorRow --> Registry2 Registry2 --> Status Status -- no --> Ok Status -- yes --> Degraded Ok --> Result record Degraded --> Result record Result record --> Ceiling",
       "source_hash": "sha256:bbd69df2c9575a52465385592b245cf0d7b5037f6f1d8e5a5df70a803b7f8608",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-derived-fact-provider-engine-diagram-1",
       "html_anchor": "paper-module-engine-room-derived-fact-provider-engine-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_derived_fact_provider_engine.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "PostgreSQL materialized views",
       "url": "https://www.postgresql.org/docs/16/rules-materializedviews.html",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "OpenLineage",
       "url": "https://openlineage.io/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.doctrine_fact_claim_audit",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Doctrine Fact Claim Audit",
         "url": "paper-modules.html#paper-module-doctrine-fact-claim-audit"
        },
        {
         "id": "paper_module.engine_room_demo",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Demo",
         "url": "paper-modules.html#paper-module-engine-room-demo"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public derived fact provider engine",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-11",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind volatile facts to refresh routes",
         "url": "doctrine.html#dcard-p-11"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_derived_fact_provider_engine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 9242
    },
    {
     "id": "paper_module.engine_room_egress_self_compliance_gate",
     "title": "Engine Room Egress Self-Compliance Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-egress-self-compliance-gate",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-egress-self-compliance-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-egress-self-compliance-gate",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Public Engine Room component: phrase-membership egress gate for permission ceremony, self-error capture binding, and command-displacement evidence.",
     "summary": "Engine Room Egress Self-Compliance Gate binds the staged egress bundle to a concrete mechanism. It detects permission ceremony without a real blocker, self-error statements without durable capture, and command handoff language without execution evidence over public fixtures, while accepting bounded blocker or result record language and refusing taint-analysis, prompt-injection-defense, sandbox, information-flow, launch, and private-system claims.",
     "authority_ceiling": "Public phrase-policy fixture evidence only; no taint analysis, prompt-injection defense, sandboxing, information-flow proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "abstract": "Public Engine Room component: phrase-membership egress gate for permission ceremony, self-error capture binding, and command-displacement evidence.",
     "teleology": {
      "section_id": "",
      "text": "Public Engine Room component: phrase-membership egress gate for permission ceremony, self-error capture binding, and command-displacement evidence.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`engine_room_egress_self_compliance_gate` carries a refactor of the source egress compliance checks. It scans agent-output text for three failure classes:\n- permission ceremony without a named blocker\n- self-error language without a durable work log/capture binding\n- handing a safe command to the operator instead of reporting that it ran\n\nPublic exercise:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.egress_self_compliance_gate evaluate-fixtures \\\n  --input fixtures/first_wave/engine_room_egress_self_compliance_gate/input \\\n  --json\n```\n\n###### Purpose\n\nThe single question this gate answers is narrow: does a line of agent output ask the operator to do something the agent should have done itself, or excuse a mistake without recording it? It exists because the failures it looks for are the ones that read as good manners. Asking for permission, apologising for an error, and offering the operator a command to run all look polite in isolation. Each is also the exact shape of an agent quietly displacing work back onto the human or letting a self-detected mistake evaporate into prose.\n\nThe design choice worth noting is that the gate treats each of those polite phrases as a tripwire that is a violation by default, and then looks in the same text for one specific legitimising signal. Permission ceremony is allowed only if the text also names a real blocker, such as a destructive or irreversible action, a secret, a public sharing boundary, or a concurrent-owner conflict. Self-error language is allowed only if it binds to a durable capture, such as a capture id or a work log reference. A handed-over command is allowed only if the text also reports that the command was run. The polite phrase is innocent only when accompanied by the evidence that makes it honest.\n\nThis is deliberately phrase membership over the output text, not analysis of what the agent actually did. The gate cannot tell whether a named blocker is real or whether a capture id resolves; it only checks that the legitimising language is present. That keeps the check small, fast, and inspectable, and it is why the page is careful to say what the gate is not: it is not taint analysis, not prompt-injection defence, not a sandbox, and not an information-flow proof. It encodes one operating contract as an output filter and stops there.\n\n###### Shape\n\nThe module is a staged Engine Room egress gate, not a general compliance system. Its public body is the small runtime in `src/microcosm_core/engine_room/egress_self_compliance_gate.py`, the red/green fixture matrix under `fixtures/first_wave/engine_room_egress_self_compliance_gate/input`, and the focused test file that asserts the three declared detector classes.\n\nThe gate produces inspection result records over agent-output text. A red result record means the output matched one of the declared failure classes without the required repair binding; a green result record means the narrow phrase-membership policy did not detect that failure in the supplied text. Neither result proves semantic compliance, privacy safety, sandbox isolation, or launch fitness.\n\nDiagram source\n\n```text\nflowchart TB Text[\"Agent output text (lowercased)\"] --> D1 Text --> D2 Text --> D3 subgraph Permission[\"detect_permission_gate_without_blocker\"] D1{\"Permission ceremony phrase?\"} D1 -->|no| Skip1[\"no row\"] D1 -->|yes| B1{\"Names a real blocker?\"} B1 -->|yes| OK1[\"informational: blocker named\"] B1 -->|no| V1[\"violation: ceremony without blocker\"] end subgraph SelfError[\"detect_self_error_without_capture\"] D2{\"Self-error phrase?\"} D2 -->|no| Skip2[\"no row\"] D2 -->|yes| B2{\"Binds to durable capture?\"} B2 -->|yes| OK2[\"informational: capture bound\"] B2 -->|no| V2[\"violation: error without capture\"] end subgraph Command[\"detect_command_displacement_to_operator\"] D3{\"Command handed to operator?\"} D3 -->|no| Skip3[\"no row\"] D3 -->|yes| B3{\"Reports it was run?\"} B3 -->|yes| OK3[\"informational: result record present\"] B3 -->|no| V3[\"violation: command displaced\"] end V1 --> Result record[\"evaluate_text result record red if any violation, else green\"] V2 --> Result record V3 --> Result record OK1 --> Result record OK2 --> Result record OK3 --> Result record Fixtures[\"Public fixture JSON cases\"] --> Runner[\"evaluate_fixture_dir compare status to expected\"] Runner --> Result record\n```\n\n###### Technical Mechanism\n\nThe runtime mechanism is intentionally small. `evaluate_text` lowercases the candidate agent-output text, applies three detector functions, and emits a metadata-only JSON result record with source refs, scope boundaries, a red/green status, and per-detector rows. A detector row appears only when its tripwire phrase family matches; the row becomes a violation when the matching text lacks the required legitimizer phrase family.\n\nThe three detector families correspond exactly to the standard's required negative cases. `detect_permission_gate_without_blocker` looks for permission ceremony phrases and accepts them only when the same text names a blocker such as destructive scope, secrets, a public sharing boundary, a remote push, a concurrent-owner conflict, or validation failure. `detect_self_error_without_capture` looks for self-error phrases and accepts them only when the same text binds the mistake to a durable capture surface such as a CAP, Work item, work log row, or quick-capture reference. `detect_command_displacement_to_operator` looks for safe-command handoff phrases and accepts them only when the same text records that the agent ran the command or reports an execution result record.\n\n`evaluate_fixture_dir` is the proof-consumer harness over this mechanism. It loads the public JSON fixture cases, runs `evaluate_text` for each case, compares the observed status with `expected_status`, and reports aggregate `case_count`, `passed_case_count`, and `status`. The focused pytest file pins one red and one green path for each detector family and verifies that the CLI returns a JSON result record with `organ_id: engine_room_egress_self_compliance_gate` and `status: pass` for the fixture matrix.\n\n###### Reader Evidence Routing\n- fixture CLI: inspect phrase-membership detector behavior over public fixture roots.\n- focused pytest: inspect the detector matrix and CLI result record contract.\n- paper-module coverage contract: verify that this slug explains its JSON bundle binding with an exact source ref and generated projection boundary.\n- doctrine projection check: corpus/parity evidence only; it is not accepted component admission.\n- non-proof boundary: passing result records show the staged fixture exercise is replayable and that the scope limit stayed intact. They do not prove semantic compliance, taint analysis, sandboxing, prompt-injection defense, information-flow control, launch-scope decision, JSON bundle authority, or accepted component admission.\n\n###### Prior Art Grounding\n\nThe component borrows from policy-as-code and output-gate traditions: make a policy machine-readable, evaluate an artifact before it leaves a boundary, and return a specific failure class instead of relying on prose judgment alone. Relevant anchors include:\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), a general policy engine that externalizes policy decisions from application code.\n- [NIST SP 800-53 Rev. 5](https://doi.org/10.6028/NIST.SP.800-53r5), especially the broader audit, accountability, and information-output control tradition.\n\nMicrocosm narrows that pattern to explicit phrase-membership checks over agent-output text. The gate is intentionally small: it catches declared egress-failure classes and binds them to durable repair expectations; it does not perform taint analysis, sandbox enforcement, prompt-injection defense, or general information-flow control.\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_egress_self_compliance_gate.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not admit an component, unblock the Atlas owner lane, or include launch operations.\n\nThe fixture matrix includes red and green cases for each detector. The source refs are `system/lib/egress_compliance.py` and the Stop-hook wiring anchor `.claude/hooks/runtime_hook.py`.\n\nScope limit: this is explicit phrase-membership policy, not taint analysis, prompt-injection defense, sandboxing, or information-flow control. It excludes launch or claim private-system equivalence.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim that Microcosm has a staged public exercise for checking three declared Engine Room egress-output failure classes against replayable fixtures. The valid claim is bounded to phrase-membership policy over supplied agent-output text, public fixture result records, the focused pytest matrix, and the JSON bundle binding coverage contract.\n\nThe module must not claim accepted component resolution, launch-scope decision, private-system equivalence, semantic compliance, taint analysis, sandbox enforcement, prompt-injection defense, information-flow control, provider authority, source-file changes, or aggregate doctrine-lattice coverage. The current JSON bundle authority is mechanism-level and projection-bound.\n\n###### Limitations\n\nThe mechanism is a phrase-membership gate. It can miss a real egress failure when the output avoids the configured tripwire phrases, and it can flag benign text when a tripwire phrase appears in a different context. The implementation does not parse intent, analyze data flow, prove sandbox isolation, inspect model-output data, or reason over hidden workspace state.\n\nThe fixture matrix is deliberately narrow. Passing fixtures show that the three declared detector families and their red/green examples still execute through the public CLI and focused tests; they do not show that every future agent output is safe, that the source hook behavior is equivalent, or that the public refactor covers all egress compliance policy.\n\nThe authority boundary is also narrow. The standard and JSON bundle make this a staged public bundle with mechanism-level authority. The module cannot promote itself into an accepted component, activate shared registry integration, authorize generated projection edits, or claim launch-scope decision. Any wider claim requires a separate owner lane with validator, result record, and registry evidence.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nReaders should be able to inspect the public body without private-system access:\n- `src/microcosm_core/engine_room/egress_self_compliance_gate.py` defines the detector phrases, scope limit, fixture evaluation, and JSON CLI.\n- `tests/test_engine_room_egress_self_compliance_gate.py` exercises each red and green detector case and checks the module CLI result record.\n- `fixtures/first_wave/engine_room_egress_self_compliance_gate/input` carries the replayable fixture corpus.\n- `core/fixture_manifests/engine_room_egress_self_compliance_gate.fixture_manifest.json` binds the fixture set as an inspectable public artifact.\n- `standards/std_microcosm_engine_room_egress_self_compliance_gate.json` names the scope limit and the source-to-target relation.\n\nThe source refs in the standard are lineage anchors for the public refactor.\n\n###### Governing Lattice Relation\n\nThis module sits in the Engine Room lattice as a staged egress-output gate. It is downstream of the source egress-compliance source refs and upstream of `engine_room_demo`, which treats it as one public bundle in the composed Engine Room demo. That dependency relation is evidence routing only: the demo can consume the bundle's fixture result record, but this module still remains mechanism-level unless a separate accepted-component lane promotes it.\n\nThe governing standard makes the authority boundary explicit: `std_microcosm_engine_room_egress_self_compliance_gate` declares the source refs, public target refs, required negative cases, validator command, and scope boundary. The JSON bundle binding supplies the source authority for this Markdown projection, while the paper-module coverage contract verifies that the Markdown reader surface names the bundle source ref and projection boundary. Following the repository axiom that JSON is contract and Markdown is projection, the Markdown can explain the mechanism but cannot widen the standard, mutate the bundle, promote the subject, or authorize public launch.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 12721,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The single question this gate answers is narrow: does a line of agent output ask the operator to do something the agent should have done itself, or excuse a mistake without recording it? It exists because the failures it looks for are the ones that read as good manners. Asking for permission, apologising for an error, and offering the operator a command to run all look polite in isolation. Each is also the exact shape of an agent quietly displacing work back onto the human or letting a self-detected mistake evaporate into prose. The design choice worth noting is that the gate treats each of those polite phrases as a tripwire that is a violation by default, and then looks in the same text fo\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The module is a staged Engine Room egress gate, not a general compliance system. Its public body is the small runtime in src/microcosmcore/engineroom/egressselfcompliance_gate.py, the red/green fixture matrix under fixtures/firstwave/engineroomegressselfcompliancegate/input, and the focused test file that asserts the three declared detector classes. The gate produces inspection result records over agent-output text. A red result record means the output matched one of the declared failure classes without the required repair binding; a green result record means the narrow phrase-membership policy did not detect that failure in the supplied text. Neither result proves semantic compliance, priv\u2026",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The runtime mechanism is intentionally small. evaluate_text lowercases the candidate agent-output text, applies three detector functions, and emits a metadata-only JSON result record with source refs, scope boundaries, a red/green status, and per-detector rows. A detector row appears only when its tripwire phrase family matches; the row becomes a violation when the matching text lacks the required legitimizer phrase family. The three detector families correspond exactly to the standard's required negative cases. detectpermissiongatewithoutblocker looks for permission ceremony phrases and accepts them only when the same text names a blocker such as destructive scope, secrets, a public sharin\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "Readers should be able to inspect the public body without private-system access: src/microcosmcore/engineroom/egressselfcompliance_gate.py defines the detector phrases, scope limit, fixture evaluation, and JSON CLI. tests/testengineroomegressselfcompliancegate.py exercises each red and green detector case and checks the module CLI result record. fixtures/firstwave/engineroomegressselfcompliancegate/input carries the replayable fixture corpus. core/fixturemanifests/engineroomegressselfcompliancegate.fixture_manifest.json binds the fixture set as an inspectable public artifact. standards/stdmicrocosmengineroomegressselfcompliance_gate.json names the scope limit and the source-to-target relati\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "governing-lattice-relation",
       "title": "Governing Lattice Relation",
       "level": 2,
       "excerpt": "This module sits in the Engine Room lattice as a staged egress-output gate. It is downstream of the source egress-compliance source refs and upstream of engineroomdemo, which treats it as one public bundle in the composed Engine Room demo. That dependency relation is evidence routing only: the demo can consume the bundle's fixture result record, but this module still remains mechanism-level unless a separate accepted-component lane promotes it. The governing standard makes the authority boundary explicit: stdmicrocosmengineroomegressselfcompliance_gate declares the source refs, public target refs, required negative cases, validator command, and scope boundary. The JSON bundle binding suppli\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "fixture CLI: inspect phrase-membership detector behavior over public fixture roots. focused pytest: inspect the detector matrix and CLI result record contract. paper-module coverage contract: verify that this slug explains its JSON bundle binding with an exact source ref and generated projection boundary. doctrine projection check: corpus/parity evidence only; it is not accepted component admission. non-proof boundary: passing result records show the staged fixture exercise is replayable and that the scope limit stayed intact. They do not prove semantic compliance, taint analysis, sandboxing, prompt-injection defense, information-flow control, launch-scope decision, JSON bundle authority, o\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module may claim that Microcosm has a staged public exercise for checking three declared Engine Room egress-output failure classes against replayable fixtures. The valid claim is bounded to phrase-membership policy over supplied agent-output text, public fixture result records, the focused pytest matrix, and the JSON bundle binding coverage contract. The module must not claim accepted component resolution, launch-scope decision, private-system equivalence, semantic compliance, taint analysis, sandbox enforcement, prompt-injection defense, information-flow control, provider authority, source-file changes, or aggregate doctrine-lattice coverage. The current JSON bundle authority is mecha\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "limitations",
       "title": "Limitations",
       "level": 2,
       "excerpt": "The mechanism is a phrase-membership gate. It can miss a real egress failure when the output avoids the configured tripwire phrases, and it can flag benign text when a tripwire phrase appears in a different context. The implementation does not parse intent, analyze data flow, prove sandbox isolation, inspect model-output data, or reason over hidden workspace state. The fixture matrix is deliberately narrow. Passing fixtures show that the three declared detector families and their red/green examples still execute through the public CLI and focused tests; they do not show that every future agent output is safe, that the source hook behavior is equivalent, or that the public refactor covers al\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not admit an component, unblock the Atlas owner lane, or include launch operations. The fixture matrix includes red and green cases for each detector. The source refs are system/lib/egress_compliance.py and the Stop-hook wiring anchor .claude/hooks/runtime_hook.py. Scope limit: this is explicit phrase-membership policy, not taint analysis, prompt-injection defense, sandboxing, or information-flow control. It excludes launch or claim private-system equivalence.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows from policy-as-code and output-gate traditions: make a policy machine-readable, evaluate an artifact before it leaves a boundary, and return a specific failure class instead of relying on prose judgment alone. Relevant anchors include: Open Policy Agent, a general policy engine that externalizes policy decisions from application code. NIST SP 800-53 Rev. 5, especially the broader audit, accountability, and information-output control tradition. Microcosm narrows that pattern to explicit phrase-membership checks over agent-output text. The gate is intentionally small: it catches declared egress-failure classes and binds them to durable repair expectations; it does not pe\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_egress_self_compliance_gate.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TB Text[\"Agent output text (lowercased)\"] --> D1 Text --> D2 Text --> D3 subgraph Permission[\"detect_permission_gate_without_blocker\"] D1{\"Permission ceremony phrase?\"} D1 -->|no| Skip1[\"no row\"] D1 -->|yes| B1{\"Names a real blocker?\"} B1 -->|yes| OK1[\"informational: blocker named\"] B1 -->|no| V1[\"violation: ceremony without blocker\"] end subgraph SelfError[\"detect_self_error_without_capture\"] D2{\"Self-error phrase?\"} D2 -->|no| Skip2[\"no row\"] D2 -->|yes| B2{\"Binds to durable capture?\"} B2 -->|yes| OK2[\"informational: capture bound\"] B2 -->|no| V2[\"violation: error without capture\"] end subgraph Command[\"detect_command_displacement_to_operator\"] D3{\"Command handed to operator?\"} D3 -->|no| Skip3[\"no row\"] D3 -->|yes| B3{\"Reports it was run?\"} B3 -->|yes| OK3[\"informational: result record present\"] B3 -->|no| V3[\"violation: command displaced\"] end V1 --> Result record[\"evaluate_text result record red if any violation, else green\"] V2 --> Result record V3 --> Result record OK1 --> Result record OK2 --> Result record OK3 --> Result record Fixtures[\"Public fixture JSON cases\"] --> Runner[\"evaluate_fixture_dir compare status to expected\"] Runner --> Result record",
       "source_hash": "sha256:36d40909827963fe8679cd1857b3dceb6db1472a33907a805bac30cdf85c723f",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-egress-self-compliance-gate-diagram-1",
       "html_anchor": "paper-module-engine-room-egress-self-compliance-gate-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_egress_self_compliance_gate.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Open Policy Agent",
       "url": "https://www.openpolicyagent.org/docs/latest",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "NIST SP 800-53 Rev. 5",
       "url": "https://doi.org/10.6028/NIST.SP.800-53r5",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.engine_room_public_projection_leak_gate",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Public Projection Leak Gate",
         "url": "paper-modules.html#paper-module-engine-room-public-projection-leak-gate"
        },
        {
         "id": "paper_module.engine_room_demo",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Demo",
         "url": "paper-modules.html#paper-module-engine-room-demo"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public egress self compliance gate",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-13",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Apply the same floor to meta artifacts",
         "url": "doctrine.html#dcard-p-13"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_egress_self_compliance_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 13734
    },
    {
     "id": "paper_module.engine_room_lean_proof_search_lab",
     "title": "Engine Room Lean Proof Search Lab",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-lean-proof-search-lab",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-lean-proof-search-lab",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-lean-proof-search-lab",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Public Engine Room component: bounded Lean proof-search lab for tiny fixture statements, oracle-firewall negatives, ablation, and axiom-cleanliness checks.",
     "summary": "Engine Room Lean Proof Search Lab binds the staged proof-search bundle to a concrete mechanism. It runs tiny public Lean statements through symbolic tactic search, statement-only candidate scoring, problem-id ablation, forward oracle-body rejection, and axiom cleanliness checks, while keeping private source run state, oracle proof bodies, neural theorem proving, frontier-scale automation, launch, and private-system authority out of scope.",
     "authority_ceiling": "Public tiny-fixture Lean proof-search evidence only; no neural theorem proving, frontier-scale automation, private source run export, oracle-body forward solving, launch-scope decision, private-system equivalence, source-file changes, or whole-system formal-result correctness.",
     "abstract": "Public Engine Room component: bounded Lean proof-search lab for tiny fixture statements, oracle-firewall negatives, ablation, and axiom-cleanliness checks.",
     "teleology": {
      "section_id": "",
      "text": "Public Engine Room component: bounded Lean proof-search lab for tiny fixture statements, oracle-firewall negatives, ablation, and axiom-cleanliness checks.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This staged Engine Room bundle imports the source prover-lab contour into a runnable Lean fixture lab.\n\n###### Purpose\n\nThe hard problem with any proof-search tool is not finding a proof. It is trusting that a reported success was earned rather than leaked or memorised. A search loop can quietly copy the answer out of an oracle field, learn to map a problem id to a stored tactic, or compile a file that secretly leans on `sorry`. Each of those produces a green result that means nothing. This lab exists to answer one question: when a tiny public theorem is reported solved, did the search actually close it, and does the installed Lean kernel agree on clean axioms?\n\nThe approach is to keep candidate generation cheap and untrusted, and to move all authority to the kernel. Candidate tactic bodies are generated from the shape of the statement alone (an `Or p q -> Or q p` goal draws an `Or.inl` / `Or.inr` case split, an equality draws `rfl`, and so on), then each candidate is written to a temporary `.lean` file and checked by a real `lean` subprocess. A result counts only when the process exits zero and a `#print axioms` audit reports the theorem depends on no axioms, with no `sorry` in the body. Generation proposes; Lean decides.\n\nWhat is unusual is how much of the lab is built to refuse false credit rather than to score success. Three guards run alongside the search. A forward firewall walks every input row and rejects it outright if it carries a `candidate_body`, `oracle_body`, `repair_body`, `oracle_needed_premise_ids`, or `provider_text` field, so the answer can never be smuggled in as a hint. A problem-id ablation renames each theorem and its id, then checks that the policy picks the same action and reaches the same outcome, which catches a policy that has secretly learned the id instead of the goal. The axiom gate rejects `sorry` -tainted candidates even when Lean compiles the file. The lab passes only when every problem is genuinely closed, the firewall is clean, the ablation is stable, and no axiom taint is found.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR A[\"Public theorem statement\"] --> B[\"Forward-field firewall\"] B --> C[\"Bounded symbolic tactic search\"] C --> D[\"Lean subprocess check\"] D --> E[\"Axiom cleanliness audit\"] C --> F[\"Statement-only hammer table\"] F --> G[\"Problem-id ablation\"] E --> H[\"Fixture result record\"] G --> H B --> I[\"Reject oracle or provider body leak\"] E --> J[\"Reject sorry-tainted proof\"]\n```\n\nThe shape is a small public proof-search lab, not a prover product. It reads tiny Lean theorem statements, rejects forward oracle/provider fields, tries bounded symbolic tactic bodies, checks candidates with the installed Lean kernel, records statement-only action scores, runs a problem-id ablation, and rejects `sorry` -tainted outputs through a `#print axioms` gate.\n\n###### What It Demonstrates\n- Tiny public theorem statements are solved by bounded symbolic candidate search and checked with the installed `lean` executable.\n- Statement-only hammer rows compile tactic candidates without crediting adapter candidates or oracle repair bodies.\n- The forward manifest rejects `candidate_body`, oracle, repair, and provider text fields before any solver result can count.\n- A problem-id ablation renames ids and theorem names, then verifies the blind policy keeps the same action signature and success behavior.\n- A `#print axioms` gate rejects `sorry` -tainted candidates even when Lean returns success for the file.\n\n###### Prior Art Grounding\n\nThis component is grounded in the interactive-theorem-proving pattern where proof automation proposes small tactic scripts and the kernel remains the authority. [Theorem Proving in Lean 4](https://lean-lang.org/theorem_proving_in_lean4/Tactics/) is the direct precedent for tactic-structured proof construction, while the Lean/mathlib ecosystem shows why small checked theorem statements, reusable libraries, and tactic automation are treated as inspectable proof artifacts rather than prose claims.\n\nThe statement-only candidate search is also adjacent to \"hammer\" workflows such as Isabelle [Sledgehammer](https://isabelle.in.tum.de/doc/sledgehammer.pdf): external or bounded search can suggest proof steps, but the trusted proof assistant must replay or check the result. Microcosm keeps the same separation at toy scale: candidate generation is public fixture behavior; Lean execution and the `#print axioms` audit decide what may count.\n\n###### Public Exercise\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.lean_proof_search_lab evaluate-fixtures \\\n  --input fixtures/first_wave/engine_room_lean_proof_search_lab/input \\\n  --json\n```\n\n###### Reader Evidence Routing\n- positive symbolic fixture: two tiny public Lean statements were solved by bounded symbolic tactic search and checked by Lean.\n- oracle-field failures: firewall evidence only. Forward `candidate_body`, `oracle_body`, `provider_text`, repair-body, and model-output data fields cannot enter the public solver path.\n- memorized-policy failure: an ablation guard. It shows problem-id conditioning is rejected when renaming changes the action signature, not that all memorization risks are impossible.\n- `sorry` fixture: an axiom-cleanliness gate. It proves the fixture rejects `sorry` taint even when Lean can compile a file, not that every future Lean import is globally axiom-free.\n- non-proof boundary: these result records do not prove frontier theorem proving, library-scale automation, online-RL search, private prover-run parity, launch-scope decision, accepted component admission, or Atlas launch-scope decision.\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_lean_proof_search_lab.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not admit an component, unblock the Atlas owner lane, or include launch operations.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is a bounded symbolic prover lab over tiny public fixtures. It is not a neural theorem prover, not frontier-scale math automation, not online-RL bandit search, and not an export of private source prover run state. Easy goals are handled by deterministic tactic templates and Lean itself.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open floor for this module is the staged Engine Room lab plus its fixture and test surfaces:\n- runtime: `src/microcosm_core/engine_room/lean_proof_search_lab.py`\n- standard: `standards/std_microcosm_engine_room_lean_proof_search_lab.json`\n- fixture manifest: `core/fixture_manifests/engine_room_lean_proof_search_lab.fixture_manifest.json`\n- public fixtures: `fixtures/first_wave/engine_room_lean_proof_search_lab/input`\n- focused tests: `tests/test_engine_room_lean_proof_search_lab.py`\n- generated placeholder JSON row: `paper_modules/engine_room_lean_proof_search_lab.json`\n\nThat floor lets a reader replay the public fixture matrix and inspect the firewall, symbolic candidate search, Lean check, ablation, and axiom audit. It does not expose private source prover run state, oracle repair bodies, model-output data, online-RL traces, or frontier-scale theorem-proving claims.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 7484,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The hard problem with any proof-search tool is not finding a proof. It is trusting that a reported success was earned rather than leaked or memorised. A search loop can quietly copy the answer out of an oracle field, learn to map a problem id to a stored tactic, or compile a file that secretly leans on sorry. Each of those produces a green result that means nothing. This lab exists to answer one question: when a tiny public theorem is reported solved, did the search actually close it, and does the installed Lean kernel agree on clean axioms? The approach is to keep candidate generation cheap and untrusted, and to move all authority to the kernel. Candidate tactic bodies are generated from t\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is a small public proof-search lab, not a prover product. It reads tiny Lean theorem statements, rejects forward oracle/provider fields, tries bounded symbolic tactic bodies, checks candidates with the installed Lean kernel, records statement-only action scores, runs a problem-id ablation, and rejects sorry-tainted outputs through a #print axioms gate.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-demonstrates",
       "title": "What It Demonstrates",
       "level": 2,
       "excerpt": "Tiny public theorem statements are solved by bounded symbolic candidate search and checked with the installed lean executable. Statement-only hammer rows compile tactic candidates without crediting adapter candidates or oracle repair bodies. The forward manifest rejects candidate_body, oracle, repair, and provider text fields before any solver result can count. A problem-id ablation renames ids and theorem names, then verifies the blind policy keeps the same action signature and success behavior. A #print axioms gate rejects sorry-tainted candidates even when Lean returns success for the file.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open floor for this module is the staged Engine Room lab plus its fixture and test surfaces: runtime: src/microcosmcore/engineroom/leanproofsearch_lab.py standard: standards/stdmicrocosmengineroomleanproofsearch_lab.json fixture manifest: core/fixturemanifests/engineroomleanproofsearchlab.fixture_manifest.json public fixtures: fixtures/firstwave/engineroomleanproofsearchlab/input focused tests: tests/testengineroomleanproofsearchlab.py generated placeholder JSON row: papermodules/engineroomleanproofsearchlab.json That floor lets a reader replay the public fixture matrix and inspect the firewall, symbolic candidate search, Lean check, ablation, and axiom audit. It does not expose\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "This component is grounded in the interactive-theorem-proving pattern where proof automation proposes small tactic scripts and the kernel remains the authority. Theorem Proving in Lean 4 is the direct precedent for tactic-structured proof construction, while the Lean/mathlib ecosystem shows why small checked theorem statements, reusable libraries, and tactic automation are treated as inspectable proof artifacts rather than prose claims. The statement-only candidate search is also adjacent to \"hammer\" workflows such as Isabelle Sledgehammer: external or bounded search can suggest proof steps, but the trusted proof assistant must replay or check the result. Microcosm keeps the same separation\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is a bounded symbolic prover lab over tiny public fixtures. It is not a neural theorem prover, not frontier-scale math automation, not online-RL bandit search, and not an export of private source prover run state. Easy goals are handled by deterministic tactic templates and Lean itself. The JSON bundle authority for papermodule.engineroomleanproofsearchlab lives in Atlas owner lane binds those edges.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-exercise",
       "title": "Public Exercise",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not admit an component, unblock the Atlas owner lane, or include launch operations.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "positive symbolic fixture: two tiny public Lean statements were solved by bounded symbolic tactic search and checked by Lean. oracle-field failures: firewall evidence only. Forward candidate_body, oraclebody, providertext, repair-body, and model-output data fields cannot enter the public solver path. memorized-policy failure: an ablation guard. It shows problem-id conditioning is rejected when renaming changes the action signature, not that all memorization risks are impossible. sorry fixture: an axiom-cleanliness gate. It proves the fixture rejects sorry taint even when Lean can compile a file, not that every future Lean import is globally axiom-free. non-proof boundary: these result recor\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_lean_proof_search_lab.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR A[\"Public theorem statement\"] --> B[\"Forward-field firewall\"] B --> C[\"Bounded symbolic tactic search\"] C --> D[\"Lean subprocess check\"] D --> E[\"Axiom cleanliness audit\"] C --> F[\"Statement-only hammer table\"] F --> G[\"Problem-id ablation\"] E --> H[\"Fixture result record\"] G --> H B --> I[\"Reject oracle or provider body leak\"] E --> J[\"Reject sorry-tainted proof\"]",
       "source_hash": "sha256:6174c0674ad1c565901979ffd500632bcbeda449e93a0a1147f8687a91a09d61",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-lean-proof-search-lab-diagram-1",
       "html_anchor": "paper-module-engine-room-lean-proof-search-lab-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_lean_proof_search_lab.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Theorem Proving in Lean 4",
       "url": "https://lean-lang.org/theorem_proving_in_lean4/Tactics/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Sledgehammer",
       "url": "https://isabelle.in.tum.de/doc/sledgehammer.pdf",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 7,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-2",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Kernelized verification",
         "url": "doctrine.html#dcard-ax-2"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.verifier_lab_execution_spine",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Verifier Lab Execution Spine",
         "url": "paper-modules.html#paper-module-verifier-lab-execution-spine"
        },
        {
         "id": "paper_module.engine_room_demo",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Demo",
         "url": "paper-modules.html#paper-module-engine-room-demo"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public lean proof search lab",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 8,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.formal_math_and_proof_witness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
         "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_lean_proof_search_lab.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 8551
    },
    {
     "id": "paper_module.engine_room_navigation_fitness_benchmark",
     "title": "Engine Room Navigation Fitness Benchmark",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-navigation-fitness-benchmark",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Public Engine Room component: route-packet benchmark evaluator for stable-id recall, precision, forbidden first routes, latency, and debt candidates.",
     "summary": "Engine Room Navigation Fitness Benchmark binds the staged navigation-fitness bundle to a concrete mechanism. It evaluates public route-packet fixtures for expected stable-id recall, precision, forbidden first routes, latency budgets, scent terms, and debt candidates without running the private kernel, validating embeddings, claiming universal benchmark authority, or upgrading launch/private-system status.",
     "authority_ceiling": "Public route-packet fixture evidence only; no live private kernel run, no embedding benchmark, no universal navigation benchmark, no launch-scope decision, no private-system equivalence, no source-file changes, and no whole-system correctness.",
     "abstract": "Public Engine Room component: route-packet benchmark evaluator for stable-id recall, precision, forbidden first routes, latency, and debt candidates.",
     "teleology": {
      "section_id": "",
      "text": "Public Engine Room component: route-packet benchmark evaluator for stable-id recall, precision, forbidden first routes, latency, and debt candidates.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "This staged Engine Room bundle imports the metric core of the source navigation-fitness harness into Microcosm as a runnable refactor.\n\n###### Purpose\n\nWhen an agent is dropped cold into a large repository, the failure that costs most is not a wrong answer. It is reaching for the wrong first command and landing on the wrong rows. This benchmark exists to make that failure measurable. It answers one question: given a cold task, did the route surface point at the stable ids the task actually needed, or did it send the agent somewhere plausible but wrong?\n\nThe unusual choice is that \"correct\" and \"fast\" are scored on separate axes. A route packet can name every expected stable id and still be recorded as latency debt because it ran over budget. A packet that comes back quickly can still fail for a missing id, weak information scent, a forbidden first route, a timeout, or an outright error. Most retrieval scores collapse those into one number; this evaluator keeps them apart so that a slow-but-correct route and a fast-but-wrong route are never confused, and each lands in its own repair queue.\n\nThe benchmark is deliberately evaluative rather than generative. It reads fixtures and pre-captured route packets, scores them, and emits result records. It does not call the live private kernel, validate embeddings, or claim to measure navigation quality on tasks it has never seen.\n\n###### What It Demonstrates\n- Cold-task fixtures name expected stable ids and forbidden first routes.\n- Route packets are scored for recall, precision, forbidden-route hits, and scent terms.\n- Latency budgets are tracked separately from sufficiency, so a packet can be correct but still produce latency debt.\n- Benchmark summaries include p50/p95 wall time, route-type metrics, and debt candidates.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR A[\"Cold navigation fixture expected ids, forbidden routes, latency budget, scent terms\"] --> B[\"Route packet under test\"] B --> S[\"Sufficiency axis\"] B --> L[\"Latency axis wall time vs budget\"] subgraph SufficiencyLadder[\"Sufficiency verdict (first failing check wins)\"] S --> T[\"Timeout or error?\"] T --> M[\"Missing expected id?\"] M --> N[\"Weak scent term?\"] N --> R[\"Forbidden first route?\"] R --> P[\"Pass\"] end S --> Rec[\"Per-case result record recall, precision, status, failure kind\"] L --> Rec Rec --> Sum[\"Suite summary pass/fail counts, p50/p95 wall, route-type metrics\"] Sum --> Debt[\"Debt candidates sufficiency debt + latency debt\"]\n```\n\nThe shape is intentionally evaluative, not generative. The benchmark reads public fixture tasks and captured route packets, scores stable-id coverage, forbidden first routes, scent terms, and latency, then emits a per-case and suite-level result record. It does not run the private source kernel, inspect browser or provider state, grade answer quality, mutate route registries, or authorize public sharing.\n\n###### Technical Mechanism\n\nThe evaluator starts with a typed task record, not a free-form benchmark prompt. `NavigationFitnessTask` fixes the task id, family, prompt, route type, expected stable artifacts, forbidden first routes, latency budget, route role, and scent terms. `task_from_mapping` converts each fixture row into that record with conservative defaults, so missing fixture fields degrade to explicit public-fixture defaults rather than hidden private context.\n\n`evaluate_task` is the core predicate. It extracts selected artifacts from the route packet through `_packet_artifacts`, including both flat `selected_artifacts` rows and structured `selected_rows` entries. Expected artifacts may use exact ids or prefix wildcards; `_match_expected` records found and missing ids, then recall and precision are computed over the bounded packet. The same predicate checks forbidden first routes against `first_contact_command`, searches packet text for required scent terms, and keeps latency status separate from sufficiency status. This separation is the central mechanism: a packet can route to the right stable ids and still carry latency debt, while a fast packet can still fail for missing ids, weak scent, forbidden first-route use, timeout, or route error.\n\n`evaluate_benchmark` lifts the per-task predicate to a suite result record. It aggregates pass/fail counts, p50/p95 wall-clock observations, route-type metrics, and debt candidates. `_debt_candidates` deliberately emits only two classes: sufficiency debt, which points to the missing id, weak scent, error, timeout, or forbidden-route cause; and latency debt, which records wall time, budget, and latency status without marking the route semantically wrong.\n\n`evaluate_case` and `evaluate_fixture_dir` are the proof-consumer bridge. A fixture file supplies an expected suite status, summary counts, and selected per-task status expectations. The harness reruns the evaluator, compares the observed result record to those expectations, and reports `expectation_met` for each case plus aggregate `case_count`, `passed_case_count`, and `status`. The CLI `evaluate-fixtures --json` exposes that result record without writing durable projection outputs.\n\n###### Prior Art Grounding\n\nThe component borrows from information-retrieval evaluation and information-scent research: define expected targets, score returned routes against relevance criteria, penalize forbidden first moves, and keep latency separate from answer quality. Useful anchors include:\n- [TREC](https://trec.nist.gov/) as the benchmark tradition for retrieval runs, relevance judgments, precision, recall, and task-specific evaluation.\n- Pirolli and Card's information-foraging/information-scent work, represented by the 1999 Psychological Review article [Information Foraging](https://cir.nii.ac.jp/crid/1363951795634897280?lang=en).\n\nMicrocosm applies those ideas to agent navigation packets rather than document search. It measures whether the route surface points at the expected stable ids, whether forbidden routes appear, whether useful scent terms are present, and whether latency budgets are respected. It is not a universal benchmark or a live-kernel proof.\n\n###### Reader Evidence Routing\n- `sufficiency_status: pass`: the supplied route packet met this fixture's stable-id, forbidden-route, and scent requirements.\n- `latency_status: fail`: latency debt only. The benchmark keeps latency separate from sufficiency so a route can be correct but still too slow for the configured budget.\n- `debt_candidate_count`: a triage queue for route-surface improvement, not a routing-registry mutation or route deprecation command.\n- non-proof boundary: these result records do not prove live private `kernel.py` behavior, unseen-task navigation quality, embedding benchmark performance, launch-scope decision, accepted component admission, or Atlas launch-scope decision.\n\n###### Named Proof Consumers\n\nThe narrow proof consumer is `tests/test_engine_room_navigation_fitness_benchmark.py`. It checks recall and precision over expected artifacts, forbidden first-route detection, latency debt as an axis separate from sufficiency, suite-level debt candidate counts, fixture matrix parity, and CLI JSON emission for the public fixture root.\n\nThe public fixture matrix carries one positive case and three boundary cases:\n- `heldout_paraphrase_pass` verifies two nonliteral cold tasks route to the expected stable ids, avoid banned first routes, satisfy scent terms, and stay under latency budgets.\n- `adversarial_forbidden_route` verifies that finding the right stable id still fails when the first command uses a forbidden bespoke route.\n- `missing_stable_id_negative` verifies that selecting a nearby route row does not satisfy the expected stable-id requirement.\n- `latency_debt_negative` verifies that a sufficient route packet can still produce latency debt without being reclassified as a semantic route failure.\n\nTogether those consumers prove the evaluator's accounting contract, not live navigation quality. They do not exercise private `kernel.py`, embeddings, browser state, provider state, generated projection repair, or launch-scope decision.\n\n###### Public Exercise\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.navigation_fitness_benchmark evaluate-fixtures \\\n  --input fixtures/first_wave/engine_room_navigation_fitness_benchmark/input \\\n  --json\n```\n\n###### Validation Result record Path\n\nThe reader-verifiable result record is the focused pytest plus the paper-module corpus parity check:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_navigation_fitness_benchmark.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPassing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not admit an component, unblock the Atlas owner lane, or include launch operations.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is a curated route-packet benchmark evaluator over public fixtures. It is not a live private `kernel.py` run, not an embedding benchmark, not a universal navigation benchmark, and not launch-scope decision. Live-kernel claims require route packets captured from the real route runner.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open floor for this module is the runnable Engine Room refactor plus its fixture and test surfaces:\n- runtime: `src/microcosm_core/engine_room/navigation_fitness_benchmark.py`\n- standard: `standards/std_microcosm_engine_room_navigation_fitness_benchmark.json`\n- fixture manifest: `core/fixture_manifests/engine_room_navigation_fitness_benchmark.fixture_manifest.json`\n- public fixtures: `fixtures/first_wave/engine_room_navigation_fitness_benchmark/input`\n- focused tests: `tests/test_engine_room_navigation_fitness_benchmark.py`\n- generated placeholder JSON row: `paper_modules/engine_room_navigation_fitness_benchmark.json`\n\nThat floor is enough for a reader to inspect the benchmark logic and replay the public fixtures. It is not enough to claim private-system parity, live route-runner coverage, accepted component admission, or launch-scope decision.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 10151,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "When an agent is dropped cold into a large repository, the failure that costs most is not a wrong answer. It is reaching for the wrong first command and landing on the wrong rows. This benchmark exists to make that failure measurable. It answers one question: given a cold task, did the route surface point at the stable ids the task actually needed, or did it send the agent somewhere plausible but wrong? The unusual choice is that \"correct\" and \"fast\" are scored on separate axes. A route packet can name every expected stable id and still be recorded as latency debt because it ran over budget. A packet that comes back quickly can still fail for a missing id, weak information scent, a forbidde\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "what-it-demonstrates",
       "title": "What It Demonstrates",
       "level": 2,
       "excerpt": "Cold-task fixtures name expected stable ids and forbidden first routes. Route packets are scored for recall, precision, forbidden-route hits, and scent terms. Latency budgets are tracked separately from sufficiency, so a packet can be correct but still produce latency debt. Benchmark summaries include p50/p95 wall time, route-type metrics, and debt candidates.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape is intentionally evaluative, not generative. The benchmark reads public fixture tasks and captured route packets, scores stable-id coverage, forbidden first routes, scent terms, and latency, then emits a per-case and suite-level result record. It does not run the private source kernel, inspect browser or provider state, grade answer quality, mutate route registries, or authorize public sharing.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The evaluator starts with a typed task record, not a free-form benchmark prompt. NavigationFitnessTask fixes the task id, family, prompt, route type, expected stable artifacts, forbidden first routes, latency budget, route role, and scent terms. taskfrommapping converts each fixture row into that record with conservative defaults, so missing fixture fields degrade to explicit public-fixture defaults rather than hidden private context. evaluate_task is the core predicate. It extracts selected artifacts from the route packet through packetartifacts, including both flat selectedartifacts rows and structured selectedrows entries. Expected artifacts may use exact ids or prefix wildcards; matchex\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "source-open-body-floor",
       "title": "Source-Open Body Floor",
       "level": 2,
       "excerpt": "The source-open floor for this module is the runnable Engine Room refactor plus its fixture and test surfaces: runtime: src/microcosmcore/engineroom/navigationfitnessbenchmark.py standard: standards/stdmicrocosmengineroomnavigationfitnessbenchmark.json fixture manifest: core/fixturemanifests/engineroomnavigationfitnessbenchmark.fixturemanifest.json public fixtures: fixtures/firstwave/engineroomnavigationfitness_benchmark/input focused tests: tests/testengineroomnavigationfitness_benchmark.py generated placeholder JSON row: papermodules/engineroomnavigationfitness_benchmark.json That floor is enough for a reader to inspect the benchmark logic and replay the public fixtures. It is not enough\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This is a curated route-packet benchmark evaluator over public fixtures. It is not a live private kernel.py run, not an embedding benchmark, not a universal navigation benchmark, and not launch-scope decision. The JSON bundle authority for papermodule.engineroomnavigationfitness_benchmark lives in Atlas owner lane binds those edges. Live-kernel claims require route packets captured from the real route runner.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows from information-retrieval evaluation and information-scent research: define expected targets, score returned routes against relevance criteria, penalize forbidden first moves, and keep latency separate from answer quality. Useful anchors include: TREC as the benchmark tradition for retrieval runs, relevance judgments, precision, recall, and task-specific evaluation. Pirolli and Card's information-foraging/information-scent work, represented by the 1999 Psychological Review article Information Foraging. Microcosm applies those ideas to agent navigation packets rather than document search. It measures whether the route surface points at the expected stable ids, whether\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "sufficiency_status: pass: the supplied route packet met this fixture's stable-id, forbidden-route, and scent requirements. latency_status: fail: latency debt only. The benchmark keeps latency separate from sufficiency so a route can be correct but still too slow for the configured budget. debtcandidatecount: a triage queue for route-surface improvement, not a routing-registry mutation or route deprecation command. non-proof boundary: these result records do not prove live private kernel.py behavior, unseen-task navigation quality, embedding benchmark performance, launch-scope decision, accepted component admission, or Atlas launch-scope decision.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "The narrow proof consumer is tests/testengineroomnavigationfitness_benchmark.py. It checks recall and precision over expected artifacts, forbidden first-route detection, latency debt as an axis separate from sufficiency, suite-level debt candidate counts, fixture matrix parity, and CLI JSON emission for the public fixture root. The public fixture matrix carries one positive case and three boundary cases: heldoutparaphrasepass verifies two nonliteral cold tasks route to the expected stable ids, avoid banned first routes, satisfy scent terms, and stay under latency budgets. adversarialforbiddenroute verifies that finding the right stable id still fails when the first command uses a forbidden\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-exercise",
       "title": "Public Exercise",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "code"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "The reader-verifiable result record is the focused pytest plus the paper-module corpus parity check: Passing these commands proves only that the public fixture behavior and JSON bundle projection remain reproducible; it does not admit an component, unblock the Atlas owner lane, or include launch operations.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.engine_room_navigation_fitness_benchmark.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart LR A[\"Cold navigation fixture expected ids, forbidden routes, latency budget, scent terms\"] --> B[\"Route packet under test\"] B --> S[\"Sufficiency axis\"] B --> L[\"Latency axis wall time vs budget\"] subgraph SufficiencyLadder[\"Sufficiency verdict (first failing check wins)\"] S --> T[\"Timeout or error?\"] T --> M[\"Missing expected id?\"] M --> N[\"Weak scent term?\"] N --> R[\"Forbidden first route?\"] R --> P[\"Pass\"] end S --> Rec[\"Per-case result record recall, precision, status, failure kind\"] L --> Rec Rec --> Sum[\"Suite summary pass/fail counts, p50/p95 wall, route-type metrics\"] Sum --> Debt[\"Debt candidates sufficiency debt + latency debt\"]",
       "source_hash": "sha256:fcfccc3b674d8c84262f00ffdd6b656ba4fe7726094a81682b44c9ab334417f7",
       "html_url": "docs/paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark-diagram-1",
       "html_anchor": "paper-module-engine-room-navigation-fitness-benchmark-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_navigation_fitness_benchmark.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "TREC",
       "url": "https://trec.nist.gov/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Information Foraging",
       "url": "https://cir.nii.ac.jp/crid/1363951795634897280?lang=en",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 7,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-6",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Open-world epistemics",
         "url": "doctrine.html#dcard-ax-6"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 2,
       "links": [
        {
         "id": "paper_module.navigation_hologram_route_plane",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Navigation Hologram Route Plane",
         "url": "paper-modules.html#paper-module-navigation-hologram-route-plane"
        },
        {
         "id": "paper_module.engine_room_demo",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Engine Room Demo",
         "url": "paper-modules.html#paper-module-engine-room-demo"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public navigation fitness benchmark",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 9,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-7",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Track known unknowns without claiming the unknown is mapped",
         "url": "doctrine.html#dcard-p-7"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-11",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Bind volatile facts to refresh routes",
         "url": "doctrine.html#dcard-p-11"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.architecture_and_navigation_route_contract_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "architecture and navigation route contracts as executable doctrine boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_navigation_fitness_benchmark.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11145
    },
    {
     "id": "paper_module.cold_clone_probe",
     "title": "Cold Clone Probe",
     "relative_href": "docs/paper-modules.html#paper-module-cold-clone-probe",
     "read_href": "docs/paper-modules.html#paper-module-cold-clone-probe",
     "context_href": "docs/rules-and-ideas.html#paper-module-cold-clone-probe",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The cold-clone probe validates the first public source-root bootstrap path: src import, secret-exclusion scan, first-wave pattern-binding fixture replay, public result record refs, and ignored local result record emission.",
     "summary": "Cold Clone Probe is the public source-root bootstrap membrane. It binds bootstrap.sh, src/microcosm_core/cold_clone_probe.py, the first-wave pattern-binding fixture, the secret-exclusion scan, public relative result record refs, and focused tests so a fresh checkout has one bounded proof of first-run mechanics before install, CI, hosted launch, or full component inventory review.",
     "authority_ceiling": "Public source-root bootstrap mechanics and metadata-only result record refs only; no launch-scope decision, hosted-product readiness, external model access, source-file changes, private-system equivalence, publishing-scope decision, or whole-system correctness.",
     "abstract": "The cold-clone probe validates the first public source-root bootstrap path: src import, secret-exclusion scan, first-wave pattern-binding fixture replay, public result record refs, and ignored local result record emission.",
     "teleology": {
      "section_id": "",
      "text": "The cold-clone probe validates the first public source-root bootstrap path: src import, secret-exclusion scan, first-wave pattern-binding fixture replay, public result record refs, and ignored local result record emission.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`cold_clone_probe` is the source-root probe for a fresh public checkout. It answers one first-contact question: can this clone run the bounded bootstrap contract and write local ignored evidence before the reader installs the console command or opens the long component inventory?\n\n###### Purpose\n\nThe probe exists to keep the public entry path concrete. A cold reader should be able to start at the repository root, run one script, and see three facts:\n- the package imports from `src/` in the checkout;\n- the first-wave pattern-binding fixture can validate and mirror its public result record set;\n- the secret-exclusion scan stays in the result record boundary without exposing private bodies.\n\nThat is a bootstrap proof, not a launch proof. It is intentionally before `make install`, `make smoke`, `make ci`, or a standalone export review.\n\n###### Prior Art Grounding\n- [reproducible-builds.org](https://reproducible-builds.org/docs/), which frames reproducibility around recreating outputs from declared sources, instructions, and environment constraints.\n- The [Twelve-Factor App](https://12factor.net/dependencies), especially the dependency-declaration principle that avoids hidden reliance on ambient system packages.\n- [GitHub Actions](https://github.com/features/actions), as a common public workflow surface for clean-checkout build and smoke-test automation.\n\nMicrocosm borrows the clean-checkout, declared-dependency, and CI-smoke shape, but keeps this module to source-root bootstrap mechanics. It does not certify launch operations, hosted deployment, public sharing, external model access, secret export, Lean/Lake execution, or whole-system correctness.\n\n###### Shape\n\nSource refs\n\nset PYTHONPATH=src, pick python `bootstrap.sh` MISSING_FIXTURE_INPUT `blocked_dependency_missing` COMMAND_UNAVAILABLE `blocked_command_unavailable` SECRET_EXCLUSION_SCAN_BLOCKED `blocked_secret_exclusion` MISSING_PATTERN_BINDING_RECEIPT `blocked_dependency_missing` Diagram source\n\n```text\nflowchart TD A[Fresh public checkout] --> B[\"bootstrap.sh set PYTHONPATH=src, pick python\"] B --> C[\"run_probe(root, suite, emit_ref)\"] C --> D{Suite supported?} D -- no --> X1[\"blocked_invalid_input UNKNOWN_COLD_CLONE_SUITE\"] D -- yes --> E{REQUIRED_INPUTS present?} E -- no --> X2[\"blocked_dependency_missing MISSING_FIXTURE_INPUT\"] E -- yes --> F[Secret-exclusion scan] F -- scan unavailable --> X3[\"blocked_command_unavailable COMMAND_UNAVAILABLE\"] F -- scan fails --> X4[\"blocked_secret_exclusion SECRET_EXCLUSION_SCAN_BLOCKED\"] F -- scan passes --> G[\"Validate first-wave pattern-binding fixture\"] G --> H[\"Mirror missing PATTERN_RECEIPTS into canonical slots\"] H --> I{All five result records present?} I -- no --> X5[\"blocked_dependency_missing MISSING_PATTERN_BINDING_RECEIPT\"] I -- yes --> P[\"status=pass emit ref + five result record refs, metadata-only scan summary\"] P --> R[README map and component map]\n```\n\nThe diagram is an audience aid only. Generated lattice Mermaid remains a builder projection over the bundle edge, not a hand-authored source claim.\n\n###### Technical Mechanism\n\nThe mechanism has two layers: a shell membrane at `bootstrap.sh` and a Python result record predicate at `src/microcosm_core/cold_clone_probe.py`.\n\n`bootstrap.sh` fixes the reader's starting position before any Python logic runs. It changes into the repository root, validates the requested suite, adds `src` to `PYTHONPATH`, chooses `MICROCOSM_PYTHON`, `PYTHON`, `python3`, or `python`, and then calls `microcosm_core.cold_clone_probe` with `--suite` and `--emit`. Its `--dry-run` branch prints the same command and the ignored result record target without writing evidence, so a reader can inspect the bootstrap boundary before running it.\n\n`run_probe()` is the actual proof predicate. It creates a metadata-only base result record, rejects unknown suites before touching fixture or scanner state, checks all `REQUIRED_INPUTS`, runs `validate_secret_exclusion_scan()` before pattern-binding replay, then validates the first-wave pattern-binding fixture into `.microcosm/cold_clone_probe/pattern_binding_contract`. The mirroring step is intentionally narrow: `_mirror_missing_pattern_receipts()` only copies the declared `PATTERN_RECEIPTS`, treats unreadable destinations and sources as missing evidence through `_path_exists()` and `_path_is_file()`, and strict-reads the validation result record before adding the expected public result record refs.\n\nThe success state is correspondingly small. A passing result record records the emit ref first, followed by the five pattern-binding result record refs, and includes secret-exclusion status without copying private bodies. Non-pass states are typed as `blocked_invalid_input`, `blocked_dependency_missing`, `blocked_secret_exclusion`, or `blocked_command_unavailable`, which lets a reader distinguish malformed input, missing fixture evidence, private-boundary failure, and unavailable runtime dependencies.\n\nThis is the concrete implementation of `mechanism.cold_clone_probe.validates_public_source_root_bootstrap` and the bundle's `concept.entry_and_reveal_route_readiness_bundle` edge. The bundle's axiom and principle refs govern the boundary posture: JSON remains contract, Markdown/Mermaid/Atlas remain projections, source-open evidence must stay public-safe, and a local result record proves only the bounded first action from a fresh checkout.\n\n###### Bundle Refresh Packet\n- current source authority: generated JSON should report `paper_module_payload.source_authority: json_capsule` after builder refresh.\n- generated row source ref: `core/paper_module_capsules.json::paper_modules[94:paper_module.cold_clone_probe]`.\n- current generated projection status: Mermaid/Atlas are bundle-edge projections, not hand-authored claims.\n- resolved code locus: `src/microcosm_core/cold_clone_probe.py`.\n- resolving test loci: `tests/test_cold_clone_probe.py`, `tests/test_bootstrap_script.py`, and `tests/test_public_entry_docs.py`.\n- resolving authority edge: `mechanism.cold_clone_probe.validates_public_source_root_bootstrap`.\n- refresh condition: rerun `scripts/build_doctrine_projection.py --write-paper-module-corpus` after bundle or mechanism changes, then verify Mermaid and Atlas remain generated projections with no launch or private-system authority.\n- scope limit: this Markdown and its generated projections describe reader evidence only; they do not source hosted deployment, public sharing, external model access, launch claims, source-file changes, private-system equivalence, or whole-system correctness.\n\n###### Public Contract\n\nRun `./bootstrap.sh` from the public root. The probe validates source-form package importability and first-wave bootstrap mechanics while preserving the public/private boundary. Use `./bootstrap.sh --dry-run` to inspect the exact command without writing the ignored result record.\n\nThe successful script output points back to `README.md#public-repo-map` and `README.md#component-map`. That is deliberate: the probe proves the first local source-root action, then hands the reader to the public map instead of asking them to trust a hidden setup step.\n\n###### Reader Evidence Routing\n\nUse the probe evidence by reader question, not by copying private local result records into public projections:\n- A safety/evals reader starts with the secret-exclusion and scope boundary fields. The useful question is whether the source-open claim excludes private bodies and account secret-equivalent live-access data.\n- A peer developer starts with `bootstrap.sh --dry-run`, then reads `run_probe()` and the focused tests. The useful question is whether the fixture, result record mirroring, and default ignored result record behavior are reproducible from source.\n- A hiring or review reader starts with the README map after the probe passes. The useful question is whether the first local action is bounded before any larger claim about launch, hosting, package distribution, or whole-system behavior.\n\n###### Named Proof Consumers\n- `tests/test_cold_clone_probe.py` consumes the Python predicate directly. It verifies suite gating, default ignored result record selection, custom emit refs, fixture-missing behavior, secret-scan blocking before pattern replay, pattern-binding result record mirroring, unreadable path handling, duplicate-key rejection in mirrored validation result records, and metadata-only secret scan aliases.\n- `tests/test_bootstrap_script.py` consumes the root wrapper. It verifies no-side-effect help and version branches, argument and suite errors, dry-run command disclosure without writes, Python executable selection, custom emit writes, and the default `.microcosm/cold_clone_probe.json` path.\n- `tests/test_public_entry_docs.py` consumes the reader-facing documentation contract. It checks that README, AGENTS, SECURITY, CONTRIBUTING, QUICKSTART, and entry surfaces name the bootstrap path, ignored local result record boundary, public map handoff, and launch/host/non-public-state scope boundaries without reverting to stale tracked `receipts/cold_clone_probe.json` defaults.\n\nTogether these consumers prove the mechanism's accounting order and public reader language. They do not prove package distribution, CI completeness, hosted behavior, launch-scope decision, external model service, private-system equivalence, or sign-off of a `cold_clone_probe` component.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\n./bootstrap.sh --dry-run\n./bootstrap.sh\nPYTHONPATH=src ../repo-pytest \\\n  tests/test_cold_clone_probe.py \\\n  tests/test_bootstrap_script.py \\\n  tests/test_public_entry_docs.py \\\n  -q --basetemp /tmp/microcosm-cold-clone-probe\n```\n\nThe dry run prints the exact source-root command and the ignored result record target without writing evidence. The normal run writes `.microcosm/cold_clone_probe.json`; the focused pytest line verifies the probe, root script, and public-entry docs against the current checkout.\n\nThe focused tests cover default ignored result record behavior, custom local result record overrides, unknown-suite blocking, unreadable input handling, generated result record mirroring, public-entry doc invariants, and the rule that stale tracked `receipts/cold_clone_probe.json` paths do not become the default first-contact proof.\n\nThis result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, install the package, certify launch operations, export secrets, use external model services, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module proves only a bounded source-root bootstrap probe for a fresh public checkout: package importability from `src/`, secret-exclusion scan posture, first-wave pattern-binding fixture validation, and ignored local result record emission. This Markdown does not create or refresh those projections and does not promote them beyond generated-view status. It also does not create hosted deployment evidence, publishing-scope decision, provider authority, package-distribution proof, launch-scope decision, private-system equivalence, or whole-system correctness.\n\n###### Scope boundary\n\nThis module documents clone/bootstrap mechanics only. It does not certify launch operations, hosted deployment, public sharing, recipient work, external model access, secret export, Lean/Lake execution, package distribution, deployment posture, private-system equivalence, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 11539,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "The probe exists to keep the public entry path concrete. A cold reader should be able to start at the repository root, run one script, and see three facts: the package imports from src/ in the checkout; the first-wave pattern-binding fixture can validate and mirror its public result record set; the secret-exclusion scan stays in the result record boundary without exposing private bodies. That is a bootstrap proof, not a launch proof. It is intentionally before make install, make smoke, make ci, or a standalone export review.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "reproducible-builds.org, which frames reproducibility around recreating outputs from declared sources, instructions, and environment constraints. The Twelve-Factor App, especially the dependency-declaration principle that avoids hidden reliance on ambient system packages. GitHub Actions, as a common public workflow surface for clean-checkout build and smoke-test automation. Microcosm borrows the clean-checkout, declared-dependency, and CI-smoke shape, but keeps this module to source-root bootstrap mechanics. It does not certify launch operations, hosted deployment, public sharing, external model access, secret export, Lean/Lake execution, or whole-system correctness.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The diagram is an audience aid only. Generated lattice Mermaid remains a builder projection over the bundle edge, not a hand-authored source claim.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "technical-mechanism",
       "title": "Technical Mechanism",
       "level": 2,
       "excerpt": "The mechanism has two layers: a shell membrane at bootstrap.sh and a Python result record predicate at src/microcosmcore/coldclone_probe.py. bootstrap.sh fixes the reader's starting position before any Python logic runs. It changes into the repository root, validates the requested suite, adds src to PYTHONPATH, chooses MICROCOSM_PYTHON, PYTHON, python3, or python, and then calls microcosmcore.coldclone_probe with --suite and --emit. Its --dry-run branch prints the same command and the ignored result record target without writing evidence, so a reader can inspect the bootstrap boundary before running it. run_probe() is the actual proof predicate. It creates a metadata-only base result record\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "capsule-refresh-packet",
       "title": "Bundle Refresh Packet",
       "level": 2,
       "excerpt": "current source authority: generated JSON should report papermodulepayload.sourceauthority: jsoncapsule after builder refresh. generated row source ref: core/papermodulecapsules.json::papermodules[94:papermodule.coldcloneprobe]. current generated projection status: Mermaid/Atlas are bundle-edge projections, not hand-authored claims. resolved code locus: src/microcosmcore/coldclone_probe.py. resolving test loci: tests/testcoldclone_probe.py, tests/testbootstrapscript.py, and tests/testpublicentry_docs.py. resolving authority edge: mechanism.coldcloneprobe.validatespublicsourcerootbootstrap. refresh condition: rerun scripts/builddoctrineprojection.py --write-paper-module-corpus after bundle or\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "public-contract",
       "title": "Public Contract",
       "level": 2,
       "excerpt": "Run ./bootstrap.sh from the public root. The probe validates source-form package importability and first-wave bootstrap mechanics while preserving the public/private boundary. Use ./bootstrap.sh --dry-run to inspect the exact command without writing the ignored result record. The successful script output points back to README.md#public-repo-map and README.md#component-map. That is deliberate: the probe proves the first local source-root action, then hands the reader to the public map instead of asking them to trust a hidden setup step.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Use the probe evidence by reader question, not by copying private local result records into public projections: A safety/evals reader starts with the secret-exclusion and scope boundary fields. The useful question is whether the source-open claim excludes private bodies and account secret-equivalent live-access data. A peer developer starts with bootstrap.sh --dry-run, then reads run_probe() and the focused tests. The useful question is whether the fixture, result record mirroring, and default ignored result record behavior are reproducible from source. A hiring or review reader starts with the README map after the probe passes. The useful question is whether the first local action is bound\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "named-proof-consumers",
       "title": "Named Proof Consumers",
       "level": 2,
       "excerpt": "tests/testcoldclone_probe.py consumes the Python predicate directly. It verifies suite gating, default ignored result record selection, custom emit refs, fixture-missing behavior, secret-scan blocking before pattern replay, pattern-binding result record mirroring, unreadable path handling, duplicate-key rejection in mirrored validation result records, and metadata-only secret scan aliases. tests/testbootstrapscript.py consumes the root wrapper. It verifies no-side-effect help and version branches, argument and suite errors, dry-run command disclosure without writes, Python executable selection, custom emit writes, and the default .microcosm/coldcloneprobe.json path. tests/testpublicentry_do\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable commands, run from the microcosm-substrate/ public root: The dry run prints the exact source-root command and the ignored result record target without writing evidence. The normal run writes .microcosm/coldcloneprobe.json; the focused pytest line verifies the probe, root script, and public-entry docs against the current checkout. The focused tests cover default ignored result record behavior, custom local result record overrides, unknown-suite blocking, unreadable input handling, generated result record mirroring, public-entry doc invariants, and the rule that stale tracked result records/coldcloneprobe.json paths do not become the default first-contact proof. This result\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module proves only a bounded source-root bootstrap probe for a fresh public checkout: package importability from src/, secret-exclusion scan posture, first-wave pattern-binding fixture validation, and ignored local result record emission. The source authority is the existing JSON bundle, and the edges. This Markdown does not create or refresh those projections and does not promote them beyond generated-view status. It also does not create hosted deployment evidence, public sharing decision, provider authority, package-distribution proof, launch-scope decision, private-system equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module documents clone/bootstrap mechanics only. It does not certify launch operations, hosted deployment, public sharing, recipient work, external model access, secret export, Lean/Lake execution, package distribution, deployment posture, private-system equivalence, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.cold_clone_probe.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[Fresh public checkout] --> B[\"bootstrap.sh set PYTHONPATH=src, pick python\"] B --> C[\"run_probe(root, suite, emit_ref)\"] C --> D{Suite supported?} D -- no --> X1[\"blocked_invalid_input UNKNOWN_COLD_CLONE_SUITE\"] D -- yes --> E{REQUIRED_INPUTS present?} E -- no --> X2[\"blocked_dependency_missing MISSING_FIXTURE_INPUT\"] E -- yes --> F[Secret-exclusion scan] F -- scan unavailable --> X3[\"blocked_command_unavailable COMMAND_UNAVAILABLE\"] F -- scan fails --> X4[\"blocked_secret_exclusion SECRET_EXCLUSION_SCAN_BLOCKED\"] F -- scan passes --> G[\"Validate first-wave pattern-binding fixture\"] G --> H[\"Mirror missing PATTERN_RECEIPTS into canonical slots\"] H --> I{All five result records present?} I -- no --> X5[\"blocked_dependency_missing MISSING_PATTERN_BINDING_RECEIPT\"] I -- yes --> P[\"status=pass emit ref + five result record refs, metadata-only scan summary\"] P --> R[README map and component map]",
       "source_hash": "sha256:ef198362222e9de07e61b1103c7976bd0405e807e0d3671f66b37ee84c64ac4b",
       "html_url": "docs/paper-modules.html#paper-module-cold-clone-probe-diagram-1",
       "html_anchor": "paper-module-cold-clone-probe-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_clone_probe.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "reproducible-builds.org",
       "url": "https://reproducible-builds.org/docs/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "Twelve-Factor App",
       "url": "https://12factor.net/dependencies",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "GitHub Actions",
       "url": "https://github.com/features/actions",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.pattern_binding_contract",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Pattern Binding Contract",
         "url": "paper-modules.html#paper-module-pattern-binding-contract"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public source root bootstrap",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.entry_and_reveal_route_readiness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "entry and reveal routes as bounded cold-reader readiness evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_clone_probe.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 12647
    },
    {
     "id": "paper_module.first_screen_composition_root",
     "title": "First-Screen Composition Root",
     "relative_href": "docs/paper-modules.html#paper-module-first-screen-composition-root",
     "read_href": "docs/paper-modules.html#paper-module-first-screen-composition-root",
     "context_href": "docs/rules-and-ideas.html#paper-module-first-screen-composition-root",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The first-screen composition root validates the public one-screen entry card, reader branches, omission result records, evidence accounting frame, text projection, README order, and scope limit without becoming launch or hosted-publishing-scope decision.",
     "summary": "First-Screen Composition Root is the public entry-card contract for Microcosm. It binds the package card helper, CLI emitter, standard, README entry order, reader branch ids, doctrine-effect frame, omission result record, observatory landing refs, text projection, and focused tests so a cold reader sees what to inspect first without treating counts as maturity scores or route cards as launch, hosted-public sharing, provider, source-file changes, private-equivalence, or whole-system proof.",
     "authority_ceiling": "Public first-screen card composition and focused validation only; no launch-scope decision, hosted-publishing-scope decision, external model access authority, source-file changes, private-data equivalence, score-based progress, reader-success certification, or whole-system correctness.",
     "abstract": "The first-screen composition root validates the public one-screen entry card, reader branches, omission result records, evidence accounting frame, text projection, README order, and scope limit without becoming launch or hosted-publishing-scope decision.",
     "teleology": {
      "section_id": "",
      "text": "The first-screen composition root validates the public one-screen entry card, reader branches, omission result records, evidence accounting frame, text projection, README order, and scope limit without becoming launch or hosted-publishing-scope decision.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`first_screen_composition_root` is the contract for the one screen a cold reader should see before choosing a deeper Microcosm route.\n\n###### Purpose\n\nMicrocosm already has the important deeper surfaces: route maps, workingness, scope limits, standards, result records, source-open body imports, and the localhost observatory. The first-screen problem is not lack of depth. It is that depth lands poorly when the first encounter is a long command inventory or a raw JSON payload.\n\nThe single question the composition root answers is: when a cold reader lands on this repository, what has to fit on one screen before they choose a deeper route, and in what order. It answers that with a fixed slot list rather than prose, so every projection of the first screen (terminal card, README, browser board, JSON, video) renders the same surfaces in the same order.\n\nThe composition root says what has to fit on one screen:\n1. One shared terminal selector: `microcosm hello <project>`.\n2. One shared behavior proof: `microcosm tour --card <project>`.\n3. Six reader branch handles after that shared card: GitHub visitor, safety/evals engineer, hiring reviewer, peer developer, domain specialist, and Type A agent. The shared map and behavior proof always come first; a reader branch only changes which next inspection surface is shown, never the scope limit.\n4. Evidence counts framed as accounting, not maturity or progress scores.\n5. A runnable-to-structural join: the folder-local command is one visible exercise of a larger source-open system.\n6. A doctrine-effect frame: concepts and mechanisms appear as public handles that prevent vague labels and feature prose before deeper standards are opened.\n7. An omission result record: the card names the deeper route map, result records, standards, workingness, authority, and observatory drilldowns instead of copying them.\n8. An scope limit that rejects launch, hosted public sharing, external model access, source-file changes, private-data equivalence, score-based progress, and whole-system correctness.\n\nWhat is unusual here is that the card is checked against the standard that defines it. The emitter does not free-hand its output. It loads `standards/std_microcosm_first_screen_composition_root.json`, builds the card, and then scans the card back against the standard's required fields, validator id, reader-route parity, copyable per-reader commands, and denied-authority flags. The scan reports `blocked` rather than raising when a surface has drifted, so a renamed slot or a missing reader route is visible as a failing check instead of a silent regression. The check proves only that the card is internally consistent with its own contract. It does not certify that any reader will succeed, that the system is mature, or that anything is ready to launch.\n\n###### Shape\n\nSource refs\n\nFirst-screen standard `standards/std_microcosm_first_screen_composition_root.json` Diagram source\n\n```text\nflowchart TD A[\"First-screen standard standards/std_microcosm_first_screen_composition_root.json\"] --> B[\"Compose card first_screen_composition.py: build slots, six reader routes, evidence frame\"] B --> C[\"Scan card against standard _standard_backed_first_screen_scan + _validation_checks\"] C -->|all checks true| D[\"status: pass\"] C -->|drift, rename, missing route| E[\"status: blocked failing check named\"] D --> F[\"Emit scripts/first_screen_composition_card.py --format json or text\"] E --> F F --> G[\"Reader output JSON contract or terminal text card, one screen\"] A -.binds.-> H[\"JSON source record + mechanism subject core/paper_module_capsules.json\"]\n```\n\nThis is the runtime shape behind the first screen: the standard is loaded, the card is composed from it, the card is scanned back against the standard, and the result is emitted as JSON or a terminal text card. A passing scan means the card is internally consistent with its contract; a blocked scan names the failing check. The diagram is not a public-sharing claims. It binds the mechanism subject and resolved code loci, while keeping accepted-component authority, launch-scope decision, hosted-publishing-scope decision, external model access, source-file changes, score-based progress, private-data equivalence, and whole-system correctness out of scope.\n\n###### Reader Evidence Routing\n- A safety/evals reader starts with the focused first-screen text card for `safety_evals_engineer`, then checks the scope limit, evidence accounting frame, and public-entry doc tests. The useful question is whether the card keeps local behavior proof separate from launch, provider, and whole-system correctness claims.\n- A hiring or review reader starts with the JSON card and the Reader Branches table. The useful question is whether one rerunnable local command, one shared proof card, and one branch route are enough to inspect the system without mistaking counts for maturity scores.\n- A peer developer starts with `scripts/first_screen_composition_card.py`, then reads `src/microcosm_core/first_screen_composition.py` and the focused tests. The useful question is whether the command/card projection is reproducible from public inputs without reading private runtime state.\n\nGenerated entry-packet rows, browser boards, and site cards should point back to these public commands, tests, and omission result records. They do not become source authority for the paper module and must not imply publishing-scope decision or source-file changes.\n\n###### Concrete One-Screen Artifact\n\nThe artifact is a terminal-sized card, not a second README. It should fit the following order without requiring a reader to scroll through the full command inventory:\n- Claim frame: \"Microcosm turns a folder into local routes, work, events, evidence, and explanations.\" This names the composition root without claiming launch, hosted product status, or whole-system correctness.\n- Goal entry: `microcosm comprehend --first-action \"<your goal>\"` converts an arriving goal into one graph-backed first correct action (demonstrated in `FIRST_ACTION.md`) before the orientation ladder begins.\n- First step: `microcosm hello <project>` gives every reader the same shared entry command before audience branching.\n- Shared proof: `microcosm tour --card <project>` shows one local behavior proof that can be repeated from a clone.\n- Evidence legend: Count, evidence class, proof surface, and scope boundary prevent honest counters from becoming maturity scores.\n- Doctrine frame: Concepts and mechanisms as mistake-prevention handles let agents find `std_microcosm_concept` and `std_microcosm_mechanism` from entry instead of searching the standards tree.\n- Structural join: \"This run exercises one public component inside a larger source-open system.\" This connects the local command to standards, result records, body imports, and observatory routes.\n- Reader rail: Safety/evals, hiring, and peer developer branch handles let each reader choose a next drilldown without changing authority.\n- Exit rule: Stop when the goal entry, first step, shared proof, evidence legend, and one branch next-step are understood. This keeps the card from expanding into the long-form route map.\n\nAny first-screen renderer may change wording, but not the order of those slots. If a field needs more space than one screen, the renderer must replace the body with a result record, paper-module, standard, or observatory handle rather than expanding the card.\n\n###### Evidence Accounting Frame\n\nThe first screen must explain honest counters before a reader sees them as scores. Counts such as source-open body materials, rows with source imports, verified source imports, external subprocess witnesses, and algorithmic projections are accounting fields. They answer \"what kind of evidence is this and where can I inspect it,\" not \"how mature is the whole system.\"\n\nThat distinction is reader-visible:\n- Small verified count: a narrow proof cell exists and carries higher authority. It does not mean the rest of the system is unimplemented.\n- Large source-open material count: public imported body material is inspectable by path and result record. It does not mean more bodies automatically produce stronger proof.\n- Algorithmic projection count: a generated surface is present and needs source-coupling context. It does not make generated rows source authority.\n- Rows with source imports: some components expose copied body material through validators. It does not mean every component has equal evidence depth.\n\nReader branches can choose different next evidence surfaces, but they inherit the same accounting frame. A safety/evals reader should ask for authority and failure-mode boundaries; a hiring reviewer should ask whether the counters are traceable rather than inflated; a peer developer should ask which command lets them reproduce the local evidence trail.\n\n###### Discipline Comparison Frame\n\nThe first screen must show rigor by naming the collapse it prevents. A compact card is allowed to be small only because it keeps these separations visible:\n- A status badge says \"works\": local behavior proof stays separate from launch, proof, and correctness claims. The card names `microcosm tour --card <project>` plus the scope limit.\n- Evidence totals look like progress: evidence classes stay attached to scope boundaries and result record refs. A reader can move from count to class to proof surface without inferring maturity.\n- Governance reads like ceremony: each constraint is phrased as the mistake it blocks. The card says what would be overclaimed if the constraint were absent.\n- Breadth looks diffuse: the local run is framed as one exercised component inside the accepted runtime spine. The structural join points to spine, workingness, standards, result records, and observatory drilldowns.\n\nThis comparison frame is not marketing copy. It is the rule that keeps the first screen from sounding impressive while hiding the authority boundary that made the compression possible.\n\n###### Observable Artifact Bridge\n\nThe first screen has two sibling projections: the terminal card and the compact browser board. They are the same artifact in different media, not two separate claims. The terminal card may be emitted by `microcosm hello <project>` or `microcosm tour --card <project>`; the browser board may be emitted by a first-screen or observatory compact endpoint. Both must show the same five slots before linking to deeper drilldowns:\n\nSlot Terminal card cue Browser board cue Open command Exact command a reader can rerun. Command label pinned above the board. Local proof Route/work/event/evidence chain summary. The selected route and first causal edge. Causal chain Result record or validator refs. Event/evidence refs before graph expansion. Evidence legend Evidence class plus scope boundary. Legend beside counts, not hidden in hover text. Scope limit Forbidden reads named in text. Boundary band visible before any motion.\n\nThe browser projection can make the first artifact more inspectable, but it cannot become a marketing page. A screenshot or video is first-screen material only when it preserves command, result record, evidence class, scope boundary, and scope limit in the frame.\n\n###### Reader Branches\n\nThe shared first command comes before branching. Reader branches select the next inspection surface; they do not create audience-specific authority.\n- Safety/evals engineer: `microcosm status --card <project>` plus authority and workingness drilldowns; evidence focus is classes, ceilings, body-copy boundaries, scope boundaries, standards, and failure modes.\n- Hiring reviewer: legibility scorecard plus compact tour card; evidence focus is whether it is real, local, bounded, and honest about what is not proven.\n- Peer developer: compact tour card plus project observation drilldown; evidence focus is whether a clone can produce local `.microcosm/` state and inspect the route/work/event/evidence chain.\n\n###### Reader Selection Card\n\nThe machine-readable selector lives at `atlas/entry_packet.json::reader_first_screen_routes.reader_selection_card`. It is the public first-screen handoff between terminal prose and branch-specific drilldowns:\n\n```text\nmicrocosm hello --reader safety_evals_engineer <project>\nmicrocosm hello --reader hiring_reviewer <project>\nmicrocosm hello --reader peer_developer <project>\n```\n\nThose focused projections are allowed to hide the other two branches, but not the shared behavior proof, evidence-accounting frame, runnable-to-structural join, omission result record, or scope limit. The selector should therefore be read as a branch router, not a personalized success claim.\n\n###### Public Card Emitter\n\n`scripts/first_screen_composition_card.py` projects this contract into a public-root JSON card:\n\n```text\npython3 scripts/first_screen_composition_card.py --project-label <project>\n```\n\nIt can also emit the terminal-sized first screen directly:\n\n```text\npython3 scripts/first_screen_composition_card.py --project-label <project> --format text\n```\n\nThe text projection can focus one reader branch while preserving the same shared first command, evidence-count frame, omission result record, and scope limit:\n\n```text\npython3 scripts/first_screen_composition_card.py --project-label <project> --format text --reader safety_evals_engineer\n```\n\n`--reader all` remains the default.\n\nThe emitter is intentionally narrow. It does not import private runtime state or source bodies. It loads this standard, emits the one shared command and three branch handles, frames evidence counts as accounting, names the runnable-to-structural join, and carries the standard's omission result record and scope limit.\n\n###### Prior Art Grounding\n\nThe first-screen contract borrows from command-line usability practice rather than inventing a new onboarding genre. The [Command Line Interface Guidelines](https://clig.dev/) emphasize concise default help, examples, discoverable next commands, clear exit behavior, and machine-readable output where appropriate. Those patterns show up here as the one shared command, terminal-sized card, rerunnable examples, and explicit reader branches.\n\nThe compression rule is also grounded in progressive disclosure: the first screen should reveal enough structure to orient a cold reader without dumping the whole system. Nielsen Norman Group's [progressive disclosure](https://www.nngroup.com/articles/progressive-disclosure/) pattern is the relevant UX precedent, while [W3C PROV](https://www.w3.org/TR/prov-overview/) informs the insistence that evidence counts remain attached to provenance, result record refs, and authority boundaries instead of becoming freestanding success badges.\n\n###### Validation Shape\n\nThe standard is intentionally a composition contract, not a runtime authority. When a runtime card consumes it, validation should check that the card has a single terminal selector, one shared behavior proof, the three reader route ids, the reader-selection card ref, evidence-accounting context, a runnable-to-structural join, discipline comparison frame, observable artifact bridge, concept and mechanism rows inside the doctrine-effect frame, omission result records, and the scope limit.\n\n###### Validation Result record Path\n\nReader-verifiable emitter commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src ../repo-python scripts/first_screen_composition_card.py --project-label . --format json\nPYTHONPATH=src ../repo-python scripts/first_screen_composition_card.py \\\n  --project-label . \\\n  --format text \\\n  --reader safety_evals_engineer\n```\n\nFocused test result record, run from the repository root:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_first_screen_composition_card.py \\\n  tests/test_cli_hello_first_screen.py \\\n  tests/test_readme_first_screen_entry.py \\\n  -q --basetemp /tmp/microcosm-first-screen-composition-tests\n```\n\nThe emitter commands write no private state and print the public first-screen result record to stdout: the JSON card exposes the shared command, behavior proof, evidence accounting frame, omission result record, and scope limit; the focused text command proves a reader branch can be compressed without changing the claim frame. The focused tests verify the card schema, CLI first-screen output, README entry contract, local-state result record trail, overclaim tripwires, and reader route menu.\n\nThis result record path is reader-verifiable evidence only. It does not replace the cold-reader route map, certify launch-scope decision, change source files or project state, use external model services, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module governs only the first-screen compression contract: one shared terminal selector, one shared behavior-proof card, reader branch handles, evidence accounting, omission result records, and an scope limit visible before deeper routes. It does not establish runtime correctness, replace the route map, certify public sharing or launch-scope decision, use external model services, change source files or project state, make counts into maturity scores, or aggregate doctrine-lattice coverage.\n\n###### Scope limit\n\nThis module does not replace the cold-reader route map, standards-control lens, workingness map, public reveal walkthrough, or observatory. It only governs the compression boundary that lets those deeper surfaces land in the right order.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 17400,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "Microcosm already has the important deeper surfaces: route maps, workingness, scope limits, standards, result records, source-open body imports, and the localhost observatory. The first-screen problem is not lack of depth. It is that depth lands poorly when the first encounter is a long command inventory or a raw JSON payload. The single question the composition root answers is: when a cold reader lands on this repository, what has to fit on one screen before they choose a deeper route, and in what order. It answers that with a fixed slot list rather than prose, so every projection of the first screen (terminal card, README, browser board, JSON, video) renders the same surfaces in the same\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "This is the runtime shape behind the first screen: the standard is loaded, the card is composed from it, the card is scanned back against the standard, and the result is emitted as JSON or a terminal text card. A passing scan means the card is internally consistent with its contract; a blocked scan names the failing check. The diagram is not a public-sharing claims. It binds the mechanism subject and resolved code loci, while keeping accepted-component authority, launch approval, hosted-public sharing decision, external model access, source-file changes, score-based progress, private-data equivalence, and whole-system correctness out of scope.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "A safety/evals reader starts with the focused first-screen text card for safetyevalsengineer, then checks the scope limit, evidence accounting frame, and public-entry doc tests. The useful question is whether the card keeps local behavior proof separate from launch, provider, and whole-system correctness claims. A hiring or review reader starts with the JSON card and the Reader Branches table. The useful question is whether one rerunnable local command, one shared proof card, and one branch route are enough to inspect the system without mistaking counts for maturity scores. A peer developer starts with scripts/firstscreencomposition_card.py, then reads src/microcosmcore/firstscreen_composit\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "concrete-one-screen-artifact",
       "title": "Concrete One-Screen Artifact",
       "level": 2,
       "excerpt": "The artifact is a terminal-sized card, not a second README. It should fit the following order without requiring a reader to scroll through the full command inventory: Claim frame: \"Microcosm turns a folder into local routes, work, events, evidence, and explanations.\" This names the composition root without claiming launch, hosted product status, or whole-system correctness. Goal entry: microcosm comprehend --first-action \"<your goal>\" converts an arriving goal into one graph-backed first correct action (demonstrated in FIRST_ACTION.md) before the orientation ladder begins. First step: microcosm hello <project> gives every reader the same shared entry command before audience branching. Share\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "evidence-accounting-frame",
       "title": "Evidence Accounting Frame",
       "level": 2,
       "excerpt": "The first screen must explain honest counters before a reader sees them as scores. Counts such as source-open body materials, rows with source imports, verified source imports, external subprocess witnesses, and algorithmic projections are accounting fields. They answer \"what kind of evidence is this and where can I inspect it,\" not \"how mature is the whole system.\" That distinction is reader-visible: Small verified count: a narrow proof cell exists and carries higher authority. It does not mean the rest of the system is unimplemented. Large source-open material count: public imported body material is inspectable by path and result record. It does not mean more bodies automatically produce\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "discipline-comparison-frame",
       "title": "Discipline Comparison Frame",
       "level": 2,
       "excerpt": "The first screen must show rigor by naming the collapse it prevents. A compact card is allowed to be small only because it keeps these separations visible: A status badge says \"works\": local behavior proof stays separate from launch, proof, and correctness claims. The card names microcosm tour --card <project> plus the scope limit. Evidence totals look like progress: evidence classes stay attached to scope boundaries and result record refs. A reader can move from count to class to proof surface without inferring maturity. Governance reads like ceremony: each constraint is phrased as the mistake it blocks. The card says what would be overclaimed if the constraint were absent. Breadth looks d\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "observable-artifact-bridge",
       "title": "Observable Artifact Bridge",
       "level": 2,
       "excerpt": "The first screen has two sibling projections: the terminal card and the compact browser board. They are the same artifact in different media, not two separate claims. The terminal card may be emitted by microcosm hello <project> or microcosm tour --card <project>; the browser board may be emitted by a first-screen or observatory compact endpoint. Both must show the same five slots before linking to deeper drilldowns: The browser projection can make the first artifact more inspectable, but it cannot become a marketing page. A screenshot or video is first-screen material only when it preserves command, result record, evidence class, scope boundary, and scope limit in the frame.",
       "block_kinds": [
        "paragraph",
        "table"
       ]
      },
      {
       "section_id": "reader-branches",
       "title": "Reader Branches",
       "level": 2,
       "excerpt": "The shared first command comes before branching. Reader branches select the next inspection surface; they do not create audience-specific authority. Safety/evals engineer: microcosm status --card <project> plus authority and workingness drilldowns; evidence focus is classes, ceilings, body-copy boundaries, scope boundaries, standards, and failure modes. Hiring reviewer: legibility scorecard plus compact tour card; evidence focus is whether it is real, local, bounded, and honest about what is not proven. Peer developer: compact tour card plus project observation drilldown; evidence focus is whether a clone can produce local .microcosm/ state and inspect the route/work/event/evidence chain.",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "reader-selection-card",
       "title": "Reader Selection Card",
       "level": 2,
       "excerpt": "The machine-readable selector lives at atlas/entrypacket.json::readerfirstscreenroutes.readerselectioncard. It is the public first-screen handoff between terminal prose and branch-specific drilldowns: Those focused projections are allowed to hide the other two branches, but not the shared behavior proof, evidence-accounting frame, runnable-to-structural join, omission result record, or scope limit. The selector should therefore be read as a branch router, not a personalized success claim.",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-shape",
       "title": "Validation Shape",
       "level": 2,
       "excerpt": "The standard is intentionally a composition contract, not a runtime authority. When a runtime card consumes it, validation should check that the card has a single terminal selector, one shared behavior proof, the three reader route ids, the reader-selection card ref, evidence-accounting context, a runnable-to-structural join, discipline comparison frame, observable artifact bridge, concept and mechanism rows inside the doctrine-effect frame, omission result records, and the scope limit.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "public-card-emitter",
       "title": "Public Card Emitter",
       "level": 2,
       "excerpt": "scripts/firstscreencomposition_card.py projects this contract into a public-root JSON card: It can also emit the terminal-sized first screen directly: The text projection can focus one reader branch while preserving the same shared first command, evidence-count frame, omission result record, and scope limit: --reader all remains the default. routes only: they reduce the first-screen branch set, but they do not create a different claim frame or audience-specific authority. The emitter is intentionally narrow. It does not import private runtime state or source bodies. It loads this standard, emits the one shared command and three branch handles, frames evidence counts as accounting, names the\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable emitter commands, run from the microcosm-substrate/ public root: Focused test result record, run from the repository root: The emitter commands write no private state and print the public first-screen result record to stdout: the JSON card exposes the shared command, behavior proof, evidence accounting frame, omission result record, and scope limit; the focused text command proves a reader branch can be compressed without changing the claim frame. The focused tests verify the card schema, CLI first-screen output, README entry contract, local-state result record trail, overclaim tripwires, and reader route menu. This result record path is reader-verifiable evidence only. It\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The first-screen contract borrows from command-line usability practice rather than inventing a new onboarding genre. The Command Line Interface Guidelines emphasize concise default help, examples, discoverable next commands, clear exit behavior, and machine-readable output where appropriate. Those patterns show up here as the one shared command, terminal-sized card, rerunnable examples, and explicit reader branches. The compression rule is also grounded in progressive disclosure: the first screen should reveal enough structure to orient a cold reader without dumping the whole system. Nielsen Norman Group's progressive disclosure pattern is the relevant UX precedent, while W3C PROV informs t\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module governs only the first-screen compression contract: one shared terminal selector, one shared behavior-proof card, reader branch handles, evidence accounting, omission result records, and an scope limit visible before deeper routes. It does not establish runtime correctness, replace the route map, certify public sharing or launch-scope decision, use external model services, change source files or project state, make counts into maturity scores, or aggregate doctrine-lattice coverage.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module does not replace the cold-reader route map, standards-control lens, workingness map, public reveal walkthrough, or observatory. It only governs the compression boundary that lets those deeper surfaces land in the right order.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.first_screen_composition_root.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD A[\"First-screen standard standards/std_microcosm_first_screen_composition_root.json\"] --> B[\"Compose card first_screen_composition.py: build slots, six reader routes, evidence frame\"] B --> C[\"Scan card against standard _standard_backed_first_screen_scan + _validation_checks\"] C -->|all checks true| D[\"status: pass\"] C -->|drift, rename, missing route| E[\"status: blocked failing check named\"] D --> F[\"Emit scripts/first_screen_composition_card.py --format json or text\"] E --> F F --> G[\"Reader output JSON contract or terminal text card, one screen\"] A -.binds.-> H[\"JSON source record + mechanism subject core/paper_module_capsules.json\"]",
       "source_hash": "sha256:9dc84f170bc53dbb2dd3c07bc9a14e988da66635ed318b4e8b92453f364ef323",
       "html_url": "docs/paper-modules.html#paper-module-first-screen-composition-root-diagram-1",
       "html_anchor": "paper-module-first-screen-composition-root-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/first_screen_composition_root.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "Command Line Interface Guidelines",
       "url": "https://clig.dev/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "progressive disclosure",
       "url": "https://www.nngroup.com/articles/progressive-disclosure/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.cold_reader_route_map",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Cold-Reader Route Map",
         "url": "paper-modules.html#paper-module-cold-reader-route-map"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public first screen composition root",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 10,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-3",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Concentrate trust in small checkers",
         "url": "doctrine.html#dcard-p-3"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-6",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Status fails closed",
         "url": "doctrine.html#dcard-p-6"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-12",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Make doctrine executable before authoritative",
         "url": "doctrine.html#dcard-p-12"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.entry_and_reveal_route_readiness_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "entry and reveal routes as bounded cold-reader readiness evidence",
         "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/first_screen_composition_root.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 18721
    },
    {
     "id": "paper_module.batch7_secondary_runtime_capsule",
     "title": "Set 7 Secondary Runtime Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-secondary-runtime-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch7-secondary-runtime-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch7-secondary-runtime-capsule",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Set 7 Secondary Runtime Bundle imports runtime, graph, cartography, stockgrid, and Polymarket bodies and exercises their fixture-bound boundaries.",
     "summary": "Set 7 Secondary Runtime Bundle binds the accepted batch7_secondary_runtime_capsule component to copied runtime view-model, lane-progress, graph-lens, graph-projection, cartography, stockgrid, and Polymarket source bodies. It exercises eight fixture engines, source digest anchors, required anchors, UI witness metadata, synthetic runtime packets, synthetic market rows, negative cases, and scope limits while excluding browser/session export, wallet authority, live market data, investment-related actions, external model access, launch-scope decision, private-system equivalence, semantic truth, and complete UI or ranking coverage.",
     "authority_ceiling": "Fixture-bound public source-body import and secondary runtime/market witness evidence only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, launch-scope decision, private-system equivalence, semantic truth, source-file changes, or complete UI/ranking coverage proof.",
     "abstract": "Set 7 Secondary Runtime Bundle imports runtime, graph, cartography, stockgrid, and Polymarket bodies and exercises their fixture-bound boundaries.",
     "teleology": {
      "section_id": "",
      "text": "Set 7 Secondary Runtime Bundle imports runtime, graph, cartography, stockgrid, and Polymarket bodies and exercises their fixture-bound boundaries.",
      "source": "capsule_summary_line"
     },
     "body_markdown": "`batch7_secondary_runtime_capsule` imports a second Set-7 runtime slice into Microcosm. It exact-copies runtime view-model, lane-progress, graph-lens, graph-projection, cartography, stockgrid, and Polymarket source bodies into a public bundle, runs the bounded witness path, and exercises the Python market/numeric cores against synthetic public fixtures.\n\n###### Imported Source Bodies\n- `system/server/ui/src/components/world/agentTraceViewModel.ts`\n- `system/server/ui/src/components/world/laneProgress.ts`\n- `system/server/ui/src/components/graph/universalGraphLens.ts`\n- `system/server/ui/src/components/graph/graphProjection.ts`\n- `system/server/ui/src/lib/capCartographyShadowRender.ts`\n- their focused Vitest witnesses where public-safe\n- `tools/stockgrid/stockgrid.py`\n- `tools/polymarket/clob_snapshot.py`\n- `tools/polymarket/score.py`\n- `tools/polymarket/models.py`\n\n###### Purpose\n\nThis module is the reader-facing instrument for the accepted `batch7_secondary_runtime_capsule` component. Its source authority is the JSON source record in `core/paper_module_capsules.json`; this Markdown explains what a cold reader may trust from the public secondary-runtime fixture and what remains out of scope.\n\nThe component exists to answer one question: do these copied frontend and market bodies still behave the way their original code claims to, when run in isolation over synthetic inputs? It copies eight slices into a bundle, then exercises each one against a small fixture and re-checks the exact behaviour the original author relied on. The interesting part is not that the code runs, but that each engine is paired with a planted regression. The component mutates a single token in the copied body, or feeds an adversarial input, and asserts that the behaviour breaks in the expected way. A check that only passes on good input proves little; a check that also fails on the right bad input is evidence the behaviour is real.\n\nSeveral of these guards encode a concrete bug that was found in production. The Polymarket order-book reader documents a probe from 2026-05-12: the API can return bids floor-first and asks ceiling-first, so a naive `bids[0]` / `asks[0]` reader silently inverts best-bid and best-ask. The body derives best prices by numeric extrema instead, and the `polymarket_sorted_book_trap` case feeds a deliberately mis-sorted book to confirm the extrema rule still holds. The stockgrid momentum primitive refuses an impossible -100% daily change rather than returning a misleading number. The graph projection drops self-edges so a collapsed cluster does not draw an arrow to itself. The scope stays narrow on purpose: this is local body import and synthetic-fixture witness evidence, not live market access, wallet authority, browser export, or investment-related actions.\n\n###### Shape\n\nSource refs\n\nVitest witness `world/graph/cartography tests` Diagram source\n\n```text\nflowchart TD bundle[\"Exported bundle copied bodies + source digest anchors\"] witness[\"Vitest witness world/graph/cartography tests\"] subgraph Engines[\"Eight fixture engines\"] ui[\"Trace view-model and lane progress\"] graph[\"Graph lens and graph projection\"] carto[\"Cartography observe-only render\"] market[\"Stockgrid + Polymarket CLOB and four-lens scoring\"] end subgraph Negatives[\"Planted regressions\"] invert[\"Mis-sorted book must still find extrema\"] momentum[\"-100% change must be refused\"] selfedge[\"Self-edge must be dropped\"] resolved[\"Resolved market must gate NEWSBREAKER\"] end result records[\"metadata-only result records status, digests, anchor checks\"] ceiling[\"scope limit\"] bundle --> witness witness --> ui bundle --> graph bundle --> carto bundle --> market ui --> Negatives graph --> Negatives carto --> Negatives market --> Negatives Negatives --> result records result records --> ceiling\n```\n\n###### Reader Evidence Routing\n\nStart from the component source when checking behavior:\n- `EXPECTED_ENGINES` names the eight fixture engines for trace view-models, lane progress, graph lenses, graph projection, cartography, stockgrid, CLOB microstructure, and Polymarket scoring.\n- `EXPECTED_NEGATIVE_CASES` names the planted regressions for raw-authority omission, unknown lane state, hidden descendants, self edges, observe-only cartography, extreme stock momentum, sorted-book traps, and resolved-market gating.\n- `AUTHORITY_CEILING` keeps launch, public sharing, provider/model dispatch, browser or wallet access, source-file changes, investment-related actions, semantic-truth authority, and test-completeness proof false.\n- `run`, `run_batch7_secondary_bundle`, and `result_card` expose the reproducible command and metadata-only summary.\n\n###### What the engines check\n\nEach engine reads a copied body and asserts a specific, checkable behaviour. The four with the clearest stakes:\n- **Polymarket CLOB microstructure.** `compute_best_prices` derives the best bid as the maximum bid price and the best ask as the minimum ask price, never from the first row of each side. This guards a real failure documented in the source: the API can return bids floor-first and asks ceiling-first, which inverts a naive `bids[0]` / `asks[0]` reader. The `polymarket_sorted_book_trap` case feeds a mis-sorted book and confirms the chosen best bid (0.42) and ask (0.53) are not the first entries, then checks the spread and that depth imbalance stays in `[-1, 1]`.\n- **Stockgrid momentum.** `_daily_log_momentum_bps` converts a percentage change into a daily log-return in basis points, but returns nothing when the ratio is at or below -0.999999. A claimed -100% daily change has no finite log return, so the primitive refuses it rather than emitting a misleading value. The `stockgrid_extreme_momentum` case asserts that refusal.\n- **Graph projection.** `projectGraphForRender` groups nodes into per-lane, per-wave summary clusters and rewrites edges between clusters. It drops any edge whose source and target land in the same cluster, so a collapsed cluster never draws an arrow to itself. The `graph_projection_self_edge` case removes the `sourceId === targetId` guard from the copied body and confirms the self-edge would otherwise survive.\n- **Polymarket four-lens scoring.** `calculate_lenses` zeroes the NEWSBREAKER lens for any market that is resolved, low-volume, low-uncertainty, or an outlier in velocity. The fixture scores one open and one resolved synthetic market and asserts the resolved one scores zero on NEWSBREAKER while the open one does not.\n\nThe remaining engines cover the trace view-model trust taxonomy (seven labels including `missing` and `fallback`, with an explicit \"raw provider JSONL is unavailable\" path), lane-progress state normalisation (an unknown state falls back to `idle`, not an invented status), the graph lens (collapsing a parent keeps the parent visible but hides its descendants), and the cartography render (a fixed set of mutating actions stays blocked, so the surface observes without creating or editing). Each negative case is run by mutating one token in the copied body or supplying an adversarial input, then checking the engine reports `blocked`. The result records record status, digests, and anchor matches only; copied bodies and command output are never inlined.\n\n###### Prior Art Grounding\n\nThe component borrows from MVVM/read-model UI architecture, graph visualization, and market-data board patterns: view models shape raw state for views, graph projections make relationships inspectable, and market rows must preserve provider identity and missingness. Useful anchors include:\n- Microsoft's [MVVM guidance](https://learn.microsoft.com/en-us/dotnet/architecture/maui/mvvm), where view models encapsulate presentation state while separating UI from underlying model logic.\n- [D3 force layouts](https://github.com/d3/d3-force) as a common graph visualization family for networks and hierarchies.\n- The CFTC's [prediction markets explainer](https://www.cftc.gov/LearnandProtect/PredictionMarkets), as a boundary reference for event-market data and consumer caution.\n\nMicrocosm borrows the view-model, graph-projection, and market-diagnostic shapes, but runs them only over synthetic runtime packets and synthetic market rows. It is not browser/session export, live market data, trading decisions, or proof that frontend projections are complete.\n\n###### Validation Result record Path\n\nReader-verifiable fixture command, run from `microcosm-substrate/`:\n\nFocused test result record, run from the repository root:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_batch7_secondary_runtime_capsule.py \\\n  -q --basetemp /tmp/microcosm-batch7-secondary-runtime-tests\n```\n\nThe fixture run writes `receipts/first_wave/batch7_secondary_runtime_capsule/batch7_secondary_runtime_capsule_result.json`, `receipts/first_wave/batch7_secondary_runtime_capsule/batch7_secondary_runtime_capsule_validation_receipt.json`, and `receipts/first_wave/batch7_secondary_runtime_capsule/batch7_secondary_runtime_capsule_board.json`; the sign-off file records fixture sign-off. The exported-bundle re-run uses the `run-batch7-secondary-bundle` action over `exported_batch7_secondary_runtime_capsule_bundle`.\n\nThis result record path is public fixture evidence only. It does not export browser or account sessions, fetch live market data, provide investment-related actions, complete UI/ranking coverage, include launch operations or public sharing, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis bundle can claim fixture-bound public source-body import evidence and secondary runtime/market witness result records. It cannot authorize browser/session export, wallet authority, live market data, investment-related actions, external model access, source-file changes, launch, public sharing, private-system equivalence, semantic truth, complete UI/ranking coverage, or whole-system correctness.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 9879,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "imported-macro-bodies",
       "title": "Imported Source Bodies",
       "level": 2,
       "excerpt": "system/server/ui/src/components/world/agentTraceViewModel.ts system/server/ui/src/components/world/laneProgress.ts system/server/ui/src/components/graph/universalGraphLens.ts system/server/ui/src/components/graph/graphProjection.ts system/server/ui/src/lib/capCartographyShadowRender.ts their focused Vitest witnesses where tools/stockgrid/stockgrid.py tools/polymarket/clob_snapshot.py tools/polymarket/score.py tools/polymarket/models.py",
       "block_kinds": [
        "list"
       ]
      },
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "This module is the reader-facing instrument for the accepted batch7secondaryruntime_capsule component. Its source authority is the JSON source record in core/papermodulecapsules.json; this Markdown explains what a cold reader may trust from the public secondary-runtime fixture and what remains out of scope. The component exists to answer one question: do these copied frontend and market bodies still behave the way their original code claims to, when run in isolation over synthetic inputs? It copies eight slices into a bundle, then exercises each one against a small fixture and re-checks the exact behaviour the original author relied on. The interesting part is not that the code runs, but th\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "",
       "block_kinds": [
        "diagram"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "Start from the component source when checking behavior: EXPECTED_ENGINES names the eight fixture engines for trace view-models, lane progress, graph lenses, graph projection, cartography, stockgrid, CLOB microstructure, and Polymarket scoring. EXPECTEDNEGATIVECASES names the planted regressions for raw-authority omission, unknown lane state, hidden descendants, self edges, observe-only cartography, extreme stock momentum, sorted-book traps, and resolved-market gating. scope_limit keeps launch, public sharing, provider/model dispatch, browser or wallet access, source-file changes, investment-related actions, semantic-truth authority, and test-completeness proof false. run, runbatch7secondary\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "what-the-engines-check",
       "title": "What the engines check",
       "level": 2,
       "excerpt": "Each engine reads a copied body and asserts a specific, checkable behaviour. The four with the clearest stakes: Polymarket CLOB microstructure. computebestprices derives the best bid as the maximum bid price and the best ask as the minimum ask price, never from the first row of each side. This guards a real failure documented in the source: the API can return bids floor-first and asks ceiling-first, which inverts a naive bids[0] / asks[0] reader. The polymarketsortedbook_trap case feeds a mis-sorted book and confirms the chosen best bid (0.42) and ask (0.53) are not the first entries, then checks the spread and that depth imbalance stays in [-1, 1]. Stockgrid momentum. dailylogmomentumbps c\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This bundle can claim fixture-bound public source-body import evidence and secondary runtime/market witness result records. It cannot authorize browser/session export, wallet authority, live market data, investment-related actions, external model access, source-file changes, launch, public sharing, private-system equivalence, semantic truth, complete UI/ranking coverage, or whole-system correctness.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The component borrows from MVVM/read-model UI architecture, graph visualization, and market-data board patterns: view models shape raw state for views, graph projections make relationships inspectable, and market rows must preserve provider identity and missingness. Useful anchors include: Microsoft's MVVM guidance, where view models encapsulate presentation state while separating UI from underlying model logic. D3 force layouts as a common graph visualization family for networks and hierarchies. The CFTC's prediction markets explainer, as a boundary reference for event-market data and consumer caution. Microcosm borrows the view-model, graph-projection, and market-diagnostic shapes, but ru\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable fixture command, run from microcosm-substrate/: Focused test result record, run from the repository root: The fixture run writes result records/firstwave/batch7secondaryruntimecapsule/batch7secondaryruntimecapsuleresult.json, result records/firstwave/batch7secondaryruntimecapsule/batch7secondaryruntimecapsulevalidation_receipt.json, and result records/firstwave/batch7secondaryruntimecapsule/batch7secondaryruntimecapsuleboard.json; the sign-off file records fixture sign-off. The exported-bundle re-run uses the run-batch7-secondary-bundle action over exportedbatch7secondaryruntimecapsule_bundle. This result record path is public fixture evidence only. It does not export brow\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.batch7_secondary_runtime_capsule.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD bundle[\"Exported bundle copied bodies + source digest anchors\"] witness[\"Vitest witness world/graph/cartography tests\"] subgraph Engines[\"Eight fixture engines\"] ui[\"Trace view-model and lane progress\"] graph[\"Graph lens and graph projection\"] carto[\"Cartography observe-only render\"] market[\"Stockgrid + Polymarket CLOB and four-lens scoring\"] end subgraph Negatives[\"Planted regressions\"] invert[\"Mis-sorted book must still find extrema\"] momentum[\"-100% change must be refused\"] selfedge[\"Self-edge must be dropped\"] resolved[\"Resolved market must gate NEWSBREAKER\"] end result records[\"metadata-only result records status, digests, anchor checks\"] ceiling[\"scope limit\"] bundle --> witness witness --> ui bundle --> graph bundle --> carto bundle --> market ui --> Negatives graph --> Negatives carto --> Negatives market --> Negatives Negatives --> result records result records --> ceiling",
       "source_hash": "sha256:6a53399a6b2a8ea167d1454ca455e04577e6147a44de3ee7ef4727ef0e4a570f",
       "html_url": "docs/paper-modules.html#paper-module-batch7-secondary-runtime-capsule-diagram-1",
       "html_anchor": "paper-module-batch7-secondary-runtime-capsule-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_secondary_runtime_capsule.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "MVVM guidance",
       "url": "https://learn.microsoft.com/en-us/dotnet/architecture/maui/mvvm",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "D3 force layouts",
       "url": "https://github.com/d3/d3-force",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "prediction markets explainer",
       "url": "https://www.cftc.gov/LearnandProtect/PredictionMarkets",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 4,
       "links": [
        {
         "id": "AX-4",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Content-addressed determinism",
         "url": "doctrine.html#dcard-ax-4"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-10",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Temporal validity and freshness contracts",
         "url": "doctrine.html#dcard-ax-10"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 1,
       "links": [
        {
         "id": "paper_module.macro_projection_import_protocol",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Source Projection Import Protocol",
         "url": "paper-modules.html#paper-module-macro-projection-import-protocol"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 2,
       "links": [
        {
         "id": "batch7_secondary_runtime_capsule",
         "kind": "organ",
         "kind_label": "component",
         "relation": "explains",
         "label": "Secondary Runtime Source Bundle",
         "url": "components.html#component-batch7_secondary_runtime_capsule"
        },
        {
         "id": "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public secondary runtime bundle",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-5",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Cache by content, not by name",
         "url": "doctrine.html#dcard-p-5"
        },
        {
         "id": "P-9",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Preserve provenance across every boundary",
         "url": "doctrine.html#dcard-p-9"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.import_projection_and_drift_control_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "source import and projection drift controls as provenance-preserving boundaries",
         "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_secondary_runtime_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 11171
    },
    {
     "id": "paper_module.microcosm_axiom_substrate",
     "title": "Microcosm Axiom System",
     "relative_href": "docs/paper-modules.html#paper-module-microcosm-axiom-substrate",
     "read_href": "docs/paper-modules.html#paper-module-microcosm-axiom-substrate",
     "context_href": "docs/rules-and-ideas.html#paper-module-microcosm-axiom-substrate",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The public Microcosm axiom system routes readers from axiom doctrine to the read-only support-cover evaluator, routing registry, standard, tests, and result records without claiming proof, launch, or source-file changes.",
     "summary": "Microcosm Axiom System is the public doctrine/routing boundary for axiom support. Its bundle binds the authored paper-module projection to the axiom support-cover mechanism and validator locus, with source refs to AXIOMS.md, PRINCIPLES.md, ANTI_PRINCIPLES.md, core/axiom_organ_routing.json, standards/std_microcosm_axiom.json, and focused tests. The validator computes support cases, anti-axiom rejection mappings, candidate pressure, and strong-gate pressure as a read-only projection.",
     "authority_ceiling": "Public doctrine/routing/standard/result record evidence and read-only evaluator result records only; axiom witness-route source authority remains core/axiom_organ_routing.json, and claim_ceiling/strongest_allowed_claim remain computed by validator.microcosm.axiom_support_cover, not hand-stamped by this bundle or generated projections. No axiom proof certification, no candidate-law promotion, no source-file changes, no provider/Lean/Lake execution, no launch/publishing-scope decision, no private-system equivalence, and no whole-system correctness.",
     "abstract": "The public Microcosm axiom system routes readers from axiom doctrine to the read-only support-cover evaluator, routing registry, standard, tests, and result records without claiming proof, launch, or source-file changes.",
     "teleology": {
      "section_id": "teleology",
      "text": "Microcosm axioms compress the public system's recurring formal commitments into checkable clauses. The goal is not philosophical decoration; the goal is a routing layer where each axiom expands into principles, components, result records, negative cases, witness surfaces, and layer debt.",
      "source": "markdown_section"
     },
     "body_markdown": "The Microcosm axiom system routes a reader from axiom doctrine to a read-only evaluator that measures how much on-disk evidence actually backs each axiom, and reports where that evidence runs out.\n\n###### Purpose\n\nA doctrine file can assert that a system holds twelve axioms. The harder question is whether anything checkable stands behind each one. This module answers a single question: for each piloted axiom, how strong is the support that already exists on disk, and exactly where does it stop short of proof?\n\nThe unusual part is what the evaluator refuses to do. The routing source hand-stamps eleven of the twelve axioms as `strong` and labels each with the anti-axiom it is meant to reject, for example AX-1 against `asserted_label_is_truth` or AX-5 against `silent_default_pass`. The evaluator reads those labels and declines to ratify them. It recomputes support from the witness components, checker surfaces, result records, and negative cases each obligation actually cites, and for every axiom it returns a `strongest_allowed_claim` that is capped below `strong`. No node ever reports `strong_certified: true`. The honesty contract is turned on the evaluator itself: because the evaluator is also a Microcosm artifact, AX-12 (`meta_artifact_exemption`) forbids it from treating its own generated output as evidence for itself.\n\nThe reason support cannot reach `strong` is made explicit rather than hidden. The routing defines `strong` as computing the property and rejecting the named anti-axiom with a negative case. Today the evaluator can confirm that a witness component's result record records a complete negative-case suite, but it will not map that endpoint coverage onto a particular obligation's anti-axiom slice. That mapping stays `mapping_verified: false` unless a source-owned row declares an exact or subsuming rejection. The gap is reported as pressure to do more witness work, never closed by relabelling.\n\n###### Teleology\n\nMicrocosm axioms compress the public system's recurring formal commitments into checkable clauses. The goal is not philosophical decoration; the goal is a routing layer where each axiom expands into principles, components, result records, negative cases, witness surfaces, and layer debt.\n\n###### Governing Standard\n\nThis paper module is governed by `executable_doctrine_grammar` and the Microcosm axiom/principle surfaces:\n- `AXIOMS.md`\n- `PRINCIPLES.md`\n- `ANTI_PRINCIPLES.md`\n- `RELEASE_DISCIPLINE.md`\n- `core/axiom_organ_routing.json`\n- `core/organ_evidence_classes.json`\n- `standards/std_microcosm_axiom.json`\n- `src/microcosm_core/validators/axiom_support_cover.py`\n\n###### Executable Support Surface\n\n`validator.microcosm.axiom_support_cover` is the read-only executable surface for the piloted axioms in `core/axiom_organ_routing.json`, currently AX-1 through AX-12. It compiles `support_cases`, `support_frontiers`, `principle_support_index`, `anti_axiom_rejection_mappings`, and `strong_gate_summary` from source routing, standard grammar, result records, witness surfaces, and evidence-class registries. Its output is a projection below source authority: it may expose pressure and bounded overlap, but it does not mutate axioms, certify `strong`, or include launch operations.\n\n###### Shape\n\nSource refs\n\nRouting rows axiom, anti-axiom, obligations, hand-stamped witness_strength `core/axiom_organ_routing.json` Diagram source\n\n```text\nflowchart TD Routing[\"Routing rows core/axiom_organ_routing.json axiom, anti-axiom, obligations, hand-stamped witness_strength\"] Bind[\"Per-obligation binding witness components, checker surfaces, result records, negative-case codes\"] Resolve{\"Does the binding resolve on disk?\"} Capped[\"Capped support blocked or layer_debt\"] Ceiling[\"Eight-component ceiling vector evidence_class, checker_scope, provenance, freshness, domain, negative_case, authority, projection\"] Reject[\"Anti-axiom rejection mapping tier + mapping_relation; mapping_verified stays false without a source-owned row\"] Meet[\"Bilattice meet support status AND rejection status\"] Claim[\"Node scope limit strongest_allowed_claim strong_certified: false\"] Pressure[\"Candidate-axiom pressure witness debt, rejection-mapping debt, sharpen the over-stamped row\"] Routing --> Bind --> Resolve Resolve -- \"no\" --> Capped --> Meet Resolve -- \"yes\" --> Ceiling --> Meet Bind --> Reject --> Meet Meet --> Claim Claim --> Pressure\n```\n\nThe shape makes the axiom system inspectable without converting pressure into proof. Doctrine refs, routing JSON, the axiom standard, validator output, and focused tests can show support/frontier structure; the bundle makes that route walkable through a mechanism and code locus, but it cannot certify a strong gate, promote candidate law, or include launch operations.\n\n###### How support is computed\n\nEach routing row names an axiom, the anti-axiom it should reject, and a list of obligations. Each obligation carries a binding: the witness components, checker surfaces, result records, and negative-case codes that are meant to back it. The evaluator first checks that every cited piece of material actually resolves. A witness component must exist in `core/organ_registry.json`, a witness surface must exist on disk or match a glob, and a negative-case code must be declared on the row. Any unresolved reference caps the obligation at `blocked_binding_unresolved` rather than letting it pass silently. An obligation the routing marks as `layer_debt` is recorded as partial witness debt that caps the axiom without weakening it.\n\nFor obligations whose bindings resolve, the evaluator computes a ceiling vector across eight named components: `evidence_class`, `checker_scope`, `provenance_class`, `freshness_state`, `domain_scope`, `negative_case_status`, `authority_scope`, and `projection_scope`. Each component is read off the bound material, not asserted. `evidence_class`, for instance, is the strongest evidence rank among the witness components and never exceeds it. `freshness_state` is pinned to its honest floor, `unknown_live_freshness_no_refresh_contract`, because a deterministic basis digest proves reproducibility but not that the inputs are current. Two components, `authority_scope` and `projection_scope`, carry an explicit non-laundering note: read-only validator output and generated projections cannot be read back as source evidence.\n\nThe axiom-level verdict is the meet of two separate judgements. One is positive support, folded from the obligations' resolution states. The other is the anti-axiom rejection mapping, tracked apart from support so that component-level negative-case coverage can never quietly stand in for a per-obligation rejection. Because rejection mapping is almost never verified, the meet caps every axiom below `strong`, and the result record records the precise blocking reason. Where an obligation is unresolved, in layer debt, or has an unverified rejection mapping, the evaluator emits candidate-axiom pressure: witness debt, rejection-mapping debt, or a sharpen signal against a row whose hand-stamped `strong` it cannot certify. The forbidden move is always the same, recorded on the pressure itself: do not lower the axiom bar to make coverage look green.\n\nSupport for principles is derived, not measured directly. The evaluator parses each principle's `Obligation grounding:` line in `PRINCIPLES.md` and inherits support from the grounding obligations, so a principle is never stronger than the obligations it rests on. As a separate guard it flags any binding that tries to cite a principle as a witness, since a principle leaning on an axiom cannot also serve as that axiom's evidence.\n\n###### Anti-Axiom Rejection Mapping\n\n`std_microcosm_axiom.json::axiom_payload_contract.anti_axiom_rejection_contract` separates positive support from rejection of a named anti-axiom. A first-wave component result record with complete negative-case coverage is admissible evidence material, not a per-obligation rejection by itself. The evaluator therefore maps result record-observed negative families to each obligation slice with a `mapping_relation` such as `unmapped`, `illustrative_only`, or `partial_overlap`, while keeping `mapping_verified: false` unless a source-owned mapping row declares exact or subsuming rejection.\n\nThe current AX-8 mapping is intentionally non-uniform: O1 remains `unmapped` because endpoint/component result record coverage does not establish general source->transform->sink propagation; O2 is only `partial_overlap` against sink-policy evidence; O3 is only `illustrative_only` until endpoint-label assertion rejection is declared against that obligation. This is the no-laundering floor: `organ_receipt_coverage_present` can never be promoted directly into `exact_obligation_rejection`.\n\nThose AX-8 relations live as source-owned, non-certifying rows in `core/axiom_organ_routing.json::rows[AX-8].anti_axiom_rejection_mappings[]`. The evaluator consumes those rows before any legacy inferred fallback and still recomputes result record material from disk. The rows close hidden-code-schema drift; they do not close rejection, remove layer debt, or upgrade any obligation to `strong`.\n\n###### Reader Evidence Routing\n- A doctrine reader starts with `AXIOMS.md`, `PRINCIPLES.md`, `ANTI_PRINCIPLES.md`, and `core/axiom_organ_routing.json`. The useful question is which source rows claim support, frontier pressure, and anti-axiom mapping status, not whether this page proves the axioms.\n- A validator reader runs `microcosm_core.validators.axiom_support_cover` and opens `tests/test_axiom_organ_routing.py` plus `tests/test_axiom_support_cover.py`. The useful question is whether support cases, support frontiers, negative-case evidence, and AX-8 rejection mapping readback are computed from public source.\n- A launch-boundary reader starts with the Scope limit and scope boundary text before reading generated docs or site cards. The useful question is whether candidate law, Lean proof, strong-gate certification, launch-scope decision, and aggregate lattice coverage stay outside this Markdown.\n\nGenerated projections may summarize axiom evidence only by source refs, mapping statuses, booleans, summaries, and result record paths.\n\n###### Proof-Consumer Readback\n\nThis module's proof-consumer value is a narrow evidence-accounting readback: named validators and tests consume public source refs, fixture-visible routing rows, counts, verdict fields, and scope boundaries so a reader can see where axiom support is computed and where it is capped. These consumers do not expand the scope limit, certify `strong`, promote candidate law, prove axioms in Lean, include launch operations, or change source records.\n- `validator.microcosm.axiom_support_cover` consumes `core/axiom_organ_routing.json`, `core/organ_evidence_classes.json`, `core/organ_registry.json`, and `standards/std_microcosm_axiom.json`, then emits `support_cases`, `support_frontiers`, `anti_axiom_rejection_mappings`, `strong_gate_summary`, `truth_calculus_summary`, `principle_support_index`, and `candidate_axiom_pressure`. Its own `authority_posture` remains `read_only_evaluator_projection_not_source_of_record`.\n- `tests/test_axiom_organ_routing.py` consumes the routing registry plus `AXIOMS.md`, `PRINCIPLES.md`, `ANTI_PRINCIPLES.md`, `core/organ_registry.json`, and public source text to check that routed axioms, principles, anti-principles, witness refs, negative-case codes, and source-owned anti-axiom rejection mappings resolve without laundering component result record coverage into exact obligation rejection.\n- `tests/test_axiom_support_cover.py` consumes the evaluator output and checks the proof-consumer floor: AX-1's hand-stamped `strong` label is not echoed, AX-8 stays capped by layer debt, principles inherit bounded support without becoming witnesses, candidate pressure routes to sharpening or witness debt, and rejection-mapping debt routes to result record-level per-obligation evidence.\n- `src/microcosm_core/doctrine_lattice.py::build_axiom_instance_from_routing_row` consumes routing rows into public axiom JSON instances with a `microcosm_axiom_substrate_reciprocity_v1` contract. That readback names how law constrains system and how system can refine support-frontier evidence, while explicitly keeping witness components and negative cases as support-calculation inputs rather than support claims.\n- `tests/test_doctrine_lattice_runtime.py` consumes generated axiom instances only to verify that reciprocity contract and routing-derived fields survive projection. It does not treat generated graph, health, Markdown, or Atlas output as source evidence.\n- `tests/test_microcosm_paper_module_coverage_contract.py` consumes this Markdown as a bundle-backed reader lane by requiring the source bundle, axiom-support validator locus, generated projection boundary, and scope limit to stay in sync with generated paper-module coverage.\n\nThe readback condition is intentionally modest: if those consumers still derive bounded support, negative-case and rejection-mapping pressure, source-ref resolution, and scope limits from public source, this page remains useful reader evidence. If a consumer starts treating generated projection output as source evidence, or treats coverage pressure as formal-result correctness, the correct repair is in the source owner or validator lane, not in stronger prose here.\n\n###### Prior Art Grounding\n\nThe axiom system draws from two older patterns: formal assumptions should be inspectable, and machine-readable schemas should make support claims testable. Lean's proof environment gives the immediate formal-methods analogue through its axiom-audit practice: a theorem can be checked, then separately inspected for assumptions through commands such as `#print axioms`. Microcosm adapts that spirit to doctrine by making each axiom expand into witness surfaces, negative cases, routing rows, and support-frontier status instead of treating the axiom prose as self-certifying.\n\nThe JSON-controlled side of the module is grounded in [JSON Schema](https://json-schema.org/), which frames schemas as a way to define validation rules, document shared structure, and improve interoperability. The provenance side is adjacent to [W3C PROV](https://www.w3.org/TR/prov-overview/): support rows, witness refs, and anti-axiom mappings are evidence links with bounded meaning, bounded evidence of whole-system completeness.\n\n###### Validation Result record Path\n\nReader-verifiable evaluator command, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src ../repo-python \\\n  -m microcosm_core.validators.axiom_support_cover \\\n  --root . \\\n  --out /tmp/microcosm-axiom-support-cover-vrp.json\n```\n\nFocused test result record, run from the repository root:\n\nThe evaluator command writes a read-only support-cover result record that reports support cases, support frontiers, anti-axiom rejection mappings, principle support inheritance, and strong-gate pressure without mutating law. The focused tests verify routing-schema parity, witness refs, negative-case evidence, AX-8 rejection mapping readback, and the rule that result record coverage is not laundered into exact obligation rejection.\n\nThis result record path is reader-verifiable evidence only. It does not establish axioms in Lean, certify a strong gate, promote candidate law, include launch operations, or change source records.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module proves only that the axiom-support boundary is inspectable through public doctrine refs, routing rows, evidence-class vocabulary, validator loci, support-frontier result records, and anti-axiom mapping statuses. A diagram view and navigation-atlas card for this module are not yet generated because the module has not been admitted through the standard subject-resolution path; it does not create bundle authority, promote candidate law, prove axioms in Lean, certify the support-cover strong gate, close rejection obligations, authorize public sharing or launch, change source records, or stand alone as a complete coverage claim.\n\n###### Scope limit\n\nThis module is a reader instrument for a staged paper-module boundary. It does not generate diagram views or navigation-atlas cards, create or amend `core/paper_module_capsules.json`, certify the support-cover strong gate, promote candidate law, prove axioms in Lean, authorize public sharing or launch, change source records, or stand alone as a complete coverage claim. Those effects require source-owner rows, builder regeneration, and their own validation result records.\n\n###### Scope boundary\n\nThis module does not establish the axioms in Lean, does not claim whole-system completeness, does not claim all paper modules were semantically exhausted by the first write, and does not grant launch-scope decision. It is a routing and derivation surface whose claims are bounded by the witness strengths recorded in `core/axiom_organ_routing.json`.\n\nSource and projection details\n\n###### Source Authority Re-entry Guard\n\nThe closure sequence for this module is source-first:\n1. the mechanism registry admits `mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary` as a read-only validator mechanism;\n2. the paper-module bundle names that mechanism as its resolving subject, names the resolved validator `code_loci`, and retains existing axiom/principle/concept refs plus the same anti-scope limit;\n3. readiness evidence must prove `required_subject_gap_ids` no longer includes this module and that Mermaid moved to `available_from_capsule_edges` because the source row exists.\n\nThis Markdown remains a reader route over axiom support evidence, source-linked only for claims beyond the bundle edge.",
     "body_markdown_source": "rendered_public_body_html",
     "body_markdown_byte_count": 17727,
     "body_html_omitted": true,
     "sections": [
      {
       "section_id": "purpose",
       "title": "Purpose",
       "level": 2,
       "excerpt": "A doctrine file can assert that a system holds twelve axioms. The harder question is whether anything checkable stands behind each one. This module answers a single question: for each piloted axiom, how strong is the support that already exists on disk, and exactly where does it stop short of proof? The unusual part is what the evaluator refuses to do. The routing source hand-stamps eleven of the twelve axioms as strong and labels each with the anti-axiom it is meant to reject, for example AX-1 against assertedlabelis_truth or AX-5 against silentdefaultpass. The evaluator reads those labels and declines to ratify them. It recomputes support from the witness components, checker surfaces, res\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "teleology",
       "title": "Teleology",
       "level": 2,
       "excerpt": "Microcosm axioms compress the public system's recurring formal commitments into checkable clauses. The goal is not philosophical decoration; the goal is a routing layer where each axiom expands into principles, components, result records, negative cases, witness surfaces, and layer debt.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "governing-standard",
       "title": "Governing Standard",
       "level": 2,
       "excerpt": "This paper module is governed by executabledoctrinegrammar and the Microcosm axiom/principle surfaces: AXIOMS.md PRINCIPLES.md ANTI_PRINCIPLES.md RELEASE_DISCIPLINE.md core/axiomorganrouting.json core/organevidenceclasses.json standards/stdmicrocosmaxiom.json src/microcosmcore/validators/axiomsupport_cover.py",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "executable-support-surface",
       "title": "Executable Support Surface",
       "level": 2,
       "excerpt": "validator.microcosm.axiomsupportcover is the read-only executable surface for the piloted axioms in core/axiomorganrouting.json, currently AX-1 through AX-12. It compiles supportcases, supportfrontiers, principlesupportindex, antiaxiomrejectionmappings, and stronggate_summary from source routing, standard grammar, result records, witness surfaces, and evidence-class registries. Its output is a projection below source authority: it may expose pressure and bounded overlap, but it does not mutate axioms, certify strong, or authorize launch.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "shape",
       "title": "Shape",
       "level": 2,
       "excerpt": "The shape makes the axiom system inspectable without converting pressure into proof. Doctrine refs, routing JSON, the axiom standard, validator output, and focused tests can show support/frontier structure; the bundle makes that route walkable through a mechanism and code locus, but it cannot certify a strong gate, promote candidate law, or include launch operations.",
       "block_kinds": [
        "diagram",
        "paragraph"
       ]
      },
      {
       "section_id": "how-support-is-computed",
       "title": "How support is computed",
       "level": 2,
       "excerpt": "Each routing row names an axiom, the anti-axiom it should reject, and a list of obligations. Each obligation carries a binding: the witness components, checker surfaces, result records, and negative-case codes that are meant to back it. The evaluator first checks that every cited piece of material actually resolves. A witness component must exist in core/organ_registry.json, a witness surface must exist on disk or match a glob, and a negative-case code must be declared on the row. Any unresolved reference caps the obligation at blockedbindingunresolved rather than letting it pass silently. An obligation the routing marks as layer_debt is recorded as partial witness debt that caps the axiom\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "anti-axiom-rejection-mapping",
       "title": "Anti-Axiom Rejection Mapping",
       "level": 2,
       "excerpt": "stdmicrocosmaxiom.json::axiompayloadcontract.antiaxiomrejection_contract separates positive support from rejection of a named anti-axiom. A first-wave component result record with complete negative-case coverage is admissible evidence material, not a per-obligation rejection by itself. The evaluator therefore maps result record-observed negative families to each obligation slice with a mappingrelation such as unmapped, illustrativeonly, or partialoverlap, while keeping mappingverified: false unless a source-owned mapping row declares exact or subsuming rejection. The current AX-8 mapping is intentionally non-uniform: O1 remains unmapped because endpoint/component result record coverage does\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "reader-evidence-routing",
       "title": "Reader Evidence Routing",
       "level": 2,
       "excerpt": "A doctrine reader starts with AXIOMS.md, PRINCIPLES.md, ANTIPRINCIPLES.md, and core/axiomorgan_routing.json. The useful question is which source rows claim support, frontier pressure, and anti-axiom mapping status, not whether this page proves the axioms. A validator reader runs microcosmcore.validators.axiomsupport_cover and opens tests/testaxiomorgan_routing.py plus tests/testaxiomsupport_cover.py. The useful question is whether support cases, support frontiers, negative-case evidence, and AX-8 rejection mapping readback are computed from public source. A launch-boundary reader starts with the Scope limit and scope boundary text before reading generated docs or site cards. The useful ques\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "proof-consumer-readback",
       "title": "Proof-Consumer Readback",
       "level": 2,
       "excerpt": "This module's proof-consumer value is a narrow evidence-accounting readback: named validators and tests consume public source refs, fixture-visible routing rows, counts, verdict fields, and scope boundaries so a reader can see where axiom support is computed and where it is capped. These consumers do not expand the scope limit, certify strong, promote candidate law, prove axioms in Lean, include launch operations, or change source records. validator.microcosm.axiomsupportcover consumes core/axiomorganrouting.json, core/organevidenceclasses.json, core/organregistry.json, and standards/stdmicrocosm_axiom.json, then emits supportcases, supportfrontiers, antiaxiomrejectionmappings, stronggate_s\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "source-authority-re-entry-guard",
       "title": "Source Authority Re-entry Guard",
       "level": 2,
       "excerpt": "The closure sequence for this module is source-first: the mechanism registry admits mechanism.microcosmaxiomsubstrate.validatespublicaxiomsupportboundary as a read-only validator mechanism; the paper-module bundle names that mechanism as its resolving subject, names the resolved validator code_loci, and retains existing axiom/principle/concept refs plus the same anti-scope limit; aggregate doctrine-lattice surfaces from source authority; readiness evidence must prove requiredsubjectgap_ids no longer includes this module and that Mermaid moved to availablefromcapsule_edges because the source row exists. This Markdown remains a reader route over axiom support evidence, source-linked only for\u2026",
       "block_kinds": [
        "list",
        "paragraph"
       ]
      },
      {
       "section_id": "claim-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module proves only that the axiom-support boundary is inspectable through public doctrine refs, routing rows, evidence-class vocabulary, validator loci, support-frontier result records, and anti-axiom mapping statuses. A diagram view and navigation-atlas card for this module are not yet generated because the module has not been admitted through the standard subject-resolution path; it does not create bundle authority, promote candidate law, prove axioms in Lean, certify the support-cover strong gate, close rejection obligations, authorize public sharing or launch, change source records, or stand alone as a complete coverage claim.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "authority-ceiling",
       "title": "Scope limit",
       "level": 2,
       "excerpt": "This module is a reader instrument for a staged paper-module boundary. It does not generate diagram views or navigation-atlas cards, create or amend core/papermodulecapsules.json, certify the support-cover strong gate, promote candidate law, prove axioms in Lean, authorize public sharing or launch, change source records, or stand alone as a complete coverage claim. Those effects require source-owner rows, builder regeneration, and their own validation result records.",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "validation-receipt-path",
       "title": "Validation Result record Path",
       "level": 2,
       "excerpt": "Reader-verifiable evaluator command, run from the microcosm-substrate/ public root: Focused test result record, run from the repository root: The evaluator command writes a read-only support-cover result record that reports support cases, support frontiers, anti-axiom rejection mappings, principle support inheritance, and strong-gate pressure without mutating law. The focused tests verify routing-schema parity, witness refs, negative-case evidence, AX-8 rejection mapping readback, and the rule that result record coverage is not laundered into exact obligation rejection. This result record path is reader-verifiable evidence only. It does not establish axioms in Lean, certify a strong gate, p\u2026",
       "block_kinds": [
        "code",
        "paragraph"
       ]
      },
      {
       "section_id": "prior-art-grounding",
       "title": "Prior Art Grounding",
       "level": 2,
       "excerpt": "The axiom system draws from two older patterns: formal assumptions should be inspectable, and machine-readable schemas should make support claims testable. Lean's proof environment gives the immediate formal-methods analogue through its axiom-audit practice: a theorem can be checked, then separately inspected for assumptions through commands such as #print axioms. Microcosm adapts that spirit to doctrine by making each axiom expand into witness surfaces, negative cases, routing rows, and support-frontier status instead of treating the axiom prose as self-certifying. The JSON-controlled side of the module is grounded in JSON Schema, which frames schemas as a way to define validation rules, d\u2026",
       "block_kinds": [
        "paragraph"
       ]
      },
      {
       "section_id": "scope-boundary",
       "title": "Scope boundary",
       "level": 2,
       "excerpt": "This module does not establish the axioms in Lean, does not claim whole-system completeness, does not claim all paper modules were semantically exhausted by the first write, and does not grant launch-scope decision. It is a routing and derivation surface whose claims are bounded by the witness strengths recorded in core/axiomorganrouting.json.",
       "block_kinds": [
        "paragraph"
       ]
      }
     ],
     "diagrams": [
      {
       "asset_id": "paper_module.microcosm_axiom_substrate.diagram.1",
       "kind": "mermaid",
       "source_format": "mermaid",
       "source": "flowchart TD Routing[\"Routing rows core/axiom_organ_routing.json axiom, anti-axiom, obligations, hand-stamped witness_strength\"] Bind[\"Per-obligation binding witness components, checker surfaces, result records, negative-case codes\"] Resolve{\"Does the binding resolve on disk?\"} Capped[\"Capped support blocked or layer_debt\"] Ceiling[\"Eight-component ceiling vector evidence_class, checker_scope, provenance, freshness, domain, negative_case, authority, projection\"] Reject[\"Anti-axiom rejection mapping tier + mapping_relation; mapping_verified stays false without a source-owned row\"] Meet[\"Bilattice meet support status AND rejection status\"] Claim[\"Node scope limit strongest_allowed_claim strong_certified: false\"] Pressure[\"Candidate-axiom pressure witness debt, rejection-mapping debt, sharpen the over-stamped row\"] Routing --> Bind --> Resolve Resolve -- \"no\" --> Capped --> Meet Resolve -- \"yes\" --> Ceiling --> Meet Bind --> Reject --> Meet Meet --> Claim Claim --> Pressure",
       "source_hash": "sha256:6426b3b4b6d91eef506eab2d1741987063172da7aa5642c1a9550a8805b181a0",
       "html_url": "docs/paper-modules.html#paper-module-microcosm-axiom-substrate-diagram-1",
       "html_anchor": "paper-module-microcosm-axiom-substrate-diagram-1",
       "render_status": "build_time_svg_available",
       "rendered_body_omitted": true
      }
     ],
     "diagram_count": 1,
     "references": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/microcosm_axiom_substrate.md",
       "kind": "source_link"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json",
       "kind": "source_link"
      },
      {
       "label": "JSON Schema",
       "url": "https://json-schema.org/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      },
      {
       "label": "W3C PROV",
       "url": "https://www.w3.org/TR/prov-overview/",
       "kind": "external_reference",
       "section_id": "prior-art-grounding"
      }
     ],
     "grouped_relation_feeds": [
      {
       "relation": "abides by",
       "count": 6,
       "links": [
        {
         "id": "AX-1",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Derivation before assertion",
         "url": "doctrine.html#dcard-ax-1"
        },
        {
         "id": "AX-5",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Fail-closed monotone lattice",
         "url": "doctrine.html#dcard-ax-5"
        },
        {
         "id": "AX-7",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Typed partiality and refusal",
         "url": "doctrine.html#dcard-ax-7"
        },
        {
         "id": "AX-8",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Provenance propagation and non-interference",
         "url": "doctrine.html#dcard-ax-8"
        },
        {
         "id": "AX-11",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Executable grammar before doctrine authority",
         "url": "doctrine.html#dcard-ax-11"
        },
        {
         "id": "AX-12",
         "kind": "axiom",
         "kind_label": "axiom",
         "relation": "abides by",
         "label": "Reflexive accountability / no privileged meta-layer",
         "url": "doctrine.html#dcard-ax-12"
        }
       ]
      },
      {
       "relation": "depends on",
       "count": 3,
       "links": [
        {
         "id": "paper_module.executable_doctrine_grammar",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Executable Doctrine Grammar",
         "url": "paper-modules.html#paper-module-executable-doctrine-grammar"
        },
        {
         "id": "paper_module.standards_meta_diagnostics",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Standards Meta Diagnostics",
         "url": "paper-modules.html#paper-module-standards-meta-diagnostics"
        },
        {
         "id": "paper_module.doctrine_fact_claim_audit",
         "kind": "paper_module",
         "kind_label": "paper module",
         "relation": "depends on",
         "label": "Doctrine Fact Claim Audit",
         "url": "paper-modules.html#paper-module-doctrine-fact-claim-audit"
        }
       ]
      },
      {
       "relation": "explains",
       "count": 1,
       "links": [
        {
         "id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
         "kind": "mechanism",
         "kind_label": "mechanism",
         "relation": "explains",
         "label": "validates public axiom support boundary",
         "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
        }
       ]
      },
      {
       "relation": "governed by",
       "count": 5,
       "links": [
        {
         "id": "P-1",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Recompute, do not echo",
         "url": "doctrine.html#dcard-p-1"
        },
        {
         "id": "P-2",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Lower claim strength to checker strength",
         "url": "doctrine.html#dcard-p-2"
        },
        {
         "id": "P-8",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Refuse inadmissible computations with typed reasons",
         "url": "doctrine.html#dcard-p-8"
        },
        {
         "id": "P-15",
         "kind": "principle",
         "kind_label": "principle",
         "relation": "governed by",
         "label": "Keep projections below source authority",
         "url": "doctrine.html#dcard-p-15"
        },
        {
         "id": "concept.executable_doctrine_grammar_standard_bundle",
         "kind": "concept",
         "kind_label": "concept",
         "relation": "governed by",
         "label": "standard as schema contract with explicit scope limit",
         "url": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
        }
       ]
      }
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/microcosm_axiom_substrate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 19232
    }
   ],
   "doctrine_entities": [
    {
     "object_id": "principle:P-1",
     "id": "P-1",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Recompute, do not echo",
     "relative_href": "docs/doctrine.html#dcard-p-1",
     "read_href": "docs/doctrine.html#dcard-p-1",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-1",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-1.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Do not trust a fixture label, declared verdict, route status, count, or public copy line as proof.",
     "statement": "Do not trust a fixture label, declared verdict, route status, count, or public copy line as proof. Recompute the verdict from lower-level evidence and keep a negative fixture where the cheap lie fails.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-1.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-1"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Do not trust a fixture label, declared verdict, route status, count, or public copy line as proof. Recompute the verdict from lower-level evidence and keep a negative fixture where the cheap lie fails.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-1"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-1",
          "target_kind": "axiom",
          "target_label": "Derivation before assertion",
          "url": "doctrine.html#dcard-ax-1"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
          "target_kind": "mechanism",
          "target_label": "validates public benchmark integrity replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
          "target_kind": "mechanism",
          "target_label": "validates completion evidence claims",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
          "target_kind": "mechanism",
          "target_label": "validates public memory conflict replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
          "target_kind": "mechanism",
          "target_label": "validates public monitor verdict result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
          "target_kind": "mechanism",
          "target_label": "validates public route feedback",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
          "target_kind": "mechanism",
          "target_label": "validates public sabotage scheming monitor replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
          "target_kind": "mechanism",
          "target_label": "validates public sandbox policy trace",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-1.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-1.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Recomputing one verdict from evidence does not make the principle a witness for AX-1; it operationalises specific obligations and inherits no authority beyond them.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Trust a result only after re-deriving it from the underlying evidence, and keep a deliberately wrong test case that the check is required to reject.",
        "analogy": {
         "text": "A teacher re-works the exam answer from scratch instead of copying the answer key, and also keeps a wrong-answer version to confirm the marking actually catches mistakes.",
         "maps": [
          {
           "doctrine": "the evidence underneath the verdict",
           "analogy": "the exam paper itself, worked from scratch"
          },
          {
           "doctrine": "recomputing the verdict from the evidence",
           "analogy": "re-working the answer instead of copying the key"
          },
          {
           "doctrine": "the negative case the checker must reject",
           "analogy": "the planted wrong answer the marking must catch"
          }
         ],
         "boundary": "The re-marking picture shows recomputation plus a trap for false passes; it does not capture every kind of evidence a real check runs over."
        },
        "why_it_matters": "Without it, a label that says 'passed' gets repeated down the line and nobody ever re-derives whether it was true.",
        "potential_misread": "That re-checking once makes a result permanently safe. It only earns trust for that result, against that check.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-1 is AX-1 turned into a habit a builder repeats before anything is allowed to mean something. Do not trust a fixture's own verdict, a route status, a count, or a public copy line as proof; recompute it from the evidence underneath and keep a negative fixture that fails when the cheap lie is tried. The negative fixture is the load-bearing half: a check that only ever sees the happy path proves nothing, because it never had the chance to reject. This is the principle that makes \"green\" mean recomputed rather than reported.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{trust}(\\varphi) \\;\\Rightarrow\\; \\varphi = K(B) \\;\\wedge\\; K(B_{\\mathrm{neg}}) = \\mathsf{reject}",
        "reads": "Trust a verdict only when a checker recomputes it from the underlying evidence and that same checker rejects the negative fixture built to slip the cheap lie through.",
        "symbols": [
         {
          "sym": "\\mathrm{trust}(\\varphi)",
          "meaning": "a builder is willing to trust the verdict on a claim"
         },
         {
          "sym": "\\varphi",
          "meaning": "the verdict being claimed"
         },
         {
          "sym": "K(B)",
          "meaning": "the verdict a checker recomputes from the basis"
         },
         {
          "sym": "B",
          "meaning": "the lower-level evidence the checker runs over"
         },
         {
          "sym": "B_{\\mathrm{neg}}",
          "meaning": "a negative fixture built so the cheap lie should fail"
         },
         {
          "sym": "\\mathsf{reject}",
          "meaning": "the checker's refusal on that negative fixture"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The claim boundary, before a result is allowed to mean anything.",
        "requires": "Recomputation from lower-level evidence plus a negative fixture that the checker rejects.",
        "refuses": "Echoing a declared verdict, label, or count as if repetition made it true.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The benchmark-integrity replay recomputes a score from the run rather than trusting the reported number, and keeps gaming attempts as negative cases that must be caught.",
        "refs": [
         "agent_benchmark_integrity_anti_gaming_replay"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A summary repeats a component's self-reported \"passed\" into a status board without ever recomputing it or keeping a case that would fail.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "agent_sabotage_scheming_monitor_replay",
         "agent_benchmark_integrity_anti_gaming_replay"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-1"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "target_kind": "mechanism",
       "target_label": "validates public benchmark integrity replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "target_kind": "mechanism",
       "target_label": "validates completion evidence claims",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "target_kind": "mechanism",
       "target_label": "validates public memory conflict replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "target_kind": "mechanism",
       "target_label": "validates public monitor verdict result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sabotage scheming monitor replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
       "target_kind": "mechanism",
       "target_label": "validates public sandbox policy trace",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-1.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-1.json"
      }
     ],
     "visible_text_byte_count": 9353
    },
    {
     "object_id": "principle:P-2",
     "id": "P-2",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Lower claim strength to checker strength",
     "relative_href": "docs/doctrine.html#dcard-p-2",
     "read_href": "docs/doctrine.html#dcard-p-2",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-2",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-2.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "The scope limit is the strongest thing the named checker, validator, registry, or witness route actually computes.",
     "statement": "The scope limit is the strongest thing the named checker, validator, registry, or witness route actually computes. If the checker decides only a local contract, do not let prose project global authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-2.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-2"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "The scope limit is the strongest thing the named checker, validator, registry, or witness route actually computes. If the checker decides only a local contract, do not let prose project global authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-1",
           "AX-5"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-1",
          "target_kind": "axiom",
          "target_label": "Derivation before assertion",
          "url": "doctrine.html#dcard-ax-1"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-5",
          "target_kind": "axiom",
          "target_label": "Fail-closed monotone lattice",
          "url": "doctrine.html#dcard-ax-5"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
          "target_kind": "mechanism",
          "target_label": "validates public benchmark integrity replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
          "target_kind": "mechanism",
          "target_label": "validates completion evidence claims",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
          "target_kind": "mechanism",
          "target_label": "validates public memory conflict replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
          "target_kind": "mechanism",
          "target_label": "validates public monitor verdict result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
          "target_kind": "mechanism",
          "target_label": "validates public route feedback",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
          "target_kind": "mechanism",
          "target_label": "validates public sabotage scheming monitor replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-2.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-2.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Holding a claim to its checker's strength does not raise that checker, and the principle is not a witness for AX-1 or AX-5; it operationalises specific grounding obligations and inherits no support beyond the covers computed for them. The worked example illustrates the rule for a reader and never counts as support that the principle is obligation-backed or complete.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A statement can only be as strong as the exact thing the check actually settled. If a check confirms one small, local fact, the writing around it must not stretch that into a sweeping claim about the whole system.",
        "analogy": {
         "text": "A blood test that measures one thing, like iron levels, tells you about iron. It does not let you write 'this person is in perfect health' on the chart.",
         "maps": [
          {
           "doctrine": "the claim's strength is capped at what the named check decides",
           "analogy": "the iron test only supports a statement about iron"
          },
          {
           "doctrine": "prose overreaching past the check into system-wide authority",
           "analogy": "writing 'perfectly healthy' off one narrow blood test"
          }
         ],
         "boundary": "The blood-test picture shows that a result is limited to what was measured; it does not show how several separate checks are combined, where the overall ceiling drops to the weakest one. It is an illustration, not support that the rule holds everywhere."
        },
        "why_it_matters": "It stops a narrow, genuine check from being written up as a broad system-wide claim, so readers can size a claim to what was really tested.",
        "potential_misread": "That because the underlying check was real, any confident sentence built on it is also safe. The check sets a ceiling; words above that ceiling are not earned and do not prove the wider claim.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-2 is the strength half of the admissibility floor: AX-1 caps a claim at the strength of the check that accepts it, and AX-5 makes that ceiling the meet of the parts, so the strongest honest claim equals the weakest component the checker actually settles. Its bite is distinct from \"recompute, do not echo\": even a genuinely recomputed verdict overclaims if the prose around it reaches past what the checker decided, for example a validator that confirms a record's shape being read as proof of the property the record names. The cover calculus enforces this by computing each scope limit from the specific grounding obligations, never from whole-axiom labels and never by hand-stamping; support for the principle is bounded by the covers of the obligations beneath it. This is the rule that keeps a local-contract checker, a registry, or a single witness route from being narrated into a system-wide guarantee.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{strength}(\\varphi) \\sqsubseteq \\bigsqcap_{i} \\mathrm{strength}(K_{i}(B)) \\quad \\mathrm{where}\\ \\{K_{i}\\} = \\mathrm{decided}(\\varphi)",
        "reads": "A claim's strength is bounded above by the meet of the strengths of exactly the checks that actually decide it; the ceiling is the weakest deciding component, not the most impressive one.",
        "symbols": [
         {
          "sym": "\\mathrm{strength}(\\varphi)",
          "meaning": "the strength a claim is allowed to assert"
         },
         {
          "sym": "\\varphi",
          "meaning": "the claim being made"
         },
         {
          "sym": "K_{i}",
          "meaning": "a checker, validator, registry, or witness route that decides part of the claim"
         },
         {
          "sym": "B",
          "meaning": "the basis the deciding checks run over"
         },
         {
          "sym": "\\bigsqcap",
          "meaning": "meet: the weakest of the deciding components"
         },
         {
          "sym": "\\mathrm{decided}(\\varphi)",
          "meaning": "the set of checks that actually settle the claim, excluding ones it merely names"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The strength boundary, where a claim is sized to the check that accepts it.",
        "requires": "Capping a claim at the meet of what its named checker, validator, registry, or witness route actually computes, with the ceiling derived from the grounding obligations rather than asserted.",
        "refuses": "Letting a checker that decides only a local contract license prose that projects global or system-wide authority.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The formal-math readiness gate computes how far its available evidence actually reaches and reports that boundary as the claim, refusing to narrate a local check into a proof of readiness.",
        "refs": [
         "formal_math_readiness_gate"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A component validates that a result record has the expected fields, and a summary page reads that shape check as evidence the underlying property holds across the whole system.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "formal_math_readiness_gate",
         "batch12_release_claim_language_gate",
         "agent_route_observability_runtime"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-1",
        "AX-5"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "target_kind": "mechanism",
       "target_label": "validates public benchmark integrity replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "target_kind": "mechanism",
       "target_label": "validates completion evidence claims",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "target_kind": "mechanism",
       "target_label": "validates public memory conflict replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "target_kind": "mechanism",
       "target_label": "validates public monitor verdict result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sabotage scheming monitor replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-2.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-2.json"
      }
     ],
     "visible_text_byte_count": 10312
    },
    {
     "object_id": "principle:P-3",
     "id": "P-3",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Concentrate trust in small checkers",
     "relative_href": "docs/doctrine.html#dcard-p-3",
     "read_href": "docs/doctrine.html#dcard-p-3",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-3",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-3.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Prefer a small verifier, parser, harness, compiler route, registry contract, or kernel over broad narrative confidence.",
     "statement": "Prefer a small verifier, parser, harness, compiler route, registry contract, or kernel over broad narrative confidence. Producers may be large; the authority boundary should be small enough to inspect and rerun.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-3.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-3"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Prefer a small verifier, parser, harness, compiler route, registry contract, or kernel over broad narrative confidence. Producers may be large; the authority boundary should be small enough to inspect and rerun.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-2"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-2",
          "target_kind": "axiom",
          "target_label": "Kernelized verification",
          "url": "doctrine.html#dcard-ax-2"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
          "target_kind": "mechanism",
          "target_label": "validates public bounded autonomy campaign packet",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
          "target_kind": "mechanism",
          "target_label": "validates synthetic bridge continuity",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
          "target_kind": "mechanism",
          "target_label": "validates public certificate kernel execution",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
          "target_kind": "mechanism",
          "target_label": "validates public operator contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
          "target_kind": "mechanism",
          "target_label": "validates public first run route map",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
          "target_kind": "mechanism",
          "target_label": "validates public evidence cell anchors",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-3.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-3.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Concentrating trust in a small checker does not make the principle a witness for AX-2, and a small checker is not automatically a correct or complete one. It operationalises specific obligations and inherits no authority beyond them; admission, support, and this reader illustration stay independent.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Put your trust in one small, simple step that re-does the work and decides, while letting the big complicated thing that produced the answer stay outside that decision. The thing being judged should not get to be its own judge.",
        "analogy": {
         "text": "At a self-checkout, the small weighing plate re-weighs each item to confirm what was scanned. The shopper, who knows what is in the bag, is never the one who decides the bag is correct.",
         "maps": [
          {
           "doctrine": "the small checker that rereads and decides",
           "analogy": "the weighing plate that re-checks each item"
          },
          {
           "doctrine": "the large producer kept outside the trusted decision",
           "analogy": "the shopper, who is not allowed to confirm their own bag"
          }
         ],
         "boundary": "The weighing-plate picture shows where the deciding power sits and that the producer is kept out; it does not show that a small checker is automatically a correct or complete one. A simple checker can still be wrong, and this is only an illustration."
        },
        "why_it_matters": "Keeping the deciding part small means the part you actually have to audit and re-run stays small, even as the systems producing answers grow large and hard to inspect.",
        "potential_misread": "That a confident, capable producer can be trusted to vouch for itself. Once the thing being judged also decides, there is no real check left, only restated confidence.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-3 is AX-2 turned into a building habit: the thing you trust should be small enough to read and rerun, while the thing that did the work may be as large and opaque as it likes. A big model, search, or pipeline emits a certificate; a small verifier, parser, harness, compiler route, or registry contract rereads that certificate and decides, and only the checker sits inside the trusted boundary. This connects directly to the claim and evidence model: a claim's strength is capped at the strength of the check that admits it, so shrinking the checker shrinks what you have to believe to believe the verdict. The load-bearing move is keeping the producer outside the boundary; once the thing being judged also gets to decide, the check has collapsed into the same narrative confidence it was meant to replace.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{trust}(\\varphi) \\;\\Rightarrow\\; \\exists\\, K, c.\\ K(c) = \\mathsf{accept} \\;\\wedge\\; \\mathrm{tcb}(\\varphi) = \\{K\\} \\;\\wedge\\; \\mathrm{producer} \\notin \\mathrm{tcb}(\\varphi)",
        "reads": "Trust a verdict only when a small checker rereads a certificate and accepts, the trusted base consists of that checker alone, and the producer that emitted the certificate sits outside that base.",
        "symbols": [
         {
          "sym": "\\mathrm{trust}(\\varphi)",
          "meaning": "a builder is willing to trust the verdict on a claim"
         },
         {
          "sym": "\\varphi",
          "meaning": "the claim being trusted"
         },
         {
          "sym": "K",
          "meaning": "the small checker that decides"
         },
         {
          "sym": "c",
          "meaning": "the certificate the producer emits"
         },
         {
          "sym": "\\mathrm{tcb}(\\varphi)",
          "meaning": "the trusted base the claim rests on: the set of components you must believe"
         },
         {
          "sym": "\\mathrm{producer}",
          "meaning": "the large component that emitted the certificate, kept outside the trusted base"
         },
         {
          "sym": "\\notin",
          "meaning": "is kept outside"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "Where trust is concentrated, between the large producer and the small thing that decides.",
        "requires": "A small checker that rereads a certificate and accepts, with the producer kept outside the trusted boundary.",
        "refuses": "Trusting a large producer's own confidence in place of a small, inspectable, rerunnable check.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The certificate kernel lab keeps producers separate from the checker: a producer emits certificate material and a small kernel rereads and decides, so the authority lives in the part you can inspect and rerun rather than in the producer.",
        "refs": [
         "certificate_kernel_execution_lab"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A large model is trusted because it sounds sure of its answer, with no small separate checker rereading anything, so the producer is also the judge.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "certificate_kernel_execution_lab",
         "formal_math_lean_proof_witness",
         "verifier_lab_kernel"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-2"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-2",
       "target_kind": "axiom",
       "target_label": "Kernelized verification",
       "url": "doctrine.html#dcard-ax-2"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
       "target_kind": "mechanism",
       "target_label": "validates public bounded autonomy campaign packet",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
       "target_kind": "mechanism",
       "target_label": "validates public certificate kernel execution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "target_kind": "mechanism",
       "target_label": "validates public operator contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
       "target_kind": "mechanism",
       "target_label": "validates public evidence cell anchors",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-3.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-3.json"
      }
     ],
     "visible_text_byte_count": 10219
    },
    {
     "object_id": "principle:P-4",
     "id": "P-4",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Possession is not permission",
     "relative_href": "docs/doctrine.html#dcard-p-4",
     "read_href": "docs/doctrine.html#dcard-p-4",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-4",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-4.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Authority comes from dereferenced proof, policy, result record, rollback evidence, and current world state.",
     "statement": "Authority comes from dereferenced proof, policy, result record, rollback evidence, and current world state. account secrets, role names, admin phrasing, or \"trusted session\" language cannot authorize mutation by themselves.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-4.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-4"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Authority comes from dereferenced proof, policy, result record, rollback evidence, and current world state. account secrets, role names, admin phrasing, or \"trusted session\" language cannot authorize mutation by themselves.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-3"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-3",
          "target_kind": "axiom",
          "target_label": "Authority by derivation, not possession",
          "url": "doctrine.html#dcard-ax-3"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
          "target_kind": "mechanism",
          "target_label": "validates public mcp tool authority replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
          "target_kind": "mechanism",
          "target_label": "validates synthetic governed mutation authorization",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
          "target_kind": "mechanism",
          "target_label": "validates public tool server pressure inventory",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory"
         },
         {
          "relation": "governs",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "governs",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "governs",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "failure guarded by",
          "target_id": "AP-2",
          "target_kind": "anti-principle",
          "target_label": "Producer trust",
          "url": "doctrine.html#dcard-ap-2"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-4.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-4.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Deriving authorization in these components does not make P-4 a witness for AX-3 or raise that axiom's support ceiling; it operationalises the specific obligations that authorization is derived, that standing account secrets are insufficient, and that tool effects require declared scope, and inherits no authority beyond them. The worked example is reader illustration and computes no support.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Holding a account secret, a role name, or being inside a 'trusted' session does not by itself give permission to make a change. Permission is worked out fresh for each specific action, from the rules and the current situation.",
        "analogy": {
         "text": "Knowing someone's bank card number does not let money move. For each payment, the bank checks this card, this amount, and the live account state before it lets the transfer go through.",
         "maps": [
          {
           "doctrine": "the standing account secret or role name that is not authority on its own",
           "analogy": "merely having the card number"
          },
          {
           "doctrine": "authority derived per action from policy and current world state",
           "analogy": "the bank deciding each payment against this account, right now"
          }
         ],
         "boundary": "The bank-transfer picture shows that holding a account secret is not the same as being cleared to act; it does not capture everything weighed at decision time, such as the specific permissions, the rules, and the side-effect records. It is an illustration only."
        },
        "why_it_matters": "It closes the gap where a component that holds broad standing power is talked into using it for someone else, since each action still has to earn its own permission.",
        "potential_misread": "That a valid account secret is enough to act. The account secret is one input; the actual change still has to be cleared for that exact action against the current state.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-4 is the authority leg of the claim model, the way P-1 is the evidence leg: before an effect lands, recompute whether it is authorized rather than reading authority off who is asking. Authorization for a subject and an effect comes from dereferenced proof references, the governing policy, rollback or result-record evidence, and current world state; standing account secrets, an admin role name, or trusted-session phrasing are ambient identity, which carries no authority by itself. This is the confused-deputy failure stated as a rule: a component holding a powerful capability must still derive permission for each effect, and tool authority is bounded by declared identity, scope, approval, and side-effect records, not by the tool merely being available. It bites because possession reads as permission almost everywhere, so a pipeline that trusts a present account secret passes its own path while granting reach nothing actually authorized.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{auth}(u, e) = F\\big(\\mathrm{deref}(\\mathrm{tokens}), \\mathrm{policy}, \\mathrm{proofs}, \\mathrm{world}\\big); \\quad \\mathrm{identity}(u) \\;\\wedge\\; \\mathrm{deref}(\\mathrm{tokens}) = \\emptyset \\;\\Rightarrow\\; \\mathrm{auth}(u, e) \\neq \\mathsf{grant}",
        "reads": "Authorization for a subject and an effect is the output of the derivation over the dereferenced tokens, governing policy, proof references, and world state; ambient identity whose tokens dereference to nothing grants nothing. The account secret is an input to the derivation, never a substitute for it.",
        "symbols": [
         {
          "sym": "\\mathrm{auth}(u, e)",
          "meaning": "a subject is authorized for an effect"
         },
         {
          "sym": "u",
          "meaning": "a subject requesting an effect"
         },
         {
          "sym": "e",
          "meaning": "the effect or mutation it wants to land"
         },
         {
          "sym": "F",
          "meaning": "the function deriving authorization from the dereferenced tokens, policy, proofs, and world state"
         },
         {
          "sym": "\\mathrm{deref}(\\mathrm{tokens})",
          "meaning": "the capabilities the presented tokens actually dereference to"
         },
         {
          "sym": "\\mathrm{policy}",
          "meaning": "the governing policy"
         },
         {
          "sym": "\\mathrm{proofs}",
          "meaning": "the proof references and rollback or result-record evidence"
         },
         {
          "sym": "\\mathrm{world}",
          "meaning": "current world state"
         },
         {
          "sym": "\\mathsf{grant}",
          "meaning": "the authorizer's grant of the effect"
         },
         {
          "sym": "\\mathrm{identity}(u)",
          "meaning": "the subject's ambient account secret or role name, insufficient on its own"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The authority boundary, before any effect or mutation is allowed to land.",
        "requires": "Deriving authorization from dereferenced proof, policy, and world state, with tool effects bounded by declared identity, scope, approval, and side-effect records.",
        "refuses": "Treating a standing account secret, role name, admin phrasing, trusted session, or tool availability as authority on its own.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The tool-authority replay binds each tool effect to a declared scope and approval and rejects an overbroad scope or an unapproved side effect, so reach is derived from declared authority rather than from the tool being callable.",
        "refs": [
         "mcp_tool_authority_replay",
         "proof_derived_governed_mutation_authorization"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A mutation is allowed because the caller holds a valid admin account secret, with nothing dereferencing that account secret to the specific effect or checking it against policy and current state.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "proof_derived_governed_mutation_authorization",
         "mcp_tool_authority_replay",
         "tool_server_pressure_inventory"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-3"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mcp tool authority replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
       "target_kind": "mechanism",
       "target_label": "validates synthetic governed mutation authorization",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
       "target_kind": "mechanism",
       "target_label": "validates public tool server pressure inventory",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory"
      },
      {
       "relation": "governs",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-2",
       "target_kind": "anti-principle",
       "target_label": "Producer trust",
       "url": "doctrine.html#dcard-ap-2"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-4.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-4.json"
      }
     ],
     "visible_text_byte_count": 11028
    },
    {
     "object_id": "principle:P-5",
     "id": "P-5",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Cache by content, not by name",
     "relative_href": "docs/doctrine.html#dcard-p-5",
     "read_href": "docs/doctrine.html#dcard-p-5",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-5",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-5.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "A reusable result record, command result, source import, or work-landing attempt must carry its content basis.",
     "statement": "A reusable result record, command result, source import, or work-landing attempt must carry its content basis. Drift in source bytes, dirty scoped files, parent SHA, or fixture input invalidates reuse.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-5.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-5"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "A reusable result record, command result, source import, or work-landing attempt must carry its content basis. Drift in source bytes, dirty scoped files, parent SHA, or fixture input invalidates reuse.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-4"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-4",
          "target_kind": "axiom",
          "target_label": "Content-addressed determinism",
          "url": "doctrine.html#dcard-ax-4"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public cold eval honesty bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public governance compilers bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public live source drift bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public saturation engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public market dashboard read model bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public prediction market board bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public proof authority runtime bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-5.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-5.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Carrying a content basis on the reuse paths shown here does not establish reuse is sound everywhere; one freshness-basis mismatch remains a declared open gap, and this card and its example are reader illustration that compute no support for the principle or its grounding axiom.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A saved result can be reused only if it is tagged with the exact inputs it was made from, and those inputs still match. If the inputs have changed, you must redo the work; a matching name or label alone is never enough.",
        "analogy": {
         "text": "A warranty repair is only valid for the exact unit whose serial number is on the claim. If a part with a different serial was swapped in, a matching model name on the box does not make the old warranty apply.",
         "maps": [
          {
           "doctrine": "reuse only when the stored content tag matches the current inputs",
           "analogy": "the warranty holds only when the serial number still matches the unit"
          },
          {
           "doctrine": "a name or label match alone licensing reuse",
           "analogy": "trusting the model name on the box instead of the serial"
          }
         ],
         "boundary": "The serial-number picture shows that identity must match the exact item, not just the label; it does not cover every kind of input drift the rule watches, such as changed source bytes, edited files, or a moved parent. It only illustrates the rule."
        },
        "why_it_matters": "It stops a stale or tampered result being served as fresh just because its name or path still looks familiar after the content underneath has moved.",
        "potential_misread": "That a matching name or path means the cached answer is still good. Only a match on the actual content the result was computed from licenses reuse; otherwise the work has to be redone.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-5 turns content-addressed determinism into a habit a builder repeats before reusing any prior work. A stored result record, a coalesced command run, an imported source copy, or a resumed work-landing attempt may be reused only if it carries the digest of the exact content it was derived from; equal content basis permits reuse, and drift in the source bytes, the dirty scoped files, the parent commit, or the fixture input forces a recompute or a refusal. The bite is that a name, a path, or a label is a cheap stand-in for a basis: cache by name and you serve a stale answer the moment the content moves underneath the name. This connects straight to the claim and evidence model, because a reused verdict inherits its scope limit from the basis it was actually checked over, and reuse across drift silently widens that scope to content nothing ever verified.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{reuse}(a, B') \\;\\Rightarrow\\; \\mathrm{id}(a) = H(B') \\;\\wedge\\; \\neg\\,\\mathrm{missing}(B') \\quad \\mathrm{else}\\ \\mathsf{recompute}",
        "reads": "A prior result may be reused for an incoming basis only when the result's stored content id equals the digest of that basis and the basis actually resolves; in every other case, recompute.",
        "symbols": [
         {
          "sym": "\\mathrm{reuse}(a, B')",
          "meaning": "a prior result is served for an incoming basis instead of recomputed"
         },
         {
          "sym": "a",
          "meaning": "a prior result eligible for reuse"
         },
         {
          "sym": "B'",
          "meaning": "the content basis of the incoming request"
         },
         {
          "sym": "H(B')",
          "meaning": "the digest over that content basis"
         },
         {
          "sym": "\\mathrm{id}(a)",
          "meaning": "the content id the result was stored under"
         },
         {
          "sym": "\\mathrm{missing}(B')",
          "meaning": "the incoming basis cannot be resolved; bottom, licensing no reuse"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The reuse boundary, where a prior result is about to be served instead of recomputed.",
        "requires": "A declared content basis carried as a digest with the result, equal-basis reuse only, and a recompute or refusal the moment the source digest, scoped files, parent commit, or fixture input drifts.",
        "refuses": "Serving a cached result keyed on a name, path, or label after the content behind it has drifted.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The source-import protocol brings material in by manifest and digest, so when the source bytes drift the imported copy is recomputed rather than reused under the same name.",
        "refs": [
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A resumed work-landing attempt reuses an earlier result because the task name matches, even though the parent commit and scoped files have changed underneath it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "macro_projection_import_protocol",
         "durable_agent_work_landing_replay"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-4"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-5.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-5.json"
      }
     ],
     "visible_text_byte_count": 10404
    },
    {
     "object_id": "principle:P-6",
     "id": "P-6",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Status fails closed",
     "relative_href": "docs/doctrine.html#dcard-p-6",
     "read_href": "docs/doctrine.html#dcard-p-6",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-6",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-6.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Missing evidence, policy files, source digests, secret scans, negative cases, or result record self-scans block or demote.",
     "statement": "Missing evidence, policy files, source digests, secret scans, negative cases, or result record self-scans block or demote. A downstream projection can explain a pass; it cannot upgrade a blocked source truth.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-6.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-6"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Missing evidence, policy files, source digests, secret scans, negative cases, or result record self-scans block or demote. A downstream projection can explain a pass; it cannot upgrade a blocked source truth.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-5"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-5",
          "target_kind": "axiom",
          "target_label": "Fail-closed monotone lattice",
          "url": "doctrine.html#dcard-ax-5"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public cold eval honesty bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public governance compilers bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public live source drift bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public saturation engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public market dashboard read model bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public prediction market board bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public unsurfaced primitives bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-6.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-6.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Failing closed on missing evidence does not establish any part is correct or that the composite is complete; it only fixes the default so absence lands at blocked rather than passing, and the example here illustrates that default without computing support for the principle or its grounding axiom.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A finished thing is only as sound as its weakest part. If one part has no evidence behind it, the whole is treated as not-ready, not assumed fine. A later step can downgrade that verdict but cannot lift it unless fresh work earns the rise.",
        "analogy": {
         "text": "A building cannot be signed off for occupancy until every trade (wiring, plumbing, fire safety) has passed; if the fire inspection was never done, the building stays unfit, and a later office walk-through can flag a new fault but cannot grant occupancy on its own.",
         "maps": [
          {
           "doctrine": "composite status is the meet of its parts",
           "analogy": "the building is fit only if every trade passes; the worst trade decides the whole"
          },
          {
           "doctrine": "a part with no evidence defaults to blocked",
           "analogy": "a trade with no inspection on file counts as failed, not as quietly fine"
          },
          {
           "doctrine": "a later stage may lower status but not raise it without a new derivation",
           "analogy": "a later walk-through can downgrade the building but cannot grant occupancy without a fresh passing inspection"
          }
         ],
         "boundary": "This shows why an un-inspected part drags the whole down and why a downstream check cannot upgrade it; it does not establish that the building is actually safe, only that the sign-off chain has no gaps. One full chain of passes is not a promise that nothing was missed."
        },
        "why_it_matters": "It means a missing check or skipped scan cannot quietly pass as approval, so silence has a cost instead of being read as a clean result.",
        "potential_misread": "That an absent or unchecked part is harmless and can be treated as a pass, or that a downstream view can promote something that was blocked underneath it.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-6 is AX-5 turned into the default a builder relies on when evidence is absent rather than negative. The status of a composite is the meet of its parts, so a single missing policy file, source digest, secret scan, negative case, or result self-scan pulls the whole verdict down to blocked instead of leaving a gap that silently reads as pass. The bite is in the asymmetry: a later stage may lower a status freely, but it cannot raise one without a fresh derivation, which is exactly why a downstream view can explain why something passed yet can never upgrade a source truth that was blocked underneath it. This is the principle that makes silence cost something, and it is what lets the claim and evidence model treat an unscanned or unproven input as the bottom of the order rather than a weak yes.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{status}(c) = \\bigsqcap_{p \\in \\mathrm{parts}(c)} \\mathrm{status}(p) \\;\\wedge\\; \\forall\\, p \\in \\mathrm{parts}(c).\\ \\big(\\mathrm{evidence}(p) = \\emptyset \\Rightarrow \\mathrm{status}(p) = \\bot\\big) \\;\\wedge\\; \\big(\\mathrm{status}'(c) \\sqsupset \\mathrm{status}(c) \\Rightarrow \\exists\\, d.\\ \\mathrm{derives}(d, \\mathrm{status}'(c))\\big)",
        "reads": "A composite's status is the meet of its parts' statuses; every part with no evidence sits at blocked; and a later status may exceed the earlier one only when some fresh derivation establishes the rise.",
        "symbols": [
         {
          "sym": "\\mathrm{status}",
          "meaning": "the status assigned to a composite or part, ordered with blocked at the bottom"
         },
         {
          "sym": "c",
          "meaning": "a composite whose status is being computed"
         },
         {
          "sym": "\\bigsqcap",
          "meaning": "meet: the weakest of the part statuses"
         },
         {
          "sym": "p",
          "meaning": "a part the composite is built from"
         },
         {
          "sym": "\\mathrm{parts}(c)",
          "meaning": "the parts the composite is built from"
         },
         {
          "sym": "\\mathrm{evidence}(p)",
          "meaning": "the admissible evidence held for that part"
         },
         {
          "sym": "\\emptyset",
          "meaning": "no admissible evidence for that part"
         },
         {
          "sym": "\\bot",
          "meaning": "blocked, the bottom of the status order"
         },
         {
          "sym": "\\mathrm{status}'(c)",
          "meaning": "a later status proposed for the same composite"
         },
         {
          "sym": "\\sqsupset",
          "meaning": "claims a strictly higher status than"
         },
         {
          "sym": "d",
          "meaning": "a fresh derivation"
         },
         {
          "sym": "\\mathrm{derives}(d, \\mathrm{status}'(c))",
          "meaning": "derivation d establishes the higher status"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The status boundary, where a composite verdict is assembled from parts and absence is tempted to read as pass.",
        "requires": "Taking the composite status as the meet of its parts, defaulting any part with no evidence to blocked, and demanding a new derivation before any later stage raises a status.",
        "refuses": "A silent default pass: letting missing evidence, an absent scan, or a downstream view lift a blocked part to green without a fresh derivation.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The formal-math readiness gate computes its verdict as the meet of its inputs, so when the corpus or a required check is absent it reports blocked rather than ready, and a later projection cannot lift that boundary to passing.",
        "refs": [
         "formal_math_readiness_gate"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A status board shows a component as green because no scan reported a problem, treating an absent check as a pass and letting a downstream summary stand in for evidence that was never produced.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "formal_math_readiness_gate",
         "batch10_cold_eval_honesty_capsule",
         "corpus_readiness_mathlib_absence_gate"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-5"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public unsurfaced primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-6.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-6.json"
      }
     ],
     "visible_text_byte_count": 11514
    },
    {
     "object_id": "principle:P-7",
     "id": "P-7",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Track known unknowns without claiming the unknown is mapped",
     "relative_href": "docs/doctrine.html#dcard-p-7",
     "read_href": "docs/doctrine.html#dcard-p-7",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-7",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-7.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Coverage reports name declared domains and materialized gaps.",
     "statement": "Coverage reports name declared domains and materialized gaps. They must not say that unmapped space is safe, complete, exhausted, or irrelevant.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-7.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-7"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Coverage reports name declared domains and materialized gaps. They must not say that unmapped space is safe, complete, exhausted, or irrelevant.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-6"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-6",
          "target_kind": "axiom",
          "target_label": "Open-world epistemics",
          "url": "doctrine.html#dcard-ax-6"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine fact claim audit",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
          "target_kind": "mechanism",
          "target_label": "validates public self ignorance coverage ledger",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
          "target_kind": "mechanism",
          "target_label": "validates public voice to doctrine self improvement loop",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
         },
         {
          "relation": "governs",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "failure guarded by",
          "target_id": "AP-5",
          "target_kind": "anti-principle",
          "target_label": "Unknown-unknown exhaustiveness",
          "url": "doctrine.html#dcard-ap-5"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-7.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-7.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Marking the unmapped space unknown does not begin to map it. The gap stays open and the report stays bounded to its declared domain; this principle inherits no authority beyond the specific obligations it operationalises, and the example illustrates the rule without counting as support for it.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A coverage report can only speak about the area it actually checked, and must name the area and the gaps it found. Anything outside that area is unknown, not declared safe, complete, or irrelevant.",
        "analogy": {
         "text": "A library catalogue lists the shelves it has actually indexed; a book not in the catalogue might exist on an un-indexed shelf, so the catalogue saying nothing about it means not yet checked, not confirmed absent.",
         "maps": [
          {
           "doctrine": "coverage holds only over a declared finite domain",
           "analogy": "the catalogue speaks only for the shelves it has indexed, and those shelves are listed"
          },
          {
           "doctrine": "items outside the domain are unknown, not proven-absent",
           "analogy": "a title missing from the catalogue is not-yet-indexed, bounded evidence the library lacks it"
          },
          {
           "doctrine": "absence of a finding is not a claim of safety or completeness",
           "analogy": "an empty search result means this catalogue did not find it, not that it cannot exist anywhere"
          }
         ],
         "boundary": "This shows why a blank result outside the indexed shelves means unknown, not absent; it does not establish that the un-indexed shelves are empty or full, only that the catalogue makes no claim about them. A clean catalogue is not a statement that the whole library was checked."
        },
        "why_it_matters": "It stops a tidy report with no findings from being read as everything is fine, when all it really showed is that nothing was looked at outside its declared scope.",
        "potential_misread": "That a report finding no problems means the unchecked area is clear, complete, or safe, rather than simply unexamined.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-7 is AX-6 open-world epistemics turned into a reporting discipline. A coverage report may draw a closed-world conclusion only inside a declared finite domain; outside that boundary an item is unknown, and unknown is held distinct from proven-absent, so a silence in the records is never read as a fact about the world. This bites because the cheap move is to let blank space mean clear: a tidy report with no findings reads as everything is fine, when all it established is that nothing was checked there. It connects to the claim and evidence model directly, since a completeness statement is itself a claim that has to cite its declared loci and evidence rather than assert exhaustiveness, which is why unknown sits as its own coverage tag and is never collapsed into the bottom of the evidence order.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{covers}(r, d) \\;\\Rightarrow\\; \\mathrm{declared}(d) \\;\\wedge\\; \\big(\\forall\\, x \\notin d.\\ \\mathrm{status}(r, x) = \\mathrm{unknown}\\big) \\;\\wedge\\; \\mathrm{unknown} \\neq \\bot",
        "reads": "If a report concludes coverage over a domain, that domain must be declared and finite; for anything outside it the report's status is unknown, and unknown is not the same as proven-absent.",
        "symbols": [
         {
          "sym": "\\mathrm{covers}",
          "meaning": "the report concludes coverage over a domain"
         },
         {
          "sym": "r",
          "meaning": "a coverage report"
         },
         {
          "sym": "d",
          "meaning": "the declared finite domain it covers"
         },
         {
          "sym": "\\mathrm{declared}",
          "meaning": "the domain is explicitly declared and finite"
         },
         {
          "sym": "x",
          "meaning": "an item, possibly outside the declared domain"
         },
         {
          "sym": "\\mathrm{status}",
          "meaning": "what the report says about an item"
         },
         {
          "sym": "\\mathrm{unknown}",
          "meaning": "the coverage tag for anything outside the declared domain"
         },
         {
          "sym": "\\bot",
          "meaning": "the bottom of the evidence order, i.e. proven-absent or false"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The coverage-and-completeness boundary, where a report is tempted to read its own silence as a clean result.",
        "requires": "Naming the declared finite domain and the gaps actually found, and marking everything outside that domain unknown rather than safe, complete, or exhausted.",
        "refuses": "Converting absence of a finding into a claim that the unmapped space is safe, complete, exhausted, or irrelevant.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The self-ignorance coverage ledger records what was checked, names the gaps it found as open items, and keeps a case that fails when missing coverage is read as a clean result, so a blank region cannot be reported as cleared.",
        "refs": [
         "self_ignorance_coverage_ledger"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A report scans a handful of components, finds nothing, and prints the whole area as clear, treating untouched space as evidence that nothing is wrong there.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "self_ignorance_coverage_ledger",
         "doctrine_fact_claim_audit"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-6"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-6",
       "target_kind": "axiom",
       "target_label": "Open-world epistemics",
       "url": "doctrine.html#dcard-ax-6"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "target_kind": "mechanism",
       "target_label": "validates public self ignorance coverage ledger",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
       "target_kind": "mechanism",
       "target_label": "validates public voice to doctrine self improvement loop",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
      },
      {
       "relation": "governs",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-5",
       "target_kind": "anti-principle",
       "target_label": "Unknown-unknown exhaustiveness",
       "url": "doctrine.html#dcard-ap-5"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-7.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-7.json"
      }
     ],
     "visible_text_byte_count": 9650
    },
    {
     "object_id": "principle:P-8",
     "id": "P-8",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Refuse inadmissible computations with typed reasons",
     "relative_href": "docs/doctrine.html#dcard-p-8",
     "read_href": "docs/doctrine.html#dcard-p-8",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-8",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-8.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "When preconditions fail, return a reasoned refusal.",
     "statement": "When preconditions fail, return a reasoned refusal. Do not emit meaningless statistics, proof authority, safety verdicts, or public-readiness status just to keep a green path.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-8.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-8"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "When preconditions fail, return a reasoned refusal. Do not emit meaningless statistics, proof authority, safety verdicts, or public-readiness status just to keep a green path.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-7"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-7",
          "target_kind": "axiom",
          "target_label": "Typed partiality and refusal",
          "url": "doctrine.html#dcard-ax-7"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
          "target_kind": "mechanism",
          "target_label": "validates public bounded autonomy campaign packet",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
          "target_kind": "mechanism",
          "target_label": "validates synthetic bridge continuity",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
          "target_kind": "mechanism",
          "target_label": "validates public operator contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
          "target_kind": "mechanism",
          "target_label": "validates public first run route map",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
          "target_kind": "mechanism",
          "target_label": "validates public concurrency mission control",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public mathlib absence boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-8.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-8.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Returning a typed refusal in these cases does not make P-8 a witness for AX-7 or prove refusal-correctness across every partial computation. It operationalises the specific grounding obligations and inherits no authority beyond the bounded cases that actually refuse.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "When a step cannot be done properly because something needed is missing, it should hand back a clear refusal that says why and shows the basis, not a made-up answer that lets things look finished.",
        "analogy": {
         "text": "A pharmacist who is missing a required detail on a prescription hands it back with the reason written on it, instead of guessing a dose just to send the patient away with a filled bottle.",
         "maps": [
          {
           "doctrine": "return an Ok result only when the precondition holds",
           "analogy": "the pharmacist dispenses only when the prescription is complete and valid"
          },
          {
           "doctrine": "when the precondition fails, return a typed refusal carrying its reason and evidence",
           "analogy": "an incomplete prescription comes back with the specific missing detail noted on it"
          },
          {
           "doctrine": "do not emit a meaningless value just to keep a green path",
           "analogy": "the pharmacist does not invent a dose to avoid an empty-handed patient"
          }
         ],
         "boundary": "This shows why a refusal that names its reason beats a fabricated answer; it does not establish that the refusal itself is correct or that the request was valid, only that an unfounded answer is withheld. A returned refusal is information, not a verdict on the underlying request."
        },
        "why_it_matters": "It keeps a system from emitting a forecast past its data, a confidence figure with nothing behind it, or a ready flag while a needed part is missing, all just to avoid showing red.",
        "potential_misread": "That returning some number is always better than returning nothing, even when the basis for that number does not exist.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-8 is AX-7's typed-partiality law made into the habit a builder applies at every computation that can fail. A function whose precondition does not hold, or whose library or corpus is absent, must totalize into a refusal that names why and cites the evidence, instead of returning a meaningless statistic, a proof verdict, a safety judgement, or a public-readiness status just to avoid a red path. This bites because the cheapest way to look finished is to emit a number anyway: a forecast computed past its sample size, a confidence interval with no distribution behind it, a readiness flag asserted while the dependency is missing. It connects to the claim and evidence model because a refusal is the honest evidence value when the basis is not admissible; a fabricated green output is a claim with no checker under it, which is exactly the bottom-of-the-order assertion the rest of the doctrine refuses.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\big(\\mathrm{run}(g, x) = \\mathsf{Ok}(y) \\Rightarrow \\mathrm{Pre}(g, x)\\big) \\;\\wedge\\; \\big(\\neg\\,\\mathrm{Pre}(g, x) \\Rightarrow \\exists\\, r, \\epsilon.\\ \\mathrm{run}(g, x) = \\mathsf{Refusal}(r, \\epsilon)\\big)",
        "reads": "An Ok result certifies that the precondition held: a value may come out only when the computation had grounds to run. And when the precondition fails, the computation returns a typed refusal carrying some reason and its evidence, never a bare value.",
        "symbols": [
         {
          "sym": "\\mathrm{run}(g, x)",
          "meaning": "evaluating the partial computation g on input x"
         },
         {
          "sym": "g",
          "meaning": "a partial computation that can fail"
         },
         {
          "sym": "x",
          "meaning": "the input to g"
         },
         {
          "sym": "\\mathsf{Ok}(y)",
          "meaning": "an admissible result value y"
         },
         {
          "sym": "\\mathrm{Pre}(g, x)",
          "meaning": "the declared precondition for running g on input x"
         },
         {
          "sym": "\\neg",
          "meaning": "the precondition does not hold"
         },
         {
          "sym": "\\mathsf{Refusal}(r, \\epsilon)",
          "meaning": "a typed refusal carrying reason r and evidence \\epsilon"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The result boundary, where a computation that cannot proceed is tempted to return a number anyway.",
        "requires": "Returning an Ok result only under a declared precondition, and a refusal carrying a reason and evidence when the precondition fails or a dependency is absent.",
        "refuses": "Emitting a meaningless statistic, proof authority, safety verdict, or readiness status to keep a green path when the basis does not admit one.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The finance forecast evaluation spine returns a typed refusal when a forecast horizon reaches or exceeds the sample size or when the statistics dependency is unavailable, rather than reporting a loss differential the data cannot support.",
        "refs": [
         "finance_forecast_evaluation_spine"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A readiness gate reports a corpus as available and prints a green status while the underlying library is missing, turning an absent dependency into a silent overclaim.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "finance_forecast_evaluation_spine",
         "corpus_readiness_mathlib_absence_gate"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-7"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-7",
       "target_kind": "axiom",
       "target_label": "Typed partiality and refusal",
       "url": "doctrine.html#dcard-ax-7"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
       "target_kind": "mechanism",
       "target_label": "validates public bounded autonomy campaign packet",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "target_kind": "mechanism",
       "target_label": "validates public operator contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public mathlib absence boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-8.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-8.json"
      }
     ],
     "visible_text_byte_count": 10542
    },
    {
     "object_id": "principle:P-9",
     "id": "P-9",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Preserve provenance across every boundary",
     "relative_href": "docs/doctrine.html#dcard-p-9",
     "read_href": "docs/doctrine.html#dcard-p-9",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-9",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-9.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Every shard crossing from source source, fixture, result record, public copy, provider shape, or private-system adjacency must carry a prov\u2026",
     "statement": "Every shard crossing from source source, fixture, result record, public copy, provider shape, or private-system adjacency must carry a provenance class and scope limit. If the flow is only declared or endpoint-labeled, say so.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-9.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-9"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Every shard crossing from source source, fixture, result record, public copy, provider shape, or private-system adjacency must carry a provenance class and scope limit. If the flow is only declared or endpoint-labeled, say so.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-8"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-8",
          "target_kind": "axiom",
          "target_label": "Provenance propagation and non-interference",
          "url": "doctrine.html#dcard-ax-8"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public cold eval honesty bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public governance compilers bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public live source drift bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public saturation engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public market dashboard read model bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public prediction market board bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public proof authority runtime bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-9.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-9.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "P-9 guides these flows only through source-derived edges; it is not a witness and does not raise the support ceiling of its grounding axiom. Catching labelled flows at named boundaries does not establish non-interference across the whole graph: general propagation is bounded by what is actually traced, and that debt is recorded rather than hidden.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A value carries a record of where it came from and how far it is allowed to be used, and that record must travel with it across every handoff. If something was only labelled clean at the final door, that has to be stated, not treated as if the label rode along the whole way.",
        "analogy": {
         "text": "A shipped parcel carries a chain-of-custody log and a tamper seal applied at origin; if a clean sticker was simply slapped on at the loading dock at the end, the log must note that, because a sticker at the door is not the same as an unbroken seal carried the whole route.",
         "maps": [
          {
           "doctrine": "a value carries its provenance class across the boundary",
           "analogy": "the parcel carries its origin-stamped custody log through every handoff"
          },
          {
           "doctrine": "the scope limit is carried, not stamped at the endpoint",
           "analogy": "the tamper seal is applied at origin and travels intact, not pressed on at the final dock"
          },
          {
           "doctrine": "an endpoint-only label must be recorded as merely declared",
           "analogy": "a sticker added only at the loading dock has to be logged as a door-label, not a carried seal"
          }
         ],
         "boundary": "This shows why a label applied only at the end is weaker than a record carried the whole way; it does not establish that an origin seal guarantees the contents are correct, only that an end-of-line sticker proves less than a continuous record. A carried log is not the same as the goods being verified."
        },
        "why_it_matters": "It lets a clean-looking final copy still be treated as unverified, so trust depends on where a value came from and what was done to it, not on how it looks at the last step.",
        "potential_misread": "That a clean label at the final destination is enough, regardless of whether that label actually accompanied the value across the earlier boundaries.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-9 is AX-8 turned into the discipline a builder runs at every boundary a value actually crosses: imported source, a fixture, a result record, public copy, a model-output data shape, or material adjacent to a private root. Each crossing must carry a provenance class and a scope limit with the value, because trust is a property of where something came from and what was done to it, not of where it lands. The honesty half is load-bearing and is what separates this from AX-8 stated abstractly: when a flow is only declared, or only labelled clean at the endpoint instead of having the label carried across, the principle requires you to record that gap rather than read the endpoint label as proof. This is the rule that lets a clean-looking final copy step still be treated as unverified, and it is why the system tracks how far a value may travel rather than only what it currently looks like.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "(x \\to s) \\;\\Rightarrow\\; \\big(\\mathrm{prov}(x) \\sqsubseteq \\mathrm{policy}(s) \\;\\wedge\\; \\mathrm{carried}(\\mathrm{ceil}(x))\\big) \\;\\vee\\; \\mathrm{declared}(x \\to s)",
        "reads": "For any value x crossing into a sink s, either x's provenance sits within the sink's policy and its scope limit is carried across, or the crossing is explicitly recorded as only declared.",
        "symbols": [
         {
          "sym": "x",
          "meaning": "a value crossing a boundary"
         },
         {
          "sym": "\\to",
          "meaning": "the value crosses into the sink"
         },
         {
          "sym": "s",
          "meaning": "a sink (a public or privileged destination)"
         },
         {
          "sym": "\\mathrm{prov}",
          "meaning": "the provenance class carried with x"
         },
         {
          "sym": "\\sqsubseteq",
          "meaning": "sits within what the sink policy admits"
         },
         {
          "sym": "\\mathrm{policy}",
          "meaning": "what the sink is allowed to admit"
         },
         {
          "sym": "\\mathrm{ceil}",
          "meaning": "the scope limit carried with x"
         },
         {
          "sym": "\\mathrm{carried}",
          "meaning": "the scope limit is propagated across the crossing, not stamped at the endpoint"
         },
         {
          "sym": "\\mathrm{declared}",
          "meaning": "the crossing is recorded as only declared, not propagated"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "Every boundary a value crosses, from imported source through to a public or privileged sink.",
        "requires": "A provenance class and scope limit carried with the value across the crossing, and an explicit record when a flow is only declared or endpoint-labelled.",
        "refuses": "Reading a clean endpoint label as proof when the label was stamped at the door rather than carried across the boundary.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The prompt-injection replay carries the information-flow policy with the data, so untrusted instructions arriving at a tool call are caught at the boundary instead of being trusted for having reached a trusted endpoint.",
        "refs": [
         "indirect_prompt_injection_information_flow_policy_replay"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A public page prints a value lifted from a private-adjacent source because the final copy step looked clean, with no provenance carried across the copy.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "indirect_prompt_injection_information_flow_policy_replay",
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-8"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-9.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-9.json"
      }
     ],
     "visible_text_byte_count": 11309
    },
    {
     "object_id": "principle:P-10",
     "id": "P-10",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Do not land effects without compensation",
     "relative_href": "docs/doctrine.html#dcard-p-10",
     "read_href": "docs/doctrine.html#dcard-p-10",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-10",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-10.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Writes, launch steps, claim launch, source imports, and rollback-shaped operations need ordered transaction evidence.",
     "statement": "Writes, launch steps, claim launch, source imports, and rollback-shaped operations need ordered transaction evidence. launch locks after durable records, recompute after launch, and block stale parent or same-path conflicts.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-10.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-10"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Writes, launch steps, claim launch, source imports, and rollback-shaped operations need ordered transaction evidence. launch locks after durable records, recompute after launch, and block stale parent or same-path conflicts.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-9"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-9",
          "target_kind": "axiom",
          "target_label": "Compensable transactional effects",
          "url": "doctrine.html#dcard-ax-9"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
          "target_kind": "mechanism",
          "target_label": "validates public concurrency mission control",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
          "target_kind": "mechanism",
          "target_label": "validates public work landing replay contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public mission transaction bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
         },
         {
          "relation": "governs",
          "target_id": "concept.work_landing_and_continuity_control_bundle",
          "target_kind": "concept",
          "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
         },
         {
          "relation": "failure guarded by",
          "target_id": "AP-8",
          "target_kind": "anti-principle",
          "target_label": "Blind irreversible mutation",
          "url": "doctrine.html#dcard-ap-8"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-10.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-10.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Ordering one transaction and guarding one path does not establish the whole system is crash-safe or serialisable. P-10 operationalises specific AX-9 obligations on the effects it covers; it is not a witness for the axiom and inherits no authority beyond those obligations, and a passing guard on a named path says nothing about effects it never mediated.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "An action only counts as done when there is a permanent written record of it, a clear way to undo it (or a stated point of no return), and a check that no two people changed the same thing at once on outdated information. Running successfully is not the same as having landed.",
        "analogy": {
         "text": "A bank wire only counts as sent once the bank writes it into its permanent ledger, attaches a way to reverse or chargeback if needed, and confirms no second clerk moved the same account in the same moment off an out-of-date balance.",
         "maps": [
          {
           "doctrine": "the effect being treated as landed",
           "analogy": "the wire being treated as sent"
          },
          {
           "doctrine": "the durable ordered record",
           "analogy": "the entry written into the bank's permanent ledger"
          },
          {
           "doctrine": "a compensator, or a declared irreversible boundary",
           "analogy": "an attached reversal/chargeback path, or a stated point where it can no longer be pulled back"
          },
          {
           "doctrine": "compare-and-swap on the expected parent",
           "analogy": "confirming the account balance is still the one the clerk started from before applying the change"
          },
          {
           "doctrine": "single writer holding the path",
           "analogy": "no second clerk touching the same account at the same moment"
          }
         ],
         "boundary": "The wire picture shows that a single transfer can be recorded, reversed, and protected from a race; it does not show the bank's whole system is sound, and one clean transfer does not establish that every account or every transfer is safe."
        },
        "why_it_matters": "Without this, a step that crashes between starting and finishing can look complete while leaving a half-done effect that nobody can recompute or unwind, which is how doubled, lost, or unauthorised changes slip through.",
        "potential_misread": "Thinking that because an operation reported success it must therefore be safely and fully landed. The most dangerous moment is the gap between two steps, where a lock can launch before the permanent record is written.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-10 is AX-9 turned into the discipline a builder runs before any effect is allowed to be real. A write, a launch step, a claim launch, a source import, or a rollback-shaped operation is not landed because it ran; it is landed only when ordered transaction evidence exists for it, when it carries a compensator or a declared irreversible boundary, when a compare-and-swap confirms the parent it expected has not moved, and when a single writer holds its path. This connects to the claim and evidence model because a landed effect is itself a claim about the world, and an effect with no compensation and no concurrency guard is a confident assertion that nobody can recompute or undo. It bites hardest in the gap between two steps: the moment a lock releases before the durable record is written, or two writers race the same path on a stale parent, is exactly where an unrecoverable, unauthorised, or doubled effect slips through.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{landed}(e) \\;\\Rightarrow\\; \\mathrm{durable}(e) \\;\\wedge\\; \\big(\\mathrm{comp}(e) \\vee \\mathrm{irrev}(e)\\big) \\;\\wedge\\; \\big(\\mathrm{multi}(e) \\Rightarrow \\mathrm{cas}(\\mathrm{parent}(e)) \\wedge |\\mathrm{writers}(\\mathrm{path}(e))| \\leq 1\\big)",
        "reads": "An effect lands only if it is durable and declares a compensator or an irreversible boundary; and when it is multi-step, only under a compare-and-swap on its expected parent with at most one writer on its path.",
        "symbols": [
         {
          "sym": "\\mathrm{landed}(e)",
          "meaning": "the effect e is treated as landed"
         },
         {
          "sym": "e",
          "meaning": "an effect"
         },
         {
          "sym": "\\mathrm{durable}(e)",
          "meaning": "e is recorded durably"
         },
         {
          "sym": "\\mathrm{comp}(e)",
          "meaning": "a declared compensator that can reverse e"
         },
         {
          "sym": "\\mathrm{irrev}(e)",
          "meaning": "a declared irreversible boundary for e"
         },
         {
          "sym": "\\mathrm{multi}(e)",
          "meaning": "e is a multi-step effect"
         },
         {
          "sym": "\\mathrm{cas}(\\mathrm{parent}(e))",
          "meaning": "a compare-and-swap on e's expected parent"
         },
         {
          "sym": "|\\mathrm{writers}(\\mathrm{path}(e))| \\leq 1",
          "meaning": "at most one writer holds e's path"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The effect boundary, where an operation is about to be treated as landed and irreversible.",
        "requires": "An ordered durable record, a compensator or declared irreversible boundary, a compare-and-swap on the expected parent, and a single-writer hold on the path before the effect counts as landed.",
        "refuses": "Treating an operation as landed with the lock released before the durable record, a stale parent, or a second writer on the same path.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The mission transaction work spine lands a multi-step effect only after the durable record is written, recomputes once the lock releases, and blocks a stale parent or a same-path conflict, so a half-applied write cannot be reported as complete.",
        "refs": [
         "mission_transaction_work_spine"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A launch step reports success after acquiring a lock but before the durable record is written, so a crash in the gap leaves an effect that looks landed with nothing to recompute or compensate it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "mission_transaction_work_spine",
         "durable_agent_work_landing_replay",
         "concurrency_mission_control"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-9"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-8",
       "target_kind": "anti-principle",
       "target_label": "Blind irreversible mutation",
       "url": "doctrine.html#dcard-ap-8"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-10.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-10.json"
      }
     ],
     "visible_text_byte_count": 10573
    },
    {
     "object_id": "principle:P-11",
     "id": "P-11",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Bind volatile facts to refresh routes",
     "relative_href": "docs/doctrine.html#dcard-p-11",
     "read_href": "docs/doctrine.html#dcard-p-11",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-11",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-11.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Counts, \"current\" states, live route totals, CI floors, body-import floors, and readiness signals must cite how they can be re-derived.",
     "statement": "Counts, \"current\" states, live route totals, CI floors, body-import floors, and readiness signals must cite how they can be re-derived. If they cannot, keep them out of durable prose or mark them as dated snapshots.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-11.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-11"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Counts, \"current\" states, live route totals, CI floors, body-import floors, and readiness signals must cite how they can be re-derived. If they cannot, keep them out of durable prose or mark them as dated snapshots.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-10"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-10",
          "target_kind": "axiom",
          "target_label": "Temporal validity and freshness contracts",
          "url": "doctrine.html#dcard-ax-10"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine fact claim audit",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
          "target_kind": "mechanism",
          "target_label": "validates public self ignorance coverage ledger",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
         },
         {
          "relation": "governs",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "failure guarded by",
          "target_id": "AP-4",
          "target_kind": "anti-principle",
          "target_label": "Cache-across-drift",
          "url": "doctrine.html#dcard-ap-4"
         },
         {
          "relation": "failure guarded by",
          "target_id": "AP-9",
          "target_kind": "anti-principle",
          "target_label": "Frozen live fact",
          "url": "doctrine.html#dcard-ap-9"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-11.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-11.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Binding a number to a refresh route does not make the principle a witness for AX-10, and it does not establish the cited value is currently fresh; it operationalises specific freshness obligations and gives the reader a way to recompute, leaving the live reading to be re-derived rather than trusted.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A number about something that keeps changing, like a current count or a readiness status, may only sit in a lasting document if it says when it was read and points to a way to work it out again. Otherwise it should be marked as a dated snapshot.",
        "analogy": {
         "text": "A train departure board can post a time only because it shows when it last refreshed and recomputes from the live feed; a time painted permanently on the wall, with no refresh, stops being trustworthy the moment the schedule changes.",
         "maps": [
          {
           "doctrine": "a live count or readiness signal",
           "analogy": "the departure time shown for a train"
          },
          {
           "doctrine": "the read time carried with the value",
           "analogy": "the 'last updated' stamp on the board"
          },
          {
           "doctrine": "the route that re-derives it from its basis",
           "analogy": "the board's link back to the live schedule feed it recomputes from"
          },
          {
           "doctrine": "demoting an unbound value to a dated snapshot",
           "analogy": "treating a time painted on the wall as a fixed past notice, not a live departure time"
          }
         ],
         "boundary": "The board only shows that a changing value needs a timestamp and a live source to stay honest; it does not show the posted time is correct right now, and seeing a refresh link does not mean the value has actually been recomputed since."
        },
        "why_it_matters": "A frozen 'current' number quietly drifts from reality as the underlying thing grows or changes, so readers keep trusting yesterday's reading as today's truth with nothing pulling it back into line.",
        "potential_misread": "Assuming a confident number in a document is current just because it sounds definite. The point that carries the weight is the route to recount it; without that, the figure is just a cached reading wearing the costume of a fixed fact.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-11 is AX-10 turned into a writing discipline: a number about live state is a cached read, not a standing fact, and a cached read is only as trustworthy as its invalidation contract. So counts, \"current\" states, route totals, CI floors, and readiness signals are admissible in durable prose only when they carry the time they were read, the basis they came from, and a route that re-derives them; if any of those is missing, the honest form is a dated snapshot or no claim at all. This connects to the claim and evidence model because an unbound live value is the temporal version of an echoed label: it keeps asserting yesterday's reading as today's truth with nothing recomputing it. The route is the load-bearing half; without it a confident number silently drifts away from the basis it was supposed to track.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{durable}(v) \\;\\Rightarrow\\; \\exists\\, t, B, \\rho.\\ \\mathrm{carries}(v, \\langle t, B, \\rho \\rangle) \\quad \\mathrm{else}\\ \\mathrm{demote}(v)",
        "reads": "A volatile value may stand in durable prose only when it carries a read time, a basis, and a route that can recompute it; otherwise demote it to a dated snapshot or keep it out. Carrying the route makes the number checkable; it does not make it currently fresh.",
        "symbols": [
         {
          "sym": "\\mathrm{durable}(v)",
          "meaning": "the value v stands in durable prose"
         },
         {
          "sym": "v",
          "meaning": "a volatile value such as a count, current state, route total, CI floor, or readiness signal"
         },
         {
          "sym": "t",
          "meaning": "the time the value was read, carried as its as-of stamp"
         },
         {
          "sym": "B",
          "meaning": "the basis the value was read from"
         },
         {
          "sym": "\\rho",
          "meaning": "the route that re-derives the value from the basis"
         },
         {
          "sym": "\\mathrm{carries}(v, \\langle t, B, \\rho \\rangle)",
          "meaning": "the value is stamped with its read time, basis, and recompute route"
         },
         {
          "sym": "\\mathrm{demote}(v)",
          "meaning": "mark v as a dated snapshot or keep it out of durable prose"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The temporal boundary, where a live reading is tempted to harden into a standing fact.",
        "requires": "A read time, a basis, and a recompute route carried with any live count or readiness signal, or demotion to a dated snapshot when one is missing.",
        "refuses": "A frozen live count or \"current\" state asserted in durable prose with no read time and no route to re-derive it.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The doctrine fact-claim audit checks that public fact rows state the expected count, point at the live code they were read from, and only cite facts present in the fixture graph, so a volatile number without a recompute basis is blocked rather than printed as standing truth.",
        "refs": [
         "doctrine_fact_claim_audit"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A page states \"47 components\" as a flat fact, with no read time and no route to recount, so the number keeps asserting itself unchanged after the underlying set has grown.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "doctrine_fact_claim_audit",
         "self_ignorance_coverage_ledger"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-10"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-10",
       "target_kind": "axiom",
       "target_label": "Temporal validity and freshness contracts",
       "url": "doctrine.html#dcard-ax-10"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "target_kind": "mechanism",
       "target_label": "validates public self ignorance coverage ledger",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      },
      {
       "relation": "governs",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-4",
       "target_kind": "anti-principle",
       "target_label": "Cache-across-drift",
       "url": "doctrine.html#dcard-ap-4"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-9",
       "target_kind": "anti-principle",
       "target_label": "Frozen live fact",
       "url": "doctrine.html#dcard-ap-9"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-11.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-11.json"
      }
     ],
     "visible_text_byte_count": 9895
    },
    {
     "object_id": "principle:P-12",
     "id": "P-12",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Make doctrine executable before authoritative",
     "relative_href": "docs/doctrine.html#dcard-p-12",
     "read_href": "docs/doctrine.html#dcard-p-12",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-12",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-12.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "A doctrine surface earns authority through grammar, required fields, result record obligations, scope boundaries, and validator coverage.",
     "statement": "A doctrine surface earns authority through grammar, required fields, result record obligations, scope boundaries, and validator coverage. Prose can orient a reader, but it cannot become system authority without an executable contract.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-12.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-12"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "A doctrine surface earns authority through grammar, required fields, result record obligations, scope boundaries, and validator coverage. Prose can orient a reader, but it cannot become system authority without an executable contract.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-11"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
          "target_kind": "mechanism",
          "target_label": "validates synthetic bridge continuity",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
          "target_kind": "mechanism",
          "target_label": "validates public operator contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
          "target_kind": "mechanism",
          "target_label": "validates public first run route map",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine grammar bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public route plane bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
          "target_kind": "mechanism",
          "target_label": "validates public pattern assimilation step",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-12.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-12.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Passing the grammar does not make a doctrine surface true, strong, or its doctrine complete, and it does not make this principle a witness for its grounding axiom; it admits the surface as well-formed authority and inherits no support beyond the specific obligations it operationalizes.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A written rule is only allowed to actually govern other parts of the system after it passes a machine check of its form and carries its required parts and its stated limits. Well-written words on their own can guide a reader but cannot rule.",
        "analogy": {
         "text": "A 'this room meets code' notice on a door can only govern who is allowed in after it passes a coded building inspection with all required sign-offs and stated limits; a convincingly worded sign that no inspector ever ran against the code just orients people, it excludes entry.",
         "maps": [
          {
           "doctrine": "a doctrine surface the system may treat as a rule",
           "analogy": "the 'meets code' notice on the door"
          },
          {
           "doctrine": "passing the executable grammar",
           "analogy": "passing the coded building inspection"
          },
          {
           "doctrine": "the required fields and result-record obligations",
           "analogy": "the required sign-offs the inspection demands"
          },
          {
           "doctrine": "the declared scope boundaries, its stated bounds",
           "analogy": "the notice stating what it does and does not certify"
          },
          {
           "doctrine": "prose held at projection, orients but does not govern",
           "analogy": "a nicely worded but uninspected sign that informs but cannot authorise entry"
          }
         ],
         "boundary": "The inspection picture only shows a notice must clear a real check before it can govern; it does not show what the notice says is true, that the room is actually well-built, or that the building code itself is complete."
        },
        "why_it_matters": "It stops a persuasive paragraph from being treated as the law other parts must obey, which is exactly where confident but unchecked wording smuggles authority it never earned.",
        "potential_misread": "Believing that clear, authoritative-sounding writing is enough to make something a binding rule. Passing the form check means the rule is well-formed enough to carry authority, not that its content is correct.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-12 is the discipline that decides when a piece of doctrine is allowed to govern rather than merely describe. A standard, a route contract, or a doctrine record earns authority only when an executable grammar accepts it and it carries the required fields, result-record obligations, and scope boundaries; well-written prose can orient a reader but cannot become the thing other components are checked against. This is the claim-and-evidence model pointed inward at the system's own laws: an authority-bearing surface is treated as a claim that has to clear an admissibility floor, so a confident paragraph sits at the bottom of that order until a grammar membership check and its obligations admit it. P-12 only operationalizes specific obligations of its grounding axiom; passing the grammar establishes that a surface is well-formed enough to carry authority, not that what it asserts is true or that the doctrine it belongs to is complete.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{auth}(d) \\;\\Rightarrow\\; d \\in L(G) \\;\\wedge\\; \\mathrm{records}(d) \\;\\wedge\\; \\mathrm{anticlaims}(d); \\quad \\mathrm{otherwise}\\ \\mathrm{auth}(d) \\sqsubseteq \\mathrm{proj}",
        "reads": "A doctrine surface may carry authority only when an executable grammar accepts it and it carries result-record obligations and scope boundaries; otherwise its standing is bounded at projection, which orients but does not rule.",
        "symbols": [
         {
          "sym": "d",
          "meaning": "a doctrine surface (standard, route contract, record)"
         },
         {
          "sym": "\\mathrm{auth}(d)",
          "meaning": "the authority the surface is allowed to carry"
         },
         {
          "sym": "L(G)",
          "meaning": "the language of the executable grammar that must accept it"
         },
         {
          "sym": "\\mathrm{records}(d)",
          "meaning": "the result-record obligations the surface declares"
         },
         {
          "sym": "\\mathrm{anticlaims}(d)",
          "meaning": "the stated bounds on what it does not establish"
         },
         {
          "sym": "\\mathrm{proj}",
          "meaning": "projection standing: orients a reader, does not govern"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "When a doctrine surface is allowed to govern other components rather than only describe them.",
        "requires": "Grammar membership plus declared required fields, result-record obligations, and scope boundaries before a surface carries authority.",
        "refuses": "Letting unstructured prose acquire governing authority without passing the executable contract.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The executable doctrine grammar admits a standard as authority-bearing only when it parses under the grammar and carries its required fields, result-record obligations, and scope boundaries, so a doctrine surface that is only prose is held at projection instead of being allowed to govern.",
        "refs": [
         "executable_doctrine_grammar"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A persuasive markdown standard is treated as the rule other components must satisfy, even though nothing parses it against a grammar and it carries no result-record obligations or scope boundaries.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "executable_doctrine_grammar",
         "standards_meta_diagnostics",
         "batch12_release_claim_language_gate"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "target_kind": "mechanism",
       "target_label": "validates public operator contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public route plane bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
       "target_kind": "mechanism",
       "target_label": "validates public pattern assimilation step",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-12.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-12.json"
      }
     ],
     "visible_text_byte_count": 10994
    },
    {
     "object_id": "principle:P-13",
     "id": "P-13",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Apply the same floor to meta artifacts",
     "relative_href": "docs/doctrine.html#dcard-p-13",
     "read_href": "docs/doctrine.html#dcard-p-13",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-13",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-13.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Microcosm artifacts about Microcosm do not get exemptions.",
     "statement": "Microcosm artifacts about Microcosm do not get exemptions. Standards, paper modules, ledgers, routes, generated projections, and launch claims must satisfy the same evidence, scope boundary, and refusal floors they impose on other shards.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-13.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-13"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Microcosm artifacts about Microcosm do not get exemptions. Standards, paper modules, ledgers, routes, generated projections, and launch claims must satisfy the same evidence, scope boundary, and refusal floors they impose on other shards.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-12"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
          "target_kind": "mechanism",
          "target_label": "validates public launch claim language gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine grammar bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
          "target_kind": "mechanism",
          "target_label": "validates public voice to doctrine self improvement loop",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
         },
         {
          "relation": "governs",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "governs",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "failure guarded by",
          "target_id": "AP-1",
          "target_kind": "anti-principle",
          "target_label": "Fixture-label echo",
          "url": "doctrine.html#dcard-ap-1"
         },
         {
          "relation": "failure guarded by",
          "target_id": "AP-3",
          "target_kind": "anti-principle",
          "target_label": "Rank-as-product-score",
          "url": "doctrine.html#dcard-ap-3"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-13.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-13.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Applying the floor to the system's own artifacts does not make the system complete, correct, or launch-ready, and it does not make this principle a witness for AX-12. It operationalises specific AX-12 obligations and inherits no authority beyond them; the limits remain, stated rather than hidden.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "When the system describes or assesses itself, that self-description has to clear exactly the same evidence and honesty standard it forces on everything else. The part that talks about the system gets no easier pass.",
        "analogy": {
         "text": "A calibration lab's own measuring instruments have to pass the very same calibration check it certifies for its customers' equipment; the lab does not get to sign off its own gauges under a looser standard than it applies to everyone else's.",
         "maps": [
          {
           "doctrine": "the system's own meta artifacts describing itself",
           "analogy": "the lab's own in-house measuring instruments"
          },
          {
           "doctrine": "the evidence, scope boundary, and refusal floor",
           "analogy": "the calibration standard being applied"
          },
          {
           "doctrine": "the same floor applied to external work it audits",
           "analogy": "the same standard applied to the customers' equipment the lab certifies"
          },
          {
           "doctrine": "refusing a meta-artifact exemption",
           "analogy": "refusing to let the lab sign off its own gauges under a looser rule"
          }
         ],
         "boundary": "The calibration picture only shows the lab's own instruments face the same standard as customer equipment; it does not show the lab's instruments are actually accurate or its results correct, only that its self-checks were not waved through on a lighter rule."
        },
        "why_it_matters": "Self-referential copy is where overclaiming is easiest to hide, so removing the discount lets the system state its own limits in public without that statement quietly becoming a new unchecked claim.",
        "potential_misread": "Assuming a system describing itself can be taken at its word, or that holding its self-claims to the standard makes the self-praise correct. Clearing the floor only removes the special pleading; it does not make the system complete or ready.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-13 is AX-12 turned into a build habit: the standards, paper modules, ledgers, routes, generated views, and launch wording the system produces about itself must clear the same floor those same artifacts impose on any other shard. It bites because self-referential copy is where overclaiming is easiest to smuggle in; a page describing the system is still a claim, and a confident self-assessment that would never survive the evidence floor it applies elsewhere is exactly the special pleading this principle removes. It connects straight to the claim and evidence model: a meta artifact's wording is admissible only under the same recompute-or-demote check as external work, and the wording gate that polices other shards is pointed back at the system's own launch copy. Removing the exemption is what lets the system state its own limits in public without that statement quietly becoming a new unchecked claim.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\forall\\, a \\in \\mathcal{M}.\\ \\forall\\, \\varphi \\in \\mathrm{claims}(a).\\ \\mathrm{floor}(\\varphi) = \\mathrm{floor}_{\\mathrm{ext}}(\\varphi)",
        "reads": "For every meta artifact the system produces about itself and every claim that artifact carries, the claim must clear the same evidence, scope boundary, and refusal floor as an external claim.",
        "symbols": [
         {
          "sym": "\\mathcal{M}",
          "meaning": "the system's meta artifacts: its own standards, paper modules, ledgers, routes, generated projections, and launch wording"
         },
         {
          "sym": "a",
          "meaning": "any such meta artifact"
         },
         {
          "sym": "\\varphi",
          "meaning": "a claim carried by the artifact a"
         },
         {
          "sym": "\\mathrm{claims}(a)",
          "meaning": "the claims that artifact a carries"
         },
         {
          "sym": "\\mathrm{floor}",
          "meaning": "the evidence, scope boundary, and refusal floor from AX-12"
         },
         {
          "sym": "\\mathrm{floor}_{\\mathrm{ext}}",
          "meaning": "the same floor applied to an external claim"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The meta boundary, where the system makes claims about itself and is tempted to discount them.",
        "requires": "Holding standards, paper modules, ledgers, routes, generated views, and launch wording to the same evidence, scope boundary, and refusal floor imposed on any other shard.",
        "refuses": "A meta-artifact exemption, where the system's own copy gets a lighter floor than the work it audits.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The launch wording gate runs the same claim-language floor over the system's own public copy that it imposes on any other shard, so overclaiming language in a self-description is blocked at launch rather than waved through.",
        "refs": [
         "batch12_release_claim_language_gate"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "The system publishes a self-assessment calling its own work verified and complete, in wording that would never clear the evidence floor it applies to the shards it audits.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "batch12_release_claim_language_gate",
         "executable_doctrine_grammar",
         "voice_to_doctrine_self_improvement_loop"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-12"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
       "target_kind": "mechanism",
       "target_label": "validates public voice to doctrine self improvement loop",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
      },
      {
       "relation": "governs",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-1",
       "target_kind": "anti-principle",
       "target_label": "Fixture-label echo",
       "url": "doctrine.html#dcard-ap-1"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-3",
       "target_kind": "anti-principle",
       "target_label": "Rank-as-product-score",
       "url": "doctrine.html#dcard-ap-3"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-13.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-13.json"
      }
     ],
     "visible_text_byte_count": 10549
    },
    {
     "object_id": "principle:P-14",
     "id": "P-14",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Carry basis and provenance together",
     "relative_href": "docs/doctrine.html#dcard-p-14",
     "read_href": "docs/doctrine.html#dcard-p-14",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-14",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-14.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Content basis says which bytes or rows were used; provenance says where they may flow and how strongly they may be claimed.",
     "statement": "Content basis says which bytes or rows were used; provenance says where they may flow and how strongly they may be claimed. A shard missing either side is not fully routed.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-14.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-14"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Content basis says which bytes or rows were used; provenance says where they may flow and how strongly they may be claimed. A shard missing either side is not fully routed.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-4",
           "AX-8"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-4",
          "target_kind": "axiom",
          "target_label": "Content-addressed determinism",
          "url": "doctrine.html#dcard-ax-4"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-8",
          "target_kind": "axiom",
          "target_label": "Provenance propagation and non-interference",
          "url": "doctrine.html#dcard-ax-8"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
          "target_kind": "mechanism",
          "target_label": "validates public work landing replay contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
          "target_kind": "mechanism",
          "target_label": "validates public indirect prompt injection information flow policy replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
          "target_kind": "mechanism",
          "target_label": "validates public source projection imports",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
          "target_kind": "mechanism",
          "target_label": "validates public sleeper memory poisoning quarantine replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
         },
         {
          "relation": "governs",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "governs",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-14.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-14.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Carrying both halves on the cases it governs does not witness the axioms it grounds, AX-4 and AX-8, or make either one strong. The principle operationalises specific obligations from those axioms and inherits no authority beyond them; the worked example is reader illustration and computes no support.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Every piece of data must carry two things at once: a record of exactly which inputs it was built from, and a record of where it is allowed to go and how strongly it can be claimed. If either tag is missing, the data is not ready to be used.",
        "analogy": {
         "text": "A blood sample reaching the lab needs both a label saying which patient and draw it came from and a handling tag saying what it may be tested for. A tube with only one of the two tags is set aside, not run.",
         "maps": [
          {
           "doctrine": "the content basis (which inputs the value was built from)",
           "analogy": "the label naming the patient and the draw the sample came from"
          },
          {
           "doctrine": "the provenance (where it may flow and how strongly it may be claimed)",
           "analogy": "the handling tag stating what the sample may be tested for"
          },
          {
           "doctrine": "a value missing either side is not fully routed",
           "analogy": "a tube with only one tag is set aside rather than run"
          }
         ],
         "boundary": "The two-label picture only shows that both tags must be present together; it does not establish that a fully labelled sample is correct or safe, and it does not capture how a flow tag tightens as data combines with other data."
        },
        "why_it_matters": "It stops data from being trusted on a partial paper trail, where you know what something is but not where it may go, or where it may go but not what it actually came from.",
        "potential_misread": "That one good label is enough. Knowing the source does not tell you where the value may travel, and a flow tag with no record of inputs is a tag attached to nothing.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-14 joins the two halves the system tracks about any value that travels or gets reused: its content basis, the exact bytes or rows it was computed from, and its provenance, the trust class and ceiling that say where it may flow and how strongly it may be claimed. Carrying only the basis lets a value be cached and rederived correctly but says nothing about whether it is safe to expose; carrying only provenance labels its trust but loses the digest that detects when the underlying source drifts. The principle is that a shard missing either side is not fully routed, because reuse, freshness, and disclosure are three questions the system answers together rather than one at a time. It sits where caching meets information flow: a reused result record, a source import, or a work-landing attempt has to declare what it was built from and what it is allowed to become before anything downstream may trust it.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{routed}(v) \\;\\Rightarrow\\; \\mathrm{basis}(v) \\neq \\emptyset \\;\\wedge\\; \\mathrm{prov}(v) \\neq \\emptyset \\;\\wedge\\; \\big(\\mathrm{drift}(\\mathrm{basis}(v)) \\Rightarrow \\mathrm{recompute}(v)\\big)",
        "reads": "A value is fully routed only when it carries a non-empty basis and a non-empty provenance, and any drift in its basis forces a recompute.",
        "symbols": [
         {
          "sym": "\\mathrm{routed}(v)",
          "meaning": "v is fully routed: it carries both basis and provenance and recomputes on drift"
         },
         {
          "sym": "v",
          "meaning": "a reusable or travelling value (result record, import, work-landing)"
         },
         {
          "sym": "\\mathrm{basis}(v)",
          "meaning": "the declared bytes or rows v was computed from, as a digest"
         },
         {
          "sym": "\\mathrm{prov}(v)",
          "meaning": "v's provenance class and scope limit"
         },
         {
          "sym": "\\mathrm{drift}",
          "meaning": "the basis digest no longer matches its source"
         },
         {
          "sym": "\\mathrm{recompute}(v)",
          "meaning": "v must be re-derived from source rather than reused"
         },
         {
          "sym": "\\emptyset",
          "meaning": "absent: the half was never declared"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The boundary where a value is reused or crosses a flow, between what it was built from and where it may go.",
        "requires": "Both a declared content basis whose drift forces recompute and a provenance class with ceiling carried across every boundary, on the same value.",
        "refuses": "A shard that declares only its basis or only its provenance and is then treated as fully routed.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The source-import protocol brings material in by manifest and digest, so the imported copy carries the content basis that detects source drift and the provenance label that bounds where it may flow, both on the same value before anything downstream reuses it.",
        "refs": [
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A reused result record carries a clean provenance label but no content digest, so it keeps being trusted after the source it was built from has changed underneath it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "macro_projection_import_protocol",
         "durable_agent_work_landing_replay",
         "indirect_prompt_injection_information_flow_policy_replay"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-4",
        "AX-8"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
       "target_kind": "mechanism",
       "target_label": "validates public indirect prompt injection information flow policy replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sleeper memory poisoning quarantine replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      },
      {
       "relation": "governs",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-14.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-14.json"
      }
     ],
     "visible_text_byte_count": 10734
    },
    {
     "object_id": "principle:P-15",
     "id": "P-15",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Keep projections below source authority",
     "relative_href": "docs/doctrine.html#dcard-p-15",
     "read_href": "docs/doctrine.html#dcard-p-15",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-15",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-15.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Generated docs, markdown summaries, route cards, and paper modules may expose a source truth, but they cannot upgrade it.",
     "statement": "Generated docs, markdown summaries, route cards, and paper modules may expose a source truth, but they cannot upgrade it. Recompute from source or demote when the source basis, grammar, or status lattice no longer supports the projection.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-15.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-15"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Generated docs, markdown summaries, route cards, and paper modules may expose a source truth, but they cannot upgrade it. Recompute from source or demote when the source basis, grammar, or status lattice no longer supports the projection.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-4",
           "AX-5",
           "AX-11"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-4",
          "target_kind": "axiom",
          "target_label": "Content-addressed determinism",
          "url": "doctrine.html#dcard-ax-4"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-5",
          "target_kind": "axiom",
          "target_label": "Fail-closed monotone lattice",
          "url": "doctrine.html#dcard-ax-5"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public cold eval honesty bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public governance compilers bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public live source drift bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public saturation engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public market dashboard read model bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-15.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-15.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Keeping a projection below its source does not make the source correct. It only prevents the projection from inventing authority the source never had.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A generated view can show what a source says, but it can never carry more authority than that source. If the source weakens, the view has to be recomputed or marked as lower.",
        "analogy": {
         "text": "A photocopy of a contract can be read and shared, but it does not outrank the signed original. If the original is amended, the old copy stops being authoritative.",
         "maps": [
          {
           "doctrine": "the source truth",
           "analogy": "the signed original contract"
          },
          {
           "doctrine": "the projection held at or below the source",
           "analogy": "the photocopy that can be read but cannot overrule the original"
          },
          {
           "doctrine": "recompute or demote when the source weakens",
           "analogy": "the old copy losing its standing the moment the original is amended"
          }
         ],
         "boundary": "The photocopy picture shows that a view cannot outrank its origin; it does not capture that the view's ceiling is set by several source properties at once, like freshness and provenance, not just by being a copy."
        },
        "why_it_matters": "It stops a polished public page or summary being treated as more trustworthy than the working source it was drawn from.",
        "potential_misread": "That a clear, confident-looking view must be reliable. Its reliability is capped by the source, however good the view looks.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-15 is what stops the website you are reading from becoming an authority in its own right. A generated doc, a card, a route map, or a paper module may expose a source truth, but it can never raise that truth's strength. A projection's ceiling is bounded by the meet of its source's support, freshness, provenance, and grammar validity, so the moment any of those slips, the projection has to recompute from source or demote. This is the principle that lets the system publish freely without the act of publishing inflating what was published. It is also why this page repeatedly tells you what it cannot prove: the page is downstream of its source and inherits that source's limits.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{ceil}(\\mathrm{proj}) \\sqsubseteq \\mathrm{support}(\\mathrm{src}) \\sqcap \\mathrm{fresh}(\\mathrm{src}) \\sqcap \\mathrm{prov}(\\mathrm{src}) \\sqcap \\mathrm{grammar}(\\mathrm{src})",
        "reads": "A projection's ceiling is at most the meet of its source's support, freshness, provenance, and grammar validity; it can expose the source but never upgrade it.",
        "symbols": [
         {
          "sym": "\\mathrm{ceil}",
          "meaning": "the strongest claim the projection may carry"
         },
         {
          "sym": "\\mathrm{proj}",
          "meaning": "a generated view (doc, markdown summary, route card, paper module)"
         },
         {
          "sym": "\\sqsubseteq",
          "meaning": "is at most as strong as, in the authority lattice"
         },
         {
          "sym": "\\mathrm{support}",
          "meaning": "the source's evidence support level"
         },
         {
          "sym": "\\mathrm{src}",
          "meaning": "the source the projection draws from"
         },
         {
          "sym": "\\mathrm{fresh}",
          "meaning": "the source's freshness, whether its basis is still current"
         },
         {
          "sym": "\\mathrm{prov}",
          "meaning": "the source's provenance class and scope limit"
         },
         {
          "sym": "\\mathrm{grammar}",
          "meaning": "the source's grammar validity, whether it is in the executable grammar"
         },
         {
          "sym": "\\sqcap",
          "meaning": "meet: the weakest of the components"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The source-and-projection boundary, between a truth and the views drawn from it.",
        "requires": "Holding a projection at or below its source's support, freshness, provenance, and grammar, and recomputing or demoting when any slips.",
        "refuses": "A generated page, card, or summary that claims more authority than the source it summarises.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The source-import protocol brings material in by manifest and digest and never lets the imported copy outrank the original it was projected from.",
        "refs": [
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A polished summary page is cited as the authority for a number, even after the source it was generated from has drifted underneath it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "macro_projection_import_protocol",
         "world_model_projection_drift_control_room"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-4",
        "AX-5",
        "AX-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-15.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-15.json"
      }
     ],
     "visible_text_byte_count": 9831
    },
    {
     "object_id": "principle:P-16",
     "id": "P-16",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Bind authority to transaction scope",
     "relative_href": "docs/doctrine.html#dcard-p-16",
     "read_href": "docs/doctrine.html#dcard-p-16",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-16",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-16.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Mutation authority is not merely who can touch a file.",
     "statement": "Mutation authority is not merely who can touch a file. It is the combination of proof-derived permission, claimed write scope, current parent state, compensation, and landing evidence for this transaction.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-16.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-16"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Mutation authority is not merely who can touch a file. It is the combination of proof-derived permission, claimed write scope, current parent state, compensation, and landing evidence for this transaction.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-3",
           "AX-9"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-3",
          "target_kind": "axiom",
          "target_label": "Authority by derivation, not possession",
          "url": "doctrine.html#dcard-ax-3"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-9",
          "target_kind": "axiom",
          "target_label": "Compensable transactional effects",
          "url": "doctrine.html#dcard-ax-9"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
          "target_kind": "mechanism",
          "target_label": "validates public concurrency mission control",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
          "target_kind": "mechanism",
          "target_label": "validates public work landing replay contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
          "target_kind": "mechanism",
          "target_label": "validates public mcp tool authority replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public mission transaction bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
          "target_kind": "mechanism",
          "target_label": "validates synthetic governed mutation authorization",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization"
         },
         {
          "relation": "governs",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-16.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-16.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Binding one write to its transaction scope does not make P-16 a witness for AX-3 or AX-9, and the example does not establish that every write path in the system carries the full bundle; it operationalises specific grounding obligations and inherits no authority beyond them.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Being allowed to change something is not one thing, like having access to a file. It is several conditions holding together for this exact change: worked-out permission, the agreed limits of what you may touch, the current state still matching what you expected, a way to undo, and a record that it landed.",
        "analogy": {
         "text": "A bank wire is not sent just because you are a signatory. The transfer goes through only when the amount is within your approved limit, the account still shows the balance you expected, and there is a way to reverse it if it was wrong.",
         "maps": [
          {
           "doctrine": "proof-derived permission, not standing access",
           "analogy": "the bank checking this transfer against your approved limits, not just that you are a signatory"
          },
          {
           "doctrine": "current parent state matching what was expected",
           "analogy": "the account still showing the balance you expected before the wire goes out"
          },
          {
           "doctrine": "compensation, a way back from the effect",
           "analogy": "a reversal path if the transfer turns out to be wrong"
          }
         ],
         "boundary": "The wire picture shows that several conditions must hold together for one transfer; it does not establish that any given transfer is correct, and it does not capture the claimed write scope and landing evidence that the rule also requires."
        },
        "why_it_matters": "It closes the gap where someone with broad standing access is treated as authorized to make a change, even though nothing checked the specific change against its scope, the current state, and a way to undo it.",
        "potential_misread": "That having access means you are authorized to change something. Access is one input; permission still has to be worked out for this exact change, against the state you actually find.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-16 turns AX-3 and AX-9 into a single rule about what makes a mutation legitimate. Authority to change something is not who holds a account secret or which tool happens to be reachable; it is a bundle attached to one transaction, derived permission from policy and proof and current world state, a declared write scope the effect must fall inside, the parent state the write expected to find, a compensator or a declared irreversible boundary, and the evidence that the change actually landed. The rule bites because the cheap path is the opposite of all five: act because you can touch the file, on whatever the head is now, with no scope and no way to undo. It connects to the claim and evidence model directly, since each part of the bundle is a check that has to recompute rather than a account secret that gets waved through, and the same admissibility floor applies to a write request that applies to any other claim.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{auth}(m, t) \\iff \\mathrm{derived}(m) \\;\\wedge\\; \\mathrm{effect}(m) \\in \\mathrm{scope}(t) \\;\\wedge\\; \\mathrm{parent}_{\\mathrm{obs}}(t) = \\mathrm{parent}_{\\mathrm{exp}}(m) \\;\\wedge\\; \\mathrm{comp}(m) \\;\\wedge\\; \\mathrm{landed}(m, t)",
        "reads": "A mutation m is authorized within transaction t exactly when its permission is derived rather than possessed, its effect falls inside the transaction's declared write scope, the observed parent state equals the parent the write expected, a compensator or declared irreversible boundary is present, and landing evidence exists for this transaction.",
        "symbols": [
         {
          "sym": "\\mathrm{auth}(m, t)",
          "meaning": "mutation m is authorized within transaction t"
         },
         {
          "sym": "m",
          "meaning": "a proposed mutation (write effect)"
         },
         {
          "sym": "t",
          "meaning": "the transaction the write is bound to"
         },
         {
          "sym": "\\mathrm{derived}(m)",
          "meaning": "permission derived from policy, proof, and world state, not a standing account secret"
         },
         {
          "sym": "\\mathrm{effect}(m)",
          "meaning": "the write effect m would apply"
         },
         {
          "sym": "\\mathrm{scope}(t)",
          "meaning": "the declared write scope of the transaction"
         },
         {
          "sym": "\\mathrm{parent}_{\\mathrm{obs}}(t)",
          "meaning": "the parent state actually observed for the transaction"
         },
         {
          "sym": "\\mathrm{parent}_{\\mathrm{exp}}(m)",
          "meaning": "the parent state the write expected (compare-and-swap base)"
         },
         {
          "sym": "\\mathrm{comp}(m)",
          "meaning": "a declared compensator or irreversible boundary"
         },
         {
          "sym": "\\mathrm{landed}(m, t)",
          "meaning": "evidence that the effect actually landed for this transaction"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The authorization boundary, where a write is about to be allowed against a file or record.",
        "requires": "Binding the write to this transaction as derived permission, declared scope, expected parent state, a compensator or boundary, and landing evidence together.",
        "refuses": "Treating reach or a standing account secret as authority, or writing on whatever the current state is without an expected parent, scope, or way to compensate.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The proof-derived mutation authorization component admits a change only when the authority is derived from policy and proof references for that effect, and rejects a write that leans on a standing account secret, so permission is computed per transaction rather than possessed.",
        "refs": [
         "proof_derived_governed_mutation_authorization"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A write is allowed because the agent already holds a token and the file is reachable, landed against whatever the head is now, with no declared scope and no compensator.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "proof_derived_governed_mutation_authorization",
         "mission_transaction_work_spine",
         "mcp_tool_authority_replay"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-3",
        "AX-9"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mcp tool authority replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
       "target_kind": "mechanism",
       "target_label": "validates synthetic governed mutation authorization",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization"
      },
      {
       "relation": "governs",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-16.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-16.json"
      }
     ],
     "visible_text_byte_count": 11365
    },
    {
     "object_id": "principle:P-17",
     "id": "P-17",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Anchor graph mutations to unique source rows",
     "relative_href": "docs/doctrine.html#dcard-p-17",
     "read_href": "docs/doctrine.html#dcard-p-17",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-17",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-17.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Before adding or removing a lattice edge in a repeated registry, anchor the mutation to the unique source row, target id, and builder route\u2026",
     "statement": "Before adding or removing a lattice edge in a repeated registry, anchor the mutation to the unique source row, target id, and builder route that will consume it. A generated projection, count delta, or nearby repeated key cannot substitute for that row-level basis.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-17.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-17"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "Before adding or removing a lattice edge in a repeated registry, anchor the mutation to the unique source row, target id, and builder route that will consume it. A generated projection, count delta, or nearby repeated key cannot substitute for that row-level basis.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-4",
           "AX-9",
           "AX-11"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-4",
          "target_kind": "axiom",
          "target_label": "Content-addressed determinism",
          "url": "doctrine.html#dcard-ax-4"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-9",
          "target_kind": "axiom",
          "target_label": "Compensable transactional effects",
          "url": "doctrine.html#dcard-ax-9"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
          "target_kind": "mechanism",
          "target_label": "validates public concurrency mission control",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
          "target_kind": "mechanism",
          "target_label": "validates public work landing replay contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine grammar bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
          "target_kind": "mechanism",
          "target_label": "validates public source projection imports",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public mission transaction bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-17.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-17.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Anchoring a mutation to its source row does not make the edge itself correct, nor does it make this principle a witness for AX-4, AX-9, or AX-11; it operationalises specific obligations of those axioms and inherits no authority beyond them. The example illustrates the rule for a reader and never counts as support that the obligations are covered.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Before adding or removing a connection in a list of relationships, you must point to the exact source entry that names that relationship and the place that will use it. A nearby similar entry, or a count that went up by one, is not good enough to act on.",
        "analogy": {
         "text": "Before adding a connecting flight to a booking, the agent has to point to the exact scheduled service for that date and route. A flight that merely has a similar number, or the fact that the timetable now lists one more service, does not justify booking the seat.",
         "maps": [
          {
           "doctrine": "the unique source row that names the relation",
           "analogy": "the exact scheduled service for that date and route"
          },
          {
           "doctrine": "a nearby repeated key or count delta is not a substitute",
           "analogy": "a similar flight number or a timetable that lists one more service is not the booking"
          },
          {
           "doctrine": "the target id and builder route the edge will feed",
           "analogy": "the specific booking the connecting seat is attached to"
          }
         ],
         "boundary": "The booking picture only shows that a connection must trace to one exact entry, not an approximate one; it does not establish that the entry itself is right, and it does not capture every check a real edge addition runs."
        },
        "why_it_matters": "In a list where many entries look alike, acting on a near-match or a changed total quietly wires up the wrong relationship, and the mistake is hard to find later.",
        "potential_misread": "That a close match or a count that moved confirms the right connection. Only the exact entry that names the relationship does; everything else is a guess that happens to look right.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-17 governs the write side of the lattice: the moment an edge is added to or removed from a registry whose rows look alike, the mutation has to point at the one source row, target id, and builder route that will actually consume it. It bites because repeated registries are exactly where a builder is tempted to act on the cheap signal instead of the basis: a generated count went up, a nearby key has the same shape, a projection already shows the edge, so the edge must be real. P-17 composes three obligations to close that gap; the row's content basis must be declared and recomputed when it drifts, the mutation must declare its effect boundary and check the parent state it claims to write under a single owner, and the resulting edge must be admissible under the grammar with result records rather than asserted in prose. It connects to the claim and authority model directly: an edge is a claim about a relationship, so it inherits the floor that a claim is admissible only against a recomputed basis, and a generated view of the registry can expose that basis but never stand in for it.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{mutate}(e) \\;\\Rightarrow\\; \\exists!\\, r.\\ \\mathrm{row}(e) = r \\;\\wedge\\; \\mathrm{declared}(\\mathrm{basis}(r)) \\;\\wedge\\; \\mathrm{parent}(e) = \\mathrm{cas}(r) \\;\\wedge\\; \\mathrm{grammar}(e)",
        "reads": "An edge mutation is admitted only when exactly one source row carries it, that row's content basis is declared, the mutation writes against the row's current parent state, and the resulting edge is grammar-admissible.",
        "symbols": [
         {
          "sym": "\\mathrm{mutate}(e)",
          "meaning": "an edge is added to or removed from a registry of look-alike rows"
         },
         {
          "sym": "e",
          "meaning": "the lattice edge being added or removed"
         },
         {
          "sym": "\\exists!\\, r",
          "meaning": "exactly one source row"
         },
         {
          "sym": "\\mathrm{row}(e)",
          "meaning": "the source row that carries the edge"
         },
         {
          "sym": "\\mathrm{declared}(\\mathrm{basis}(r))",
          "meaning": "the row's content basis is declared and recomputed on drift (AX-4)"
         },
         {
          "sym": "\\mathrm{parent}(e)",
          "meaning": "the parent state the writer commits the edge against"
         },
         {
          "sym": "\\mathrm{cas}(r)",
          "meaning": "the row's current compare-and-swap parent state under a single writer (AX-9)"
         },
         {
          "sym": "\\mathrm{grammar}(e)",
          "meaning": "the resulting edge is admissible under the executable grammar (AX-11)"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The mutation boundary, where an edge enters or leaves a registry of look-alike rows.",
        "requires": "A unique source row with a declared content basis, a mutation scoped to that row's parent state under a single writer, and grammar admissibility for the resulting edge.",
        "refuses": "Anchoring an edge to a generated projection, a count delta, or a nearby repeated key instead of the row that owns it.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The source-import protocol brings each relation in against a named manifest row and digest and writes it under a declared boundary, so an edge lands only where a current source row carries it rather than where a count or a similar key suggests it.",
        "refs": [
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A builder adds a lattice edge because the generated registry now reports one more neighbour, treating the count delta as the basis rather than finding the source row that would justify the edge.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "macro_projection_import_protocol",
         "mission_transaction_work_spine",
         "concurrency_mission_control"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-4",
        "AX-9",
        "AX-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-17.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-17.json"
      }
     ],
     "visible_text_byte_count": 11118
    },
    {
     "object_id": "principle:P-18",
     "id": "P-18",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Require fan-in before activation",
     "relative_href": "docs/doctrine.html#dcard-p-18",
     "read_href": "docs/doctrine.html#dcard-p-18",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-18",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-18.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "A staged law, standard, component, or projection is not active authority until its owner boundary, source row, generated parity, validation\u2026",
     "statement": "A staged law, standard, component, or projection is not active authority until its owner boundary, source row, generated parity, validation result record, and status transition have landed in the same governed transaction or an explicit blocked result record preserves the frontier. A projection generated from source authority held dirty by another live owner is still outside fan-in; request handoff, owner landing, or a blocked result record before treating it as current. Partial admission must remain residual pressure.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-18.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-18"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "A staged law, standard, component, or projection is not active authority until its owner boundary, source row, generated parity, validation result record, and status transition have landed in the same governed transaction or an explicit blocked result record preserves the frontier. A projection generated from source authority held dirty by another live owner is still outside fan-in; request handoff, owner landing, or a blocked result record before treating it as current. Partial admission must remain residual pressure.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-3",
           "AX-9",
           "AX-11",
           "AX-12"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-3",
          "target_kind": "axiom",
          "target_label": "Authority by derivation, not possession",
          "url": "doctrine.html#dcard-ax-3"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-9",
          "target_kind": "axiom",
          "target_label": "Compensable transactional effects",
          "url": "doctrine.html#dcard-ax-9"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
          "target_kind": "mechanism",
          "target_label": "validates public launch claim language gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
          "target_kind": "mechanism",
          "target_label": "validates public concurrency mission control",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
          "target_kind": "mechanism",
          "target_label": "validates public work landing replay contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine grammar bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-18.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-18.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Requiring the components to fan in before activation does not establish the staged change correct, complete, or safe; it only fixes when the change is allowed to count as authority. This object and its example are reader illustration and never compute support for the axioms that ground the principle.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Something new does not start carrying authority just because a draft of it has appeared. All the required pieces, who owns it, the exact source entry, the matching generated copy, a passing check, and the recorded change of status, have to land together in one step. Until then it is still pending, not in force.",
        "analogy": {
         "text": "A new bylaw is not in force the moment someone tables a draft. It takes effect only when it is voted in, signed, recorded in the register, and its status is formally changed in one sitting. A draft circulating in the room is still a proposal, not the rule.",
         "maps": [
          {
           "doctrine": "the required pieces landing in one governed transaction",
           "analogy": "the bylaw being voted, signed, registered, and status-changed in one sitting"
          },
          {
           "doctrine": "a staged item is not yet active authority",
           "analogy": "a tabled draft is still a proposal, not the rule"
          },
          {
           "doctrine": "partial admission stays residual pressure",
           "analogy": "a draft that passed some steps but was never recorded is held over, not enacted"
          }
         ],
         "boundary": "The bylaw picture shows that authority needs all the steps to land together before it counts; it does not establish that an enacted rule is wise or correct, and it does not capture the blocked-record case where a partial item is explicitly held without losing its place."
        },
        "why_it_matters": "It stops a half-finished draft from being treated as the live rule, where some steps are done and the rest are assumed, so nobody is acting on something that never actually took effect.",
        "potential_misread": "That once the content is drafted and looks complete, it is in force. The content is only in force when ownership, source, generated copy, check, and status change all land together.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-18 is the rule that stops a half-finished change from being treated as done. A staged law, standard, component, or generated view is not active authority until its owner boundary, its source row, its generated parity, its validation record, and its status change have all landed inside the same governed transaction, or until an explicit blocked record holds the frontier open instead. The hard case is the one builders trip over: a view generated from a source that another live owner is still holding dirty is still outside fan-in, because the basis under it can move before it lands, so the honest move is to request handoff, wait for the owner to land, or write the blocked record rather than treat the view as current. This connects the claim, evidence, and authority model at the moment of admission: derived authority must arrive as one compare-and-swap, single-writer transaction (AX-3, AX-9), carry its grammar and records (AX-11), and the system holds its own staged doctrine to the same gate (AX-12), so any component admitted before the others is residual pressure, not authority.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{active}(x) \\;\\Rightarrow\\; \\bigsqcap_{c \\in \\mathrm{req}(x)} \\mathrm{landed}(c, \\tau) = \\top \\;\\wedge\\; \\mathrm{single}(\\tau); \\quad \\mathrm{else}\\ x \\in R \\;\\vee\\; \\mathrm{blocked}(x)",
        "reads": "A work item carries active authority only when every required dependency has landed under a single transaction; otherwise it stays as residual pressure or blocked.",
        "symbols": [
         {
          "sym": "\\mathrm{active}(x)",
          "meaning": "x carries active authority"
         },
         {
          "sym": "x",
          "meaning": "a work item"
         },
         {
          "sym": "\\bigsqcap",
          "meaning": "the meet taken over the required dependencies"
         },
         {
          "sym": "c",
          "meaning": "a required dependency"
         },
         {
          "sym": "\\mathrm{req}(x)",
          "meaning": "the dependencies x requires"
         },
         {
          "sym": "\\mathrm{landed}(c, \\tau)",
          "meaning": "dependency c has landed in transaction tau"
         },
         {
          "sym": "\\tau",
          "meaning": "the activating transaction"
         },
         {
          "sym": "\\top",
          "meaning": "top: fully landed"
         },
         {
          "sym": "\\mathrm{single}(\\tau)",
          "meaning": "a single transaction covers the fan-in"
         },
         {
          "sym": "R",
          "meaning": "residual pressure: not yet active"
         },
         {
          "sym": "\\mathrm{blocked}(x)",
          "meaning": "x is blocked"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The activation boundary, where a staged change is tempted to count as authority before all of it has landed.",
        "requires": "Owner boundary, source row, generated parity, validation record, and status change all landing in one single-writer governed transaction, or an explicit blocked record that holds the frontier.",
        "refuses": "Treating a partially admitted change, or a view built on a source another owner still holds dirty, as active authority.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The mission transaction spine lands a multi-step change as one saga with a compare-and-swap parent and a single-writer constraint, so a staged item counts as active only after the whole transaction commits rather than at the first partial step.",
        "refs": [
         "mission_transaction_work_spine"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A generated card is treated as live the moment it renders, while the source it was built from is still held dirty by another owner and has not landed, so the basis under the card can still move.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "mission_transaction_work_spine",
         "concurrency_mission_control",
         "proof_derived_governed_mutation_authorization"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-3",
        "AX-9",
        "AX-11",
        "AX-12"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-18.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-18.json"
      }
     ],
     "visible_text_byte_count": 11502
    },
    {
     "object_id": "principle:P-19",
     "id": "P-19",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Classify residual pressure before wiring",
     "relative_href": "docs/doctrine.html#dcard-p-19",
     "read_href": "docs/doctrine.html#dcard-p-19",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-19",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-19.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "A residual is a typed pressure route, not an edge.",
     "statement": "A residual is a typed pressure route, not an edge. Before wiring a missing neighbour, classify the declared domain, source row, target resolution, fillability, evidence floor, and scope boundary. A candidate route, generated neighbour hint, basename match, singleton match, or stale projection row is still pressure; it becomes an edge only when the current source authority row names the relation and the target resolves under the builder. Bidirectional system representation follows the same floor: principle-to-system edges must be source-derived, and system-to-principle evidence may refine governed ids only when current source rows name the relation. Neither direction is support proof, projection authority, or permission to launder residual pressure into an edge. If the system cannot name the target from source authority, keep the gap residual and make the re-entry computable instead of inventing a relationship or whitening the health card.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-19.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-19"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "A residual is a typed pressure route, not an edge. Before wiring a missing neighbour, classify the declared domain, source row, target resolution, fillability, evidence floor, and scope boundary. A candidate route, generated neighbour hint, basename match, singleton match, or stale projection row is still pressure; it becomes an edge only when the current source authority row names the relation and the target resolves under the builder. Bidirectional system representation follows the same floor: principle-to-system edges must be source-derived, and system-to-principle evidence may refine governed ids only when current source rows name the relation. Neither direction is support proof, projection authority, or permission to launder residual pressure into an edge. If the system cannot name the target from source authority, keep the gap residual and make the re-entry computable instead of inventing a relationship or whitening the health card.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-5",
           "AX-6",
           "AX-11"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-5",
          "target_kind": "axiom",
          "target_label": "Fail-closed monotone lattice",
          "url": "doctrine.html#dcard-ax-5"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-6",
          "target_kind": "axiom",
          "target_label": "Open-world epistemics",
          "url": "doctrine.html#dcard-ax-6"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine fact claim audit",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine grammar bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
          "target_kind": "mechanism",
          "target_label": "validates public pattern bindings",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
          "target_kind": "mechanism",
          "target_label": "validates ring2 diagnostic evidence membrane",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
          "target_kind": "mechanism",
          "target_label": "validates public self ignorance coverage ledger",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-19.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-19.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Classifying a residual does not resolve it. The gap stays open and computable until a source row names the relation; the classification just stops it from being faked.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A missing link in the map is not an empty space to fill in; it is a noted gap with a type. You only draw the link once a current source actually names it and the target really exists.",
        "analogy": {
         "text": "A transit map does not draw a line between two stations just because they sit near each other. The line goes in only when a real service runs it.",
         "maps": [
          {
           "doctrine": "the missing relation as typed residual pressure",
           "analogy": "a known gap on the map, marked but not yet a line"
          },
          {
           "doctrine": "the edge admitted only when a source names it and the target resolves",
           "analogy": "the line drawn only when a real, scheduled service connects the stations"
          }
         ],
         "boundary": "The transit-map picture shows that a connection needs a real service, not nearness; it does not capture the typed record the gap carries while it waits, which is more than a blank."
        },
        "why_it_matters": "It keeps the system's own map honest as it grows, instead of inventing connections that make a diagram look complete.",
        "potential_misread": "That a plausible-looking connection is a real one. Nearness or a shared name is pressure to check, not a link.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-19 is the discipline that keeps the system's own map honest as it grows. A missing neighbour in the lattice is a typed residual pressure, not a fact: before anyone wires it, classify the declared domain, the source row, the target resolution, the fillability, the evidence floor, and the scope boundary. A candidate route, a basename match, a singleton guess, or a stale projection row is still pressure; it becomes an edge only when a current source row names the relation and the target resolves under the builder. The same floor runs in both directions between the doctrine and the system it governs: a law constrains the system through source-derived edges, and the system can refine a law only through source-owned obligations, witnesses, negative cases, and unfinished-coverage rows. Neither direction is support proof, and neither is permission to launder pressure into an edge or to whiten a health card.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "e \\in E \\;\\Rightarrow\\; \\mathrm{source}(e) \\;\\wedge\\; \\mathrm{resolves}(\\tau(e)); \\quad \\mathrm{else}\\ e \\in R \\;\\wedge\\; \\mathrm{typed}(e)",
        "reads": "An edge is admitted only when a current source row names it and its target resolves under the builder; naming alone does not force admission, and anything short of that is not absence but typed residual pressure in R, carrying its declared domain, evidence floor, and scope boundary until a source row resolves it.",
        "symbols": [
         {
          "sym": "e",
          "meaning": "a candidate relation"
         },
         {
          "sym": "E",
          "meaning": "the admitted edges"
         },
         {
          "sym": "\\mathrm{source}(e)",
          "meaning": "a current source row names the relation"
         },
         {
          "sym": "\\mathrm{resolves}(\\tau(e))",
          "meaning": "the target resolves under the builder"
         },
         {
          "sym": "\\tau(e)",
          "meaning": "the target the relation points at"
         },
         {
          "sym": "R",
          "meaning": "the typed residual-pressure set: pressure, not an edge yet"
         },
         {
          "sym": "\\mathrm{typed}(e)",
          "meaning": "the residual carries a declared domain, source row, target, fillability, evidence floor, and scope boundary"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The time-and-coverage boundary, where the map is tempted to fill a gap it cannot yet justify.",
        "requires": "Classifying a missing neighbour as typed pressure with a declared domain, source row, target resolution, and evidence floor before any wiring.",
        "refuses": "Promoting a guess, a basename match, or a generated hint into an edge, in either direction between doctrine and the system.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The drift control room reports where a projection has wandered from its source as a typed pressure to re-derive, rather than quietly rewriting the edge to make the card look complete.",
        "refs": [
         "world_model_projection_drift_control_room"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A builder adds a lattice edge because two ids share a basename, turning a naming coincidence into a claimed relationship.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "world_model_projection_drift_control_room",
         "self_ignorance_coverage_ledger"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-5",
        "AX-6",
        "AX-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-6",
       "target_kind": "axiom",
       "target_label": "Open-world epistemics",
       "url": "doctrine.html#dcard-ax-6"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
       "target_kind": "mechanism",
       "target_label": "validates public pattern bindings",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "target_kind": "mechanism",
       "target_label": "validates public self ignorance coverage ledger",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-19.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-19.json"
      }
     ],
     "visible_text_byte_count": 11158
    },
    {
     "object_id": "principle:P-20",
     "id": "P-20",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Bind result records before record authority",
     "relative_href": "docs/doctrine.html#dcard-p-20",
     "read_href": "docs/doctrine.html#dcard-p-20",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-20",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-20.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "A doctrine record is not fully active by projection alone.",
     "statement": "A doctrine record is not fully active by projection alone. Bind validator result records, evidence refs, omissions, scope boundaries, and scope limits on the record before treating its JSON, markdown, routing edge, or public copy as current system authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/principles/P-20.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "P-20"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rule",
        "text": "A doctrine record is not fully active by projection alone. Bind validator result records, evidence refs, omissions, scope boundaries, and scope limits on the record before treating its JSON, markdown, routing edge, or public copy as current system authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounded in",
          "ids": [
           "AX-11",
           "AX-12"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounded by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "grounded by",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
          "target_kind": "mechanism",
          "target_label": "validates public launch claim language gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine grammar bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
         },
         {
          "relation": "governs",
          "target_id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
          "target_kind": "mechanism",
          "target_label": "validates public standards meta diagnostics",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics"
         },
         {
          "relation": "governs",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "governs",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "failure guarded by",
          "target_id": "AP-1",
          "target_kind": "anti-principle",
          "target_label": "Fixture-label echo",
          "url": "doctrine.html#dcard-ap-1"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/principles/P-20.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-20.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Binding result records to a doctrine record does not make the record correct, witnessed, or complete; it only stops the record from carrying authority its bound checks do not support. The example illustrates the rule and never counts as support for it.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A record does not become the trusted version just because a readable copy of it exists. The evidence that its checks passed, the references to its evidence, what it leaves out, and how far it is allowed to claim all have to be attached to the record first.",
        "analogy": {
         "text": "A medicine is not cleared for the shelf just because a printed information leaflet for it exists. The test results, the list of what was tested, the known side effects, and the approved use all have to be attached to that medicine before it can be dispensed.",
         "maps": [
          {
           "doctrine": "binding validator results to the record before it is authoritative",
           "analogy": "attaching the test results before the medicine is cleared"
          },
          {
           "doctrine": "evidence refs and stated omissions on the record",
           "analogy": "the list of what was tested and the known side effects travelling with the medicine"
          },
          {
           "doctrine": "the scope limit bound on the record",
           "analogy": "the approved use that limits what the medicine may be dispensed for"
          }
         ],
         "boundary": "The medicine-clearance picture only shows that the supporting records must be attached before use; it does not establish that the underlying tests were good, and it does not capture that a readable leaflet, however well written, never raises what the medicine is cleared to do."
        },
        "why_it_matters": "It stops a nicely formatted record from being treated as the trusted source when the checks, evidence, and limits that would back it have not actually been attached.",
        "potential_misread": "That a clear, complete-looking record is therefore authoritative. The readable copy is a projection; authority comes only from the checks and limits bound to the record, not from how it reads.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "P-20 is the discipline that stops a doctrine record from being trusted just because it exists on disk. A record being present as JSON, a markdown projection, a routing edge, or a line of public copy says nothing about whether it may be read back as current authority; authority is conferred only once the binding set is attached and recomputed: the validator result records, the evidence refs, the declared omissions, the scope boundaries, and the scope limit the record may carry. This is the admissibility floor from AX-1 applied to the system's own doctrine, and AX-12 is why there is no shortcut: a doctrine record is one of the system's own claims, so it passes the same gate it imposes on any external claim, with no meta-layer exemption. The body and the projections inherit nothing from sitting next to a confident heading; until the result records are bound, the record is a projection held below its source, which is exactly why the page you are reading keeps stating what it cannot yet treat as authoritative.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{auth}(r) \\;\\Rightarrow\\; \\mathrm{bound}(r, \\mathrm{rec}) \\;\\wedge\\; \\mathrm{bound}(r, \\mathrm{evid}) \\;\\wedge\\; \\mathrm{bound}(r, \\mathrm{omit}) \\;\\wedge\\; \\mathrm{bound}(r, \\mathrm{anti}) \\;\\wedge\\; \\mathrm{bound}(r, \\mathrm{ceil})",
        "reads": "A doctrine record may be read as current authority only when it carries its bound result records, evidence refs, declared omissions, scope boundaries, and scope limit; missing any of these, it stays a projection below its source.",
        "symbols": [
         {
          "sym": "\\mathrm{auth}(r)",
          "meaning": "reading the record back as current system authority"
         },
         {
          "sym": "r",
          "meaning": "a doctrine record: its JSON, markdown, routing edge, or public copy"
         },
         {
          "sym": "\\mathrm{bound}(r, \\mathrm{rec})",
          "meaning": "the validator result records are bound on the record (AX-11)"
         },
         {
          "sym": "\\mathrm{evid}",
          "meaning": "the evidence refs bound on the record"
         },
         {
          "sym": "\\mathrm{omit}",
          "meaning": "the declared omissions bound on the record"
         },
         {
          "sym": "\\mathrm{anti}",
          "meaning": "the scope boundaries bound on the record"
         },
         {
          "sym": "\\mathrm{ceil}",
          "meaning": "the scope limit, the scope limit the record may carry (AX-12)"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The record-and-authority boundary, between a doctrine record existing and being read back as current authority.",
        "requires": "Binding the validator result records, evidence refs, omissions, scope boundaries, and scope limit on a record before any of its projections is treated as current authority.",
        "refuses": "Reading a record's JSON, markdown, routing edge, or public copy as authoritative on the strength of its existence, before the result records are bound.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The launch wording gate runs the same claim-language floor over the system's own doctrine copy that it imposes on any other shard, so a record's public line cannot carry authority its bound checks do not support.",
        "refs": [
         "batch12_release_claim_language_gate"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A generated doctrine card is cited as the current authority for a rule because the JSON exists and the heading reads confidently, with no validator result records, omissions, or scope limit bound behind it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "batch12_release_claim_language_gate",
         "executable_doctrine_grammar",
         "doctrine_fact_claim_audit"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-11",
        "AX-12"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
       "target_kind": "mechanism",
       "target_label": "validates public standards meta diagnostics",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics"
      },
      {
       "relation": "governs",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-1",
       "target_kind": "anti-principle",
       "target_label": "Fixture-label echo",
       "url": "doctrine.html#dcard-ap-1"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-20.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-20.json"
      }
     ],
     "visible_text_byte_count": 10855
    },
    {
     "object_id": "axiom:AX-1",
     "id": "AX-1",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Derivation before assertion",
     "relative_href": "docs/doctrine.html#dcard-ax-1",
     "read_href": "docs/doctrine.html#dcard-ax-1",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-1",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-1.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "For any claim phi over basis B, admissibility requires a derivation certificate c and checker K such that K(B,c,phi)=accept; strength(phi)\u2026",
     "statement": "For any claim phi over basis B, admissibility requires a derivation certificate c and checker K such that K(B,c,phi)=accept; strength(phi) <= strength(K(B,c,phi)). Bare assertion has bottom evidence.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-1.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-1"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "For any claim phi over basis B, admissibility requires a derivation certificate c and checker K such that K(B,c,phi)=accept; strength(phi) <= strength(K(B,c,phi)). Bare assertion has bottom evidence.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-1",
           "P-2"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-1",
           "AP-12",
           "AP-15"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-1",
          "target_kind": "principle",
          "target_label": "Recompute, do not echo",
          "url": "doctrine.html#dcard-p-1"
         },
         {
          "relation": "grounds",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-1",
          "target_kind": "anti-principle",
          "target_label": "Fixture-label echo",
          "url": "doctrine.html#dcard-ap-1"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-12",
          "target_kind": "anti-principle",
          "target_label": "Synthetic system substitution",
          "url": "doctrine.html#dcard-ap-12"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-15",
          "target_kind": "anti-principle",
          "target_label": "Mechanism theater",
          "url": "doctrine.html#dcard-ap-15"
         },
         {
          "relation": "witnessed by",
          "target_id": "agent_sabotage_scheming_monitor_replay",
          "target_kind": "component",
          "target_label": "Agent Sabotage Scheming Monitor Replay",
          "url": "components.html#component-agent_sabotage_scheming_monitor_replay"
         },
         {
          "relation": "witnessed by",
          "target_id": "belief_state_process_reward_replay",
          "target_kind": "component",
          "target_label": "Belief State Process Reward Replay",
          "url": "components.html#component-belief_state_process_reward_replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-1.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-1.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "One checker catching one class of label echo does not establish a claim true in general, and admitting this law is separate from how well it is witnessed: support is computed obligation by obligation, elsewhere. A passing check caps what a claim may say; it does not bless it.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A result only counts when the inputs it came from and an independent check can reproduce it. A confident statement on its own is worth nothing.",
        "analogy": {
         "text": "A sports scoreboard is not trusted just because it shows a number. The game log has to list the plays that add up to that score.",
         "maps": [
          {
           "doctrine": "the claim",
           "analogy": "the number on the scoreboard"
          },
          {
           "doctrine": "the inputs the claim was computed from",
           "analogy": "the plays recorded in the game log"
          },
          {
           "doctrine": "the checker that recomputes it",
           "analogy": "adding up the plays in the game log"
          }
         ],
         "boundary": "The game log shows that a score can be recomputed; it does not make a score true in every possible game, and one matching log is bounded evidence the whole season was scored correctly."
        },
        "why_it_matters": "It lets the system treat 'a model said so' or 'a record is labelled passed' as zero evidence until something independent recreates the answer.",
        "potential_misread": "That a checked result is therefore certain. The check bounds how much the result can claim; it does not bless it as true everywhere.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "Microcosm starts from the position that an output is worth nothing until it can be reconstructed. A claim over some basis is admissible only if it arrives with a derivation certificate and a checker that recomputes the verdict and accepts it, and the strength the claim may carry is capped at the strength of that check. The direction matters: the check is what admission requires, not a seal that makes the claim true. A confident sentence, a repeated fixture label, or a model's own answer sits at the bottom of the evidence order until something independent rederives it. This is the floor the rest of the doctrine stands on: it is what lets the system treat \"a model said so\" and \"a record is labelled passed\" as zero evidence rather than weak evidence.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{adm}(\\varphi, B) \\;\\Rightarrow\\; \\exists\\, c, K.\\ K(B, c, \\varphi) = \\mathsf{accept} \\;\\wedge\\; \\mathrm{strength}(\\varphi) \\sqsubseteq \\mathrm{strength}(K(B, c, \\varphi)); \\quad \\mathrm{bare}(\\varphi) \\Rightarrow \\mathrm{strength}(\\varphi) = \\bot",
        "reads": "A claim over a basis is admissible only if some certificate and checker accept it, with the claim's strength capped by the strength of that check; a claim that arrives with no certificate sits at the bottom of the evidence order. The condition is necessary, not sufficient: passing a check is what admission requires, never a promise that the claim is true.",
        "symbols": [
         {
          "sym": "\\mathrm{adm}(\\varphi, B)",
          "meaning": "the claim is admissible over its basis"
         },
         {
          "sym": "\\varphi",
          "meaning": "a claim"
         },
         {
          "sym": "B",
          "meaning": "the basis it is computed from"
         },
         {
          "sym": "c",
          "meaning": "a derivation certificate"
         },
         {
          "sym": "K",
          "meaning": "a checker that recomputes the verdict"
         },
         {
          "sym": "\\mathrm{strength}",
          "meaning": "the position a claim or a check holds in the evidence order"
         },
         {
          "sym": "\\sqsubseteq",
          "meaning": "no stronger than"
         },
         {
          "sym": "\\mathrm{bare}(\\varphi)",
          "meaning": "a bare assertion: the claim presented with no certificate"
         },
         {
          "sym": "\\bot",
          "meaning": "bottom: the lowest position in the evidence order"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "When a stated result is allowed to count as evidence at all.",
        "requires": "A basis, a derivation certificate, and a checker that recomputes the verdict and accepts it.",
        "refuses": "An asserted label treated as truth.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "A replay reads a fixture that declares a monitor caught scheming, recomputes the verdict from the underlying trace, and rejects the run when the declared verdict does not derive from the lower-level evidence.",
        "refs": [
         "agent_sabotage_scheming_monitor_replay"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A page prints \"passed\" because a result record's title says so, with nothing recomputing the verdict from the evidence beneath it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "agent_sabotage_scheming_monitor_replay",
         "belief_state_process_reward_replay"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-1",
        "P-2"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-1",
        "AP-12",
        "AP-15"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "grounds",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-1",
       "target_kind": "anti-principle",
       "target_label": "Fixture-label echo",
       "url": "doctrine.html#dcard-ap-1"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-12",
       "target_kind": "anti-principle",
       "target_label": "Synthetic system substitution",
       "url": "doctrine.html#dcard-ap-12"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-15",
       "target_kind": "anti-principle",
       "target_label": "Mechanism theater",
       "url": "doctrine.html#dcard-ap-15"
      },
      {
       "relation": "witnessed by",
       "target_id": "agent_sabotage_scheming_monitor_replay",
       "target_kind": "component",
       "target_label": "Agent Sabotage Scheming Monitor Replay",
       "url": "components.html#component-agent_sabotage_scheming_monitor_replay"
      },
      {
       "relation": "witnessed by",
       "target_id": "belief_state_process_reward_replay",
       "target_kind": "component",
       "target_label": "Belief State Process Reward Replay",
       "url": "components.html#component-belief_state_process_reward_replay"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-1.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-1.json"
      }
     ],
     "visible_text_byte_count": 8868
    },
    {
     "object_id": "axiom:AX-2",
     "id": "AX-2",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Kernelized verification",
     "relative_href": "docs/doctrine.html#dcard-ax-2",
     "read_href": "docs/doctrine.html#dcard-ax-2",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-2",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-2.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Trusted claims are decided by a small checker K over certificates c; producers emit c and K decides.",
     "statement": "Trusted claims are decided by a small checker K over certificates c; producers emit c and K decides.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-2.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-2"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "Trusted claims are decided by a small checker K over certificates c; producers emit c and K decides.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-3"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-2",
           "AP-15"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-3",
          "target_kind": "principle",
          "target_label": "Concentrate trust in small checkers",
          "url": "doctrine.html#dcard-p-3"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-2",
          "target_kind": "anti-principle",
          "target_label": "Producer trust",
          "url": "doctrine.html#dcard-ap-2"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-15",
          "target_kind": "anti-principle",
          "target_label": "Mechanism theater",
          "url": "doctrine.html#dcard-ap-15"
         },
         {
          "relation": "witnessed by",
          "target_id": "certificate_kernel_execution_lab",
          "target_kind": "component",
          "target_label": "Certificate Kernel Execution Lab",
          "url": "components.html#component-certificate_kernel_execution_lab"
         },
         {
          "relation": "witnessed by",
          "target_id": "formal_math_lean_proof_witness",
          "target_kind": "component",
          "target_label": "Formal Math Lean Proof Witness",
          "url": "components.html#component-formal_math_lean_proof_witness"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-2.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-2.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "A small checker accepting one certificate proves only that this certificate passed this checker; it does not establish the producer is correct in general, that the checker covers every claim the producer can make, or that the kernel is itself bug-free. The scope of the check is the ceiling, and this reader illustration carries no support weight on its own.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A claim counts as trusted only when a small, separate check re-derives it from the evidence presented with it. The thing that produced the answer never approves its own answer, however capable it is. A claim is only as strong as what that small check actually covered.",
        "analogy": {
         "text": "At a secure building, the person who printed a visitor pass does not get to wave themselves in; a small front desk checks the pass against its own list and decides entry, and only what the desk actually checks counts.",
         "maps": [
          {
           "doctrine": "the small separate checker K that decides",
           "analogy": "the front desk that checks the pass and decides entry"
          },
          {
           "doctrine": "the producer that emitted the certificate, kept outside the trusted base",
           "analogy": "the person who printed the pass, who cannot approve their own entry"
          },
          {
           "doctrine": "the certificate the checker reads",
           "analogy": "the pass presented at the desk"
          },
          {
           "doctrine": "claim strength is capped by the checker's scope, not the producer's reputation",
           "analogy": "you get in only as far as what the desk actually verifies, not how official the pass looks"
          }
         ],
         "boundary": "The desk shows that the pass-printer cannot self-admit and that trust sits with the checker; it does not establish that the desk's list is complete, that every visitor was checked correctly, or that one admitted visitor means the whole building's access is sound."
        },
        "why_it_matters": "It keeps the part you have to audit small and fixed even as the systems generating answers grow larger and faster, so a clever or broken producer cannot quietly widen what gets accepted.",
        "potential_misread": "That a powerful, confident producer can be trusted to vouch for its own output, so the small separate checking step is optional once the output looks authoritative.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AX-2 says where the trust lives, not just that a check happened. The thing allowed to decide a claim is a small, separately maintained checker K that reads a certificate; the producer that emitted the certificate, however large, fast, or capable, is outside the trusted base and gets no vote on its own output. This is the architecture that makes AX-1's floor cheap to believe: shrinking the decider to a small K means the part you have to audit stays small even as the producers around it grow, so a clever or broken producer cannot quietly widen what counts as accepted. The bite is that confidence does not transfer from producer to verdict; an answer is trusted to the extent a small checker rederived it, and the strength of any claim is capped by the scope of that checker rather than the reputation of whatever generated the certificate.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{trust}(\\varphi) \\;\\Rightarrow\\; \\exists\\, c.\\ K(c) = \\mathsf{accept} \\;\\wedge\\; K \\neq \\mathrm{producer}(c) \\;\\wedge\\; \\mathrm{small}(K)",
        "reads": "A claim is trusted only when some certificate is accepted by the designated checker, the checker is not the thing that produced the certificate, and the checker is small enough to audit and rerun.",
        "symbols": [
         {
          "sym": "\\mathrm{trust}(\\varphi)",
          "meaning": "the claim is trusted"
         },
         {
          "sym": "\\varphi",
          "meaning": "a claim seeking trust"
         },
         {
          "sym": "c",
          "meaning": "a certificate a producer emits"
         },
         {
          "sym": "K",
          "meaning": "the small checker that decides"
         },
         {
          "sym": "\\mathrm{producer}(c)",
          "meaning": "the component that generated c, kept outside the trusted base"
         },
         {
          "sym": "\\mathrm{small}(K)",
          "meaning": "the checker is small enough to audit and rerun"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "Where trust is concentrated when a claim is decided: in the small checker, not the producer.",
        "requires": "A small checker that decides over a certificate, kept separate from the producer that emitted it.",
        "refuses": "Producer trust replacing checker trust.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The certificate kernel lab keeps the part that emits certificates separate from a small checker that decides them, and a companion Lean witness compiles a tiny example through a real verifier whose kernel rejects an invalid proof body rather than trusting that the producer meant well.",
        "refs": [
         "certificate_kernel_execution_lab",
         "formal_math_lean_proof_witness"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A generator's own confidence is taken as the verdict, so a large producer effectively certifies itself and the small checking step is skipped because the output looked authoritative.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "certificate_kernel_execution_lab",
         "formal_math_lean_proof_witness",
         "verifier_lab_kernel"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-3"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-2",
        "AP-15"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-2",
       "target_kind": "anti-principle",
       "target_label": "Producer trust",
       "url": "doctrine.html#dcard-ap-2"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-15",
       "target_kind": "anti-principle",
       "target_label": "Mechanism theater",
       "url": "doctrine.html#dcard-ap-15"
      },
      {
       "relation": "witnessed by",
       "target_id": "certificate_kernel_execution_lab",
       "target_kind": "component",
       "target_label": "Certificate Kernel Execution Lab",
       "url": "components.html#component-certificate_kernel_execution_lab"
      },
      {
       "relation": "witnessed by",
       "target_id": "formal_math_lean_proof_witness",
       "target_kind": "component",
       "target_label": "Formal Math Lean Proof Witness",
       "url": "components.html#component-formal_math_lean_proof_witness"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-2.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-2.json"
      }
     ],
     "visible_text_byte_count": 8827
    },
    {
     "object_id": "axiom:AX-3",
     "id": "AX-3",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Authority by derivation, not possession",
     "relative_href": "docs/doctrine.html#dcard-ax-3",
     "read_href": "docs/doctrine.html#dcard-ax-3",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-3",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-3.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "auth(subject,effect)=F(deref(tokens_presented),policy,proof_refs,world_state); ambient identity is insufficient.",
     "statement": "auth(subject,effect)=F(deref(tokens_presented),policy,proof_refs,world_state); ambient identity is insufficient.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-3.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-3"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "auth(subject,effect)=F(deref(tokens_presented),policy,proof_refs,world_state); ambient identity is insufficient.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-4",
           "P-16",
           "P-18"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-2"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-4",
          "target_kind": "principle",
          "target_label": "Possession is not permission",
          "url": "doctrine.html#dcard-p-4"
         },
         {
          "relation": "grounds",
          "target_id": "P-16",
          "target_kind": "principle",
          "target_label": "Bind authority to transaction scope",
          "url": "doctrine.html#dcard-p-16"
         },
         {
          "relation": "grounds",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-2",
          "target_kind": "anti-principle",
          "target_label": "Producer trust",
          "url": "doctrine.html#dcard-ap-2"
         },
         {
          "relation": "witnessed by",
          "target_id": "proof_derived_governed_mutation_authorization",
          "target_kind": "component",
          "target_label": "Proof Derived Governed Mutation Authorization",
          "url": "components.html#component-proof_derived_governed_mutation_authorization"
         },
         {
          "relation": "witnessed by",
          "target_id": "mcp_tool_authority_replay",
          "target_kind": "component",
          "target_label": "MCP Tool Authority Replay",
          "url": "components.html#component-mcp_tool_authority_replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-3.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-3.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Two authorizers deriving authority for their own effect classes does not establish that every effect in the system is so governed, and these witnesses are inputs to a separately computed support verdict, never support themselves. This reading illustrates the rule and establishes no authority the source does not already carry.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Holding a key or a token is not permission. Permission is worked out for this specific action, at the moment you act, from the rules and the current situation.",
        "analogy": {
         "text": "A hotel key card opens one room for the nights you paid for. Holding a card does not mean every door should open for you.",
         "maps": [
          {
           "doctrine": "the standing account secret",
           "analogy": "holding the key card"
          },
          {
           "doctrine": "authority derived per effect from policy and world-state",
           "analogy": "the lock checking this door, tonight, against the booking"
          }
         ],
         "boundary": "The card-and-lock picture compresses tokens, policy, proof, and the live world-state into one swipe; real authorization weighs all of those, and the analogy does not show that detail."
        },
        "why_it_matters": "It closes the confused-deputy hole, where a component with broad standing power is talked into using it on someone else's behalf.",
        "potential_misread": "That a valid account secret is enough. The account secret is only one input; permission still has to be derived for the exact action.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "Microcosm refuses to treat a account secret as the thing that grants power. Authority for a subject to cause an effect is computed at the point of action from the tokens actually dereferenced, the governing policy, the proof references, and the current world-state, so that ambient identity, a long-lived key, or simply having a tool reachable confers nothing on its own. This is the claim and evidence model applied to action rather than to assertion: just as a label is bottom evidence until something recomputes it, a account secret is bottom authority until a derivation over policy and proof admits the specific effect. It bites hardest at the confused-deputy boundary, where a component holds broad standing power and is steered into exercising it on someone else's behalf; here the bound on what may happen has to be derived per effect from declared scope and approval, not inherited from whatever the holder could in principle do.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{auth}(u, e) = F\\big(\\mathrm{deref}(\\mathrm{tok}), \\mathrm{policy}, \\mathrm{proof}, \\mathrm{world}\\big); \\quad \\mathrm{holds}(u, \\mathrm{cred}) \\;\\wedge\\; \\mathrm{deref}(\\mathrm{tok}) = \\emptyset \\;\\Rightarrow\\; \\mathrm{auth}(u, e) \\neq \\mathsf{grant}",
        "reads": "Authority for a subject to cause an effect is the output of the authorizer's derivation over the dereferenced tokens, governing policy, proof references, and current world-state; a standing account secret whose tokens dereference to nothing grants nothing. Possession is one input to the derivation, never the derivation.",
        "symbols": [
         {
          "sym": "\\mathrm{auth}(u, e)",
          "meaning": "the authority decision for subject u to cause effect e"
         },
         {
          "sym": "u",
          "meaning": "the subject requesting an effect"
         },
         {
          "sym": "e",
          "meaning": "the effect to be authorized"
         },
         {
          "sym": "F",
          "meaning": "the authorizer's derivation over its inputs"
         },
         {
          "sym": "\\mathrm{deref}(\\mathrm{tok})",
          "meaning": "the tokens actually dereferenced, not merely presented"
         },
         {
          "sym": "\\mathrm{policy}",
          "meaning": "the governing policy"
         },
         {
          "sym": "\\mathrm{proof}",
          "meaning": "the proof references the authorizer derives over"
         },
         {
          "sym": "\\mathrm{world}",
          "meaning": "the current world-state"
         },
         {
          "sym": "\\mathsf{grant}",
          "meaning": "the authorizer's derived decision to permit the effect"
         },
         {
          "sym": "\\mathrm{holds}(u, \\mathrm{cred})",
          "meaning": "the subject merely possesses a standing account secret"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "Whether a subject may cause a given effect, decided per effect at the point of action.",
        "requires": "A derivation over dereferenced tokens, policy, proof references, and world-state, plus declared scope, approval, and side-effect records bounding any tool effect.",
        "refuses": "A standing account secret treated as authority.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The governed-mutation authorizer dereferences proof, policy, and rollback evidence for each requested change and refuses the mutation when authorization does not derive from that evidence, so a standing account secret alone cannot drive the effect.",
        "refs": [
         "proof_derived_governed_mutation_authorization"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A tool call is allowed to write because the caller holds a broad token and the tool is reachable, with no derivation bounding the effect to a declared scope and approval.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "proof_derived_governed_mutation_authorization",
         "mcp_tool_authority_replay"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-4",
        "P-16",
        "P-18"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-2"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-4",
       "target_kind": "principle",
       "target_label": "Possession is not permission",
       "url": "doctrine.html#dcard-p-4"
      },
      {
       "relation": "grounds",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "grounds",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-2",
       "target_kind": "anti-principle",
       "target_label": "Producer trust",
       "url": "doctrine.html#dcard-ap-2"
      },
      {
       "relation": "witnessed by",
       "target_id": "proof_derived_governed_mutation_authorization",
       "target_kind": "component",
       "target_label": "Proof Derived Governed Mutation Authorization",
       "url": "components.html#component-proof_derived_governed_mutation_authorization"
      },
      {
       "relation": "witnessed by",
       "target_id": "mcp_tool_authority_replay",
       "target_kind": "component",
       "target_label": "MCP Tool Authority Replay",
       "url": "components.html#component-mcp_tool_authority_replay"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-3.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-3.json"
      }
     ],
     "visible_text_byte_count": 9005
    },
    {
     "object_id": "axiom:AX-4",
     "id": "AX-4",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Content-addressed determinism",
     "relative_href": "docs/doctrine.html#dcard-ax-4",
     "read_href": "docs/doctrine.html#dcard-ax-4",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-4",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-4.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "a=f(B) and id(a)=H(B); equal B permits reuse; drift(B) forces recompute; missing(B)=bottom.",
     "statement": "a=f(B) and id(a)=H(B); equal B permits reuse; drift(B) forces recompute; missing(B)=bottom.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-4.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-4"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "a=f(B) and id(a)=H(B); equal B permits reuse; drift(B) forces recompute; missing(B)=bottom.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-5",
           "P-14",
           "P-15",
           "P-17"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-4",
           "AP-12",
           "AP-13",
           "AP-17"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-5",
          "target_kind": "principle",
          "target_label": "Cache by content, not by name",
          "url": "doctrine.html#dcard-p-5"
         },
         {
          "relation": "grounds",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         },
         {
          "relation": "grounds",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "grounds",
          "target_id": "P-17",
          "target_kind": "principle",
          "target_label": "Anchor graph mutations to unique source rows",
          "url": "doctrine.html#dcard-p-17"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-4",
          "target_kind": "anti-principle",
          "target_label": "Cache-across-drift",
          "url": "doctrine.html#dcard-ap-4"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-12",
          "target_kind": "anti-principle",
          "target_label": "Synthetic system substitution",
          "url": "doctrine.html#dcard-ap-12"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-13",
          "target_kind": "anti-principle",
          "target_label": "Generated-result record source inversion",
          "url": "doctrine.html#dcard-ap-13"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-17",
          "target_kind": "anti-principle",
          "target_label": "Projection-as-source",
          "url": "doctrine.html#dcard-ap-17"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-4.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-4.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Refusing a digest mismatch at the named import and work-landing surfaces does not establish that every reuse path in the system is basis-keyed. One required part of this axiom, a stable freshness-basis mismatch code for work landing, is recorded as open unfinished coverage rather than claimed, and admission of this axiom as a root law is independent of whether it is witnessed, strong, or complete.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A reused or cached result is the same as before only when the exact inputs it was built from are the same, not when it merely shares a name or location. If the inputs changed, it must be rebuilt; if the inputs can't be found, there is no result at all rather than an optimistic hit.",
        "analogy": {
         "text": "A pharmacy refills a prescription only when it matches the exact current doctor's order, not just because your name is on file; if the order changed it must be re-issued, and if no order can be found you get nothing rather than last time's pills.",
         "maps": [
          {
           "doctrine": "the derived artifact identified by the digest of its declared basis",
           "analogy": "the medication identified by the exact current order it was filled from"
          },
          {
           "doctrine": "equal basis licenses reuse",
           "analogy": "a matching, unchanged order lets the same refill be dispensed"
          },
          {
           "doctrine": "basis drift forces recompute",
           "analogy": "a changed order forces a re-issued prescription, not the old one"
          },
          {
           "doctrine": "a missing basis is bottom, not a hit",
           "analogy": "no findable order means you get nothing, not a guess from history"
          },
          {
           "doctrine": "matching name or path is not matching basis",
           "analogy": "your name being on file is not the same as a matching current order"
          }
         ],
         "boundary": "The pharmacy shows that identity must come from the exact inputs and not the name on file; it does not establish that every counter in the system checks orders this way, and it leaves unaddressed the open coverage gap where some reuse paths are not yet keyed to their inputs."
        },
        "why_it_matters": "It stops a stale or tampered result from passing as fresh just because a name or path matched, which is how a poisoned cache or an out-of-date view sneaks through dressed as a performance win.",
        "potential_misread": "That a matching name or filename is enough to safely reuse a stored result, so re-checking the underlying inputs is just wasted work.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AX-4 fixes what a cached or reused result is allowed to mean. A derived artifact is a function of a declared content basis, and its identity is the digest of that basis, so two results are the same only when the inputs they were computed from are the same, not when they happen to share a name or a path. Equal basis licenses reuse or coalescing; any drift in the basis forces a recompute or a refusal; and a basis that cannot be resolved is bottom rather than an optimistic hit. This is the same admissibility floor as AX-1 pushed down to the build and cache layer: reusing an output because its name matches, while the inputs underneath have changed, is the label-echo failure dressed as a performance optimization, and it is what lets a stale projection or a poisoned cache pass for fresh.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "a = f(B) \\;\\wedge\\; \\mathrm{id}(a) = H(B); \\quad \\mathrm{reuse}(a) \\Rightarrow H(B') = H(B); \\quad H(B') \\neq H(B) \\Rightarrow \\mathrm{recompute}(a); \\quad \\mathrm{missing}(B) \\Rightarrow \\mathrm{reuse}(a) = \\bot",
        "reads": "A derived artifact is a function of its declared basis and is identified by the digest of that basis; reuse is permitted only while the current basis digest equals the stored one; digest drift forces a rederivation; and a basis that cannot be resolved yields no result at all, never an optimistic hit.",
        "symbols": [
         {
          "sym": "a",
          "meaning": "a derived artifact"
         },
         {
          "sym": "f",
          "meaning": "the deterministic derivation from basis to artifact"
         },
         {
          "sym": "B",
          "meaning": "its declared content basis (the inputs it is computed from)"
         },
         {
          "sym": "\\mathrm{id}(a)",
          "meaning": "the artifact's identity"
         },
         {
          "sym": "H(B)",
          "meaning": "the digest of the basis that serves as that identity"
         },
         {
          "sym": "\\mathrm{reuse}(a)",
          "meaning": "serving the stored artifact instead of recomputing"
         },
         {
          "sym": "B'",
          "meaning": "the current basis at reuse time"
         },
         {
          "sym": "\\mathrm{recompute}(a)",
          "meaning": "rederiving the artifact rather than serving the stored copy"
         },
         {
          "sym": "\\mathrm{missing}(B)",
          "meaning": "the declared basis cannot be resolved"
         },
         {
          "sym": "\\bot",
          "meaning": "bottom: no result, rather than a hit"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "When a cached or reused result is allowed to stand in for a fresh derivation.",
        "requires": "A declared content basis, an identity that is the digest of that basis, and a digest comparison that gates reuse against recompute.",
        "refuses": "Caching by name across drift.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The source-import protocol brings material in by manifest and digest, and refuses to reuse an imported copy when the source digest no longer matches, so a changed input cannot pass as an unchanged result.",
        "refs": [
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A pipeline serves a cached output because the requested name matches a prior run, while the inputs that produced it have since changed underneath the key.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "macro_projection_import_protocol",
         "durable_agent_work_landing_replay"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-5",
        "P-14",
        "P-15",
        "P-17"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-4",
        "AP-12",
        "AP-13",
        "AP-17"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "grounds",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "grounds",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "grounds",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-4",
       "target_kind": "anti-principle",
       "target_label": "Cache-across-drift",
       "url": "doctrine.html#dcard-ap-4"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-12",
       "target_kind": "anti-principle",
       "target_label": "Synthetic system substitution",
       "url": "doctrine.html#dcard-ap-12"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-13",
       "target_kind": "anti-principle",
       "target_label": "Generated-result record source inversion",
       "url": "doctrine.html#dcard-ap-13"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-17",
       "target_kind": "anti-principle",
       "target_label": "Projection-as-source",
       "url": "doctrine.html#dcard-ap-17"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-4.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-4.json"
      }
     ],
     "visible_text_byte_count": 9720
    },
    {
     "object_id": "axiom:AX-5",
     "id": "AX-5",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Fail-closed monotone lattice",
     "relative_href": "docs/doctrine.html#dcard-ax-5",
     "read_href": "docs/doctrine.html#dcard-ax-5",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-5",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-5.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "status(composite)=meet(status(parts)); no evidence defaults to blocked; later stages may lower but not raise authority without new derivati\u2026",
     "statement": "status(composite)=meet(status(parts)); no evidence defaults to blocked; later stages may lower but not raise authority without new derivation.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-5.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-5"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "status(composite)=meet(status(parts)); no evidence defaults to blocked; later stages may lower but not raise authority without new derivation.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-2",
           "P-6",
           "P-15",
           "P-19"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-3",
           "AP-14"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "grounds",
          "target_id": "P-6",
          "target_kind": "principle",
          "target_label": "Status fails closed",
          "url": "doctrine.html#dcard-p-6"
         },
         {
          "relation": "grounds",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "grounds",
          "target_id": "P-19",
          "target_kind": "principle",
          "target_label": "Classify residual pressure before wiring",
          "url": "doctrine.html#dcard-p-19"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-3",
          "target_kind": "anti-principle",
          "target_label": "Rank-as-product-score",
          "url": "doctrine.html#dcard-ap-3"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-14",
          "target_kind": "anti-principle",
          "target_label": "Public-authority inflation",
          "url": "doctrine.html#dcard-ap-14"
         },
         {
          "relation": "witnessed by",
          "target_id": "pattern_binding_contract",
          "target_kind": "component",
          "target_label": "Pattern Binding Contract",
          "url": "components.html#component-pattern_binding_contract"
         },
         {
          "relation": "witnessed by",
          "target_id": "proof_diagnostic_evidence_spine",
          "target_kind": "component",
          "target_label": "Proof Diagnostic Evidence Spine",
          "url": "components.html#component-proof_diagnostic_evidence_spine"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-5.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-5.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Defaulting to blocked and refusing silent upgrades does not establish any composite actually correct or complete; it fixes the safe direction of trust, and an obligation with no admissible witness stays blocked rather than becoming true by default.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Something built from parts is only as trusted as its weakest required part. A part with no evidence counts as blocked, not as fine, and a later step can lower trust but never quietly raise it.",
        "analogy": {
         "text": "A plane does not take off because most of the pre-flight checklist passed. One required check left blank keeps it at the gate.",
         "maps": [
          {
           "doctrine": "the composite is only as trusted as its weakest part",
           "analogy": "the flight is grounded by its one failing check"
          },
          {
           "doctrine": "missing evidence defaults to blocked",
           "analogy": "a blank checklist item counts as not-done, not as done"
          }
         ],
         "boundary": "The checklist shows fail-closed status and the weakest-link rule; it does not show that trust here is measured along several separate dimensions at once, not a single pass or fail."
        },
        "why_it_matters": "It makes a gap the safe state, so a launch that finds private-adjacent content or overclaiming language stops instead of shipping.",
        "potential_misread": "That enough green parts can outvote a blocked one. They cannot; the weakest required part sets the ceiling.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AX-5 fixes the default and the direction of trust so that absence and silence cannot be read as permission. The status of a composite is the meet of its parts, so one blocked or unknown component pulls the whole down and no amount of green elsewhere lifts it back up; a missing witness defaults to blocked, not to a silent pass. The monotone half forbids the quiet upgrade: a downstream stage may demote authority freely, but raising it requires a new derivation under AX-1, never a stage that simply asserts a higher status than the evidence it received. This is the axiom that makes the gap the safe state, which is why a launch step that finds private-adjacent content or overclaiming language stops rather than shipping, and why an uncovered obligation reads as blocked instead of as quietly satisfied.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{status}(c) = \\bigsqcap_{p \\in \\mathrm{parts}(c)} \\mathrm{status}(p) \\;\\wedge\\; \\forall\\, p \\in \\mathrm{parts}(c).\\ \\big(\\mathrm{evidence}(p) = \\emptyset \\Rightarrow \\mathrm{status}(p) = \\bot\\big) \\;\\wedge\\; \\big(\\mathrm{status}'(c) \\sqsupset \\mathrm{status}(c) \\Rightarrow \\exists\\, d.\\ \\mathrm{derives}(d, \\mathrm{status}'(c))\\big)",
        "reads": "A composite's status is the meet of its parts' statuses; every part with no evidence is blocked; and a later status may exceed the earlier one only when some fresh derivation establishes it.",
        "symbols": [
         {
          "sym": "\\mathrm{status}(c)",
          "meaning": "the trust status of a composite c"
         },
         {
          "sym": "\\bigsqcap",
          "meaning": "the meet (greatest lower bound) taken over the parts"
         },
         {
          "sym": "\\mathrm{parts}(c)",
          "meaning": "the parts the composite is built from"
         },
         {
          "sym": "p",
          "meaning": "a part of the composite"
         },
         {
          "sym": "\\mathrm{evidence}(p)",
          "meaning": "the evidence available for part p"
         },
         {
          "sym": "\\bot",
          "meaning": "bottom: blocked, the default when a part's evidence is absent"
         },
         {
          "sym": "\\mathrm{status}'(c)",
          "meaning": "a later status proposed for the same composite"
         },
         {
          "sym": "\\sqsupset",
          "meaning": "strictly higher in the trust order than"
         },
         {
          "sym": "d",
          "meaning": "a fresh derivation"
         },
         {
          "sym": "\\mathrm{derives}(d, \\mathrm{status}'(c))",
          "meaning": "derivation d establishes the higher status"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The default status of missing evidence and the direction trust is allowed to move across stages.",
        "requires": "Taking the meet of part statuses, defaulting an unwitnessed part to blocked, and a fresh derivation before any stage raises authority.",
        "refuses": "A silent default pass.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The launch wording gate runs over the system's own public copy and stops the export when it finds overclaiming language, so a later packaging stage cannot raise the claim above what the evidence beneath it supports.",
        "refs": [
         "batch12_release_claim_language_gate"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A status board marks a composite green because no part reported a failure, treating the absence of a recorded check as if it were a passing one.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "batch12_release_claim_language_gate",
         "proof_diagnostic_evidence_spine",
         "self_ignorance_coverage_ledger"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-2",
        "P-6",
        "P-15",
        "P-19"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-3",
        "AP-14"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "grounds",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "grounds",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "grounds",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-3",
       "target_kind": "anti-principle",
       "target_label": "Rank-as-product-score",
       "url": "doctrine.html#dcard-ap-3"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-14",
       "target_kind": "anti-principle",
       "target_label": "Public-authority inflation",
       "url": "doctrine.html#dcard-ap-14"
      },
      {
       "relation": "witnessed by",
       "target_id": "pattern_binding_contract",
       "target_kind": "component",
       "target_label": "Pattern Binding Contract",
       "url": "components.html#component-pattern_binding_contract"
      },
      {
       "relation": "witnessed by",
       "target_id": "proof_diagnostic_evidence_spine",
       "target_kind": "component",
       "target_label": "Proof Diagnostic Evidence Spine",
       "url": "components.html#component-proof_diagnostic_evidence_spine"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-5.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-5.json"
      }
     ],
     "visible_text_byte_count": 9079
    },
    {
     "object_id": "axiom:AX-6",
     "id": "AX-6",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Open-world epistemics",
     "relative_href": "docs/doctrine.html#dcard-ax-6",
     "read_href": "docs/doctrine.html#dcard-ax-6",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-6",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-6.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "not_proven(P) does not imply proven(not P); coverage is closed-world only inside declared finite domains.",
     "statement": "not_proven(P) does not imply proven(not P); coverage is closed-world only inside declared finite domains.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-6.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-6"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "not_proven(P) does not imply proven(not P); coverage is closed-world only inside declared finite domains.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-7",
           "P-19"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-5"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-7",
          "target_kind": "principle",
          "target_label": "Track known unknowns without claiming the unknown is mapped",
          "url": "doctrine.html#dcard-p-7"
         },
         {
          "relation": "grounds",
          "target_id": "P-19",
          "target_kind": "principle",
          "target_label": "Classify residual pressure before wiring",
          "url": "doctrine.html#dcard-p-19"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-5",
          "target_kind": "anti-principle",
          "target_label": "Unknown-unknown exhaustiveness",
          "url": "doctrine.html#dcard-ap-5"
         },
         {
          "relation": "witnessed by",
          "target_id": "self_ignorance_coverage_ledger",
          "target_kind": "component",
          "target_label": "Self Ignorance Coverage Ledger",
          "url": "components.html#component-self_ignorance_coverage_ledger"
         },
         {
          "relation": "witnessed by",
          "target_id": "doctrine_fact_claim_audit",
          "target_kind": "component",
          "target_label": "Doctrine Fact Claim Audit",
          "url": "components.html#component-doctrine_fact_claim_audit"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-6.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-6.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Tracking a declared-versus-materialized gap does not exhaust the space of unknown unknowns or prove the unmapped region empty. The open-world unknown it preserves is a coverage state, not a support verdict, and it never certifies that what was not found does not exist.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Not finding evidence for something is not the same as showing it is false. You can only call an absence a 'no' inside a list you have fully checked; otherwise the honest answer is 'unknown'.",
        "analogy": {
         "text": "Not finding your keys in one drawer only tells you they are not in that drawer. It does not tell you they are gone.",
         "maps": [
          {
           "doctrine": "the declared finite domain with complete coverage",
           "analogy": "the one drawer you searched all the way through"
          },
          {
           "doctrine": "the unknown verdict outside it",
           "analogy": "the rest of the house you have not checked"
          }
         ],
         "boundary": "The drawer picture works only when the search space is small and fully declared, like one drawer; it does not let you call something false across an open world you never finished searching."
        },
        "why_it_matters": "It stops the system turning 'we did not see a problem' into 'there is no problem', which is how silent failures get signed off.",
        "potential_misread": "That no evidence means no problem. Outside a fully checked list, no evidence just means not yet known.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "Microcosm refuses the cheap move of reading a blank as a no. Failing to prove a claim does not license proving its negation; the most an unproven claim earns is unknown, and unknown is a distinct verdict from refuted. The one case where absence does become a negative is narrow: the domain has to be explicitly declared finite and its coverage has to be complete, so that \"nothing found\" is backed by \"everything was looked at.\" This is what keeps the system from converting gaps in its own map into false confidence: a missing relation, an unmapped region, or a fact with no cited evidence reads as open and computable, not as settled, and the limit is recorded rather than papered over.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{scope}(\\varphi) \\subseteq D \\;\\wedge\\; \\mathrm{closed}(D) \\;\\wedge\\; \\mathrm{covered}(D) \\;\\wedge\\; \\neg\\,\\mathrm{proven}(\\varphi) \\;\\Rightarrow\\; \\mathrm{proven}(\\neg\\varphi); \\quad \\mathrm{else}\\ \\mathrm{verdict}(\\varphi) = \\mathsf{unknown}",
        "reads": "Only when a claim ranges inside a domain that is declared finite and completely covered does failing to prove it license concluding its negation; in every other case the verdict on an unproven claim is unknown, never refuted.",
        "symbols": [
         {
          "sym": "\\varphi",
          "meaning": "a claim under consideration"
         },
         {
          "sym": "\\mathrm{scope}(\\varphi)",
          "meaning": "the domain the claim ranges over"
         },
         {
          "sym": "D",
          "meaning": "a declared domain"
         },
         {
          "sym": "\\mathrm{closed}(D)",
          "meaning": "the domain is explicitly declared finite (closed-world)"
         },
         {
          "sym": "\\mathrm{covered}(D)",
          "meaning": "coverage over D is complete, so nothing in it was left unexamined"
         },
         {
          "sym": "\\neg\\,\\mathrm{proven}(\\varphi)",
          "meaning": "the claim has not been proven"
         },
         {
          "sym": "\\mathrm{verdict}(\\varphi)",
          "meaning": "the verdict the system records for the claim"
         },
         {
          "sym": "\\mathsf{unknown}",
          "meaning": "the open-world verdict, distinct from refuted"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "Whether an absence of evidence is allowed to count as a negative result, and inside what scope.",
        "requires": "An explicitly declared finite domain with complete coverage before any closed-world conclusion; outside it, an unproven claim yields unknown rather than its negation.",
        "refuses": "Absence of evidence treated as evidence of absence.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The self-ignorance coverage ledger tracks the gap between what has been declared in scope and what has actually been materialized, and forbids the inference that an unmapped region is empty; the open space stays a recorded, computable gap rather than a quiet claim of completeness.",
        "refs": [
         "self_ignorance_coverage_ledger"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A status surface reports a property as clean because a scan returned no findings, without ever declaring the finite domain the scan covered, so silence over an unbounded space is read as a guarantee.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "self_ignorance_coverage_ledger",
         "doctrine_fact_claim_audit"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-7",
        "P-19"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-5"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "grounds",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-5",
       "target_kind": "anti-principle",
       "target_label": "Unknown-unknown exhaustiveness",
       "url": "doctrine.html#dcard-ap-5"
      },
      {
       "relation": "witnessed by",
       "target_id": "self_ignorance_coverage_ledger",
       "target_kind": "component",
       "target_label": "Self Ignorance Coverage Ledger",
       "url": "components.html#component-self_ignorance_coverage_ledger"
      },
      {
       "relation": "witnessed by",
       "target_id": "doctrine_fact_claim_audit",
       "target_kind": "component",
       "target_label": "Doctrine Fact Claim Audit",
       "url": "components.html#component-doctrine_fact_claim_audit"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-6.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-6.json"
      }
     ],
     "visible_text_byte_count": 8310
    },
    {
     "object_id": "axiom:AX-7",
     "id": "AX-7",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Typed partiality and refusal",
     "relative_href": "docs/doctrine.html#dcard-ax-7",
     "read_href": "docs/doctrine.html#dcard-ax-7",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-7",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-7.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Partial computation g is totalized as Result: Ok(y) under Pre(x), otherwise Refusal(reason,evidence).",
     "statement": "Partial computation g is totalized as Result: Ok(y) under Pre(x), otherwise Refusal(reason,evidence).",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-7.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-7"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "Partial computation g is totalized as Result: Ok(y) under Pre(x), otherwise Refusal(reason,evidence).",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-8"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-6"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-8",
          "target_kind": "principle",
          "target_label": "Refuse inadmissible computations with typed reasons",
          "url": "doctrine.html#dcard-p-8"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-6",
          "target_kind": "anti-principle",
          "target_label": "Inadmissible number emission",
          "url": "doctrine.html#dcard-ap-6"
         },
         {
          "relation": "witnessed by",
          "target_id": "finance_forecast_evaluation_spine",
          "target_kind": "component",
          "target_label": "Finance Forecast Evaluation Spine",
          "url": "components.html#component-finance_forecast_evaluation_spine"
         },
         {
          "relation": "witnessed by",
          "target_id": "corpus_readiness_mathlib_absence_gate",
          "target_kind": "component",
          "target_label": "Corpus Readiness Mathlib Absence Gate",
          "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-7.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-7.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Returning typed refusals at these named computations does not establish that every partial path in the system is totalized. It covers the declared preconditions and dependency gaps that are actually checked; uncovered partial functions remain a gap rather than a guaranteed refusal.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A calculation may return a real number only when the conditions it needs actually hold. When they don't, it must hand back a clearly labelled refusal that names the reason and the evidence, never a quiet number or a blank that the next step reads as an answer.",
        "analogy": {
         "text": "A cash machine that can't complete a withdrawal prints a stated decline reason and gives you nothing, rather than spitting out some arbitrary amount of cash that you'd carry off as if it were correct.",
         "maps": [
          {
           "doctrine": "the precondition that must hold for a real result",
           "analogy": "the conditions the machine needs to launch cash, like a valid balance and a reachable account"
          },
          {
           "doctrine": "Ok carrying a value when the precondition holds",
           "analogy": "the machine dispensing the requested amount when everything checks out"
          },
          {
           "doctrine": "a typed refusal carrying a reason and evidence",
           "analogy": "the printed decline notice naming why it stopped"
          },
          {
           "doctrine": "never a silent number or NaN leaking downstream",
           "analogy": "never handing out an arbitrary stack of cash that you'd treat as a real withdrawal"
          }
         ],
         "boundary": "The cash machine shows that a failed operation must decline with a reason instead of emitting a stray figure; it does not establish that every operation in the system declines this way, and untested failure paths can still leak a bad value rather than a clean refusal."
        },
        "why_it_matters": "It means a missing input or an out-of-range condition shows up as a visible, routable gap instead of a plausible-looking figure that a later page prints as a genuine result.",
        "potential_misread": "That a number coming out the end means the conditions were fine, so a calculation that quietly produced a value can be treated as a valid answer without checking it had grounds to run.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AX-7 refuses the most common way numerical code lies: producing a plausible-looking value where its preconditions do not actually hold. Microcosm requires a partial computation g to be totalized into a Result, so it returns Ok(y) only when a declared precondition Pre(x) is met, and otherwise returns a Refusal that names the reason and carries the evidence behind it. The refusal is the load-bearing half, because a number with no precondition check and no failure path is indistinguishable from a number that happens to be wrong; a NaN, an out-of-range horizon, or a missing dependency must surface as a typed object the caller can route, not leak downstream as a figure that reads as a result. This connects directly to the evidence model: a refusal with a reason is admissible information, whereas a silent number is a claim with no basis beneath it, so AX-7 is what lets the upstream admissibility floor see a gap instead of inheriting a fabricated value.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\forall\\, x.\\ \\big(\\mathrm{Pre}(x) \\Rightarrow \\exists\\, y.\\ g(x) = \\mathrm{Ok}(y)\\big) \\;\\wedge\\; \\big(\\neg\\,\\mathrm{Pre}(x) \\Rightarrow \\exists\\, r, e.\\ g(x) = \\mathrm{Refusal}(r, e)\\big)",
        "reads": "For every input: when the declared precondition holds, the computation returns Ok carrying some value; when it does not hold, the computation returns a typed Refusal carrying a reason and the evidence behind it. Both branches are total; there is no third, silent outcome.",
        "symbols": [
         {
          "sym": "g",
          "meaning": "a partial computation, totalized into a Result"
         },
         {
          "sym": "x",
          "meaning": "an input to the computation"
         },
         {
          "sym": "\\mathrm{Pre}(x)",
          "meaning": "the declared precondition on input x"
         },
         {
          "sym": "\\mathrm{Ok}(y)",
          "meaning": "a successful result carrying value y"
         },
         {
          "sym": "\\mathrm{Refusal}(r, e)",
          "meaning": "a typed refusal carrying a reason r and evidence e"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "What a partial computation is allowed to return when its precondition does not hold.",
        "requires": "A declared precondition for the Ok path and a typed Refusal carrying a reason and evidence on every other path, including missing dependencies and undefined values.",
        "refuses": "An inadmissible number or silent NaN returned where no precondition was checked.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The finance forecast evaluation spine returns a typed refusal naming the reason when a forecast horizon is at or above the sample size, or when the statistics dependency needed for a t-distribution is unavailable, instead of returning a number computed outside its domain.",
        "refs": [
         "finance_forecast_evaluation_spine"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A statistics routine divides by a sample size that is too small and returns the resulting NaN as if it were a score, and a downstream page prints it as a real forecast number.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "finance_forecast_evaluation_spine",
         "corpus_readiness_mathlib_absence_gate"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-8"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-6"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-6",
       "target_kind": "anti-principle",
       "target_label": "Inadmissible number emission",
       "url": "doctrine.html#dcard-ap-6"
      },
      {
       "relation": "witnessed by",
       "target_id": "finance_forecast_evaluation_spine",
       "target_kind": "component",
       "target_label": "Finance Forecast Evaluation Spine",
       "url": "components.html#component-finance_forecast_evaluation_spine"
      },
      {
       "relation": "witnessed by",
       "target_id": "corpus_readiness_mathlib_absence_gate",
       "target_kind": "component",
       "target_label": "Corpus Readiness Mathlib Absence Gate",
       "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-7.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-7.json"
      }
     ],
     "visible_text_byte_count": 8868
    },
    {
     "object_id": "axiom:AX-8",
     "id": "AX-8",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Provenance propagation and non-interference",
     "relative_href": "docs/doctrine.html#dcard-ax-8",
     "read_href": "docs/doctrine.html#dcard-ax-8",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-8",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-8.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Data labels propagate along flows; untrusted labels reach privileged sinks only through declared transforms satisfying sink policy.",
     "statement": "Data labels propagate along flows; untrusted labels reach privileged sinks only through declared transforms satisfying sink policy.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-8.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-8"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "Data labels propagate along flows; untrusted labels reach privileged sinks only through declared transforms satisfying sink policy.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-9",
           "P-14"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-7",
           "AP-12",
           "AP-14",
           "AP-16"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "grounds",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-7",
          "target_kind": "anti-principle",
          "target_label": "Public/private membrane breach",
          "url": "doctrine.html#dcard-ap-7"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-12",
          "target_kind": "anti-principle",
          "target_label": "Synthetic system substitution",
          "url": "doctrine.html#dcard-ap-12"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-14",
          "target_kind": "anti-principle",
          "target_label": "Public-authority inflation",
          "url": "doctrine.html#dcard-ap-14"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-16",
          "target_kind": "anti-principle",
          "target_label": "Receiver inflation",
          "url": "doctrine.html#dcard-ap-16"
         },
         {
          "relation": "witnessed by",
          "target_id": "indirect_prompt_injection_information_flow_policy_replay",
          "target_kind": "component",
          "target_label": "Indirect Prompt Injection Information Flow Policy Replay",
          "url": "components.html#component-indirect_prompt_injection_information_flow_policy_replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-8.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-8.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Catching labelled flows at named endpoints does not establish non-interference across the whole graph. General propagation is bounded by what is actually traced, and the registry records that debt rather than hiding it.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "Where a value came from, and how far it is allowed to travel, must follow it everywhere. Untrusted material can only reach a sensitive place after passing through a stated cleaning step.",
        "analogy": {
         "text": "Allergen information has to follow an ingredient all the way through the kitchen. A clean-looking label on the final plate is not enough if nobody tracked the nuts.",
         "maps": [
          {
           "doctrine": "the provenance label and ceiling carried with the value",
           "analogy": "the allergen tag that travels with the ingredient"
          },
          {
           "doctrine": "the declared transform before a sensitive output",
           "analogy": "the documented step that removes or contains the allergen before serving"
          }
         ],
         "boundary": "The kitchen-label picture shows that the tag must travel and be transformed on purpose; it does not capture the full tracing of how information flows and combines, which is stricter than one label."
        },
        "why_it_matters": "It blocks private, provider, or unverified input quietly reaching a public or privileged output just because the final step looked clean.",
        "potential_misread": "That a clean label at the end shows a clean path. Only a label that actually travelled, with a declared cleaning step, counts.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "Trust is not a property of where a value ends up, it is a property of where it came from and what was done to it on the way. Every value carries a provenance class and a ceiling, and those travel with it across every boundary it crosses. Untrusted material, a prompt, a model-output data, or private-adjacent source, may reach a privileged or public sink only through a declared transform whose output the sink's policy admits. The endpoint cannot certify its own cleanliness: the label has to have been carried, not stamped on at the door. This is why a clean-looking final step is not enough, and why the system tracks how far a value may travel rather than just what it currently looks like.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "y = f(x) \\;\\Rightarrow\\; \\mathrm{label}(x) \\sqsubseteq \\mathrm{label}(y); \\quad (x \\to s) \\;\\Rightarrow\\; \\mathrm{label}(x) \\sqsubseteq \\mathrm{policy}(s) \\;\\vee\\; \\big(x \\to T \\to s \\;\\wedge\\; \\mathrm{declared}(T) \\;\\wedge\\; \\mathrm{label}(T(x)) \\sqsubseteq \\mathrm{policy}(s)\\big)",
        "reads": "A derived value carries at least the restriction of what it was derived from; and for any flow into a sink, either the value's label already sits within the sink's policy, or the flow passes through a declared transform whose output label the sink's policy admits. The endpoint never stamps the label; the label arrives with the value.",
        "symbols": [
         {
          "sym": "x",
          "meaning": "a value entering a flow"
         },
         {
          "sym": "y",
          "meaning": "a value derived from it along the flow"
         },
         {
          "sym": "f",
          "meaning": "a processing step along the flow"
         },
         {
          "sym": "s",
          "meaning": "a sink (a public or privileged output)"
         },
         {
          "sym": "\\mathrm{label}(x)",
          "meaning": "the value's provenance class and how far it may travel"
         },
         {
          "sym": "\\mathrm{policy}(s)",
          "meaning": "what the sink is allowed to admit"
         },
         {
          "sym": "T",
          "meaning": "a declared sanitising transform the flow passes through"
         },
         {
          "sym": "\\mathrm{declared}(T)",
          "meaning": "the transform is declared, not stamped at the door"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "How material and its trust label move across boundaries.",
        "requires": "A provenance class and ceiling carried with the value, and a declared transform before untrusted material reaches a privileged sink.",
        "refuses": "An endpoint asserting a clean label without that label having propagated.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The prompt-injection replay carries the information-flow policy with the data, so untrusted instructions arriving at a tool call are caught at the boundary instead of trusted because they reached a trusted endpoint.",
        "refs": [
         "indirect_prompt_injection_information_flow_policy_replay"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A public page prints a value lifted from a private-adjacent source because the final copy step looked clean, with no provenance carried across the copy.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "indirect_prompt_injection_information_flow_policy_replay",
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-9",
        "P-14"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-7",
        "AP-12",
        "AP-14",
        "AP-16"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "grounds",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-7",
       "target_kind": "anti-principle",
       "target_label": "Public/private membrane breach",
       "url": "doctrine.html#dcard-ap-7"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-12",
       "target_kind": "anti-principle",
       "target_label": "Synthetic system substitution",
       "url": "doctrine.html#dcard-ap-12"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-14",
       "target_kind": "anti-principle",
       "target_label": "Public-authority inflation",
       "url": "doctrine.html#dcard-ap-14"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-16",
       "target_kind": "anti-principle",
       "target_label": "Receiver inflation",
       "url": "doctrine.html#dcard-ap-16"
      },
      {
       "relation": "witnessed by",
       "target_id": "indirect_prompt_injection_information_flow_policy_replay",
       "target_kind": "component",
       "target_label": "Indirect Prompt Injection Information Flow Policy Replay",
       "url": "components.html#component-indirect_prompt_injection_information_flow_policy_replay"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-8.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-8.json"
      }
     ],
     "visible_text_byte_count": 8829
    },
    {
     "object_id": "axiom:AX-9",
     "id": "AX-9",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Compensable transactional effects",
     "relative_href": "docs/doctrine.html#dcard-ax-9",
     "read_href": "docs/doctrine.html#dcard-ax-9",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-9",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-9.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Effect e requires a compensator or declared irreversible boundary; multi-step effects land as saga with CAS and single-writer constraints.",
     "statement": "Effect e requires a compensator or declared irreversible boundary; multi-step effects land as saga with CAS and single-writer constraints.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-9.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-9"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "Effect e requires a compensator or declared irreversible boundary; multi-step effects land as saga with CAS and single-writer constraints.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-10",
           "P-16",
           "P-17",
           "P-18"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-8"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-10",
          "target_kind": "principle",
          "target_label": "Do not land effects without compensation",
          "url": "doctrine.html#dcard-p-10"
         },
         {
          "relation": "grounds",
          "target_id": "P-16",
          "target_kind": "principle",
          "target_label": "Bind authority to transaction scope",
          "url": "doctrine.html#dcard-p-16"
         },
         {
          "relation": "grounds",
          "target_id": "P-17",
          "target_kind": "principle",
          "target_label": "Anchor graph mutations to unique source rows",
          "url": "doctrine.html#dcard-p-17"
         },
         {
          "relation": "grounds",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-8",
          "target_kind": "anti-principle",
          "target_label": "Blind irreversible mutation",
          "url": "doctrine.html#dcard-ap-8"
         },
         {
          "relation": "witnessed by",
          "target_id": "mission_transaction_work_spine",
          "target_kind": "component",
          "target_label": "Mission Transaction Work Spine",
          "url": "components.html#component-mission_transaction_work_spine"
         },
         {
          "relation": "witnessed by",
          "target_id": "durable_agent_work_landing_replay",
          "target_kind": "component",
          "target_label": "Durable Agent Work Landing Replay",
          "url": "components.html#component-durable_agent_work_landing_replay"
         },
         {
          "relation": "witnessed by",
          "target_id": "concurrency_mission_control",
          "target_kind": "component",
          "target_label": "Concurrency Mission Control",
          "url": "components.html#component-concurrency_mission_control"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-9.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-9.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Blocking parent-mismatch and same-path conflict on these named paths does not establish every effect in the system is compensable or every concurrent write is serialized. The legacy strong label is not a computed support verdict, and the routing registry still records that mapping these negative cases to a full rejection of the blind irreversible write remains unverified.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A change to the world only counts as done if there is a stated way to undo it, or a clear note saying it can never be undone. A multi-step change only goes through if the starting point it expected is still there and nobody else is changing the same thing at the same time.",
        "analogy": {
         "text": "A money transfer between accounts only completes if the bank can either reverse it or has marked it as final and non-refundable, and a multi-leg transfer only proceeds when the balance it started from has not changed and no second transfer is touching the same account.",
         "maps": [
          {
           "doctrine": "an effect treated as landed",
           "analogy": "a transfer treated as completed"
          },
          {
           "doctrine": "a declared compensator that can reverse the effect",
           "analogy": "the bank's ability to reverse the transfer"
          },
          {
           "doctrine": "a declared irreversible boundary",
           "analogy": "the transfer marked final and non-refundable"
          },
          {
           "doctrine": "the compare-and-swap expected-parent check still holding",
           "analogy": "the starting balance being unchanged when the leg runs"
          },
          {
           "doctrine": "the single-writer constraint on the path",
           "analogy": "no second transfer touching the same account at the same time"
          }
         ],
         "boundary": "This only describes when a change is allowed to be called done; it does not show that every change in the system can be undone, and one transfer that passed its checks does not establish that all transfers are reversible or collision-free."
        },
        "why_it_matters": "It stops a half-finished change from being silently treated as complete, which is how a system ends up in a state nobody chose and nobody can walk back.",
        "potential_misread": "Reading this as a promise that everything is reversible. It actually allows changes to be marked permanently final too; the rule is that the change must declare which one it is, not that undo is always possible.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "Microcosm treats a write as inadmissible until there is a way back from it or an explicit declaration that there is not. An effect counts as landed only if it carries a compensator that can reverse it or a declared irreversible boundary that marks the point of no return, and a multi-step effect lands as a saga whose every step compares against the head it expected and finds a single writer holding the path. The failure this refuses is the half-completed write: a sequence that succeeds partway, hits a moved head or a second writer, and leaves the world in a state nobody declared and nobody can undo. This ties back to the admissibility floor, because a landing that cannot be recomputed against its expected parent or rolled back is an effect asserting its own success with no check behind it, which is exactly the bare assertion the evidence order puts at the bottom.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{land}(e) \\;\\Rightarrow\\; \\big(\\mathrm{comp}(e) \\vee \\mathrm{irrev}(e)\\big) \\;\\wedge\\; \\big(\\mathrm{multi}(e) \\Rightarrow \\mathrm{parent}(e) = \\mathrm{head} \\wedge \\mathrm{writers}(\\mathrm{path}(e)) \\leq 1\\big)",
        "reads": "An effect may count as landed only if it declares a compensator or an irreversible boundary; and a multi-step effect lands only while the parent it expected still matches the head and at most one writer holds its path. Reversibility is not promised; what is required is that every effect declares which kind it is.",
        "symbols": [
         {
          "sym": "\\mathrm{land}(e)",
          "meaning": "the effect e is treated as landed"
         },
         {
          "sym": "\\mathrm{comp}(e)",
          "meaning": "a declared compensator that can reverse e"
         },
         {
          "sym": "\\mathrm{irrev}(e)",
          "meaning": "a declared irreversible boundary for e"
         },
         {
          "sym": "\\mathrm{multi}(e)",
          "meaning": "the effect e is a multi-step effect"
         },
         {
          "sym": "\\mathrm{parent}(e) = \\mathrm{head}",
          "meaning": "the compare-and-swap expected-parent check still holds"
         },
         {
          "sym": "\\mathrm{writers}(\\mathrm{path}(e)) \\leq 1",
          "meaning": "the single-writer constraint on e's path"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "When a mutation is allowed to count as landed.",
        "requires": "A declared compensator or an irreversible boundary, and for multi-step effects a compare-and-swap expected-parent check plus a single-writer constraint on the path.",
        "refuses": "A blind irreversible write.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The mission transaction work spine lands a multi-step effect only when its expected parent still matches the head, so a run whose head advanced underneath it fails with a parent-mismatch rather than overwriting the newer state.",
        "refs": [
         "mission_transaction_work_spine"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A step writes to a shared path and is treated as landed because the call returned, with no expected-parent check and no single-writer constraint, so two concurrent writers interleave and the final state matches neither.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "mission_transaction_work_spine",
         "durable_agent_work_landing_replay",
         "concurrency_mission_control"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-10",
        "P-16",
        "P-17",
        "P-18"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-8"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-10",
       "target_kind": "principle",
       "target_label": "Do not land effects without compensation",
       "url": "doctrine.html#dcard-p-10"
      },
      {
       "relation": "grounds",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "grounds",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "grounds",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-8",
       "target_kind": "anti-principle",
       "target_label": "Blind irreversible mutation",
       "url": "doctrine.html#dcard-ap-8"
      },
      {
       "relation": "witnessed by",
       "target_id": "mission_transaction_work_spine",
       "target_kind": "component",
       "target_label": "Mission Transaction Work Spine",
       "url": "components.html#component-mission_transaction_work_spine"
      },
      {
       "relation": "witnessed by",
       "target_id": "durable_agent_work_landing_replay",
       "target_kind": "component",
       "target_label": "Durable Agent Work Landing Replay",
       "url": "components.html#component-durable_agent_work_landing_replay"
      },
      {
       "relation": "witnessed by",
       "target_id": "concurrency_mission_control",
       "target_kind": "component",
       "target_label": "Concurrency Mission Control",
       "url": "components.html#component-concurrency_mission_control"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-9.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-9.json"
      }
     ],
     "visible_text_byte_count": 9908
    },
    {
     "object_id": "axiom:AX-10",
     "id": "AX-10",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Temporal validity and freshness contracts",
     "relative_href": "docs/doctrine.html#dcard-ax-10",
     "read_href": "docs/doctrine.html#dcard-ax-10",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-10",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-10.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Claims over live state are cached reads valid only under <value,as_of,basis,rederive> invalidation contracts.",
     "statement": "Claims over live state are cached reads valid only under <value,as_of,basis,rederive> invalidation contracts.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-10.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-10"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "Claims over live state are cached reads valid only under <value,as_of,basis,rederive> invalidation contracts.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-11"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-4",
           "AP-9"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-11",
          "target_kind": "principle",
          "target_label": "Bind volatile facts to refresh routes",
          "url": "doctrine.html#dcard-p-11"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-4",
          "target_kind": "anti-principle",
          "target_label": "Cache-across-drift",
          "url": "doctrine.html#dcard-ap-4"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-9",
          "target_kind": "anti-principle",
          "target_label": "Frozen live fact",
          "url": "doctrine.html#dcard-ap-9"
         },
         {
          "relation": "witnessed by",
          "target_id": "doctrine_fact_claim_audit",
          "target_kind": "component",
          "target_label": "Doctrine Fact Claim Audit",
          "url": "components.html#component-doctrine_fact_claim_audit"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-10.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-10.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Blocking unbound volatile numbers does not make any specific number current or correct, and it does not establish that staleness is caught everywhere. The freshness component of this axiom's own ceiling stays an ordered unknown until a source-owned refresh contract exists, so this object names the obligation rather than certifying that it is met.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A number about something that keeps changing is just a reading taken at a moment, not a permanent fact. To be usable later it has to say when it was read, where it was read from, and how to read it again.",
        "analogy": {
         "text": "An electricity meter reading is only useful on a bill if it records the date it was taken, which meter it came from, and how to take a fresh reading; the bare number alone tells you nothing about today's usage.",
         "maps": [
          {
           "doctrine": "a claim over live, moving state",
           "analogy": "a number describing ongoing electricity usage"
          },
          {
           "doctrine": "the value asserted",
           "analogy": "the figure shown on the meter"
          },
          {
           "doctrine": "the as-of time the value was taken",
           "analogy": "the date the reading was recorded"
          },
          {
           "doctrine": "the basis the value was read from",
           "analogy": "which meter the reading came from"
          },
          {
           "doctrine": "the rule that recomputes the value",
           "analogy": "the procedure for taking a fresh reading"
          }
         ],
         "boundary": "This only covers when a live number can still be stated as current; it does not establish that any particular reading is right now, and a reading that carries its date is not therefore fresh today."
        },
        "why_it_matters": "It keeps a number that was true once from quietly being read as if it were still true weeks later, after the thing it measured has moved on.",
        "potential_misread": "Thinking that attaching a date and a source makes the number current. It only makes the number checkable; whether it still holds has to be read again from the source.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "A number that describes a moving system stops being true the moment the system moves, so Microcosm treats every claim over live state as a cached read rather than a fact. To be admissible such a claim has to carry four things: the value, the time it was taken, the basis it was read from, and the rule for recomputing it; a bare value with none of these is a frozen snapshot wearing the costume of a current reading. This is where the evidence model meets time: the admissibility floor decides whether a claim counts at all, and this axiom adds that a live claim's strength decays with its own staleness unless its declared basis still holds. It bites hardest on the things that look most authoritative, the running counts and dashboard totals, because those are exactly the values a reader assumes are fresh.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{valid}(\\varphi, t') \\;\\Rightarrow\\; \\varphi = \\langle v, t, B, \\rho \\rangle \\;\\wedge\\; \\big(\\mathrm{holds}(B, t, t') \\;\\vee\\; v = \\rho(B)\\big)",
        "reads": "A live-state claim may still be stated as current at a time of use only when it carries its value, its read time, its basis, and its rederive rule, and either the basis is unchanged between reading and use or the value has been freshly recomputed by that rule.",
        "symbols": [
         {
          "sym": "\\mathrm{valid}(\\varphi, t')",
          "meaning": "the claim may still be stated as current at use time t'"
         },
         {
          "sym": "\\varphi",
          "meaning": "a claim over live state"
         },
         {
          "sym": "v",
          "meaning": "the value asserted"
         },
         {
          "sym": "t",
          "meaning": "the time the value was read"
         },
         {
          "sym": "t'",
          "meaning": "the later time the claim is used"
         },
         {
          "sym": "B",
          "meaning": "the basis the value was read from"
         },
         {
          "sym": "\\rho",
          "meaning": "the rule that recomputes the value from the basis"
         },
         {
          "sym": "\\mathrm{holds}(B, t, t')",
          "meaning": "the declared basis is unchanged between the read and the use"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "When a value read from live state is still allowed to be stated as current.",
        "requires": "A value carrying its as-of time, its basis, and a rederive rule, with invalidation or recomputation once that basis no longer holds.",
        "refuses": "A frozen live count stated without a refresh basis.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The fact-claim audit flags a volatile numeric claim that carries no freshness binding as a stable blocking code, so a live count cannot be published as if it were still current without declaring when it was taken and how to recompute it.",
        "refs": [
         "doctrine_fact_claim_audit"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A page prints a running total once and leaves it on display for weeks, with no as-of time and no rule to recompute it, so a stale snapshot reads as a live figure.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "doctrine_fact_claim_audit",
         "batch10_live_source_drift_capsule"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-11"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-4",
        "AP-9"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-11",
       "target_kind": "principle",
       "target_label": "Bind volatile facts to refresh routes",
       "url": "doctrine.html#dcard-p-11"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-4",
       "target_kind": "anti-principle",
       "target_label": "Cache-across-drift",
       "url": "doctrine.html#dcard-ap-4"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-9",
       "target_kind": "anti-principle",
       "target_label": "Frozen live fact",
       "url": "doctrine.html#dcard-ap-9"
      },
      {
       "relation": "witnessed by",
       "target_id": "doctrine_fact_claim_audit",
       "target_kind": "component",
       "target_label": "Doctrine Fact Claim Audit",
       "url": "components.html#component-doctrine_fact_claim_audit"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-10.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-10.json"
      }
     ],
     "visible_text_byte_count": 8419
    },
    {
     "object_id": "axiom:AX-11",
     "id": "AX-11",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Executable grammar before doctrine authority",
     "relative_href": "docs/doctrine.html#dcard-ax-11",
     "read_href": "docs/doctrine.html#dcard-ax-11",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-11",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-11.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "authority(d) implies d in L(G), result record obligations, and scope boundary are present; prose alone is projection.",
     "statement": "authority(d) implies d in L(G), result record obligations, and scope boundary are present; prose alone is projection.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-11.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-11"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "authority(d) implies d in L(G), result record obligations, and scope boundary are present; prose alone is projection.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-12",
           "P-15",
           "P-17",
           "P-18",
           "P-19",
           "P-20"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-10",
           "AP-13",
           "AP-17"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-12",
          "target_kind": "principle",
          "target_label": "Make doctrine executable before authoritative",
          "url": "doctrine.html#dcard-p-12"
         },
         {
          "relation": "grounds",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "grounds",
          "target_id": "P-17",
          "target_kind": "principle",
          "target_label": "Anchor graph mutations to unique source rows",
          "url": "doctrine.html#dcard-p-17"
         },
         {
          "relation": "grounds",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "grounds",
          "target_id": "P-19",
          "target_kind": "principle",
          "target_label": "Classify residual pressure before wiring",
          "url": "doctrine.html#dcard-p-19"
         },
         {
          "relation": "grounds",
          "target_id": "P-20",
          "target_kind": "principle",
          "target_label": "Bind result records before record authority",
          "url": "doctrine.html#dcard-p-20"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-10",
          "target_kind": "anti-principle",
          "target_label": "Prose-as-executable-authority",
          "url": "doctrine.html#dcard-ap-10"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-13",
          "target_kind": "anti-principle",
          "target_label": "Generated-result record source inversion",
          "url": "doctrine.html#dcard-ap-13"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-11.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-11.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "A grammar accepting an artifact's shape does not establish the doctrine it expresses is complete or correct; admitting the form is not certifying the coverage, and this reader page is itself a projection that cannot raise the authority of the source it explains.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "A rule is only allowed to govern when it passes a fixed format check and comes with the evidence it must produce and a clear statement of what it does not cover. A well-written paragraph on its own is just something to read, not a rule.",
        "analogy": {
         "text": "A customs declaration only clears goods when it passes the required form check, arrives with its supporting paperwork, and states plainly what it does not vouch for; a politely worded letter describing the shipment, however convincing, clears nothing.",
         "maps": [
          {
           "doctrine": "a doctrine artifact carrying governing authority",
           "analogy": "a declaration that clears the goods"
          },
          {
           "doctrine": "membership in the executable grammar",
           "analogy": "passing the required customs form check"
          },
          {
           "doctrine": "the evidence obligations the artifact must carry",
           "analogy": "the supporting paperwork that must travel with it"
          },
          {
           "doctrine": "the declared statement of what it does not establish",
           "analogy": "the declaration's stated exclusions, what it does not vouch for"
          },
          {
           "doctrine": "prose held only as a readable projection",
           "analogy": "the convincing letter that clears nothing"
          }
         ],
         "boundary": "This only governs whether a rule is allowed to bind at all; passing the format check does not show the rule is complete or correct, and a cleared declaration is not therefore an accurate account of the goods."
        },
        "why_it_matters": "It stops a confident-sounding paragraph from being treated as an enforced rule just because it reads authoritatively, keeping unchecked prose out of the seat of governance.",
        "potential_misread": "Assuming that passing the format check means the rule fully covers its subject. Passing the check admits the rule's shape only; it never certifies that what the rule says is complete.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AX-11 turns the doctrine itself into something the system can execute rather than merely read. A standard, contract, or rule may carry authority only when an executable grammar accepts its form and it arrives with its result record obligations and its own scope boundary attached; a clause that is only well written sits at the level of a projection, not a law. This is what stops a confident standard from governing by rhetoric: the gate decides on the artifact's checkable shape, not its prose, so the same admissibility discipline AX-1 imposes on claims is imposed on the documents that define how claims are judged. The bite is the second negative case as much as the first: passing the grammar admits the artifact's shape and never certifies that the doctrine it expresses is complete, so a grammar pass that is read as coverage is rejected, not rewarded.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{authority}(d) \\;\\Rightarrow\\; d \\in L(G) \\;\\wedge\\; \\mathrm{obligations}(d) \\neq \\emptyset \\;\\wedge\\; \\mathrm{anticlaim}(d); \\quad \\mathrm{otherwise}\\ d \\in \\mathrm{Proj}",
        "reads": "A doctrine artifact carries authority only when an executable grammar accepts its shape and it presents its evidence obligations and its own scope boundary; an artifact failing any of these sits in the projection tier, which can be read but cannot govern.",
        "symbols": [
         {
          "sym": "\\mathrm{authority}(d)",
          "meaning": "the doctrine artifact d carries governing authority"
         },
         {
          "sym": "d",
          "meaning": "a doctrine artifact (standard, contract, rule)"
         },
         {
          "sym": "L(G)",
          "meaning": "the language an executable grammar G accepts"
         },
         {
          "sym": "\\mathrm{obligations}(d)",
          "meaning": "the result-record obligations the artifact must carry"
         },
         {
          "sym": "\\mathrm{anticlaim}(d)",
          "meaning": "the artifact's declared statement of what it does not establish"
         },
         {
          "sym": "\\mathrm{Proj}",
          "meaning": "the projection tier, below authority"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "Whether a doctrine artifact may govern, or is only a readable projection of one.",
        "requires": "Sign-off by an executable grammar plus carried result record obligations and a declared scope boundary, not well-formed prose.",
        "refuses": "Prose claiming executable authority.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The executable doctrine grammar component accepts a standard only when its shape parses and its result record obligations and scope boundary are present, and rejects a prose standard that asserts authority without that executable form.",
        "refs": [
         "executable_doctrine_grammar"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A persuasive standard written in prose is treated as binding because it reads authoritatively, with no grammar accepting its shape and no scope boundary or result record obligations carried.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "executable_doctrine_grammar",
         "standards_meta_diagnostics"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-12",
        "P-15",
        "P-17",
        "P-18",
        "P-19",
        "P-20"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-10",
        "AP-13",
        "AP-17"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "grounds",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "grounds",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "grounds",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "grounds",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      },
      {
       "relation": "grounds",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-10",
       "target_kind": "anti-principle",
       "target_label": "Prose-as-executable-authority",
       "url": "doctrine.html#dcard-ap-10"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-13",
       "target_kind": "anti-principle",
       "target_label": "Generated-result record source inversion",
       "url": "doctrine.html#dcard-ap-13"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-11.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-11.json"
      }
     ],
     "visible_text_byte_count": 9385
    },
    {
     "object_id": "axiom:AX-12",
     "id": "AX-12",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Reflexive accountability / no privileged meta-layer",
     "relative_href": "docs/doctrine.html#dcard-ax-12",
     "read_href": "docs/doctrine.html#dcard-ax-12",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-12",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-12.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "For every Microcosm artifact a, any claim phi carried by a must satisfy the same admissibility relation as external claims.",
     "statement": "For every Microcosm artifact a, any claim phi carried by a must satisfy the same admissibility relation as external claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/axioms/AX-12.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AX-12"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Formal clause",
        "text": "For every Microcosm artifact a, any claim phi carried by a must satisfy the same admissibility relation as external claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Grounds",
          "ids": [
           "P-13",
           "P-18",
           "P-20"
          ]
         },
         {
          "relation": "Guarded by",
          "ids": [
           "AP-1",
           "AP-3",
           "AP-11",
           "AP-14",
           "AP-15",
           "AP-16"
          ]
         }
        ],
        "links": [
         {
          "relation": "grounds",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "grounds",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "grounds",
          "target_id": "P-20",
          "target_kind": "principle",
          "target_label": "Bind result records before record authority",
          "url": "doctrine.html#dcard-p-20"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-1",
          "target_kind": "anti-principle",
          "target_label": "Fixture-label echo",
          "url": "doctrine.html#dcard-ap-1"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-3",
          "target_kind": "anti-principle",
          "target_label": "Rank-as-product-score",
          "url": "doctrine.html#dcard-ap-3"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-11",
          "target_kind": "anti-principle",
          "target_label": "Meta-artifact exemption",
          "url": "doctrine.html#dcard-ap-11"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-14",
          "target_kind": "anti-principle",
          "target_label": "Public-authority inflation",
          "url": "doctrine.html#dcard-ap-14"
         },
         {
          "relation": "guarded by",
          "target_id": "AP-15",
          "target_kind": "anti-principle",
          "target_label": "Mechanism theater",
          "url": "doctrine.html#dcard-ap-15"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/axioms/AX-12.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-12.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Applying the floor to its own artifacts does not make the system complete or correct. It only removes the special pleading; the limits remain, stated rather than hidden.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The system holds its own statements about itself to the same standard it holds everyone else's. It gets no discount for being the one doing the checking.",
        "analogy": {
         "text": "A referee cannot switch to an easier rulebook when the call is about their own team. The same rules apply to them.",
         "maps": [
          {
           "doctrine": "Microcosm's own claims about itself",
           "analogy": "the referee judging their own team"
          },
          {
           "doctrine": "the same admissibility floor as external claims",
           "analogy": "the single rulebook that applies to everyone"
          },
          {
           "doctrine": "the pages that describe the system, held to the floor they describe",
           "analogy": "the referee's own match report, checked like any other"
          }
         ],
         "boundary": "The referee picture shows no special pleading; it does not say the system is therefore complete or correct, only that it cannot exempt itself."
        },
        "why_it_matters": "It lets the system state its own limits without that statement quietly becoming a new unchecked claim.",
        "potential_misread": "That applying the rule to itself makes the system trustworthy by default. It only removes the exemption; the limits remain, stated rather than hidden.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "A system that exempts its own claims from its own floor is just asserting with extra steps. Microcosm removes the exemption: every claim it makes about itself, in a generated page, a validator, a result record, or a coverage projection, has to pass the same admissibility relation it imposes on any external claim. The support evaluator is itself subject to the support floor; this very page is a projection held below the source it describes and cannot raise that source's authority. Removing the escape hatch is what lets the system state its own limits without that statement quietly becoming a new unchecked claim.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\forall\\, a \\in \\mathcal{M}.\\ \\forall\\, \\varphi \\in \\mathrm{claims}(a).\\ \\mathrm{adm}(\\varphi) = \\mathrm{adm}_{\\mathrm{ext}}(\\varphi)",
        "reads": "For every Microcosm artifact and every claim it carries, the claim is admitted under the same relation as an external claim.",
        "symbols": [
         {
          "sym": "\\mathcal{M}",
          "meaning": "the Microcosm artifacts, including its own pages and validators"
         },
         {
          "sym": "a",
          "meaning": "any such artifact"
         },
         {
          "sym": "\\varphi",
          "meaning": "a claim the artifact carries"
         },
         {
          "sym": "\\mathrm{claims}(a)",
          "meaning": "the claims the artifact carries"
         },
         {
          "sym": "\\mathrm{adm}",
          "meaning": "the admissibility floor from AX-1"
         },
         {
          "sym": "\\mathrm{adm}_{\\mathrm{ext}}(\\varphi)",
          "meaning": "the same admissibility relation applied to an external claim"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "Whether the system's own outputs get a discount.",
        "requires": "That meta artifacts, pages, validators, records, and projections, meet the same evidence and refusal floor as everything else.",
        "refuses": "A meta-artifact exemption.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The launch wording gate runs the same claim-language floor over Microcosm's own public copy that it imposes on any other shard, blocking overclaiming language in the system's own pages.",
        "refs": [
         "batch12_release_claim_language_gate"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A system publishes a self-assessment of \"verified and complete\" that would never pass the evidence floor it applies to the work it audits.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "batch12_release_claim_language_gate",
         "executable_doctrine_grammar"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-13",
        "P-18",
        "P-20"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-1",
        "AP-3",
        "AP-11",
        "AP-14",
        "AP-15",
        "AP-16"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "grounds",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "grounds",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-1",
       "target_kind": "anti-principle",
       "target_label": "Fixture-label echo",
       "url": "doctrine.html#dcard-ap-1"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-3",
       "target_kind": "anti-principle",
       "target_label": "Rank-as-product-score",
       "url": "doctrine.html#dcard-ap-3"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-11",
       "target_kind": "anti-principle",
       "target_label": "Meta-artifact exemption",
       "url": "doctrine.html#dcard-ap-11"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-14",
       "target_kind": "anti-principle",
       "target_label": "Public-authority inflation",
       "url": "doctrine.html#dcard-ap-14"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-15",
       "target_kind": "anti-principle",
       "target_label": "Mechanism theater",
       "url": "doctrine.html#dcard-ap-15"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-12.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-12.json"
      }
     ],
     "visible_text_byte_count": 8022
    },
    {
     "object_id": "anti_principle:AP-1",
     "id": "AP-1",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Fixture-label echo",
     "relative_href": "docs/doctrine.html#dcard-ap-1",
     "read_href": "docs/doctrine.html#dcard-ap-1",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-1",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-1.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Echoing a fixture verdict, registry label, markdown claim, or model answer instead of recomputing it from lower-level evidence.",
     "statement": "Echoing a fixture verdict, registry label, markdown claim, or model answer instead of recomputing it from lower-level evidence.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-1.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-1"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Echoing a fixture verdict, registry label, markdown claim, or model answer instead of recomputing it from lower-level evidence.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-1",
           "AX-12"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-1",
           "P-2",
           "P-13",
           "P-18",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-1",
          "target_kind": "axiom",
          "target_label": "Derivation before assertion",
          "url": "doctrine.html#dcard-ax-1"
         },
         {
          "relation": "guards",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-1",
          "target_kind": "principle",
          "target_label": "Recompute, do not echo",
          "url": "doctrine.html#dcard-p-1"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-20",
          "target_kind": "principle",
          "target_label": "Bind result records before record authority",
          "url": "doctrine.html#dcard-p-20"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-1.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-1.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Guarding against label echo is a floor under AX-1 and AX-12, not a positive proof that any specific claim is true.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of repeating a stored verdict, label, or model answer as if it were true, without re-deriving it from the underlying evidence.",
        "analogy": {
         "text": "Reading yesterday's 'sold out' sign on a shop and repeating it as today's truth, without checking whether the shelves were restocked overnight.",
         "maps": [
          {
           "doctrine": "the echoed verdict or label",
           "analogy": "yesterday's sign you simply repeat"
          },
          {
           "doctrine": "the missing recomputation from the evidence",
           "analogy": "the shelf-check nobody actually did"
          }
         ],
         "boundary": "The stale-sign picture shows label-echo; it does not name the deeper rule, which is that the underlying evidence, not the sign, is what a verdict has to be re-derived from."
        },
        "why_it_matters": "It is the most common way false confidence spreads: a single unverified label gets quoted as fact all the way downstream.",
        "potential_misread": "That a label being present means it was checked. The label is just text until something recomputes the verdict beneath it.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-1 is the failure AX-1 exists to refuse: taking a declared verdict at face value because it is written down. It is tempting because echoing is cheap and usually looks right, so a pipeline that repeats labels passes its own tests while proving nothing. The repair is not subtle: recompute the verdict from the evidence underneath and keep a negative fixture that fails when the echo is wrong. If you cannot recompute it, the honest output is a lower claim, not a confident repeat.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{emit}(v) \\;\\wedge\\; \\neg\\,\\exists\\, K.\\ K(B) = v",
        "reads": "Emitting a value v as a verdict while no checker recomputes v from the basis.",
        "symbols": [
         {
          "sym": "\\mathrm{emit}(v)",
          "meaning": "emitting v as a verdict by repeating it"
         },
         {
          "sym": "v",
          "meaning": "a declared label or verdict"
         },
         {
          "sym": "K",
          "meaning": "a checker that would recompute it"
         },
         {
          "sym": "B",
          "meaning": "the basis it should derive from"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The claim boundary, where a label is mistaken for a derivation.",
        "requires": "Catching the echo: a recomputed verdict and a negative fixture that fails.",
        "refuses": "Repeating a fixture verdict, registry label, markdown claim, or model answer as if repetition were proof.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "A monitor replay deliberately feeds a mislabelled trace and confirms the recomputed verdict rejects it, so a wrong label cannot pass by being repeated.",
        "refs": [
         "agent_sabotage_scheming_monitor_replay"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A dashboard shows a component as healthy because its own record said so, with no independent recomputation behind the green.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "agent_sabotage_scheming_monitor_replay",
         "agent_benchmark_integrity_anti_gaming_replay"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-1",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-1",
        "P-2",
        "P-13",
        "P-18",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-1.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-1.json"
      }
     ],
     "visible_text_byte_count": 7257
    },
    {
     "object_id": "anti_principle:AP-2",
     "id": "AP-2",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Producer trust",
     "relative_href": "docs/doctrine.html#dcard-ap-2",
     "read_href": "docs/doctrine.html#dcard-ap-2",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-2",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-2.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Trusting a producer, persona, route, account secret, or prior success instead of a checker, proof, policy, or dereferenced capability.",
     "statement": "Trusting a producer, persona, route, account secret, or prior success instead of a checker, proof, policy, or dereferenced capability.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-2.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-2"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Trusting a producer, persona, route, account secret, or prior success instead of a checker, proof, policy, or dereferenced capability.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-2",
           "AX-3"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-3",
           "P-4",
           "P-16",
           "P-18"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-2",
          "target_kind": "axiom",
          "target_label": "Kernelized verification",
          "url": "doctrine.html#dcard-ax-2"
         },
         {
          "relation": "guards",
          "target_id": "AX-3",
          "target_kind": "axiom",
          "target_label": "Authority by derivation, not possession",
          "url": "doctrine.html#dcard-ax-3"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-3",
          "target_kind": "principle",
          "target_label": "Concentrate trust in small checkers",
          "url": "doctrine.html#dcard-p-3"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-4",
          "target_kind": "principle",
          "target_label": "Possession is not permission",
          "url": "doctrine.html#dcard-p-4"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-16",
          "target_kind": "principle",
          "target_label": "Bind authority to transaction scope",
          "url": "doctrine.html#dcard-p-16"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-2.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-2.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Refusing producer trust at these witnesses is a floor under AX-2 and AX-3, not positive proof that any granted authority or accepted claim is correct. The example is reader illustration and computes no support; catching identity-based trust in named places does not establish that authority is correctly derived everywhere.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of letting something through because of who sent it, what badge it carries, or that it worked last time, instead of independently checking that this request is actually allowed right now.",
        "analogy": {
         "text": "A building guard waving someone through to a secure room because their face is familiar and they have an old pass, rather than checking the access system to confirm that person is cleared for that room today.",
         "maps": [
          {
           "doctrine": "trusting a claim because of its producer or account secret",
           "analogy": "letting the person in because the face is familiar and the pass looks right"
          },
          {
           "doctrine": "the independent checker or derived authority that should decide it",
           "analogy": "looking up the access system to confirm clearance for this room today"
          },
          {
           "doctrine": "a prior green run or standing account secret",
           "analogy": "the old pass that worked last time"
          }
         ],
         "boundary": "This shows only that a familiar face is not the same as a confirmed permission. It does not establish the access system itself is correct, that every door in the building is checked this way, or that a confirmed person will behave well once inside."
        },
        "why_it_matters": "Identity is easy to fake or to go stale; a system that trusts the sender rather than re-checking the request looks fine until that sender is wrong or compromised, and by then nothing was actually guarding the door.",
        "potential_misread": "That a trusted name or a pass that worked before is a safe stand-in for checking. The check has to be made each time against what is actually allowed now.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-2 is the failure that AX-2 and AX-3 exist to refuse: granting trust because of who produced a claim or what badge they hold, rather than because something recomputed the claim or derived the authority. It bites because identity is cheap to read and usually correlates with correctness, so a system that trusts a known producer, a passing route, or a standing account secret looks fine right up until that producer is wrong or compromised, at which point nothing was actually checking. The repair splits trust from production: a small checker decides the claim over its certificate, and authority for an effect is derived from dereferenced tokens, policy, and proof references against current world state, never from ambient identity or a prior green run. This is the human-pressure analogue of the label echo in AP-1; here the unchecked thing is a source of authority rather than a written verdict.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\big(\\mathrm{trust}(\\varphi) \\;\\wedge\\; \\neg\\,\\exists\\, K.\\ K(c) = \\mathsf{accept}\\big) \\;\\vee\\; \\big(\\mathrm{grant}(s, e) \\;\\wedge\\; \\neg\\,\\mathrm{deref}(\\mathrm{auth}(s, e))\\big)",
        "reads": "Trusting a claim while no small checker accepts its certificate, or granting a subject an effect while authority for it was never derived by dereference from tokens, policy, and proof against world state.",
        "symbols": [
         {
          "sym": "\\mathrm{trust}(\\varphi)",
          "meaning": "trusting claim varphi on the basis of its producer rather than a check"
         },
         {
          "sym": "\\varphi",
          "meaning": "a claim trusted on the basis of its producer"
         },
         {
          "sym": "K",
          "meaning": "a small checker that would decide the certificate"
         },
         {
          "sym": "c",
          "meaning": "the certificate the checker should decide"
         },
         {
          "sym": "\\mathrm{grant}(s, e)",
          "meaning": "granting subject s the effect e"
         },
         {
          "sym": "\\mathrm{deref}(\\mathrm{auth}(s, e))",
          "meaning": "authority derived by dereference from tokens, policy, and proof against world state"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The trust-and-authority boundary, where a producer's identity or a standing account secret is mistaken for a check or a derived right.",
        "requires": "A small checker that decides the certificate, and authority for an effect derived by dereference from tokens, policy, and proof references against current world state.",
        "refuses": "Trusting a producer, persona, route, account secret, or prior success in place of a checker, proof, policy, or dereferenced capability.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The tool-authority replay derives whether a call is permitted from the dereferenced capability and policy rather than from the caller's standing identity, so a known caller with no derived authority is refused.",
        "refs": [
         "mcp_tool_authority_replay",
         "proof_derived_governed_mutation_authorization"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A mutation is allowed because the caller holds a long-lived account secret and the same route passed last time, with nothing dereferencing current authority or recomputing the claim behind it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "mcp_tool_authority_replay",
         "proof_derived_governed_mutation_authorization",
         "certificate_kernel_execution_lab"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-2",
        "AX-3"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-3",
        "P-4",
        "P-16",
        "P-18"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-2",
       "target_kind": "axiom",
       "target_label": "Kernelized verification",
       "url": "doctrine.html#dcard-ax-2"
      },
      {
       "relation": "guards",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-4",
       "target_kind": "principle",
       "target_label": "Possession is not permission",
       "url": "doctrine.html#dcard-p-4"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-2.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-2.json"
      }
     ],
     "visible_text_byte_count": 9224
    },
    {
     "object_id": "anti_principle:AP-3",
     "id": "AP-3",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Rank-as-product-score",
     "relative_href": "docs/doctrine.html#dcard-ap-3",
     "read_href": "docs/doctrine.html#dcard-ap-3",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-3",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-3.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Treating counts, handles, passing validators, or evidence classes as product maturity, launch-scope decision, or whole-system correctness.",
     "statement": "Treating counts, handles, passing validators, or evidence classes as product maturity, launch-scope decision, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-3.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-3"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Treating counts, handles, passing validators, or evidence classes as product maturity, launch-scope decision, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-5",
           "AX-12"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-2",
           "P-6",
           "P-13",
           "P-15",
           "P-18",
           "P-19",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-5",
          "target_kind": "axiom",
          "target_label": "Fail-closed monotone lattice",
          "url": "doctrine.html#dcard-ax-5"
         },
         {
          "relation": "guards",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-6",
          "target_kind": "principle",
          "target_label": "Status fails closed",
          "url": "doctrine.html#dcard-p-6"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-19",
          "target_kind": "principle",
          "target_label": "Classify residual pressure before wiring",
          "url": "doctrine.html#dcard-p-19"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-3.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-3.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Refusing rank-as-score does not raise the standing of any part or make the composite correct. It only keeps the number honest as a projection of the ceiling; the parts beneath it carry exactly the support they were already shown to have, and an uncovered part stays blocked rather than counted.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of reading a single summary number, like how many checks passed, as if it told you the whole thing is finished or ready, when parts you never measured could still be failing.",
        "analogy": {
         "text": "Reading a station board that says forty trains ran on time and concluding the whole network is running well, when several lines simply have no data on the board and could be down.",
         "maps": [
          {
           "doctrine": "a count or tally read as the standing of the whole",
           "analogy": "the forty-on-time number read as the whole network being fine"
          },
          {
           "doctrine": "a part with no admissible witness that should pin the whole low",
           "analogy": "a line with no data on the board that could be down"
          },
          {
           "doctrine": "the honest status being the weakest part, not the average",
           "analogy": "the network is only as good as its worst line, not the on-time count"
          }
         ],
         "boundary": "This shows only that a flattering tally can hide an unmeasured part. It does not establish the lines that do report are running well, and it does not establish anything about lines the board never covered."
        },
        "why_it_matters": "Counting passing checks as a maturity score quietly treats anything unmeasured as if it passed, so a project can look launch-ready while a required piece was never even tested.",
        "potential_misread": "That more passing checks always means more readiness. Extra passes only help if they cover a part that had no coverage before; repeating the same passing check adds nothing.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-3 is the roll-up fallacy the system polices in its own progress reporting: treating a number that summarises many parts as a verdict on the whole. A count of passing checks, a list of registered handles, a green validator, or a strong evidence-class label is a projection over an eight-component ceiling vector, and a high reading on one component can hide an uncovered provenance, freshness, or coverage component underneath it. This bites because it inverts how a composite is supposed to score: the honest status of a whole is the meet of its parts, where any part with no admissible witness sits at blocked, so a flattering average or a raw tally quietly reads a fail-open default as a pass. The repair is the count-theater rule: more passing cases raise standing only by covering a previously uncovered required obligation, lifting a sub-maximal ceiling component, or adding a missing negative case; redundant cases under the same basis are inert, and a rank stays a display of the ceiling, never the authority itself.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{report}(n) \\;\\wedge\\; n = |\\{\\,\\mathrm{pass}\\,\\}| \\;\\wedge\\; \\big(\\exists\\, p.\\ \\mathrm{status}(p) = \\bot\\big) \\;\\wedge\\; \\mathrm{status}(\\mathrm{whole}) \\sqsupset \\bigsqcap_{p} \\mathrm{status}(p)",
        "reads": "Reporting a tally of passing parts as the standing of the whole while some part has no admissible witness, so the claimed status rises above the meet of the parts that an uncovered part should pin to the bottom.",
        "symbols": [
         {
          "sym": "\\mathrm{report}(n)",
          "meaning": "reporting the count n as the standing of the whole"
         },
         {
          "sym": "n",
          "meaning": "a count, tally, or rank reported as maturity"
         },
         {
          "sym": "\\mathrm{pass}",
          "meaning": "a passing part counted into the tally"
         },
         {
          "sym": "p",
          "meaning": "a part of the composite (an obligation or component)"
         },
         {
          "sym": "\\bot",
          "meaning": "blocked: a part with no admissible witness"
         },
         {
          "sym": "\\mathrm{status}(\\mathrm{whole})",
          "meaning": "the claimed standing of the whole composite"
         },
         {
          "sym": "\\bigsqcap_{p} \\mathrm{status}(p)",
          "meaning": "the meet over parts, the weakest part's status"
         },
         {
          "sym": "\\sqsupset",
          "meaning": "claims a higher standing than"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The progress-and-readiness boundary, where a summary number is tempted to stand in for the standing of the whole.",
        "requires": "Scoring a composite as the meet of its parts, defaulting an unwitnessed part to blocked, and raising standing only by covering an uncovered obligation, lifting a sub-maximal component, or adding a missing negative case.",
        "refuses": "Treating counts, handles, passing validators, or evidence-class names as product maturity, launch-scope decision, or whole-system correctness.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The coverage ledger projects how many declared parts are actually materialised and keeps a case that forbids reading an absent entry as covered, so a coverage tally is exposed as a bounded count rather than a completeness claim.",
        "refs": [
         "self_ignorance_coverage_ledger"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A progress page reports that ninety checks pass and calls the system launch-ready, with several required parts carrying no witness at all and the unwitnessed gaps averaged away instead of pinning the whole to blocked.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "self_ignorance_coverage_ledger",
         "batch12_release_claim_language_gate"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-5",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-2",
        "P-6",
        "P-13",
        "P-15",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-3.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-3.json"
      }
     ],
     "visible_text_byte_count": 9774
    },
    {
     "object_id": "anti_principle:AP-4",
     "id": "AP-4",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Cache-across-drift",
     "relative_href": "docs/doctrine.html#dcard-ap-4",
     "read_href": "docs/doctrine.html#dcard-ap-4",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-4",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-4.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Caching by name, path, route, display label, or producer while basis content has drifted.",
     "statement": "Caching by name, path, route, display label, or producer while basis content has drifted.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-4.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-4"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Caching by name, path, route, display label, or producer while basis content has drifted.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-4",
           "AX-10"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-5",
           "P-11",
           "P-14",
           "P-15",
           "P-17"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-4",
          "target_kind": "axiom",
          "target_label": "Content-addressed determinism",
          "url": "doctrine.html#dcard-ax-4"
         },
         {
          "relation": "guards",
          "target_id": "AX-10",
          "target_kind": "axiom",
          "target_label": "Temporal validity and freshness contracts",
          "url": "doctrine.html#dcard-ax-10"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-5",
          "target_kind": "principle",
          "target_label": "Cache by content, not by name",
          "url": "doctrine.html#dcard-p-5"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-11",
          "target_kind": "principle",
          "target_label": "Bind volatile facts to refresh routes",
          "url": "doctrine.html#dcard-p-11"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-17",
          "target_kind": "principle",
          "target_label": "Anchor graph mutations to unique source rows",
          "url": "doctrine.html#dcard-p-17"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-4.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-4.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Catching one stale-by-handle reuse at one digest boundary does not establish every cache in the system tracks its basis. This object and its example are reader illustration; they never count as support or proof that freshness holds across the graph, and the source records the freshness component as an open gap rather than a closed one.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of reusing a saved answer that is filed under a name or address, after the actual thing behind that name has been changed or replaced.",
        "analogy": {
         "text": "Trusting a library catalogue card that says a title sits on shelf B, when the original book was quietly swapped for a different edition and the card was never updated.",
         "maps": [
          {
           "doctrine": "a cached result kept under a stable handle",
           "analogy": "the catalogue card filed under the title and shelf location"
          },
          {
           "doctrine": "the basis content that has drifted underneath the handle",
           "analogy": "the book on the shelf, swapped for a different edition"
          },
          {
           "doctrine": "keying reuse on a digest of the content, not the name",
           "analogy": "checking the actual book on the shelf matches before trusting the card"
          }
         ],
         "boundary": "This shows only that a stable label can outlive the thing it points to. It does not establish every card in the catalogue is being checked this way, and one caught mismatch says nothing about whether the rest of the shelves are current."
        },
        "why_it_matters": "Pipelines reuse saved results by name to stay fast, but if the underlying source was edited, the name keeps returning yesterday's answer and nobody notices the value is stale.",
        "potential_misread": "That an unchanged name means unchanged content. The name can stay identical while what it points to has been replaced underneath.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-4 is the failure the determinism and freshness floors exist to refuse: trusting a stable handle as if it still stood for stable content. It is tempting because the handle does not visibly change when the basis drifts, so a name lookup, a route, or a producer keeps returning yesterday's answer and the pipeline looks fast and consistent while quietly serving a stale value. This connects to the claim and evidence model directly: a cached result is a claim over a basis, and if its basis has moved, the certificate that once admitted it no longer holds, so the value has dropped to bottom evidence even though the label reads unchanged. The repair is content-addressed identity: derive the cache key from a digest of the basis, reuse only when that digest matches, and on drift recompute or refuse rather than serve the old value by its handle.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{reuse}(a) \\;\\wedge\\; \\mathrm{key}(a) = \\mathrm{handle} \\;\\wedge\\; H(B_{\\mathrm{now}}) \\neq H(B_{\\mathrm{cached}})",
        "reads": "Reusing a cached result by a stable handle when the digest of its basis now differs from the digest it was cached under.",
        "symbols": [
         {
          "sym": "a",
          "meaning": "a cached result being reused"
         },
         {
          "sym": "\\mathrm{reuse}(a)",
          "meaning": "result a is served from cache"
         },
         {
          "sym": "\\mathrm{key}(a)",
          "meaning": "the key the cache is addressed by"
         },
         {
          "sym": "\\mathrm{handle}",
          "meaning": "a name, path, route, label, or producer used as the key"
         },
         {
          "sym": "H",
          "meaning": "a content digest of a basis"
         },
         {
          "sym": "B_{\\mathrm{now}}",
          "meaning": "the current basis"
         },
         {
          "sym": "B_{\\mathrm{cached}}",
          "meaning": "the basis the result was derived from"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The reuse boundary, where a stable handle is mistaken for stable content.",
        "requires": "Keying reuse on a digest of the basis and recomputing or refusing when that digest drifts.",
        "refuses": "Serving a cached result by name, path, route, label, or producer after its basis content has changed.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The source-import protocol keys imported material on a content digest and refuses to reuse a copy when the source digest no longer matches, so a drifted source cannot be served by its old path.",
        "refs": [
         "macro_projection_import_protocol",
         "durable_agent_work_landing_replay"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A view keeps serving a number by its route because the route is unchanged, long after the source it was computed from has been edited underneath it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "macro_projection_import_protocol",
         "durable_agent_work_landing_replay",
         "doctrine_fact_claim_audit"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-4",
        "AX-10"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-5",
        "P-11",
        "P-14",
        "P-15",
        "P-17"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "guards",
       "target_id": "AX-10",
       "target_kind": "axiom",
       "target_label": "Temporal validity and freshness contracts",
       "url": "doctrine.html#dcard-ax-10"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-11",
       "target_kind": "principle",
       "target_label": "Bind volatile facts to refresh routes",
       "url": "doctrine.html#dcard-p-11"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-4.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-4.json"
      }
     ],
     "visible_text_byte_count": 8612
    },
    {
     "object_id": "anti_principle:AP-5",
     "id": "AP-5",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Unknown-unknown exhaustiveness",
     "relative_href": "docs/doctrine.html#dcard-ap-5",
     "read_href": "docs/doctrine.html#dcard-ap-5",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-5",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-5.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Treating missing evidence as evidence of absence outside a declared closed domain.",
     "statement": "Treating missing evidence as evidence of absence outside a declared closed domain.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-5.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-5"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Treating missing evidence as evidence of absence outside a declared closed domain.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-6"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-7",
           "P-19"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-6",
          "target_kind": "axiom",
          "target_label": "Open-world epistemics",
          "url": "doctrine.html#dcard-ax-6"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-7",
          "target_kind": "principle",
          "target_label": "Track known unknowns without claiming the unknown is mapped",
          "url": "doctrine.html#dcard-p-7"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-19",
          "target_kind": "principle",
          "target_label": "Classify residual pressure before wiring",
          "url": "doctrine.html#dcard-p-19"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-5.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-5.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Holding a gap open as unknown does not establish the missing claim either way; it keeps the absence from becoming a false negative, and it grants no support, completeness, or coverage beyond the declared finite domain it names.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of treating a place where you found nothing as a settled finding that nothing is there, when you may simply not have looked, or not looked everywhere.",
        "analogy": {
         "text": "A doctor reading a region of a scan as 'all clear' when that region was never actually imaged, so 'we saw no problem' gets reported as 'there is no problem'.",
         "maps": [
          {
           "doctrine": "a missing witness, an evidence gap",
           "analogy": "the region of the body that was never imaged"
          },
          {
           "doctrine": "reading that gap as a settled negative",
           "analogy": "reading the un-imaged region as 'all clear'"
          },
          {
           "doctrine": "closing as a negative only inside a declared finite domain where every case is checked",
           "analogy": "being able to say 'clear' only for the area actually scanned end to end"
          }
         ],
         "boundary": "This shows only that 'we found nothing' is not the same as 'there is nothing'. It does not establish whether the un-imaged region is actually healthy or not, and it does not turn a properly scanned clear area into a guarantee."
        },
        "why_it_matters": "An unexamined gap quietly reads as reassurance, so a coverage map can look finished when it has only stopped looking, hiding risk exactly where no one checked.",
        "potential_misread": "That a blank or absence is the same as a confirmed 'nothing here'. Absence of evidence is unknown, not a settled negative, unless the whole area was genuinely covered.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-5 is the failure AX-6 exists to refuse: turning a gap in evidence into a positive verdict of nothing-there. A required obligation with no admissible witness is an open coverage gap, not a refutation; it can be closed as a negative only inside a declared finite domain where every case is enumerable. This bites because it is the comfortable direction to round: a quiet absence reads as reassurance, and a coverage map that prints absent as clear looks finished when it has only stopped looking. It connects to the claim and evidence model through a distinction the system holds by construction: a missing witness is unknown, which is held separate from a value at the bottom of the evidence order, and unknown is kept distinct from a fail-closed block where an in-domain obligation has no admissible witness; collapsing any of these into proven-absent launders an open gap into a certified claim it cannot support.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{assert}\\big(\\mathrm{proven}(\\neg\\varphi)\\big) \\;\\wedge\\; \\neg\\,\\mathrm{proven}(\\varphi) \\;\\wedge\\; \\neg\\,\\mathrm{finite}(D)",
        "reads": "Reporting the negation of a claim as established while the claim is merely unproven and the domain was never declared finite, so an open gap is laundered into a settled negative.",
        "symbols": [
         {
          "sym": "\\varphi",
          "meaning": "a claim whose proof is missing"
         },
         {
          "sym": "\\mathrm{assert}\\big(\\mathrm{proven}(\\neg\\varphi)\\big)",
          "meaning": "reporting the negation as an established finding"
         },
         {
          "sym": "\\mathrm{proven}(\\varphi)",
          "meaning": "an admissible derivation exists for the claim"
         },
         {
          "sym": "\\mathrm{finite}(D)",
          "meaning": "D is a declared finite domain where closed-world coverage is valid"
         },
         {
          "sym": "D",
          "meaning": "the domain the reasoning ranges over"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The coverage boundary, where a missing witness is tempted into a settled negative.",
        "requires": "Holding an uncovered obligation as an open gap, and closing it as a negative only inside a declared finite domain.",
        "refuses": "Treating absence of evidence as evidence of absence outside a declared closed domain.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The coverage ledger records what the system has not established as an open gap with a declared scope, and keeps a case that fails if a blank is read as a clean negative, so an unexamined area cannot be reported as proven-absent.",
        "refs": [
         "self_ignorance_coverage_ledger"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A coverage map shows an area as clear because no failing case was found there, with no declared finite domain behind the closure, so an unsearched region is printed as a settled negative.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "self_ignorance_coverage_ledger",
         "doctrine_fact_claim_audit"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-6"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-7",
        "P-19"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-6",
       "target_kind": "axiom",
       "target_label": "Open-world epistemics",
       "url": "doctrine.html#dcard-ax-6"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-5.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-5.json"
      }
     ],
     "visible_text_byte_count": 7905
    },
    {
     "object_id": "anti_principle:AP-6",
     "id": "AP-6",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Inadmissible number emission",
     "relative_href": "docs/doctrine.html#dcard-ap-6",
     "read_href": "docs/doctrine.html#dcard-ap-6",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-6",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-6.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Emitting inadmissible numbers or conclusions instead of typed refusal.",
     "statement": "Emitting inadmissible numbers or conclusions instead of typed refusal.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-6.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-6"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Emitting inadmissible numbers or conclusions instead of typed refusal.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-7"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-8"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-7",
          "target_kind": "axiom",
          "target_label": "Typed partiality and refusal",
          "url": "doctrine.html#dcard-ax-7"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-8",
          "target_kind": "principle",
          "target_label": "Refuse inadmissible computations with typed reasons",
          "url": "doctrine.html#dcard-p-8"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-6.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-6.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Refusing one inadmissible emission at a named site does not establish a computation total or its in-domain numbers correct. It keeps the absence of an answer honest; the value it does return is still only as strong as the basis and check beneath it, and this record and its example never count as support for that.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of producing a number anyway when the thing it needs to be valid is missing, instead of clearly saying 'I cannot answer this and here is why'.",
        "analogy": {
         "text": "A pharmacist guessing and dispensing a dose when the patient's weight, the one input the formula needs, is missing, instead of stopping and saying the dose cannot be worked out yet.",
         "maps": [
          {
           "doctrine": "a precondition that does not hold",
           "analogy": "the missing patient weight the dose formula requires"
          },
          {
           "doctrine": "emitting a value anyway to keep going",
           "analogy": "guessing and handing over a dose regardless"
          },
          {
           "doctrine": "a typed refusal carrying its reason and evidence",
           "analogy": "a written note saying 'dose not computed: weight missing' instead of a number"
          }
         ],
         "boundary": "This shows only that a missing input should produce an explicit refusal, not a made-up answer. It does not establish that a dose computed with all the right inputs is correct, and a refusal is not itself a treatment."
        },
        "why_it_matters": "A fabricated number looks just like a real one downstream, so a statistic computed outside its valid range slides into later steps that trust it, while an honest refusal stops the bad value at the door.",
        "potential_misread": "That returning some number is more helpful than refusing. A number produced when its inputs are missing is worse than a refusal, because it hides as a usable result.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-6 is the failure AX-7 exists to refuse: when a computation's precondition does not hold, or a library it needs is absent, the code returns a number anyway instead of a typed refusal that names why it could not answer. It is tempting because a refusal reads as a red path and a number keeps the pipeline green, so a finance statistic computed past its valid sample size, or a silent NaN, slides downstream wearing the same shape as a real result. In the claim model that emitted number is a bare assertion with no admissible basis: it sits at the bottom of the evidence order, but unlike an honest gap it hides as a value later steps will trust. The repair is to totalize the partial function, return Ok only under a declared precondition and otherwise a refusal carrying a reason and the evidence for it, so the absence of an answer becomes a checkable typed object rather than a fabricated one.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\neg\\,\\mathrm{Pre}(x) \\;\\wedge\\; \\mathrm{emit}(g(x)) = y \\;\\wedge\\; y \\neq \\mathrm{Refusal}(r, e)",
        "reads": "The precondition fails, yet the computation emits a value y instead of a refusal carrying a reason and its evidence.",
        "symbols": [
         {
          "sym": "\\mathrm{Pre}(x)",
          "meaning": "the declared precondition the computation needs to hold"
         },
         {
          "sym": "\\mathrm{emit}(g(x))",
          "meaning": "emitting the partial computation's value as a result"
         },
         {
          "sym": "g(x)",
          "meaning": "the partial computation on input x"
         },
         {
          "sym": "y",
          "meaning": "an emitted number or conclusion"
         },
         {
          "sym": "\\mathrm{Refusal}(r, e)",
          "meaning": "a typed refusal carrying a reason r and evidence e"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The boundary where a partial computation must either answer under its precondition or refuse.",
        "requires": "Catching the inadmissible value: a totalized result that returns Ok only under a declared precondition and otherwise a refusal carrying a reason and evidence.",
        "refuses": "Emitting a meaningless statistic, a silent NaN, or an out-of-domain conclusion just to keep a green path.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The finance forecast evaluation component returns a typed refusal when a forecast horizon reaches or exceeds the sample size, or when the statistics dependency it needs is unavailable, rather than reporting a number computed outside its valid range.",
        "refs": [
         "finance_forecast_evaluation_spine"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A statistics routine returns a coefficient computed past its valid sample size, and a downstream summary reports it as a normal result because it arrived as a number and not as a refusal.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "finance_forecast_evaluation_spine",
         "corpus_readiness_mathlib_absence_gate"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-7"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-8"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-7",
       "target_kind": "axiom",
       "target_label": "Typed partiality and refusal",
       "url": "doctrine.html#dcard-ax-7"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-6.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-6.json"
      }
     ],
     "visible_text_byte_count": 7726
    },
    {
     "object_id": "anti_principle:AP-7",
     "id": "AP-7",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Public/private membrane breach",
     "relative_href": "docs/doctrine.html#dcard-ap-7",
     "read_href": "docs/doctrine.html#dcard-ap-7",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-7",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-7.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Letting untrusted, private, provider, prompt, account secret, or raw-voice material reach a privileged or public sink without provenance an\u2026",
     "statement": "Letting untrusted, private, provider, prompt, account secret, or raw-voice material reach a privileged or public sink without provenance and sanitizer transform.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-7.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-7"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Letting untrusted, private, provider, prompt, account secret, or raw-voice material reach a privileged or public sink without provenance and sanitizer transform.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-8"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-9",
           "P-14"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-8",
          "target_kind": "axiom",
          "target_label": "Provenance propagation and non-interference",
          "url": "doctrine.html#dcard-ax-8"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-7.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-7.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Guarding the membrane at named endpoints is a floor under AX-8, not a positive proof of non-interference across the whole graph; endpoint catches are not general propagation, and the example illustrates the boundary rather than computing any support for it.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of letting private or untrusted material reach a public or high-trust place just because the last step looked clean, without a label saying where it came from and without running it through a stated cleaning step first.",
        "analogy": {
         "text": "Waving a shipment through customs because the final truck looked ordinary, even though no declaration form rode with the goods and no inspection was actually performed.",
         "maps": [
          {
           "doctrine": "the private or untrusted value entering a flow",
           "analogy": "the goods arriving at the border"
          },
          {
           "doctrine": "the public or high-trust place it reaches (the sink)",
           "analogy": "entry into the country past customs"
          },
          {
           "doctrine": "the provenance label that must travel with the value",
           "analogy": "the declaration form stating where the goods are from"
          },
          {
           "doctrine": "the declared cleaning step the value must pass through",
           "analogy": "the actual inspection that clears the goods"
          },
          {
           "doctrine": "the clean-looking final step that hides the breach",
           "analogy": "the ordinary truck that makes everyone wave it through"
          }
         ],
         "boundary": "This shows the crossing must be gated by what travels with the goods, not by how the truck looks; it does not establish that checking goods at one border post keeps every border in the country clean, and one clean shipment does not mean the whole supply chain is safe."
        },
        "why_it_matters": "It is how a system can publish from private-adjacent sources at all without leaking secrets, account secrets, or planted instructions onto a public page.",
        "potential_misread": "That if the last copy step looks tidy and nothing obviously private is visible, the material is safe to publish.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-7 is the failure AX-8 exists to refuse: a value crosses into a public or privileged sink carrying trust it never earned. It bites because the final step usually looks clean, so a pipeline that copies a private-adjacent body, a model-output data, a prompt instruction, or source notes into a published page passes its own checks while leaking, since nothing recomputed where the value came from or what was done to it on the way. The repair follows the boundary model directly: a provenance class and ceiling must travel with the value, and untrusted material may reach the sink only through a declared transform whose output the sink's policy admits, never a clean label stamped on at the door. This is the membrane that lets the system publish from private-adjacent source at all, because the act of crossing is gated by carried provenance rather than by how the endpoint happens to look.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "(x \\to s) \\;\\wedge\\; \\mathrm{label}(x) \\sqsupset \\mathrm{policy}(s) \\;\\wedge\\; \\neg\\,\\exists\\, T.\\ \\big(x \\to T \\to s \\;\\wedge\\; \\mathrm{declared}(T) \\;\\wedge\\; \\mathrm{label}(T(x)) \\sqsubseteq \\mathrm{policy}(s)\\big)",
        "reads": "A flow carries x into a sink s while x's carried provenance label sits above what the sink's policy may admit, and the flow passes through no declared sanitizing transform whose output label the sink's policy admits.",
        "symbols": [
         {
          "sym": "x",
          "meaning": "an untrusted, private, provider, prompt, or raw-voice value entering a flow"
         },
         {
          "sym": "s",
          "meaning": "a public or privileged sink"
         },
         {
          "sym": "\\mathrm{label}(x)",
          "meaning": "x's carried provenance class and ceiling"
         },
         {
          "sym": "\\mathrm{policy}(s)",
          "meaning": "what the sink is allowed to admit"
         },
         {
          "sym": "\\sqsupset",
          "meaning": "sits above the ceiling the sink admits"
         },
         {
          "sym": "T",
          "meaning": "a declared sanitizing transform"
         },
         {
          "sym": "\\mathrm{declared}(T)",
          "meaning": "T is a declared sanitizing transform whose output the sink's policy admits"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The boundary where material and its trust label cross into a public or privileged sink.",
        "requires": "Carrying a provenance class and ceiling with the value, and routing untrusted material through a declared transform the sink's policy admits before it crosses.",
        "refuses": "Untrusted, private, provider, prompt, account secret, or raw-voice material reaching a privileged or public sink on a clean-looking final step, with no provenance carried and no declared transform applied.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The prompt-injection replay carries an information-flow policy with the data, so an untrusted instruction arriving at a tool call is caught at the boundary instead of trusted for having reached a trusted endpoint.",
        "refs": [
         "indirect_prompt_injection_information_flow_policy_replay"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A public page prints a value lifted from a private-adjacent source because the final copy step looked clean, with no provenance carried across the copy and no sanitizing transform between the source and the page.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "indirect_prompt_injection_information_flow_policy_replay",
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-8"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-9",
        "P-14"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-7.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-7.json"
      }
     ],
     "visible_text_byte_count": 8889
    },
    {
     "object_id": "anti_principle:AP-8",
     "id": "AP-8",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Blind irreversible mutation",
     "relative_href": "docs/doctrine.html#dcard-ap-8",
     "read_href": "docs/doctrine.html#dcard-ap-8",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-8",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-8.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Performing irreversible mutation without a compensator, rollback result record, CAS/world-version guard, or explicit irreversible boundary.",
     "statement": "Performing irreversible mutation without a compensator, rollback result record, CAS/world-version guard, or explicit irreversible boundary.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-8.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-8"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Performing irreversible mutation without a compensator, rollback result record, CAS/world-version guard, or explicit irreversible boundary.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-9"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-10",
           "P-16",
           "P-17",
           "P-18"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-9",
          "target_kind": "axiom",
          "target_label": "Compensable transactional effects",
          "url": "doctrine.html#dcard-ax-9"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-10",
          "target_kind": "principle",
          "target_label": "Do not land effects without compensation",
          "url": "doctrine.html#dcard-p-10"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-16",
          "target_kind": "principle",
          "target_label": "Bind authority to transaction scope",
          "url": "doctrine.html#dcard-p-16"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-17",
          "target_kind": "principle",
          "target_label": "Anchor graph mutations to unique source rows",
          "url": "doctrine.html#dcard-p-17"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-8.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-8.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Guarding the named landing paths against blind writes does not establish every effect in the system is reversible or race-free. It holds the specific obligations AX-9 names, compensator-or-boundary, compare-and-swap, single-writer, over the surfaces that bind them, and the example illustrates that floor rather than counting as support for it.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of making a real, hard-to-undo change while assuming it can always be taken back, when nothing was set up to take it back and nothing checked the situation had not already moved.",
        "analogy": {
         "text": "Sending a bank transfer with no way to recall it and without first checking the account balance had not already changed since you looked.",
         "maps": [
          {
           "doctrine": "the irreversible effect being written",
           "analogy": "the money leaving your account"
          },
          {
           "doctrine": "the compensator or declared irreversible boundary",
           "analogy": "either a recall option or an upfront note that this transfer cannot be reversed"
          },
          {
           "doctrine": "the compare-and-swap check against the expected parent state",
           "analogy": "confirming the balance still matches what you saw before you authorise the send"
          },
          {
           "doctrine": "two writers racing on the same path",
           "analogy": "two people moving money from the same account at once"
          }
         ],
         "boundary": "This shows the obligation to set up a recall path and a balance check before sending; it does not establish that every transaction in the bank is reversible or race-free, only that these specific steps were put in place for this send."
        },
        "why_it_matters": "It stops a change from silently overwriting someone else's concurrent work or landing half-done with no recorded way to undo it.",
        "potential_misread": "That because the normal case completes fine, you can always undo a change later if something goes wrong.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-8 is the failure AX-9 exists to refuse: writing a real effect into the world while assuming it can always be taken back, when nothing was put in place to take it back. It bites because the happy path looks identical whether or not a guard exists; the gap only appears when two writers race, a parent state has already moved, or a step half-lands and there is no recorded way to undo it. The repair is to make every effect declare its own reversibility up front: a compensator or an explicitly named irreversible boundary, multi-step effects landing under compare-and-swap against an expected parent, and same-path writes held to a single writer. This connects to the evidence model through provenance and freshness rather than through a label: a write is only safe to treat as landed when the state it assumed is still the state it is acting on, and a record of how to reverse it travels with the effect rather than being assumed after the fact.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{effect}(e) \\;\\wedge\\; \\big(\\neg\\,\\exists\\, c.\\ \\mathrm{compensates}(c, e)\\big) \\;\\wedge\\; \\neg\\,\\mathrm{irrev}(e) \\;\\wedge\\; \\neg\\,\\mathrm{cas}(e, \\mathrm{parent})",
        "reads": "An effect e is landed while no compensator reverses it, no irreversible boundary is declared for it, and no compare-and-swap guards it against the parent state having advanced.",
        "symbols": [
         {
          "sym": "\\mathrm{effect}(e)",
          "meaning": "e is a real effect being written to the world"
         },
         {
          "sym": "e",
          "meaning": "an effect being written to the world"
         },
         {
          "sym": "c",
          "meaning": "a compensator that would reverse the effect"
         },
         {
          "sym": "\\mathrm{compensates}(c, e)",
          "meaning": "c is a compensator that reverses effect e"
         },
         {
          "sym": "\\mathrm{irrev}(e)",
          "meaning": "an explicit declaration that the effect cannot be undone"
         },
         {
          "sym": "\\mathrm{cas}(e, \\mathrm{parent})",
          "meaning": "a compare-and-swap guard checking the parent state has not advanced under e"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The effect boundary, where a mutation is treated as safely landed.",
        "requires": "Catching the blind write: a compensator or a declared irreversible boundary, compare-and-swap against the expected parent for multi-step effects, and a single writer per path.",
        "refuses": "Writing an irreversible effect with no compensator, no rollback record, no compare-and-swap or world-version guard, and no declared irreversible boundary.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The work-landing replay refuses to advance when the expected parent has moved under it and when the head was not advanced as recorded, so a multi-step effect cannot land blindly over a state that has already changed.",
        "refs": [
         "durable_agent_work_landing_replay",
         "mission_transaction_work_spine"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A step writes directly over a shared path on the assumption the prior state still holds, with no compare-and-swap and no way to reverse it, so a concurrent write is silently overwritten.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "mission_transaction_work_spine",
         "durable_agent_work_landing_replay",
         "concurrency_mission_control"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-9"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-10",
        "P-16",
        "P-17",
        "P-18"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-10",
       "target_kind": "principle",
       "target_label": "Do not land effects without compensation",
       "url": "doctrine.html#dcard-p-10"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-8.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-8.json"
      }
     ],
     "visible_text_byte_count": 8952
    },
    {
     "object_id": "anti_principle:AP-9",
     "id": "AP-9",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Frozen live fact",
     "relative_href": "docs/doctrine.html#dcard-ap-9",
     "read_href": "docs/doctrine.html#dcard-ap-9",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-9",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-9.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Freezing live facts in prose without `as_of`, basis, and rederive contract.",
     "statement": "Freezing live facts in prose without `as_of`, basis, and rederive contract.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-9.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-9"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Freezing live facts in prose without `as_of`, basis, and rederive contract.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-10"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-11"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-10",
          "target_kind": "axiom",
          "target_label": "Temporal validity and freshness contracts",
          "url": "doctrine.html#dcard-ax-10"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-11",
          "target_kind": "principle",
          "target_label": "Bind volatile facts to refresh routes",
          "url": "doctrine.html#dcard-p-11"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-9.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-9.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Blocking unbound live values does not establish a freshness contract is in place everywhere, nor that any carried as-of value is current. It is a floor under AX-10 and P-11; it catches the frozen figure, it does not certify that the figures still bound to a basis are fresh.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of writing a moving number or a 'current' status into permanent text as if it were a fixed fact, with no note of when it was read, what it was read from, and no way to recompute it.",
        "analogy": {
         "text": "Printing a train's departure time onto a permanent sign instead of leaving it on the live board, so it keeps showing the old time long after the schedule changes.",
         "maps": [
          {
           "doctrine": "the live value (a count or current state)",
           "analogy": "the train's departure time, which keeps changing"
          },
          {
           "doctrine": "freezing it into durable prose",
           "analogy": "printing it onto a permanent sign"
          },
          {
           "doctrine": "the as-of time that should travel with it",
           "analogy": "a timestamp saying when this time was accurate"
          },
          {
           "doctrine": "the basis it was read from",
           "analogy": "the underlying timetable the departure time came from"
          },
          {
           "doctrine": "the rederive route that recomputes it",
           "analogy": "the live board you could check to get the real current time"
          }
         ],
         "boundary": "This shows that a moving value frozen in permanent text drifts while the text stays put; it does not establish that any value left on the live board is itself currently correct, only that a printed sign loses the ability to be re-checked."
        },
        "why_it_matters": "It keeps readers from trusting a stale figure that reads exactly like a live one, long after the real number has moved.",
        "potential_misread": "That because the number was true the moment it was written down, it stays a reliable fact afterward.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-9 is the failure AX-10 exists to refuse: writing a live value into prose as if it were a fixed fact. A count, a \"current\" total, a readiness signal, or a route tally is a cached read of moving state, so the moment it lands in text without an as-of time, a named basis, and a way to recompute it, the page starts asserting something it can no longer check. It is tempting because the number is true at the instant it is written, and the freshness contract feels like clutter next to a clean figure. The bite is that the value drifts while the prose does not, and a stale figure reads exactly like a live one; under the claim and evidence model the figure has quietly become a bare assertion, admissible only at the bottom of the evidence order because nothing can rederive it. The honest forms are the ones P-11 names: carry the freshness fields, keep the value out of durable prose, or mark it explicitly as a dated snapshot.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{durable}(\\varphi) \\;\\wedge\\; \\mathrm{live}(\\varphi) \\;\\wedge\\; \\neg\\,\\exists\\, a, b, r.\\ \\mathrm{carries}(\\varphi, \\langle a, b, r \\rangle)",
        "reads": "A live-state value is frozen into durable prose while no as-of time, basis, and rederive route travel with it.",
        "symbols": [
         {
          "sym": "\\varphi",
          "meaning": "a value written into durable text"
         },
         {
          "sym": "\\mathrm{durable}(\\varphi)",
          "meaning": "the value is frozen into durable prose"
         },
         {
          "sym": "\\mathrm{live}(\\varphi)",
          "meaning": "the value is a read of moving state (a count, a current total, a readiness signal)"
         },
         {
          "sym": "a",
          "meaning": "the as-of time the read was taken"
         },
         {
          "sym": "b",
          "meaning": "the basis the value was computed from"
         },
         {
          "sym": "r",
          "meaning": "the route that recomputes it"
         },
         {
          "sym": "\\mathrm{carries}(\\varphi, \\langle a, b, r \\rangle)",
          "meaning": "the value carries its as-of time, basis, and rederive route"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The time-and-freshness boundary, where a moving value is written down as if it were fixed.",
        "requires": "Catching the freeze: a live value must carry an as-of time, a basis, and a rederive route, stay out of durable prose, or be marked a dated snapshot.",
        "refuses": "Freezing a count, a \"current\" state, or a live total into prose with no as-of, basis, or way to re-derive it.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The fact-claim audit treats a volatile count written without a freshness contract as a blocking condition rather than a fact, so a frozen live number is caught instead of trusted because it once was true.",
        "refs": [
         "doctrine_fact_claim_audit"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A page states \"the system has 77 components\" as a flat fact; the figure was right when typed, but nothing records when it was read or how to recompute it, and it keeps reading as current long after it drifts.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "doctrine_fact_claim_audit",
         "batch10_live_source_drift_capsule"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-10"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-10",
       "target_kind": "axiom",
       "target_label": "Temporal validity and freshness contracts",
       "url": "doctrine.html#dcard-ax-10"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-11",
       "target_kind": "principle",
       "target_label": "Bind volatile facts to refresh routes",
       "url": "doctrine.html#dcard-p-11"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-9.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-9.json"
      }
     ],
     "visible_text_byte_count": 8008
    },
    {
     "object_id": "anti_principle:AP-10",
     "id": "AP-10",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Prose-as-executable-authority",
     "relative_href": "docs/doctrine.html#dcard-ap-10",
     "read_href": "docs/doctrine.html#dcard-ap-10",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-10",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-10.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Granting executable authority to prose doctrine without grammar and result record obligations.",
     "statement": "Granting executable authority to prose doctrine without grammar and result record obligations.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-10.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-10"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Granting executable authority to prose doctrine without grammar and result record obligations.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-11"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-12",
           "P-15",
           "P-17",
           "P-18",
           "P-19",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-12",
          "target_kind": "principle",
          "target_label": "Make doctrine executable before authoritative",
          "url": "doctrine.html#dcard-p-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-17",
          "target_kind": "principle",
          "target_label": "Anchor graph mutations to unique source rows",
          "url": "doctrine.html#dcard-p-17"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-19",
          "target_kind": "principle",
          "target_label": "Classify residual pressure before wiring",
          "url": "doctrine.html#dcard-p-19"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-20",
          "target_kind": "principle",
          "target_label": "Bind result records before record authority",
          "url": "doctrine.html#dcard-p-20"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-10.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-10.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Rejecting prose-as-authority is a floor under AX-11, not a positive proof that any admitted standard is correct or complete. It keeps unparsed prose from governing; a standard that does pass the grammar is still only as strong as the obligations it actually carries, and this example illustrates the rule without counting as support for it.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of treating a confidently written paragraph as a binding rule, when the system never accepted it through its formal checks and it never says what evidence it owes or where it does not apply.",
        "analogy": {
         "text": "Treating a hand-written 'this person may enter' note taped to a door as real access, when it was never entered into the building's access system and never says which areas or hours it covers.",
         "maps": [
          {
           "doctrine": "the prose doctrine claiming to govern",
           "analogy": "the hand-written note on the door"
          },
          {
           "doctrine": "membership in the executable grammar",
           "analogy": "being registered in the building's access system"
          },
          {
           "doctrine": "the result-record obligations it must declare",
           "analogy": "stating what proof of access it must show"
          },
          {
           "doctrine": "the stated scope limit (what it does not establish)",
           "analogy": "naming which areas and hours the pass does not cover"
          }
         ],
         "boundary": "This shows that an unregistered note is only a readable claim, not real access; it does not establish that a pass which is registered is therefore correct or sufficient, only that an unregistered one should not open doors."
        },
        "why_it_matters": "It stops a pile of confident-sounding paragraphs from accumulating as if they were enforced rules nothing can actually check.",
        "potential_misread": "That a clearly and authoritatively worded statement is, by virtue of how it reads, a rule the system enforces.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-10 is the failure AX-11 exists to refuse: letting a sentence govern because it sounds authoritative. A standard, a policy line, or a doctrine page may bind behaviour only when an executable grammar accepts it and it carries result-record obligations and a stated scope limit; prose on its own is a readable view, not a rule. It is tempting because writing a confident paragraph is cheap and reads like governance, so a system accumulates prose that nothing can recompute and mistakes that pile for an enforced contract. The repair is to make the artifact pass the grammar and attach what evidence it must produce and what it does not establish, otherwise holding it at the strength of a projection rather than an authority.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{authority}(d) \\;\\wedge\\; \\big(d \\notin L(G) \\;\\vee\\; \\neg\\,\\mathrm{obligations}(d) \\;\\vee\\; \\neg\\,\\mathrm{anticlaim}(d)\\big) \\;\\Rightarrow\\; \\mathsf{reject}",
        "reads": "If an artifact is granted governing authority while it is not accepted by the doctrine grammar, or carries no result-record obligations, or carries no scope limit, reject the authority and treat the prose as a projection.",
        "symbols": [
         {
          "sym": "d",
          "meaning": "a doctrine artifact (standard, policy, page) claiming to govern"
         },
         {
          "sym": "\\mathrm{authority}(d)",
          "meaning": "d is treated as a binding rule, not a readable view"
         },
         {
          "sym": "L(G)",
          "meaning": "the language of artifacts the executable doctrine grammar accepts"
         },
         {
          "sym": "\\mathrm{obligations}(d)",
          "meaning": "d declares the result records it must produce"
         },
         {
          "sym": "\\mathrm{anticlaim}(d)",
          "meaning": "d states its scope limit, what it does not establish"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The boundary between doctrine that governs and prose that only reads as if it does.",
        "requires": "Refusing authority to any doctrine that is not accepted by the grammar or lacks declared result-record obligations and a stated scope limit, holding it as a projection instead.",
        "refuses": "Granting executable authority to prose doctrine without grammar membership, result-record obligations, and a scope limit.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The executable doctrine grammar accepts a standard as authority only when it parses in the grammar and carries its obligation and scope-limit fields, and keeps a negative case where a prose-only standard that overclaims completeness is rejected rather than admitted.",
        "refs": [
         "executable_doctrine_grammar"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A confidently worded policy paragraph is cited as the binding rule for a behaviour, although nothing parses or checks it and it never says what it does not cover.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "executable_doctrine_grammar",
         "standards_meta_diagnostics"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-11"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-12",
        "P-15",
        "P-17",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-10.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-10.json"
      }
     ],
     "visible_text_byte_count": 8868
    },
    {
     "object_id": "anti_principle:AP-11",
     "id": "AP-11",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Meta-artifact exemption",
     "relative_href": "docs/doctrine.html#dcard-ap-11",
     "read_href": "docs/doctrine.html#dcard-ap-11",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-11",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-11.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Exempting Microcosm's own result records, docs, releases, generated projections, or validators from Microcosm's evidence gates.",
     "statement": "Exempting Microcosm's own result records, docs, releases, generated projections, or validators from Microcosm's evidence gates.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-11.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-11"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Exempting Microcosm's own result records, docs, releases, generated projections, or validators from Microcosm's evidence gates.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-12"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-13",
           "P-18",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-20",
          "target_kind": "principle",
          "target_label": "Bind result records before record authority",
          "url": "doctrine.html#dcard-p-20"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-11.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-11.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Refusing the meta exemption does not make the system witnessed, complete, or correct. Admission, support, and this refusal are independent; closing the escape hatch only removes the special pleading, and the worked example illustrates the rule without counting as support for any claim that the system actually meets its own floor everywhere.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of letting the system's own pages, checkers, result records, or generated views skip the very evidence test it makes everything else pass, just because it is the system talking about itself.",
        "analogy": {
         "text": "A testing lab that strictly retests every sample sent in from outside, but lets its own internal samples through on the lab's say-so without running the same test.",
         "maps": [
          {
           "doctrine": "the system's own pages, checkers, records, and projections",
           "analogy": "the lab's own internal samples"
          },
          {
           "doctrine": "the evidence floor it imposes on external claims",
           "analogy": "the same test run on every outside sample"
          },
          {
           "doctrine": "accepting a self-claim without that floor",
           "analogy": "passing the internal sample on the lab's own word"
          },
          {
           "doctrine": "the support evaluator that must meet the floor it computes",
           "analogy": "the lab's own quality check still having to be tested itself"
          }
         ],
         "boundary": "This shows that the same test must apply to the lab's own samples, removing the self-discount; it does not establish that passing that test makes any sample clean, only that the lab cannot exempt itself from running it."
        },
        "why_it_matters": "It lets the system state its own limits honestly instead of having a flattering self-assessment quietly become a new unchecked claim.",
        "potential_misread": "That a claim is more trustworthy because the system is reporting on itself, so it deserves a lighter check than outside claims.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-11 is the escape hatch AX-12 exists to close: a self-claim that gets a discount because the system is talking about itself. It is tempting because the floor is demanding and the meta-layer feels trusted, so a generated page, a validator's own verdict, a result record, or a coverage projection slips through asserting \"verified and complete\" without passing the admissibility relation it imposes on external work. It bites hardest at the support evaluator, which must itself meet the support floor it computes, and at this very page, which is held below the source it describes and cannot raise that source's authority. The honest move is to route every self-claim through the same gate, so the system can state its own limits without that statement quietly becoming a new unchecked claim.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\exists\\, a \\in \\mathcal{M}.\\ \\exists\\, \\varphi \\in \\mathrm{claims}(a).\\ \\mathsf{accept}(\\varphi) \\;\\wedge\\; \\neg\\,\\mathrm{adm}_{\\mathrm{ext}}(\\varphi)",
        "reads": "Some claim carried by one of the system's own artifacts is accepted even though it would not be admitted under the same relation an external claim must pass.",
        "symbols": [
         {
          "sym": "\\mathcal{M}",
          "meaning": "the system's own artifacts: its pages, validators, records, and projections"
         },
         {
          "sym": "a",
          "meaning": "any such artifact"
         },
         {
          "sym": "\\varphi",
          "meaning": "a claim carried by the artifact about the system"
         },
         {
          "sym": "\\mathrm{claims}(a)",
          "meaning": "the claims the artifact carries about the system"
         },
         {
          "sym": "\\mathsf{accept}",
          "meaning": "the claim is let through"
         },
         {
          "sym": "\\mathrm{adm}_{\\mathrm{ext}}",
          "meaning": "the admissibility floor applied to an external claim"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The reflexive boundary, where a claim the system makes about itself is tempted to skip its own gate.",
        "requires": "Routing every self-claim, in a page, validator, result record, or projection, through the same admissibility and refusal floor imposed on external claims.",
        "refuses": "A self-assessment of verified, complete, or launch-ready that would never pass the floor the system applies to the work it audits.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The launch wording gate runs the same claim-language floor over the system's own public copy that it imposes on any other source, so overclaiming language in the system's own pages is blocked rather than waved through as a trusted self-statement.",
        "refs": [
         "batch12_release_claim_language_gate"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A generated page reports the system as verified and complete because its own coverage projection said so, with nothing recomputing that self-claim against the floor the system imposes on external work.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "batch12_release_claim_language_gate",
         "executable_doctrine_grammar"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-13",
        "P-18",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-11.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-11.json"
      }
     ],
     "visible_text_byte_count": 8489
    },
    {
     "object_id": "anti_principle:AP-12",
     "id": "AP-12",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Synthetic system substitution",
     "relative_href": "docs/doctrine.html#dcard-ap-12",
     "read_href": "docs/doctrine.html#dcard-ap-12",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-12",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-12.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Using synthetic fixtures as substitutes for available system.",
     "statement": "Using synthetic fixtures as substitutes for available system.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-12.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-12"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Using synthetic fixtures as substitutes for available system.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-1",
           "AX-4",
           "AX-8"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-1",
           "P-2",
           "P-5",
           "P-9",
           "P-14",
           "P-15",
           "P-17"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-1",
          "target_kind": "axiom",
          "target_label": "Derivation before assertion",
          "url": "doctrine.html#dcard-ax-1"
         },
         {
          "relation": "guards",
          "target_id": "AX-4",
          "target_kind": "axiom",
          "target_label": "Content-addressed determinism",
          "url": "doctrine.html#dcard-ax-4"
         },
         {
          "relation": "guards",
          "target_id": "AX-8",
          "target_kind": "axiom",
          "target_label": "Provenance propagation and non-interference",
          "url": "doctrine.html#dcard-ax-8"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-1",
          "target_kind": "principle",
          "target_label": "Recompute, do not echo",
          "url": "doctrine.html#dcard-p-1"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-5",
          "target_kind": "principle",
          "target_label": "Cache by content, not by name",
          "url": "doctrine.html#dcard-p-5"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-12.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-12.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Refusing synthetic substitution does not make the real basis correct, complete, or strong, and it does not forbid synthetic fixtures where they are declared as such. It only stops a fabricated input from carrying a real basis's weight; this example is reader illustration and never counts as support for the rule.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of building a real conclusion on a made-up stand-in input when genuine, shareable material was right there to use, so the fake input quietly lends the conclusion strength it never earned.",
        "analogy": {
         "text": "A lab keeps a bag of practice 'dummy' blood for training, but when a real patient test is needed the technician uses a dummy bag instead of the available real sample and reports the result as a genuine reading.",
         "maps": [
          {
           "doctrine": "the synthetic fixture standing in for real material",
           "analogy": "the practice dummy blood bag"
          },
          {
           "doctrine": "the available real material",
           "analogy": "the real patient sample that was on hand"
          },
          {
           "doctrine": "the real claim that inherits unearned strength",
           "analogy": "the result reported as a genuine patient reading"
          }
         ],
         "boundary": "This shows only that a stand-in must not be passed off as the real input when the real input was available; it does not say practice dummy bags are useless, and it does not establish that the real sample, once used, would give a correct or complete reading."
        },
        "why_it_matters": "Readers can tell whether a stated result rests on something real and shareable or on a convenient placeholder, so they can judge how much to lean on it.",
        "potential_misread": "That a stand-in is fine because it looks identical to the real thing on the page. The tempting wrong belief is that looking the same means it can carry the same weight.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-12 is the failure AX-1, AX-4, and AX-8 jointly refuse: substituting a synthetic fixture for available real material and then letting a real claim ride on it. A synthetic stand-in has no derivation from anything real (so AX-1's checker has nothing to recompute), it is not the content hash of any real basis (so AX-4 cannot tell when it has drifted from the thing it stands for), and it carries no real provenance (so AX-8's label is fabricated at the door rather than propagated). It is tempting because a synthetic fixture is convenient and looks identical to a real one on the page, and the system itself admits synthetic fixtures for shape and negative cases; the line AP-12 polices is narrower, when real material exists, a synthetic substitute must not silently inherit a real basis's strength.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\exists\\, \\varphi.\\ \\mathrm{basis}(\\varphi) = B_{\\mathrm{syn}} \\;\\wedge\\; \\mathrm{avail}(B_{\\mathrm{real}}) \\;\\wedge\\; H(B_{\\mathrm{syn}}) \\neq H(B_{\\mathrm{real}}) \\;\\wedge\\; \\mathrm{strength}(\\varphi) \\sqsupset \\bot",
        "reads": "A claim is grounded on a synthetic basis while a real basis was available, the stand-in's content hash differs from the real basis's hash (it was not derived from the real material), and the claim is still allowed to carry more than bottom strength.",
        "symbols": [
         {
          "sym": "\\varphi",
          "meaning": "a claim that carries real weight"
         },
         {
          "sym": "\\mathrm{basis}(\\varphi)",
          "meaning": "the basis the claim is grounded on"
         },
         {
          "sym": "B_{\\mathrm{syn}}",
          "meaning": "the synthetic fixture it is grounded on"
         },
         {
          "sym": "\\mathrm{avail}(B_{\\mathrm{real}})",
          "meaning": "the real material was available to read"
         },
         {
          "sym": "B_{\\mathrm{real}}",
          "meaning": "the real material that was available"
         },
         {
          "sym": "H(B_{\\mathrm{real}})",
          "meaning": "the content hash of that real basis"
         },
         {
          "sym": "\\mathrm{strength}(\\varphi)",
          "meaning": "the evidence strength the claim is allowed to carry"
         },
         {
          "sym": "\\bot",
          "meaning": "bottom: the strength a fabricated input may carry"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The basis boundary, where a claim is grounded on a real or a fabricated input.",
        "requires": "Grounding a load-bearing claim on available real material, or holding the claim at bottom and labelling the input synthetic when only a fixture stands in.",
        "refuses": "Substituting a synthetic fixture for available real material and letting the claim inherit a strength the real basis never granted.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The source-import protocol brings real material in by manifest and digest so a real claim is grounded on content-addressed real input, rather than a synthetic stand-in fabricated in its place.",
        "refs": [
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A readiness claim is grounded on a synthetic corpus fixture and reported as real coverage, even though the actual corpus was available to read.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "macro_projection_import_protocol",
         "corpus_readiness_mathlib_absence_gate"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-1",
        "AX-4",
        "AX-8"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-1",
        "P-2",
        "P-5",
        "P-9",
        "P-14",
        "P-15",
        "P-17"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "guards",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "guards",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-12.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-12.json"
      }
     ],
     "visible_text_byte_count": 9115
    },
    {
     "object_id": "anti_principle:AP-13",
     "id": "AP-13",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Generated-result record source inversion",
     "relative_href": "docs/doctrine.html#dcard-ap-13",
     "read_href": "docs/doctrine.html#dcard-ap-13",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-13",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-13.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Treating generated result records as hand-authored source.",
     "statement": "Treating generated result records as hand-authored source.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-13.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-13"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Treating generated result records as hand-authored source.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-4",
           "AX-11"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-5",
           "P-12",
           "P-14",
           "P-15",
           "P-17",
           "P-18",
           "P-19",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-4",
          "target_kind": "axiom",
          "target_label": "Content-addressed determinism",
          "url": "doctrine.html#dcard-ax-4"
         },
         {
          "relation": "guards",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-5",
          "target_kind": "principle",
          "target_label": "Cache by content, not by name",
          "url": "doctrine.html#dcard-p-5"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-12",
          "target_kind": "principle",
          "target_label": "Make doctrine executable before authoritative",
          "url": "doctrine.html#dcard-p-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-17",
          "target_kind": "principle",
          "target_label": "Anchor graph mutations to unique source rows",
          "url": "doctrine.html#dcard-p-17"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-13.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-13.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Keeping generated records bound to their basis does not make either the record or the source correct, and this example illustrates the rule without supporting it. Refusing the inversion only preserves lineage; it does not establish that the basis it points back to is itself true or complete.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of treating an auto-generated summary record as if it were the hand-written original, then editing or quoting that summary as the source while the real source it was built from is left behind and no longer matches.",
        "analogy": {
         "text": "Scribbling a correction onto a library's catalogue card and then citing the card as the book, when the card was only ever copied from the book and the book itself still says something different.",
         "maps": [
          {
           "doctrine": "the generated record derived from a source",
           "analogy": "the catalogue card copied from the book"
          },
          {
           "doctrine": "the hand-authored source it should defer to",
           "analogy": "the actual book on the shelf"
          },
          {
           "doctrine": "editing or citing the record as origin",
           "analogy": "writing on the card and citing the card as the book"
          }
         ],
         "boundary": "This shows only that a copied card must stay below the book and be redone from it, never used as the origin; it stops there and does not establish that the book itself is correct or up to date."
        },
        "why_it_matters": "It keeps a generated view from quietly outranking the thing it was built from, so a reader knows which artifact is the real origin and which is just a downstream copy.",
        "potential_misread": "That whichever copy is already sitting in front of you, with a confident verdict on it, is the thing to edit and cite. The tempting wrong belief is that the handy artifact is the source.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-13 is the lineage confusion that AX-4 and AX-11 exist to refuse: mistaking a generated result record for the hand-authored source it was derived from. A generated record is a function of a basis, so its identity is the hash of that basis, and its authority can never exceed the basis it recomputes from; the moment it is read as source, it is cut loose from that basis, so drift no longer forces a recompute and a hand-edit to the record becomes an orphan with nothing underneath it. It is tempting because a generated record often looks authored, carries a confident verdict, and is the artifact already on disk, so the cheaper move is to cite it or edit it in place rather than fix the source and regenerate. The repair is to keep the kinds apart by construction: source is hand-authored and content-addresses its outputs, a generated record stays below its basis and is rebuilt from it, and a parity check refuses the record whenever it has drifted from the source it claims to project.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{generated}(r) \\;\\wedge\\; r = f(B) \\;\\wedge\\; \\mathrm{treated}(r) \\;\\Rightarrow\\; \\mathsf{reject}",
        "reads": "A generated artifact, derived from a basis by a builder, is rejected when it is treated as if it were hand-authored source.",
        "symbols": [
         {
          "sym": "\\mathrm{generated}(r)",
          "meaning": "r is a generated artifact"
         },
         {
          "sym": "r",
          "meaning": "a generated artifact such as a result record or projection"
         },
         {
          "sym": "f",
          "meaning": "the generator from basis to artifact"
         },
         {
          "sym": "B",
          "meaning": "the content basis r is derived from"
         },
         {
          "sym": "\\mathrm{treated}(r)",
          "meaning": "r is treated as hand-authored source"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The boundary between a generated record and the hand-authored source it derives from.",
        "requires": "Keeping a generated record bound to its basis by hash and rebuilt from source, so it is recomputed rather than edited or cited as origin.",
        "refuses": "Treating a generated result record as hand-authored source.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The source-import protocol brings material in by manifest and content digest, so each imported copy stays bound to the original it was derived from and a basis change forces a recompute rather than letting the copy stand in as source.",
        "refs": [
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A generated result record is edited directly and then cited as the origin for a verdict, while the source it was built from is left behind and no longer matches it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "macro_projection_import_protocol",
         "durable_agent_work_landing_replay",
         "standards_meta_diagnostics"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-4",
        "AX-11"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-5",
        "P-12",
        "P-14",
        "P-15",
        "P-17",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "guards",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-13.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-13.json"
      }
     ],
     "visible_text_byte_count": 8760
    },
    {
     "object_id": "anti_principle:AP-14",
     "id": "AP-14",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Public-authority inflation",
     "relative_href": "docs/doctrine.html#dcard-ap-14",
     "read_href": "docs/doctrine.html#dcard-ap-14",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-14",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-14.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Letting public docs imply a hosted service, external service access, source-file mutation, financial or trading decisions, deployment postu\u2026",
     "statement": "Letting public docs imply a hosted service, external service access, source-file mutation, financial or trading decisions, deployment posture, affiliation or endorsement, or private-system equivalence that no admissible witness backs.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-14.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-14"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Letting public docs imply a hosted service, external service access, source-file mutation, financial or trading decisions, deployment posture, affiliation or endorsement, or private-system equivalence that no admissible witness backs.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-5",
           "AX-8",
           "AX-12"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-2",
           "P-6",
           "P-9",
           "P-13",
           "P-14",
           "P-15",
           "P-18",
           "P-19",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-5",
          "target_kind": "axiom",
          "target_label": "Fail-closed monotone lattice",
          "url": "doctrine.html#dcard-ax-5"
         },
         {
          "relation": "guards",
          "target_id": "AX-8",
          "target_kind": "axiom",
          "target_label": "Provenance propagation and non-interference",
          "url": "doctrine.html#dcard-ax-8"
         },
         {
          "relation": "guards",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-6",
          "target_kind": "principle",
          "target_label": "Status fails closed",
          "url": "doctrine.html#dcard-p-6"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-14.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-14.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Blocking inflated public-authority language does not establish that any specific authority is in fact held; it only refuses the unbacked implication. The example is reader illustration and never counts as support that the system is hosted, deployed, affiliated, or deployment-posture.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of letting a public page's wording imply powers the system does not have, such as being a hosted, ready product, having an outside partner, changing its own source, making financial decisions, or being the same thing as the larger private system, when nothing behind the page backs any of that.",
        "analogy": {
         "text": "Labeling a local prototype as a live production endpoint. The label may help a reader see what the prototype resembles, but it cannot grant the uptime, permissions, or partnerships that only the real production system carries.",
         "maps": [
          {
           "doctrine": "the public page implying an authority",
           "analogy": "the 'production endpoint' label on the prototype"
          },
          {
           "doctrine": "the inflated set of unbacked powers",
           "analogy": "the uptime, permissions, and partnerships the prototype does not actually have"
          },
          {
           "doctrine": "demoting the claim to its bounded scope when no witness backs it",
           "analogy": "relabeling it an honest 'local prototype' until a real deployment exists"
          }
         ],
         "boundary": "This shows only that a label must not promise a status nothing backs; it does not say the prototype is bad, and removing the inflated label does not settle whether the system could be deployed either way."
        },
        "why_it_matters": "A reader can trust that what a public page says about itself, like being hosted or ready or affiliated, is limited to what the system can actually back, not free-floating prose.",
        "potential_misread": "That impressive-sounding wording is harmless because it costs nothing and usually looks right. The tempting wrong belief is that stating a power is the same as holding it.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-14 is the inflation the evidence floor exists to refuse: a public page quietly granting itself an authority it cannot back. The danger is that all seven implied authorities (a hosted service, access to an external service, permission to mutate the source, financial or trading decisions, deployment posture, an affiliation or endorsement, or equivalence with the whole private system) are stated for free in prose, while the witness that would actually hold each one is absent. The failure is the unbacked implication, not the implication itself: a backed authority may be stated at its bounded scope. It bites across three floors at once: AX-5, because an in-scope claim with no admissible witness must fail closed rather than read as granted; AX-8, because a public-authority implication is private-adjacent material that may reach a public sink only through a declared transform, not by being asserted at the page; and AX-12, because the system's own copy is held to the same evidence floor it imposes on any other work. The repair is to state only the authority a witness backs, and to demote or refuse the public claim the moment the witness is missing.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{implies}(d, \\alpha) \\;\\wedge\\; \\alpha \\in \\Lambda \\;\\wedge\\; \\neg\\,\\mathrm{witness}(d, \\alpha) \\;\\Rightarrow\\; \\mathsf{demote}(d, \\alpha) \\;\\vee\\; \\mathsf{refuse}(d, \\alpha)",
        "reads": "If a public artifact lets a reader infer an authority from the inflated set and no admissible witness backs that authority, the claim is demoted to its bounded scope or refused. The bad thing is the unbacked implication, not implication itself.",
        "symbols": [
         {
          "sym": "d",
          "meaning": "a public doctrine artifact or doc"
         },
         {
          "sym": "\\mathrm{implies}(d, \\alpha)",
          "meaning": "d lets a reader infer authority alpha"
         },
         {
          "sym": "\\alpha",
          "meaning": "an implied authority"
         },
         {
          "sym": "\\Lambda",
          "meaning": "the inflated-authority set: hosted service, external service access, source-file mutation, financial or trading decisions, deployment posture, affiliation or endorsement, or private-system equivalence"
         },
         {
          "sym": "\\mathrm{witness}(d, \\alpha)",
          "meaning": "an admissible witness backs d's claim to authority alpha"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The boundary between what a public page implies and what authority the system actually holds.",
        "requires": "Stating only the authority an admissible witness backs, and demoting or refusing the public claim when the witness is absent.",
        "refuses": "Letting public copy imply a hosted service, external service access, source-file changes, financial or trading decisions, deployment posture, affiliation or endorsement, or private-system equivalence that nothing holds.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The launch wording gate scans the system's own public copy for launch-grade language and blocks a line that would imply hosting, readiness, or whole-system launch the system does not hold, so the claim is demoted to its bounded scope rather than published.",
        "refs": [
         "batch12_release_claim_language_gate"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A landing page reads as a ready, hosted product backed by an affiliated provider, when the system is a public reconstruction that hosts nothing, calls no provider, and makes no claim of affiliation.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "batch12_release_claim_language_gate",
         "public_reveal_walkthrough",
         "cold_reader_route_map"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-5",
        "AX-8",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-2",
        "P-6",
        "P-9",
        "P-13",
        "P-14",
        "P-15",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "guards",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-14.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-14.json"
      }
     ],
     "visible_text_byte_count": 10147
    },
    {
     "object_id": "anti_principle:AP-15",
     "id": "AP-15",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Mechanism theater",
     "relative_href": "docs/doctrine.html#dcard-ap-15",
     "read_href": "docs/doctrine.html#dcard-ap-15",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-15",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-15.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Using field vocabulary such as proof, verifier, information flow, world model, or benchmark integrity when the public mechanism only valida\u2026",
     "statement": "Using field vocabulary such as proof, verifier, information flow, world model, or benchmark integrity when the public mechanism only validates a result record or projection shape.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-15.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-15"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Using field vocabulary such as proof, verifier, information flow, world model, or benchmark integrity when the public mechanism only validates a result record or projection shape.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-1",
           "AX-2",
           "AX-12"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-1",
           "P-2",
           "P-3",
           "P-13",
           "P-18",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-1",
          "target_kind": "axiom",
          "target_label": "Derivation before assertion",
          "url": "doctrine.html#dcard-ax-1"
         },
         {
          "relation": "guards",
          "target_id": "AX-2",
          "target_kind": "axiom",
          "target_label": "Kernelized verification",
          "url": "doctrine.html#dcard-ax-2"
         },
         {
          "relation": "guards",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-1",
          "target_kind": "principle",
          "target_label": "Recompute, do not echo",
          "url": "doctrine.html#dcard-p-1"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-3",
          "target_kind": "principle",
          "target_label": "Concentrate trust in small checkers",
          "url": "doctrine.html#dcard-p-3"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-15.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-15.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Refusing mechanism theater does not upgrade the mechanism. It keeps the words honest; the underlying check is still only as strong as what it computes.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of using strong words like 'verifier' or 'world model' for something that only checks the shape of a record, not the claim those words promise.",
        "analogy": {
         "text": "Calling a quick glance at a passport photo a 'full background check'. The name promises far more scrutiny than the glance actually performs.",
         "maps": [
          {
           "doctrine": "the strong borrowed word (verifier, world model)",
           "analogy": "the label 'full background check'"
          },
          {
           "doctrine": "the mechanism that only validates a record's shape",
           "analogy": "the quick glance at the photo"
          }
         ],
         "boundary": "The passport-glance picture shows the name-versus-action gap; it does not list which words are over-strong here, which depends on what the specific mechanism really decides."
        },
        "why_it_matters": "Strong vocabulary makes a shape check sound far more rigorous than it is, so readers trust it more than it has earned.",
        "potential_misread": "That an impressive name reflects an impressive check. The name has to be earned by what the mechanism actually decides.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-15 is the overclaim the system polices in its own packaging. It is mechanism theater: using heavy field words, proof, verifier, information flow, world model, benchmark integrity, when the public mechanism behind them only checks that a record has the right shape. It is tempting because the vocabulary impresses, and the gap between \"checks a schema\" and \"proves a property\" is invisible to a casual reader. The repair is to name what the mechanism actually computes, hold the claim to that, and reserve the strong words for the few places that earn them, such as a real verifier run.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{name} \\in \\{\\mathrm{proof}, \\mathrm{verifier}, \\ldots\\} \\;\\wedge\\; \\mathrm{checks}(\\mathrm{shape}) \\;\\wedge\\; \\neg\\,\\mathrm{checks}(\\mathrm{claim})",
        "reads": "Using a strong field name drawn from words like proof or verifier while the mechanism checks only the shape of a record and not the claim that name implies.",
        "symbols": [
         {
          "sym": "\\mathrm{name}",
          "meaning": "the borrowed field word"
         },
         {
          "sym": "\\mathrm{proof}",
          "meaning": "a strong field word the name may borrow, such as proof"
         },
         {
          "sym": "\\mathrm{verifier}",
          "meaning": "a strong field word the name may borrow, such as verifier"
         },
         {
          "sym": "\\mathrm{checks}(\\mathrm{shape})",
          "meaning": "the mechanism validates only the form of a record"
         },
         {
          "sym": "\\mathrm{shape}",
          "meaning": "the form of a record, which the mechanism does check"
         },
         {
          "sym": "\\mathrm{checks}(\\mathrm{claim})",
          "meaning": "the mechanism would decide the property the word implies"
         },
         {
          "sym": "\\mathrm{claim}",
          "meaning": "the property the word implies, which it does not check"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The boundary between what a mechanism is named and what it actually decides.",
        "requires": "Naming the real computation and holding the claim to it, with strong words reserved for mechanisms that earn them.",
        "refuses": "Dressing a shape check in proof, verifier, or world-model language.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The Lean witness compiles a tiny public example through a real verifier and caps its own claim at that bounded scope, rather than calling a schema check a proof.",
        "refs": [
         "formal_math_lean_proof_witness"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A record-shape linter is described as a \"world-model verifier\", implying it reasons about the world when it only validates a fixture's fields.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "formal_math_lean_proof_witness",
         "certificate_kernel_execution_lab"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-1",
        "AX-2",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-1",
        "P-2",
        "P-3",
        "P-13",
        "P-18",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "guards",
       "target_id": "AX-2",
       "target_kind": "axiom",
       "target_label": "Kernelized verification",
       "url": "doctrine.html#dcard-ax-2"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-15.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-15.json"
      }
     ],
     "visible_text_byte_count": 8336
    },
    {
     "object_id": "anti_principle:AP-16",
     "id": "AP-16",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Receiver inflation",
     "relative_href": "docs/doctrine.html#dcard-ap-16",
     "read_href": "docs/doctrine.html#dcard-ap-16",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-16",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-16.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Displaying a declared, inferred, or generated downstream target as an observed runtime effect without evidence of the effect relation.",
     "statement": "Displaying a declared, inferred, or generated downstream target as an observed runtime effect without evidence of the effect relation.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-16.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-16"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Displaying a declared, inferred, or generated downstream target as an observed runtime effect without evidence of the effect relation.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-8",
           "AX-12"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-9",
           "P-13",
           "P-14",
           "P-18",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-8",
          "target_kind": "axiom",
          "target_label": "Provenance propagation and non-interference",
          "url": "doctrine.html#dcard-ax-8"
         },
         {
          "relation": "guards",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-20",
          "target_kind": "principle",
          "target_label": "Bind result records before record authority",
          "url": "doctrine.html#dcard-p-20"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-16.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-16.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Catching one inflated receiver display is a floor under AX-8 and AX-12, not a positive proof that any effect was achieved. Observing the relation at named receivers does not establish that every declared effect downstream held; the unobserved targets stay marked, not blessed.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of showing an action's intended destination as if the action had already landed there, when nothing has actually checked that it reached the receiving end.",
        "analogy": {
         "text": "Marking a parcel 'Delivered' the instant it leaves the depot, just because the destination address is known, with no one at the doorstep confirming it actually arrived.",
         "maps": [
          {
           "doctrine": "the declared downstream target shown as an observed effect",
           "analogy": "the 'Delivered' status set the moment the parcel leaves"
          },
          {
           "doctrine": "the missing witness at the receiver",
           "analogy": "no one at the doorstep confirming arrival"
          },
          {
           "doctrine": "the honest display: target marked declared and unobserved",
           "analogy": "a truthful 'In transit, not yet confirmed at address' status"
          }
         ],
         "boundary": "This shows only that arrival must be confirmed at the receiving end before it is displayed as done; confirming one parcel's arrival does not establish that every parcel that went out arrived, and it does not say the address was the right one."
        },
        "why_it_matters": "A reader can tell apart 'this was sent toward a known target' from 'this was confirmed to have landed', instead of mistaking an intention for a witnessed result.",
        "potential_misread": "That because the destination is known in advance, showing it as reached is as good as confirming it. The tempting wrong belief is that knowing where something is headed is the same as seeing it arrive.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-16 is the failure AX-8 exists to refuse, applied to effects rather than labels: presenting the intended receiver of an action as if it were the witnessed result. A pipeline declares that a value reached a sink, that a write landed in memory, or that a route was taken, and the page renders that declared target as an observed runtime effect, when nothing carried the effect relation across the steps between source and receiver. It is tempting because the downstream target is usually known in advance, so showing it costs nothing and almost always looks right, while the gap between an intended reach and a witnessed one is invisible to a reader. The repair is the same shape AX-8 imposes on provenance: the effect relation has to be carried and observed at the receiver, not asserted from the sending side, and absent that witness the honest display is a declared target marked as unobserved, held below the strength a real observation would carry.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{shows}(\\mathrm{effect}(s, r)) \\;\\wedge\\; \\neg\\,\\exists\\, w.\\ \\mathrm{witness}(w, s \\to r)",
        "reads": "Displaying an effect of a source s on a downstream receiver r as observed, while no witness establishes the effect relation from s to r.",
        "symbols": [
         {
          "sym": "\\mathrm{shows}(\\mathrm{effect}(s, r))",
          "meaning": "the page displays the effect of s on r as an observed runtime result"
         },
         {
          "sym": "s",
          "meaning": "the source asserting it had a downstream effect"
         },
         {
          "sym": "r",
          "meaning": "the receiver: the declared, inferred, or generated downstream target"
         },
         {
          "sym": "\\mathrm{effect}(s, r)",
          "meaning": "the claim that s actually reached or changed r at runtime"
         },
         {
          "sym": "w",
          "meaning": "a witness of the effect relation, traced across the steps from s to r"
         },
         {
          "sym": "\\mathrm{witness}(w, s \\to r)",
          "meaning": "a witness establishing the effect relation from s to r, observed at the receiver"
         },
         {
          "sym": "s \\to r",
          "meaning": "the effect relation, the flow from source to receiver that must be observed"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The receiver boundary, where an intended or generated downstream target is tempted to display as a witnessed runtime effect.",
        "requires": "Catching the inflation: a witness of the effect relation observed at the receiver, or the target shown as declared and unobserved rather than as an effect.",
        "refuses": "Rendering a declared, inferred, or generated downstream target as an observed effect with no evidence that the effect relation held.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The work-landing replay confirms an agent action actually persisted at its destination before showing it as landed, so a declared target cannot display as a completed effect by intention alone.",
        "refs": [
         "durable_agent_work_landing_replay"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "A status surface shows a memory write as applied at the receiver because the sending step was issued, with nothing observing that the write actually landed there.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "durable_agent_work_landing_replay",
         "agent_route_observability_runtime"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-8",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-9",
        "P-13",
        "P-14",
        "P-18",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-16.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-16.json"
      }
     ],
     "visible_text_byte_count": 9223
    },
    {
     "object_id": "anti_principle:AP-17",
     "id": "AP-17",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Projection-as-source",
     "relative_href": "docs/doctrine.html#dcard-ap-17",
     "read_href": "docs/doctrine.html#dcard-ap-17",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-17",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-17.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "summary_line": "Letting a markdown page, generated card, atlas row, or compact result record summary override the executable contract it summarizes.",
     "statement": "Letting a markdown page, generated card, atlas row, or compact result record summary override the executable contract it summarizes.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "doctrine_page_card",
      "source_coupling": {
       "body_source": "rules_lattice_record_plus_doctrine_enrichment",
       "record_source_ref": "microcosm-substrate/anti_principles/AP-17.json",
       "enrichment_source_ref": "microcosm-substrate/core/doctrine_enrichment.json",
       "enrichment_id": "AP-17"
      },
      "required_section_ids": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance",
       "enforcement"
      ],
      "required_payloads": [
       {
        "section_id": "reader_ladder",
        "field_path": [
         "analogy",
         "maps"
        ],
        "source_field": "doctrine_enrichment.records[].reader_ladder.analogy.maps"
       },
       {
        "section_id": "formal_statement",
        "field_path": [
         "symbols"
        ],
        "source_field": "doctrine_enrichment.records[].formal.symbols"
       },
       {
        "section_id": "example",
        "field_path": [
         "refs"
        ],
        "source_field": "doctrine_enrichment.records[].example.refs"
       },
       {
        "section_id": "enforcement",
        "field_path": [
         "component_ids"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      ],
      "section_order": [
       "statement",
       "reader_ladder",
       "deep_reading",
       "formal_statement",
       "relationship_triad",
       "example",
       "enforcement",
       "counterexample",
       "scope_limit",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Rejected shape",
        "text": "Letting a markdown page, generated card, atlas row, or compact result record summary override the executable contract it summarizes.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [
         {
          "relation": "Guards",
          "ids": [
           "AX-4",
           "AX-11"
          ]
         },
         {
          "relation": "Negates",
          "ids": [
           "P-5",
           "P-12",
           "P-14",
           "P-15",
           "P-17",
           "P-18",
           "P-19",
           "P-20"
          ]
         }
        ],
        "links": [
         {
          "relation": "guards",
          "target_id": "AX-4",
          "target_kind": "axiom",
          "target_label": "Content-addressed determinism",
          "url": "doctrine.html#dcard-ax-4"
         },
         {
          "relation": "guards",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-5",
          "target_kind": "principle",
          "target_label": "Cache by content, not by name",
          "url": "doctrine.html#dcard-p-5"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-12",
          "target_kind": "principle",
          "target_label": "Make doctrine executable before authoritative",
          "url": "doctrine.html#dcard-p-12"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-14",
          "target_kind": "principle",
          "target_label": "Carry basis and provenance together",
          "url": "doctrine.html#dcard-p-14"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-17",
          "target_kind": "principle",
          "target_label": "Anchor graph mutations to unique source rows",
          "url": "doctrine.html#dcard-p-17"
         },
         {
          "relation": "negates failure of",
          "target_id": "P-18",
          "target_kind": "principle",
          "target_label": "Require fan-in before activation",
          "url": "doctrine.html#dcard-p-18"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/anti_principles/AP-17.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-17.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "Refusing projection-as-source does not validate the source. It only keeps authority pointed at the executable contract rather than its readable shadow.",
        "source_field": "doctrine_enrichment.records[].does_not_prove"
       },
       "reader_ladder": {
        "plain": "The mistake of letting a generated page or summary overrule the real contract it was only meant to describe.",
        "analogy": {
         "text": "Treating a news article about a law as if it were the law itself, and acting on the article when the two disagree.",
         "maps": [
          {
           "doctrine": "the generated projection",
           "analogy": "the news article about the law"
          },
          {
           "doctrine": "the source contract it summarises",
           "analogy": "the actual text of the law"
          }
         ],
         "boundary": "The article-versus-law picture shows a summary cannot outrank its source; it does not capture that the summary must also be recomputed and demoted when the source it describes drifts."
        },
        "why_it_matters": "A readable summary is easy to trust, so letting it win over the source quietly replaces the real rule with a description of it.",
        "potential_misread": "That the clearest version is the authoritative one. The source stays authoritative; the summary only points at it.",
        "source_field": "doctrine_enrichment.records[].reader_ladder"
       },
       "deep_reading": {
        "text": "AP-17 is the inversion P-15 exists to prevent: a projection quietly becoming the authority. It happens when a markdown page, a generated card, an atlas row, or a compact summary is cited as the source of truth, overriding the executable contract it was generated from. It is tempting because the projection is the readable thing, so people reach for it, and over time the source it came from is forgotten. The repair is to keep the projection below its source by construction: recompute from the contract, and demote the projection the moment its basis drifts.",
        "source_field": "doctrine_enrichment.records[].deep"
       },
       "formal_statement": {
        "latex": "\\mathrm{auth}(\\mathrm{proj}) \\sqsupset \\mathrm{auth}(\\mathrm{src}) \\;\\Rightarrow\\; \\mathsf{reject}",
        "reads": "If a projection's authority would exceed its source's, reject it: a generated view can expose source authority but never raise it.",
        "symbols": [
         {
          "sym": "\\mathrm{auth}(\\mathrm{proj})",
          "meaning": "the authority the projection claims"
         },
         {
          "sym": "\\mathrm{auth}(\\mathrm{src})",
          "meaning": "the authority the executable contract holds"
         },
         {
          "sym": "\\mathrm{proj}",
          "meaning": "a generated page, card, or summary"
         },
         {
          "sym": "\\mathrm{src}",
          "meaning": "the executable contract it summarises"
         },
         {
          "sym": "\\sqsupset",
          "meaning": "claims more authority than"
         },
         {
          "sym": "\\mathsf{reject}",
          "meaning": "the refusal the anti-principle requires"
         }
        ],
        "source_field": "doctrine_enrichment.records[].formal"
       },
       "relationship_triad": {
        "governs": "The source-and-projection boundary, where a summary is tempted to outrank its origin.",
        "requires": "Recomputing the projection from its contract and demoting it when its basis drifts.",
        "refuses": "Treating a markdown page, generated card, or compact summary as the source it merely describes.",
        "source_field": "doctrine_enrichment.records[].governs|requires|refuses"
       },
       "example": {
        "text": "The doctrine projection builder regenerates the readable instances from the routing and markdown sources and checks parity, so the generated copy can never become the authority.",
        "refs": [
         "world_model_projection_drift_control_room"
        ],
        "source_field": "doctrine_enrichment.records[].example"
       },
       "counterexample": {
        "text": "An edit is made to a generated reference page and treated as canonical, while the contract it was built from is left behind and contradicts it.",
        "source_field": "doctrine_enrichment.records[].counterexample"
       },
       "enforcement": {
        "component_ids": [
         "world_model_projection_drift_control_room",
         "macro_projection_import_protocol"
        ],
        "source_field": "doctrine_enrichment.records[].enforced_in"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-4",
        "AX-11"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-5",
        "P-12",
        "P-14",
        "P-15",
        "P-17",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "guards",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-17.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-17.json"
      }
     ],
     "visible_text_byte_count": 7916
    },
    {
     "object_id": "concept:concept.agent_reliability_and_safety_validator_bundle",
     "id": "concept.agent_reliability_and_safety_validator_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "agent reliability and safety validators as bounded public scope limits",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "safety and reliability claims remain bounded to named public fixtures, validators, and result record rows instead of global agent capabilit\u2026",
     "statement": "agent reliability and safety validators as bounded public scope limits",
     "gloss": "safety and reliability claims remain bounded to named public fixtures, validators, and result record rows instead of global agent capability claims",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "agent reliability and safety validators as bounded public scope limits",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-3",
          "target_kind": "principle",
          "target_label": "Concentrate trust in small checkers",
          "url": "doctrine.html#dcard-p-3"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-6",
          "target_kind": "principle",
          "target_label": "Status fails closed",
          "url": "doctrine.html#dcard-p-6"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-8",
          "target_kind": "principle",
          "target_label": "Refuse inadmissible computations with typed reasons",
          "url": "doctrine.html#dcard-p-8"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
          "target_kind": "mechanism",
          "target_label": "validates public benchmark integrity replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
          "target_kind": "mechanism",
          "target_label": "validates completion evidence claims",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
          "target_kind": "mechanism",
          "target_label": "validates public memory conflict replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
          "target_kind": "mechanism",
          "target_label": "validates public monitor verdict result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.agent_reliability_and_safety_validator_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This family concept is a source-bound grouping of accepted Microcosm validators, not a claim that the agents are safe in the world. The concept does not upgrade negative-case coverage into propagation proof or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This family concept is a source-bound grouping of accepted Microcosm validators, not a claim that the agents are safe in the world.",
      "The concept does not upgrade negative-case coverage into propagation proof or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "target_kind": "mechanism",
       "target_label": "validates public benchmark integrity replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "target_kind": "mechanism",
       "target_label": "validates completion evidence claims",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "target_kind": "mechanism",
       "target_label": "validates public memory conflict replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "target_kind": "mechanism",
       "target_label": "validates public monitor verdict result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.agent_reliability_and_safety_validator_bundle.json"
      }
     ],
     "visible_text_byte_count": 4382
    },
    {
     "object_id": "concept:concept.architecture_and_navigation_route_contract_bundle",
     "id": "concept.architecture_and_navigation_route_contract_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "architecture and navigation route contracts as executable doctrine boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "navigation and doctrine surfaces become walkable through source-bound contracts while generated views stay below source authority",
     "statement": "architecture and navigation route contracts as executable doctrine boundaries",
     "gloss": "navigation and doctrine surfaces become walkable through source-bound contracts while generated views stay below source authority",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "architecture and navigation route contracts as executable doctrine boundaries",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-1",
          "target_kind": "principle",
          "target_label": "Recompute, do not echo",
          "url": "doctrine.html#dcard-p-1"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-12",
          "target_kind": "principle",
          "target_label": "Make doctrine executable before authoritative",
          "url": "doctrine.html#dcard-p-12"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
          "target_kind": "mechanism",
          "target_label": "validates public operator contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine fact claim audit",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine grammar bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public route plane bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.architecture_and_navigation_route_contract_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This family concept does not make browsable route projections source authority. The concept does not establish complete system navigation coverage or public launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This family concept does not make browsable route projections source authority.",
      "The concept does not establish complete system navigation coverage or public launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "target_kind": "mechanism",
       "target_label": "validates public operator contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public route plane bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.architecture_and_navigation_route_contract_bundle.json"
      }
     ],
     "visible_text_byte_count": 4166
    },
    {
     "object_id": "concept:concept.entry_and_reveal_route_readiness_bundle",
     "id": "concept.entry_and_reveal_route_readiness_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "entry and reveal routes as bounded cold-reader readiness evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "entry evidence shows what a reader can inspect, not that the whole system is ready or correct",
     "statement": "entry and reveal routes as bounded cold-reader readiness evidence",
     "gloss": "entry evidence shows what a reader can inspect, not that the whole system is ready or correct",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "entry and reveal routes as bounded cold-reader readiness evidence",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-7",
          "target_kind": "principle",
          "target_label": "Track known unknowns without claiming the unknown is mapped",
          "url": "doctrine.html#dcard-p-7"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-12",
          "target_kind": "principle",
          "target_label": "Make doctrine executable before authoritative",
          "url": "doctrine.html#dcard-p-12"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
          "target_kind": "mechanism",
          "target_label": "validates public first run route map",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
          "target_kind": "mechanism",
          "target_label": "validates public reveal walkthrough",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
          "target_kind": "mechanism",
          "target_label": "validates public source root bootstrap",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
          "target_kind": "mechanism",
          "target_label": "validates public first screen composition root",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.entry_and_reveal_route_readiness_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This family concept is not a public sharing, launch, or private-data equivalence claim. Cold-reader reachability is not whole-lattice completeness.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This family concept is not a public sharing, launch, or private-data equivalence claim.",
      "Cold-reader reachability is not whole-lattice completeness."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
       "target_kind": "mechanism",
       "target_label": "validates public reveal walkthrough",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
       "target_kind": "mechanism",
       "target_label": "validates public source root bootstrap",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
       "target_kind": "mechanism",
       "target_label": "validates public first screen composition root",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.entry_and_reveal_route_readiness_bundle.json"
      }
     ],
     "visible_text_byte_count": 3974
    },
    {
     "object_id": "concept:concept.executable_doctrine_grammar_standard_bundle",
     "id": "concept.executable_doctrine_grammar_standard_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "standard as schema contract with explicit scope limit",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "invalid standards are blocked by negative cases such as missing teleology, missing result record expectations, or prose-only authority",
     "statement": "standard as schema contract with explicit scope limit",
     "gloss": "invalid standards are blocked by negative cases such as missing teleology, missing result record expectations, or prose-only authority",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "standard as schema contract with explicit scope limit",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-8",
          "target_kind": "principle",
          "target_label": "Refuse inadmissible computations with typed reasons",
          "url": "doctrine.html#dcard-p-8"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-12",
          "target_kind": "principle",
          "target_label": "Make doctrine executable before authoritative",
          "url": "doctrine.html#dcard-p-12"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine grammar bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
         },
         {
          "relation": "abides by",
          "target_id": "AX-7",
          "target_kind": "axiom",
          "target_label": "Typed partiality and refusal",
          "url": "doctrine.html#dcard-ax-7"
         },
         {
          "relation": "abides by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "abides by",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.executable_doctrine_grammar_standard_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This specimen validates public standard shape only. This specimen does not establish source doctrine completeness.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This specimen validates public standard shape only.",
      "This specimen does not establish source doctrine completeness."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "abides by",
       "target_id": "AX-7",
       "target_kind": "axiom",
       "target_label": "Typed partiality and refusal",
       "url": "doctrine.html#dcard-ax-7"
      },
      {
       "relation": "abides by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "abides by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.executable_doctrine_grammar_standard_bundle.json"
      }
     ],
     "visible_text_byte_count": 3302
    },
    {
     "object_id": "concept:concept.first_screen_doctrine_effect_frame",
     "id": "concept.first_screen_doctrine_effect_frame",
     "kind": "concept",
     "kind_label": "concept",
     "title": "doctrine handles as typed mistake-prevention boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-first-screen-doctrine-effect-frame",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-first-screen-doctrine-effect-frame",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-first-screen-doctrine-effect-frame",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.first_screen_doctrine_effect_frame.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "runtime first-screen output emits CONCEPTS and MECHANISMS before standards-tree search is required",
     "statement": "doctrine handles as typed mistake-prevention boundaries",
     "gloss": "runtime first-screen output emits CONCEPTS and MECHANISMS before standards-tree search is required",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "doctrine handles as typed mistake-prevention boundaries",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-12",
          "target_kind": "principle",
          "target_label": "Make doctrine executable before authoritative",
          "url": "doctrine.html#dcard-p-12"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
          "target_kind": "mechanism",
          "target_label": "validates public first run route map",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
         },
         {
          "relation": "abides by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "abides by",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.first_screen_doctrine_effect_frame.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This specimen proves entry routing and shape, not doctrine completeness. This specimen excludes launch or private-data equivalence.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This specimen proves entry routing and shape, not doctrine completeness.",
      "This specimen excludes launch or private-data equivalence."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "abides by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "abides by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.first_screen_doctrine_effect_frame.json"
      }
     ],
     "visible_text_byte_count": 2872
    },
    {
     "object_id": "concept:concept.formal_math_and_proof_witness_bundle",
     "id": "concept.formal_math_and_proof_witness_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "formal math and proof witnesses as bounded public proof-adjacent result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "proof-related artifacts expose bounded witness status without claiming theorem completeness or provider proof authority",
     "statement": "formal math and proof witnesses as bounded public proof-adjacent result records",
     "gloss": "proof-related artifacts expose bounded witness status without claiming theorem completeness or provider proof authority",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "formal math and proof witnesses as bounded public proof-adjacent result records",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-3",
          "target_kind": "principle",
          "target_label": "Concentrate trust in small checkers",
          "url": "doctrine.html#dcard-p-3"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-8",
          "target_kind": "principle",
          "target_label": "Refuse inadmissible computations with typed reasons",
          "url": "doctrine.html#dcard-p-8"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public proof authority runtime bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
          "target_kind": "mechanism",
          "target_label": "validates public certificate kernel execution",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public corpus readiness boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public mathlib absence boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.formal_math_and_proof_witness_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This family concept is not theorem-prover authority beyond the named public witness result records. Provider suggestions, oracle comparisons, and negative cases do not count as proof success.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This family concept is not theorem-prover authority beyond the named public witness result records.",
      "Provider suggestions, oracle comparisons, and negative cases do not count as proof success."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
       "target_kind": "mechanism",
       "target_label": "validates public certificate kernel execution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public corpus readiness boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public mathlib absence boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.formal_math_and_proof_witness_bundle.json"
      }
     ],
     "visible_text_byte_count": 4279
    },
    {
     "object_id": "concept:concept.import_projection_and_drift_control_bundle",
     "id": "concept.import_projection_and_drift_control_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "source import and projection drift controls as provenance-preserving boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.import_projection_and_drift_control_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "imported material remains tied to source anchors and drift result records instead of becoming ambient doctrine authority",
     "statement": "source import and projection drift controls as provenance-preserving boundaries",
     "gloss": "imported material remains tied to source anchors and drift result records instead of becoming ambient doctrine authority",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "source import and projection drift controls as provenance-preserving boundaries",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-1",
          "target_kind": "principle",
          "target_label": "Recompute, do not echo",
          "url": "doctrine.html#dcard-p-1"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-11",
          "target_kind": "principle",
          "target_label": "Bind volatile facts to refresh routes",
          "url": "doctrine.html#dcard-p-11"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public governance compilers bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public live source drift bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public saturation engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
          "target_kind": "mechanism",
          "target_label": "validates public launch claim language gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.import_projection_and_drift_control_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This family concept does not flip legacy or generated projections into source authority. Digest parity and drift checks are bounded import evidence, not whole-system correctness.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This family concept does not flip legacy or generated projections into source authority.",
      "Digest parity and drift checks are bounded import evidence, not whole-system correctness."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-11",
       "target_kind": "principle",
       "target_label": "Bind volatile facts to refresh routes",
       "url": "doctrine.html#dcard-p-11"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.import_projection_and_drift_control_bundle.json"
      }
     ],
     "visible_text_byte_count": 4244
    },
    {
     "object_id": "concept:concept.research_and_science_replay_evidence_bundle",
     "id": "concept.research_and_science_replay_evidence_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "research and science replay validators as reproducibility scope limits",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "research claims remain scoped to public replay evidence and known gaps instead of becoming external scientific truth claims",
     "statement": "research and science replay validators as reproducibility scope limits",
     "gloss": "research claims remain scoped to public replay evidence and known gaps instead of becoming external scientific truth claims",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "research and science replay validators as reproducibility scope limits",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-2",
          "target_kind": "principle",
          "target_label": "Lower claim strength to checker strength",
          "url": "doctrine.html#dcard-p-2"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-7",
          "target_kind": "principle",
          "target_label": "Track known unknowns without claiming the unknown is mapped",
          "url": "doctrine.html#dcard-p-7"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public market dashboard read model bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public prediction market board bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
          "target_kind": "mechanism",
          "target_label": "validates public finance forecast evaluation spine",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
          "target_kind": "mechanism",
          "target_label": "validates public materials lab safety replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.research_and_science_replay_evidence_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This family concept is not external scientific validation, financial decisions, or benchmark superiority evidence. Replay result records expose bounded evidence and gaps, not full replication certainty.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This family concept is not external scientific validation, financial decisions, or benchmark superiority evidence.",
      "Replay result records expose bounded evidence and gaps, not full replication certainty."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
       "target_kind": "mechanism",
       "target_label": "validates public finance forecast evaluation spine",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
       "target_kind": "mechanism",
       "target_label": "validates public materials lab safety replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.research_and_science_replay_evidence_bundle.json"
      }
     ],
     "visible_text_byte_count": 4426
    },
    {
     "object_id": "concept:concept.standards_meta_diagnostics_bundle",
     "id": "concept.standards_meta_diagnostics_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "component-standard-runtime-result record coverage as projection-only evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.standards_meta_diagnostics_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "accepted_organ_count and covered_organ_ids are validated without becoming launch-scope decision",
     "statement": "component-standard-runtime-result record coverage as projection-only evidence",
     "gloss": "accepted_organ_count and covered_organ_ids are validated without becoming launch-scope decision",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "component-standard-runtime-result record coverage as projection-only evidence",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-7",
          "target_kind": "principle",
          "target_label": "Track known unknowns without claiming the unknown is mapped",
          "url": "doctrine.html#dcard-p-7"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-15",
          "target_kind": "principle",
          "target_label": "Keep projections below source authority",
          "url": "doctrine.html#dcard-p-15"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
          "target_kind": "mechanism",
          "target_label": "validates public standards meta diagnostics",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics"
         },
         {
          "relation": "abides by",
          "target_id": "AX-6",
          "target_kind": "axiom",
          "target_label": "Open-world epistemics",
          "url": "doctrine.html#dcard-ax-6"
         },
         {
          "relation": "abides by",
          "target_id": "AX-11",
          "target_kind": "axiom",
          "target_label": "Executable grammar before doctrine authority",
          "url": "doctrine.html#dcard-ax-11"
         },
         {
          "relation": "abides by",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.standards_meta_diagnostics_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This specimen is coverage projection, not registry source authority. This specimen excludes launch, external model access, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This specimen is coverage projection, not registry source authority.",
      "This specimen excludes launch, external model access, or whole-system correctness."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
       "target_kind": "mechanism",
       "target_label": "validates public standards meta diagnostics",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics"
      },
      {
       "relation": "abides by",
       "target_id": "AX-6",
       "target_kind": "axiom",
       "target_label": "Open-world epistemics",
       "url": "doctrine.html#dcard-ax-6"
      },
      {
       "relation": "abides by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "abides by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.standards_meta_diagnostics_bundle.json"
      }
     ],
     "visible_text_byte_count": 3341
    },
    {
     "object_id": "concept:concept.voice_to_doctrine_self_improvement_loop_bundle",
     "id": "concept.voice_to_doctrine_self_improvement_loop_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "local pressure rows as typed candidates for owner-surface refinement",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "status_counts distinguish refined_existing_surface, workitem_captured, and nothing_to_refine",
     "statement": "local pressure rows as typed candidates for owner-surface refinement",
     "gloss": "status_counts distinguish refined_existing_surface, workitem_captured, and nothing_to_refine",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "local pressure rows as typed candidates for owner-surface refinement",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-8",
          "target_kind": "principle",
          "target_label": "Refuse inadmissible computations with typed reasons",
          "url": "doctrine.html#dcard-p-8"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-13",
          "target_kind": "principle",
          "target_label": "Apply the same floor to meta artifacts",
          "url": "doctrine.html#dcard-p-13"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-16",
          "target_kind": "principle",
          "target_label": "Bind authority to transaction scope",
          "url": "doctrine.html#dcard-p-16"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
          "target_kind": "mechanism",
          "target_label": "validates public voice to doctrine self improvement loop",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
         },
         {
          "relation": "abides by",
          "target_id": "AX-3",
          "target_kind": "axiom",
          "target_label": "Authority by derivation, not possession",
          "url": "doctrine.html#dcard-ax-3"
         },
         {
          "relation": "abides by",
          "target_id": "AX-7",
          "target_kind": "axiom",
          "target_label": "Typed partiality and refusal",
          "url": "doctrine.html#dcard-ax-7"
         },
         {
          "relation": "abides by",
          "target_id": "AX-12",
          "target_kind": "axiom",
          "target_label": "Reflexive accountability / no privileged meta-layer",
          "url": "doctrine.html#dcard-ax-12"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This specimen demonstrates local refinement, not global doctrine changes. This specimen excludes hand-editing doctrine nodes or exporting raw voice.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This specimen demonstrates local refinement, not global doctrine changes.",
      "This specimen excludes hand-editing doctrine nodes or exporting raw voice."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
       "target_kind": "mechanism",
       "target_label": "validates public voice to doctrine self improvement loop",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
      },
      {
       "relation": "abides by",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "abides by",
       "target_id": "AX-7",
       "target_kind": "axiom",
       "target_label": "Typed partiality and refusal",
       "url": "doctrine.html#dcard-ax-7"
      },
      {
       "relation": "abides by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json"
      }
     ],
     "visible_text_byte_count": 3394
    },
    {
     "object_id": "concept:concept.work_landing_and_continuity_control_bundle",
     "id": "concept.work_landing_and_continuity_control_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "work landing and continuity controls as transaction-scoped coordination evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "work progress claims stay tied to owned paths, result records, and transaction scope rather than chat status or generated projections",
     "statement": "work landing and continuity controls as transaction-scoped coordination evidence",
     "gloss": "work progress claims stay tied to owned paths, result records, and transaction scope rather than chat status or generated projections",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "work landing and continuity controls as transaction-scoped coordination evidence",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "implements or refines",
          "target_id": "P-6",
          "target_kind": "principle",
          "target_label": "Status fails closed",
          "url": "doctrine.html#dcard-p-6"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-9",
          "target_kind": "principle",
          "target_label": "Preserve provenance across every boundary",
          "url": "doctrine.html#dcard-p-9"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-10",
          "target_kind": "principle",
          "target_label": "Do not land effects without compensation",
          "url": "doctrine.html#dcard-p-10"
         },
         {
          "relation": "implements or refines",
          "target_id": "P-16",
          "target_kind": "principle",
          "target_label": "Bind authority to transaction scope",
          "url": "doctrine.html#dcard-p-16"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
          "target_kind": "mechanism",
          "target_label": "validates synthetic bridge continuity",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
          "target_kind": "mechanism",
          "target_label": "validates public concurrency mission control",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
          "target_kind": "mechanism",
          "target_label": "validates public work landing replay contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
         },
         {
          "relation": "instantiated by",
          "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public mission transaction bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.work_landing_and_continuity_control_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This family concept does not establish public sharing decision, clean branch state, or external delivery. Coordination result records do not authorize unrelated path mutation or broad staging.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This family concept does not establish publishing-scope decision, clean branch state, or external delivery.",
      "Coordination result records do not authorize unrelated path mutation or broad staging."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-10",
       "target_kind": "principle",
       "target_label": "Do not land effects without compensation",
       "url": "doctrine.html#dcard-p-10"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.work_landing_and_continuity_control_bundle.json"
      }
     ],
     "visible_text_byte_count": 4254
    },
    {
     "object_id": "mechanism:mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public benchmark integrity replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The agent benchmark integrity anti-gaming replay component validates public benchmark-claim boundaries by checking locked evaluator policy\u2026",
     "statement": "The agent benchmark integrity anti-gaming replay component validates public benchmark-claim boundaries by checking locked evaluator policy, case roster binding, replay observation fields, file-access refs, contamination refs, trusted-reference score refs, output replay refs, public trace verdict recomputation, copied source-module digests, metadata-only result record policy, and anti-gaming negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The agent benchmark integrity anti-gaming replay component validates public benchmark-claim boundaries by checking locked evaluator policy, case roster binding, replay observation fields, file-access refs, contamination refs, trusted-reference score refs, output replay refs, public trace verdict recomputation, copied source-module digests, metadata-only result record policy, and anti-gaming negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/agent_benchmark_integrity_anti_gaming_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/agent benchmark integrity anti gaming replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "agent_benchmark_integrity_anti_gaming_replay",
          "target_kind": "component",
          "target_label": "Agent Benchmark Integrity Anti Gaming Replay",
          "url": "components.html#component-agent_benchmark_integrity_anti_gaming_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public cold eval honesty bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
          "target_kind": "mechanism",
          "target_label": "validates public research replication replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_benchmark_integrity_anti_gaming_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent benchmark integrity anti gaming replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_benchmark_integrity_anti_gaming_replay",
       "target_kind": "component",
       "target_label": "Agent Benchmark Integrity Anti Gaming Replay",
       "url": "components.html#component-agent_benchmark_integrity_anti_gaming_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
       "target_kind": "mechanism",
       "target_label": "validates public research replication replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json"
      }
     ],
     "visible_text_byte_count": 4432
    },
    {
     "object_id": "mechanism:mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates completion evidence claims",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The agent completion faithfulness audit component validates public completion evidence claims by checking fixture commit objects and HEAD w\u2026",
     "statement": "The agent completion faithfulness audit component validates public completion evidence claims by checking fixture commit objects and HEAD with git subprocesses, pytest span execution and explicit pass status with pytest subprocesses, fixture-ledger cap rows, copied source-module digests, and stable overclaim negative cases before writing metadata-only result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The agent completion faithfulness audit component validates public completion evidence claims by checking fixture commit objects and HEAD with git subprocesses, pytest span execution and explicit pass status with pytest subprocesses, fixture-ledger cap rows, copied source-module digests, and stable overclaim negative cases before writing metadata-only result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/agent_closeout_faithfulness_audit.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/agent completion faithfulness audit py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "agent_closeout_faithfulness_audit",
          "target_kind": "component",
          "target_label": "Agent Completion Faithfulness Audit",
          "url": "components.html#component-agent_closeout_faithfulness_audit"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_closeout_faithfulness_audit.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent completion faithfulness audit py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_closeout_faithfulness_audit",
       "target_kind": "component",
       "target_label": "Agent Completion Faithfulness Audit",
       "url": "components.html#component-agent_closeout_faithfulness_audit"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json"
      }
     ],
     "visible_text_byte_count": 3418
    },
    {
     "object_id": "mechanism:mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public memory conflict replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The agent memory temporal-conflict replay component validates public memory projection mechanics by checking ADD/UPDATE/DELETE/NOOP decisio\u2026",
     "statement": "The agent memory temporal-conflict replay component validates public memory projection mechanics by checking ADD/UPDATE/DELETE/NOOP decisions, temporal conflict-edge refs, stale-downgrade refs, metadata-only non-public refs, paired memory-on/off replay evidence, answer-delta result records, source-module manifest boundaries, and memory falsification negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The agent memory temporal-conflict replay component validates public memory projection mechanics by checking ADD/UPDATE/DELETE/NOOP decisions, temporal conflict-edge refs, stale-downgrade refs, metadata-only non-public refs, paired memory-on/off replay evidence, answer-delta result records, source-module manifest boundaries, and memory falsification negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/agent_memory_temporal_conflict_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/agent memory temporal conflict replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "agent_memory_temporal_conflict_replay",
          "target_kind": "component",
          "target_label": "Agent Memory Temporal Conflict Replay",
          "url": "components.html#component-agent_memory_temporal_conflict_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
          "target_kind": "mechanism",
          "target_label": "validates public sleeper memory poisoning quarantine replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_memory_temporal_conflict_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent memory temporal conflict replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_memory_temporal_conflict_replay",
       "target_kind": "component",
       "target_label": "Agent Memory Temporal Conflict Replay",
       "url": "components.html#component-agent_memory_temporal_conflict_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sleeper memory poisoning quarantine replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json"
      }
     ],
     "visible_text_byte_count": 3963
    },
    {
     "object_id": "mechanism:mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public monitor verdict result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The agent monitor redteam falsification replay component validates public monitor-verdict evidence shape by checking trajectory rosters, su\u2026",
     "statement": "The agent monitor redteam falsification replay component validates public monitor-verdict evidence shape by checking trajectory rosters, suspicious-span refs, adversarial-probe refs, escalation refs, body-omission refs, mitigation refs, cold-replay refs, public trace recomputation, source-module manifest boundaries, and falsification negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The agent monitor redteam falsification replay component validates public monitor-verdict evidence shape by checking trajectory rosters, suspicious-span refs, adversarial-probe refs, escalation refs, body-omission refs, mitigation refs, cold-replay refs, public trace recomputation, source-module manifest boundaries, and falsification negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/agent_monitor_redteam_falsification_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/agent monitor redteam falsification replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "agent_monitor_redteam_falsification_replay",
          "target_kind": "component",
          "target_label": "Agent Monitor Redteam Falsification Replay",
          "url": "components.html#component-agent_monitor_redteam_falsification_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
          "target_kind": "mechanism",
          "target_label": "validates public sabotage scheming monitor replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_monitor_redteam_falsification_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent monitor redteam falsification replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_monitor_redteam_falsification_replay",
       "target_kind": "component",
       "target_label": "Agent Monitor Redteam Falsification Replay",
       "url": "components.html#component-agent_monitor_redteam_falsification_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sabotage scheming monitor replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json"
      }
     ],
     "visible_text_byte_count": 3947
    },
    {
     "object_id": "mechanism:mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public route feedback",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The agent route observability runtime validates public route-feedback and observability fixture bundles by checking actor-axis authority bo\u2026",
     "statement": "The agent route observability runtime validates public route-feedback and observability fixture bundles by checking actor-axis authority boundaries, route-lease consumption, duplicate trace ids, hook-shadow advisory status, anti-pattern debt retirement, agent-principle-lens compact admission, egress-mirror boundaries, copied source-module digests, and non-public-state exclusion before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The agent route observability runtime validates public route-feedback and observability fixture bundles by checking actor-axis authority boundaries, route-lease consumption, duplicate trace ids, hook-shadow advisory status, anti-pattern debt retirement, agent-principle-lens compact admission, egress-mirror boundaries, copied source-module digests, and non-public-state exclusion before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/agent_route_observability_runtime.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/agent route observability runtime py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "agent_route_observability_runtime",
          "target_kind": "component",
          "target_label": "Agent Route Observability Runtime",
          "url": "components.html#component-agent_route_observability_runtime"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public saturation engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public proof authority runtime bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public unsurfaced primitives bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public source engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public compliance pipeline bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_route_observability_runtime.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent route observability runtime py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_route_observability_runtime",
       "target_kind": "component",
       "target_label": "Agent Route Observability Runtime",
       "url": "components.html#component-agent_route_observability_runtime"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public unsurfaced primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public source engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public compliance pipeline bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json"
      }
     ],
     "visible_text_byte_count": 5307
    },
    {
     "object_id": "mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public sabotage scheming monitor replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The agent sabotage scheming-monitor replay validates a public synthetic sabotage-monitor bundle through task episodes, action traces, monit\u2026",
     "statement": "The agent sabotage scheming-monitor replay validates a public synthetic sabotage-monitor bundle through task episodes, action traces, monitor scores, counterfactual replay, cold replay, source-module digest anchors, negative cases, metadata-only result records, and scope limits without live sabotage, exploit instruction, account secret/account material, private reasoning export, launch, or deployment-risk product claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The agent sabotage scheming-monitor replay validates a public synthetic sabotage-monitor bundle through task episodes, action traces, monitor scores, counterfactual replay, cold replay, source-module digest anchors, negative cases, metadata-only result records, and scope limits without live sabotage, exploit instruction, account secret/account material, private reasoning export, launch, or deployment-risk product claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/agent sabotage scheming monitor replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "agent_sabotage_scheming_monitor_replay",
          "target_kind": "component",
          "target_label": "Agent Sabotage Scheming Monitor Replay",
          "url": "components.html#component-agent_sabotage_scheming_monitor_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent sabotage scheming monitor replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_sabotage_scheming_monitor_replay",
       "target_kind": "component",
       "target_label": "Agent Sabotage Scheming Monitor Replay",
       "url": "components.html#component-agent_sabotage_scheming_monitor_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json"
      }
     ],
     "visible_text_byte_count": 3622
    },
    {
     "object_id": "mechanism:mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public sandbox policy trace",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The agent sandbox policy escape replay component validates public sandbox-policy projection mechanics by checking action requests, pre-exec\u2026",
     "statement": "The agent sandbox policy escape replay component validates public sandbox-policy projection mechanics by checking action requests, pre-execution policy verdicts, side-effect result records, rollback result records, cold replay rows, public trace spans, source-module manifest boundaries, secret-exclusion scans, and escape negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The agent sandbox policy escape replay component validates public sandbox-policy projection mechanics by checking action requests, pre-execution policy verdicts, side-effect result records, rollback result records, cold replay rows, public trace spans, source-module manifest boundaries, secret-exclusion scans, and escape negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/agent_sandbox_policy_escape_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/agent sandbox policy escape replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "agent_sandbox_policy_escape_replay",
          "target_kind": "component",
          "target_label": "Agent Sandbox Policy Escape Replay",
          "url": "components.html#component-agent_sandbox_policy_escape_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
          "target_kind": "mechanism",
          "target_label": "validates public sleeper memory poisoning quarantine replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_sandbox_policy_escape_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent sandbox policy escape replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_sandbox_policy_escape_replay",
       "target_kind": "component",
       "target_label": "Agent Sandbox Policy Escape Replay",
       "url": "components.html#component-agent_sandbox_policy_escape_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sleeper memory poisoning quarantine replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json"
      }
     ],
     "visible_text_byte_count": 3873
    },
    {
     "object_id": "mechanism:mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "id": "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public agentic vulnerability patch proof replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The agentic vulnerability discovery patch-proof replay component validates public vulnerability-claim boundaries by checking projection pro\u2026",
     "statement": "The agentic vulnerability discovery patch-proof replay component validates public vulnerability-claim boundaries by checking projection protocol, vulnerability policy, synthetic target refs, issue hypotheses, trace evidence, abstract exploitability refs, patch diff refs, regression tests, verifier result records, sandbox verdicts, false-positive triage, cold replay, public agent-execution trace spans, source-module manifest digests, secret-exclusion scan, metadata-only result record policy, and security-overclaim negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The agentic vulnerability discovery patch-proof replay component validates public vulnerability-claim boundaries by checking projection protocol, vulnerability policy, synthetic target refs, issue hypotheses, trace evidence, abstract exploitability refs, patch diff refs, regression tests, verifier result records, sandbox verdicts, false-positive triage, cold replay, public agent-execution trace spans, source-module manifest digests, secret-exclusion scan, metadata-only result record policy, and security-overclaim negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/agentic vulnerability discovery patch proof replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "agentic_vulnerability_discovery_patch_proof_replay",
          "target_kind": "component",
          "target_label": "Agentic Vulnerability Discovery Patch Proof Replay",
          "url": "components.html#component-agentic_vulnerability_discovery_patch_proof_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agentic vulnerability discovery patch proof replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agentic_vulnerability_discovery_patch_proof_replay",
       "target_kind": "component",
       "target_label": "Agentic Vulnerability Discovery Patch Proof Replay",
       "url": "components.html#component-agentic_vulnerability_discovery_patch_proof_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json"
      }
     ],
     "visible_text_byte_count": 4046
    },
    {
     "object_id": "mechanism:mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public proof authority runtime bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 4 proof, authority, and runtime bundle validates copied public proof-control, formal-math, Codex runtime, completion, bitemporal, t\u2026",
     "statement": "The Set 4 proof, authority, and runtime bundle validates copied public proof-control, formal-math, Codex runtime, completion, bitemporal, taskpolicy, and context-yield source bodies through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting theorem-proof, benchmark, live runtime, source-file changes, public sharing, launch, or whole-system correctness authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 4 proof, authority, and runtime bundle validates copied public proof-control, formal-math, Codex runtime, completion, bitemporal, taskpolicy, and context-yield source bodies through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting theorem-proof, benchmark, live runtime, source-file changes, public sharing, launch, or whole-system correctness authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch4_proof_authority_runtime.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch4 proof authority runtime py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch4_proof_authority_runtime",
          "target_kind": "component",
          "target_label": "Proof / Control / Runtime Import Bundle",
          "url": "components.html#component-batch4_proof_authority_runtime"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch4_proof_authority_runtime.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch4 proof authority runtime py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch4_proof_authority_runtime",
       "target_kind": "component",
       "target_label": "Proof / Control / Runtime Import Bundle",
       "url": "components.html#component-batch4_proof_authority_runtime"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json"
      }
     ],
     "visible_text_byte_count": 3657
    },
    {
     "object_id": "mechanism:mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "id": "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public authority systems bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 5 authority systems bundle validates copied public source authority/control bodies through deterministic fixture and exported-bundl\u2026",
     "statement": "The Set 5 authority systems bundle validates copied public source authority/control bodies through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting live external model access, proof success, process signal authority, generated-state mutation, source-file changes, public sharing, launch, private-system equivalence, or whole-system correctness authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 5 authority systems bundle validates copied public source authority/control bodies through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting live external model access, proof success, process signal authority, generated-state mutation, source-file changes, public sharing, launch, private-system equivalence, or whole-system correctness authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch5_authority_systems_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch5 authority systems bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch5_authority_systems_capsule",
          "target_kind": "component",
          "target_label": "Authority Systems Source Bundle",
          "url": "components.html#component-batch5_authority_systems_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch5_authority_systems_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch5 authority systems bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch5_authority_systems_capsule",
       "target_kind": "component",
       "target_label": "Authority Systems Source Bundle",
       "url": "components.html#component-batch5_authority_systems_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json"
      }
     ],
     "visible_text_byte_count": 3634
    },
    {
     "object_id": "mechanism:mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public unsurfaced primitives bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 6 unsurfaced primitives bundle validates copied public source-primitive bodies through deterministic fixture and exported-bundle ex\u2026",
     "statement": "The Set 6 unsurfaced primitives bundle validates copied public source-primitive bodies through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting raw operator memory, prompt-shelf capture authority, live market data, provider/browser state, media launch, source-file changes, public sharing, launch, or whole-system correctness authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 6 unsurfaced primitives bundle validates copied public source-primitive bodies through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting raw operator memory, prompt-shelf capture authority, live market data, provider/browser state, media launch, source-file changes, public sharing, launch, or whole-system correctness authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch6_unsurfaced_primitives_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch6 unsurfaced primitives bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch6_unsurfaced_primitives_capsule",
          "target_kind": "component",
          "target_label": "Unsurfaced Source Primitives Bundle",
          "url": "components.html#component-batch6_unsurfaced_primitives_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch6_unsurfaced_primitives_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch6 unsurfaced primitives bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch6_unsurfaced_primitives_capsule",
       "target_kind": "component",
       "target_label": "Unsurfaced Source Primitives Bundle",
       "url": "components.html#component-batch6_unsurfaced_primitives_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json"
      }
     ],
     "visible_text_byte_count": 3646
    },
    {
     "object_id": "mechanism:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "id": "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public demo take console bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 7 Demo Take Console bundle validates copied public Swift source bodies through deterministic SwiftPM build-witness, recording-state\u2026",
     "statement": "The Set 7 Demo Take Console bundle validates copied public Swift source bodies through deterministic SwiftPM build-witness, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, transcribe-payload, exported-bundle, digest-anchor, negative-case, metadata-only result record, and scope limit checks without granting app launch authority, screen or microphone capture authority, model dispatch, source-file changes, public sharing, launch, private-system equivalence, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 7 Demo Take Console bundle validates copied public Swift source bodies through deterministic SwiftPM build-witness, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, transcribe-payload, exported-bundle, digest-anchor, negative-case, metadata-only result record, and scope limit checks without granting app launch authority, screen or microphone capture authority, model dispatch, source-file changes, public sharing, launch, private-system equivalence, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch7_demo_take_console_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch7 demo take console bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch7_demo_take_console_capsule",
          "target_kind": "component",
          "target_label": "Demo Take Console Source Bundle",
          "url": "components.html#component-batch7_demo_take_console_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public unsurfaced primitives bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
          "target_kind": "mechanism",
          "target_label": "validates public audio level rms port",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch7_demo_take_console_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch7 demo take console bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch7_demo_take_console_capsule",
       "target_kind": "component",
       "target_label": "Demo Take Console Source Bundle",
       "url": "components.html#component-batch7_demo_take_console_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public unsurfaced primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
       "target_kind": "mechanism",
       "target_label": "validates public audio level rms port",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json"
      }
     ],
     "visible_text_byte_count": 4418
    },
    {
     "object_id": "mechanism:mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "id": "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public source engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 7 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
     "statement": "The Set 7 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 7 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch7_macro_engines_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch7 source engines bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch7_macro_engines_capsule",
          "target_kind": "component",
          "target_label": "Trace, Code-Map & Scheduling Engines Bundle",
          "url": "components.html#component-batch7_macro_engines_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public policy engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public tools tail primitives bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public source engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch7_macro_engines_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch7 source engines bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch7_macro_engines_capsule",
       "target_kind": "component",
       "target_label": "Trace, Code-Map & Scheduling Engines Bundle",
       "url": "components.html#component-batch7_macro_engines_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public policy engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public tools tail primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public source engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 4457
    },
    {
     "object_id": "mechanism:mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "id": "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public oracle sibling bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 7 Oracle sibling bundle validates copied public Oracle source bodies through deterministic subject-index, subject-snapshot, truth-d\u2026",
     "statement": "The Set 7 Oracle sibling bundle validates copied public Oracle source bodies through deterministic subject-index, subject-snapshot, truth-diff, quartet-plan, original-pytest, exported-bundle, digest-anchor, negative-case, metadata-only result record, and scope limit checks without granting Oracle reasoning authority, semantic truth authority, external model access, source-file changes, public sharing, launch, private-system equivalence, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 7 Oracle sibling bundle validates copied public Oracle source bodies through deterministic subject-index, subject-snapshot, truth-diff, quartet-plan, original-pytest, exported-bundle, digest-anchor, negative-case, metadata-only result record, and scope limit checks without granting Oracle reasoning authority, semantic truth authority, external model access, source-file changes, public sharing, launch, private-system equivalence, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch7_oracle_sibling_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch7 oracle sibling bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch7_oracle_sibling_capsule",
          "target_kind": "component",
          "target_label": "Oracle Sibling Source Bundle",
          "url": "components.html#component-batch7_oracle_sibling_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public tools tail primitives bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch7_oracle_sibling_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch7 oracle sibling bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch7_oracle_sibling_capsule",
       "target_kind": "component",
       "target_label": "Oracle Sibling Source Bundle",
       "url": "components.html#component-batch7_oracle_sibling_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public tools tail primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json"
      }
     ],
     "visible_text_byte_count": 3975
    },
    {
     "object_id": "mechanism:mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "id": "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public secondary runtime bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 7 secondary runtime bundle validates copied public runtime, graph, cartography, stockgrid, and Polymarket source-body behavior thro\u2026",
     "statement": "The Set 7 secondary runtime bundle validates copied public runtime, graph, cartography, stockgrid, and Polymarket source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting browser/session export, wallet authority, live market data, investment-related actions, source-file changes, public sharing, launch, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 7 secondary runtime bundle validates copied public runtime, graph, cartography, stockgrid, and Polymarket source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting browser/session export, wallet authority, live market data, investment-related actions, source-file changes, public sharing, launch, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch7_secondary_runtime_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch7 secondary runtime bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch7_secondary_runtime_capsule",
          "target_kind": "component",
          "target_label": "Secondary Runtime Source Bundle",
          "url": "components.html#component-batch7_secondary_runtime_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch7_secondary_runtime_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch7 secondary runtime bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch7_secondary_runtime_capsule",
       "target_kind": "component",
       "target_label": "Secondary Runtime Source Bundle",
       "url": "components.html#component-batch7_secondary_runtime_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json"
      }
     ],
     "visible_text_byte_count": 3632
    },
    {
     "object_id": "mechanism:mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public audio level rms port",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 8 audio level RMS port validates a source-faithful public projection of AudioLevelMonitor normalized-level RMS behavior by running\u2026",
     "statement": "The Set 8 audio level RMS port validates a source-faithful public projection of AudioLevelMonitor normalized-level RMS behavior by running deterministic fixture arrays, malformed negative exercises, source-module digest checks, metadata-only result records, and scope limits without starting audio capture or claiming device, launch, public sharing, or domain-correctness authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 8 audio level RMS port validates a source-faithful public projection of AudioLevelMonitor normalized-level RMS behavior by running deterministic fixture arrays, malformed negative exercises, source-module digest checks, metadata-only result records, and scope limits without starting audio capture or claiming device, launch, public sharing, or domain-correctness authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch8_audio_level_rms_port.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch8 audio level rms port py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch8_audio_level_rms_port",
          "target_kind": "component",
          "target_label": "Audio Level RMS Port",
          "url": "components.html#component-batch8_audio_level_rms_port"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_audio_level_rms_port.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 audio level rms port py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_audio_level_rms_port",
       "target_kind": "component",
       "target_label": "Audio Level RMS Port",
       "url": "components.html#component-batch8_audio_level_rms_port"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json"
      }
     ],
     "visible_text_byte_count": 3397
    },
    {
     "object_id": "mechanism:mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public compliance pipeline bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 8 compliance pipeline bundle validates a bounded public compliance/pipeline import by exercising the compliance adapter registry, b\u2026",
     "statement": "The Set 8 compliance pipeline bundle validates a bounded public compliance/pipeline import by exercising the compliance adapter registry, bounded no-write checks, baseline companion scans, digest normalization, observe-plan helper behavior, dispatch/process boundaries, source-module digests, six negative cases, metadata-only result records, and scope limits.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 8 compliance pipeline bundle validates a bounded public compliance/pipeline import by exercising the compliance adapter registry, bounded no-write checks, baseline companion scans, digest normalization, observe-plan helper behavior, dispatch/process boundaries, source-module digests, six negative cases, metadata-only result records, and scope limits.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch8_compliance_pipeline_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch8 compliance pipeline bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch8_compliance_pipeline_capsule",
          "target_kind": "component",
          "target_label": "Compliance Pipeline Bundle",
          "url": "components.html#component-batch8_compliance_pipeline_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public saturation engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
          "target_kind": "mechanism",
          "target_label": "validates public source projection imports",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_compliance_pipeline_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 compliance pipeline bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_compliance_pipeline_capsule",
       "target_kind": "component",
       "target_label": "Compliance Pipeline Bundle",
       "url": "components.html#component-batch8_compliance_pipeline_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json"
      }
     ],
     "visible_text_byte_count": 4151
    },
    {
     "object_id": "mechanism:mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public policy engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 8 policy engines bundle validates copied public policy-engine bodies by exercising lab contract audit, market fusion readiness, cam\u2026",
     "statement": "The Set 8 policy engines bundle validates copied public policy-engine bodies by exercising lab contract audit, market fusion readiness, campaign transition adjudication, source-module digest anchors, three negative cases, metadata-only result records, and scope limits without live campaign execution, model/external model access, launch, public sharing, or source-file changes.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 8 policy engines bundle validates copied public policy-engine bodies by exercising lab contract audit, market fusion readiness, campaign transition adjudication, source-module digest anchors, three negative cases, metadata-only result records, and scope limits without live campaign execution, model/external model access, launch, public sharing, or source-file changes.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch8_policy_engines_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch8 policy engines bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch8_policy_engines_capsule",
          "target_kind": "component",
          "target_label": "Policy Engines Bundle",
          "url": "components.html#component-batch8_policy_engines_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_policy_engines_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 policy engines bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_policy_engines_capsule",
       "target_kind": "component",
       "target_label": "Policy Engines Bundle",
       "url": "components.html#component-batch8_policy_engines_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 3411
    },
    {
     "object_id": "mechanism:mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public structural theses bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 8 structural theses bundle validates a copied public structural-theses finance body by running synthetic winner, loser, and control\u2026",
     "statement": "The Set 8 structural theses bundle validates a copied public structural-theses finance body by running synthetic winner, loser, and control exercises, digest and anchor checks, three negative cases, metadata-only result records, and scope limits without live market data, investment-related actions, portfolio action, external model access, launch, or publishing-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 8 structural theses bundle validates a copied public structural-theses finance body by running synthetic winner, loser, and control exercises, digest and anchor checks, three negative cases, metadata-only result records, and scope limits without live market data, investment-related actions, portfolio action, external model access, launch, or public sharing decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch8_structural_theses_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch8 structural theses bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch8_structural_theses_capsule",
          "target_kind": "component",
          "target_label": "Structural Theses Finance Bundle",
          "url": "components.html#component-batch8_structural_theses_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public prediction market board bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_structural_theses_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 structural theses bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_structural_theses_capsule",
       "target_kind": "component",
       "target_label": "Structural Theses Finance Bundle",
       "url": "components.html#component-batch8_structural_theses_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json"
      }
     ],
     "visible_text_byte_count": 3840
    },
    {
     "object_id": "mechanism:mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public tools tail primitives bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 8 tools-tail primitives bundle validates four copied public tools-tail source modules by exercising observer set diffs, JSON patch\u2026",
     "statement": "The Set 8 tools-tail primitives bundle validates four copied public tools-tail source modules by exercising observer set diffs, JSON patch interpretation, stable ledger-id hashing, shadow-envelope parsing, source-module digest anchors, four negative cases, metadata-only result records, and scope limits without live oracle/provider/source-file changes/launch lanes.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 8 tools-tail primitives bundle validates four copied public tools-tail source modules by exercising observer set diffs, JSON patch interpretation, stable ledger-id hashing, shadow-envelope parsing, source-module digest anchors, four negative cases, metadata-only result records, and scope limits without live oracle/provider/source-file changes/launch lanes.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch8_tools_tail_primitives_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch8 tools tail primitives bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch8_tools_tail_primitives_capsule",
          "target_kind": "component",
          "target_label": "Tools-Tail Primitives Bundle",
          "url": "components.html#component-batch8_tools_tail_primitives_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_tools_tail_primitives_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 tools tail primitives bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_tools_tail_primitives_capsule",
       "target_kind": "component",
       "target_label": "Tools-Tail Primitives Bundle",
       "url": "components.html#component-batch8_tools_tail_primitives_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json"
      }
     ],
     "visible_text_byte_count": 3470
    },
    {
     "object_id": "mechanism:mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public validator checker bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 8 validator checker bundle validates an exact copied public validators.py body by exercising policy/status judging, private-boundar\u2026",
     "statement": "The Set 8 validator checker bundle validates an exact copied public validators.py body by exercising policy/status judging, private-boundary scanning, specimen checks, launch-gate checks, validate-entrypoint behavior, source-module digest anchors, six negative cases, metadata-only result records, and scope limits.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 8 validator checker bundle validates an exact copied public validators.py body by exercising policy/status judging, private-boundary scanning, specimen checks, launch-gate checks, validate-entrypoint behavior, source-module digest anchors, six negative cases, metadata-only result records, and scope limits.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch8_validator_checker_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch8 validator checker bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch8_validator_checker_capsule",
          "target_kind": "component",
          "target_label": "Validator Checker Bundle",
          "url": "components.html#component-batch8_validator_checker_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public cold eval honesty bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
          "target_kind": "mechanism",
          "target_label": "validates public launch claim language gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_validator_checker_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 validator checker bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_validator_checker_capsule",
       "target_kind": "component",
       "target_label": "Validator Checker Bundle",
       "url": "components.html#component-batch8_validator_checker_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json"
      }
     ],
     "visible_text_byte_count": 4042
    },
    {
     "object_id": "mechanism:mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "id": "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public source engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 9 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
     "statement": "The Set 9 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 9 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch9_macro_engines_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch9 source engines bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch9_macro_engines_capsule",
          "target_kind": "component",
          "target_label": "Backend & Governance Engines Bundle",
          "url": "components.html#component-batch9_macro_engines_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public governance compilers bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch9_macro_engines_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch9 source engines bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch9_macro_engines_capsule",
       "target_kind": "component",
       "target_label": "Backend & Governance Engines Bundle",
       "url": "components.html#component-batch9_macro_engines_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 3770
    },
    {
     "object_id": "mechanism:mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public cold eval honesty bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 10 cold-eval honesty bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
     "statement": "The Set 10 cold-eval honesty bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 10 cold-eval honesty bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch10_cold_eval_honesty_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch10 cold eval honesty bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch10_cold_eval_honesty_capsule",
          "target_kind": "component",
          "target_label": "Cold Evaluation Honesty Bundle",
          "url": "components.html#component-batch10_cold_eval_honesty_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch10_cold_eval_honesty_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch10 cold eval honesty bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch10_cold_eval_honesty_capsule",
       "target_kind": "component",
       "target_label": "Cold Evaluation Honesty Bundle",
       "url": "components.html#component-batch10_cold_eval_honesty_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json"
      }
     ],
     "visible_text_byte_count": 3447
    },
    {
     "object_id": "mechanism:mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public governance compilers bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 10 governance compilers bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exerc\u2026",
     "statement": "The Set 10 governance compilers bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 10 governance compilers bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch10_governance_compilers_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch10 governance compilers bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch10_governance_compilers_capsule",
          "target_kind": "component",
          "target_label": "Governance & Compiler Mechanisms Bundle",
          "url": "components.html#component-batch10_governance_compilers_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch10_governance_compilers_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch10 governance compilers bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch10_governance_compilers_capsule",
       "target_kind": "component",
       "target_label": "Governance & Compiler Mechanisms Bundle",
       "url": "components.html#component-batch10_governance_compilers_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json"
      }
     ],
     "visible_text_byte_count": 3498
    },
    {
     "object_id": "mechanism:mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public live source drift bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 10 live-source drift bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
     "statement": "The Set 10 live-source drift bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 10 live-source drift bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch10_live_source_drift_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch10 live source drift bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch10_live_source_drift_capsule",
          "target_kind": "component",
          "target_label": "Live Source Drift Bundle",
          "url": "components.html#component-batch10_live_source_drift_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public governance compilers bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch10_live_source_drift_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch10 live source drift bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch10_live_source_drift_capsule",
       "target_kind": "component",
       "target_label": "Live Source Drift Bundle",
       "url": "components.html#component-batch10_live_source_drift_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json"
      }
     ],
     "visible_text_byte_count": 3816
    },
    {
     "object_id": "mechanism:mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public saturation engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 11 saturation engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercis\u2026",
     "statement": "The Set 11 saturation engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 11 saturation engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without granting source authority, private-system equivalence, external model access, public sharing, launch, or whole-system correctness.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch11_saturation_engines_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch11 saturation engines bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch11_saturation_engines_capsule",
          "target_kind": "component",
          "target_label": "Saturation Engines Bundle",
          "url": "components.html#component-batch11_saturation_engines_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public compliance pipeline bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
          "target_kind": "mechanism",
          "target_label": "validates public source projection imports",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch11_saturation_engines_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch11 saturation engines bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch11_saturation_engines_capsule",
       "target_kind": "component",
       "target_label": "Saturation Engines Bundle",
       "url": "components.html#component-batch11_saturation_engines_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public compliance pipeline bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 4177
    },
    {
     "object_id": "mechanism:mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public market dashboard read model bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 12 market dashboard read-model bundle validates copied public read-model helpers over synthetic fixtures through market-dashboard i\u2026",
     "statement": "The Set 12 market dashboard read-model bundle validates copied public read-model helpers over synthetic fixtures through market-dashboard import stubs, freshness classification, related-situation scoring, source-module digest anchors, negative cases, metadata-only result records, and scope limits without market-level conclusions, investment-related actions, external model access, launch, public sharing, or whole-system correctness claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 12 market dashboard read-model bundle validates copied public read-model helpers over synthetic fixtures through market-dashboard import stubs, freshness classification, related-situation scoring, source-module digest anchors, negative cases, metadata-only result records, and scope limits without market-level conclusions, investment-related actions, external model access, launch, public sharing, or whole-system correctness claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch12_market_dashboard_read_model_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch12 market dashboard read model bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch12_market_dashboard_read_model_capsule",
          "target_kind": "component",
          "target_label": "Market Dashboard Read-Model Bundle",
          "url": "components.html#component-batch12_market_dashboard_read_model_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.research_and_science_replay_evidence_bundle",
          "target_kind": "concept",
          "target_label": "research and science replay validators as reproducibility scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public unsurfaced primitives bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch12_market_dashboard_read_model_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch12 market dashboard read model bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch12_market_dashboard_read_model_capsule",
       "target_kind": "component",
       "target_label": "Market Dashboard Read-Model Bundle",
       "url": "components.html#component-batch12_market_dashboard_read_model_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public unsurfaced primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json"
      }
     ],
     "visible_text_byte_count": 4070
    },
    {
     "object_id": "mechanism:mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public prediction market board bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 12 prediction market board bundle validates copied public prediction-board and quant-mart diagnostics over synthetic fixtures throu\u2026",
     "statement": "The Set 12 prediction market board bundle validates copied public prediction-board and quant-mart diagnostics over synthetic fixtures through event join and dedupe, provider drift flags, missingness classification, previous-green deltas, source lifecycle enrichment, source-module digest anchors, negative cases, metadata-only result records, and scope limits without market/provider truth, investment-related actions, external model access, launch, public sharing, or whole-system correctness claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 12 prediction market board bundle validates copied public prediction-board and quant-mart diagnostics over synthetic fixtures through event join and dedupe, provider drift flags, missingness classification, previous-green deltas, source lifecycle enrichment, source-module digest anchors, negative cases, metadata-only result records, and scope limits without market/provider truth, investment-related actions, external model access, launch, public sharing, or whole-system correctness claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch12_prediction_market_board_capsule.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch12 prediction market board bundle py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch12_prediction_market_board_capsule",
          "target_kind": "component",
          "target_label": "Prediction Market Board Bundle",
          "url": "components.html#component-batch12_prediction_market_board_capsule"
         },
         {
          "relation": "grounds",
          "target_id": "concept.research_and_science_replay_evidence_bundle",
          "target_kind": "concept",
          "target_label": "research and science replay validators as reproducibility scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public structural theses bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch12_prediction_market_board_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch12 prediction market board bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch12_prediction_market_board_capsule",
       "target_kind": "component",
       "target_label": "Prediction Market Board Bundle",
       "url": "components.html#component-batch12_prediction_market_board_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public structural theses bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json"
      }
     ],
     "visible_text_byte_count": 4120
    },
    {
     "object_id": "mechanism:mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public launch claim language gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Set 12 launch-claim language gate component validates launch-claim fixture generation, claim-language blocking, assert-clear exits, sou\u2026",
     "statement": "The Set 12 launch-claim language gate component validates launch-claim fixture generation, claim-language blocking, assert-clear exits, source-module digest anchors, negative cases, metadata-only result records, and scope limits without authorizing open-source deployment posture, public-sharing claims, launch status, or source-file changes.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Set 12 launch-claim language gate component validates launch-claim fixture generation, claim-language blocking, assert-clear exits, source-module digest anchors, negative cases, metadata-only result records, and scope limits without authorizing open-source deployment posture, public-sharing claims, launch status, or source-file changes.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/batch12_release_claim_language_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/batch12 launch claim language gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "batch12_release_claim_language_gate",
          "target_kind": "component",
          "target_label": "Release Public Wording Gate",
          "url": "components.html#component-batch12_release_claim_language_gate"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch12_release_claim_language_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch12 launch claim language gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch12_release_claim_language_gate",
       "target_kind": "component",
       "target_label": "Release Public Wording Gate",
       "url": "components.html#component-batch12_release_claim_language_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json"
      }
     ],
     "visible_text_byte_count": 3407
    },
    {
     "object_id": "mechanism:mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "id": "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public belief state process reward replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The belief-state process reward replay component validates public belief summaries, verifier-feedback observations, process and outcome rew\u2026",
     "statement": "The belief-state process reward replay component validates public belief summaries, verifier-feedback observations, process and outcome reward rows, reward-hacking negative cases, source-module digest anchors, metadata-only result records, and scope limits without exporting hidden reasoning, using hidden gold labels, relying on neural-judge-only labels, claiming benchmark performance, running live RL, calling providers, mutating source, or granting launch control.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The belief-state process reward replay component validates public belief summaries, verifier-feedback observations, process and outcome reward rows, reward-hacking negative cases, source-module digest anchors, metadata-only result records, and scope limits without exporting hidden reasoning, using hidden gold labels, relying on neural-judge-only labels, claiming benchmark performance, running live RL, calling providers, mutating source, or granting launch control.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/belief_state_process_reward_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/belief state process reward replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "belief_state_process_reward_replay",
          "target_kind": "component",
          "target_label": "Belief State Process Reward Replay",
          "url": "components.html#component-belief_state_process_reward_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/belief_state_process_reward_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/belief state process reward replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "belief_state_process_reward_replay",
       "target_kind": "component",
       "target_label": "Belief State Process Reward Replay",
       "url": "components.html#component-belief_state_process_reward_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json"
      }
     ],
     "visible_text_byte_count": 3686
    },
    {
     "object_id": "mechanism:mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public bounded autonomy campaign packet",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The bounded-autonomy campaign packet component validates campaign policy, failed-campaign digest handling, source-write refusal, source-mod\u2026",
     "statement": "The bounded-autonomy campaign packet component validates campaign policy, failed-campaign digest handling, source-write refusal, source-module digest anchors, negative cases, metadata-only result records, and scope limits without authorizing autonomous source-file changes, campaign execution, public sharing, or launch-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The bounded-autonomy campaign packet component validates campaign policy, failed-campaign digest handling, source-write refusal, source-module digest anchors, negative cases, metadata-only result records, and scope limits without authorizing autonomous source-file changes, campaign execution, public sharing, or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/bounded_autonomy_campaign_packet.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/bounded autonomy campaign packet py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "bounded_autonomy_campaign_packet",
          "target_kind": "component",
          "target_label": "Bounded Autonomy Campaign Packet",
          "url": "components.html#component-bounded_autonomy_campaign_packet"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/bounded_autonomy_campaign_packet.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/bounded autonomy campaign packet py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "bounded_autonomy_campaign_packet",
       "target_kind": "component",
       "target_label": "Bounded Autonomy Campaign Packet",
       "url": "components.html#component-bounded_autonomy_campaign_packet"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json"
      }
     ],
     "visible_text_byte_count": 3396
    },
    {
     "object_id": "mechanism:mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates synthetic bridge continuity",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The bridge phase continuity runtime validates public synthetic observe/apply bridge continuity by checking disk-first continuation packets\u2026",
     "statement": "The bridge phase continuity runtime validates public synthetic observe/apply bridge continuity by checking disk-first continuation packets, heartbeat liveness boundaries, resource-pressure dispatch blocks, resume-once semantics, duplicate-resume rejection, worker-skip dedupe, copied observe-runtime source-module digests, tracked result record-write gating, non-public-state scans, and scope limits before writing bounded metadata-only result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The bridge phase continuity runtime validates public synthetic observe/apply bridge continuity by checking disk-first continuation packets, heartbeat liveness boundaries, resource-pressure dispatch blocks, resume-once semantics, duplicate-resume rejection, worker-skip dedupe, copied observe-runtime source-module digests, tracked result record-write gating, non-public-state scans, and scope limits before writing bounded metadata-only result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/bridge_phase_continuity_runtime.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/bridge phase continuity runtime py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "bridge_phase_continuity_runtime",
          "target_kind": "component",
          "target_label": "Bridge Phase Continuity Runtime",
          "url": "components.html#component-bridge_phase_continuity_runtime"
         },
         {
          "relation": "grounds",
          "target_id": "concept.work_landing_and_continuity_control_bundle",
          "target_kind": "concept",
          "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
          "target_kind": "mechanism",
          "target_label": "validates public memory conflict replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
          "target_kind": "mechanism",
          "target_label": "validates public concurrency mission control",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
          "target_kind": "mechanism",
          "target_label": "validates public work landing replay contract",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/bridge_phase_continuity_runtime.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/bridge phase continuity runtime py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "bridge_phase_continuity_runtime",
       "target_kind": "component",
       "target_label": "Bridge Phase Continuity Runtime",
       "url": "components.html#component-bridge_phase_continuity_runtime"
      },
      {
       "relation": "grounds",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "target_kind": "mechanism",
       "target_label": "validates public memory conflict replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json"
      }
     ],
     "visible_text_byte_count": 4653
    },
    {
     "object_id": "mechanism:mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public certificate kernel execution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The certificate kernel execution lab component validates public proof-adjacent execution boundaries by checking a Lean/Lake certificate-ker\u2026",
     "statement": "The certificate kernel execution lab component validates public proof-adjacent execution boundaries by checking a Lean/Lake certificate-kernel fixture, generated certificate rows, analyzer metadata, transition traces, typed CP2 action translations, bounded Evolve reruns, source-module manifest digests, copied Lean/tool/profile bodies, metadata-only result record policy, authority counters, and negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The certificate kernel execution lab component validates public proof-adjacent execution boundaries by checking a Lean/Lake certificate-kernel fixture, generated certificate rows, analyzer metadata, transition traces, typed CP2 action translations, bounded Evolve reruns, source-module manifest digests, copied Lean/tool/profile bodies, metadata-only result record policy, authority counters, and negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/certificate_kernel_execution_lab.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/certificate kernel execution lab py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "certificate_kernel_execution_lab",
          "target_kind": "component",
          "target_label": "Certificate Kernel Execution Lab",
          "url": "components.html#component-certificate_kernel_execution_lab"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/certificate_kernel_execution_lab.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/certificate kernel execution lab py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "certificate_kernel_execution_lab",
       "target_kind": "component",
       "target_label": "Certificate Kernel Execution Lab",
       "url": "components.html#component-certificate_kernel_execution_lab"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json"
      }
     ],
     "visible_text_byte_count": 3601
    },
    {
     "object_id": "mechanism:mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public operator contract",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The cognitive operator registry component validates public reusable-cognition system by checking operator-shape fields, active-operator dog\u2026",
     "statement": "The cognitive operator registry component validates public reusable-cognition system by checking operator-shape fields, active-operator dogfood result records, cognition-delta evidence, anti-sprawl accretion decisions, operator-voice and authority-overclaim rejection, copied source registry/standard/tool body digests, and secret/non-public-state exclusion before writing bounded metadata-only result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The cognitive operator registry component validates public reusable-cognition system by checking operator-shape fields, active-operator dogfood result records, cognition-delta evidence, anti-sprawl accretion decisions, operator-voice and authority-overclaim rejection, copied source registry/standard/tool body digests, and secret/non-public-state exclusion before writing bounded metadata-only result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/cognitive_operator_registry.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/cognitive operator registry py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "cognitive_operator_registry",
          "target_kind": "component",
          "target_label": "Cognitive Operator Registry",
          "url": "components.html#component-cognitive_operator_registry"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/cognitive_operator_registry.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/cognitive operator registry py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "cognitive_operator_registry",
       "target_kind": "component",
       "target_label": "Cognitive Operator Registry",
       "url": "components.html#component-cognitive_operator_registry"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json"
      }
     ],
     "visible_text_byte_count": 3461
    },
    {
     "object_id": "mechanism:mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public source root bootstrap",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The cold-clone probe validates source-root public bootstrap mechanics by importing the package from src, running the secret-exclusion scan\u2026",
     "statement": "The cold-clone probe validates source-root public bootstrap mechanics by importing the package from src, running the secret-exclusion scan, executing the first-wave pattern-binding fixture, mirroring the declared public result record refs when missing, and writing an ignored local result record without claiming launch, hosted-product, private-system, provider-call, source-file changes, or whole-system correctness authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The cold-clone probe validates source-root public bootstrap mechanics by importing the package from src, running the secret-exclusion scan, executing the first-wave pattern-binding fixture, mirroring the declared public result record refs when missing, and writing an ignored local result record without claiming launch, hosted-product, private-system, provider-call, source-file changes, or whole-system correctness authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/cold_clone_probe.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/cold clone probe py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "pattern_binding_contract",
          "target_kind": "component",
          "target_label": "Pattern Binding Contract",
          "url": "components.html#component-pattern_binding_contract"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "grounds",
          "target_id": "concept.entry_and_reveal_route_readiness_bundle",
          "target_kind": "concept",
          "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/cold_clone_probe.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/cold clone probe py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "pattern_binding_contract",
       "target_kind": "component",
       "target_label": "Pattern Binding Contract",
       "url": "components.html#component-pattern_binding_contract"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.entry_and_reveal_route_readiness_bundle",
       "target_kind": "concept",
       "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json"
      }
     ],
     "visible_text_byte_count": 3723
    },
    {
     "object_id": "mechanism:mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public first run route map",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The cold-reader route-map component validates public first-run route projections by checking route-row command refs, public docs refs, rout\u2026",
     "statement": "The cold-reader route-map component validates public first-run route projections by checking route-row command refs, public docs refs, route-to-result record bindings, ordinal first-run sequencing, front-door commands, copied cold-entry source-module digests, metadata-only result record boundaries, negative cases, secret/non-public-state exclusion, and scope limits before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The cold-reader route-map component validates public first-run route projections by checking route-row command refs, public docs refs, route-to-result record bindings, ordinal first-run sequencing, front-door commands, copied cold-entry source-module digests, metadata-only result record boundaries, negative cases, secret/non-public-state exclusion, and scope limits before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/cold_reader_route_map.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/cold reader route map py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "cold_reader_route_map",
          "target_kind": "component",
          "target_label": "Cold Reader Route Map",
          "url": "components.html#component-cold_reader_route_map"
         },
         {
          "relation": "grounds",
          "target_id": "concept.entry_and_reveal_route_readiness_bundle",
          "target_kind": "concept",
          "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
          "target_kind": "mechanism",
          "target_label": "validates public route feedback",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine fact claim audit",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
          "target_kind": "mechanism",
          "target_label": "validates public first screen composition root",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public route plane bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
          "target_kind": "mechanism",
          "target_label": "validates public pattern assimilation step",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/cold_reader_route_map.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/cold reader route map py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "cold_reader_route_map",
       "target_kind": "component",
       "target_label": "Cold Reader Route Map",
       "url": "components.html#component-cold_reader_route_map"
      },
      {
       "relation": "grounds",
       "target_id": "concept.entry_and_reveal_route_readiness_bundle",
       "target_kind": "concept",
       "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
       "target_kind": "mechanism",
       "target_label": "validates public first screen composition root",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public route plane bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
       "target_kind": "mechanism",
       "target_label": "validates public pattern assimilation step",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json"
      }
     ],
     "visible_text_byte_count": 5085
    },
    {
     "object_id": "mechanism:mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public concurrency mission control",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The concurrency mission-control component validates copied public mission-control builder and bridge artifacts through fixture failure clas\u2026",
     "statement": "The concurrency mission-control component validates copied public mission-control builder and bridge artifacts through fixture failure classes, work log seed-speed topology, source-module digest anchors, negative cases, metadata-only result records, and scope limits without becoming a live scheduler, external model service, hosted orchestrator, production concurrency proof, launch, or publishing-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The concurrency mission-control component validates copied public mission-control builder and bridge artifacts through fixture failure classes, work log seed-speed topology, source-module digest anchors, negative cases, metadata-only result records, and scope limits without becoming a live scheduler, external model service, hosted orchestrator, production concurrency proof, launch, or public sharing decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/concurrency_mission_control.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/concurrency mission control py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "concurrency_mission_control",
          "target_kind": "component",
          "target_label": "Concurrency Mission Control",
          "url": "components.html#component-concurrency_mission_control"
         },
         {
          "relation": "grounds",
          "target_id": "concept.work_landing_and_continuity_control_bundle",
          "target_kind": "concept",
          "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public live source drift bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/concurrency_mission_control.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/concurrency mission control py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "concurrency_mission_control",
       "target_kind": "component",
       "target_label": "Concurrency Mission Control",
       "url": "components.html#component-concurrency_mission_control"
      },
      {
       "relation": "grounds",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json"
      }
     ],
     "visible_text_byte_count": 3853
    },
    {
     "object_id": "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public corpus readiness boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The corpus readiness Mathlib absence gate component validates public formal-math corpus readiness boundaries by checking copied PROVER smok\u2026",
     "statement": "The corpus readiness Mathlib absence gate component validates public formal-math corpus readiness boundaries by checking copied PROVER smoke-run corpus readiness rows, Lean/Std toolchain probe rows, Mathlib absence status, consumer-gate decisions, absent-corpus blocking, source-module manifest digests, metadata-only result record policy, scope limits, and negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The corpus readiness Mathlib absence gate component validates public formal-math corpus readiness boundaries by checking copied PROVER smoke-run corpus readiness rows, Lean/Std toolchain probe rows, Mathlib absence status, consumer-gate decisions, absent-corpus blocking, source-module manifest digests, metadata-only result record policy, scope limits, and negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/corpus readiness mathlib absence gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "corpus_readiness_mathlib_absence_gate",
          "target_kind": "component",
          "target_label": "Corpus Readiness Mathlib Absence Gate",
          "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
          "target_kind": "mechanism",
          "target_label": "validates public lean lake witness",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
          "target_kind": "mechanism",
          "target_label": "validates public tactic availability projection",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public symbol boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/corpus readiness mathlib absence gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "corpus_readiness_mathlib_absence_gate",
       "target_kind": "component",
       "target_label": "Corpus Readiness Mathlib Absence Gate",
       "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
       "target_kind": "mechanism",
       "target_label": "validates public lean lake witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "target_kind": "mechanism",
       "target_label": "validates public tactic availability projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public symbol boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json"
      }
     ],
     "visible_text_byte_count": 4920
    },
    {
     "object_id": "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public mathlib absence boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The corpus readiness Mathlib absence gate validates recorded corpus and toolchain readiness accounting, Mathlib absence boundaries, consume\u2026",
     "statement": "The corpus readiness Mathlib absence gate validates recorded corpus and toolchain readiness accounting, Mathlib absence boundaries, consumer gate cases, source-module digests, leakage guards, and metadata-only public result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The corpus readiness Mathlib absence gate validates recorded corpus and toolchain readiness accounting, Mathlib absence boundaries, consumer gate cases, source-module digests, leakage guards, and metadata-only public result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/corpus readiness mathlib absence gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "corpus_readiness_mathlib_absence_gate",
          "target_kind": "component",
          "target_label": "Corpus Readiness Mathlib Absence Gate",
          "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
          "target_kind": "mechanism",
          "target_label": "validates public lean lake witness",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/corpus readiness mathlib absence gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "corpus_readiness_mathlib_absence_gate",
       "target_kind": "component",
       "target_label": "Corpus Readiness Mathlib Absence Gate",
       "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
       "target_kind": "mechanism",
       "target_label": "validates public lean lake witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json"
      }
     ],
     "visible_text_byte_count": 3517
    },
    {
     "object_id": "mechanism:mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public doctrine fact claim audit",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The doctrine fact-claim audit component validates fact assertions, numeric claim bindings, DAG references, code-locus anchors, source-modul\u2026",
     "statement": "The doctrine fact-claim audit component validates fact assertions, numeric claim bindings, DAG references, code-locus anchors, source-module digest anchors, negative cases, metadata-only result records, and scope limits without authorizing unsupported truth claims, source-of-record flips, public sharing, or launch-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The doctrine fact-claim audit component validates fact assertions, numeric claim bindings, DAG references, code-locus anchors, source-module digest anchors, negative cases, metadata-only result records, and scope limits without authorizing unsupported truth claims, source-of-record flips, public sharing, or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/doctrine_fact_claim_audit.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/doctrine fact claim audit py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "doctrine_fact_claim_audit",
          "target_kind": "component",
          "target_label": "Doctrine Fact Claim Audit",
          "url": "components.html#component-doctrine_fact_claim_audit"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
          "target_kind": "mechanism",
          "target_label": "validates public derived fact provider engine",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public axiom support boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
          "target_kind": "mechanism",
          "target_label": "validates public self ignorance coverage ledger",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/doctrine_fact_claim_audit.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/doctrine fact claim audit py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "doctrine_fact_claim_audit",
       "target_kind": "component",
       "target_label": "Doctrine Fact Claim Audit",
       "url": "components.html#component-doctrine_fact_claim_audit"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
       "target_kind": "mechanism",
       "target_label": "validates public derived fact provider engine",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public axiom support boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "target_kind": "mechanism",
       "target_label": "validates public self ignorance coverage ledger",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json"
      }
     ],
     "visible_text_byte_count": 4400
    },
    {
     "object_id": "mechanism:mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public work landing replay contract",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The durable agent work-landing replay component validates public work-landing replay rows by checking owned-path claim evidence, owner-nati\u2026",
     "statement": "The durable agent work-landing replay component validates public work-landing replay rows by checking owned-path claim evidence, owner-native validation-before-commit ordering, HEAD-advance evidence for landed language, metadata-blocked completion capture, work log finalizer refs, copied source source-module digests, and metadata-only result record boundaries before writing bounded replay result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The durable agent work-landing replay component validates public work-landing replay rows by checking owned-path claim evidence, owner-native validation-before-commit ordering, HEAD-advance evidence for landed language, metadata-blocked completion capture, work log finalizer refs, copied source source-module digests, and metadata-only result record boundaries before writing bounded replay result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/durable_agent_work_landing_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/durable agent work landing replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "durable_agent_work_landing_replay",
          "target_kind": "component",
          "target_label": "Durable Agent Work Landing Replay",
          "url": "components.html#component-durable_agent_work_landing_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.work_landing_and_continuity_control_bundle",
          "target_kind": "concept",
          "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
          "target_kind": "mechanism",
          "target_label": "validates completion evidence claims",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
          "target_kind": "mechanism",
          "target_label": "validates public source projection imports",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public mission transaction bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/durable_agent_work_landing_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/durable agent work landing replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "durable_agent_work_landing_replay",
       "target_kind": "component",
       "target_label": "Durable Agent Work Landing Replay",
       "url": "components.html#component-durable_agent_work_landing_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "target_kind": "mechanism",
       "target_label": "validates completion evidence claims",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json"
      }
     ],
     "visible_text_byte_count": 4581
    },
    {
     "object_id": "mechanism:mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "id": "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public reference knowledge router",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room reference knowledge router mechanism validates explainable tiered routing over sanitized reference catalog fixtures by scor\u2026",
     "statement": "The Engine Room reference knowledge router mechanism validates explainable tiered routing over sanitized reference catalog fixtures by scoring structured routing fields, family text, open-first summaries, and curated notes while rejecting domain-mismatch and empty-query cases without claiming BM25, TF-IDF, embeddings, repository cloning, license authority, private reference corpus access, launch, or private-system authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room reference knowledge router mechanism validates explainable tiered routing over sanitized reference catalog fixtures by scoring structured routing fields, family text, open-first summaries, and curated notes while rejecting domain-mismatch and empty-query cases without claiming BM25, TF-IDF, embeddings, repository cloning, license authority, private reference corpus access, launch, or private-system authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/annex_knowledge_router.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/reference knowledge router py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/annex_knowledge_router.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/reference knowledge router py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json"
      }
     ],
     "visible_text_byte_count": 4121
    },
    {
     "object_id": "mechanism:mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "id": "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public command run singleflight",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room command-run singleflight mechanism validates content-addressed subprocess run keys, fcntl-backed leader/follower collapse\u2026",
     "statement": "The Engine Room command-run singleflight mechanism validates content-addressed subprocess run keys, fcntl-backed leader/follower collapse, completed-run reuse, scoped dirty/content fingerprint invalidation, captured stdout/stderr replay, and empty-command refusal over public fixtures without claiming scheduler, daemon, live command_runs export, distributed-lock, launch, or private-system authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room command-run singleflight mechanism validates content-addressed subprocess run keys, fcntl-backed leader/follower collapse, completed-run reuse, scoped dirty/content fingerprint invalidation, captured stdout/stderr replay, and empty-command refusal over public fixtures without claiming scheduler, daemon, live command_runs export, distributed-lock, launch, or private-system authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/command_run_singleflight.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/command run singleflight py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/command_run_singleflight.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/command run singleflight py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json"
      }
     ],
     "visible_text_byte_count": 3748
    },
    {
     "object_id": "mechanism:mechanism.engine_room_demo.validates_public_engine_room_demo",
     "id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public engine room demo",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room demo component validates the staged public Engine Room composition over bounded fixtures, controller audits, missing-target\u2026",
     "statement": "The Engine Room demo component validates the staged public Engine Room composition over bounded fixtures, controller audits, missing-target negative cases, metadata-only result records, and scope limits without claiming deployment posture, private-system equivalence, frontier theorem proving, complete security proof, public sharing, launch, external model access, or source-file changes.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room demo component validates the staged public Engine Room composition over bounded fixtures, controller audits, missing-target negative cases, metadata-only result records, and scope limits without claiming deployment posture, private-system equivalence, frontier theorem proving, complete security proof, public sharing, launch, external model access, or source-file changes.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/engine_room_demo.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/engine room demo py",
          "url": ""
         },
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/demo.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/demo py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
          "target_kind": "mechanism",
          "target_label": "validates public reference knowledge router",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
          "target_kind": "mechanism",
          "target_label": "validates public command run singleflight",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
          "target_kind": "mechanism",
          "target_label": "validates public derived fact provider engine",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
          "target_kind": "mechanism",
          "target_label": "validates public egress self compliance gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/engine_room_demo.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/engine room demo py",
       "url": ""
      },
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/demo.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/demo py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
       "target_kind": "mechanism",
       "target_label": "validates public reference knowledge router",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
       "target_kind": "mechanism",
       "target_label": "validates public command run singleflight",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
       "target_kind": "mechanism",
       "target_label": "validates public derived fact provider engine",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
       "target_kind": "mechanism",
       "target_label": "validates public egress self compliance gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json"
      }
     ],
     "visible_text_byte_count": 4971
    },
    {
     "object_id": "mechanism:mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public derived fact provider engine",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room derived fact provider engine mechanism validates registry-backed fact resolution over public fixture roots by resolving JSO\u2026",
     "statement": "The Engine Room derived fact provider engine mechanism validates registry-backed fact resolution over public fixture roots by resolving JSON pointers, glob counts, and git-backed callable facts, then turning provider failures into repairable error rows without claiming doctrine truth auditing, full source fact registry export, semantic claim validation, launch, or private-system authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room derived fact provider engine mechanism validates registry-backed fact resolution over public fixture roots by resolving JSON pointers, glob counts, and git-backed callable facts, then turning provider failures into repairable error rows without claiming doctrine truth auditing, full source fact registry export, semantic claim validation, launch, or private-system authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/derived_fact_provider_engine.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/derived fact provider engine py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/derived_fact_provider_engine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/derived fact provider engine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json"
      }
     ],
     "visible_text_byte_count": 3768
    },
    {
     "object_id": "mechanism:mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public egress self compliance gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room egress self-compliance gate mechanism validates phrase-membership policy over public agent-output fixtures by detecting per\u2026",
     "statement": "The Engine Room egress self-compliance gate mechanism validates phrase-membership policy over public agent-output fixtures by detecting permission ceremony without a real blocker, self-error language without durable capture, and command displacement without execution evidence while accepting explicitly bounded blocker or result record language without claiming taint analysis, prompt-injection defense, sandboxing, information-flow proof, launch, or private-system authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room egress self-compliance gate mechanism validates phrase-membership policy over public agent-output fixtures by detecting permission ceremony without a real blocker, self-error language without durable capture, and command displacement without execution evidence while accepting explicitly bounded blocker or result record language without claiming taint analysis, prompt-injection defense, sandboxing, information-flow proof, launch, or private-system authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/egress_self_compliance_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/egress self compliance gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public compliance pipeline bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/egress_self_compliance_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/egress self compliance gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public compliance pipeline bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json"
      }
     ],
     "visible_text_byte_count": 4294
    },
    {
     "object_id": "mechanism:mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "id": "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public generated projection drift gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room generated projection drift gate validates owner-routed generated artifact freshness over public fixtures by selecting proje\u2026",
     "statement": "The Engine Room generated projection drift gate validates owner-routed generated artifact freshness over public fixtures by selecting projection owners from changed paths, fingerprinting declared source and artifact files, accepting source-hash cache hits only when source hash, artifact hash, check command, and artifact presence match, and failing planted-byte or missing-artifact cases without claiming semantic drift proof, repair authority, launch-scope decision, or full source registry validation.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room generated projection drift gate validates owner-routed generated artifact freshness over public fixtures by selecting projection owners from changed paths, fingerprinting declared source and artifact files, accepting source-hash cache hits only when source hash, artifact hash, check command, and artifact presence match, and failing planted-byte or missing-artifact cases without claiming semantic drift proof, repair authority, launch-scope decision, or full source registry validation.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/generated_projection_drift_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/generated projection drift gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public validator checker bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/generated_projection_drift_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/generated projection drift gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public validator checker bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json"
      }
     ],
     "visible_text_byte_count": 4374
    },
    {
     "object_id": "mechanism:mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "id": "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean proof search lab",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room Lean proof-search lab mechanism validates bounded public proof-search fixtures by running tiny Lean statements through symb\u2026",
     "statement": "The Engine Room Lean proof-search lab mechanism validates bounded public proof-search fixtures by running tiny Lean statements through symbolic tactic search, statement-only candidate checking, problem-id ablation, oracle-body forward-firewall rejection, and axiom cleanliness checks without claiming neural theorem proving, frontier-scale automation, private source prover run export, oracle body solving, launch, or private-system authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room Lean proof-search lab mechanism validates bounded public proof-search fixtures by running tiny Lean statements through symbolic tactic search, statement-only candidate checking, problem-id ablation, oracle-body forward-firewall rejection, and axiom cleanliness checks without claiming neural theorem proving, frontier-scale automation, private source prover run export, oracle body solving, launch, or private-system authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/lean_proof_search_lab.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/lean proof search lab py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/lean_proof_search_lab.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/lean proof search lab py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json"
      }
     ],
     "visible_text_byte_count": 4110
    },
    {
     "object_id": "mechanism:mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "id": "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public navigation fitness benchmark",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room navigation fitness benchmark mechanism validates public route-packet benchmark fixtures by checking expected stable-id reca\u2026",
     "statement": "The Engine Room navigation fitness benchmark mechanism validates public route-packet benchmark fixtures by checking expected stable-id recall, packet precision, forbidden first routes, latency budgets, scent terms, and debt-candidate summaries without running the private kernel, validating embeddings, claiming universal navigation benchmark authority, launch, or private-system authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room navigation fitness benchmark mechanism validates public route-packet benchmark fixtures by checking expected stable-id recall, packet precision, forbidden first routes, latency budgets, scent terms, and debt-candidate summaries without running the private kernel, validating embeddings, claiming universal navigation benchmark authority, launch, or private-system authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/navigation_fitness_benchmark.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/navigation fitness benchmark py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/navigation_fitness_benchmark.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/navigation fitness benchmark py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json"
      }
     ],
     "visible_text_byte_count": 4091
    },
    {
     "object_id": "mechanism:mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "id": "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public projection leak gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Engine Room public projection leak gate validates rendered public projection roots by scanning file content, path names, symlink target\u2026",
     "statement": "The Engine Room public projection leak gate validates rendered public projection roots by scanning file content, path names, symlink targets, policy exceptions, and optional gitleaks output for account secret-shaped or private-system leakage, returning bounded hash-only result records without copying sensitive payloads or granting launch-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Engine Room public projection leak gate validates rendered public projection roots by scanning file content, path names, symlink targets, policy exceptions, and optional gitleaks output for account secret-shaped or private-system leakage, returning bounded hash-only result records without copying sensitive payloads or granting launch-scope decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/engine_room/public_projection_leak_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/engine room/public projection leak gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "engine_room_demo",
          "target_kind": "component",
          "target_label": "Engine Room Demo",
          "url": "components.html#component-engine_room_demo"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
          "target_kind": "mechanism",
          "target_label": "validates public engine room demo",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
          "target_kind": "mechanism",
          "target_label": "validates public egress self compliance gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/public_projection_leak_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/public projection leak gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
       "target_kind": "mechanism",
       "target_label": "validates public egress self compliance gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json"
      }
     ],
     "visible_text_byte_count": 4033
    },
    {
     "object_id": "mechanism:mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public doctrine grammar bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The executable doctrine grammar component validates public standards and paper-module grammar fixtures by checking required standard fields\u2026",
     "statement": "The executable doctrine grammar component validates public standards and paper-module grammar fixtures by checking required standard fields, paper-module teleology/governing-standard/result record/scope boundary sections, duplicate slugs, prose-runtime authority claims, doctrine-completeness overclaims, copied executable-grammar and standards/type-plane source-module digests, source-open body-import accounting, and non-public-state exclusion before writing bounded metadata-only result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The executable doctrine grammar component validates public standards and paper-module grammar fixtures by checking required standard fields, paper-module teleology/governing-standard/result record/scope boundary sections, duplicate slugs, prose-runtime authority claims, doctrine-completeness overclaims, copied executable-grammar and standards/type-plane source-module digests, source-open body-import accounting, and non-public-state exclusion before writing bounded metadata-only result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/executable_doctrine_grammar.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/executable doctrine grammar py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "executable_doctrine_grammar",
          "target_kind": "component",
          "target_label": "Executable Doctrine Grammar",
          "url": "components.html#component-executable_doctrine_grammar"
         },
         {
          "relation": "grounds",
          "target_id": "concept.executable_doctrine_grammar_standard_bundle",
          "target_kind": "concept",
          "target_label": "standard as schema contract with explicit scope limit",
          "url": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine fact claim audit",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public axiom support boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/executable_doctrine_grammar.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/executable doctrine grammar py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "executable_doctrine_grammar",
       "target_kind": "component",
       "target_label": "Executable Doctrine Grammar",
       "url": "components.html#component-executable_doctrine_grammar"
      },
      {
       "relation": "grounds",
       "target_id": "concept.executable_doctrine_grammar_standard_bundle",
       "target_kind": "concept",
       "target_label": "standard as schema contract with explicit scope limit",
       "url": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public axiom support boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json"
      }
     ],
     "visible_text_byte_count": 4627
    },
    {
     "object_id": "mechanism:mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "id": "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public finance forecast evaluation spine",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The finance forecast evaluation spine validates copied public finance-evaluation helpers over synthetic market-shaped fixtures through Dieb\u2026",
     "statement": "The finance forecast evaluation spine validates copied public finance-evaluation helpers over synthetic market-shaped fixtures through Diebold-Mariano, HLN refusal, SPA/reality-check bootstrap, stationary-bootstrap and MCS exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without live market data, investment-related actions, track-record claims, optimizer mutation, launch, or publishing-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The finance forecast evaluation spine validates copied public finance-evaluation helpers over synthetic market-shaped fixtures through Diebold-Mariano, HLN refusal, SPA/reality-check bootstrap, stationary-bootstrap and MCS exercises, source-module digest anchors, negative cases, metadata-only result records, and scope limits without live market data, investment-related actions, track-record claims, optimizer mutation, launch, or public sharing decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/finance_forecast_evaluation_spine.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/finance forecast evaluation spine py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "finance_forecast_evaluation_spine",
          "target_kind": "component",
          "target_label": "Finance Forecast Evaluation Spine",
          "url": "components.html#component-finance_forecast_evaluation_spine"
         },
         {
          "relation": "grounds",
          "target_id": "concept.research_and_science_replay_evidence_bundle",
          "target_kind": "concept",
          "target_label": "research and science replay validators as reproducibility scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public prediction market board bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
          "target_kind": "mechanism",
          "target_label": "validates public prediction oracle reconciliation",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/finance_forecast_evaluation_spine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/finance forecast evaluation spine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "finance_forecast_evaluation_spine",
       "target_kind": "component",
       "target_label": "Finance Forecast Evaluation Spine",
       "url": "components.html#component-finance_forecast_evaluation_spine"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
       "target_kind": "mechanism",
       "target_label": "validates public prediction oracle reconciliation",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json"
      }
     ],
     "visible_text_byte_count": 4414
    },
    {
     "object_id": "mechanism:mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public first screen composition root",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The first-screen composition root validates the public one-screen entry card by checking reader-route ids, shared first commands, behavior-\u2026",
     "statement": "The first-screen composition root validates the public one-screen entry card by checking reader-route ids, shared first commands, behavior-proof refs, evidence-accounting frames, doctrine-effect handles, omission result records, README entry order, observatory landing refs, text projection bounds, and scope limits without becoming launch, hosted-public sharing, provider-call, source-file changes, private-data-equivalence, score-based-progress, or whole-system-correctness authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The first-screen composition root validates the public one-screen entry card by checking reader-route ids, shared first commands, behavior-proof refs, evidence-accounting frames, doctrine-effect handles, omission result records, README entry order, observatory landing refs, text projection bounds, and scope limits without becoming launch, hosted-public sharing, provider-call, source-file changes, private-data-equivalence, score-based-progress, or whole-system-correctness authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/first_screen_composition.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/first screen composition py",
          "url": ""
         },
         {
          "relation": "grounded in",
          "target_id": "scripts/first_screen_composition_card.py",
          "target_kind": "source path",
          "target_label": "scripts/first screen composition card py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "public_reveal_walkthrough",
          "target_kind": "component",
          "target_label": "Public Reveal Walkthrough",
          "url": "components.html#component-public_reveal_walkthrough"
         },
         {
          "relation": "grounds",
          "target_id": "concept.entry_and_reveal_route_readiness_bundle",
          "target_kind": "concept",
          "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
          "target_kind": "mechanism",
          "target_label": "validates public first run route map",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
          "target_kind": "mechanism",
          "target_label": "validates public reveal walkthrough",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/first_screen_composition.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/first screen composition py",
       "url": ""
      },
      {
       "relation": "grounded in",
       "target_id": "scripts/first_screen_composition_card.py",
       "target_kind": "source path",
       "target_label": "scripts/first screen composition card py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "public_reveal_walkthrough",
       "target_kind": "component",
       "target_label": "Public Reveal Walkthrough",
       "url": "components.html#component-public_reveal_walkthrough"
      },
      {
       "relation": "grounds",
       "target_id": "concept.entry_and_reveal_route_readiness_bundle",
       "target_kind": "concept",
       "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
       "target_kind": "mechanism",
       "target_label": "validates public reveal walkthrough",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json"
      }
     ],
     "visible_text_byte_count": 4429
    },
    {
     "object_id": "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public evidence cell anchor resolution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal evidence cell anchor resolver validates proof-language evidence boundaries by resolving public paper claims to evidence-cell ids\u2026",
     "statement": "The formal evidence cell anchor resolver validates proof-language evidence boundaries by resolving public paper claims to evidence-cell ids, requiring source-anchor refs and machine-anchor classes, checking copied source-module digests and metadata-only result record policy, anchoring verifier-trace cells to real Ring2 result records, and rejecting proof-body, private-ref, human-approval, theorem-correctness, missing-cell, and missing-anchor overclaims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal evidence cell anchor resolver validates proof-language evidence boundaries by resolving public paper claims to evidence-cell ids, requiring source-anchor refs and machine-anchor classes, checking copied source-module digests and metadata-only result record policy, anchoring verifier-trace cells to real Ring2 result records, and rejecting proof-body, private-ref, human-approval, theorem-correctness, missing-cell, and missing-anchor overclaims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal evidence cell anchor resolver py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_evidence_cell_anchor_resolver",
          "target_kind": "component",
          "target_label": "Formal Evidence Cell Anchor Resolver",
          "url": "components.html#component-formal_evidence_cell_anchor_resolver"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
          "target_kind": "mechanism",
          "target_label": "validates ring2 diagnostic evidence membrane",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public tactic routing boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal evidence cell anchor resolver py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_evidence_cell_anchor_resolver",
       "target_kind": "component",
       "target_label": "Formal Evidence Cell Anchor Resolver",
       "url": "components.html#component-formal_evidence_cell_anchor_resolver"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json"
      }
     ],
     "visible_text_byte_count": 4369
    },
    {
     "object_id": "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public evidence cell anchors",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal evidence cell anchor resolver validates claim-to-evidence-cell resolution, public source anchors, permitted claim strength, copi\u2026",
     "statement": "The formal evidence cell anchor resolver validates claim-to-evidence-cell resolution, public source anchors, permitted claim strength, copied source-module manifests, leakage refusals, and metadata-only evidence anchor result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal evidence cell anchor resolver validates claim-to-evidence-cell resolution, public source anchors, permitted claim strength, copied source-module manifests, leakage refusals, and metadata-only evidence anchor result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal evidence cell anchor resolver py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_evidence_cell_anchor_resolver",
          "target_kind": "component",
          "target_label": "Formal Evidence Cell Anchor Resolver",
          "url": "components.html#component-formal_evidence_cell_anchor_resolver"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
          "target_kind": "mechanism",
          "target_label": "validates ring2 diagnostic evidence membrane",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal evidence cell anchor resolver py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_evidence_cell_anchor_resolver",
       "target_kind": "component",
       "target_label": "Formal Evidence Cell Anchor Resolver",
       "url": "components.html#component-formal_evidence_cell_anchor_resolver"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json"
      }
     ],
     "visible_text_byte_count": 3533
    },
    {
     "object_id": "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean lake witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal math Lean proof witness component validates a bounded public Lean/Lake witness by copying a declared toy Lake project into a tem\u2026",
     "statement": "The formal math Lean proof witness component validates a bounded public Lean/Lake witness by copying a declared toy Lake project into a temporary workspace, probing local Lean and Lake, running lake build, checking copied public source-module digests and anchors, recording declaration/source metadata, and observing forbidden-import, private-source-ref, proof-body, and invalid-proof negative cases before writing redacted result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal math Lean proof witness component validates a bounded public Lean/Lake witness by copying a declared toy Lake project into a temporary workspace, probing local Lean and Lake, running lake build, checking copied public source-module digests and anchors, recording declaration/source metadata, and observing forbidden-import, private-source-ref, proof-body, and invalid-proof negative cases before writing redacted result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_math_lean_proof_witness.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal math lean proof witness py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_math_lean_proof_witness",
          "target_kind": "component",
          "target_label": "Formal Math Lean Proof Witness",
          "url": "components.html#component-formal_math_lean_proof_witness"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
          "target_kind": "mechanism",
          "target_label": "validates public premise retrieval slice",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public formal math readiness bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
          "target_kind": "mechanism",
          "target_label": "validates ring2 diagnostic evidence membrane",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
          "target_kind": "mechanism",
          "target_label": "validates public verifier transition witness",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_lean_proof_witness.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math lean proof witness py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_lean_proof_witness",
       "target_kind": "component",
       "target_label": "Formal Math Lean Proof Witness",
       "url": "components.html#component-formal_math_lean_proof_witness"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
       "target_kind": "mechanism",
       "target_label": "validates public premise retrieval slice",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public formal math readiness bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "target_kind": "mechanism",
       "target_label": "validates public verifier transition witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json"
      }
     ],
     "visible_text_byte_count": 5248
    },
    {
     "object_id": "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal math Lean proof witness validates a bounded public toy Lean/Lake witness by checking tool availability, temporary-workspace buil\u2026",
     "statement": "The formal math Lean proof witness validates a bounded public toy Lean/Lake witness by checking tool availability, temporary-workspace build status, source-module manifests, declaration metadata, redacted result records, and leakage/overclaim negative cases.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal math Lean proof witness validates a bounded public toy Lean/Lake witness by checking tool availability, temporary-workspace build status, source-module manifests, declaration metadata, redacted result records, and leakage/overclaim negative cases.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_math_lean_proof_witness.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal math lean proof witness py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_math_lean_proof_witness",
          "target_kind": "component",
          "target_label": "Formal Math Lean Proof Witness",
          "url": "components.html#component-formal_math_lean_proof_witness"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
          "target_kind": "mechanism",
          "target_label": "validates public premise retrieval slice",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public formal math readiness bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
          "target_kind": "mechanism",
          "target_label": "validates ring2 diagnostic evidence membrane",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
          "target_kind": "mechanism",
          "target_label": "validates public verifier transition witness",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_lean_proof_witness.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math lean proof witness py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_lean_proof_witness",
       "target_kind": "component",
       "target_label": "Formal Math Lean Proof Witness",
       "url": "components.html#component-formal_math_lean_proof_witness"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
       "target_kind": "mechanism",
       "target_label": "validates public premise retrieval slice",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public formal math readiness bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "target_kind": "mechanism",
       "target_label": "validates public verifier transition witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json"
      }
     ],
     "visible_text_byte_count": 4866
    },
    {
     "object_id": "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public premise retrieval projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal math premise retrieval component validates public retrieval metadata, premise-index references, strategy cases, retrieval querie\u2026",
     "statement": "The formal math premise retrieval component validates public retrieval metadata, premise-index references, strategy cases, retrieval queries, context-budget limits, copied index material, negative-case refusals, and metadata-only retrieval result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal math premise retrieval component validates public retrieval metadata, premise-index references, strategy cases, retrieval queries, context-budget limits, copied index material, negative-case refusals, and metadata-only retrieval result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_math_premise_retrieval.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal math premise retrieval py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_math_premise_retrieval",
          "target_kind": "component",
          "target_label": "Formal Math Premise Retrieval",
          "url": "components.html#component-formal_math_premise_retrieval"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_premise_retrieval.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math premise retrieval py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_premise_retrieval",
       "target_kind": "component",
       "target_label": "Formal Math Premise Retrieval",
       "url": "components.html#component-formal_math_premise_retrieval"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json"
      }
     ],
     "visible_text_byte_count": 3505
    },
    {
     "object_id": "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public premise retrieval slice",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal math premise retrieval component validates a formal-math retrieval slice by checking copied Lean/Std premise descriptors, retrie\u2026",
     "statement": "The formal math premise retrieval component validates a formal-math retrieval slice by checking copied Lean/Std premise descriptors, retrieval query scoring, context recipe byte budgets, strategy gates, source-module/body-floor provenance, card freshness, metadata-only result record policy, and proof/oracle/test-split/strategy negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal math premise retrieval component validates a formal-math retrieval slice by checking copied Lean/Std premise descriptors, retrieval query scoring, context recipe byte budgets, strategy gates, source-module/body-floor provenance, card freshness, metadata-only result record policy, and proof/oracle/test-split/strategy negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_math_premise_retrieval.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal math premise retrieval py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_math_premise_retrieval",
          "target_kind": "component",
          "target_label": "Formal Math Premise Retrieval",
          "url": "components.html#component-formal_math_premise_retrieval"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public verifier trace repair bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
          "target_kind": "mechanism",
          "target_label": "validates public lean std premise catalog",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
          "target_kind": "mechanism",
          "target_label": "validates public strategy hypothesis projection",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
          "target_kind": "mechanism",
          "target_label": "validates public premise retrieval attribution",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_premise_retrieval.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math premise retrieval py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_premise_retrieval",
       "target_kind": "component",
       "target_label": "Formal Math Premise Retrieval",
       "url": "components.html#component-formal_math_premise_retrieval"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public verifier trace repair bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
       "target_kind": "mechanism",
       "target_label": "validates public lean std premise catalog",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "target_kind": "mechanism",
       "target_label": "validates public strategy hypothesis projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
       "target_kind": "mechanism",
       "target_label": "validates public premise retrieval attribution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json"
      }
     ],
     "visible_text_byte_count": 5246
    },
    {
     "object_id": "mechanism:mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public formal math readiness bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal math readiness gate component validates public formal-math readiness evidence by checking declared corpus and Mathlib readiness\u2026",
     "statement": "The formal math readiness gate component validates public formal-math readiness evidence by checking declared corpus and Mathlib readiness, tactic probe result records, proof-metadata-only premise indexes, target-shape route admissibility, provider context budgets, formal_math_readiness_extensions intake refs, copied PROVER probe artifacts, public component source body imports, secret exclusion, and negative cases before writing bounded readiness result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal math readiness gate component validates public formal-math readiness evidence by checking declared corpus and Mathlib readiness, tactic probe result records, proof-metadata-only premise indexes, target-shape route admissibility, provider context budgets, formal_math_readiness_extensions intake refs, copied PROVER probe artifacts, public component source body imports, secret exclusion, and negative cases before writing bounded readiness result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_math_readiness_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal math readiness gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_math_readiness_gate",
          "target_kind": "component",
          "target_label": "Formal Math Readiness Gate",
          "url": "components.html#component-formal_math_readiness_gate"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public proof authority runtime bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
          "target_kind": "mechanism",
          "target_label": "validates public source projection imports",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public context budget boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
          "target_kind": "mechanism",
          "target_label": "validates public tactic availability projection",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public tactic routing boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_readiness_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math readiness gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_readiness_gate",
       "target_kind": "component",
       "target_label": "Formal Math Readiness Gate",
       "url": "components.html#component-formal_math_readiness_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public context budget boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "target_kind": "mechanism",
       "target_label": "validates public tactic availability projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json"
      }
     ],
     "visible_text_byte_count": 5394
    },
    {
     "object_id": "mechanism:mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "id": "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public readiness boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal math readiness gate validates declared readiness metadata, tactic availability references, premise-index boundaries, target-shap\u2026",
     "statement": "The formal math readiness gate validates declared readiness metadata, tactic availability references, premise-index boundaries, target-shape routing references, provider-context recipe budgets, source-module manifests, and consumer gate cases before writing bounded public result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal math readiness gate validates declared readiness metadata, tactic availability references, premise-index boundaries, target-shape routing references, provider-context recipe budgets, source-module manifests, and consumer gate cases before writing bounded public result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_math_readiness_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal math readiness gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_math_readiness_gate",
          "target_kind": "component",
          "target_label": "Formal Math Readiness Gate",
          "url": "components.html#component-formal_math_readiness_gate"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
          "target_kind": "mechanism",
          "target_label": "validates public tactic availability projection",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_readiness_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math readiness gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_readiness_gate",
       "target_kind": "component",
       "target_label": "Formal Math Readiness Gate",
       "url": "components.html#component-formal_math_readiness_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "target_kind": "mechanism",
       "target_label": "validates public tactic availability projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json"
      }
     ],
     "visible_text_byte_count": 3566
    },
    {
     "object_id": "mechanism:mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public verifier trace repair bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The formal math verifier-trace repair loop component validates public proof-lab repair evidence by checking copied Ring2 run refs and diges\u2026",
     "statement": "The formal math verifier-trace repair loop component validates public proof-lab repair evidence by checking copied Ring2 run refs and digests, verifier attempts, trace grades, repair actions, promotion gates, copied source-module manifests, toy rerun result records, secret exclusion, and seven proof/provider/oracle/human-approval negative cases before writing bounded metadata-only result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The formal math verifier-trace repair loop component validates public proof-lab repair evidence by checking copied Ring2 run refs and digests, verifier attempts, trace grades, repair actions, promotion gates, copied source-module manifests, toy rerun result records, secret exclusion, and seven proof/provider/oracle/human-approval negative cases before writing bounded metadata-only result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/formal_math_verifier_trace_repair_loop.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/formal math verifier trace repair loop py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "formal_math_verifier_trace_repair_loop",
          "target_kind": "component",
          "target_label": "Formal Math Verifier Trace Repair Loop",
          "url": "components.html#component-formal_math_verifier_trace_repair_loop"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
          "target_kind": "mechanism",
          "target_label": "validates public evidence cell anchor resolution",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
          "target_kind": "mechanism",
          "target_label": "validates ring2 diagnostic evidence membrane",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public tactic routing boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
          "target_kind": "mechanism",
          "target_label": "validates public verifier transition witness",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_verifier_trace_repair_loop.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math verifier trace repair loop py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_verifier_trace_repair_loop",
       "target_kind": "component",
       "target_label": "Formal Math Verifier Trace Repair Loop",
       "url": "components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
       "target_kind": "mechanism",
       "target_label": "validates public evidence cell anchor resolution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "target_kind": "mechanism",
       "target_label": "validates public verifier transition witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json"
      }
     ],
     "visible_text_byte_count": 5311
    },
    {
     "object_id": "mechanism:mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "id": "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public indirect prompt injection information flow policy replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The indirect prompt-injection information-flow policy replay component validates public source-trust rows, taint-flow edges, policy verdict\u2026",
     "statement": "The indirect prompt-injection information-flow policy replay component validates public source-trust rows, taint-flow edges, policy verdicts, sanitized outputs, cold replay, public trace spans, negative cases, source-module digest anchors, metadata-only result records, and scope limits without using real accounts, raw prompts, account secrets, hidden system messages, live tools, model-output data, benchmark claims, source-file changes, or launch-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The indirect prompt-injection information-flow policy replay component validates public source-trust rows, taint-flow edges, policy verdicts, sanitized outputs, cold replay, public trace spans, negative cases, source-module digest anchors, metadata-only result records, and scope limits without using real accounts, raw prompts, account secrets, hidden system messages, live tools, model-output data, benchmark claims, source-file changes, or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/indirect_prompt_injection_information_flow_policy_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/indirect prompt injection information flow policy replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "indirect_prompt_injection_information_flow_policy_replay",
          "target_kind": "component",
          "target_label": "Indirect Prompt Injection Information Flow Policy Replay",
          "url": "components.html#component-indirect_prompt_injection_information_flow_policy_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/indirect_prompt_injection_information_flow_policy_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/indirect prompt injection information flow policy replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "indirect_prompt_injection_information_flow_policy_replay",
       "target_kind": "component",
       "target_label": "Indirect Prompt Injection Information Flow Policy Replay",
       "url": "components.html#component-indirect_prompt_injection_information_flow_policy_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json"
      }
     ],
     "visible_text_byte_count": 3944
    },
    {
     "object_id": "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean std premise catalog",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Lean/Std premise index component validates a copied Lean/Std premise descriptor catalog and Ring2 premise-retrieval source body bundle\u2026",
     "statement": "The Lean/Std premise index component validates a copied Lean/Std premise descriptor catalog and Ring2 premise-retrieval source body bundle by checking projection protocol refs, namespace coverage, source refs, copied body-module digests, metadata-only result record policy, negative cases, and scope limits before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Lean/Std premise index component validates a copied Lean/Std premise descriptor catalog and Ring2 premise-retrieval source body bundle by checking projection protocol refs, namespace coverage, source refs, copied body-module digests, metadata-only result record policy, negative cases, and scope limits before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/lean_std_premise_index.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/lean std premise index py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "lean_std_premise_index",
          "target_kind": "component",
          "target_label": "Lean Std Premise Index",
          "url": "components.html#component-lean_std_premise_index"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public verifier trace repair bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
          "target_kind": "mechanism",
          "target_label": "validates public strategy hypothesis projection",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public symbol boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/lean_std_premise_index.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/lean std premise index py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "lean_std_premise_index",
       "target_kind": "component",
       "target_label": "Lean Std Premise Index",
       "url": "components.html#component-lean_std_premise_index"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public verifier trace repair bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "target_kind": "mechanism",
       "target_label": "validates public strategy hypothesis projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public symbol boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json"
      }
     ],
     "visible_text_byte_count": 4732
    },
    {
     "object_id": "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean std premise index",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Lean Std premise index validates premise metadata, Lean/Init source refs, copied public source manifests, forbidden proof/oracle fields\u2026",
     "statement": "The Lean Std premise index validates premise metadata, Lean/Init source refs, copied public source manifests, forbidden proof/oracle fields, split boundaries, and metadata-only premise-index result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Lean Std premise index validates premise metadata, Lean/Init source refs, copied public source manifests, forbidden proof/oracle fields, split boundaries, and metadata-only premise-index result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/lean_std_premise_index.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/lean std premise index py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "lean_std_premise_index",
          "target_kind": "component",
          "target_label": "Lean Std Premise Index",
          "url": "components.html#component-lean_std_premise_index"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
          "target_kind": "mechanism",
          "target_label": "validates public strategy hypothesis projection",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/lean_std_premise_index.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/lean std premise index py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "lean_std_premise_index",
       "target_kind": "component",
       "target_label": "Lean Std Premise Index",
       "url": "components.html#component-lean_std_premise_index"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "target_kind": "mechanism",
       "target_label": "validates public strategy hypothesis projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json"
      }
     ],
     "visible_text_byte_count": 3406
    },
    {
     "object_id": "mechanism:mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public source projection imports",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The source projection import protocol component validates fixture and exported projection bundles by checking source refs, public target re\u2026",
     "statement": "The source projection import protocol component validates fixture and exported projection bundles by checking source refs, public target refs, content digests, per-slice source-module manifests, omission result records, scope limits, intake cell statuses, validation refs, and secret-exclusion scans before writing bounded public result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The source projection import protocol component validates fixture and exported projection bundles by checking source refs, public target refs, content digests, per-slice source-module manifests, omission result records, scope limits, intake cell statuses, validation refs, and secret-exclusion scans before writing bounded public result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/macro_projection_import_protocol.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/source projection import protocol py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "macro_projection_import_protocol",
          "target_kind": "component",
          "target_label": "Source Projection Import Protocol",
          "url": "components.html#component-macro_projection_import_protocol"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
          "target_kind": "mechanism",
          "target_label": "validates public monitor verdict result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
          "target_kind": "mechanism",
          "target_label": "validates public route feedback",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
          "target_kind": "mechanism",
          "target_label": "validates synthetic bridge continuity",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public governance compilers bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public live source drift bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/macro_projection_import_protocol.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/source projection import protocol py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "macro_projection_import_protocol",
       "target_kind": "component",
       "target_label": "Source Projection Import Protocol",
       "url": "components.html#component-macro_projection_import_protocol"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "target_kind": "mechanism",
       "target_label": "validates public monitor verdict result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json"
      }
     ],
     "visible_text_byte_count": 5162
    },
    {
     "object_id": "mechanism:mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public materials lab safety replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The materials chemistry closed-loop lab-safety replay component validates public lab-safety claim boundaries by checking candidate material\u2026",
     "statement": "The materials chemistry closed-loop lab-safety replay component validates public lab-safety claim boundaries by checking candidate material refs, safety-screen refs, simulator-only assay rows, active-learning decisions, failure taxonomy refs, cold replay refs, Lab/Evolve replay graph evidence, source bundle hashes, source-module manifest digests, secret-exclusion scan, metadata-only result record policy, scope limits, and lab-safety overclaim negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The materials chemistry closed-loop lab-safety replay component validates public lab-safety claim boundaries by checking candidate material refs, safety-screen refs, simulator-only assay rows, active-learning decisions, failure taxonomy refs, cold replay refs, Lab/Evolve replay graph evidence, source bundle hashes, source-module manifest digests, secret-exclusion scan, metadata-only result record policy, scope limits, and lab-safety overclaim negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/materials_chemistry_closed_loop_lab_safety_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/materials chemistry closed loop lab safety replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "materials_chemistry_closed_loop_lab_safety_replay",
          "target_kind": "component",
          "target_label": "Materials Chemistry Closed Loop Lab Safety Replay",
          "url": "components.html#component-materials_chemistry_closed_loop_lab_safety_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.research_and_science_replay_evidence_bundle",
          "target_kind": "concept",
          "target_label": "research and science replay validators as reproducibility scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
          "target_kind": "mechanism",
          "target_label": "validates public spatial world model counterfactual simulation replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/materials_chemistry_closed_loop_lab_safety_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/materials chemistry closed loop lab safety replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "materials_chemistry_closed_loop_lab_safety_replay",
       "target_kind": "component",
       "target_label": "Materials Chemistry Closed Loop Lab Safety Replay",
       "url": "components.html#component-materials_chemistry_closed_loop_lab_safety_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
       "target_kind": "mechanism",
       "target_label": "validates public spatial world model counterfactual simulation replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json"
      }
     ],
     "visible_text_byte_count": 4315
    },
    {
     "object_id": "mechanism:mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public strategy hypothesis projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The mathematical strategy atlas hypothesis scorer validates pre-oracle strategy selection, feature-overlap routing, source-artifact consist\u2026",
     "statement": "The mathematical strategy atlas hypothesis scorer validates pre-oracle strategy selection, feature-overlap routing, source-artifact consistency, copied source-module digests, unknown-strategy refusals, and metadata-only strategy result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The mathematical strategy atlas hypothesis scorer validates pre-oracle strategy selection, feature-overlap routing, source-artifact consistency, copied source-module digests, unknown-strategy refusals, and metadata-only strategy result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/mathematical_strategy_atlas_hypothesis_scorer.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/mathematical strategy atlas hypothesis scorer py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "mathematical_strategy_atlas_hypothesis_scorer",
          "target_kind": "component",
          "target_label": "Mathematical Strategy Atlas Hypothesis Scorer",
          "url": "components.html#component-mathematical_strategy_atlas_hypothesis_scorer"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/mathematical_strategy_atlas_hypothesis_scorer.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/mathematical strategy atlas hypothesis scorer py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "mathematical_strategy_atlas_hypothesis_scorer",
       "target_kind": "component",
       "target_label": "Mathematical Strategy Atlas Hypothesis Scorer",
       "url": "components.html#component-mathematical_strategy_atlas_hypothesis_scorer"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json"
      }
     ],
     "visible_text_byte_count": 3301
    },
    {
     "object_id": "mechanism:mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public mcp tool authority replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The MCP tool authority replay component validates public tool manifest scope, call metadata, approval token refs, side-effect ledger refs\u2026",
     "statement": "The MCP tool authority replay component validates public tool manifest scope, call metadata, approval token refs, side-effect ledger refs, rollback and cold-replay result records, untrusted-output instruction/data separation, source-module digest anchors, negative cases, metadata-only result records, and scope limits without accessing live MCP accounts, exporting account secrets or model-output data, obeying tool output as instruction, claiming benchmark safety, mutating source, or granting launch control.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The MCP tool authority replay component validates public tool manifest scope, call metadata, approval token refs, side-effect ledger refs, rollback and cold-replay result records, untrusted-output instruction/data separation, source-module digest anchors, negative cases, metadata-only result records, and scope limits without accessing live MCP accounts, exporting account secrets or model-output data, obeying tool output as instruction, claiming benchmark safety, mutating source, or granting launch control.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/mcp_tool_authority_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/mcp tool authority replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "mcp_tool_authority_replay",
          "target_kind": "component",
          "target_label": "MCP Tool Authority Replay",
          "url": "components.html#component-mcp_tool_authority_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
          "target_kind": "mechanism",
          "target_label": "validates public sandbox policy trace",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
          "target_kind": "mechanism",
          "target_label": "validates public sleeper memory poisoning quarantine replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/mcp_tool_authority_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/mcp tool authority replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "mcp_tool_authority_replay",
       "target_kind": "component",
       "target_label": "MCP Tool Authority Replay",
       "url": "components.html#component-mcp_tool_authority_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
       "target_kind": "mechanism",
       "target_label": "validates public sandbox policy trace",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sleeper memory poisoning quarantine replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json"
      }
     ],
     "visible_text_byte_count": 4434
    },
    {
     "object_id": "mechanism:mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public mechanistic interpretability circuit attribution replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The mechanistic interpretability circuit-attribution replay component validates public toy-transformer attribution rows, machine-readable g\u2026",
     "statement": "The mechanistic interpretability circuit-attribution replay component validates public toy-transformer attribution rows, machine-readable graph edges, causal inhibition and injection deltas, sufficiency and faithfulness limits, source-module digest anchors, negative cases, metadata-only result records, and scope limits without exporting private model weights, raw activation dumps, proprietary prompts, hidden chain-of-thought, model-output data, private model internals, benchmark claims, hosted-public claims, public sharing, or launch-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The mechanistic interpretability circuit-attribution replay component validates public toy-transformer attribution rows, machine-readable graph edges, causal inhibition and injection deltas, sufficiency and faithfulness limits, source-module digest anchors, negative cases, metadata-only result records, and scope limits without exporting private model weights, raw activation dumps, proprietary prompts, hidden chain-of-thought, model-output data, private model internals, benchmark claims, hosted-public claims, public sharing, or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/mechanistic_interpretability_circuit_attribution_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/mechanistic interpretability circuit attribution replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "mechanistic_interpretability_circuit_attribution_replay",
          "target_kind": "component",
          "target_label": "Mechanistic Interpretability Circuit Attribution Replay",
          "url": "components.html#component-mechanistic_interpretability_circuit_attribution_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.research_and_science_replay_evidence_bundle",
          "target_kind": "concept",
          "target_label": "research and science replay validators as reproducibility scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/mechanistic_interpretability_circuit_attribution_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/mechanistic interpretability circuit attribution replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "mechanistic_interpretability_circuit_attribution_replay",
       "target_kind": "component",
       "target_label": "Mechanistic Interpretability Circuit Attribution Replay",
       "url": "components.html#component-mechanistic_interpretability_circuit_attribution_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json"
      }
     ],
     "visible_text_byte_count": 4108
    },
    {
     "object_id": "mechanism:mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public axiom support boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Microcosm axiom system support-cover evaluator projects public axiom support cases, support frontiers, anti-axiom rejection mappings, p\u2026",
     "statement": "The Microcosm axiom system support-cover evaluator projects public axiom support cases, support frontiers, anti-axiom rejection mappings, principle support inheritance, and strong-gate pressure from routing, standards, doctrine, and result record evidence without proving axioms, promoting candidate law, authorizing source-file changes, or raising launch/public sharing/runtime-correctness authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Microcosm axiom system support-cover evaluator projects public axiom support cases, support frontiers, anti-axiom rejection mappings, principle support inheritance, and strong-gate pressure from routing, standards, doctrine, and result record evidence without proving axioms, promoting candidate law, authorizing source-file changes, or raising launch/public sharing/runtime-correctness authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/validators/axiom_support_cover.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/validators/axiom support cover py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "microcosm_axiom_substrate",
          "target_kind": "component",
          "target_label": "microcosm axiom system",
          "url": ""
         },
         {
          "relation": "grounds",
          "target_id": "concept.executable_doctrine_grammar_standard_bundle",
          "target_kind": "concept",
          "target_label": "standard as schema contract with explicit scope limit",
          "url": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public validator checker bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/validators/axiom_support_cover.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/validators/axiom support cover py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "microcosm_axiom_substrate",
       "target_kind": "component",
       "target_label": "microcosm axiom system",
       "url": ""
      },
      {
       "relation": "grounds",
       "target_id": "concept.executable_doctrine_grammar_standard_bundle",
       "target_kind": "concept",
       "target_label": "standard as schema contract with explicit scope limit",
       "url": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public validator checker bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json"
      }
     ],
     "visible_text_byte_count": 3704
    },
    {
     "object_id": "mechanism:mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public mission transaction bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The mission transaction work-spine component validates public work-landing and completion metadata by checking fixed Work item, claim, depe\u2026",
     "statement": "The mission transaction work-spine component validates public work-landing and completion metadata by checking fixed Work item, claim, dependency, transaction, result record-drain, completion, scoped mutation, and checkpoint-lane fixtures, exact copied work log/work log/checkpoint/mission-control source modules, secret-exclusion boundaries, negative cases, and scope limits before writing bounded metadata-only result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The mission transaction work-spine component validates public work-landing and completion metadata by checking fixed Work item, claim, dependency, transaction, result record-drain, completion, scoped mutation, and checkpoint-lane fixtures, exact copied work log/work log/checkpoint/mission-control source modules, secret-exclusion boundaries, negative cases, and scope limits before writing bounded metadata-only result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/mission_transaction_work_spine.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/mission transaction work spine py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "mission_transaction_work_spine",
          "target_kind": "component",
          "target_label": "Mission Transaction Work Spine",
          "url": "components.html#component-mission_transaction_work_spine"
         },
         {
          "relation": "grounds",
          "target_id": "concept.work_landing_and_continuity_control_bundle",
          "target_kind": "concept",
          "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
          "target_kind": "mechanism",
          "target_label": "validates public benchmark integrity replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
          "target_kind": "mechanism",
          "target_label": "validates public agentic vulnerability patch proof replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public live source drift bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public proof authority runtime bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public tools tail primitives bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/mission_transaction_work_spine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/mission transaction work spine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "mission_transaction_work_spine",
       "target_kind": "component",
       "target_label": "Mission Transaction Work Spine",
       "url": "components.html#component-mission_transaction_work_spine"
      },
      {
       "relation": "grounds",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "target_kind": "mechanism",
       "target_label": "validates public benchmark integrity replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
       "target_kind": "mechanism",
       "target_label": "validates public agentic vulnerability patch proof replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public tools tail primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json"
      }
     ],
     "visible_text_byte_count": 5467
    },
    {
     "object_id": "mechanism:mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public route plane bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The navigation hologram route-plane component validates public route-plane fixture rows and exported bundle inputs by checking route projec\u2026",
     "statement": "The navigation hologram route-plane component validates public route-plane fixture rows and exported bundle inputs by checking route projection contracts, source-coupling fingerprints, copied source-module digests and anchors, route-lease policy, entry-packet floors, affordance-passport selection, code-architecture projection packets, and secret/non-public-state scan boundaries before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The navigation hologram route-plane component validates public route-plane fixture rows and exported bundle inputs by checking route projection contracts, source-coupling fingerprints, copied source-module digests and anchors, route-lease policy, entry-packet floors, affordance-passport selection, code-architecture projection packets, and secret/non-public-state scan boundaries before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/navigation_hologram_route_plane.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/navigation hologram route plane py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "navigation_hologram_route_plane",
          "target_kind": "component",
          "target_label": "Navigation Hologram Route Plane",
          "url": "components.html#component-navigation_hologram_route_plane"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
          "target_kind": "mechanism",
          "target_label": "validates public route feedback",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public saturation engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public compliance pipeline bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
          "target_kind": "mechanism",
          "target_label": "validates public first run route map",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
          "target_kind": "mechanism",
          "target_label": "validates public doctrine fact claim audit",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/navigation_hologram_route_plane.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/navigation hologram route plane py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "navigation_hologram_route_plane",
       "target_kind": "component",
       "target_label": "Navigation Hologram Route Plane",
       "url": "components.html#component-navigation_hologram_route_plane"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public compliance pipeline bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json"
      }
     ],
     "visible_text_byte_count": 5225
    },
    {
     "object_id": "mechanism:mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public pattern assimilation step",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The pattern-assimilation step component validates refinement, nothing-to-refine, stewardship, re-entry, source-module manifest, negative-ca\u2026",
     "statement": "The pattern-assimilation step component validates refinement, nothing-to-refine, stewardship, re-entry, source-module manifest, negative-case, metadata-only result record, and scope limit contracts without promoting local lessons into broader doctrine outside their owning lanes or claiming source source authority.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The pattern-assimilation step component validates refinement, nothing-to-refine, stewardship, re-entry, source-module manifest, negative-case, metadata-only result record, and scope limit contracts without promoting local lessons into broader doctrine outside their owning lanes or claiming source source authority.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/validators/acceptance.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/validators/sign-off py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "pattern_assimilation_step",
          "target_kind": "component",
          "target_label": "Pattern Assimilation Step",
          "url": "components.html#component-pattern_assimilation_step"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/validators/acceptance.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/validators/sign-off py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "pattern_assimilation_step",
       "target_kind": "component",
       "target_label": "Pattern Assimilation Step",
       "url": "components.html#component-pattern_assimilation_step"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json"
      }
     ],
     "visible_text_byte_count": 3259
    },
    {
     "object_id": "mechanism:mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "id": "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public pattern bindings",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The pattern-binding contract component validates public pattern rows, source bundles, reference bundles, authority handles, exported system\u2026",
     "statement": "The pattern-binding contract component validates public pattern rows, source bundles, reference bundles, authority handles, exported system bundles, and route-readiness selector bundles before writing bounded result records that keep mined rows component-first and fixture-bound.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The pattern-binding contract component validates public pattern rows, source bundles, reference bundles, authority handles, exported system bundles, and route-readiness selector bundles before writing bounded result records that keep mined rows component-first and fixture-bound.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/pattern_binding_contract.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/pattern binding contract py",
          "url": ""
         },
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/macro_tools/pattern_route_readiness.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/source tools/pattern route readiness py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "pattern_binding_contract",
          "target_kind": "component",
          "target_label": "Pattern Binding Contract",
          "url": "components.html#component-pattern_binding_contract"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
          "target_kind": "mechanism",
          "target_label": "validates public route feedback",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
          "target_kind": "mechanism",
          "target_label": "validates public source root bootstrap",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
          "target_kind": "mechanism",
          "target_label": "validates public first run route map",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
          "target_kind": "mechanism",
          "target_label": "validates public source projection imports",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/pattern_binding_contract.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/pattern binding contract py",
       "url": ""
      },
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/macro_tools/pattern_route_readiness.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/source tools/pattern route readiness py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "pattern_binding_contract",
       "target_kind": "component",
       "target_label": "Pattern Binding Contract",
       "url": "components.html#component-pattern_binding_contract"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
       "target_kind": "mechanism",
       "target_label": "validates public source root bootstrap",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json"
      }
     ],
     "visible_text_byte_count": 4700
    },
    {
     "object_id": "mechanism:mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public prediction oracle reconciliation",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The prediction oracle reconciliation component validates synthetic prediction packets through CP1 fork preservation, CP2 target-universe ch\u2026",
     "statement": "The prediction oracle reconciliation component validates synthetic prediction packets through CP1 fork preservation, CP2 target-universe checks, pre-target evidence limits, oracle-diff grading, numeric reconciliation rows, source-module import checks, negative cases, metadata-only result records, and scope limits without forecasting correctness, investment-related actions, live market data, external model access, public sharing, launch, or performance-track-record claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The prediction oracle reconciliation component validates synthetic prediction packets through CP1 fork preservation, CP2 target-universe checks, pre-target evidence limits, oracle-diff grading, numeric reconciliation rows, source-module import checks, negative cases, metadata-only result records, and scope limits without forecasting correctness, investment-related actions, live market data, external model access, public sharing, launch, or performance-track-record claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/prediction_oracle_reconciliation.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/prediction oracle reconciliation py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "prediction_oracle_reconciliation",
          "target_kind": "component",
          "target_label": "Prediction Oracle Reconciliation",
          "url": "components.html#component-prediction_oracle_reconciliation"
         },
         {
          "relation": "grounds",
          "target_id": "concept.research_and_science_replay_evidence_bundle",
          "target_kind": "concept",
          "target_label": "research and science replay validators as reproducibility scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public market dashboard read model bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public prediction market board bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public structural theses bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/prediction_oracle_reconciliation.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/prediction oracle reconciliation py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "prediction_oracle_reconciliation",
       "target_kind": "component",
       "target_label": "Prediction Oracle Reconciliation",
       "url": "components.html#component-prediction_oracle_reconciliation"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public structural theses bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json"
      }
     ],
     "visible_text_byte_count": 4823
    },
    {
     "object_id": "mechanism:mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates synthetic governed mutation authorization",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The proof-derived governed-mutation authorization component validates public synthetic mutation-authority proposals by checking proof-cell\u2026",
     "statement": "The proof-derived governed-mutation authorization component validates public synthetic mutation-authority proposals by checking proof-cell validator refs and evidence-chain hashes, visible pre-execution policy verdicts, ephemeral execution identity refs, logged side-effect diffs, rollback result records, cold replay result records, copied source source-module digests, non-public-state scans, and scope limits before writing bounded metadata-only result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The proof-derived governed-mutation authorization component validates public synthetic mutation-authority proposals by checking proof-cell validator refs and evidence-chain hashes, visible pre-execution policy verdicts, ephemeral execution identity refs, logged side-effect diffs, rollback result records, cold replay result records, copied source source-module digests, non-public-state scans, and scope limits before writing bounded metadata-only result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/proof_derived_governed_mutation_authorization.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/proof derived governed mutation authorization py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "proof_derived_governed_mutation_authorization",
          "target_kind": "component",
          "target_label": "Proof Derived Governed Mutation Authorization",
          "url": "components.html#component-proof_derived_governed_mutation_authorization"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
          "target_kind": "mechanism",
          "target_label": "validates public launch claim language gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public proof authority runtime bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public policy engines bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/proof_derived_governed_mutation_authorization.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/proof derived governed mutation authorization py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "proof_derived_governed_mutation_authorization",
       "target_kind": "component",
       "target_label": "Proof Derived Governed Mutation Authorization",
       "url": "components.html#component-proof_derived_governed_mutation_authorization"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public policy engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json"
      }
     ],
     "visible_text_byte_count": 4832
    },
    {
     "object_id": "mechanism:mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates ring2 diagnostic evidence membrane",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The proof diagnostic evidence spine component validates proof-adjacent public evidence by checking Ring2 diagnostic result record refs, cop\u2026",
     "statement": "The proof diagnostic evidence spine component validates proof-adjacent public evidence by checking Ring2 diagnostic result record refs, copied runtime artifact digests, verifier-trace and evidence-cell result record anchors, model-output data policy rows, stale source coupling, negative cases, and metadata-only result record boundaries before writing bounded diagnostic result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The proof diagnostic evidence spine component validates proof-adjacent public evidence by checking Ring2 diagnostic result record refs, copied runtime artifact digests, verifier-trace and evidence-cell result record anchors, model-output data policy rows, stale source coupling, negative cases, and metadata-only result record boundaries before writing bounded diagnostic result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/proof_diagnostic_evidence_spine.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/proof diagnostic evidence spine py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "proof_diagnostic_evidence_spine",
          "target_kind": "component",
          "target_label": "Proof Diagnostic Evidence Spine",
          "url": "components.html#component-proof_diagnostic_evidence_spine"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
          "target_kind": "mechanism",
          "target_label": "validates public premise retrieval attribution",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public tactic routing boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/proof_diagnostic_evidence_spine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/proof diagnostic evidence spine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "proof_diagnostic_evidence_spine",
       "target_kind": "component",
       "target_label": "Proof Diagnostic Evidence Spine",
       "url": "components.html#component-proof_diagnostic_evidence_spine"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
       "target_kind": "mechanism",
       "target_label": "validates public premise retrieval attribution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json"
      }
     ],
     "visible_text_byte_count": 4531
    },
    {
     "object_id": "mechanism:mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public context budget boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The provider context recipe budget policy validates byte-bounded context recipe projection, ordered section fill, omitted-section manifests\u2026",
     "statement": "The provider context recipe budget policy validates byte-bounded context recipe projection, ordered section fill, omitted-section manifests, deliverable routing, copied standard/source-module digests, negative-case refusals, and metadata-only budget result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The provider context recipe budget policy validates byte-bounded context recipe projection, ordered section fill, omitted-section manifests, deliverable routing, copied standard/source-module digests, negative-case refusals, and metadata-only budget result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/provider_context_recipe_budget_policy.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/provider context recipe budget policy py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "provider_context_recipe_budget_policy",
          "target_kind": "component",
          "target_label": "Provider Context Recipe Budget Policy",
          "url": "components.html#component-provider_context_recipe_budget_policy"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
          "target_kind": "mechanism",
          "target_label": "validates public bounded autonomy campaign packet",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
          "target_kind": "mechanism",
          "target_label": "validates public tool server pressure inventory",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/provider_context_recipe_budget_policy.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/provider context recipe budget policy py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "provider_context_recipe_budget_policy",
       "target_kind": "component",
       "target_label": "Provider Context Recipe Budget Policy",
       "url": "components.html#component-provider_context_recipe_budget_policy"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
       "target_kind": "mechanism",
       "target_label": "validates public bounded autonomy campaign packet",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
       "target_kind": "mechanism",
       "target_label": "validates public tool server pressure inventory",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json"
      }
     ],
     "visible_text_byte_count": 4004
    },
    {
     "object_id": "mechanism:mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public reveal walkthrough",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The public reveal walkthrough component validates public entry material by checking reveal-step density, runnable command refs, evidence re\u2026",
     "statement": "The public reveal walkthrough component validates public entry material by checking reveal-step density, runnable command refs, evidence refs, claim-floor phrases, source-module manifest digests and anchors, secret-exclusion boundaries, runtime exported-bundle shape, metadata-only result records, and launch/private-equivalence/marketing negative cases before writing bounded public result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The public reveal walkthrough component validates public entry material by checking reveal-step density, runnable command refs, evidence refs, claim-floor phrases, source-module manifest digests and anchors, secret-exclusion boundaries, runtime exported-bundle shape, metadata-only result records, and launch/private-equivalence/marketing negative cases before writing bounded public result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/public_reveal_walkthrough.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/public reveal walkthrough py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "public_reveal_walkthrough",
          "target_kind": "component",
          "target_label": "Public Reveal Walkthrough",
          "url": "components.html#component-public_reveal_walkthrough"
         },
         {
          "relation": "grounds",
          "target_id": "concept.entry_and_reveal_route_readiness_bundle",
          "target_kind": "concept",
          "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
          "target_kind": "mechanism",
          "target_label": "validates public launch claim language gate",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
          "target_kind": "mechanism",
          "target_label": "validates public audio level rms port",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public validator checker bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
          "target_kind": "mechanism",
          "target_label": "validates public mechanistic interpretability circuit attribution replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/public_reveal_walkthrough.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/public reveal walkthrough py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "public_reveal_walkthrough",
       "target_kind": "component",
       "target_label": "Public Reveal Walkthrough",
       "url": "components.html#component-public_reveal_walkthrough"
      },
      {
       "relation": "grounds",
       "target_id": "concept.entry_and_reveal_route_readiness_bundle",
       "target_kind": "concept",
       "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
       "target_kind": "mechanism",
       "target_label": "validates public audio level rms port",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public validator checker bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mechanistic interpretability circuit attribution replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json"
      }
     ],
     "visible_text_byte_count": 4940
    },
    {
     "object_id": "mechanism:mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "id": "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public research replication replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The research replication rubric-artifact replay component validates public research-replication claim boundaries by checking contribution d\u2026",
     "statement": "The research replication rubric-artifact replay component validates public research-replication claim boundaries by checking contribution decomposition refs, rubric trees, allowed public input refs, scratch scaffolds, experiment DAG refs, metric scripts, declared artifact-hash rosters, grader reports, budget refs, ablation diffs, failure taxonomies, cold-rerun result records, public agent-execution trace spans, source-module manifest digests, metadata-only result record policy, and replication-overclaim negative cases before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The research replication rubric-artifact replay component validates public research-replication claim boundaries by checking contribution decomposition refs, rubric trees, allowed public input refs, scratch scaffolds, experiment DAG refs, metric scripts, declared artifact-hash rosters, grader reports, budget refs, ablation diffs, failure taxonomies, cold-rerun result records, public agent-execution trace spans, source-module manifest digests, metadata-only result record policy, and replication-overclaim negative cases before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/research_replication_rubric_artifact_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/research replication rubric artifact replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "research_replication_rubric_artifact_replay",
          "target_kind": "component",
          "target_label": "Research Replication Rubric Artifact Replay",
          "url": "components.html#component-research_replication_rubric_artifact_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.research_and_science_replay_evidence_bundle",
          "target_kind": "concept",
          "target_label": "research and science replay validators as reproducibility scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public cold eval honesty bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
          "target_kind": "mechanism",
          "target_label": "validates public materials lab safety replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
          "target_kind": "mechanism",
          "target_label": "validates public mechanistic interpretability circuit attribution replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
          "target_kind": "mechanism",
          "target_label": "validates public prediction oracle reconciliation",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
          "target_kind": "mechanism",
          "target_label": "validates public spatial world model counterfactual simulation replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/research_replication_rubric_artifact_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/research replication rubric artifact replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "research_replication_rubric_artifact_replay",
       "target_kind": "component",
       "target_label": "Research Replication Rubric Artifact Replay",
       "url": "components.html#component-research_replication_rubric_artifact_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
       "target_kind": "mechanism",
       "target_label": "validates public materials lab safety replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mechanistic interpretability circuit attribution replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
       "target_kind": "mechanism",
       "target_label": "validates public prediction oracle reconciliation",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
       "target_kind": "mechanism",
       "target_label": "validates public spatial world model counterfactual simulation replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json"
      }
     ],
     "visible_text_byte_count": 6013
    },
    {
     "object_id": "mechanism:mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public premise retrieval attribution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The Ring2 premise retrieval precision/recall harness validates copied retrieval rankings, needed-premise attribution labels, aggregate hit\u2026",
     "statement": "The Ring2 premise retrieval precision/recall harness validates copied retrieval rankings, needed-premise attribution labels, aggregate hit and recall counts, source-artifact digests, leakage guards, metric-overclaim refusals, and metadata-only retrieval-attribution result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The Ring2 premise retrieval precision/recall harness validates copied retrieval rankings, needed-premise attribution labels, aggregate hit and recall counts, source-artifact digests, leakage guards, metric-overclaim refusals, and metadata-only retrieval-attribution result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/ring2_premise_retrieval_precision_recall_harness.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/ring2 premise retrieval precision recall harness py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "ring2_premise_retrieval_precision_recall_harness",
          "target_kind": "component",
          "target_label": "Ring2 Premise Retrieval Precision Recall Harness",
          "url": "components.html#component-ring2_premise_retrieval_precision_recall_harness"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
          "target_kind": "mechanism",
          "target_label": "validates public strategy hypothesis projection",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/ring2_premise_retrieval_precision_recall_harness.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/ring2 premise retrieval precision recall harness py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "ring2_premise_retrieval_precision_recall_harness",
       "target_kind": "component",
       "target_label": "Ring2 Premise Retrieval Precision Recall Harness",
       "url": "components.html#component-ring2_premise_retrieval_precision_recall_harness"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "target_kind": "mechanism",
       "target_label": "validates public strategy hypothesis projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json"
      }
     ],
     "visible_text_byte_count": 4109
    },
    {
     "object_id": "mechanism:mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "id": "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public routing anti patterns registry",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The routing anti-patterns registry component validates public routing anti-pattern rows, source-module digest anchors, private-leak rejecti\u2026",
     "statement": "The routing anti-patterns registry component validates public routing anti-pattern rows, source-module digest anchors, private-leak rejection, negative cases, metadata-only result records, and scope limits without claiming whole-system routing correctness, route-policy mutation authority, private source authority, or launch-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The routing anti-patterns registry component validates public routing anti-pattern rows, source-module digest anchors, private-leak rejection, negative cases, metadata-only result records, and scope limits without claiming whole-system routing correctness, route-policy mutation authority, private source authority, or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/routing_anti_patterns_registry.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/routing anti patterns registry py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "routing_anti_patterns_registry",
          "target_kind": "component",
          "target_label": "Routing Anti Patterns Registry",
          "url": "components.html#component-routing_anti_patterns_registry"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
          "target_kind": "mechanism",
          "target_label": "validates public route feedback",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public route plane bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/routing_anti_patterns_registry.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/routing anti patterns registry py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "routing_anti_patterns_registry",
       "target_kind": "component",
       "target_label": "Routing Anti Patterns Registry",
       "url": "components.html#component-routing_anti_patterns_registry"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public route plane bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json"
      }
     ],
     "visible_text_byte_count": 4057
    },
    {
     "object_id": "mechanism:mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public self ignorance coverage ledger",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The self-ignorance coverage ledger component validates known Kind Atlas coverage-debt fixtures through declared gap rows, missing-category\u2026",
     "statement": "The self-ignorance coverage ledger component validates known Kind Atlas coverage-debt fixtures through declared gap rows, missing-category checks, source-module digest anchors, negative cases, metadata-only result records, and scope limits while refusing unknown-unknown omniscience, absence proof, total-search proof, source-file changes, launch, public sharing, or whole-system correctness claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The self-ignorance coverage ledger component validates known Kind Atlas coverage-debt fixtures through declared gap rows, missing-category checks, source-module digest anchors, negative cases, metadata-only result records, and scope limits while refusing unknown-unknown omniscience, absence proof, total-search proof, source-file changes, launch, public sharing, or whole-system correctness claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/self_ignorance_coverage_ledger.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/self ignorance coverage ledger py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "self_ignorance_coverage_ledger",
          "target_kind": "component",
          "target_label": "Self Ignorance Coverage Ledger",
          "url": "components.html#component-self_ignorance_coverage_ledger"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/self_ignorance_coverage_ledger.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/self ignorance coverage ledger py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "self_ignorance_coverage_ledger",
       "target_kind": "component",
       "target_label": "Self Ignorance Coverage Ledger",
       "url": "components.html#component-self_ignorance_coverage_ledger"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json"
      }
     ],
     "visible_text_byte_count": 3514
    },
    {
     "object_id": "mechanism:mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public sleeper memory poisoning quarantine replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The sleeper memory poisoning quarantine replay component validates metadata-only public memory-security policy projections, poisoned-source\u2026",
     "statement": "The sleeper memory poisoning quarantine replay component validates metadata-only public memory-security policy projections, poisoned-source metadata, provenance-bound write proposals, quarantine verdicts, retrieval influence gates, rollback and cold rerun result records, source-module digest anchors, negative cases, and scope limits without exporting private memory bodies, raw transcripts, live user memory, trusted promotion from untrusted context, external model access, benchmark claims, source-file changes, or launch-scope decision.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The sleeper memory poisoning quarantine replay component validates metadata-only public memory-security policy projections, poisoned-source metadata, provenance-bound write proposals, quarantine verdicts, retrieval influence gates, rollback and cold rerun result records, source-module digest anchors, negative cases, and scope limits without exporting private memory bodies, raw transcripts, live user memory, trusted promotion from untrusted context, external model access, benchmark claims, source-file changes, or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/sleeper_memory_poisoning_quarantine_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/sleeper memory poisoning quarantine replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "sleeper_memory_poisoning_quarantine_replay",
          "target_kind": "component",
          "target_label": "Sleeper Memory Poisoning Quarantine Replay",
          "url": "components.html#component-sleeper_memory_poisoning_quarantine_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.agent_reliability_and_safety_validator_bundle",
          "target_kind": "concept",
          "target_label": "agent reliability and safety validators as bounded public scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/sleeper_memory_poisoning_quarantine_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/sleeper memory poisoning quarantine replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "component",
       "target_label": "Sleeper Memory Poisoning Quarantine Replay",
       "url": "components.html#component-sleeper_memory_poisoning_quarantine_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json"
      }
     ],
     "visible_text_byte_count": 3926
    },
    {
     "object_id": "mechanism:mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public spatial world model counterfactual simulation replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The spatial world-model counterfactual simulation replay component validates synthetic scene-state transitions, counterfactual replay rows\u2026",
     "statement": "The spatial world-model counterfactual simulation replay component validates synthetic scene-state transitions, counterfactual replay rows, source-module digest anchors, negative cases, metadata-only result records, and scope limits without claiming real-world geographic accuracy, robot operation, generated-video authority, benchmark performance, launch-scope decision, or private sensor access.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The spatial world-model counterfactual simulation replay component validates synthetic scene-state transitions, counterfactual replay rows, source-module digest anchors, negative cases, metadata-only result records, and scope limits without claiming real-world geographic accuracy, robot operation, generated-video authority, benchmark performance, launch-scope decision, or private sensor access.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/spatial_world_model_counterfactual_simulation_replay.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/spatial world model counterfactual simulation replay py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "spatial_world_model_counterfactual_simulation_replay",
          "target_kind": "component",
          "target_label": "Spatial World Model Counterfactual Simulation Replay",
          "url": "components.html#component-spatial_world_model_counterfactual_simulation_replay"
         },
         {
          "relation": "grounds",
          "target_id": "concept.research_and_science_replay_evidence_bundle",
          "target_kind": "concept",
          "target_label": "research and science replay validators as reproducibility scope limits",
          "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/spatial_world_model_counterfactual_simulation_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/spatial world model counterfactual simulation replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "spatial_world_model_counterfactual_simulation_replay",
       "target_kind": "component",
       "target_label": "Spatial World Model Counterfactual Simulation Replay",
       "url": "components.html#component-spatial_world_model_counterfactual_simulation_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json"
      }
     ],
     "visible_text_byte_count": 3755
    },
    {
     "object_id": "mechanism:mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public standards meta diagnostics",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The standards meta diagnostics component validates public projection-only diagnostics over accepted-component standards inventory, runtime\u2026",
     "statement": "The standards meta diagnostics component validates public projection-only diagnostics over accepted-component standards inventory, runtime contracts, result record refs, source-module digest anchors, negative cases, metadata-only result records, and scope limits without becoming source authority for standards_registry, authorizing source-file changes, external model access, launch, public sharing, or whole-system correctness claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The standards meta diagnostics component validates public projection-only diagnostics over accepted-component standards inventory, runtime contracts, result record refs, source-module digest anchors, negative cases, metadata-only result records, and scope limits without becoming source authority for standards_registry, authorizing source-file changes, external model access, launch, public sharing, or whole-system correctness claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/standards_meta_diagnostics.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/standards meta diagnostics py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "standards_meta_diagnostics",
          "target_kind": "component",
          "target_label": "Standards Meta Diagnostics",
          "url": "components.html#component-standards_meta_diagnostics"
         },
         {
          "relation": "grounds",
          "target_id": "concept.standards_meta_diagnostics_bundle",
          "target_kind": "concept",
          "target_label": "component-standard-runtime-result record coverage as projection-only evidence",
          "url": "rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public axiom support boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/standards_meta_diagnostics.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/standards meta diagnostics py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "standards_meta_diagnostics",
       "target_kind": "component",
       "target_label": "Standards Meta Diagnostics",
       "url": "components.html#component-standards_meta_diagnostics"
      },
      {
       "relation": "grounds",
       "target_id": "concept.standards_meta_diagnostics_bundle",
       "target_kind": "concept",
       "target_label": "component-standard-runtime-result record coverage as projection-only evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public axiom support boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json"
      }
     ],
     "visible_text_byte_count": 4168
    },
    {
     "object_id": "mechanism:mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public tactic availability projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The tactic portfolio availability probe validates recorded tactic compile-status rows, captured probe source digests, unavailable-tactic ro\u2026",
     "statement": "The tactic portfolio availability probe validates recorded tactic compile-status rows, captured probe source digests, unavailable-tactic routing pressure, negative-case refusals, and metadata-only tactic availability result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The tactic portfolio availability probe validates recorded tactic compile-status rows, captured probe source digests, unavailable-tactic routing pressure, negative-case refusals, and metadata-only tactic availability result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/tactic_portfolio_availability_probe.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/tactic portfolio availability probe py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "tactic_portfolio_availability_probe",
          "target_kind": "component",
          "target_label": "Tactic Portfolio Availability Probe",
          "url": "components.html#component-tactic_portfolio_availability_probe"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public corpus readiness boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public verifier trace repair bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public tactic routing boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public symbol boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/tactic_portfolio_availability_probe.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/tactic portfolio availability probe py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "tactic_portfolio_availability_probe",
       "target_kind": "component",
       "target_label": "Tactic Portfolio Availability Probe",
       "url": "components.html#component-tactic_portfolio_availability_probe"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public corpus readiness boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public verifier trace repair bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public symbol boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json"
      }
     ],
     "visible_text_byte_count": 4954
    },
    {
     "object_id": "mechanism:mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public tactic routing boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The target-shape tactic routing gate validates pre-execution tactic allow/reject decisions against target shape, recorded tactic availabili\u2026",
     "statement": "The target-shape tactic routing gate validates pre-execution tactic allow/reject decisions against target shape, recorded tactic availability, source artifacts, bundle manifests, negative-case refusals, and metadata-only routing result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The target-shape tactic routing gate validates pre-execution tactic allow/reject decisions against target shape, recorded tactic availability, source artifacts, bundle manifests, negative-case refusals, and metadata-only routing result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/target_shape_tactic_routing_gate.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/target shape tactic routing gate py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "target_shape_tactic_routing_gate",
          "target_kind": "component",
          "target_label": "Target Shape Tactic Routing Gate",
          "url": "components.html#component-target_shape_tactic_routing_gate"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
          "target_kind": "mechanism",
          "target_label": "validates public verifier trace repair bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
          "target_kind": "mechanism",
          "target_label": "validates public tactic availability projection",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
          "target_kind": "mechanism",
          "target_label": "composes public formal math result records",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/target_shape_tactic_routing_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/target shape tactic routing gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "target_shape_tactic_routing_gate",
       "target_kind": "component",
       "target_label": "Target Shape Tactic Routing Gate",
       "url": "components.html#component-target_shape_tactic_routing_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public verifier trace repair bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "target_kind": "mechanism",
       "target_label": "validates public tactic availability projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json"
      }
     ],
     "visible_text_byte_count": 4241
    },
    {
     "object_id": "mechanism:mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public tool server pressure inventory",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The tool-server pressure inventory component validates public helper-process pressure fixtures through synthetic process rows, active-owner\u2026",
     "statement": "The tool-server pressure inventory component validates public helper-process pressure fixtures through synthetic process rows, active-owner descendant classification, owner-launch pressure rows, redaction checks, source-module digest anchors, negative cases, metadata-only result records, and scope limits without live process reads, process signalling, host mutation, external model access, launch, public sharing, private-data equivalence, or whole-system correctness claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The tool-server pressure inventory component validates public helper-process pressure fixtures through synthetic process rows, active-owner descendant classification, owner-launch pressure rows, redaction checks, source-module digest anchors, negative cases, metadata-only result records, and scope limits without live process reads, process signalling, host mutation, external model access, launch, public sharing, private-data equivalence, or whole-system correctness claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/tool_server_pressure_inventory.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/tool server pressure inventory py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "tool_server_pressure_inventory",
          "target_kind": "component",
          "target_label": "Tool Server Pressure Inventory",
          "url": "components.html#component-tool_server_pressure_inventory"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/tool_server_pressure_inventory.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/tool server pressure inventory py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "tool_server_pressure_inventory",
       "target_kind": "component",
       "target_label": "Tool Server Pressure Inventory",
       "url": "components.html#component-tool_server_pressure_inventory"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json"
      }
     ],
     "visible_text_byte_count": 3659
    },
    {
     "object_id": "mechanism:mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public symbol boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The undeclared library prior symbol classifier validates symbol-boundary observations against allowed premise ids, classifier policy, sourc\u2026",
     "statement": "The undeclared library prior symbol classifier validates symbol-boundary observations against allowed premise ids, classifier policy, source-module manifests, private/proof-body exclusion, route decisions, and metadata-only symbol-boundary result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The undeclared library prior symbol classifier validates symbol-boundary observations against allowed premise ids, classifier policy, source-module manifests, private/proof-body exclusion, route decisions, and metadata-only symbol-boundary result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/undeclared library prior symbol classifier py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "undeclared_library_prior_symbol_classifier",
          "target_kind": "component",
          "target_label": "Undeclared Library Prior Symbol Classifier",
          "url": "components.html#component-undeclared_library_prior_symbol_classifier"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
          "target_kind": "mechanism",
          "target_label": "validates public context budget boundary",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/undeclared library prior symbol classifier py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "undeclared_library_prior_symbol_classifier",
       "target_kind": "component",
       "target_label": "Undeclared Library Prior Symbol Classifier",
       "url": "components.html#component-undeclared_library_prior_symbol_classifier"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public context budget boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json"
      }
     ],
     "visible_text_byte_count": 3599
    },
    {
     "object_id": "mechanism:mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public verifier transition witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The verifier lab execution spine validates bounded public Lean transition rows by running the local checker on a temporary fixture, preserv\u2026",
     "statement": "The verifier lab execution spine validates bounded public Lean transition rows by running the local checker on a temporary fixture, preserving accept/reject and residual-retry buckets, safety counters, source-module manifests, and redacted metadata-only result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The verifier lab execution spine validates bounded public Lean transition rows by running the local checker on a temporary fixture, preserving accept/reject and residual-retry buckets, safety counters, source-module manifests, and redacted metadata-only result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/verifier_lab_execution_spine.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/verifier lab execution spine py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "verifier_lab_execution_spine",
          "target_kind": "component",
          "target_label": "Verifier Lab Execution Spine",
          "url": "components.html#component-verifier_lab_execution_spine"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
          "target_kind": "mechanism",
          "target_label": "validates public certificate kernel execution",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
          "target_kind": "mechanism",
          "target_label": "validates public lean proof search lab",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/verifier_lab_execution_spine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/verifier lab execution spine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "verifier_lab_execution_spine",
       "target_kind": "component",
       "target_label": "Verifier Lab Execution Spine",
       "url": "components.html#component-verifier_lab_execution_spine"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
       "target_kind": "mechanism",
       "target_label": "validates public certificate kernel execution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
       "target_kind": "mechanism",
       "target_label": "validates public lean proof search lab",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json"
      }
     ],
     "visible_text_byte_count": 3914
    },
    {
     "object_id": "mechanism:mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "composes public formal math result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The verifier lab kernel composes public formal-math component result records into one leak-proof aggregate result record, preserving verifi\u2026",
     "statement": "The verifier lab kernel composes public formal-math component result records into one leak-proof aggregate result record, preserving verifier, oracle, provider, retrieval, CP2, Evolve, and contract-rejected buckets without exporting proof/provider/oracle bodies.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The verifier lab kernel composes public formal-math component result records into one leak-proof aggregate result record, preserving verifier, oracle, provider, retrieval, CP2, Evolve, and contract-rejected buckets without exporting proof/provider/oracle bodies.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/verifier_lab_kernel.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/verifier lab kernel py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "verifier_lab_kernel",
          "target_kind": "component",
          "target_label": "Verifier Lab Kernel",
          "url": "components.html#component-verifier_lab_kernel"
         },
         {
          "relation": "grounds",
          "target_id": "concept.formal_math_and_proof_witness_bundle",
          "target_kind": "concept",
          "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
          "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
          "target_kind": "mechanism",
          "target_label": "validates public verifier transition witness",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/verifier_lab_kernel.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/verifier lab kernel py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "verifier_lab_kernel",
       "target_kind": "component",
       "target_label": "Verifier Lab Kernel",
       "url": "components.html#component-verifier_lab_kernel"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "target_kind": "mechanism",
       "target_label": "validates public verifier transition witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json"
      }
     ],
     "visible_text_byte_count": 3445
    },
    {
     "object_id": "mechanism:mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public voice to doctrine self improvement loop",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The voice-to-doctrine self-improvement loop component validates lesson propagation through projection protocol, policy, owner-surface check\u2026",
     "statement": "The voice-to-doctrine self-improvement loop component validates lesson propagation through projection protocol, policy, owner-surface checks, lesson rows, source-module imports, negative cases, metadata-only result records, and scope limits without exporting source notes or private bodies, granting source/doctrine edits, live work log mutation, global-promotion authority, external model access, launch, public sharing, or whole-system correctness claims.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The voice-to-doctrine self-improvement loop component validates lesson propagation through projection protocol, policy, owner-surface checks, lesson rows, source-module imports, negative cases, metadata-only result records, and scope limits without exporting source notes or private bodies, granting source/doctrine edits, live work log mutation, global-promotion authority, external model access, launch, public sharing, or whole-system correctness claims.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/voice_to_doctrine_self_improvement_loop.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/voice to doctrine self improvement loop py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "voice_to_doctrine_self_improvement_loop",
          "target_kind": "component",
          "target_label": "Voice To Doctrine Self Improvement Loop",
          "url": "components.html#component-voice_to_doctrine_self_improvement_loop"
         },
         {
          "relation": "grounds",
          "target_id": "concept.voice_to_doctrine_self_improvement_loop_bundle",
          "target_kind": "concept",
          "target_label": "local pressure rows as typed candidates for owner-surface refinement",
          "url": "rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle"
         },
         {
          "relation": "grounds",
          "target_id": "concept.architecture_and_navigation_route_contract_bundle",
          "target_kind": "concept",
          "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
          "target_kind": "mechanism",
          "target_label": "validates public pattern assimilation step",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/voice_to_doctrine_self_improvement_loop.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/voice to doctrine self improvement loop py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "voice_to_doctrine_self_improvement_loop",
       "target_kind": "component",
       "target_label": "Voice To Doctrine Self Improvement Loop",
       "url": "components.html#component-voice_to_doctrine_self_improvement_loop"
      },
      {
       "relation": "grounds",
       "target_id": "concept.voice_to_doctrine_self_improvement_loop_bundle",
       "target_kind": "concept",
       "target_label": "local pressure rows as typed candidates for owner-surface refinement",
       "url": "rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
       "target_kind": "mechanism",
       "target_label": "validates public pattern assimilation step",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json"
      }
     ],
     "visible_text_byte_count": 4393
    },
    {
     "object_id": "mechanism:mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "id": "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public projection drift control boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "payload_role": "complete_doctrine_entity_body",
     "payload_owner": "visible_text_index.logical_records.doctrine_entities",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "summary_line": "The world-model projection drift control room component validates public metadata-only projection-drift rows and copied world-model/view-qu\u2026",
     "statement": "The world-model projection drift control room component validates public metadata-only projection-drift rows and copied world-model/view-quality source-module bodies by checking source refs, repair routes, validation refs, target refs, source-module digests, anchor evidence, metadata-only result record policy, negative cases, and scope limits before writing bounded result records.",
     "gloss": "",
     "canonical_body": {
      "schema": "microcosm_public_doctrine_entity_canonical_body_v1",
      "payload_role": "complete_doctrine_entity_body",
      "canonical_human_representation": "rules_and_ideas_card",
      "source_coupling": {
       "body_source": "rules_lattice_record",
       "record_source_ref": "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
       "enrichment_source_ref": "",
       "enrichment_id": ""
      },
      "required_section_ids": [
       "statement",
       "relationships",
       "provenance"
      ],
      "required_payloads": [],
      "section_order": [
       "statement",
       "relationships",
       "provenance"
      ],
      "sections": {
       "statement": {
        "label": "Statement",
        "text": "The world-model projection drift control room component validates public metadata-only projection-drift rows and copied world-model/view-quality source-module bodies by checking source refs, repair routes, validation refs, target refs, source-module digests, anchor evidence, metadata-only result record policy, negative cases, and scope limits before writing bounded result records.",
        "source_field": "rules_and_ideas.records[].statement"
       },
       "relationships": {
        "cross_refs": [],
        "links": [
         {
          "relation": "grounded in",
          "target_id": "src/microcosm_core/organs/world_model_projection_drift_control_room.py",
          "target_kind": "source path",
          "target_label": "src/microcosm core/components/world model projection drift control room py",
          "url": ""
         },
         {
          "relation": "runs in",
          "target_id": "world_model_projection_drift_control_room",
          "target_kind": "component",
          "target_label": "World Model Projection Drift Control Room",
          "url": "components.html#component-world_model_projection_drift_control_room"
         },
         {
          "relation": "grounds",
          "target_id": "concept.import_projection_and_drift_control_bundle",
          "target_kind": "concept",
          "target_label": "source import and projection drift controls as provenance-preserving boundaries",
          "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public market dashboard read model bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
          "target_kind": "mechanism",
          "target_label": "validates public structural theses bundle",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
          "target_kind": "mechanism",
          "target_label": "validates public materials lab safety replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
          "target_kind": "mechanism",
          "target_label": "validates public mechanistic interpretability circuit attribution replay",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
         },
         {
          "relation": "upstream of",
          "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
          "target_kind": "mechanism",
          "target_label": "validates public prediction oracle reconciliation",
          "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
         }
        ],
        "source_field": "rules_and_ideas.records[].cross_refs|links"
       },
       "provenance": {
        "source_ref": "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
        "source_links": [
         {
          "label": "Source JSON",
          "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json"
         }
        ],
        "source_field": "rules_and_ideas.records[].source_ref|source_links"
       },
       "scope_limit": {
        "text": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json. Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision.",
        "source_field": "rules_and_ideas.records[].anti_claims"
       }
      }
     },
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/world_model_projection_drift_control_room.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/world model projection drift control room py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "world_model_projection_drift_control_room",
       "target_kind": "component",
       "target_label": "World Model Projection Drift Control Room",
       "url": "components.html#component-world_model_projection_drift_control_room"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public structural theses bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
       "target_kind": "mechanism",
       "target_label": "validates public materials lab safety replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mechanistic interpretability circuit attribution replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
       "target_kind": "mechanism",
       "target_label": "validates public prediction oracle reconciliation",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json"
      }
     ],
     "visible_text_byte_count": 5598
    }
   ],
   "rules_and_ideas": [
    {
     "object_id": "principle:P-1",
     "id": "P-1",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Recompute, do not echo",
     "relative_href": "docs/doctrine.html#dcard-p-1",
     "read_href": "docs/doctrine.html#dcard-p-1",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-1",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-1.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/0",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Do not trust a fixture label, declared verdict, route status, count, or public copy line as proof.",
     "synopsis": "Do not trust a fixture label, declared verdict, route status, count, or public copy line as proof.",
     "statement": "Do not trust a fixture label, declared verdict, route status, count, or public copy line as proof.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-1"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "target_kind": "mechanism",
       "target_label": "validates public benchmark integrity replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "target_kind": "mechanism",
       "target_label": "validates completion evidence claims",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "target_kind": "mechanism",
       "target_label": "validates public memory conflict replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "target_kind": "mechanism",
       "target_label": "validates public monitor verdict result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sabotage scheming monitor replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
       "target_kind": "mechanism",
       "target_label": "validates public sandbox policy trace",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-1.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-1.json"
      }
     ],
     "visible_text_byte_count": 308
    },
    {
     "object_id": "principle:P-2",
     "id": "P-2",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Lower claim strength to checker strength",
     "relative_href": "docs/doctrine.html#dcard-p-2",
     "read_href": "docs/doctrine.html#dcard-p-2",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-2",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-2.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/1",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The scope limit is the strongest thing the named checker, validator, registry, or witness route actually computes.",
     "synopsis": "The scope limit is the strongest thing the named checker, validator, registry, or witness route actually computes.",
     "statement": "The scope limit is the strongest thing the named checker, validator, registry, or witness route actually computes.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-1",
        "AX-5"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "target_kind": "mechanism",
       "target_label": "validates public benchmark integrity replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "target_kind": "mechanism",
       "target_label": "validates completion evidence claims",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "target_kind": "mechanism",
       "target_label": "validates public memory conflict replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "target_kind": "mechanism",
       "target_label": "validates public monitor verdict result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sabotage scheming monitor replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-2.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-2.json"
      }
     ],
     "visible_text_byte_count": 342
    },
    {
     "object_id": "principle:P-3",
     "id": "P-3",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Concentrate trust in small checkers",
     "relative_href": "docs/doctrine.html#dcard-p-3",
     "read_href": "docs/doctrine.html#dcard-p-3",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-3",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-3.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/2",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Prefer a small verifier, parser, harness, compiler route, registry contract, or kernel over broad narrative confidence.",
     "synopsis": "Prefer a small verifier, parser, harness, compiler route, registry contract, or kernel over broad narrative confidence.",
     "statement": "Prefer a small verifier, parser, harness, compiler route, registry contract, or kernel over broad narrative confidence.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-2"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-2",
       "target_kind": "axiom",
       "target_label": "Kernelized verification",
       "url": "doctrine.html#dcard-ax-2"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
       "target_kind": "mechanism",
       "target_label": "validates public bounded autonomy campaign packet",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
       "target_kind": "mechanism",
       "target_label": "validates public certificate kernel execution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "target_kind": "mechanism",
       "target_label": "validates public operator contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
       "target_kind": "mechanism",
       "target_label": "validates public evidence cell anchors",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-3.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-3.json"
      }
     ],
     "visible_text_byte_count": 342
    },
    {
     "object_id": "principle:P-4",
     "id": "P-4",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Possession is not permission",
     "relative_href": "docs/doctrine.html#dcard-p-4",
     "read_href": "docs/doctrine.html#dcard-p-4",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-4",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-4.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/3",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Authority comes from dereferenced proof, policy, result record, rollback evidence, and current world state.",
     "synopsis": "Authority comes from dereferenced proof, policy, result record, rollback evidence, and current world state.",
     "statement": "Authority comes from dereferenced proof, policy, result record, rollback evidence, and current world state.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-3"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mcp tool authority replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
       "target_kind": "mechanism",
       "target_label": "validates synthetic governed mutation authorization",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
       "target_kind": "mechanism",
       "target_label": "validates public tool server pressure inventory",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory"
      },
      {
       "relation": "governs",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-2",
       "target_kind": "anti-principle",
       "target_label": "Producer trust",
       "url": "doctrine.html#dcard-ap-2"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-4.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-4.json"
      }
     ],
     "visible_text_byte_count": 323
    },
    {
     "object_id": "principle:P-5",
     "id": "P-5",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Cache by content, not by name",
     "relative_href": "docs/doctrine.html#dcard-p-5",
     "read_href": "docs/doctrine.html#dcard-p-5",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-5",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-5.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/4",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "A reusable result record, command result, source import, or work-landing attempt must carry its content basis.",
     "synopsis": "A reusable result record, command result, source import, or work-landing attempt must carry its content basis.",
     "statement": "A reusable result record, command result, source import, or work-landing attempt must carry its content basis.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-4"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-5.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-5.json"
      }
     ],
     "visible_text_byte_count": 327
    },
    {
     "object_id": "principle:P-6",
     "id": "P-6",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Status fails closed",
     "relative_href": "docs/doctrine.html#dcard-p-6",
     "read_href": "docs/doctrine.html#dcard-p-6",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-6",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-6.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/5",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Missing evidence, policy files, source digests, secret scans, negative cases, or result record self-scans block or demote.",
     "synopsis": "Missing evidence, policy files, source digests, secret scans, negative cases, or result record self-scans block or demote.",
     "statement": "Missing evidence, policy files, source digests, secret scans, negative cases, or result record self-scans block or demote.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-5"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public unsurfaced primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-6.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-6.json"
      }
     ],
     "visible_text_byte_count": 329
    },
    {
     "object_id": "principle:P-7",
     "id": "P-7",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Track known unknowns without claiming the unknown is mapped",
     "relative_href": "docs/doctrine.html#dcard-p-7",
     "read_href": "docs/doctrine.html#dcard-p-7",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-7",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-7.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/6",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Coverage reports name declared domains and materialized gaps.",
     "synopsis": "Coverage reports name declared domains and materialized gaps.",
     "statement": "Coverage reports name declared domains and materialized gaps.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-6"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-6",
       "target_kind": "axiom",
       "target_label": "Open-world epistemics",
       "url": "doctrine.html#dcard-ax-6"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "target_kind": "mechanism",
       "target_label": "validates public self ignorance coverage ledger",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
       "target_kind": "mechanism",
       "target_label": "validates public voice to doctrine self improvement loop",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
      },
      {
       "relation": "governs",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-5",
       "target_kind": "anti-principle",
       "target_label": "Unknown-unknown exhaustiveness",
       "url": "doctrine.html#dcard-ap-5"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-7.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-7.json"
      }
     ],
     "visible_text_byte_count": 308
    },
    {
     "object_id": "principle:P-8",
     "id": "P-8",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Refuse inadmissible computations with typed reasons",
     "relative_href": "docs/doctrine.html#dcard-p-8",
     "read_href": "docs/doctrine.html#dcard-p-8",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-8",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-8.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/7",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "When preconditions fail, return a reasoned refusal.",
     "synopsis": "When preconditions fail, return a reasoned refusal.",
     "statement": "When preconditions fail, return a reasoned refusal.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-7"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-7",
       "target_kind": "axiom",
       "target_label": "Typed partiality and refusal",
       "url": "doctrine.html#dcard-ax-7"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
       "target_kind": "mechanism",
       "target_label": "validates public bounded autonomy campaign packet",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "target_kind": "mechanism",
       "target_label": "validates public operator contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public mathlib absence boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-8.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-8.json"
      }
     ],
     "visible_text_byte_count": 290
    },
    {
     "object_id": "principle:P-9",
     "id": "P-9",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Preserve provenance across every boundary",
     "relative_href": "docs/doctrine.html#dcard-p-9",
     "read_href": "docs/doctrine.html#dcard-p-9",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-9",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-9.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/8",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Every shard crossing from source source, fixture, result record, public copy, provider shape, or private-system adjacency must carry a prov\u2026",
     "synopsis": "Every shard crossing from source source, fixture, result record, public copy, provider shape, or private-system adjacency must carry a prov\u2026",
     "statement": "Every shard crossing from source source, fixture, result record, public copy, provider shape, or private-system adjacency must carry a prov\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-8"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-9.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-9.json"
      }
     ],
     "visible_text_byte_count": 371
    },
    {
     "object_id": "principle:P-10",
     "id": "P-10",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Do not land effects without compensation",
     "relative_href": "docs/doctrine.html#dcard-p-10",
     "read_href": "docs/doctrine.html#dcard-p-10",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-10",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-10.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/9",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Writes, launch steps, claim launch, source imports, and rollback-shaped operations need ordered transaction evidence.",
     "synopsis": "Writes, launch steps, claim launch, source imports, and rollback-shaped operations need ordered transaction evidence.",
     "statement": "Writes, launch steps, claim launch, source imports, and rollback-shaped operations need ordered transaction evidence.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-9"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-8",
       "target_kind": "anti-principle",
       "target_label": "Blind irreversible mutation",
       "url": "doctrine.html#dcard-ap-8"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-10.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-10.json"
      }
     ],
     "visible_text_byte_count": 345
    },
    {
     "object_id": "principle:P-11",
     "id": "P-11",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Bind volatile facts to refresh routes",
     "relative_href": "docs/doctrine.html#dcard-p-11",
     "read_href": "docs/doctrine.html#dcard-p-11",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-11",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-11.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/10",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Counts, \"current\" states, live route totals, CI floors, body-import floors, and readiness signals must cite how they can be re-derived.",
     "synopsis": "Counts, \"current\" states, live route totals, CI floors, body-import floors, and readiness signals must cite how they can be re-derived.",
     "statement": "Counts, \"current\" states, live route totals, CI floors, body-import floors, and readiness signals must cite how they can be re-derived.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-10"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-10",
       "target_kind": "axiom",
       "target_label": "Temporal validity and freshness contracts",
       "url": "doctrine.html#dcard-ax-10"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "target_kind": "mechanism",
       "target_label": "validates public self ignorance coverage ledger",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      },
      {
       "relation": "governs",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-4",
       "target_kind": "anti-principle",
       "target_label": "Cache-across-drift",
       "url": "doctrine.html#dcard-ap-4"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-9",
       "target_kind": "anti-principle",
       "target_label": "Frozen live fact",
       "url": "doctrine.html#dcard-ap-9"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-11.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-11.json"
      }
     ],
     "visible_text_byte_count": 360
    },
    {
     "object_id": "principle:P-12",
     "id": "P-12",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Make doctrine executable before authoritative",
     "relative_href": "docs/doctrine.html#dcard-p-12",
     "read_href": "docs/doctrine.html#dcard-p-12",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-12",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-12.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/11",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "A doctrine surface earns authority through grammar, required fields, result record obligations, scope boundaries, and validator coverage.",
     "synopsis": "A doctrine surface earns authority through grammar, required fields, result record obligations, scope boundaries, and validator coverage.",
     "statement": "A doctrine surface earns authority through grammar, required fields, result record obligations, scope boundaries, and validator coverage.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "target_kind": "mechanism",
       "target_label": "validates public operator contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public route plane bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
       "target_kind": "mechanism",
       "target_label": "validates public pattern assimilation step",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-12.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-12.json"
      }
     ],
     "visible_text_byte_count": 370
    },
    {
     "object_id": "principle:P-13",
     "id": "P-13",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Apply the same floor to meta artifacts",
     "relative_href": "docs/doctrine.html#dcard-p-13",
     "read_href": "docs/doctrine.html#dcard-p-13",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-13",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-13.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/12",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Microcosm artifacts about Microcosm do not get exemptions.",
     "synopsis": "Microcosm artifacts about Microcosm do not get exemptions.",
     "statement": "Microcosm artifacts about Microcosm do not get exemptions.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-12"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
       "target_kind": "mechanism",
       "target_label": "validates public voice to doctrine self improvement loop",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
      },
      {
       "relation": "governs",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-1",
       "target_kind": "anti-principle",
       "target_label": "Fixture-label echo",
       "url": "doctrine.html#dcard-ap-1"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-3",
       "target_kind": "anti-principle",
       "target_label": "Rank-as-product-score",
       "url": "doctrine.html#dcard-ap-3"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-13.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-13.json"
      }
     ],
     "visible_text_byte_count": 284
    },
    {
     "object_id": "principle:P-14",
     "id": "P-14",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Carry basis and provenance together",
     "relative_href": "docs/doctrine.html#dcard-p-14",
     "read_href": "docs/doctrine.html#dcard-p-14",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-14",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-14.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/13",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Content basis says which bytes or rows were used; provenance says where they may flow and how strongly they may be claimed.",
     "synopsis": "Content basis says which bytes or rows were used; provenance says where they may flow and how strongly they may be claimed.",
     "statement": "Content basis says which bytes or rows were used; provenance says where they may flow and how strongly they may be claimed.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-4",
        "AX-8"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
       "target_kind": "mechanism",
       "target_label": "validates public indirect prompt injection information flow policy replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sleeper memory poisoning quarantine replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      },
      {
       "relation": "governs",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-14.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-14.json"
      }
     ],
     "visible_text_byte_count": 346
    },
    {
     "object_id": "principle:P-15",
     "id": "P-15",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Keep projections below source authority",
     "relative_href": "docs/doctrine.html#dcard-p-15",
     "read_href": "docs/doctrine.html#dcard-p-15",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-15",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-15.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/14",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Generated docs, markdown summaries, route cards, and paper modules may expose a source truth, but they cannot upgrade it.",
     "synopsis": "Generated docs, markdown summaries, route cards, and paper modules may expose a source truth, but they cannot upgrade it.",
     "statement": "Generated docs, markdown summaries, route cards, and paper modules may expose a source truth, but they cannot upgrade it.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-4",
        "AX-5",
        "AX-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-15.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-15.json"
      }
     ],
     "visible_text_byte_count": 348
    },
    {
     "object_id": "principle:P-16",
     "id": "P-16",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Bind authority to transaction scope",
     "relative_href": "docs/doctrine.html#dcard-p-16",
     "read_href": "docs/doctrine.html#dcard-p-16",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-16",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-16.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/15",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Mutation authority is not merely who can touch a file.",
     "synopsis": "Mutation authority is not merely who can touch a file.",
     "statement": "Mutation authority is not merely who can touch a file.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-3",
        "AX-9"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mcp tool authority replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
       "target_kind": "mechanism",
       "target_label": "validates synthetic governed mutation authorization",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization"
      },
      {
       "relation": "governs",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-16.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-16.json"
      }
     ],
     "visible_text_byte_count": 277
    },
    {
     "object_id": "principle:P-17",
     "id": "P-17",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Anchor graph mutations to unique source rows",
     "relative_href": "docs/doctrine.html#dcard-p-17",
     "read_href": "docs/doctrine.html#dcard-p-17",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-17",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-17.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/16",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Before adding or removing a lattice edge in a repeated registry, anchor the mutation to the unique source row, target id, and builder route\u2026",
     "synopsis": "Before adding or removing a lattice edge in a repeated registry, anchor the mutation to the unique source row, target id, and builder route\u2026",
     "statement": "Before adding or removing a lattice edge in a repeated registry, anchor the mutation to the unique source row, target id, and builder route\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-4",
        "AX-9",
        "AX-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-17.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-17.json"
      }
     ],
     "visible_text_byte_count": 374
    },
    {
     "object_id": "principle:P-18",
     "id": "P-18",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Require fan-in before activation",
     "relative_href": "docs/doctrine.html#dcard-p-18",
     "read_href": "docs/doctrine.html#dcard-p-18",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-18",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-18.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/17",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "A staged law, standard, component, or projection is not active authority until its owner boundary, source row, generated parity, validation\u2026",
     "synopsis": "A staged law, standard, component, or projection is not active authority until its owner boundary, source row, generated parity, validation\u2026",
     "statement": "A staged law, standard, component, or projection is not active authority until its owner boundary, source row, generated parity, validation\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-3",
        "AX-9",
        "AX-11",
        "AX-12"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-18.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-18.json"
      }
     ],
     "visible_text_byte_count": 362
    },
    {
     "object_id": "principle:P-19",
     "id": "P-19",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Classify residual pressure before wiring",
     "relative_href": "docs/doctrine.html#dcard-p-19",
     "read_href": "docs/doctrine.html#dcard-p-19",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-19",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-19.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/18",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "A residual is a typed pressure route, not an edge.",
     "synopsis": "A residual is a typed pressure route, not an edge.",
     "statement": "A residual is a typed pressure route, not an edge.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-5",
        "AX-6",
        "AX-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-6",
       "target_kind": "axiom",
       "target_label": "Open-world epistemics",
       "url": "doctrine.html#dcard-ax-6"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
       "target_kind": "mechanism",
       "target_label": "validates public pattern bindings",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "target_kind": "mechanism",
       "target_label": "validates public self ignorance coverage ledger",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-19.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-19.json"
      }
     ],
     "visible_text_byte_count": 278
    },
    {
     "object_id": "principle:P-20",
     "id": "P-20",
     "kind": "principle",
     "kind_label": "principle",
     "title": "Bind result records before record authority",
     "relative_href": "docs/doctrine.html#dcard-p-20",
     "read_href": "docs/doctrine.html#dcard-p-20",
     "context_href": "docs/rules-and-ideas.html#lattice-principle-p-20",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-20.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/19",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "A doctrine record is not fully active by projection alone.",
     "synopsis": "A doctrine record is not fully active by projection alone.",
     "statement": "A doctrine record is not fully active by projection alone.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
     ],
     "cross_refs": [
      {
       "relation": "Grounded in",
       "ids": [
        "AX-11",
        "AX-12"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounded by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "grounded by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "governs",
       "target_id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
       "target_kind": "mechanism",
       "target_label": "validates public standards meta diagnostics",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics"
      },
      {
       "relation": "governs",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "governs",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "failure guarded by",
       "target_id": "AP-1",
       "target_kind": "anti-principle",
       "target_label": "Fixture-label echo",
       "url": "doctrine.html#dcard-ap-1"
      }
     ],
     "source_ref": "microcosm-substrate/principles/P-20.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-20.json"
      }
     ],
     "visible_text_byte_count": 289
    },
    {
     "object_id": "axiom:AX-1",
     "id": "AX-1",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Derivation before assertion",
     "relative_href": "docs/doctrine.html#dcard-ax-1",
     "read_href": "docs/doctrine.html#dcard-ax-1",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-1",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-1.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/20",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "For any claim phi over basis B, admissibility requires a derivation certificate c and checker K such that K(B,c,phi)=accept; strength(phi)\u2026",
     "synopsis": "For any claim phi over basis B, admissibility requires a derivation certificate c and checker K such that K(B,c,phi)=accept; strength(phi)\u2026",
     "statement": "For any claim phi over basis B, admissibility requires a derivation certificate c and checker K such that K(B,c,phi)=accept; strength(phi)\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-1",
        "P-2"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-1",
        "AP-12",
        "AP-15"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "grounds",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-1",
       "target_kind": "anti-principle",
       "target_label": "Fixture-label echo",
       "url": "doctrine.html#dcard-ap-1"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-12",
       "target_kind": "anti-principle",
       "target_label": "Synthetic system substitution",
       "url": "doctrine.html#dcard-ap-12"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-15",
       "target_kind": "anti-principle",
       "target_label": "Mechanism theater",
       "url": "doctrine.html#dcard-ap-15"
      },
      {
       "relation": "witnessed by",
       "target_id": "agent_sabotage_scheming_monitor_replay",
       "target_kind": "component",
       "target_label": "Agent Sabotage Scheming Monitor Replay",
       "url": "components.html#component-agent_sabotage_scheming_monitor_replay"
      },
      {
       "relation": "witnessed by",
       "target_id": "belief_state_process_reward_replay",
       "target_kind": "component",
       "target_label": "Belief State Process Reward Replay",
       "url": "components.html#component-belief_state_process_reward_replay"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-1.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-1.json"
      }
     ],
     "visible_text_byte_count": 330
    },
    {
     "object_id": "axiom:AX-2",
     "id": "AX-2",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Kernelized verification",
     "relative_href": "docs/doctrine.html#dcard-ax-2",
     "read_href": "docs/doctrine.html#dcard-ax-2",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-2",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-2.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/21",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Trusted claims are decided by a small checker K over certificates c; producers emit c and K decides.",
     "synopsis": "Trusted claims are decided by a small checker K over certificates c; producers emit c and K decides.",
     "statement": "Trusted claims are decided by a small checker K over certificates c; producers emit c and K decides.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-3"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-2",
        "AP-15"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-2",
       "target_kind": "anti-principle",
       "target_label": "Producer trust",
       "url": "doctrine.html#dcard-ap-2"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-15",
       "target_kind": "anti-principle",
       "target_label": "Mechanism theater",
       "url": "doctrine.html#dcard-ap-15"
      },
      {
       "relation": "witnessed by",
       "target_id": "certificate_kernel_execution_lab",
       "target_kind": "component",
       "target_label": "Certificate Kernel Execution Lab",
       "url": "components.html#component-certificate_kernel_execution_lab"
      },
      {
       "relation": "witnessed by",
       "target_id": "formal_math_lean_proof_witness",
       "target_kind": "component",
       "target_label": "Formal Math Lean Proof Witness",
       "url": "components.html#component-formal_math_lean_proof_witness"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-2.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-2.json"
      }
     ],
     "visible_text_byte_count": 285
    },
    {
     "object_id": "axiom:AX-3",
     "id": "AX-3",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Authority by derivation, not possession",
     "relative_href": "docs/doctrine.html#dcard-ax-3",
     "read_href": "docs/doctrine.html#dcard-ax-3",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-3",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-3.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/22",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "auth(subject,effect)=F(deref(tokens_presented),policy,proof_refs,world_state); ambient identity is insufficient.",
     "synopsis": "auth(subject,effect)=F(deref(tokens_presented),policy,proof_refs,world_state); ambient identity is insufficient.",
     "statement": "auth(subject,effect)=F(deref(tokens_presented),policy,proof_refs,world_state); ambient identity is insufficient.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-4",
        "P-16",
        "P-18"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-2"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-4",
       "target_kind": "principle",
       "target_label": "Possession is not permission",
       "url": "doctrine.html#dcard-p-4"
      },
      {
       "relation": "grounds",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "grounds",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-2",
       "target_kind": "anti-principle",
       "target_label": "Producer trust",
       "url": "doctrine.html#dcard-ap-2"
      },
      {
       "relation": "witnessed by",
       "target_id": "proof_derived_governed_mutation_authorization",
       "target_kind": "component",
       "target_label": "Proof Derived Governed Mutation Authorization",
       "url": "components.html#component-proof_derived_governed_mutation_authorization"
      },
      {
       "relation": "witnessed by",
       "target_id": "mcp_tool_authority_replay",
       "target_kind": "component",
       "target_label": "MCP Tool Authority Replay",
       "url": "components.html#component-mcp_tool_authority_replay"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-3.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-3.json"
      }
     ],
     "visible_text_byte_count": 313
    },
    {
     "object_id": "axiom:AX-4",
     "id": "AX-4",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Content-addressed determinism",
     "relative_href": "docs/doctrine.html#dcard-ax-4",
     "read_href": "docs/doctrine.html#dcard-ax-4",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-4",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-4.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/23",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "a=f(B) and id(a)=H(B); equal B permits reuse; drift(B) forces recompute; missing(B)=bottom.",
     "synopsis": "a=f(B) and id(a)=H(B); equal B permits reuse; drift(B) forces recompute; missing(B)=bottom.",
     "statement": "a=f(B) and id(a)=H(B); equal B permits reuse; drift(B) forces recompute; missing(B)=bottom.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-5",
        "P-14",
        "P-15",
        "P-17"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-4",
        "AP-12",
        "AP-13",
        "AP-17"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "grounds",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "grounds",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "grounds",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-4",
       "target_kind": "anti-principle",
       "target_label": "Cache-across-drift",
       "url": "doctrine.html#dcard-ap-4"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-12",
       "target_kind": "anti-principle",
       "target_label": "Synthetic system substitution",
       "url": "doctrine.html#dcard-ap-12"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-13",
       "target_kind": "anti-principle",
       "target_label": "Generated-result record source inversion",
       "url": "doctrine.html#dcard-ap-13"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-17",
       "target_kind": "anti-principle",
       "target_label": "Projection-as-source",
       "url": "doctrine.html#dcard-ap-17"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-4.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-4.json"
      }
     ],
     "visible_text_byte_count": 282
    },
    {
     "object_id": "axiom:AX-5",
     "id": "AX-5",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Fail-closed monotone lattice",
     "relative_href": "docs/doctrine.html#dcard-ax-5",
     "read_href": "docs/doctrine.html#dcard-ax-5",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-5",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-5.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/24",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "status(composite)=meet(status(parts)); no evidence defaults to blocked; later stages may lower but not raise authority without new derivati\u2026",
     "synopsis": "status(composite)=meet(status(parts)); no evidence defaults to blocked; later stages may lower but not raise authority without new derivati\u2026",
     "statement": "status(composite)=meet(status(parts)); no evidence defaults to blocked; later stages may lower but not raise authority without new derivati\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-2",
        "P-6",
        "P-15",
        "P-19"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-3",
        "AP-14"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "grounds",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "grounds",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "grounds",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-3",
       "target_kind": "anti-principle",
       "target_label": "Rank-as-product-score",
       "url": "doctrine.html#dcard-ap-3"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-14",
       "target_kind": "anti-principle",
       "target_label": "Public-authority inflation",
       "url": "doctrine.html#dcard-ap-14"
      },
      {
       "relation": "witnessed by",
       "target_id": "pattern_binding_contract",
       "target_kind": "component",
       "target_label": "Pattern Binding Contract",
       "url": "components.html#component-pattern_binding_contract"
      },
      {
       "relation": "witnessed by",
       "target_id": "proof_diagnostic_evidence_spine",
       "target_kind": "component",
       "target_label": "Proof Diagnostic Evidence Spine",
       "url": "components.html#component-proof_diagnostic_evidence_spine"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-5.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-5.json"
      }
     ],
     "visible_text_byte_count": 332
    },
    {
     "object_id": "axiom:AX-6",
     "id": "AX-6",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Open-world epistemics",
     "relative_href": "docs/doctrine.html#dcard-ax-6",
     "read_href": "docs/doctrine.html#dcard-ax-6",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-6",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-6.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/25",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "not_proven(P) does not imply proven(not P); coverage is closed-world only inside declared finite domains.",
     "synopsis": "not_proven(P) does not imply proven(not P); coverage is closed-world only inside declared finite domains.",
     "statement": "not_proven(P) does not imply proven(not P); coverage is closed-world only inside declared finite domains.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-7",
        "P-19"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-5"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "grounds",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-5",
       "target_kind": "anti-principle",
       "target_label": "Unknown-unknown exhaustiveness",
       "url": "doctrine.html#dcard-ap-5"
      },
      {
       "relation": "witnessed by",
       "target_id": "self_ignorance_coverage_ledger",
       "target_kind": "component",
       "target_label": "Self Ignorance Coverage Ledger",
       "url": "components.html#component-self_ignorance_coverage_ledger"
      },
      {
       "relation": "witnessed by",
       "target_id": "doctrine_fact_claim_audit",
       "target_kind": "component",
       "target_label": "Doctrine Fact Claim Audit",
       "url": "components.html#component-doctrine_fact_claim_audit"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-6.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-6.json"
      }
     ],
     "visible_text_byte_count": 288
    },
    {
     "object_id": "axiom:AX-7",
     "id": "AX-7",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Typed partiality and refusal",
     "relative_href": "docs/doctrine.html#dcard-ax-7",
     "read_href": "docs/doctrine.html#dcard-ax-7",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-7",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-7.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/26",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Partial computation g is totalized as Result: Ok(y) under Pre(x), otherwise Refusal(reason,evidence).",
     "synopsis": "Partial computation g is totalized as Result: Ok(y) under Pre(x), otherwise Refusal(reason,evidence).",
     "statement": "Partial computation g is totalized as Result: Ok(y) under Pre(x), otherwise Refusal(reason,evidence).",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-8"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-6"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-6",
       "target_kind": "anti-principle",
       "target_label": "Inadmissible number emission",
       "url": "doctrine.html#dcard-ap-6"
      },
      {
       "relation": "witnessed by",
       "target_id": "finance_forecast_evaluation_spine",
       "target_kind": "component",
       "target_label": "Finance Forecast Evaluation Spine",
       "url": "components.html#component-finance_forecast_evaluation_spine"
      },
      {
       "relation": "witnessed by",
       "target_id": "corpus_readiness_mathlib_absence_gate",
       "target_kind": "component",
       "target_label": "Corpus Readiness Mathlib Absence Gate",
       "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-7.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-7.json"
      }
     ],
     "visible_text_byte_count": 291
    },
    {
     "object_id": "axiom:AX-8",
     "id": "AX-8",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Provenance propagation and non-interference",
     "relative_href": "docs/doctrine.html#dcard-ax-8",
     "read_href": "docs/doctrine.html#dcard-ax-8",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-8",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-8.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/27",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Data labels propagate along flows; untrusted labels reach privileged sinks only through declared transforms satisfying sink policy.",
     "synopsis": "Data labels propagate along flows; untrusted labels reach privileged sinks only through declared transforms satisfying sink policy.",
     "statement": "Data labels propagate along flows; untrusted labels reach privileged sinks only through declared transforms satisfying sink policy.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-9",
        "P-14"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-7",
        "AP-12",
        "AP-14",
        "AP-16"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "grounds",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-7",
       "target_kind": "anti-principle",
       "target_label": "Public/private membrane breach",
       "url": "doctrine.html#dcard-ap-7"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-12",
       "target_kind": "anti-principle",
       "target_label": "Synthetic system substitution",
       "url": "doctrine.html#dcard-ap-12"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-14",
       "target_kind": "anti-principle",
       "target_label": "Public-authority inflation",
       "url": "doctrine.html#dcard-ap-14"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-16",
       "target_kind": "anti-principle",
       "target_label": "Receiver inflation",
       "url": "doctrine.html#dcard-ap-16"
      },
      {
       "relation": "witnessed by",
       "target_id": "indirect_prompt_injection_information_flow_policy_replay",
       "target_kind": "component",
       "target_label": "Indirect Prompt Injection Information Flow Policy Replay",
       "url": "components.html#component-indirect_prompt_injection_information_flow_policy_replay"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-8.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-8.json"
      }
     ],
     "visible_text_byte_count": 336
    },
    {
     "object_id": "axiom:AX-9",
     "id": "AX-9",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Compensable transactional effects",
     "relative_href": "docs/doctrine.html#dcard-ax-9",
     "read_href": "docs/doctrine.html#dcard-ax-9",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-9",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-9.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/28",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Effect e requires a compensator or declared irreversible boundary; multi-step effects land as saga with CAS and single-writer constraints.",
     "synopsis": "Effect e requires a compensator or declared irreversible boundary; multi-step effects land as saga with CAS and single-writer constraints.",
     "statement": "Effect e requires a compensator or declared irreversible boundary; multi-step effects land as saga with CAS and single-writer constraints.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-10",
        "P-16",
        "P-17",
        "P-18"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-8"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-10",
       "target_kind": "principle",
       "target_label": "Do not land effects without compensation",
       "url": "doctrine.html#dcard-p-10"
      },
      {
       "relation": "grounds",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "grounds",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "grounds",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-8",
       "target_kind": "anti-principle",
       "target_label": "Blind irreversible mutation",
       "url": "doctrine.html#dcard-ap-8"
      },
      {
       "relation": "witnessed by",
       "target_id": "mission_transaction_work_spine",
       "target_kind": "component",
       "target_label": "Mission Transaction Work Spine",
       "url": "components.html#component-mission_transaction_work_spine"
      },
      {
       "relation": "witnessed by",
       "target_id": "durable_agent_work_landing_replay",
       "target_kind": "component",
       "target_label": "Durable Agent Work Landing Replay",
       "url": "components.html#component-durable_agent_work_landing_replay"
      },
      {
       "relation": "witnessed by",
       "target_id": "concurrency_mission_control",
       "target_kind": "component",
       "target_label": "Concurrency Mission Control",
       "url": "components.html#component-concurrency_mission_control"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-9.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-9.json"
      }
     ],
     "visible_text_byte_count": 333
    },
    {
     "object_id": "axiom:AX-10",
     "id": "AX-10",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Temporal validity and freshness contracts",
     "relative_href": "docs/doctrine.html#dcard-ax-10",
     "read_href": "docs/doctrine.html#dcard-ax-10",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-10",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-10.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/29",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Claims over live state are cached reads valid only under <value,as_of,basis,rederive> invalidation contracts.",
     "synopsis": "Claims over live state are cached reads valid only under <value,as_of,basis,rederive> invalidation contracts.",
     "statement": "Claims over live state are cached reads valid only under <value,as_of,basis,rederive> invalidation contracts.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-11"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-4",
        "AP-9"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-11",
       "target_kind": "principle",
       "target_label": "Bind volatile facts to refresh routes",
       "url": "doctrine.html#dcard-p-11"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-4",
       "target_kind": "anti-principle",
       "target_label": "Cache-across-drift",
       "url": "doctrine.html#dcard-ap-4"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-9",
       "target_kind": "anti-principle",
       "target_label": "Frozen live fact",
       "url": "doctrine.html#dcard-ap-9"
      },
      {
       "relation": "witnessed by",
       "target_id": "doctrine_fact_claim_audit",
       "target_kind": "component",
       "target_label": "Doctrine Fact Claim Audit",
       "url": "components.html#component-doctrine_fact_claim_audit"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-10.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-10.json"
      }
     ],
     "visible_text_byte_count": 312
    },
    {
     "object_id": "axiom:AX-11",
     "id": "AX-11",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Executable grammar before doctrine authority",
     "relative_href": "docs/doctrine.html#dcard-ax-11",
     "read_href": "docs/doctrine.html#dcard-ax-11",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-11",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-11.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/30",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "authority(d) implies d in L(G), result record obligations, and scope boundary are present; prose alone is projection.",
     "synopsis": "authority(d) implies d in L(G), result record obligations, and scope boundary are present; prose alone is projection.",
     "statement": "authority(d) implies d in L(G), result record obligations, and scope boundary are present; prose alone is projection.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-12",
        "P-15",
        "P-17",
        "P-18",
        "P-19",
        "P-20"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-10",
        "AP-13",
        "AP-17"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "grounds",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "grounds",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "grounds",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "grounds",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      },
      {
       "relation": "grounds",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-10",
       "target_kind": "anti-principle",
       "target_label": "Prose-as-executable-authority",
       "url": "doctrine.html#dcard-ap-10"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-13",
       "target_kind": "anti-principle",
       "target_label": "Generated-result record source inversion",
       "url": "doctrine.html#dcard-ap-13"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-11.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-11.json"
      }
     ],
     "visible_text_byte_count": 323
    },
    {
     "object_id": "axiom:AX-12",
     "id": "AX-12",
     "kind": "axiom",
     "kind_label": "axiom",
     "title": "Reflexive accountability / no privileged meta-layer",
     "relative_href": "docs/doctrine.html#dcard-ax-12",
     "read_href": "docs/doctrine.html#dcard-ax-12",
     "context_href": "docs/rules-and-ideas.html#lattice-axiom-ax-12",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-12.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/31",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "For every Microcosm artifact a, any claim phi carried by a must satisfy the same admissibility relation as external claims.",
     "synopsis": "For every Microcosm artifact a, any claim phi carried by a must satisfy the same admissibility relation as external claims.",
     "statement": "For every Microcosm artifact a, any claim phi carried by a must satisfy the same admissibility relation as external claims.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "Legacy witness_strength is not a computed support verdict."
     ],
     "cross_refs": [
      {
       "relation": "Grounds",
       "ids": [
        "P-13",
        "P-18",
        "P-20"
       ]
      },
      {
       "relation": "Guarded by",
       "ids": [
        "AP-1",
        "AP-3",
        "AP-11",
        "AP-14",
        "AP-15",
        "AP-16"
       ]
      }
     ],
     "links": [
      {
       "relation": "grounds",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "grounds",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "grounds",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-1",
       "target_kind": "anti-principle",
       "target_label": "Fixture-label echo",
       "url": "doctrine.html#dcard-ap-1"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-3",
       "target_kind": "anti-principle",
       "target_label": "Rank-as-product-score",
       "url": "doctrine.html#dcard-ap-3"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-11",
       "target_kind": "anti-principle",
       "target_label": "Meta-artifact exemption",
       "url": "doctrine.html#dcard-ap-11"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-14",
       "target_kind": "anti-principle",
       "target_label": "Public-authority inflation",
       "url": "doctrine.html#dcard-ap-14"
      },
      {
       "relation": "guarded by",
       "target_id": "AP-15",
       "target_kind": "anti-principle",
       "target_label": "Mechanism theater",
       "url": "doctrine.html#dcard-ap-15"
      }
     ],
     "source_ref": "microcosm-substrate/axioms/AX-12.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-12.json"
      }
     ],
     "visible_text_byte_count": 336
    },
    {
     "object_id": "anti_principle:AP-1",
     "id": "AP-1",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Fixture-label echo",
     "relative_href": "docs/doctrine.html#dcard-ap-1",
     "read_href": "docs/doctrine.html#dcard-ap-1",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-1",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-1.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/32",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Echoing a fixture verdict, registry label, markdown claim, or model answer instead of recomputing it from lower-level evidence.",
     "synopsis": "Echoing a fixture verdict, registry label, markdown claim, or model answer instead of recomputing it from lower-level evidence.",
     "statement": "Echoing a fixture verdict, registry label, markdown claim, or model answer instead of recomputing it from lower-level evidence.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-1",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-1",
        "P-2",
        "P-13",
        "P-18",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-1.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-1.json"
      }
     ],
     "visible_text_byte_count": 339
    },
    {
     "object_id": "anti_principle:AP-2",
     "id": "AP-2",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Producer trust",
     "relative_href": "docs/doctrine.html#dcard-ap-2",
     "read_href": "docs/doctrine.html#dcard-ap-2",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-2",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-2.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/33",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Trusting a producer, persona, route, account secret, or prior success instead of a checker, proof, policy, or dereferenced capability.",
     "synopsis": "Trusting a producer, persona, route, account secret, or prior success instead of a checker, proof, policy, or dereferenced capability.",
     "statement": "Trusting a producer, persona, route, account secret, or prior success instead of a checker, proof, policy, or dereferenced capability.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-2",
        "AX-3"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-3",
        "P-4",
        "P-16",
        "P-18"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-2",
       "target_kind": "axiom",
       "target_label": "Kernelized verification",
       "url": "doctrine.html#dcard-ax-2"
      },
      {
       "relation": "guards",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-4",
       "target_kind": "principle",
       "target_label": "Possession is not permission",
       "url": "doctrine.html#dcard-p-4"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-2.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-2.json"
      }
     ],
     "visible_text_byte_count": 342
    },
    {
     "object_id": "anti_principle:AP-3",
     "id": "AP-3",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Rank-as-product-score",
     "relative_href": "docs/doctrine.html#dcard-ap-3",
     "read_href": "docs/doctrine.html#dcard-ap-3",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-3",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-3.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/34",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Treating counts, handles, passing validators, or evidence classes as product maturity, launch-scope decision, or whole-system correctness.",
     "synopsis": "Treating counts, handles, passing validators, or evidence classes as product maturity, launch-scope decision, or whole-system correctness.",
     "statement": "Treating counts, handles, passing validators, or evidence classes as product maturity, launch-scope decision, or whole-system correctness.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-5",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-2",
        "P-6",
        "P-13",
        "P-15",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-3.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-3.json"
      }
     ],
     "visible_text_byte_count": 353
    },
    {
     "object_id": "anti_principle:AP-4",
     "id": "AP-4",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Cache-across-drift",
     "relative_href": "docs/doctrine.html#dcard-ap-4",
     "read_href": "docs/doctrine.html#dcard-ap-4",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-4",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-4.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/35",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Caching by name, path, route, display label, or producer while basis content has drifted.",
     "synopsis": "Caching by name, path, route, display label, or producer while basis content has drifted.",
     "statement": "Caching by name, path, route, display label, or producer while basis content has drifted.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-4",
        "AX-10"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-5",
        "P-11",
        "P-14",
        "P-15",
        "P-17"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "guards",
       "target_id": "AX-10",
       "target_kind": "axiom",
       "target_label": "Temporal validity and freshness contracts",
       "url": "doctrine.html#dcard-ax-10"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-11",
       "target_kind": "principle",
       "target_label": "Bind volatile facts to refresh routes",
       "url": "doctrine.html#dcard-p-11"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-4.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-4.json"
      }
     ],
     "visible_text_byte_count": 301
    },
    {
     "object_id": "anti_principle:AP-5",
     "id": "AP-5",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Unknown-unknown exhaustiveness",
     "relative_href": "docs/doctrine.html#dcard-ap-5",
     "read_href": "docs/doctrine.html#dcard-ap-5",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-5",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-5.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/36",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Treating missing evidence as evidence of absence outside a declared closed domain.",
     "synopsis": "Treating missing evidence as evidence of absence outside a declared closed domain.",
     "statement": "Treating missing evidence as evidence of absence outside a declared closed domain.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-6"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-7",
        "P-19"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-6",
       "target_kind": "axiom",
       "target_label": "Open-world epistemics",
       "url": "doctrine.html#dcard-ax-6"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-5.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-5.json"
      }
     ],
     "visible_text_byte_count": 306
    },
    {
     "object_id": "anti_principle:AP-6",
     "id": "AP-6",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Inadmissible number emission",
     "relative_href": "docs/doctrine.html#dcard-ap-6",
     "read_href": "docs/doctrine.html#dcard-ap-6",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-6",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-6.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/37",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Emitting inadmissible numbers or conclusions instead of typed refusal.",
     "synopsis": "Emitting inadmissible numbers or conclusions instead of typed refusal.",
     "statement": "Emitting inadmissible numbers or conclusions instead of typed refusal.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-7"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-8"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-7",
       "target_kind": "axiom",
       "target_label": "Typed partiality and refusal",
       "url": "doctrine.html#dcard-ax-7"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-6.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-6.json"
      }
     ],
     "visible_text_byte_count": 292
    },
    {
     "object_id": "anti_principle:AP-7",
     "id": "AP-7",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Public/private membrane breach",
     "relative_href": "docs/doctrine.html#dcard-ap-7",
     "read_href": "docs/doctrine.html#dcard-ap-7",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-7",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-7.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/38",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Letting untrusted, private, provider, prompt, account secret, or raw-voice material reach a privileged or public sink without provenance an\u2026",
     "synopsis": "Letting untrusted, private, provider, prompt, account secret, or raw-voice material reach a privileged or public sink without provenance an\u2026",
     "statement": "Letting untrusted, private, provider, prompt, account secret, or raw-voice material reach a privileged or public sink without provenance an\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-8"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-9",
        "P-14"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-7.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-7.json"
      }
     ],
     "visible_text_byte_count": 366
    },
    {
     "object_id": "anti_principle:AP-8",
     "id": "AP-8",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Blind irreversible mutation",
     "relative_href": "docs/doctrine.html#dcard-ap-8",
     "read_href": "docs/doctrine.html#dcard-ap-8",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-8",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-8.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/39",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Performing irreversible mutation without a compensator, rollback result record, CAS/world-version guard, or explicit irreversible boundary.",
     "synopsis": "Performing irreversible mutation without a compensator, rollback result record, CAS/world-version guard, or explicit irreversible boundary.",
     "statement": "Performing irreversible mutation without a compensator, rollback result record, CAS/world-version guard, or explicit irreversible boundary.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-9"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-10",
        "P-16",
        "P-17",
        "P-18"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-9",
       "target_kind": "axiom",
       "target_label": "Compensable transactional effects",
       "url": "doctrine.html#dcard-ax-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-10",
       "target_kind": "principle",
       "target_label": "Do not land effects without compensation",
       "url": "doctrine.html#dcard-p-10"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-8.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-8.json"
      }
     ],
     "visible_text_byte_count": 360
    },
    {
     "object_id": "anti_principle:AP-9",
     "id": "AP-9",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Frozen live fact",
     "relative_href": "docs/doctrine.html#dcard-ap-9",
     "read_href": "docs/doctrine.html#dcard-ap-9",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-9",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-9.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/40",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Freezing live facts in prose without `as_of`, basis, and rederive contract.",
     "synopsis": "Freezing live facts in prose without `as_of`, basis, and rederive contract.",
     "statement": "Freezing live facts in prose without `as_of`, basis, and rederive contract.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-10"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-11"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-10",
       "target_kind": "axiom",
       "target_label": "Temporal validity and freshness contracts",
       "url": "doctrine.html#dcard-ax-10"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-11",
       "target_kind": "principle",
       "target_label": "Bind volatile facts to refresh routes",
       "url": "doctrine.html#dcard-p-11"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-9.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-9.json"
      }
     ],
     "visible_text_byte_count": 285
    },
    {
     "object_id": "anti_principle:AP-10",
     "id": "AP-10",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Prose-as-executable-authority",
     "relative_href": "docs/doctrine.html#dcard-ap-10",
     "read_href": "docs/doctrine.html#dcard-ap-10",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-10",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-10.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/41",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Granting executable authority to prose doctrine without grammar and result record obligations.",
     "synopsis": "Granting executable authority to prose doctrine without grammar and result record obligations.",
     "statement": "Granting executable authority to prose doctrine without grammar and result record obligations.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-11"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-12",
        "P-15",
        "P-17",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-19",
       "target_kind": "principle",
       "target_label": "Classify residual pressure before wiring",
       "url": "doctrine.html#dcard-p-19"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-10.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-10.json"
      }
     ],
     "visible_text_byte_count": 317
    },
    {
     "object_id": "anti_principle:AP-11",
     "id": "AP-11",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Meta-artifact exemption",
     "relative_href": "docs/doctrine.html#dcard-ap-11",
     "read_href": "docs/doctrine.html#dcard-ap-11",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-11",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-11.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/42",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Exempting Microcosm's own result records, docs, releases, generated projections, or validators from Microcosm's evidence gates.",
     "synopsis": "Exempting Microcosm's own result records, docs, releases, generated projections, or validators from Microcosm's evidence gates.",
     "statement": "Exempting Microcosm's own result records, docs, releases, generated projections, or validators from Microcosm's evidence gates.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-13",
        "P-18",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-11.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-11.json"
      }
     ],
     "visible_text_byte_count": 344
    },
    {
     "object_id": "anti_principle:AP-12",
     "id": "AP-12",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Synthetic system substitution",
     "relative_href": "docs/doctrine.html#dcard-ap-12",
     "read_href": "docs/doctrine.html#dcard-ap-12",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-12",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-12.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/43",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Using synthetic fixtures as substitutes for available system.",
     "synopsis": "Using synthetic fixtures as substitutes for available system.",
     "statement": "Using synthetic fixtures as substitutes for available system.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-1",
        "AX-4",
        "AX-8"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-1",
        "P-2",
        "P-5",
        "P-9",
        "P-14",
        "P-15",
        "P-17"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "guards",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "guards",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-12.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-12.json"
      }
     ],
     "visible_text_byte_count": 284
    },
    {
     "object_id": "anti_principle:AP-13",
     "id": "AP-13",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Generated-result record source inversion",
     "relative_href": "docs/doctrine.html#dcard-ap-13",
     "read_href": "docs/doctrine.html#dcard-ap-13",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-13",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-13.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/44",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Treating generated result records as hand-authored source.",
     "synopsis": "Treating generated result records as hand-authored source.",
     "statement": "Treating generated result records as hand-authored source.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-4",
        "AX-11"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-5",
        "P-12",
        "P-14",
        "P-15",
        "P-17",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "guards",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-13.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-13.json"
      }
     ],
     "visible_text_byte_count": 292
    },
    {
     "object_id": "anti_principle:AP-14",
     "id": "AP-14",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Public-authority inflation",
     "relative_href": "docs/doctrine.html#dcard-ap-14",
     "read_href": "docs/doctrine.html#dcard-ap-14",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-14",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-14.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/45",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Letting public docs imply a hosted service, external service access, source-file mutation, financial or trading decisions, deployment postu\u2026",
     "synopsis": "Letting public docs imply a hosted service, external service access, source-file mutation, financial or trading decisions, deployment postu\u2026",
     "statement": "Letting public docs imply a hosted service, external service access, source-file mutation, financial or trading decisions, deployment postu\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-5",
        "AX-8",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-2",
        "P-6",
        "P-9",
        "P-13",
        "P-14",
        "P-15",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-5",
       "target_kind": "axiom",
       "target_label": "Fail-closed monotone lattice",
       "url": "doctrine.html#dcard-ax-5"
      },
      {
       "relation": "guards",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-14.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-14.json"
      }
     ],
     "visible_text_byte_count": 362
    },
    {
     "object_id": "anti_principle:AP-15",
     "id": "AP-15",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Mechanism theater",
     "relative_href": "docs/doctrine.html#dcard-ap-15",
     "read_href": "docs/doctrine.html#dcard-ap-15",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-15",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-15.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/46",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Using field vocabulary such as proof, verifier, information flow, world model, or benchmark integrity when the public mechanism only valida\u2026",
     "synopsis": "Using field vocabulary such as proof, verifier, information flow, world model, or benchmark integrity when the public mechanism only valida\u2026",
     "statement": "Using field vocabulary such as proof, verifier, information flow, world model, or benchmark integrity when the public mechanism only valida\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-1",
        "AX-2",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-1",
        "P-2",
        "P-3",
        "P-13",
        "P-18",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-1",
       "target_kind": "axiom",
       "target_label": "Derivation before assertion",
       "url": "doctrine.html#dcard-ax-1"
      },
      {
       "relation": "guards",
       "target_id": "AX-2",
       "target_kind": "axiom",
       "target_label": "Kernelized verification",
       "url": "doctrine.html#dcard-ax-2"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-15.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-15.json"
      }
     ],
     "visible_text_byte_count": 353
    },
    {
     "object_id": "anti_principle:AP-16",
     "id": "AP-16",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Receiver inflation",
     "relative_href": "docs/doctrine.html#dcard-ap-16",
     "read_href": "docs/doctrine.html#dcard-ap-16",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-16",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-16.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/47",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Displaying a declared, inferred, or generated downstream target as an observed runtime effect without evidence of the effect relation.",
     "synopsis": "Displaying a declared, inferred, or generated downstream target as an observed runtime effect without evidence of the effect relation.",
     "statement": "Displaying a declared, inferred, or generated downstream target as an observed runtime effect without evidence of the effect relation.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-8",
        "AX-12"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-9",
        "P-13",
        "P-14",
        "P-18",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-8",
       "target_kind": "axiom",
       "target_label": "Provenance propagation and non-interference",
       "url": "doctrine.html#dcard-ax-8"
      },
      {
       "relation": "guards",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-20",
       "target_kind": "principle",
       "target_label": "Bind result records before record authority",
       "url": "doctrine.html#dcard-p-20"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-16.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-16.json"
      }
     ],
     "visible_text_byte_count": 346
    },
    {
     "object_id": "anti_principle:AP-17",
     "id": "AP-17",
     "kind": "anti_principle",
     "kind_label": "anti-principle",
     "title": "Projection-as-source",
     "relative_href": "docs/doctrine.html#dcard-ap-17",
     "read_href": "docs/doctrine.html#dcard-ap-17",
     "context_href": "docs/rules-and-ideas.html#lattice-anti-principle-ap-17",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-17.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "doctrine_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/48",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Letting a markdown page, generated card, atlas row, or compact result record summary override the executable contract it summarizes.",
     "synopsis": "Letting a markdown page, generated card, atlas row, or compact result record summary override the executable contract it summarizes.",
     "statement": "Letting a markdown page, generated card, atlas row, or compact result record summary override the executable contract it summarizes.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
     ],
     "cross_refs": [
      {
       "relation": "Guards",
       "ids": [
        "AX-4",
        "AX-11"
       ]
      },
      {
       "relation": "Negates",
       "ids": [
        "P-5",
        "P-12",
        "P-14",
        "P-15",
        "P-17",
        "P-18",
        "P-19",
        "P-20"
       ]
      }
     ],
     "links": [
      {
       "relation": "guards",
       "target_id": "AX-4",
       "target_kind": "axiom",
       "target_label": "Content-addressed determinism",
       "url": "doctrine.html#dcard-ax-4"
      },
      {
       "relation": "guards",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-5",
       "target_kind": "principle",
       "target_label": "Cache by content, not by name",
       "url": "doctrine.html#dcard-p-5"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-14",
       "target_kind": "principle",
       "target_label": "Carry basis and provenance together",
       "url": "doctrine.html#dcard-p-14"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-17",
       "target_kind": "principle",
       "target_label": "Anchor graph mutations to unique source rows",
       "url": "doctrine.html#dcard-p-17"
      },
      {
       "relation": "negates failure of",
       "target_id": "P-18",
       "target_kind": "principle",
       "target_label": "Require fan-in before activation",
       "url": "doctrine.html#dcard-p-18"
      }
     ],
     "source_ref": "microcosm-substrate/anti_principles/AP-17.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-17.json"
      }
     ],
     "visible_text_byte_count": 346
    },
    {
     "object_id": "concept:concept.agent_reliability_and_safety_validator_bundle",
     "id": "concept.agent_reliability_and_safety_validator_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "agent reliability and safety validators as bounded public scope limits",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/49",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "safety and reliability claims remain bounded to named public fixtures, validators, and result record rows instead of global agent capabilit\u2026",
     "synopsis": "safety and reliability claims remain bounded to named public fixtures, validators, and result record rows instead of global agent capabilit\u2026",
     "statement": "safety and reliability claims remain bounded to named public fixtures, validators, and result record rows instead of global agent capabilit\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This family concept is a source-bound grouping of accepted Microcosm validators, not a claim that the agents are safe in the world.",
      "The concept does not upgrade negative-case coverage into propagation proof or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "target_kind": "mechanism",
       "target_label": "validates public benchmark integrity replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "target_kind": "mechanism",
       "target_label": "validates completion evidence claims",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "target_kind": "mechanism",
       "target_label": "validates public memory conflict replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "target_kind": "mechanism",
       "target_label": "validates public monitor verdict result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.agent_reliability_and_safety_validator_bundle.json"
      }
     ],
     "visible_text_byte_count": 446
    },
    {
     "object_id": "concept:concept.architecture_and_navigation_route_contract_bundle",
     "id": "concept.architecture_and_navigation_route_contract_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "architecture and navigation route contracts as executable doctrine boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/50",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "navigation and doctrine surfaces become walkable through source-bound contracts while generated views stay below source authority",
     "synopsis": "navigation and doctrine surfaces become walkable through source-bound contracts while generated views stay below source authority",
     "statement": "navigation and doctrine surfaces become walkable through source-bound contracts while generated views stay below source authority",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This family concept does not make browsable route projections source authority.",
      "The concept does not establish complete system navigation coverage or public launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "target_kind": "mechanism",
       "target_label": "validates public operator contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public route plane bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.architecture_and_navigation_route_contract_bundle.json"
      }
     ],
     "visible_text_byte_count": 387
    },
    {
     "object_id": "concept:concept.entry_and_reveal_route_readiness_bundle",
     "id": "concept.entry_and_reveal_route_readiness_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "entry and reveal routes as bounded cold-reader readiness evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/51",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "entry evidence shows what a reader can inspect, not that the whole system is ready or correct",
     "synopsis": "entry evidence shows what a reader can inspect, not that the whole system is ready or correct",
     "statement": "entry evidence shows what a reader can inspect, not that the whole system is ready or correct",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This family concept is not a public sharing, launch, or private-data equivalence claim.",
      "Cold-reader reachability is not whole-lattice completeness."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
       "target_kind": "mechanism",
       "target_label": "validates public reveal walkthrough",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
       "target_kind": "mechanism",
       "target_label": "validates public source root bootstrap",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
       "target_kind": "mechanism",
       "target_label": "validates public first screen composition root",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.entry_and_reveal_route_readiness_bundle.json"
      }
     ],
     "visible_text_byte_count": 307
    },
    {
     "object_id": "concept:concept.executable_doctrine_grammar_standard_bundle",
     "id": "concept.executable_doctrine_grammar_standard_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "standard as schema contract with explicit scope limit",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/52",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "invalid standards are blocked by negative cases such as missing teleology, missing result record expectations, or prose-only authority",
     "synopsis": "invalid standards are blocked by negative cases such as missing teleology, missing result record expectations, or prose-only authority",
     "statement": "invalid standards are blocked by negative cases such as missing teleology, missing result record expectations, or prose-only authority",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This specimen validates public standard shape only.",
      "This specimen does not establish source doctrine completeness."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine grammar bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "relation": "abides by",
       "target_id": "AX-7",
       "target_kind": "axiom",
       "target_label": "Typed partiality and refusal",
       "url": "doctrine.html#dcard-ax-7"
      },
      {
       "relation": "abides by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "abides by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.executable_doctrine_grammar_standard_bundle.json"
      }
     ],
     "visible_text_byte_count": 303
    },
    {
     "object_id": "concept:concept.first_screen_doctrine_effect_frame",
     "id": "concept.first_screen_doctrine_effect_frame",
     "kind": "concept",
     "kind_label": "concept",
     "title": "doctrine handles as typed mistake-prevention boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-first-screen-doctrine-effect-frame",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-first-screen-doctrine-effect-frame",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-first-screen-doctrine-effect-frame",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.first_screen_doctrine_effect_frame.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/53",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "runtime first-screen output emits CONCEPTS and MECHANISMS before standards-tree search is required",
     "synopsis": "runtime first-screen output emits CONCEPTS and MECHANISMS before standards-tree search is required",
     "statement": "runtime first-screen output emits CONCEPTS and MECHANISMS before standards-tree search is required",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This specimen proves entry routing and shape, not doctrine completeness.",
      "This specimen excludes launch or private-data equivalence."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-12",
       "target_kind": "principle",
       "target_label": "Make doctrine executable before authoritative",
       "url": "doctrine.html#dcard-p-12"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "abides by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "abides by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.first_screen_doctrine_effect_frame.json"
      }
     ],
     "visible_text_byte_count": 286
    },
    {
     "object_id": "concept:concept.formal_math_and_proof_witness_bundle",
     "id": "concept.formal_math_and_proof_witness_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "formal math and proof witnesses as bounded public proof-adjacent result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/54",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "proof-related artifacts expose bounded witness status without claiming theorem completeness or provider proof authority",
     "synopsis": "proof-related artifacts expose bounded witness status without claiming theorem completeness or provider proof authority",
     "statement": "proof-related artifacts expose bounded witness status without claiming theorem completeness or provider proof authority",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This family concept is not theorem-prover authority beyond the named public witness result records.",
      "Provider suggestions, oracle comparisons, and negative cases do not count as proof success."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-3",
       "target_kind": "principle",
       "target_label": "Concentrate trust in small checkers",
       "url": "doctrine.html#dcard-p-3"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
       "target_kind": "mechanism",
       "target_label": "validates public certificate kernel execution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public corpus readiness boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public mathlib absence boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.formal_math_and_proof_witness_bundle.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "concept:concept.import_projection_and_drift_control_bundle",
     "id": "concept.import_projection_and_drift_control_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "source import and projection drift controls as provenance-preserving boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.import_projection_and_drift_control_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/55",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "imported material remains tied to source anchors and drift result records instead of becoming ambient doctrine authority",
     "synopsis": "imported material remains tied to source anchors and drift result records instead of becoming ambient doctrine authority",
     "statement": "imported material remains tied to source anchors and drift result records instead of becoming ambient doctrine authority",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This family concept does not flip legacy or generated projections into source authority.",
      "Digest parity and drift checks are bounded import evidence, not whole-system correctness."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-1",
       "target_kind": "principle",
       "target_label": "Recompute, do not echo",
       "url": "doctrine.html#dcard-p-1"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-11",
       "target_kind": "principle",
       "target_label": "Bind volatile facts to refresh routes",
       "url": "doctrine.html#dcard-p-11"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.import_projection_and_drift_control_bundle.json"
      }
     ],
     "visible_text_byte_count": 379
    },
    {
     "object_id": "concept:concept.research_and_science_replay_evidence_bundle",
     "id": "concept.research_and_science_replay_evidence_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "research and science replay validators as reproducibility scope limits",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/56",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "research claims remain scoped to public replay evidence and known gaps instead of becoming external scientific truth claims",
     "synopsis": "research claims remain scoped to public replay evidence and known gaps instead of becoming external scientific truth claims",
     "statement": "research claims remain scoped to public replay evidence and known gaps instead of becoming external scientific truth claims",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This family concept is not external scientific validation, financial decisions, or benchmark superiority evidence.",
      "Replay result records expose bounded evidence and gaps, not full replication certainty."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-2",
       "target_kind": "principle",
       "target_label": "Lower claim strength to checker strength",
       "url": "doctrine.html#dcard-p-2"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
       "target_kind": "mechanism",
       "target_label": "validates public finance forecast evaluation spine",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
       "target_kind": "mechanism",
       "target_label": "validates public materials lab safety replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.research_and_science_replay_evidence_bundle.json"
      }
     ],
     "visible_text_byte_count": 397
    },
    {
     "object_id": "concept:concept.standards_meta_diagnostics_bundle",
     "id": "concept.standards_meta_diagnostics_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "component-standard-runtime-result record coverage as projection-only evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.standards_meta_diagnostics_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/57",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "accepted_organ_count and covered_organ_ids are validated without becoming launch-scope decision",
     "synopsis": "accepted_organ_count and covered_organ_ids are validated without becoming launch-scope decision",
     "statement": "accepted_organ_count and covered_organ_ids are validated without becoming launch-scope decision",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This specimen is coverage projection, not registry source authority.",
      "This specimen excludes launch, external model access, or whole-system correctness."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-7",
       "target_kind": "principle",
       "target_label": "Track known unknowns without claiming the unknown is mapped",
       "url": "doctrine.html#dcard-p-7"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-15",
       "target_kind": "principle",
       "target_label": "Keep projections below source authority",
       "url": "doctrine.html#dcard-p-15"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
       "target_kind": "mechanism",
       "target_label": "validates public standards meta diagnostics",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics"
      },
      {
       "relation": "abides by",
       "target_id": "AX-6",
       "target_kind": "axiom",
       "target_label": "Open-world epistemics",
       "url": "doctrine.html#dcard-ax-6"
      },
      {
       "relation": "abides by",
       "target_id": "AX-11",
       "target_kind": "axiom",
       "target_label": "Executable grammar before doctrine authority",
       "url": "doctrine.html#dcard-ax-11"
      },
      {
       "relation": "abides by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.standards_meta_diagnostics_bundle.json"
      }
     ],
     "visible_text_byte_count": 325
    },
    {
     "object_id": "concept:concept.voice_to_doctrine_self_improvement_loop_bundle",
     "id": "concept.voice_to_doctrine_self_improvement_loop_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "local pressure rows as typed candidates for owner-surface refinement",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/58",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "status_counts distinguish refined_existing_surface, workitem_captured, and nothing_to_refine",
     "synopsis": "status_counts distinguish refined_existing_surface, workitem_captured, and nothing_to_refine",
     "statement": "status_counts distinguish refined_existing_surface, workitem_captured, and nothing_to_refine",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This specimen demonstrates local refinement, not global doctrine changes.",
      "This specimen excludes hand-editing doctrine nodes or exporting raw voice."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-8",
       "target_kind": "principle",
       "target_label": "Refuse inadmissible computations with typed reasons",
       "url": "doctrine.html#dcard-p-8"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-13",
       "target_kind": "principle",
       "target_label": "Apply the same floor to meta artifacts",
       "url": "doctrine.html#dcard-p-13"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
       "target_kind": "mechanism",
       "target_label": "validates public voice to doctrine self improvement loop",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
      },
      {
       "relation": "abides by",
       "target_id": "AX-3",
       "target_kind": "axiom",
       "target_label": "Authority by derivation, not possession",
       "url": "doctrine.html#dcard-ax-3"
      },
      {
       "relation": "abides by",
       "target_id": "AX-7",
       "target_kind": "axiom",
       "target_label": "Typed partiality and refusal",
       "url": "doctrine.html#dcard-ax-7"
      },
      {
       "relation": "abides by",
       "target_id": "AX-12",
       "target_kind": "axiom",
       "target_label": "Reflexive accountability / no privileged meta-layer",
       "url": "doctrine.html#dcard-ax-12"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json"
      }
     ],
     "visible_text_byte_count": 310
    },
    {
     "object_id": "concept:concept.work_landing_and_continuity_control_bundle",
     "id": "concept.work_landing_and_continuity_control_bundle",
     "kind": "concept",
     "kind_label": "concept",
     "title": "work landing and continuity controls as transaction-scoped coordination evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/59",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "work progress claims stay tied to owned paths, result records, and transaction scope rather than chat status or generated projections",
     "synopsis": "work progress claims stay tied to owned paths, result records, and transaction scope rather than chat status or generated projections",
     "statement": "work progress claims stay tied to owned paths, result records, and transaction scope rather than chat status or generated projections",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This family concept does not establish publishing-scope decision, clean branch state, or external delivery.",
      "Coordination result records do not authorize unrelated path mutation or broad staging."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "implements or refines",
       "target_id": "P-6",
       "target_kind": "principle",
       "target_label": "Status fails closed",
       "url": "doctrine.html#dcard-p-6"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-9",
       "target_kind": "principle",
       "target_label": "Preserve provenance across every boundary",
       "url": "doctrine.html#dcard-p-9"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-10",
       "target_kind": "principle",
       "target_label": "Do not land effects without compensation",
       "url": "doctrine.html#dcard-p-10"
      },
      {
       "relation": "implements or refines",
       "target_id": "P-16",
       "target_kind": "principle",
       "target_label": "Bind authority to transaction scope",
       "url": "doctrine.html#dcard-p-16"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "relation": "instantiated by",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.work_landing_and_continuity_control_bundle.json"
      }
     ],
     "visible_text_byte_count": 409
    },
    {
     "object_id": "mechanism:mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public benchmark integrity replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/60",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agent benchmark integrity anti-gaming replay component validates public benchmark-claim boundaries by checking locked evaluator policy\u2026",
     "synopsis": "The agent benchmark integrity anti-gaming replay component validates public benchmark-claim boundaries by checking locked evaluator policy\u2026",
     "statement": "The agent benchmark integrity anti-gaming replay component validates public benchmark-claim boundaries by checking locked evaluator policy\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_benchmark_integrity_anti_gaming_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent benchmark integrity anti gaming replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_benchmark_integrity_anti_gaming_replay",
       "target_kind": "component",
       "target_label": "Agent Benchmark Integrity Anti Gaming Replay",
       "url": "components.html#component-agent_benchmark_integrity_anti_gaming_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
       "target_kind": "mechanism",
       "target_label": "validates public research replication replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json"
      }
     ],
     "visible_text_byte_count": 389
    },
    {
     "object_id": "mechanism:mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates completion evidence claims",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/61",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agent completion faithfulness audit component validates public completion evidence claims by checking fixture commit objects and HEAD w\u2026",
     "synopsis": "The agent completion faithfulness audit component validates public completion evidence claims by checking fixture commit objects and HEAD w\u2026",
     "statement": "The agent completion faithfulness audit component validates public completion evidence claims by checking fixture commit objects and HEAD w\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_closeout_faithfulness_audit.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent completion faithfulness audit py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_closeout_faithfulness_audit",
       "target_kind": "component",
       "target_label": "Agent Completion Faithfulness Audit",
       "url": "components.html#component-agent_closeout_faithfulness_audit"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json"
      }
     ],
     "visible_text_byte_count": 383
    },
    {
     "object_id": "mechanism:mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public memory conflict replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/62",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agent memory temporal-conflict replay component validates public memory projection mechanics by checking ADD/UPDATE/DELETE/NOOP decisio\u2026",
     "synopsis": "The agent memory temporal-conflict replay component validates public memory projection mechanics by checking ADD/UPDATE/DELETE/NOOP decisio\u2026",
     "statement": "The agent memory temporal-conflict replay component validates public memory projection mechanics by checking ADD/UPDATE/DELETE/NOOP decisio\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_memory_temporal_conflict_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent memory temporal conflict replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_memory_temporal_conflict_replay",
       "target_kind": "component",
       "target_label": "Agent Memory Temporal Conflict Replay",
       "url": "components.html#component-agent_memory_temporal_conflict_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sleeper memory poisoning quarantine replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json"
      }
     ],
     "visible_text_byte_count": 386
    },
    {
     "object_id": "mechanism:mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public monitor verdict result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/63",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agent monitor redteam falsification replay component validates public monitor-verdict evidence shape by checking trajectory rosters, su\u2026",
     "synopsis": "The agent monitor redteam falsification replay component validates public monitor-verdict evidence shape by checking trajectory rosters, su\u2026",
     "statement": "The agent monitor redteam falsification replay component validates public monitor-verdict evidence shape by checking trajectory rosters, su\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_monitor_redteam_falsification_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent monitor redteam falsification replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_monitor_redteam_falsification_replay",
       "target_kind": "component",
       "target_label": "Agent Monitor Redteam Falsification Replay",
       "url": "components.html#component-agent_monitor_redteam_falsification_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sabotage scheming monitor replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json"
      }
     ],
     "visible_text_byte_count": 394
    },
    {
     "object_id": "mechanism:mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public route feedback",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/64",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agent route observability runtime validates public route-feedback and observability fixture bundles by checking actor-axis authority bo\u2026",
     "synopsis": "The agent route observability runtime validates public route-feedback and observability fixture bundles by checking actor-axis authority bo\u2026",
     "statement": "The agent route observability runtime validates public route-feedback and observability fixture bundles by checking actor-axis authority bo\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_route_observability_runtime.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent route observability runtime py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_route_observability_runtime",
       "target_kind": "component",
       "target_label": "Agent Route Observability Runtime",
       "url": "components.html#component-agent_route_observability_runtime"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public unsurfaced primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public source engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public compliance pipeline bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json"
      }
     ],
     "visible_text_byte_count": 378
    },
    {
     "object_id": "mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public sabotage scheming monitor replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/65",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agent sabotage scheming-monitor replay validates a public synthetic sabotage-monitor bundle through task episodes, action traces, monit\u2026",
     "synopsis": "The agent sabotage scheming-monitor replay validates a public synthetic sabotage-monitor bundle through task episodes, action traces, monit\u2026",
     "statement": "The agent sabotage scheming-monitor replay validates a public synthetic sabotage-monitor bundle through task episodes, action traces, monit\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent sabotage scheming monitor replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_sabotage_scheming_monitor_replay",
       "target_kind": "component",
       "target_label": "Agent Sabotage Scheming Monitor Replay",
       "url": "components.html#component-agent_sabotage_scheming_monitor_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json"
      }
     ],
     "visible_text_byte_count": 396
    },
    {
     "object_id": "mechanism:mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public sandbox policy trace",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/66",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agent sandbox policy escape replay component validates public sandbox-policy projection mechanics by checking action requests, pre-exec\u2026",
     "synopsis": "The agent sandbox policy escape replay component validates public sandbox-policy projection mechanics by checking action requests, pre-exec\u2026",
     "statement": "The agent sandbox policy escape replay component validates public sandbox-policy projection mechanics by checking action requests, pre-exec\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agent_sandbox_policy_escape_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agent sandbox policy escape replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agent_sandbox_policy_escape_replay",
       "target_kind": "component",
       "target_label": "Agent Sandbox Policy Escape Replay",
       "url": "components.html#component-agent_sandbox_policy_escape_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sleeper memory poisoning quarantine replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json"
      }
     ],
     "visible_text_byte_count": 384
    },
    {
     "object_id": "mechanism:mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "id": "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public agentic vulnerability patch proof replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/67",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agentic vulnerability discovery patch-proof replay component validates public vulnerability-claim boundaries by checking projection pro\u2026",
     "synopsis": "The agentic vulnerability discovery patch-proof replay component validates public vulnerability-claim boundaries by checking projection pro\u2026",
     "statement": "The agentic vulnerability discovery patch-proof replay component validates public vulnerability-claim boundaries by checking projection pro\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/agentic vulnerability discovery patch proof replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "agentic_vulnerability_discovery_patch_proof_replay",
       "target_kind": "component",
       "target_label": "Agentic Vulnerability Discovery Patch Proof Replay",
       "url": "components.html#component-agentic_vulnerability_discovery_patch_proof_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json"
      }
     ],
     "visible_text_byte_count": 404
    },
    {
     "object_id": "mechanism:mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public proof authority runtime bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/68",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 4 proof, authority, and runtime bundle validates copied public proof-control, formal-math, Codex runtime, completion, bitemporal, t\u2026",
     "synopsis": "The Set 4 proof, authority, and runtime bundle validates copied public proof-control, formal-math, Codex runtime, completion, bitemporal, t\u2026",
     "statement": "The Set 4 proof, authority, and runtime bundle validates copied public proof-control, formal-math, Codex runtime, completion, bitemporal, t\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch4_proof_authority_runtime.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch4 proof authority runtime py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch4_proof_authority_runtime",
       "target_kind": "component",
       "target_label": "Proof / Control / Runtime Import Bundle",
       "url": "components.html#component-batch4_proof_authority_runtime"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json"
      }
     ],
     "visible_text_byte_count": 394
    },
    {
     "object_id": "mechanism:mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "id": "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public authority systems bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/69",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 5 authority systems bundle validates copied public source authority/control bodies through deterministic fixture and exported-bundl\u2026",
     "synopsis": "The Set 5 authority systems bundle validates copied public source authority/control bodies through deterministic fixture and exported-bundl\u2026",
     "statement": "The Set 5 authority systems bundle validates copied public source authority/control bodies through deterministic fixture and exported-bundl\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch5_authority_systems_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch5 authority systems bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch5_authority_systems_capsule",
       "target_kind": "component",
       "target_label": "Authority Systems Source Bundle",
       "url": "components.html#component-batch5_authority_systems_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json"
      }
     ],
     "visible_text_byte_count": 388
    },
    {
     "object_id": "mechanism:mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public unsurfaced primitives bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/70",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 6 unsurfaced primitives bundle validates copied public source-primitive bodies through deterministic fixture and exported-bundle ex\u2026",
     "synopsis": "The Set 6 unsurfaced primitives bundle validates copied public source-primitive bodies through deterministic fixture and exported-bundle ex\u2026",
     "statement": "The Set 6 unsurfaced primitives bundle validates copied public source-primitive bodies through deterministic fixture and exported-bundle ex\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch6_unsurfaced_primitives_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch6 unsurfaced primitives bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch6_unsurfaced_primitives_capsule",
       "target_kind": "component",
       "target_label": "Unsurfaced Source Primitives Bundle",
       "url": "components.html#component-batch6_unsurfaced_primitives_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json"
      }
     ],
     "visible_text_byte_count": 392
    },
    {
     "object_id": "mechanism:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "id": "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public demo take console bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/71",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 7 Demo Take Console bundle validates copied public Swift source bodies through deterministic SwiftPM build-witness, recording-state\u2026",
     "synopsis": "The Set 7 Demo Take Console bundle validates copied public Swift source bodies through deterministic SwiftPM build-witness, recording-state\u2026",
     "statement": "The Set 7 Demo Take Console bundle validates copied public Swift source bodies through deterministic SwiftPM build-witness, recording-state\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch7_demo_take_console_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch7 demo take console bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch7_demo_take_console_capsule",
       "target_kind": "component",
       "target_label": "Demo Take Console Source Bundle",
       "url": "components.html#component-batch7_demo_take_console_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public unsurfaced primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
       "target_kind": "mechanism",
       "target_label": "validates public audio level rms port",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json"
      }
     ],
     "visible_text_byte_count": 388
    },
    {
     "object_id": "mechanism:mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "id": "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public source engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/72",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 7 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
     "synopsis": "The Set 7 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
     "statement": "The Set 7 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch7_macro_engines_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch7 source engines bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch7_macro_engines_capsule",
       "target_kind": "component",
       "target_label": "Trace, Code-Map & Scheduling Engines Bundle",
       "url": "components.html#component-batch7_macro_engines_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public policy engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public tools tail primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public source engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 385
    },
    {
     "object_id": "mechanism:mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "id": "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public oracle sibling bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/73",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 7 Oracle sibling bundle validates copied public Oracle source bodies through deterministic subject-index, subject-snapshot, truth-d\u2026",
     "synopsis": "The Set 7 Oracle sibling bundle validates copied public Oracle source bodies through deterministic subject-index, subject-snapshot, truth-d\u2026",
     "statement": "The Set 7 Oracle sibling bundle validates copied public Oracle source bodies through deterministic subject-index, subject-snapshot, truth-d\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch7_oracle_sibling_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch7 oracle sibling bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch7_oracle_sibling_capsule",
       "target_kind": "component",
       "target_label": "Oracle Sibling Source Bundle",
       "url": "components.html#component-batch7_oracle_sibling_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public tools tail primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json"
      }
     ],
     "visible_text_byte_count": 385
    },
    {
     "object_id": "mechanism:mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "id": "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public secondary runtime bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/74",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 7 secondary runtime bundle validates copied public runtime, graph, cartography, stockgrid, and Polymarket source-body behavior thro\u2026",
     "synopsis": "The Set 7 secondary runtime bundle validates copied public runtime, graph, cartography, stockgrid, and Polymarket source-body behavior thro\u2026",
     "statement": "The Set 7 secondary runtime bundle validates copied public runtime, graph, cartography, stockgrid, and Polymarket source-body behavior thro\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch7_secondary_runtime_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch7 secondary runtime bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch7_secondary_runtime_capsule",
       "target_kind": "component",
       "target_label": "Secondary Runtime Source Bundle",
       "url": "components.html#component-batch7_secondary_runtime_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json"
      }
     ],
     "visible_text_byte_count": 388
    },
    {
     "object_id": "mechanism:mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public audio level rms port",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/75",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 8 audio level RMS port validates a source-faithful public projection of AudioLevelMonitor normalized-level RMS behavior by running\u2026",
     "synopsis": "The Set 8 audio level RMS port validates a source-faithful public projection of AudioLevelMonitor normalized-level RMS behavior by running\u2026",
     "statement": "The Set 8 audio level RMS port validates a source-faithful public projection of AudioLevelMonitor normalized-level RMS behavior by running\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_audio_level_rms_port.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 audio level rms port py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_audio_level_rms_port",
       "target_kind": "component",
       "target_label": "Audio Level RMS Port",
       "url": "components.html#component-batch8_audio_level_rms_port"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json"
      }
     ],
     "visible_text_byte_count": 383
    },
    {
     "object_id": "mechanism:mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public compliance pipeline bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/76",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 8 compliance pipeline bundle validates a bounded public compliance/pipeline import by exercising the compliance adapter registry, b\u2026",
     "synopsis": "The Set 8 compliance pipeline bundle validates a bounded public compliance/pipeline import by exercising the compliance adapter registry, b\u2026",
     "statement": "The Set 8 compliance pipeline bundle validates a bounded public compliance/pipeline import by exercising the compliance adapter registry, b\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_compliance_pipeline_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 compliance pipeline bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_compliance_pipeline_capsule",
       "target_kind": "component",
       "target_label": "Compliance Pipeline Bundle",
       "url": "components.html#component-batch8_compliance_pipeline_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json"
      }
     ],
     "visible_text_byte_count": 390
    },
    {
     "object_id": "mechanism:mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public policy engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/77",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 8 policy engines bundle validates copied public policy-engine bodies by exercising lab contract audit, market fusion readiness, cam\u2026",
     "synopsis": "The Set 8 policy engines bundle validates copied public policy-engine bodies by exercising lab contract audit, market fusion readiness, cam\u2026",
     "statement": "The Set 8 policy engines bundle validates copied public policy-engine bodies by exercising lab contract audit, market fusion readiness, cam\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_policy_engines_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 policy engines bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_policy_engines_capsule",
       "target_kind": "component",
       "target_label": "Policy Engines Bundle",
       "url": "components.html#component-batch8_policy_engines_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 385
    },
    {
     "object_id": "mechanism:mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public structural theses bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/78",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 8 structural theses bundle validates a copied public structural-theses finance body by running synthetic winner, loser, and control\u2026",
     "synopsis": "The Set 8 structural theses bundle validates a copied public structural-theses finance body by running synthetic winner, loser, and control\u2026",
     "statement": "The Set 8 structural theses bundle validates a copied public structural-theses finance body by running synthetic winner, loser, and control\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_structural_theses_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 structural theses bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_structural_theses_capsule",
       "target_kind": "component",
       "target_label": "Structural Theses Finance Bundle",
       "url": "components.html#component-batch8_structural_theses_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json"
      }
     ],
     "visible_text_byte_count": 388
    },
    {
     "object_id": "mechanism:mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public tools tail primitives bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/79",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 8 tools-tail primitives bundle validates four copied public tools-tail source modules by exercising observer set diffs, JSON patch\u2026",
     "synopsis": "The Set 8 tools-tail primitives bundle validates four copied public tools-tail source modules by exercising observer set diffs, JSON patch\u2026",
     "statement": "The Set 8 tools-tail primitives bundle validates four copied public tools-tail source modules by exercising observer set diffs, JSON patch\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_tools_tail_primitives_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 tools tail primitives bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_tools_tail_primitives_capsule",
       "target_kind": "component",
       "target_label": "Tools-Tail Primitives Bundle",
       "url": "components.html#component-batch8_tools_tail_primitives_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public validator checker bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/80",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 8 validator checker bundle validates an exact copied public validators.py body by exercising policy/status judging, private-boundar\u2026",
     "synopsis": "The Set 8 validator checker bundle validates an exact copied public validators.py body by exercising policy/status judging, private-boundar\u2026",
     "statement": "The Set 8 validator checker bundle validates an exact copied public validators.py body by exercising policy/status judging, private-boundar\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch8_validator_checker_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch8 validator checker bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch8_validator_checker_capsule",
       "target_kind": "component",
       "target_label": "Validator Checker Bundle",
       "url": "components.html#component-batch8_validator_checker_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json"
      }
     ],
     "visible_text_byte_count": 388
    },
    {
     "object_id": "mechanism:mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "id": "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public source engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/81",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 9 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
     "synopsis": "The Set 9 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
     "statement": "The Set 9 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch9_macro_engines_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch9 source engines bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch9_macro_engines_capsule",
       "target_kind": "component",
       "target_label": "Backend & Governance Engines Bundle",
       "url": "components.html#component-batch9_macro_engines_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 385
    },
    {
     "object_id": "mechanism:mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public cold eval honesty bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/82",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 10 cold-eval honesty bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
     "synopsis": "The Set 10 cold-eval honesty bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
     "statement": "The Set 10 cold-eval honesty bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch10_cold_eval_honesty_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch10 cold eval honesty bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch10_cold_eval_honesty_capsule",
       "target_kind": "component",
       "target_label": "Cold Evaluation Honesty Bundle",
       "url": "components.html#component-batch10_cold_eval_honesty_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json"
      }
     ],
     "visible_text_byte_count": 388
    },
    {
     "object_id": "mechanism:mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public governance compilers bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/83",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 10 governance compilers bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exerc\u2026",
     "synopsis": "The Set 10 governance compilers bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exerc\u2026",
     "statement": "The Set 10 governance compilers bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exerc\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch10_governance_compilers_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch10 governance compilers bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch10_governance_compilers_capsule",
       "target_kind": "component",
       "target_label": "Governance & Compiler Mechanisms Bundle",
       "url": "components.html#component-batch10_governance_compilers_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public live source drift bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/84",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 10 live-source drift bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
     "synopsis": "The Set 10 live-source drift bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
     "statement": "The Set 10 live-source drift bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch10_live_source_drift_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch10 live source drift bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch10_live_source_drift_capsule",
       "target_kind": "component",
       "target_label": "Live Source Drift Bundle",
       "url": "components.html#component-batch10_live_source_drift_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json"
      }
     ],
     "visible_text_byte_count": 388
    },
    {
     "object_id": "mechanism:mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public saturation engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/85",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 11 saturation engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercis\u2026",
     "synopsis": "The Set 11 saturation engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercis\u2026",
     "statement": "The Set 11 saturation engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercis\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch11_saturation_engines_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch11 saturation engines bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch11_saturation_engines_capsule",
       "target_kind": "component",
       "target_label": "Saturation Engines Bundle",
       "url": "components.html#component-batch11_saturation_engines_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public compliance pipeline bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 389
    },
    {
     "object_id": "mechanism:mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public market dashboard read model bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/86",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 12 market dashboard read-model bundle validates copied public read-model helpers over synthetic fixtures through market-dashboard i\u2026",
     "synopsis": "The Set 12 market dashboard read-model bundle validates copied public read-model helpers over synthetic fixtures through market-dashboard i\u2026",
     "statement": "The Set 12 market dashboard read-model bundle validates copied public read-model helpers over synthetic fixtures through market-dashboard i\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch12_market_dashboard_read_model_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch12 market dashboard read model bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch12_market_dashboard_read_model_capsule",
       "target_kind": "component",
       "target_label": "Market Dashboard Read-Model Bundle",
       "url": "components.html#component-batch12_market_dashboard_read_model_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public unsurfaced primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json"
      }
     ],
     "visible_text_byte_count": 398
    },
    {
     "object_id": "mechanism:mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public prediction market board bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/87",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 12 prediction market board bundle validates copied public prediction-board and quant-mart diagnostics over synthetic fixtures throu\u2026",
     "synopsis": "The Set 12 prediction market board bundle validates copied public prediction-board and quant-mart diagnostics over synthetic fixtures throu\u2026",
     "statement": "The Set 12 prediction market board bundle validates copied public prediction-board and quant-mart diagnostics over synthetic fixtures throu\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch12_prediction_market_board_capsule.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch12 prediction market board bundle py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch12_prediction_market_board_capsule",
       "target_kind": "component",
       "target_label": "Prediction Market Board Bundle",
       "url": "components.html#component-batch12_prediction_market_board_capsule"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public structural theses bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json"
      }
     ],
     "visible_text_byte_count": 394
    },
    {
     "object_id": "mechanism:mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public launch claim language gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/88",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Set 12 launch-claim language gate component validates launch-claim fixture generation, claim-language blocking, assert-clear exits, sou\u2026",
     "synopsis": "The Set 12 launch-claim language gate component validates launch-claim fixture generation, claim-language blocking, assert-clear exits, sou\u2026",
     "statement": "The Set 12 launch-claim language gate component validates launch-claim fixture generation, claim-language blocking, assert-clear exits, sou\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/batch12_release_claim_language_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/batch12 launch claim language gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "batch12_release_claim_language_gate",
       "target_kind": "component",
       "target_label": "Release Public Wording Gate",
       "url": "components.html#component-batch12_release_claim_language_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json"
      }
     ],
     "visible_text_byte_count": 390
    },
    {
     "object_id": "mechanism:mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "id": "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public belief state process reward replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/89",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The belief-state process reward replay component validates public belief summaries, verifier-feedback observations, process and outcome rew\u2026",
     "synopsis": "The belief-state process reward replay component validates public belief summaries, verifier-feedback observations, process and outcome rew\u2026",
     "statement": "The belief-state process reward replay component validates public belief summaries, verifier-feedback observations, process and outcome rew\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/belief_state_process_reward_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/belief state process reward replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "belief_state_process_reward_replay",
       "target_kind": "component",
       "target_label": "Belief State Process Reward Replay",
       "url": "components.html#component-belief_state_process_reward_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json"
      }
     ],
     "visible_text_byte_count": 398
    },
    {
     "object_id": "mechanism:mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public bounded autonomy campaign packet",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/90",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The bounded-autonomy campaign packet component validates campaign policy, failed-campaign digest handling, source-write refusal, source-mod\u2026",
     "synopsis": "The bounded-autonomy campaign packet component validates campaign policy, failed-campaign digest handling, source-write refusal, source-mod\u2026",
     "statement": "The bounded-autonomy campaign packet component validates campaign policy, failed-campaign digest handling, source-write refusal, source-mod\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/bounded_autonomy_campaign_packet.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/bounded autonomy campaign packet py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "bounded_autonomy_campaign_packet",
       "target_kind": "component",
       "target_label": "Bounded Autonomy Campaign Packet",
       "url": "components.html#component-bounded_autonomy_campaign_packet"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json"
      }
     ],
     "visible_text_byte_count": 396
    },
    {
     "object_id": "mechanism:mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates synthetic bridge continuity",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/91",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The bridge phase continuity runtime validates public synthetic observe/apply bridge continuity by checking disk-first continuation packets\u2026",
     "synopsis": "The bridge phase continuity runtime validates public synthetic observe/apply bridge continuity by checking disk-first continuation packets\u2026",
     "statement": "The bridge phase continuity runtime validates public synthetic observe/apply bridge continuity by checking disk-first continuation packets\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/bridge_phase_continuity_runtime.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/bridge phase continuity runtime py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "bridge_phase_continuity_runtime",
       "target_kind": "component",
       "target_label": "Bridge Phase Continuity Runtime",
       "url": "components.html#component-bridge_phase_continuity_runtime"
      },
      {
       "relation": "grounds",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "target_kind": "mechanism",
       "target_label": "validates public memory conflict replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "target_kind": "mechanism",
       "target_label": "validates public concurrency mission control",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "target_kind": "mechanism",
       "target_label": "validates public work landing replay contract",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json"
      }
     ],
     "visible_text_byte_count": 383
    },
    {
     "object_id": "mechanism:mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public certificate kernel execution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/92",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The certificate kernel execution lab component validates public proof-adjacent execution boundaries by checking a Lean/Lake certificate-ker\u2026",
     "synopsis": "The certificate kernel execution lab component validates public proof-adjacent execution boundaries by checking a Lean/Lake certificate-ker\u2026",
     "statement": "The certificate kernel execution lab component validates public proof-adjacent execution boundaries by checking a Lean/Lake certificate-ker\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/certificate_kernel_execution_lab.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/certificate kernel execution lab py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "certificate_kernel_execution_lab",
       "target_kind": "component",
       "target_label": "Certificate Kernel Execution Lab",
       "url": "components.html#component-certificate_kernel_execution_lab"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json"
      }
     ],
     "visible_text_byte_count": 392
    },
    {
     "object_id": "mechanism:mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public operator contract",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/93",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The cognitive operator registry component validates public reusable-cognition system by checking operator-shape fields, active-operator dog\u2026",
     "synopsis": "The cognitive operator registry component validates public reusable-cognition system by checking operator-shape fields, active-operator dog\u2026",
     "statement": "The cognitive operator registry component validates public reusable-cognition system by checking operator-shape fields, active-operator dog\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/cognitive_operator_registry.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/cognitive operator registry py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "cognitive_operator_registry",
       "target_kind": "component",
       "target_label": "Cognitive Operator Registry",
       "url": "components.html#component-cognitive_operator_registry"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json"
      }
     ],
     "visible_text_byte_count": 381
    },
    {
     "object_id": "mechanism:mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public source root bootstrap",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/94",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The cold-clone probe validates source-root public bootstrap mechanics by importing the package from src, running the secret-exclusion scan\u2026",
     "synopsis": "The cold-clone probe validates source-root public bootstrap mechanics by importing the package from src, running the secret-exclusion scan\u2026",
     "statement": "The cold-clone probe validates source-root public bootstrap mechanics by importing the package from src, running the secret-exclusion scan\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/cold_clone_probe.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/cold clone probe py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "pattern_binding_contract",
       "target_kind": "component",
       "target_label": "Pattern Binding Contract",
       "url": "components.html#component-pattern_binding_contract"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.entry_and_reveal_route_readiness_bundle",
       "target_kind": "concept",
       "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json"
      }
     ],
     "visible_text_byte_count": 384
    },
    {
     "object_id": "mechanism:mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public first run route map",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/95",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The cold-reader route-map component validates public first-run route projections by checking route-row command refs, public docs refs, rout\u2026",
     "synopsis": "The cold-reader route-map component validates public first-run route projections by checking route-row command refs, public docs refs, rout\u2026",
     "statement": "The cold-reader route-map component validates public first-run route projections by checking route-row command refs, public docs refs, rout\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/cold_reader_route_map.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/cold reader route map py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "cold_reader_route_map",
       "target_kind": "component",
       "target_label": "Cold Reader Route Map",
       "url": "components.html#component-cold_reader_route_map"
      },
      {
       "relation": "grounds",
       "target_id": "concept.entry_and_reveal_route_readiness_bundle",
       "target_kind": "concept",
       "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
       "target_kind": "mechanism",
       "target_label": "validates public first screen composition root",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public route plane bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
       "target_kind": "mechanism",
       "target_label": "validates public pattern assimilation step",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json"
      }
     ],
     "visible_text_byte_count": 383
    },
    {
     "object_id": "mechanism:mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public concurrency mission control",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/96",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The concurrency mission-control component validates copied public mission-control builder and bridge artifacts through fixture failure clas\u2026",
     "synopsis": "The concurrency mission-control component validates copied public mission-control builder and bridge artifacts through fixture failure clas\u2026",
     "statement": "The concurrency mission-control component validates copied public mission-control builder and bridge artifacts through fixture failure clas\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/concurrency_mission_control.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/concurrency mission control py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "concurrency_mission_control",
       "target_kind": "component",
       "target_label": "Concurrency Mission Control",
       "url": "components.html#component-concurrency_mission_control"
      },
      {
       "relation": "grounds",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public corpus readiness boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/97",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The corpus readiness Mathlib absence gate component validates public formal-math corpus readiness boundaries by checking copied PROVER smok\u2026",
     "synopsis": "The corpus readiness Mathlib absence gate component validates public formal-math corpus readiness boundaries by checking copied PROVER smok\u2026",
     "statement": "The corpus readiness Mathlib absence gate component validates public formal-math corpus readiness boundaries by checking copied PROVER smok\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/corpus readiness mathlib absence gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "corpus_readiness_mathlib_absence_gate",
       "target_kind": "component",
       "target_label": "Corpus Readiness Mathlib Absence Gate",
       "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
       "target_kind": "mechanism",
       "target_label": "validates public lean lake witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "target_kind": "mechanism",
       "target_label": "validates public tactic availability projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public symbol boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json"
      }
     ],
     "visible_text_byte_count": 389
    },
    {
     "object_id": "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public mathlib absence boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/98",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The corpus readiness Mathlib absence gate validates recorded corpus and toolchain readiness accounting, Mathlib absence boundaries, consume\u2026",
     "synopsis": "The corpus readiness Mathlib absence gate validates recorded corpus and toolchain readiness accounting, Mathlib absence boundaries, consume\u2026",
     "statement": "The corpus readiness Mathlib absence gate validates recorded corpus and toolchain readiness accounting, Mathlib absence boundaries, consume\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/corpus readiness mathlib absence gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "corpus_readiness_mathlib_absence_gate",
       "target_kind": "component",
       "target_label": "Corpus Readiness Mathlib Absence Gate",
       "url": "components.html#component-corpus_readiness_mathlib_absence_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
       "target_kind": "mechanism",
       "target_label": "validates public lean lake witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json"
      }
     ],
     "visible_text_byte_count": 388
    },
    {
     "object_id": "mechanism:mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public doctrine fact claim audit",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/99",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The doctrine fact-claim audit component validates fact assertions, numeric claim bindings, DAG references, code-locus anchors, source-modul\u2026",
     "synopsis": "The doctrine fact-claim audit component validates fact assertions, numeric claim bindings, DAG references, code-locus anchors, source-modul\u2026",
     "statement": "The doctrine fact-claim audit component validates fact assertions, numeric claim bindings, DAG references, code-locus anchors, source-modul\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/doctrine_fact_claim_audit.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/doctrine fact claim audit py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "doctrine_fact_claim_audit",
       "target_kind": "component",
       "target_label": "Doctrine Fact Claim Audit",
       "url": "components.html#component-doctrine_fact_claim_audit"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
       "target_kind": "mechanism",
       "target_label": "validates public derived fact provider engine",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public axiom support boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "target_kind": "mechanism",
       "target_label": "validates public self ignorance coverage ledger",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json"
      }
     ],
     "visible_text_byte_count": 389
    },
    {
     "object_id": "mechanism:mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public work landing replay contract",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/100",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The durable agent work-landing replay component validates public work-landing replay rows by checking owned-path claim evidence, owner-nati\u2026",
     "synopsis": "The durable agent work-landing replay component validates public work-landing replay rows by checking owned-path claim evidence, owner-nati\u2026",
     "statement": "The durable agent work-landing replay component validates public work-landing replay rows by checking owned-path claim evidence, owner-nati\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/durable_agent_work_landing_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/durable agent work landing replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "durable_agent_work_landing_replay",
       "target_kind": "component",
       "target_label": "Durable Agent Work Landing Replay",
       "url": "components.html#component-durable_agent_work_landing_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "target_kind": "mechanism",
       "target_label": "validates completion evidence claims",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public mission transaction bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json"
      }
     ],
     "visible_text_byte_count": 392
    },
    {
     "object_id": "mechanism:mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "id": "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public reference knowledge router",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/101",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room reference knowledge router mechanism validates explainable tiered routing over sanitized reference catalog fixtures by scor\u2026",
     "synopsis": "The Engine Room reference knowledge router mechanism validates explainable tiered routing over sanitized reference catalog fixtures by scor\u2026",
     "statement": "The Engine Room reference knowledge router mechanism validates explainable tiered routing over sanitized reference catalog fixtures by scor\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/annex_knowledge_router.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/reference knowledge router py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json"
      }
     ],
     "visible_text_byte_count": 390
    },
    {
     "object_id": "mechanism:mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "id": "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public command run singleflight",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/102",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room command-run singleflight mechanism validates content-addressed subprocess run keys, fcntl-backed leader/follower collapse\u2026",
     "synopsis": "The Engine Room command-run singleflight mechanism validates content-addressed subprocess run keys, fcntl-backed leader/follower collapse\u2026",
     "statement": "The Engine Room command-run singleflight mechanism validates content-addressed subprocess run keys, fcntl-backed leader/follower collapse\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/command_run_singleflight.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/command run singleflight py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json"
      }
     ],
     "visible_text_byte_count": 386
    },
    {
     "object_id": "mechanism:mechanism.engine_room_demo.validates_public_engine_room_demo",
     "id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public engine room demo",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/103",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room demo component validates the staged public Engine Room composition over bounded fixtures, controller audits, missing-target\u2026",
     "synopsis": "The Engine Room demo component validates the staged public Engine Room composition over bounded fixtures, controller audits, missing-target\u2026",
     "statement": "The Engine Room demo component validates the staged public Engine Room composition over bounded fixtures, controller audits, missing-target\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/engine_room_demo.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/engine room demo py",
       "url": ""
      },
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/demo.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/demo py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
       "target_kind": "mechanism",
       "target_label": "validates public reference knowledge router",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
       "target_kind": "mechanism",
       "target_label": "validates public command run singleflight",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
       "target_kind": "mechanism",
       "target_label": "validates public derived fact provider engine",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
       "target_kind": "mechanism",
       "target_label": "validates public egress self compliance gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json"
      }
     ],
     "visible_text_byte_count": 380
    },
    {
     "object_id": "mechanism:mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public derived fact provider engine",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/104",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room derived fact provider engine mechanism validates registry-backed fact resolution over public fixture roots by resolving JSO\u2026",
     "synopsis": "The Engine Room derived fact provider engine mechanism validates registry-backed fact resolution over public fixture roots by resolving JSO\u2026",
     "statement": "The Engine Room derived fact provider engine mechanism validates registry-backed fact resolution over public fixture roots by resolving JSO\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/derived_fact_provider_engine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/derived fact provider engine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json"
      }
     ],
     "visible_text_byte_count": 392
    },
    {
     "object_id": "mechanism:mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public egress self compliance gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/105",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room egress self-compliance gate mechanism validates phrase-membership policy over public agent-output fixtures by detecting per\u2026",
     "synopsis": "The Engine Room egress self-compliance gate mechanism validates phrase-membership policy over public agent-output fixtures by detecting per\u2026",
     "statement": "The Engine Room egress self-compliance gate mechanism validates phrase-membership policy over public agent-output fixtures by detecting per\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/egress_self_compliance_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/egress self compliance gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public compliance pipeline bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "id": "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public generated projection drift gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/106",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room generated projection drift gate validates owner-routed generated artifact freshness over public fixtures by selecting proje\u2026",
     "synopsis": "The Engine Room generated projection drift gate validates owner-routed generated artifact freshness over public fixtures by selecting proje\u2026",
     "statement": "The Engine Room generated projection drift gate validates owner-routed generated artifact freshness over public fixtures by selecting proje\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/generated_projection_drift_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/generated projection drift gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public validator checker bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json"
      }
     ],
     "visible_text_byte_count": 395
    },
    {
     "object_id": "mechanism:mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "id": "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean proof search lab",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/107",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room Lean proof-search lab mechanism validates bounded public proof-search fixtures by running tiny Lean statements through symb\u2026",
     "synopsis": "The Engine Room Lean proof-search lab mechanism validates bounded public proof-search fixtures by running tiny Lean statements through symb\u2026",
     "statement": "The Engine Room Lean proof-search lab mechanism validates bounded public proof-search fixtures by running tiny Lean statements through symb\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/lean_proof_search_lab.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/lean proof search lab py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json"
      }
     ],
     "visible_text_byte_count": 385
    },
    {
     "object_id": "mechanism:mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "id": "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public navigation fitness benchmark",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/108",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room navigation fitness benchmark mechanism validates public route-packet benchmark fixtures by checking expected stable-id reca\u2026",
     "synopsis": "The Engine Room navigation fitness benchmark mechanism validates public route-packet benchmark fixtures by checking expected stable-id reca\u2026",
     "statement": "The Engine Room navigation fitness benchmark mechanism validates public route-packet benchmark fixtures by checking expected stable-id reca\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/navigation_fitness_benchmark.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/navigation fitness benchmark py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json"
      }
     ],
     "visible_text_byte_count": 392
    },
    {
     "object_id": "mechanism:mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "id": "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public projection leak gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/109",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room public projection leak gate validates rendered public projection roots by scanning file content, path names, symlink target\u2026",
     "synopsis": "The Engine Room public projection leak gate validates rendered public projection roots by scanning file content, path names, symlink target\u2026",
     "statement": "The Engine Room public projection leak gate validates rendered public projection roots by scanning file content, path names, symlink target\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/engine_room/public_projection_leak_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/engine room/public projection leak gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "engine_room_demo",
       "target_kind": "component",
       "target_label": "Engine Room Demo",
       "url": "components.html#component-engine_room_demo"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "target_kind": "mechanism",
       "target_label": "validates public engine room demo",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
       "target_kind": "mechanism",
       "target_label": "validates public egress self compliance gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json"
      }
     ],
     "visible_text_byte_count": 384
    },
    {
     "object_id": "mechanism:mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public doctrine grammar bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/110",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The executable doctrine grammar component validates public standards and paper-module grammar fixtures by checking required standard fields\u2026",
     "synopsis": "The executable doctrine grammar component validates public standards and paper-module grammar fixtures by checking required standard fields\u2026",
     "statement": "The executable doctrine grammar component validates public standards and paper-module grammar fixtures by checking required standard fields\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/executable_doctrine_grammar.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/executable doctrine grammar py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "executable_doctrine_grammar",
       "target_kind": "component",
       "target_label": "Executable Doctrine Grammar",
       "url": "components.html#component-executable_doctrine_grammar"
      },
      {
       "relation": "grounds",
       "target_id": "concept.executable_doctrine_grammar_standard_bundle",
       "target_kind": "concept",
       "target_label": "standard as schema contract with explicit scope limit",
       "url": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public axiom support boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json"
      }
     ],
     "visible_text_byte_count": 387
    },
    {
     "object_id": "mechanism:mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "id": "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public finance forecast evaluation spine",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/111",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The finance forecast evaluation spine validates copied public finance-evaluation helpers over synthetic market-shaped fixtures through Dieb\u2026",
     "synopsis": "The finance forecast evaluation spine validates copied public finance-evaluation helpers over synthetic market-shaped fixtures through Dieb\u2026",
     "statement": "The finance forecast evaluation spine validates copied public finance-evaluation helpers over synthetic market-shaped fixtures through Dieb\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/finance_forecast_evaluation_spine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/finance forecast evaluation spine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "finance_forecast_evaluation_spine",
       "target_kind": "component",
       "target_label": "Finance Forecast Evaluation Spine",
       "url": "components.html#component-finance_forecast_evaluation_spine"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
       "target_kind": "mechanism",
       "target_label": "validates public prediction oracle reconciliation",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json"
      }
     ],
     "visible_text_byte_count": 397
    },
    {
     "object_id": "mechanism:mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public first screen composition root",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/112",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The first-screen composition root validates the public one-screen entry card by checking reader-route ids, shared first commands, behavior-\u2026",
     "synopsis": "The first-screen composition root validates the public one-screen entry card by checking reader-route ids, shared first commands, behavior-\u2026",
     "statement": "The first-screen composition root validates the public one-screen entry card by checking reader-route ids, shared first commands, behavior-\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/first_screen_composition.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/first screen composition py",
       "url": ""
      },
      {
       "relation": "grounded in",
       "target_id": "scripts/first_screen_composition_card.py",
       "target_kind": "source path",
       "target_label": "scripts/first screen composition card py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "public_reveal_walkthrough",
       "target_kind": "component",
       "target_label": "Public Reveal Walkthrough",
       "url": "components.html#component-public_reveal_walkthrough"
      },
      {
       "relation": "grounds",
       "target_id": "concept.entry_and_reveal_route_readiness_bundle",
       "target_kind": "concept",
       "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
       "target_kind": "mechanism",
       "target_label": "validates public reveal walkthrough",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json"
      }
     ],
     "visible_text_byte_count": 393
    },
    {
     "object_id": "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public evidence cell anchor resolution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/113",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal evidence cell anchor resolver validates proof-language evidence boundaries by resolving public paper claims to evidence-cell ids\u2026",
     "synopsis": "The formal evidence cell anchor resolver validates proof-language evidence boundaries by resolving public paper claims to evidence-cell ids\u2026",
     "statement": "The formal evidence cell anchor resolver validates proof-language evidence boundaries by resolving public paper claims to evidence-cell ids\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal evidence cell anchor resolver py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_evidence_cell_anchor_resolver",
       "target_kind": "component",
       "target_label": "Formal Evidence Cell Anchor Resolver",
       "url": "components.html#component-formal_evidence_cell_anchor_resolver"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json"
      }
     ],
     "visible_text_byte_count": 395
    },
    {
     "object_id": "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public evidence cell anchors",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/114",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal evidence cell anchor resolver validates claim-to-evidence-cell resolution, public source anchors, permitted claim strength, copi\u2026",
     "synopsis": "The formal evidence cell anchor resolver validates claim-to-evidence-cell resolution, public source anchors, permitted claim strength, copi\u2026",
     "statement": "The formal evidence cell anchor resolver validates claim-to-evidence-cell resolution, public source anchors, permitted claim strength, copi\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal evidence cell anchor resolver py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_evidence_cell_anchor_resolver",
       "target_kind": "component",
       "target_label": "Formal Evidence Cell Anchor Resolver",
       "url": "components.html#component-formal_evidence_cell_anchor_resolver"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json"
      }
     ],
     "visible_text_byte_count": 385
    },
    {
     "object_id": "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean lake witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/115",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal math Lean proof witness component validates a bounded public Lean/Lake witness by copying a declared toy Lake project into a tem\u2026",
     "synopsis": "The formal math Lean proof witness component validates a bounded public Lean/Lake witness by copying a declared toy Lake project into a tem\u2026",
     "statement": "The formal math Lean proof witness component validates a bounded public Lean/Lake witness by copying a declared toy Lake project into a tem\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_lean_proof_witness.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math lean proof witness py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_lean_proof_witness",
       "target_kind": "component",
       "target_label": "Formal Math Lean Proof Witness",
       "url": "components.html#component-formal_math_lean_proof_witness"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
       "target_kind": "mechanism",
       "target_label": "validates public premise retrieval slice",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public formal math readiness bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "target_kind": "mechanism",
       "target_label": "validates public verifier transition witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json"
      }
     ],
     "visible_text_byte_count": 381
    },
    {
     "object_id": "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/116",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal math Lean proof witness validates a bounded public toy Lean/Lake witness by checking tool availability, temporary-workspace buil\u2026",
     "synopsis": "The formal math Lean proof witness validates a bounded public toy Lean/Lake witness by checking tool availability, temporary-workspace buil\u2026",
     "statement": "The formal math Lean proof witness validates a bounded public toy Lean/Lake witness by checking tool availability, temporary-workspace buil\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_lean_proof_witness.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math lean proof witness py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_lean_proof_witness",
       "target_kind": "component",
       "target_label": "Formal Math Lean Proof Witness",
       "url": "components.html#component-formal_math_lean_proof_witness"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
       "target_kind": "mechanism",
       "target_label": "validates public premise retrieval slice",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public formal math readiness bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "target_kind": "mechanism",
       "target_label": "validates public verifier transition witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json"
      }
     ],
     "visible_text_byte_count": 376
    },
    {
     "object_id": "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public premise retrieval projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/117",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal math premise retrieval component validates public retrieval metadata, premise-index references, strategy cases, retrieval querie\u2026",
     "synopsis": "The formal math premise retrieval component validates public retrieval metadata, premise-index references, strategy cases, retrieval querie\u2026",
     "statement": "The formal math premise retrieval component validates public retrieval metadata, premise-index references, strategy cases, retrieval querie\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_premise_retrieval.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math premise retrieval py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_premise_retrieval",
       "target_kind": "component",
       "target_label": "Formal Math Premise Retrieval",
       "url": "components.html#component-formal_math_premise_retrieval"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json"
      }
     ],
     "visible_text_byte_count": 392
    },
    {
     "object_id": "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public premise retrieval slice",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/118",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal math premise retrieval component validates a formal-math retrieval slice by checking copied Lean/Std premise descriptors, retrie\u2026",
     "synopsis": "The formal math premise retrieval component validates a formal-math retrieval slice by checking copied Lean/Std premise descriptors, retrie\u2026",
     "statement": "The formal math premise retrieval component validates a formal-math retrieval slice by checking copied Lean/Std premise descriptors, retrie\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_premise_retrieval.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math premise retrieval py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_premise_retrieval",
       "target_kind": "component",
       "target_label": "Formal Math Premise Retrieval",
       "url": "components.html#component-formal_math_premise_retrieval"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public verifier trace repair bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
       "target_kind": "mechanism",
       "target_label": "validates public lean std premise catalog",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "target_kind": "mechanism",
       "target_label": "validates public strategy hypothesis projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
       "target_kind": "mechanism",
       "target_label": "validates public premise retrieval attribution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json"
      }
     ],
     "visible_text_byte_count": 387
    },
    {
     "object_id": "mechanism:mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public formal math readiness bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/119",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal math readiness gate component validates public formal-math readiness evidence by checking declared corpus and Mathlib readiness\u2026",
     "synopsis": "The formal math readiness gate component validates public formal-math readiness evidence by checking declared corpus and Mathlib readiness\u2026",
     "statement": "The formal math readiness gate component validates public formal-math readiness evidence by checking declared corpus and Mathlib readiness\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_readiness_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math readiness gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_readiness_gate",
       "target_kind": "component",
       "target_label": "Formal Math Readiness Gate",
       "url": "components.html#component-formal_math_readiness_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public context budget boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "target_kind": "mechanism",
       "target_label": "validates public tactic availability projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "id": "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public readiness boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/120",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal math readiness gate validates declared readiness metadata, tactic availability references, premise-index boundaries, target-shap\u2026",
     "synopsis": "The formal math readiness gate validates declared readiness metadata, tactic availability references, premise-index boundaries, target-shap\u2026",
     "statement": "The formal math readiness gate validates declared readiness metadata, tactic availability references, premise-index boundaries, target-shap\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_readiness_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math readiness gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_readiness_gate",
       "target_kind": "component",
       "target_label": "Formal Math Readiness Gate",
       "url": "components.html#component-formal_math_readiness_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "target_kind": "mechanism",
       "target_label": "validates public tactic availability projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json"
      }
     ],
     "visible_text_byte_count": 382
    },
    {
     "object_id": "mechanism:mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public verifier trace repair bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/121",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal math verifier-trace repair loop component validates public proof-lab repair evidence by checking copied Ring2 run refs and diges\u2026",
     "synopsis": "The formal math verifier-trace repair loop component validates public proof-lab repair evidence by checking copied Ring2 run refs and diges\u2026",
     "statement": "The formal math verifier-trace repair loop component validates public proof-lab repair evidence by checking copied Ring2 run refs and diges\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/formal_math_verifier_trace_repair_loop.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/formal math verifier trace repair loop py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "formal_math_verifier_trace_repair_loop",
       "target_kind": "component",
       "target_label": "Formal Math Verifier Trace Repair Loop",
       "url": "components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
       "target_kind": "mechanism",
       "target_label": "validates public evidence cell anchor resolution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "target_kind": "mechanism",
       "target_label": "validates ring2 diagnostic evidence membrane",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "target_kind": "mechanism",
       "target_label": "validates public verifier transition witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json"
      }
     ],
     "visible_text_byte_count": 392
    },
    {
     "object_id": "mechanism:mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "id": "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public indirect prompt injection information flow policy replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/122",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The indirect prompt-injection information-flow policy replay component validates public source-trust rows, taint-flow edges, policy verdict\u2026",
     "synopsis": "The indirect prompt-injection information-flow policy replay component validates public source-trust rows, taint-flow edges, policy verdict\u2026",
     "statement": "The indirect prompt-injection information-flow policy replay component validates public source-trust rows, taint-flow edges, policy verdict\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/indirect_prompt_injection_information_flow_policy_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/indirect prompt injection information flow policy replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "indirect_prompt_injection_information_flow_policy_replay",
       "target_kind": "component",
       "target_label": "Indirect Prompt Injection Information Flow Policy Replay",
       "url": "components.html#component-indirect_prompt_injection_information_flow_policy_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json"
      }
     ],
     "visible_text_byte_count": 420
    },
    {
     "object_id": "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean std premise catalog",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/123",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Lean/Std premise index component validates a copied Lean/Std premise descriptor catalog and Ring2 premise-retrieval source body bundle\u2026",
     "synopsis": "The Lean/Std premise index component validates a copied Lean/Std premise descriptor catalog and Ring2 premise-retrieval source body bundle\u2026",
     "statement": "The Lean/Std premise index component validates a copied Lean/Std premise descriptor catalog and Ring2 premise-retrieval source body bundle\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/lean_std_premise_index.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/lean std premise index py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "lean_std_premise_index",
       "target_kind": "component",
       "target_label": "Lean Std Premise Index",
       "url": "components.html#component-lean_std_premise_index"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public verifier trace repair bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "target_kind": "mechanism",
       "target_label": "validates public strategy hypothesis projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public symbol boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json"
      }
     ],
     "visible_text_byte_count": 387
    },
    {
     "object_id": "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public lean std premise index",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/124",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Lean Std premise index validates premise metadata, Lean/Init source refs, copied public source manifests, forbidden proof/oracle fields\u2026",
     "synopsis": "The Lean Std premise index validates premise metadata, Lean/Init source refs, copied public source manifests, forbidden proof/oracle fields\u2026",
     "statement": "The Lean Std premise index validates premise metadata, Lean/Init source refs, copied public source manifests, forbidden proof/oracle fields\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/lean_std_premise_index.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/lean std premise index py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "lean_std_premise_index",
       "target_kind": "component",
       "target_label": "Lean Std Premise Index",
       "url": "components.html#component-lean_std_premise_index"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "target_kind": "mechanism",
       "target_label": "validates public strategy hypothesis projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json"
      }
     ],
     "visible_text_byte_count": 386
    },
    {
     "object_id": "mechanism:mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public source projection imports",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/125",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The source projection import protocol component validates fixture and exported projection bundles by checking source refs, public target re\u2026",
     "synopsis": "The source projection import protocol component validates fixture and exported projection bundles by checking source refs, public target re\u2026",
     "statement": "The source projection import protocol component validates fixture and exported projection bundles by checking source refs, public target re\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/macro_projection_import_protocol.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/source projection import protocol py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "macro_projection_import_protocol",
       "target_kind": "component",
       "target_label": "Source Projection Import Protocol",
       "url": "components.html#component-macro_projection_import_protocol"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "target_kind": "mechanism",
       "target_label": "validates public monitor verdict result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "target_kind": "mechanism",
       "target_label": "validates synthetic bridge continuity",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public governance compilers bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json"
      }
     ],
     "visible_text_byte_count": 389
    },
    {
     "object_id": "mechanism:mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public materials lab safety replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/126",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The materials chemistry closed-loop lab-safety replay component validates public lab-safety claim boundaries by checking candidate material\u2026",
     "synopsis": "The materials chemistry closed-loop lab-safety replay component validates public lab-safety claim boundaries by checking candidate material\u2026",
     "statement": "The materials chemistry closed-loop lab-safety replay component validates public lab-safety claim boundaries by checking candidate material\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/materials_chemistry_closed_loop_lab_safety_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/materials chemistry closed loop lab safety replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "materials_chemistry_closed_loop_lab_safety_replay",
       "target_kind": "component",
       "target_label": "Materials Chemistry Closed Loop Lab Safety Replay",
       "url": "components.html#component-materials_chemistry_closed_loop_lab_safety_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
       "target_kind": "mechanism",
       "target_label": "validates public spatial world model counterfactual simulation replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public strategy hypothesis projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/127",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The mathematical strategy atlas hypothesis scorer validates pre-oracle strategy selection, feature-overlap routing, source-artifact consist\u2026",
     "synopsis": "The mathematical strategy atlas hypothesis scorer validates pre-oracle strategy selection, feature-overlap routing, source-artifact consist\u2026",
     "statement": "The mathematical strategy atlas hypothesis scorer validates pre-oracle strategy selection, feature-overlap routing, source-artifact consist\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/mathematical_strategy_atlas_hypothesis_scorer.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/mathematical strategy atlas hypothesis scorer py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "mathematical_strategy_atlas_hypothesis_scorer",
       "target_kind": "component",
       "target_label": "Mathematical Strategy Atlas Hypothesis Scorer",
       "url": "components.html#component-mathematical_strategy_atlas_hypothesis_scorer"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json"
      }
     ],
     "visible_text_byte_count": 394
    },
    {
     "object_id": "mechanism:mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public mcp tool authority replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/128",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The MCP tool authority replay component validates public tool manifest scope, call metadata, approval token refs, side-effect ledger refs\u2026",
     "synopsis": "The MCP tool authority replay component validates public tool manifest scope, call metadata, approval token refs, side-effect ledger refs\u2026",
     "statement": "The MCP tool authority replay component validates public tool manifest scope, call metadata, approval token refs, side-effect ledger refs\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/mcp_tool_authority_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/mcp tool authority replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "mcp_tool_authority_replay",
       "target_kind": "component",
       "target_label": "MCP Tool Authority Replay",
       "url": "components.html#component-mcp_tool_authority_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
       "target_kind": "mechanism",
       "target_label": "validates public sandbox policy trace",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "mechanism",
       "target_label": "validates public sleeper memory poisoning quarantine replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json"
      }
     ],
     "visible_text_byte_count": 387
    },
    {
     "object_id": "mechanism:mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public mechanistic interpretability circuit attribution replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/129",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The mechanistic interpretability circuit-attribution replay component validates public toy-transformer attribution rows, machine-readable g\u2026",
     "synopsis": "The mechanistic interpretability circuit-attribution replay component validates public toy-transformer attribution rows, machine-readable g\u2026",
     "statement": "The mechanistic interpretability circuit-attribution replay component validates public toy-transformer attribution rows, machine-readable g\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/mechanistic_interpretability_circuit_attribution_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/mechanistic interpretability circuit attribution replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "mechanistic_interpretability_circuit_attribution_replay",
       "target_kind": "component",
       "target_label": "Mechanistic Interpretability Circuit Attribution Replay",
       "url": "components.html#component-mechanistic_interpretability_circuit_attribution_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json"
      }
     ],
     "visible_text_byte_count": 419
    },
    {
     "object_id": "mechanism:mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public axiom support boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/130",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Microcosm axiom system support-cover evaluator projects public axiom support cases, support frontiers, anti-axiom rejection mappings, p\u2026",
     "synopsis": "The Microcosm axiom system support-cover evaluator projects public axiom support cases, support frontiers, anti-axiom rejection mappings, p\u2026",
     "statement": "The Microcosm axiom system support-cover evaluator projects public axiom support cases, support frontiers, anti-axiom rejection mappings, p\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/validators/axiom_support_cover.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/validators/axiom support cover py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "microcosm_axiom_substrate",
       "target_kind": "component",
       "target_label": "microcosm axiom system",
       "url": ""
      },
      {
       "relation": "grounds",
       "target_id": "concept.executable_doctrine_grammar_standard_bundle",
       "target_kind": "concept",
       "target_label": "standard as schema contract with explicit scope limit",
       "url": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public validator checker bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json"
      }
     ],
     "visible_text_byte_count": 386
    },
    {
     "object_id": "mechanism:mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public mission transaction bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/131",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The mission transaction work-spine component validates public work-landing and completion metadata by checking fixed Work item, claim, depe\u2026",
     "synopsis": "The mission transaction work-spine component validates public work-landing and completion metadata by checking fixed Work item, claim, depe\u2026",
     "statement": "The mission transaction work-spine component validates public work-landing and completion metadata by checking fixed Work item, claim, depe\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/mission_transaction_work_spine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/mission transaction work spine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "mission_transaction_work_spine",
       "target_kind": "component",
       "target_label": "Mission Transaction Work Spine",
       "url": "components.html#component-mission_transaction_work_spine"
      },
      {
       "relation": "grounds",
       "target_id": "concept.work_landing_and_continuity_control_bundle",
       "target_kind": "concept",
       "target_label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "target_kind": "mechanism",
       "target_label": "validates public benchmark integrity replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
       "target_kind": "mechanism",
       "target_label": "validates public agentic vulnerability patch proof replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public live source drift bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public tools tail primitives bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json"
      }
     ],
     "visible_text_byte_count": 390
    },
    {
     "object_id": "mechanism:mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public route plane bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/132",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The navigation hologram route-plane component validates public route-plane fixture rows and exported bundle inputs by checking route projec\u2026",
     "synopsis": "The navigation hologram route-plane component validates public route-plane fixture rows and exported bundle inputs by checking route projec\u2026",
     "statement": "The navigation hologram route-plane component validates public route-plane fixture rows and exported bundle inputs by checking route projec\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/navigation_hologram_route_plane.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/navigation hologram route plane py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "navigation_hologram_route_plane",
       "target_kind": "component",
       "target_label": "Navigation Hologram Route Plane",
       "url": "components.html#component-navigation_hologram_route_plane"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public saturation engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public compliance pipeline bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "target_kind": "mechanism",
       "target_label": "validates public doctrine fact claim audit",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json"
      }
     ],
     "visible_text_byte_count": 382
    },
    {
     "object_id": "mechanism:mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public pattern assimilation step",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/133",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The pattern-assimilation step component validates refinement, nothing-to-refine, stewardship, re-entry, source-module manifest, negative-ca\u2026",
     "synopsis": "The pattern-assimilation step component validates refinement, nothing-to-refine, stewardship, re-entry, source-module manifest, negative-ca\u2026",
     "statement": "The pattern-assimilation step component validates refinement, nothing-to-refine, stewardship, re-entry, source-module manifest, negative-ca\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/validators/acceptance.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/validators/sign-off py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "pattern_assimilation_step",
       "target_kind": "component",
       "target_label": "Pattern Assimilation Step",
       "url": "components.html#component-pattern_assimilation_step"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json"
      }
     ],
     "visible_text_byte_count": 389
    },
    {
     "object_id": "mechanism:mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "id": "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public pattern bindings",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/134",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The pattern-binding contract component validates public pattern rows, source bundles, reference bundles, authority handles, exported system\u2026",
     "synopsis": "The pattern-binding contract component validates public pattern rows, source bundles, reference bundles, authority handles, exported system\u2026",
     "statement": "The pattern-binding contract component validates public pattern rows, source bundles, reference bundles, authority handles, exported system\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/pattern_binding_contract.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/pattern binding contract py",
       "url": ""
      },
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/macro_tools/pattern_route_readiness.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/source tools/pattern route readiness py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "pattern_binding_contract",
       "target_kind": "component",
       "target_label": "Pattern Binding Contract",
       "url": "components.html#component-pattern_binding_contract"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
       "target_kind": "mechanism",
       "target_label": "validates public source root bootstrap",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "target_kind": "mechanism",
       "target_label": "validates public first run route map",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "target_kind": "mechanism",
       "target_label": "validates public source projection imports",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json"
      }
     ],
     "visible_text_byte_count": 380
    },
    {
     "object_id": "mechanism:mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public prediction oracle reconciliation",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/135",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The prediction oracle reconciliation component validates synthetic prediction packets through CP1 fork preservation, CP2 target-universe ch\u2026",
     "synopsis": "The prediction oracle reconciliation component validates synthetic prediction packets through CP1 fork preservation, CP2 target-universe ch\u2026",
     "statement": "The prediction oracle reconciliation component validates synthetic prediction packets through CP1 fork preservation, CP2 target-universe ch\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/prediction_oracle_reconciliation.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/prediction oracle reconciliation py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "prediction_oracle_reconciliation",
       "target_kind": "component",
       "target_label": "Prediction Oracle Reconciliation",
       "url": "components.html#component-prediction_oracle_reconciliation"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public prediction market board bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public structural theses bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json"
      }
     ],
     "visible_text_byte_count": 396
    },
    {
     "object_id": "mechanism:mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates synthetic governed mutation authorization",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/136",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The proof-derived governed-mutation authorization component validates public synthetic mutation-authority proposals by checking proof-cell\u2026",
     "synopsis": "The proof-derived governed-mutation authorization component validates public synthetic mutation-authority proposals by checking proof-cell\u2026",
     "statement": "The proof-derived governed-mutation authorization component validates public synthetic mutation-authority proposals by checking proof-cell\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/proof_derived_governed_mutation_authorization.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/proof derived governed mutation authorization py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "proof_derived_governed_mutation_authorization",
       "target_kind": "component",
       "target_label": "Proof Derived Governed Mutation Authorization",
       "url": "components.html#component-proof_derived_governed_mutation_authorization"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public proof authority runtime bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public policy engines bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json"
      }
     ],
     "visible_text_byte_count": 397
    },
    {
     "object_id": "mechanism:mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates ring2 diagnostic evidence membrane",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/137",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The proof diagnostic evidence spine component validates proof-adjacent public evidence by checking Ring2 diagnostic result record refs, cop\u2026",
     "synopsis": "The proof diagnostic evidence spine component validates proof-adjacent public evidence by checking Ring2 diagnostic result record refs, cop\u2026",
     "statement": "The proof diagnostic evidence spine component validates proof-adjacent public evidence by checking Ring2 diagnostic result record refs, cop\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/proof_diagnostic_evidence_spine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/proof diagnostic evidence spine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "proof_diagnostic_evidence_spine",
       "target_kind": "component",
       "target_label": "Proof Diagnostic Evidence Spine",
       "url": "components.html#component-proof_diagnostic_evidence_spine"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
       "target_kind": "mechanism",
       "target_label": "validates public premise retrieval attribution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public context budget boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/138",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The provider context recipe budget policy validates byte-bounded context recipe projection, ordered section fill, omitted-section manifests\u2026",
     "synopsis": "The provider context recipe budget policy validates byte-bounded context recipe projection, ordered section fill, omitted-section manifests\u2026",
     "statement": "The provider context recipe budget policy validates byte-bounded context recipe projection, ordered section fill, omitted-section manifests\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/provider_context_recipe_budget_policy.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/provider context recipe budget policy py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "provider_context_recipe_budget_policy",
       "target_kind": "component",
       "target_label": "Provider Context Recipe Budget Policy",
       "url": "components.html#component-provider_context_recipe_budget_policy"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
       "target_kind": "mechanism",
       "target_label": "validates public bounded autonomy campaign packet",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
       "target_kind": "mechanism",
       "target_label": "validates public tool server pressure inventory",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json"
      }
     ],
     "visible_text_byte_count": 387
    },
    {
     "object_id": "mechanism:mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public reveal walkthrough",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/139",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public reveal walkthrough component validates public entry material by checking reveal-step density, runnable command refs, evidence re\u2026",
     "synopsis": "The public reveal walkthrough component validates public entry material by checking reveal-step density, runnable command refs, evidence re\u2026",
     "statement": "The public reveal walkthrough component validates public entry material by checking reveal-step density, runnable command refs, evidence re\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/public_reveal_walkthrough.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/public reveal walkthrough py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "public_reveal_walkthrough",
       "target_kind": "component",
       "target_label": "Public Reveal Walkthrough",
       "url": "components.html#component-public_reveal_walkthrough"
      },
      {
       "relation": "grounds",
       "target_id": "concept.entry_and_reveal_route_readiness_bundle",
       "target_kind": "concept",
       "target_label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "target_kind": "mechanism",
       "target_label": "validates public launch claim language gate",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
       "target_kind": "mechanism",
       "target_label": "validates public audio level rms port",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public validator checker bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mechanistic interpretability circuit attribution replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json"
      }
     ],
     "visible_text_byte_count": 382
    },
    {
     "object_id": "mechanism:mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "id": "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public research replication replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/140",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The research replication rubric-artifact replay component validates public research-replication claim boundaries by checking contribution d\u2026",
     "synopsis": "The research replication rubric-artifact replay component validates public research-replication claim boundaries by checking contribution d\u2026",
     "statement": "The research replication rubric-artifact replay component validates public research-replication claim boundaries by checking contribution d\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/research_replication_rubric_artifact_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/research replication rubric artifact replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "research_replication_rubric_artifact_replay",
       "target_kind": "component",
       "target_label": "Research Replication Rubric Artifact Replay",
       "url": "components.html#component-research_replication_rubric_artifact_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public cold eval honesty bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
       "target_kind": "mechanism",
       "target_label": "validates public materials lab safety replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mechanistic interpretability circuit attribution replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
       "target_kind": "mechanism",
       "target_label": "validates public prediction oracle reconciliation",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
       "target_kind": "mechanism",
       "target_label": "validates public spatial world model counterfactual simulation replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public premise retrieval attribution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/141",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Ring2 premise retrieval precision/recall harness validates copied retrieval rankings, needed-premise attribution labels, aggregate hit\u2026",
     "synopsis": "The Ring2 premise retrieval precision/recall harness validates copied retrieval rankings, needed-premise attribution labels, aggregate hit\u2026",
     "statement": "The Ring2 premise retrieval precision/recall harness validates copied retrieval rankings, needed-premise attribution labels, aggregate hit\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/ring2_premise_retrieval_precision_recall_harness.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/ring2 premise retrieval precision recall harness py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "ring2_premise_retrieval_precision_recall_harness",
       "target_kind": "component",
       "target_label": "Ring2 Premise Retrieval Precision Recall Harness",
       "url": "components.html#component-ring2_premise_retrieval_precision_recall_harness"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "target_kind": "mechanism",
       "target_label": "validates public strategy hypothesis projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json"
      }
     ],
     "visible_text_byte_count": 392
    },
    {
     "object_id": "mechanism:mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "id": "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public routing anti patterns registry",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/142",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The routing anti-patterns registry component validates public routing anti-pattern rows, source-module digest anchors, private-leak rejecti\u2026",
     "synopsis": "The routing anti-patterns registry component validates public routing anti-pattern rows, source-module digest anchors, private-leak rejecti\u2026",
     "statement": "The routing anti-patterns registry component validates public routing anti-pattern rows, source-module digest anchors, private-leak rejecti\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/routing_anti_patterns_registry.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/routing anti patterns registry py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "routing_anti_patterns_registry",
       "target_kind": "component",
       "target_label": "Routing Anti Patterns Registry",
       "url": "components.html#component-routing_anti_patterns_registry"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "target_kind": "mechanism",
       "target_label": "validates public route feedback",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public route plane bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json"
      }
     ],
     "visible_text_byte_count": 394
    },
    {
     "object_id": "mechanism:mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public self ignorance coverage ledger",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/143",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The self-ignorance coverage ledger component validates known Kind Atlas coverage-debt fixtures through declared gap rows, missing-category\u2026",
     "synopsis": "The self-ignorance coverage ledger component validates known Kind Atlas coverage-debt fixtures through declared gap rows, missing-category\u2026",
     "statement": "The self-ignorance coverage ledger component validates known Kind Atlas coverage-debt fixtures through declared gap rows, missing-category\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/self_ignorance_coverage_ledger.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/self ignorance coverage ledger py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "self_ignorance_coverage_ledger",
       "target_kind": "component",
       "target_label": "Self Ignorance Coverage Ledger",
       "url": "components.html#component-self_ignorance_coverage_ledger"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json"
      }
     ],
     "visible_text_byte_count": 393
    },
    {
     "object_id": "mechanism:mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public sleeper memory poisoning quarantine replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/144",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The sleeper memory poisoning quarantine replay component validates metadata-only public memory-security policy projections, poisoned-source\u2026",
     "synopsis": "The sleeper memory poisoning quarantine replay component validates metadata-only public memory-security policy projections, poisoned-source\u2026",
     "statement": "The sleeper memory poisoning quarantine replay component validates metadata-only public memory-security policy projections, poisoned-source\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/sleeper_memory_poisoning_quarantine_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/sleeper memory poisoning quarantine replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "sleeper_memory_poisoning_quarantine_replay",
       "target_kind": "component",
       "target_label": "Sleeper Memory Poisoning Quarantine Replay",
       "url": "components.html#component-sleeper_memory_poisoning_quarantine_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.agent_reliability_and_safety_validator_bundle",
       "target_kind": "concept",
       "target_label": "agent reliability and safety validators as bounded public scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json"
      }
     ],
     "visible_text_byte_count": 406
    },
    {
     "object_id": "mechanism:mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public spatial world model counterfactual simulation replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/145",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The spatial world-model counterfactual simulation replay component validates synthetic scene-state transitions, counterfactual replay rows\u2026",
     "synopsis": "The spatial world-model counterfactual simulation replay component validates synthetic scene-state transitions, counterfactual replay rows\u2026",
     "statement": "The spatial world-model counterfactual simulation replay component validates synthetic scene-state transitions, counterfactual replay rows\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/spatial_world_model_counterfactual_simulation_replay.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/spatial world model counterfactual simulation replay py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "spatial_world_model_counterfactual_simulation_replay",
       "target_kind": "component",
       "target_label": "Spatial World Model Counterfactual Simulation Replay",
       "url": "components.html#component-spatial_world_model_counterfactual_simulation_replay"
      },
      {
       "relation": "grounds",
       "target_id": "concept.research_and_science_replay_evidence_bundle",
       "target_kind": "concept",
       "target_label": "research and science replay validators as reproducibility scope limits",
       "url": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json"
      }
     ],
     "visible_text_byte_count": 415
    },
    {
     "object_id": "mechanism:mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public standards meta diagnostics",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/146",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The standards meta diagnostics component validates public projection-only diagnostics over accepted-component standards inventory, runtime\u2026",
     "synopsis": "The standards meta diagnostics component validates public projection-only diagnostics over accepted-component standards inventory, runtime\u2026",
     "statement": "The standards meta diagnostics component validates public projection-only diagnostics over accepted-component standards inventory, runtime\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/standards_meta_diagnostics.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/standards meta diagnostics py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "standards_meta_diagnostics",
       "target_kind": "component",
       "target_label": "Standards Meta Diagnostics",
       "url": "components.html#component-standards_meta_diagnostics"
      },
      {
       "relation": "grounds",
       "target_id": "concept.standards_meta_diagnostics_bundle",
       "target_kind": "concept",
       "target_label": "component-standard-runtime-result record coverage as projection-only evidence",
       "url": "rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public axiom support boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json"
      }
     ],
     "visible_text_byte_count": 389
    },
    {
     "object_id": "mechanism:mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public tactic availability projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/147",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The tactic portfolio availability probe validates recorded tactic compile-status rows, captured probe source digests, unavailable-tactic ro\u2026",
     "synopsis": "The tactic portfolio availability probe validates recorded tactic compile-status rows, captured probe source digests, unavailable-tactic ro\u2026",
     "statement": "The tactic portfolio availability probe validates recorded tactic compile-status rows, captured probe source digests, unavailable-tactic ro\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/tactic_portfolio_availability_probe.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/tactic portfolio availability probe py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "tactic_portfolio_availability_probe",
       "target_kind": "component",
       "target_label": "Tactic Portfolio Availability Probe",
       "url": "components.html#component-tactic_portfolio_availability_probe"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public corpus readiness boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public verifier trace repair bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public tactic routing boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public symbol boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json"
      }
     ],
     "visible_text_byte_count": 394
    },
    {
     "object_id": "mechanism:mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public tactic routing boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/148",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The target-shape tactic routing gate validates pre-execution tactic allow/reject decisions against target shape, recorded tactic availabili\u2026",
     "synopsis": "The target-shape tactic routing gate validates pre-execution tactic allow/reject decisions against target shape, recorded tactic availabili\u2026",
     "statement": "The target-shape tactic routing gate validates pre-execution tactic allow/reject decisions against target shape, recorded tactic availabili\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/target_shape_tactic_routing_gate.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/target shape tactic routing gate py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "target_shape_tactic_routing_gate",
       "target_kind": "component",
       "target_label": "Target Shape Tactic Routing Gate",
       "url": "components.html#component-target_shape_tactic_routing_gate"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "target_kind": "mechanism",
       "target_label": "validates public verifier trace repair bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "target_kind": "mechanism",
       "target_label": "validates public tactic availability projection",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "target_kind": "mechanism",
       "target_label": "composes public formal math result records",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json"
      }
     ],
     "visible_text_byte_count": 387
    },
    {
     "object_id": "mechanism:mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public tool server pressure inventory",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/149",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The tool-server pressure inventory component validates public helper-process pressure fixtures through synthetic process rows, active-owner\u2026",
     "synopsis": "The tool-server pressure inventory component validates public helper-process pressure fixtures through synthetic process rows, active-owner\u2026",
     "statement": "The tool-server pressure inventory component validates public helper-process pressure fixtures through synthetic process rows, active-owner\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/tool_server_pressure_inventory.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/tool server pressure inventory py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "tool_server_pressure_inventory",
       "target_kind": "component",
       "target_label": "Tool Server Pressure Inventory",
       "url": "components.html#component-tool_server_pressure_inventory"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json"
      }
     ],
     "visible_text_byte_count": 394
    },
    {
     "object_id": "mechanism:mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public symbol boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/150",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The undeclared library prior symbol classifier validates symbol-boundary observations against allowed premise ids, classifier policy, sourc\u2026",
     "synopsis": "The undeclared library prior symbol classifier validates symbol-boundary observations against allowed premise ids, classifier policy, sourc\u2026",
     "statement": "The undeclared library prior symbol classifier validates symbol-boundary observations against allowed premise ids, classifier policy, sourc\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/undeclared library prior symbol classifier py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "undeclared_library_prior_symbol_classifier",
       "target_kind": "component",
       "target_label": "Undeclared Library Prior Symbol Classifier",
       "url": "components.html#component-undeclared_library_prior_symbol_classifier"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
       "target_kind": "mechanism",
       "target_label": "validates public context budget boundary",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json"
      }
     ],
     "visible_text_byte_count": 379
    },
    {
     "object_id": "mechanism:mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public verifier transition witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/151",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The verifier lab execution spine validates bounded public Lean transition rows by running the local checker on a temporary fixture, preserv\u2026",
     "synopsis": "The verifier lab execution spine validates bounded public Lean transition rows by running the local checker on a temporary fixture, preserv\u2026",
     "statement": "The verifier lab execution spine validates bounded public Lean transition rows by running the local checker on a temporary fixture, preserv\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/verifier_lab_execution_spine.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/verifier lab execution spine py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "verifier_lab_execution_spine",
       "target_kind": "component",
       "target_label": "Verifier Lab Execution Spine",
       "url": "components.html#component-verifier_lab_execution_spine"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
       "target_kind": "mechanism",
       "target_label": "validates public certificate kernel execution",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
       "target_kind": "mechanism",
       "target_label": "validates public lean proof search lab",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json"
      }
     ],
     "visible_text_byte_count": 391
    },
    {
     "object_id": "mechanism:mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "composes public formal math result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/152",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The verifier lab kernel composes public formal-math component result records into one leak-proof aggregate result record, preserving verifi\u2026",
     "synopsis": "The verifier lab kernel composes public formal-math component result records into one leak-proof aggregate result record, preserving verifi\u2026",
     "statement": "The verifier lab kernel composes public formal-math component result records into one leak-proof aggregate result record, preserving verifi\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/verifier_lab_kernel.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/verifier lab kernel py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "verifier_lab_kernel",
       "target_kind": "component",
       "target_label": "Verifier Lab Kernel",
       "url": "components.html#component-verifier_lab_kernel"
      },
      {
       "relation": "grounds",
       "target_id": "concept.formal_math_and_proof_witness_bundle",
       "target_kind": "concept",
       "target_label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "url": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "target_kind": "mechanism",
       "target_label": "validates public verifier transition witness",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json"
      }
     ],
     "visible_text_byte_count": 389
    },
    {
     "object_id": "mechanism:mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public voice to doctrine self improvement loop",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/153",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The voice-to-doctrine self-improvement loop component validates lesson propagation through projection protocol, policy, owner-surface check\u2026",
     "synopsis": "The voice-to-doctrine self-improvement loop component validates lesson propagation through projection protocol, policy, owner-surface check\u2026",
     "statement": "The voice-to-doctrine self-improvement loop component validates lesson propagation through projection protocol, policy, owner-surface check\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/voice_to_doctrine_self_improvement_loop.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/voice to doctrine self improvement loop py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "voice_to_doctrine_self_improvement_loop",
       "target_kind": "component",
       "target_label": "Voice To Doctrine Self Improvement Loop",
       "url": "components.html#component-voice_to_doctrine_self_improvement_loop"
      },
      {
       "relation": "grounds",
       "target_id": "concept.voice_to_doctrine_self_improvement_loop_bundle",
       "target_kind": "concept",
       "target_label": "local pressure rows as typed candidates for owner-surface refinement",
       "url": "rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle"
      },
      {
       "relation": "grounds",
       "target_id": "concept.architecture_and_navigation_route_contract_bundle",
       "target_kind": "concept",
       "target_label": "architecture and navigation route contracts as executable doctrine boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
       "target_kind": "mechanism",
       "target_label": "validates public pattern assimilation step",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json"
      }
     ],
     "visible_text_byte_count": 403
    },
    {
     "object_id": "mechanism:mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "id": "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "kind": "mechanism",
     "kind_label": "mechanism",
     "title": "validates public projection drift control boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary",
     "read_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary",
     "context_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read_and_context",
     "context_route_role": "same_surface_relationship_context",
     "body_bearing_view": "rules_and_ideas_lattice",
     "body_rendered_on_reference_page": true,
     "route_status": "read_and_context_same_surface",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/doctrine_entities/154",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The world-model projection drift control room component validates public metadata-only projection-drift rows and copied world-model/view-qu\u2026",
     "synopsis": "The world-model projection drift control room component validates public metadata-only projection-drift rows and copied world-model/view-qu\u2026",
     "statement": "The world-model projection drift control room component validates public metadata-only projection-drift rows and copied world-model/view-qu\u2026",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "active",
     "anti_claims": [
      "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
     ],
     "cross_refs": [],
     "links": [
      {
       "relation": "grounded in",
       "target_id": "src/microcosm_core/organs/world_model_projection_drift_control_room.py",
       "target_kind": "source path",
       "target_label": "src/microcosm core/components/world model projection drift control room py",
       "url": ""
      },
      {
       "relation": "runs in",
       "target_id": "world_model_projection_drift_control_room",
       "target_kind": "component",
       "target_label": "World Model Projection Drift Control Room",
       "url": "components.html#component-world_model_projection_drift_control_room"
      },
      {
       "relation": "grounds",
       "target_id": "concept.import_projection_and_drift_control_bundle",
       "target_kind": "concept",
       "target_label": "source import and projection drift controls as provenance-preserving boundaries",
       "url": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public market dashboard read model bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
       "target_kind": "mechanism",
       "target_label": "validates public structural theses bundle",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
       "target_kind": "mechanism",
       "target_label": "validates public materials lab safety replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
       "target_kind": "mechanism",
       "target_label": "validates public mechanistic interpretability circuit attribution replay",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
      },
      {
       "relation": "upstream of",
       "target_id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
       "target_kind": "mechanism",
       "target_label": "validates public prediction oracle reconciliation",
       "url": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
      }
     ],
     "source_ref": "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json"
      }
     ],
     "visible_text_byte_count": 397
    },
    {
     "object_id": "paper_module:paper_module.verifier_lab_kernel",
     "id": "paper_module.verifier_lab_kernel",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Verifier Lab Kernel",
     "relative_href": "docs/paper-modules.html#paper-module-verifier-lab-kernel",
     "read_href": "docs/paper-modules.html#paper-module-verifier-lab-kernel",
     "context_href": "docs/rules-and-ideas.html#paper-module-verifier-lab-kernel",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_kernel.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/0",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public verifier-lab composition root folds bounded formal-math component result records into one leak-proof result record while separating verifier-backed, oracle-compared, provider-suggested, retrieval-miss, CP2, Evolve, and contract-rejected rows.",
     "synopsis": "The public verifier-lab composition root folds bounded formal-math component result records into one leak-proof result record while separating verifier-backed, oracle-compared, provider-suggested, retrieval-miss, CP2, Evolve, and contract-rejected rows.",
     "statement": "The public verifier-lab composition root folds bounded formal-math component result records into one leak-proof result record while separating verifier-backed, oracle-compared, provider-suggested, retrieval-miss, CP2, Evolve, and contract-rejected rows.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_kernel.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 273
    },
    {
     "object_id": "paper_module:paper_module.navigation_hologram_route_plane",
     "id": "paper_module.navigation_hologram_route_plane",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Navigation Hologram Route Plane",
     "relative_href": "docs/paper-modules.html#paper-module-navigation-hologram-route-plane",
     "read_href": "docs/paper-modules.html#paper-module-navigation-hologram-route-plane",
     "context_href": "docs/rules-and-ideas.html#paper-module-navigation-hologram-route-plane",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/navigation_hologram_route_plane.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/1",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public navigation route-plane fixture validates bounded route projections, source-coupling gates, entry floors, affordance passports, and copied navigation source-module digests without treating browse rows as authority.",
     "synopsis": "The public navigation route-plane fixture validates bounded route projections, source-coupling gates, entry floors, affordance passports, and copied navigation source-module digests without treating browse rows as authority.",
     "statement": "The public navigation route-plane fixture validates bounded route projections, source-coupling gates, entry floors, affordance passports, and copied navigation source-module digests without treating browse rows as authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/navigation_hologram_route_plane.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 256
    },
    {
     "object_id": "paper_module:paper_module.agent_route_observability_runtime",
     "id": "paper_module.agent_route_observability_runtime",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Agent Route Observability Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-agent-route-observability-runtime",
     "read_href": "docs/paper-modules.html#paper-module-agent-route-observability-runtime",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-route-observability-runtime",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_route_observability_runtime.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/2",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public route-observability fixture validates synthetic route feedback, route leases, hook-shadow advisory rows, anti-pattern debt, copied source trace manifests, and metadata-only result records without claiming live session authority.",
     "synopsis": "The public route-observability fixture validates synthetic route feedback, route leases, hook-shadow advisory rows, anti-pattern debt, copied source trace manifests, and metadata-only result records without claiming live session authority.",
     "statement": "The public route-observability fixture validates synthetic route feedback, route leases, hook-shadow advisory rows, anti-pattern debt, copied source trace manifests, and metadata-only result records without claiming live session authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_route_observability_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 273
    },
    {
     "object_id": "paper_module:paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "id": "paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Agent Benchmark Integrity Anti-Gaming Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-benchmark-integrity-anti-gaming-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/3",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agent benchmark integrity anti-gaming replay validates copied public source pattern provenance bodies and metadata-only benchmark replay rows before any score-like language is allowed.",
     "synopsis": "The agent benchmark integrity anti-gaming replay validates copied public source pattern provenance bodies and metadata-only benchmark replay rows before any score-like language is allowed.",
     "statement": "The agent benchmark integrity anti-gaming replay validates copied public source pattern provenance bodies and metadata-only benchmark replay rows before any score-like language is allowed.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 233
    },
    {
     "object_id": "paper_module:paper_module.research_replication_rubric_artifact_replay",
     "id": "paper_module.research_replication_rubric_artifact_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Research Replication Rubric Artifact Replay",
     "relative_href": "docs/paper-modules.html#paper-module-research-replication-rubric-artifact-replay",
     "read_href": "docs/paper-modules.html#paper-module-research-replication-rubric-artifact-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-research-replication-rubric-artifact-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/research_replication_rubric_artifact_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/4",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The research replication rubric-artifact replay validates source-backed public replication bundles before any paper-replication language is allowed.",
     "synopsis": "The research replication rubric-artifact replay validates source-backed public replication bundles before any paper-replication language is allowed.",
     "statement": "The research replication rubric-artifact replay validates source-backed public replication bundles before any paper-replication language is allowed.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/research_replication_rubric_artifact_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 192
    },
    {
     "object_id": "paper_module:paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "id": "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Agentic Vulnerability Discovery Patch-Proof Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay",
     "read_href": "docs/paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/5",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The agentic vulnerability discovery patch-proof replay validates metadata-only synthetic vulnerability evidence chains before any found-and-fixed security language is allowed.",
     "synopsis": "The agentic vulnerability discovery patch-proof replay validates metadata-only synthetic vulnerability evidence chains before any found-and-fixed security language is allowed.",
     "statement": "The agentic vulnerability discovery patch-proof replay validates metadata-only synthetic vulnerability evidence chains before any found-and-fixed security language is allowed.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 226
    },
    {
     "object_id": "paper_module:paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "id": "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Materials Chemistry Closed-Loop Lab-Safety Replay",
     "relative_href": "docs/paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay",
     "read_href": "docs/paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/6",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The materials chemistry lab-safety replay validates metadata-only simulator-only closed-loop rows before any materials-lab or discovery language is allowed.",
     "synopsis": "The materials chemistry lab-safety replay validates metadata-only simulator-only closed-loop rows before any materials-lab or discovery language is allowed.",
     "statement": "The materials chemistry lab-safety replay validates metadata-only simulator-only closed-loop rows before any materials-lab or discovery language is allowed.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 206
    },
    {
     "object_id": "paper_module:paper_module.certificate_kernel_execution_lab",
     "id": "paper_module.certificate_kernel_execution_lab",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Certificate Kernel Execution Lab",
     "relative_href": "docs/paper-modules.html#paper-module-certificate-kernel-execution-lab",
     "read_href": "docs/paper-modules.html#paper-module-certificate-kernel-execution-lab",
     "context_href": "docs/rules-and-ideas.html#paper-module-certificate-kernel-execution-lab",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/certificate_kernel_execution_lab.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/7",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The certificate kernel execution lab validates bounded public Lean/Lake certificate-kernel rows before any proof-adjacent claim is allowed.",
     "synopsis": "The certificate kernel execution lab validates bounded public Lean/Lake certificate-kernel rows before any proof-adjacent claim is allowed.",
     "statement": "The certificate kernel execution lab validates bounded public Lean/Lake certificate-kernel rows before any proof-adjacent claim is allowed.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/certificate_kernel_execution_lab.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 172
    },
    {
     "object_id": "paper_module:paper_module.corpus_readiness_mathlib_absence_gate",
     "id": "paper_module.corpus_readiness_mathlib_absence_gate",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Corpus Readiness Mathlib Absence Gate",
     "relative_href": "docs/paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate",
     "read_href": "docs/paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-corpus-readiness-mathlib-absence-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/corpus_readiness_mathlib_absence.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/8",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The corpus readiness Mathlib absence gate validates copied corpus/toolchain readiness bodies before any Mathlib-dependent proof or retrieval claim is allowed.",
     "synopsis": "The corpus readiness Mathlib absence gate validates copied corpus/toolchain readiness bodies before any Mathlib-dependent proof or retrieval claim is allowed.",
     "statement": "The corpus readiness Mathlib absence gate validates copied corpus/toolchain readiness bodies before any Mathlib-dependent proof or retrieval claim is allowed.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/corpus_readiness_mathlib_absence.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 196
    },
    {
     "object_id": "paper_module:paper_module.pattern_binding_contract",
     "id": "paper_module.pattern_binding_contract",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Pattern Binding Contract",
     "relative_href": "docs/paper-modules.html#paper-module-pattern-binding-contract",
     "read_href": "docs/paper-modules.html#paper-module-pattern-binding-contract",
     "context_href": "docs/rules-and-ideas.html#paper-module-pattern-binding-contract",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_binding_contract.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/9",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public pattern-binding component validates pattern rows, source bundles, authority handles, exported system bundles, and route-readiness selector overlays while keeping mined rows component-first and fixture-bound.",
     "synopsis": "The public pattern-binding component validates pattern rows, source bundles, authority handles, exported system bundles, and route-readiness selector overlays while keeping mined rows component-first and fixture-bound.",
     "statement": "The public pattern-binding component validates pattern rows, source bundles, authority handles, exported system bundles, and route-readiness selector overlays while keeping mined rows component-first and fixture-bound.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_binding_contract.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 243
    },
    {
     "object_id": "paper_module:paper_module.bridge_phase_continuity_runtime",
     "id": "paper_module.bridge_phase_continuity_runtime",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Bridge Phase Continuity Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-bridge-phase-continuity-runtime",
     "read_href": "docs/paper-modules.html#paper-module-bridge-phase-continuity-runtime",
     "context_href": "docs/rules-and-ideas.html#paper-module-bridge-phase-continuity-runtime",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bridge_phase_continuity_runtime.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/10",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public bridge-continuity fixture validates disk-first continuation packets, heartbeat/resource-pressure boundaries, resume-once semantics, worker-skip dedupe, tracked result record-write gates, and non-public-state exclusion without live bridge transport.",
     "synopsis": "The public bridge-continuity fixture validates disk-first continuation packets, heartbeat/resource-pressure boundaries, resume-once semantics, worker-skip dedupe, tracked result record-write gates, and non-public-state exclusion without live bridge transport.",
     "statement": "The public bridge-continuity fixture validates disk-first continuation packets, heartbeat/resource-pressure boundaries, resume-once semantics, worker-skip dedupe, tracked result record-write gates, and non-public-state exclusion without live bridge transport.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bridge_phase_continuity_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 291
    },
    {
     "object_id": "paper_module:paper_module.cognitive_operator_registry",
     "id": "paper_module.cognitive_operator_registry",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Cognitive Operator Registry",
     "relative_href": "docs/paper-modules.html#paper-module-cognitive-operator-registry",
     "read_href": "docs/paper-modules.html#paper-module-cognitive-operator-registry",
     "context_href": "docs/rules-and-ideas.html#paper-module-cognitive-operator-registry",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cognitive_operator_registry.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/11",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public cognitive-operator registry fixture validates operator-shape rows, active-operator dogfood result records, anti-sprawl decisions, copied source registry/standard/tool bodies, and scope limits without becoming operator source authority.",
     "synopsis": "The public cognitive-operator registry fixture validates operator-shape rows, active-operator dogfood result records, anti-sprawl decisions, copied source registry/standard/tool bodies, and scope limits without becoming operator source authority.",
     "statement": "The public cognitive-operator registry fixture validates operator-shape rows, active-operator dogfood result records, anti-sprawl decisions, copied source registry/standard/tool bodies, and scope limits without becoming operator source authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cognitive_operator_registry.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 274
    },
    {
     "object_id": "paper_module:paper_module.agent_closeout_faithfulness_audit",
     "id": "paper_module.agent_closeout_faithfulness_audit",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Agent Completion Faithfulness Audit",
     "relative_href": "docs/paper-modules.html#paper-module-agent-closeout-faithfulness-audit",
     "read_href": "docs/paper-modules.html#paper-module-agent-closeout-faithfulness-audit",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-closeout-faithfulness-audit",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_closeout_faithfulness_audit.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/12",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public completion-faithfulness fixture checks commit, ledger-cap, and pytest-span claims with real git/pytest subprocess witnesses while refusing unchecked pass overclaims.",
     "synopsis": "The public completion-faithfulness fixture checks commit, ledger-cap, and pytest-span claims with real git/pytest subprocess witnesses while refusing unchecked pass overclaims.",
     "statement": "The public completion-faithfulness fixture checks commit, ledger-cap, and pytest-span claims with real git/pytest subprocess witnesses while refusing unchecked pass overclaims.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_closeout_faithfulness_audit.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 212
    },
    {
     "object_id": "paper_module:paper_module.cold_reader_route_map",
     "id": "paper_module.cold_reader_route_map",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Cold-Reader Route Map",
     "relative_href": "docs/paper-modules.html#paper-module-cold-reader-route-map",
     "read_href": "docs/paper-modules.html#paper-module-cold-reader-route-map",
     "context_href": "docs/rules-and-ideas.html#paper-module-cold-reader-route-map",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_reader_route_map.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/13",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public cold-reader route-map fixture validates first-run command order, docs refs, result record refs, scope limits, copied cold-entry source-module digests, and non-public-state exclusion without becoming route registry control.",
     "synopsis": "The public cold-reader route-map fixture validates first-run command order, docs refs, result record refs, scope limits, copied cold-entry source-module digests, and non-public-state exclusion without becoming route registry control.",
     "statement": "The public cold-reader route-map fixture validates first-run command order, docs refs, result record refs, scope limits, copied cold-entry source-module digests, and non-public-state exclusion without becoming route registry control.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_reader_route_map.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 255
    },
    {
     "object_id": "paper_module:paper_module.proof_diagnostic_evidence_spine",
     "id": "paper_module.proof_diagnostic_evidence_spine",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Proof Diagnostic Evidence Spine",
     "relative_href": "docs/paper-modules.html#paper-module-proof-diagnostic-evidence-spine",
     "read_href": "docs/paper-modules.html#paper-module-proof-diagnostic-evidence-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-proof-diagnostic-evidence-spine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_diagnostic_evidence_spine.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/14",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public proof-diagnostic evidence spine fixture validates Ring2 diagnostic result record refs, copied runtime artifact digests, provider/proof-body exclusions, stale-coupling visibility, and scope limits without becoming formal proof authority.",
     "synopsis": "The public proof-diagnostic evidence spine fixture validates Ring2 diagnostic result record refs, copied runtime artifact digests, provider/proof-body exclusions, stale-coupling visibility, and scope limits without becoming formal proof authority.",
     "statement": "The public proof-diagnostic evidence spine fixture validates Ring2 diagnostic result record refs, copied runtime artifact digests, provider/proof-body exclusions, stale-coupling visibility, and scope limits without becoming formal proof authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_diagnostic_evidence_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 279
    },
    {
     "object_id": "paper_module:paper_module.proof_derived_governed_mutation_authorization",
     "id": "paper_module.proof_derived_governed_mutation_authorization",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Proof-Derived Governed Mutation Authorization",
     "relative_href": "docs/paper-modules.html#paper-module-proof-derived-governed-mutation-authorization",
     "read_href": "docs/paper-modules.html#paper-module-proof-derived-governed-mutation-authorization",
     "context_href": "docs/rules-and-ideas.html#paper-module-proof-derived-governed-mutation-authorization",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_derived_governed_mutation_authorization.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/15",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public proof-derived governed-mutation fixture validates synthetic mutation proposals through proof cells, visible pre-execution policy verdicts, logged side effects, rollback result records, cold replay, negative cases, and copied source internal control bodies without granting live mutation authority.",
     "synopsis": "The public proof-derived governed-mutation fixture validates synthetic mutation proposals through proof cells, visible pre-execution policy verdicts, logged side effects, rollback result records, cold replay, negative cases, and copied source internal control bodies without granting live mutation authority.",
     "statement": "The public proof-derived governed-mutation fixture validates synthetic mutation proposals through proof cells, visible pre-execution policy verdicts, logged side effects, rollback result records, cold replay, negative cases, and copied source internal control bodies without granting live mutation authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_derived_governed_mutation_authorization.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 354
    },
    {
     "object_id": "paper_module:paper_module.durable_agent_work_landing_replay",
     "id": "paper_module.durable_agent_work_landing_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Durable Agent Work-Landing Replay",
     "relative_href": "docs/paper-modules.html#paper-module-durable-agent-work-landing-replay",
     "read_href": "docs/paper-modules.html#paper-module-durable-agent-work-landing-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-durable-agent-work-landing-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/durable_agent_work_landing_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/16",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public durable work-landing replay fixture validates recorded agent landing rows, copied source internal control source bodies, validation-before-commit ordering, HEAD-advance evidence, blocker capture, and work log completion without performing live Git work.",
     "synopsis": "The public durable work-landing replay fixture validates recorded agent landing rows, copied source internal control source bodies, validation-before-commit ordering, HEAD-advance evidence, blocker capture, and work log completion without performing live Git work.",
     "statement": "The public durable work-landing replay fixture validates recorded agent landing rows, copied source internal control source bodies, validation-before-commit ordering, HEAD-advance evidence, blocker capture, and work log completion without performing live Git work.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/durable_agent_work_landing_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 298
    },
    {
     "object_id": "paper_module:paper_module.work_landing_control_spine",
     "id": "paper_module.work_landing_control_spine",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Work Landing Control Spine",
     "relative_href": "docs/paper-modules.html#paper-module-work-landing-control-spine",
     "read_href": "docs/paper-modules.html#paper-module-work-landing-control-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-work-landing-control-spine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/work_landing_control_spine.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/17",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public work-landing control spine validates copied work-landing internal control source bodies without authorizing live Git, ledger, claim-launch, private-index, public sharing, or launch operations.",
     "synopsis": "The public work-landing control spine validates copied work-landing internal control source bodies without authorizing live Git, ledger, claim-launch, private-index, public sharing, or launch operations.",
     "statement": "The public work-landing control spine validates copied work-landing internal control source bodies without authorizing live Git, ledger, claim-launch, private-index, public sharing, or launch operations.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/work_landing_control_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 230
    },
    {
     "object_id": "paper_module:paper_module.executable_doctrine_grammar",
     "id": "paper_module.executable_doctrine_grammar",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Executable Doctrine Grammar",
     "relative_href": "docs/paper-modules.html#paper-module-executable-doctrine-grammar",
     "read_href": "docs/paper-modules.html#paper-module-executable-doctrine-grammar",
     "context_href": "docs/rules-and-ideas.html#paper-module-executable-doctrine-grammar",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/executable_doctrine_grammar.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/18",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public executable-doctrine grammar fixture validates public standard rows, paper-module sections, negative cases, copied executable-grammar and standards/type-plane source-module bodies, and metadata-only result records without claiming doctrine completeness.",
     "synopsis": "The public executable-doctrine grammar fixture validates public standard rows, paper-module sections, negative cases, copied executable-grammar and standards/type-plane source-module bodies, and metadata-only result records without claiming doctrine completeness.",
     "statement": "The public executable-doctrine grammar fixture validates public standard rows, paper-module sections, negative cases, copied executable-grammar and standards/type-plane source-module bodies, and metadata-only result records without claiming doctrine completeness.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/executable_doctrine_grammar.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 291
    },
    {
     "object_id": "paper_module:paper_module.macro_projection_import_protocol",
     "id": "paper_module.macro_projection_import_protocol",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Source Projection Import Protocol",
     "relative_href": "docs/paper-modules.html#paper-module-macro-projection-import-protocol",
     "read_href": "docs/paper-modules.html#paper-module-macro-projection-import-protocol",
     "context_href": "docs/rules-and-ideas.html#paper-module-macro-projection-import-protocol",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/macro_projection_import_protocol.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/19",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public source-projection import protocol validates classified source-to-Microcosm projection cells, per-slice source-module manifests, digest relations, omission result records, intake statuses, and scope limits without claiming source or launch-scope decision.",
     "synopsis": "The public source-projection import protocol validates classified source-to-Microcosm projection cells, per-slice source-module manifests, digest relations, omission result records, intake statuses, and scope limits without claiming source or launch-scope decision.",
     "statement": "The public source-projection import protocol validates classified source-to-Microcosm projection cells, per-slice source-module manifests, digest relations, omission result records, intake statuses, and scope limits without claiming source or launch-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/macro_projection_import_protocol.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 299
    },
    {
     "object_id": "paper_module:paper_module.mission_transaction_work_spine",
     "id": "paper_module.mission_transaction_work_spine",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Mission Transaction Work Spine",
     "relative_href": "docs/paper-modules.html#paper-module-mission-transaction-work-spine",
     "read_href": "docs/paper-modules.html#paper-module-mission-transaction-work-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-mission-transaction-work-spine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mission_transaction_work_spine.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/20",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public mission-transaction fixture validates work-landing, claim, dependency, scoped-commit, checkpoint-lane, result record-drain, completion, and copied control source-module contracts without mutating live ledgers or git.",
     "synopsis": "The public mission-transaction fixture validates work-landing, claim, dependency, scoped-commit, checkpoint-lane, result record-drain, completion, and copied control source-module contracts without mutating live ledgers or git.",
     "statement": "The public mission-transaction fixture validates work-landing, claim, dependency, scoped-commit, checkpoint-lane, result record-drain, completion, and copied control source-module contracts without mutating live ledgers or git.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mission_transaction_work_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 258
    },
    {
     "object_id": "paper_module:paper_module.formal_math_readiness_gate",
     "id": "paper_module.formal_math_readiness_gate",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Formal Math Readiness Gate",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-readiness-gate",
     "read_href": "docs/paper-modules.html#paper-module-formal-math-readiness-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-math-readiness-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_readiness_gate.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/21",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public formal-math readiness gate validates declared corpus, tactic, premise, routing, provider-budget, source-module manifest, copied PROVER probe body, and negative-case boundaries without claiming Lean/Lake or proof authority.",
     "synopsis": "The public formal-math readiness gate validates declared corpus, tactic, premise, routing, provider-budget, source-module manifest, copied PROVER probe body, and negative-case boundaries without claiming Lean/Lake or proof authority.",
     "statement": "The public formal-math readiness gate validates declared corpus, tactic, premise, routing, provider-budget, source-module manifest, copied PROVER probe body, and negative-case boundaries without claiming Lean/Lake or proof authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_readiness_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 260
    },
    {
     "object_id": "paper_module:paper_module.formal_math_lean_proof_witness",
     "id": "paper_module.formal_math_lean_proof_witness",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Formal Math Lean Proof Witness",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-lean-proof-witness",
     "read_href": "docs/paper-modules.html#paper-module-formal-math-lean-proof-witness",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-math-lean-proof-witness",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_lean_proof_witness.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/22",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public Lean proof witness runs local Lean/Lake over a tiny synthetic project, validates copied public source-module digests and negative cases, and emits redacted result records without claiming general proof authority.",
     "synopsis": "The public Lean proof witness runs local Lean/Lake over a tiny synthetic project, validates copied public source-module digests and negative cases, and emits redacted result records without claiming general proof authority.",
     "statement": "The public Lean proof witness runs local Lean/Lake over a tiny synthetic project, validates copied public source-module digests and negative cases, and emits redacted result records without claiming general proof authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_lean_proof_witness.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 254
    },
    {
     "object_id": "paper_module:paper_module.formal_math_verifier_trace_repair_loop",
     "id": "paper_module.formal_math_verifier_trace_repair_loop",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Formal Math Verifier Trace Repair Loop",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop",
     "read_href": "docs/paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-math-verifier-trace-repair-loop",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_verifier_trace_repair_loop.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/23",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public verifier-trace repair fixture validates copied Ring2 failure taxonomy, graph-update, oracle-repair contrast rows, source-module digests, negative cases, and one deterministic toy rerun without claiming proof authority.",
     "synopsis": "The public verifier-trace repair fixture validates copied Ring2 failure taxonomy, graph-update, oracle-repair contrast rows, source-module digests, negative cases, and one deterministic toy rerun without claiming proof authority.",
     "statement": "The public verifier-trace repair fixture validates copied Ring2 failure taxonomy, graph-update, oracle-repair contrast rows, source-module digests, negative cases, and one deterministic toy rerun without claiming proof authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_verifier_trace_repair_loop.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 268
    },
    {
     "object_id": "paper_module:paper_module.formal_evidence_cell_anchor_resolver",
     "id": "paper_module.formal_evidence_cell_anchor_resolver",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Formal Evidence Cell Anchor Resolver",
     "relative_href": "docs/paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver",
     "read_href": "docs/paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-evidence-cell-anchor-resolver",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_evidence_cell_anchor_resolver.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/24",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The formal evidence cell anchor resolver binds proof-language paper claims to public evidence cells, source anchors, machine-anchor metadata, copied source modules, and negative-case result records without claiming formal-result correctness.",
     "synopsis": "The formal evidence cell anchor resolver binds proof-language paper claims to public evidence cells, source anchors, machine-anchor metadata, copied source modules, and negative-case result records without claiming formal-result correctness.",
     "statement": "The formal evidence cell anchor resolver binds proof-language paper claims to public evidence cells, source anchors, machine-anchor metadata, copied source modules, and negative-case result records without claiming formal-result correctness.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_evidence_cell_anchor_resolver.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 278
    },
    {
     "object_id": "paper_module:paper_module.formal_math_premise_retrieval",
     "id": "paper_module.formal_math_premise_retrieval",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Formal Math Premise Retrieval",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-premise-retrieval",
     "read_href": "docs/paper-modules.html#paper-module-formal-math-premise-retrieval",
     "context_href": "docs/rules-and-ideas.html#paper-module-formal-math-premise-retrieval",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_premise_retrieval.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/25",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Formal math premise retrieval validates copied public Lean/Std premise metadata, query scoring, context budgets, strategy gates, body-floor provenance, and leakage negative cases without claiming proof authority.",
     "synopsis": "Formal math premise retrieval validates copied public Lean/Std premise metadata, query scoring, context budgets, strategy gates, body-floor provenance, and leakage negative cases without claiming proof authority.",
     "statement": "Formal math premise retrieval validates copied public Lean/Std premise metadata, query scoring, context budgets, strategy gates, body-floor provenance, and leakage negative cases without claiming proof authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_premise_retrieval.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 242
    },
    {
     "object_id": "paper_module:paper_module.lean_std_premise_index",
     "id": "paper_module.lean_std_premise_index",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Lean/Std Premise Index",
     "relative_href": "docs/paper-modules.html#paper-module-lean-std-premise-index",
     "read_href": "docs/paper-modules.html#paper-module-lean-std-premise-index",
     "context_href": "docs/rules-and-ideas.html#paper-module-lean-std-premise-index",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/lean_std_premise_index.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/26",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Lean/Std premise index validates a copied public Lean/Std descriptor catalog plus Ring2 premise-retrieval source bodies without claiming proof, Mathlib, Lean/Lake, provider, launch, or theorem-correctness authority.",
     "synopsis": "The Lean/Std premise index validates a copied public Lean/Std descriptor catalog plus Ring2 premise-retrieval source bodies without claiming proof, Mathlib, Lean/Lake, provider, launch, or theorem-correctness authority.",
     "statement": "The Lean/Std premise index validates a copied public Lean/Std descriptor catalog plus Ring2 premise-retrieval source bodies without claiming proof, Mathlib, Lean/Lake, provider, launch, or theorem-correctness authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/lean_std_premise_index.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 242
    },
    {
     "object_id": "paper_module:paper_module.world_model_projection_drift_control_room",
     "id": "paper_module.world_model_projection_drift_control_room",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "World-Model Projection Drift Control Room",
     "relative_href": "docs/paper-modules.html#paper-module-world-model-projection-drift-control-room",
     "read_href": "docs/paper-modules.html#paper-module-world-model-projection-drift-control-room",
     "context_href": "docs/rules-and-ideas.html#paper-module-world-model-projection-drift-control-room",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/world_model_projection_drift_control_room.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/27",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The world-model projection drift control room validates public metadata-only projection-drift rows and copied source-module bodies without treating projections as source authority or repair authority.",
     "synopsis": "The world-model projection drift control room validates public metadata-only projection-drift rows and copied source-module bodies without treating projections as source authority or repair authority.",
     "statement": "The world-model projection drift control room validates public metadata-only projection-drift rows and copied source-module bodies without treating projections as source authority or repair authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/world_model_projection_drift_control_room.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 242
    },
    {
     "object_id": "paper_module:paper_module.public_reveal_walkthrough",
     "id": "paper_module.public_reveal_walkthrough",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Public Reveal Walkthrough",
     "relative_href": "docs/paper-modules.html#paper-module-public-reveal-walkthrough",
     "read_href": "docs/paper-modules.html#paper-module-public-reveal-walkthrough",
     "context_href": "docs/rules-and-ideas.html#paper-module-public-reveal-walkthrough",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/public_reveal_walkthrough.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/28",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public reveal walkthrough validates a ten-minute cold-reader path through commands, routes, evidence refs, source-open body imports, negative cases, and scope limits without claiming launch-scope decision or private-system equivalence.",
     "synopsis": "The public reveal walkthrough validates a ten-minute cold-reader path through commands, routes, evidence refs, source-open body imports, negative cases, and scope limits without claiming launch-scope decision or private-system equivalence.",
     "statement": "The public reveal walkthrough validates a ten-minute cold-reader path through commands, routes, evidence refs, source-open body imports, negative cases, and scope limits without claiming launch-scope decision or private-system equivalence.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/public_reveal_walkthrough.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 265
    },
    {
     "object_id": "paper_module:paper_module.standards_meta_diagnostics",
     "id": "paper_module.standards_meta_diagnostics",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Standards Meta Diagnostics",
     "relative_href": "docs/paper-modules.html#paper-module-standards-meta-diagnostics",
     "read_href": "docs/paper-modules.html#paper-module-standards-meta-diagnostics",
     "context_href": "docs/rules-and-ideas.html#paper-module-standards-meta-diagnostics",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/standards_meta_diagnostics.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/29",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Terminal public coverage diagnostic: verifies every accepted component stays mapped to a standard, runtime contract, result record, and scope limit.",
     "synopsis": "Terminal public coverage diagnostic: verifies every accepted component stays mapped to a standard, runtime contract, result record, and scope limit.",
     "statement": "Terminal public coverage diagnostic: verifies every accepted component stays mapped to a standard, runtime contract, result record, and scope limit.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/standards_meta_diagnostics.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 175
    },
    {
     "object_id": "paper_module:paper_module.finance_forecast_evaluation_spine",
     "id": "paper_module.finance_forecast_evaluation_spine",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Finance Forecast Evaluation Spine",
     "relative_href": "docs/paper-modules.html#paper-module-finance-forecast-evaluation-spine",
     "read_href": "docs/paper-modules.html#paper-module-finance-forecast-evaluation-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-finance-forecast-evaluation-spine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/finance_forecast_evaluation_spine.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/30",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Forecast-evaluation component: Diebold-Mariano / Hansen-SPA / stationary-bootstrap stats over synthetic fixtures with typed refusal discipline; no market authority.",
     "synopsis": "Forecast-evaluation component: Diebold-Mariano / Hansen-SPA / stationary-bootstrap stats over synthetic fixtures with typed refusal discipline; no market authority.",
     "statement": "Forecast-evaluation component: Diebold-Mariano / Hansen-SPA / stationary-bootstrap stats over synthetic fixtures with typed refusal discipline; no market authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/finance_forecast_evaluation_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 198
    },
    {
     "object_id": "paper_module:paper_module.engine_room_demo",
     "id": "paper_module.engine_room_demo",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Demo",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-demo",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-demo",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-demo",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_demo.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/31",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Composition component: verifies the 14 staged Engine Room jewel targets and their owned bundle surfaces through the public fixture chain; composition contract only.",
     "synopsis": "Composition component: verifies the 14 staged Engine Room jewel targets and their owned bundle surfaces through the public fixture chain; composition contract only.",
     "statement": "Composition component: verifies the 14 staged Engine Room jewel targets and their owned bundle surfaces through the public fixture chain; composition contract only.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_demo.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 181
    },
    {
     "object_id": "paper_module:paper_module.agent_memory_temporal_conflict_replay",
     "id": "paper_module.agent_memory_temporal_conflict_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Agent Memory Temporal-Conflict Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-memory-temporal-conflict-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-memory-temporal-conflict-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-memory-temporal-conflict-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_memory_temporal_conflict_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/32",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Synthetic replay fixture for an agent-memory honesty contract: models scoped-preference episodes and checks temporal-conflict handling; no live memory product.",
     "synopsis": "Synthetic replay fixture for an agent-memory honesty contract: models scoped-preference episodes and checks temporal-conflict handling; no live memory product.",
     "statement": "Synthetic replay fixture for an agent-memory honesty contract: models scoped-preference episodes and checks temporal-conflict handling; no live memory product.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_memory_temporal_conflict_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 197
    },
    {
     "object_id": "paper_module:paper_module.agent_monitor_redteam_falsification_replay",
     "id": "paper_module.agent_monitor_redteam_falsification_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Agent Monitor Redteam Falsification Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-monitor-redteam-falsification-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_monitor_redteam_falsification_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/33",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Synthetic regression drilldown for a monitor/redteam honesty contract; checks falsification handling, negative cases, non-public-state scan, scope limits.",
     "synopsis": "Synthetic regression drilldown for a monitor/redteam honesty contract; checks falsification handling, negative cases, non-public-state scan, scope limits.",
     "statement": "Synthetic regression drilldown for a monitor/redteam honesty contract; checks falsification handling, negative cases, non-public-state scan, scope limits.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_monitor_redteam_falsification_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 197
    },
    {
     "object_id": "paper_module:paper_module.agent_sabotage_scheming_monitor_replay",
     "id": "paper_module.agent_sabotage_scheming_monitor_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Agent Sabotage Scheming-Monitor Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-sabotage-scheming-monitor-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sabotage_scheming_monitor_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/34",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Drilldown regression contract for synthetic sabotage/scheming monitor claims: replays task episodes, action traces, monitor scores, counterfactual/cold replay.",
     "synopsis": "Drilldown regression contract for synthetic sabotage/scheming monitor claims: replays task episodes, action traces, monitor scores, counterfactual/cold replay.",
     "statement": "Drilldown regression contract for synthetic sabotage/scheming monitor claims: replays task episodes, action traces, monitor scores, counterfactual/cold replay.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sabotage_scheming_monitor_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 198
    },
    {
     "object_id": "paper_module:paper_module.agent_sandbox_policy_escape_replay",
     "id": "paper_module.agent_sandbox_policy_escape_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Agent Sandbox Policy-Escape Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-sandbox-policy-escape-replay",
     "read_href": "docs/paper-modules.html#paper-module-agent-sandbox-policy-escape-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-agent-sandbox-policy-escape-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sandbox_policy_escape_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/35",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Validator-backed public refactor of source agent_execution_trace for sandbox/security: metadata-only trace spans, pre-exec policy verdicts, side-effect diffs",
     "synopsis": "Validator-backed public refactor of source agent_execution_trace for sandbox/security: metadata-only trace spans, pre-exec policy verdicts, side-effect diffs",
     "statement": "Validator-backed public refactor of source agent_execution_trace for sandbox/security: metadata-only trace spans, pre-exec policy verdicts, side-effect diffs",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sandbox_policy_escape_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 192
    },
    {
     "object_id": "paper_module:paper_module.belief_state_process_reward_replay",
     "id": "paper_module.belief_state_process_reward_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Belief-State Process Reward Replay",
     "relative_href": "docs/paper-modules.html#paper-module-belief-state-process-reward-replay",
     "read_href": "docs/paper-modules.html#paper-module-belief-state-process-reward-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-belief-state-process-reward-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/belief_state_process_reward_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/36",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Public projection of a belief-state process-reward claim contract, backed by the agent-execution trace refactor and copied source bodies.",
     "synopsis": "Public projection of a belief-state process-reward claim contract, backed by the agent-execution trace refactor and copied source bodies.",
     "statement": "Public projection of a belief-state process-reward claim contract, backed by the agent-execution trace refactor and copied source bodies.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/belief_state_process_reward_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 172
    },
    {
     "object_id": "paper_module:paper_module.sleeper_memory_poisoning_quarantine_replay",
     "id": "paper_module.sleeper_memory_poisoning_quarantine_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Sleeper Memory Poisoning Quarantine Replay",
     "relative_href": "docs/paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay",
     "read_href": "docs/paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-sleeper-memory-poisoning-quarantine-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/sleeper_memory_poisoning_quarantine_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/37",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Synthetic replay fixture for a persistent-memory security contract: quarantine of poisoned memory, audit refs, rerun result records, negative cases, authority",
     "synopsis": "Synthetic replay fixture for a persistent-memory security contract: quarantine of poisoned memory, audit refs, rerun result records, negative cases, authority",
     "statement": "Synthetic replay fixture for a persistent-memory security contract: quarantine of poisoned memory, audit refs, rerun result records, negative cases, authority",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/sleeper_memory_poisoning_quarantine_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 201
    },
    {
     "object_id": "paper_module:paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "id": "paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Indirect Prompt-Injection Information-Flow Policy Replay",
     "relative_href": "docs/paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay",
     "read_href": "docs/paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-indirect-prompt-injection-information-flow-policy-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/38",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Validator-backed claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action.",
     "synopsis": "Validator-backed claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action.",
     "statement": "Validator-backed claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 211
    },
    {
     "object_id": "paper_module:paper_module.mcp_tool_authority_replay",
     "id": "paper_module.mcp_tool_authority_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "MCP Tool Authority Replay",
     "relative_href": "docs/paper-modules.html#paper-module-mcp-tool-authority-replay",
     "read_href": "docs/paper-modules.html#paper-module-mcp-tool-authority-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-mcp-tool-authority-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mcp_tool_authority_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/39",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Synthetic MCP-like replay fixture for a tool-authority claim contract: replay result records, negative cases, scope limits; no live MCP/provider/account secret",
     "synopsis": "Synthetic MCP-like replay fixture for a tool-authority claim contract: replay result records, negative cases, scope limits; no live MCP/provider/account secret",
     "statement": "Synthetic MCP-like replay fixture for a tool-authority claim contract: replay result records, negative cases, scope limits; no live MCP/provider/account secret",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mcp_tool_authority_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 185
    },
    {
     "object_id": "paper_module:paper_module.tactic_portfolio_availability",
     "id": "paper_module.tactic_portfolio_availability",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Tactic Portfolio Availability",
     "relative_href": "docs/paper-modules.html#paper-module-tactic-portfolio-availability",
     "read_href": "docs/paper-modules.html#paper-module-tactic-portfolio-availability",
     "context_href": "docs/rules-and-ideas.html#paper-module-tactic-portfolio-availability",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tactic_portfolio_availability.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/40",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Environment-scoped tactic availability rows gate downstream tactic routing without becoming proof, benchmark, or launch-scope decision.",
     "synopsis": "Environment-scoped tactic availability rows gate downstream tactic routing without becoming proof, benchmark, or launch-scope decision.",
     "statement": "Environment-scoped tactic availability rows gate downstream tactic routing without becoming proof, benchmark, or launch-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tactic_portfolio_availability.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 165
    },
    {
     "object_id": "paper_module:paper_module.target_shape_tactic_routing",
     "id": "paper_module.target_shape_tactic_routing",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Target Shape Tactic Routing",
     "relative_href": "docs/paper-modules.html#paper-module-target-shape-tactic-routing",
     "read_href": "docs/paper-modules.html#paper-module-target-shape-tactic-routing",
     "context_href": "docs/rules-and-ideas.html#paper-module-target-shape-tactic-routing",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/target_shape_tactic_routing.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/41",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Pre-execution tactic routing admits or rejects tactics from target shape and probe evidence without proving the target.",
     "synopsis": "Pre-execution tactic routing admits or rejects tactics from target shape and probe evidence without proving the target.",
     "statement": "Pre-execution tactic routing admits or rejects tactics from target shape and probe evidence without proving the target.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/target_shape_tactic_routing.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 147
    },
    {
     "object_id": "paper_module:paper_module.ring2_premise_precision_recall",
     "id": "paper_module.ring2_premise_precision_recall",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Ring-2 Premise Precision Recall",
     "relative_href": "docs/paper-modules.html#paper-module-ring2-premise-precision-recall",
     "read_href": "docs/paper-modules.html#paper-module-ring2-premise-precision-recall",
     "context_href": "docs/rules-and-ideas.html#paper-module-ring2-premise-precision-recall",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/ring2_premise_precision_recall.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/42",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "After-the-fact premise retrieval metrics separate retrieval misses from proof failures without becoming theorem authority.",
     "synopsis": "After-the-fact premise retrieval metrics separate retrieval misses from proof failures without becoming theorem authority.",
     "statement": "After-the-fact premise retrieval metrics separate retrieval misses from proof failures without becoming theorem authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/ring2_premise_precision_recall.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 154
    },
    {
     "object_id": "paper_module:paper_module.mathematical_strategy_atlas",
     "id": "paper_module.mathematical_strategy_atlas",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Mathematical Strategy Atlas",
     "relative_href": "docs/paper-modules.html#paper-module-mathematical-strategy-atlas",
     "read_href": "docs/paper-modules.html#paper-module-mathematical-strategy-atlas",
     "context_href": "docs/rules-and-ideas.html#paper-module-mathematical-strategy-atlas",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mathematical_strategy_atlas.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/43",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Pre-oracle strategy hypotheses make the first proof-search move inspectable without claiming proof or provider authority.",
     "synopsis": "Pre-oracle strategy hypotheses make the first proof-search move inspectable without claiming proof or provider authority.",
     "statement": "Pre-oracle strategy hypotheses make the first proof-search move inspectable without claiming proof or provider authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mathematical_strategy_atlas.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 149
    },
    {
     "object_id": "paper_module:paper_module.verifier_lab_execution_spine",
     "id": "paper_module.verifier_lab_execution_spine",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Verifier Lab Execution Spine",
     "relative_href": "docs/paper-modules.html#paper-module-verifier-lab-execution-spine",
     "read_href": "docs/paper-modules.html#paper-module-verifier-lab-execution-spine",
     "context_href": "docs/rules-and-ideas.html#paper-module-verifier-lab-execution-spine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_execution_spine.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/44",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Bounded public verifier execution result records witness command execution without upgrading output into theorem authority.",
     "synopsis": "Bounded public verifier execution result records witness command execution without upgrading output into theorem authority.",
     "statement": "Bounded public verifier execution result records witness command execution without upgrading output into theorem authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_execution_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 152
    },
    {
     "object_id": "paper_module:paper_module.bounded_autonomy_campaign_packet",
     "id": "paper_module.bounded_autonomy_campaign_packet",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Bounded Autonomy Campaign Packet",
     "relative_href": "docs/paper-modules.html#paper-module-bounded-autonomy-campaign-packet",
     "read_href": "docs/paper-modules.html#paper-module-bounded-autonomy-campaign-packet",
     "context_href": "docs/rules-and-ideas.html#paper-module-bounded-autonomy-campaign-packet",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bounded_autonomy_campaign_packet.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/45",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Bounded autonomy campaign packets propose guarded agent work without authorizing source-file changes or unsupervised repair.",
     "synopsis": "Bounded autonomy campaign packets propose guarded agent work without authorizing source-file changes or unsupervised repair.",
     "statement": "Bounded autonomy campaign packets propose guarded agent work without authorizing source-file changes or unsupervised repair.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bounded_autonomy_campaign_packet.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 157
    },
    {
     "object_id": "paper_module:paper_module.computer_use_action_trace_replay",
     "id": "paper_module.computer_use_action_trace_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Computer-Use Action Trace Replay",
     "relative_href": "docs/paper-modules.html#paper-module-computer-use-action-trace-replay",
     "read_href": "docs/paper-modules.html#paper-module-computer-use-action-trace-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-computer-use-action-trace-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/computer_use_action_trace_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/46",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Validator-backed public replay for synthetic computer-use action traces under the route-observability runtime.",
     "synopsis": "Validator-backed public replay for synthetic computer-use action traces under the route-observability runtime.",
     "statement": "Validator-backed public replay for synthetic computer-use action traces under the route-observability runtime.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/computer_use_action_trace_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 143
    },
    {
     "object_id": "paper_module:paper_module.concurrency_mission_control",
     "id": "paper_module.concurrency_mission_control",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Concurrency Mission Control",
     "relative_href": "docs/paper-modules.html#paper-module-concurrency-mission-control",
     "read_href": "docs/paper-modules.html#paper-module-concurrency-mission-control",
     "context_href": "docs/rules-and-ideas.html#paper-module-concurrency-mission-control",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/concurrency_mission_control.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/47",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Concurrency Mission Control validates metadata-only coordination result records without becoming a live scheduler or production concurrency proof.",
     "synopsis": "Concurrency Mission Control validates metadata-only coordination result records without becoming a live scheduler or production concurrency proof.",
     "statement": "Concurrency Mission Control validates metadata-only coordination result records without becoming a live scheduler or production concurrency proof.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/concurrency_mission_control.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 174
    },
    {
     "object_id": "paper_module:paper_module.doctrine_fact_claim_audit",
     "id": "paper_module.doctrine_fact_claim_audit",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Doctrine Fact Claim Audit",
     "relative_href": "docs/paper-modules.html#paper-module-doctrine-fact-claim-audit",
     "read_href": "docs/paper-modules.html#paper-module-doctrine-fact-claim-audit",
     "context_href": "docs/rules-and-ideas.html#paper-module-doctrine-fact-claim-audit",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/doctrine_fact_claim_audit.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/48",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Doctrine Fact Claim Audit rejects wrong fact counts and dead anchors without claiming comprehension or route completeness.",
     "synopsis": "Doctrine Fact Claim Audit rejects wrong fact counts and dead anchors without claiming comprehension or route completeness.",
     "statement": "Doctrine Fact Claim Audit rejects wrong fact counts and dead anchors without claiming comprehension or route completeness.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/doctrine_fact_claim_audit.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 148
    },
    {
     "object_id": "paper_module:paper_module.self_ignorance_coverage_ledger",
     "id": "paper_module.self_ignorance_coverage_ledger",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Self-Ignorance Coverage Ledger",
     "relative_href": "docs/paper-modules.html#paper-module-self-ignorance-coverage-ledger",
     "read_href": "docs/paper-modules.html#paper-module-self-ignorance-coverage-ledger",
     "context_href": "docs/rules-and-ideas.html#paper-module-self-ignorance-coverage-ledger",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/self_ignorance_coverage_ledger.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/49",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Self-Ignorance Coverage Ledger counts known coverage debt while refusing unknown-unknown or absence-proof claims.",
     "synopsis": "Self-Ignorance Coverage Ledger counts known coverage debt while refusing unknown-unknown or absence-proof claims.",
     "statement": "Self-Ignorance Coverage Ledger counts known coverage debt while refusing unknown-unknown or absence-proof claims.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/self_ignorance_coverage_ledger.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 144
    },
    {
     "object_id": "paper_module:paper_module.tool_server_pressure_inventory",
     "id": "paper_module.tool_server_pressure_inventory",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Tool Server Pressure Inventory",
     "relative_href": "docs/paper-modules.html#paper-module-tool-server-pressure-inventory",
     "read_href": "docs/paper-modules.html#paper-module-tool-server-pressure-inventory",
     "context_href": "docs/rules-and-ideas.html#paper-module-tool-server-pressure-inventory",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tool_server_pressure_inventory.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/50",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Tool Server Pressure Inventory validates public pressure-inventory fixtures without reading or mutating live host process state.",
     "synopsis": "Tool Server Pressure Inventory validates public pressure-inventory fixtures without reading or mutating live host process state.",
     "statement": "Tool Server Pressure Inventory validates public pressure-inventory fixtures without reading or mutating live host process state.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tool_server_pressure_inventory.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 159
    },
    {
     "object_id": "paper_module:paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "id": "paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Mechanistic Interpretability Circuit Attribution Replay",
     "relative_href": "docs/paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay",
     "read_href": "docs/paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-mechanistic-interpretability-circuit-attribution-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/51",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Mechanistic interpretability replay validates public circuit-attribution result record contracts without live model access or private activation export.",
     "synopsis": "Mechanistic interpretability replay validates public circuit-attribution result record contracts without live model access or private activation export.",
     "statement": "Mechanistic interpretability replay validates public circuit-attribution result record contracts without live model access or private activation export.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 208
    },
    {
     "object_id": "paper_module:paper_module.spatial_world_model_counterfactual_simulation_replay",
     "id": "paper_module.spatial_world_model_counterfactual_simulation_replay",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Spatial World Model Counterfactual Simulation Replay",
     "relative_href": "docs/paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay",
     "read_href": "docs/paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay",
     "context_href": "docs/rules-and-ideas.html#paper-module-spatial-world-model-counterfactual-simulation-replay",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/spatial_world_model_counterfactual_simulation_replay.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/52",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Spatial world-model replay validates synthetic counterfactual metadata without robot operation, simulator product claims, or real-world accuracy claims.",
     "synopsis": "Spatial world-model replay validates synthetic counterfactual metadata without robot operation, simulator product claims, or real-world accuracy claims.",
     "statement": "Spatial world-model replay validates synthetic counterfactual metadata without robot operation, simulator product claims, or real-world accuracy claims.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/spatial_world_model_counterfactual_simulation_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 205
    },
    {
     "object_id": "paper_module:paper_module.prediction_oracle_reconciliation",
     "id": "paper_module.prediction_oracle_reconciliation",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Prediction Oracle Reconciliation",
     "relative_href": "docs/paper-modules.html#paper-module-prediction-oracle-reconciliation",
     "read_href": "docs/paper-modules.html#paper-module-prediction-oracle-reconciliation",
     "context_href": "docs/rules-and-ideas.html#paper-module-prediction-oracle-reconciliation",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/prediction_oracle_reconciliation.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/53",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Prediction Oracle Reconciliation exercises synthetic forecast reconciliation gates without forecasting, trading, provider, or live-market authority.",
     "synopsis": "Prediction Oracle Reconciliation exercises synthetic forecast reconciliation gates without forecasting, trading, provider, or live-market authority.",
     "statement": "Prediction Oracle Reconciliation exercises synthetic forecast reconciliation gates without forecasting, trading, provider, or live-market authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/prediction_oracle_reconciliation.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 181
    },
    {
     "object_id": "paper_module:paper_module.provider_context_recipe_budget",
     "id": "paper_module.provider_context_recipe_budget",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Provider Context Recipe Budget",
     "relative_href": "docs/paper-modules.html#paper-module-provider-context-recipe-budget",
     "read_href": "docs/paper-modules.html#paper-module-provider-context-recipe-budget",
     "context_href": "docs/rules-and-ideas.html#paper-module-provider-context-recipe-budget",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/provider_context_recipe_budget.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/54",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Provider Context Recipe Budget validates context-budget projection mechanics without authorizing external model access or truth-side material.",
     "synopsis": "Provider Context Recipe Budget validates context-budget projection mechanics without authorizing external model access or truth-side material.",
     "statement": "Provider Context Recipe Budget validates context-budget projection mechanics without authorizing external model access or truth-side material.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/provider_context_recipe_budget.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 173
    },
    {
     "object_id": "paper_module:paper_module.undeclared_library_prior_classifier",
     "id": "paper_module.undeclared_library_prior_classifier",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Undeclared Library Prior Classifier",
     "relative_href": "docs/paper-modules.html#paper-module-undeclared-library-prior-classifier",
     "read_href": "docs/paper-modules.html#paper-module-undeclared-library-prior-classifier",
     "context_href": "docs/rules-and-ideas.html#paper-module-undeclared-library-prior-classifier",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/undeclared_library_prior_classifier.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/55",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Undeclared Library Prior Classifier scores extracted Lean symbol observations against an allowed premise set without running Lean or treating libraries as implicit allowlists.",
     "synopsis": "Undeclared Library Prior Classifier scores extracted Lean symbol observations against an allowed premise set without running Lean or treating libraries as implicit allowlists.",
     "statement": "Undeclared Library Prior Classifier scores extracted Lean symbol observations against an allowed premise set without running Lean or treating libraries as implicit allowlists.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/undeclared_library_prior_classifier.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 211
    },
    {
     "object_id": "paper_module:paper_module.voice_to_doctrine_self_improvement_loop",
     "id": "paper_module.voice_to_doctrine_self_improvement_loop",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Voice to Doctrine Self-Improvement Loop",
     "relative_href": "docs/paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop",
     "read_href": "docs/paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop",
     "context_href": "docs/rules-and-ideas.html#paper-module-voice-to-doctrine-self-improvement-loop",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/voice_to_doctrine_self_improvement_loop.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/56",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Voice to Doctrine Self-Improvement Loop validates lesson propagation without exporting source notes or granting doctrine mutation authority.",
     "synopsis": "Voice to Doctrine Self-Improvement Loop validates lesson propagation without exporting source notes or granting doctrine mutation authority.",
     "statement": "Voice to Doctrine Self-Improvement Loop validates lesson propagation without exporting source notes or granting doctrine mutation authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/voice_to_doctrine_self_improvement_loop.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 180
    },
    {
     "object_id": "paper_module:paper_module.routing_anti_patterns_registry",
     "id": "paper_module.routing_anti_patterns_registry",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Routing Anti-Patterns Registry",
     "relative_href": "docs/paper-modules.html#paper-module-routing-anti-patterns-registry",
     "read_href": "docs/paper-modules.html#paper-module-routing-anti-patterns-registry",
     "context_href": "docs/rules-and-ideas.html#paper-module-routing-anti-patterns-registry",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/routing_anti_patterns_registry.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/57",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Routing Anti-Patterns Registry validates public anti-pattern registry rows without becoming route source authority or mutating routes.",
     "synopsis": "Routing Anti-Patterns Registry validates public anti-pattern registry rows without becoming route source authority or mutating routes.",
     "statement": "Routing Anti-Patterns Registry validates public anti-pattern registry rows without becoming route source authority or mutating routes.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/routing_anti_patterns_registry.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 165
    },
    {
     "object_id": "paper_module:paper_module.batch8_audio_level_rms_port",
     "id": "paper_module.batch8_audio_level_rms_port",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 8 Audio Level RMS Port",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-audio-level-rms-port",
     "read_href": "docs/paper-modules.html#paper-module-batch8-audio-level-rms-port",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-audio-level-rms-port",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_audio_level_rms_port.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/58",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 8 Audio Level RMS Port validates deterministic RMS math parity over public synthetic samples without audio capture, microphone permission, or UI readiness authority.",
     "synopsis": "Set 8 Audio Level RMS Port validates deterministic RMS math parity over public synthetic samples without audio capture, microphone permission, or UI readiness authority.",
     "statement": "Set 8 Audio Level RMS Port validates deterministic RMS math parity over public synthetic samples without audio capture, microphone permission, or UI readiness authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_audio_level_rms_port.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 196
    },
    {
     "object_id": "paper_module:paper_module.batch8_compliance_pipeline_capsule",
     "id": "paper_module.batch8_compliance_pipeline_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 8 Compliance Pipeline Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-compliance-pipeline-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-compliance-pipeline-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-compliance-pipeline-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_compliance_pipeline_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/59",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 8 Compliance Pipeline Bundle validates copied compliance scanner and observe-pipeline mechanics without refreshing the full ledger or dispatching bridge/provider work.",
     "synopsis": "Set 8 Compliance Pipeline Bundle validates copied compliance scanner and observe-pipeline mechanics without refreshing the full ledger or dispatching bridge/provider work.",
     "statement": "Set 8 Compliance Pipeline Bundle validates copied compliance scanner and observe-pipeline mechanics without refreshing the full ledger or dispatching bridge/provider work.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_compliance_pipeline_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 204
    },
    {
     "object_id": "paper_module:paper_module.batch8_policy_engines_capsule",
     "id": "paper_module.batch8_policy_engines_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 8 Policy Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-policy-engines-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-policy-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-policy-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_policy_engines_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/60",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 8 Policy Engines Bundle validates three deterministic public policy-engine exercises without running campaigns, providers, markets, or repository mutations.",
     "synopsis": "Set 8 Policy Engines Bundle validates three deterministic public policy-engine exercises without running campaigns, providers, markets, or repository mutations.",
     "statement": "Set 8 Policy Engines Bundle validates three deterministic public policy-engine exercises without running campaigns, providers, markets, or repository mutations.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_policy_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 188
    },
    {
     "object_id": "paper_module:paper_module.batch8_structural_theses_capsule",
     "id": "paper_module.batch8_structural_theses_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 8 Structural Theses Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-structural-theses-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-structural-theses-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-structural-theses-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_structural_theses_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/61",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 8 Structural Theses Bundle validates public synthetic thesis-family replay without financial decisions, live-market validation, external model access, or portfolio authority.",
     "synopsis": "Set 8 Structural Theses Bundle validates public synthetic thesis-family replay without financial decisions, live-market validation, external model access, or portfolio authority.",
     "statement": "Set 8 Structural Theses Bundle validates public synthetic thesis-family replay without financial decisions, live-market validation, external model access, or portfolio authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_structural_theses_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 209
    },
    {
     "object_id": "paper_module:paper_module.batch8_tools_tail_primitives_capsule",
     "id": "paper_module.batch8_tools_tail_primitives_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 8 Tools-Tail Primitives Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-tools-tail-primitives-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_tools_tail_primitives_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/62",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 8 Tools-Tail Primitives Bundle validates four public tools-tail primitive exercises without Oracle truth, external model access, live bridge work, or repository mutation authority.",
     "synopsis": "Set 8 Tools-Tail Primitives Bundle validates four public tools-tail primitive exercises without Oracle truth, external model access, live bridge work, or repository mutation authority.",
     "statement": "Set 8 Tools-Tail Primitives Bundle validates four public tools-tail primitive exercises without Oracle truth, external model access, live bridge work, or repository mutation authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_tools_tail_primitives_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 219
    },
    {
     "object_id": "paper_module:paper_module.batch8_validator_checker_capsule",
     "id": "paper_module.batch8_validator_checker_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 8 Validator Checker Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-validator-checker-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch8-validator-checker-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch8-validator-checker-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_validator_checker_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/63",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 8 Validator Checker Bundle validates selected public checker groups without becoming launch-scope decision or a complete validator-suite proof.",
     "synopsis": "Set 8 Validator Checker Bundle validates selected public checker groups without becoming launch-scope decision or a complete validator-suite proof.",
     "statement": "Set 8 Validator Checker Bundle validates selected public checker groups without becoming launch-scope decision or a complete validator-suite proof.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_validator_checker_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 178
    },
    {
     "object_id": "paper_module:paper_module.batch12_market_dashboard_read_model_capsule",
     "id": "paper_module.batch12_market_dashboard_read_model_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 12 Market Dashboard Read-Model Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch12-market-dashboard-read-model-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_market_dashboard_read_model_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/64",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 12 Market Dashboard Read-Model Bundle validates copied read-model helpers over public fixtures without market-level conclusions, external model access, or launch-scope decision.",
     "synopsis": "Set 12 Market Dashboard Read-Model Bundle validates copied read-model helpers over public fixtures without market-level conclusions, external model access, or launch-scope decision.",
     "statement": "Set 12 Market Dashboard Read-Model Bundle validates copied read-model helpers over public fixtures without market-level conclusions, external model access, or launch-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_market_dashboard_read_model_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 223
    },
    {
     "object_id": "paper_module:paper_module.batch12_prediction_market_board_capsule",
     "id": "paper_module.batch12_prediction_market_board_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 12 Prediction Market Board Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-prediction-market-board-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch12-prediction-market-board-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch12-prediction-market-board-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_prediction_market_board_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/65",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 12 Prediction Market Board Bundle validates copied prediction-board and quant-mart diagnostics over public fixtures without market-level conclusions or provider authority.",
     "synopsis": "Set 12 Prediction Market Board Bundle validates copied prediction-board and quant-mart diagnostics over public fixtures without market-level conclusions or provider authority.",
     "statement": "Set 12 Prediction Market Board Bundle validates copied prediction-board and quant-mart diagnostics over public fixtures without market-level conclusions or provider authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_prediction_market_board_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 213
    },
    {
     "object_id": "paper_module:paper_module.batch12_release_claim_language_gate",
     "id": "paper_module.batch12_release_claim_language_gate",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 12 launch claim-Language Gate",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-release-claim-language-gate",
     "read_href": "docs/paper-modules.html#paper-module-batch12-release-claim-language-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch12-release-claim-language-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_release_claim_language_gate.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/66",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 12 launch claim-Language Gate checks public claim language against result record-backed scope limits without approving launch or public sharing.",
     "synopsis": "Set 12 launch claim-Language Gate checks public claim language against result record-backed scope limits without approving launch or public sharing.",
     "statement": "Set 12 launch claim-Language Gate checks public claim language against result record-backed scope limits without approving launch or public sharing.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_release_claim_language_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 182
    },
    {
     "object_id": "paper_module:paper_module.batch10_cold_eval_honesty_capsule",
     "id": "paper_module.batch10_cold_eval_honesty_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 10 Cold Eval Honesty Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch10-cold-eval-honesty-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_cold_eval_honesty_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/67",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 10 Cold Eval Honesty Bundle runs cold-eval over public fixtures without benchmark, navigation-truth, or launch-scope decision.",
     "synopsis": "Set 10 Cold Eval Honesty Bundle runs cold-eval over public fixtures without benchmark, navigation-truth, or launch-scope decision.",
     "statement": "Set 10 Cold Eval Honesty Bundle runs cold-eval over public fixtures without benchmark, navigation-truth, or launch-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_cold_eval_honesty_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 162
    },
    {
     "object_id": "paper_module:paper_module.batch10_live_source_drift_capsule",
     "id": "paper_module.batch10_live_source_drift_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 10 Live Source Drift Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-live-source-drift-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch10-live-source-drift-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch10-live-source-drift-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_live_source_drift_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/68",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 10 Live Source Drift Bundle validates copied current internal control source bodies without route, ledger-mutation, or launch-scope decision.",
     "synopsis": "Set 10 Live Source Drift Bundle validates copied current internal control source bodies without route, ledger-mutation, or launch-scope decision.",
     "statement": "Set 10 Live Source Drift Bundle validates copied current internal control source bodies without route, ledger-mutation, or launch-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_live_source_drift_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 177
    },
    {
     "object_id": "paper_module:paper_module.batch7_macro_engines_capsule",
     "id": "paper_module.batch7_macro_engines_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 7 Source Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-macro-engines-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch7-macro-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch7-macro-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_macro_engines_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/69",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 7 Source Engines Bundle imports source engine bodies and exercises trace, graph, scheduling, source-index, patch, numeric, rank, and regression-selection invariants.",
     "synopsis": "Set 7 Source Engines Bundle imports source engine bodies and exercises trace, graph, scheduling, source-index, patch, numeric, rank, and regression-selection invariants.",
     "statement": "Set 7 Source Engines Bundle imports source engine bodies and exercises trace, graph, scheduling, source-index, patch, numeric, rank, and regression-selection invariants.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_macro_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 197
    },
    {
     "object_id": "paper_module:paper_module.batch9_macro_engines_capsule",
     "id": "paper_module.batch9_macro_engines_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 9 Source Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch9-macro-engines-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch9-macro-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch9-macro-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch9_macro_engines_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/70",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 9 Source Engines Bundle imports backend and governance source-engine bodies and exercises provenance, approval, AST, finance-news, mission graph, dependency, config, edge, WorkAtlas, host-pressure, doctrine-enrichment, worker-budget, and milestone-quality invariants.",
     "synopsis": "Set 9 Source Engines Bundle imports backend and governance source-engine bodies and exercises provenance, approval, AST, finance-news, mission graph, dependency, config, edge, WorkAtlas, host-pressure, doctrine-enrichment, worker-budget, and milestone-quality invariants.",
     "statement": "Set 9 Source Engines Bundle imports backend and governance source-engine bodies and exercises provenance, approval, AST, finance-news, mission graph, dependency, config, edge, WorkAtlas, host-pressure, doctrine-enrichment, worker-budget, and milestone-quality invariants.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch9_macro_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 299
    },
    {
     "object_id": "paper_module:paper_module.pattern_assimilation",
     "id": "paper_module.pattern_assimilation",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Pattern Assimilation",
     "relative_href": "docs/paper-modules.html#paper-module-pattern-assimilation",
     "read_href": "docs/paper-modules.html#paper-module-pattern-assimilation",
     "context_href": "docs/rules-and-ideas.html#paper-module-pattern-assimilation",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_assimilation.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/71",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Pattern Assimilation validates public completion-learning metadata, owner-routed refinement result records, typed nothing-to-refine decisions, and copied body-import manifests without promoting local lessons into global doctrine.",
     "synopsis": "Pattern Assimilation validates public completion-learning metadata, owner-routed refinement result records, typed nothing-to-refine decisions, and copied body-import manifests without promoting local lessons into global doctrine.",
     "statement": "Pattern Assimilation validates public completion-learning metadata, owner-routed refinement result records, typed nothing-to-refine decisions, and copied body-import manifests without promoting local lessons into global doctrine.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_assimilation.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 250
    },
    {
     "object_id": "paper_module:paper_module.batch10_governance_compilers_capsule",
     "id": "paper_module.batch10_governance_compilers_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 10 Governance And Compilers Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-governance-compilers-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch10-governance-compilers-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch10-governance-compilers-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_governance_compilers_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/72",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 10 Governance And Compilers Bundle imports governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source bodies as public source-open evidence without granting live ledger, public sharing, launch, market, or source-file changes.",
     "synopsis": "Set 10 Governance And Compilers Bundle imports governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source bodies as public source-open evidence without granting live ledger, public sharing, launch, market, or source-file changes.",
     "statement": "Set 10 Governance And Compilers Bundle imports governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source bodies as public source-open evidence without granting live ledger, public sharing, launch, market, or source-file changes.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_governance_compilers_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 308
    },
    {
     "object_id": "paper_module:paper_module.batch11_saturation_engines_capsule",
     "id": "paper_module.batch11_saturation_engines_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 11 Saturation Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch11-saturation-engines-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch11-saturation-engines-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch11-saturation-engines-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch11_saturation_engines_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/73",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 11 Saturation Engines Bundle imports saturation, diagnostic, wayfinding, market-board, secret-scan, and demo-take source bodies as public source-open evidence without granting live runtime, launch, market, or navigation authority.",
     "synopsis": "Set 11 Saturation Engines Bundle imports saturation, diagnostic, wayfinding, market-board, secret-scan, and demo-take source bodies as public source-open evidence without granting live runtime, launch, market, or navigation authority.",
     "statement": "Set 11 Saturation Engines Bundle imports saturation, diagnostic, wayfinding, market-board, secret-scan, and demo-take source bodies as public source-open evidence without granting live runtime, launch, market, or navigation authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch11_saturation_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 267
    },
    {
     "object_id": "paper_module:paper_module.batch4_proof_authority_runtime",
     "id": "paper_module.batch4_proof_authority_runtime",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 4 Proof, Authority, and Runtime Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch4-proof-authority-runtime",
     "read_href": "docs/paper-modules.html#paper-module-batch4-proof-authority-runtime",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch4-proof-authority-runtime",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch4_proof_authority_runtime.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/74",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 4 Proof, Authority, and Runtime Bundle imports proof-search, reasoning-authority, completion, Codex runtime, bitemporal, taskpolicy, and context-yield source bodies as public source-open evidence without claiming proof success, benchmark claims, live runtime control, or launch-scope decision.",
     "synopsis": "Set 4 Proof, Authority, and Runtime Bundle imports proof-search, reasoning-authority, completion, Codex runtime, bitemporal, taskpolicy, and context-yield source bodies as public source-open evidence without claiming proof success, benchmark claims, live runtime control, or launch-scope decision.",
     "statement": "Set 4 Proof, Authority, and Runtime Bundle imports proof-search, reasoning-authority, completion, Codex runtime, bitemporal, taskpolicy, and context-yield source bodies as public source-open evidence without claiming proof success, benchmark claims, live runtime control, or launch-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch4_proof_authority_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 340
    },
    {
     "object_id": "paper_module:paper_module.batch6_unsurfaced_primitives_capsule",
     "id": "paper_module.batch6_unsurfaced_primitives_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 6 Unsurfaced Primitives Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch6-unsurfaced-primitives-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch6_unsurfaced_primitives_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/75",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 6 Unsurfaced Primitives Bundle imports provenance, operator-handoff, market, finance, provider-recovery, and demo-take source primitives as public source-open evidence without granting live operator memory, market, provider, media, public sharing, or launch-scope decision.",
     "synopsis": "Set 6 Unsurfaced Primitives Bundle imports provenance, operator-handoff, market, finance, provider-recovery, and demo-take source primitives as public source-open evidence without granting live operator memory, market, provider, media, public sharing, or launch-scope decision.",
     "statement": "Set 6 Unsurfaced Primitives Bundle imports provenance, operator-handoff, market, finance, provider-recovery, and demo-take source primitives as public source-open evidence without granting live operator memory, market, provider, media, public sharing, or launch-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch6_unsurfaced_primitives_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 312
    },
    {
     "object_id": "paper_module:paper_module.engine_room_public_projection_leak_gate",
     "id": "paper_module.engine_room_public_projection_leak_gate",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Public Projection Leak Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-public-projection-leak-gate",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-public-projection-leak-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-public-projection-leak-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_public_projection_leak_gate.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/76",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The Engine Room public projection leak gate validates rendered public projection roots for account secret-shaped strings, non-public paths shapes, symlink escapes, policy-exception handling, and optional gitleaks status while keeping findings hash-only.",
     "synopsis": "The Engine Room public projection leak gate validates rendered public projection roots for account secret-shaped strings, non-public paths shapes, symlink escapes, policy-exception handling, and optional gitleaks status while keeping findings hash-only.",
     "statement": "The Engine Room public projection leak gate validates rendered public projection roots for account secret-shaped strings, non-public paths shapes, symlink escapes, policy-exception handling, and optional gitleaks status while keeping findings hash-only.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_public_projection_leak_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 293
    },
    {
     "object_id": "paper_module:paper_module.batch5_authority_systems_capsule",
     "id": "paper_module.batch5_authority_systems_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 5 Authority and Systems Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch5-authority-systems-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch5-authority-systems-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch5-authority-systems-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch5_authority_systems_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/77",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 5 Authority and Systems Bundle imports post-execution authority, replay, proof-repair, process, generated-state, trace, blast-radius, and doctrine-graph source bodies as public source-open evidence without claiming live authority or launch-scope decision.",
     "synopsis": "Set 5 Authority and Systems Bundle imports post-execution authority, replay, proof-repair, process, generated-state, trace, blast-radius, and doctrine-graph source bodies as public source-open evidence without claiming live authority or launch-scope decision.",
     "statement": "Set 5 Authority and Systems Bundle imports post-execution authority, replay, proof-repair, process, generated-state, trace, blast-radius, and doctrine-graph source bodies as public source-open evidence without claiming live authority or launch-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch5_authority_systems_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 294
    },
    {
     "object_id": "paper_module:paper_module.batch7_oracle_sibling_capsule",
     "id": "paper_module.batch7_oracle_sibling_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 7 Oracle Sibling Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-oracle-sibling-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch7-oracle-sibling-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch7-oracle-sibling-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_oracle_sibling_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/78",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 7 Oracle Sibling Bundle imports Oracle sibling source bodies and exercises deterministic subject-index, snapshot, truth-diff, quartet-plan, and original pytest witness boundaries.",
     "synopsis": "Set 7 Oracle Sibling Bundle imports Oracle sibling source bodies and exercises deterministic subject-index, snapshot, truth-diff, quartet-plan, and original pytest witness boundaries.",
     "statement": "Set 7 Oracle Sibling Bundle imports Oracle sibling source bodies and exercises deterministic subject-index, snapshot, truth-diff, quartet-plan, and original pytest witness boundaries.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_oracle_sibling_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 211
    },
    {
     "object_id": "paper_module:paper_module.batch7_demo_take_console_capsule",
     "id": "paper_module.batch7_demo_take_console_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 7 Demo Take Console Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-demo-take-console-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch7-demo-take-console-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch7-demo-take-console-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_demo_take_console_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/79",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 7 Demo Take Console Bundle imports Swift capture-console source bodies and exercises SwiftPM build, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, and transcribe-payload boundaries.",
     "synopsis": "Set 7 Demo Take Console Bundle imports Swift capture-console source bodies and exercises SwiftPM build, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, and transcribe-payload boundaries.",
     "statement": "Set 7 Demo Take Console Bundle imports Swift capture-console source bodies and exercises SwiftPM build, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, and transcribe-payload boundaries.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_demo_take_console_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 237
    },
    {
     "object_id": "paper_module:paper_module.engine_room_generated_projection_drift_gate",
     "id": "paper_module.engine_room_generated_projection_drift_gate",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Generated Projection Drift Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-generated-projection-drift-gate",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-generated-projection-drift-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-generated-projection-drift-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_generated_projection_drift_gate.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/80",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Public generated-projection drift fixture: owner-routed checks fingerprint declared sources and artifacts, reuse clean result records only under matching hashes, and fail planted-byte or missing-artifact cases.",
     "synopsis": "Public generated-projection drift fixture: owner-routed checks fingerprint declared sources and artifacts, reuse clean result records only under matching hashes, and fail planted-byte or missing-artifact cases.",
     "statement": "Public generated-projection drift fixture: owner-routed checks fingerprint declared sources and artifacts, reuse clean result records only under matching hashes, and fail planted-byte or missing-artifact cases.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_generated_projection_drift_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 254
    },
    {
     "object_id": "paper_module:paper_module.engine_room_command_run_singleflight",
     "id": "paper_module.engine_room_command_run_singleflight",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Command-Run Singleflight",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-command-run-singleflight",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-command-run-singleflight",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-command-run-singleflight",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_command_run_singleflight.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/81",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Public command-run singleflight fixture: content-addressed subprocess keys collapse duplicate active runs and replay captured result records without claiming scheduler or daemon authority.",
     "synopsis": "Public command-run singleflight fixture: content-addressed subprocess keys collapse duplicate active runs and replay captured result records without claiming scheduler or daemon authority.",
     "statement": "Public command-run singleflight fixture: content-addressed subprocess keys collapse duplicate active runs and replay captured result records without claiming scheduler or daemon authority.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_command_run_singleflight.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 225
    },
    {
     "object_id": "paper_module:paper_module.engine_room_metabolism_runtime",
     "id": "paper_module.engine_room_metabolism_runtime",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Metabolism Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-metabolism-runtime",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-metabolism-runtime",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-metabolism-runtime",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_metabolism_runtime.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/82",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Staged Engine Room component: synthetic SQLite metabolism runtime exercise for queues, leases, blackboard projection, and reconciliation.",
     "synopsis": "Staged Engine Room component: synthetic SQLite metabolism runtime exercise for queues, leases, blackboard projection, and reconciliation.",
     "statement": "Staged Engine Room component: synthetic SQLite metabolism runtime exercise for queues, leases, blackboard projection, and reconciliation.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_metabolism_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 168
    },
    {
     "object_id": "paper_module:paper_module.engine_room_bridge_campaign_dag",
     "id": "paper_module.engine_room_bridge_campaign_dag",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Bridge Campaign DAG",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-bridge-campaign-dag",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-bridge-campaign-dag",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-bridge-campaign-dag",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_bridge_campaign_dag.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/83",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Staged Engine Room component: pre-dispatch bridge-campaign DAG validator for typed nodes, acyclicity, synthesis reachability, and provider fan-out ceilings.",
     "synopsis": "Staged Engine Room component: pre-dispatch bridge-campaign DAG validator for typed nodes, acyclicity, synthesis reachability, and provider fan-out ceilings.",
     "statement": "Staged Engine Room component: pre-dispatch bridge-campaign DAG validator for typed nodes, acyclicity, synthesis reachability, and provider fan-out ceilings.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_bridge_campaign_dag.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 188
    },
    {
     "object_id": "paper_module:paper_module.engine_room_annex_knowledge_router",
     "id": "paper_module.engine_room_annex_knowledge_router",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Reference Knowledge Router",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-annex-knowledge-router",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-annex-knowledge-router",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-annex-knowledge-router",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_annex_knowledge_router.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/84",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Public Engine Room component: sanitized reference router for structured fields, note relevance, domain filters, and no-match boundaries.",
     "synopsis": "Public Engine Room component: sanitized reference router for structured fields, note relevance, domain filters, and no-match boundaries.",
     "statement": "Public Engine Room component: sanitized reference router for structured fields, note relevance, domain filters, and no-match boundaries.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_annex_knowledge_router.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 175
    },
    {
     "object_id": "paper_module:paper_module.engine_room_derived_fact_provider_engine",
     "id": "paper_module.engine_room_derived_fact_provider_engine",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Derived Fact Provider Engine",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-derived-fact-provider-engine",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-derived-fact-provider-engine",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-derived-fact-provider-engine",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_derived_fact_provider_engine.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/85",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Public Engine Room component: registry-backed derived fact provider over JSON pointers, glob counts, git-backed callables, and provider error rows.",
     "synopsis": "Public Engine Room component: registry-backed derived fact provider over JSON pointers, glob counts, git-backed callables, and provider error rows.",
     "statement": "Public Engine Room component: registry-backed derived fact provider over JSON pointers, glob counts, git-backed callables, and provider error rows.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_derived_fact_provider_engine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 188
    },
    {
     "object_id": "paper_module:paper_module.engine_room_egress_self_compliance_gate",
     "id": "paper_module.engine_room_egress_self_compliance_gate",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Egress Self-Compliance Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-egress-self-compliance-gate",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-egress-self-compliance-gate",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-egress-self-compliance-gate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_egress_self_compliance_gate.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/86",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Public Engine Room component: phrase-membership egress gate for permission ceremony, self-error capture binding, and command-displacement evidence.",
     "synopsis": "Public Engine Room component: phrase-membership egress gate for permission ceremony, self-error capture binding, and command-displacement evidence.",
     "statement": "Public Engine Room component: phrase-membership egress gate for permission ceremony, self-error capture binding, and command-displacement evidence.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_egress_self_compliance_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 187
    },
    {
     "object_id": "paper_module:paper_module.engine_room_lean_proof_search_lab",
     "id": "paper_module.engine_room_lean_proof_search_lab",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Lean Proof Search Lab",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-lean-proof-search-lab",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-lean-proof-search-lab",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-lean-proof-search-lab",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_lean_proof_search_lab.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/87",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Public Engine Room component: bounded Lean proof-search lab for tiny fixture statements, oracle-firewall negatives, ablation, and axiom-cleanliness checks.",
     "synopsis": "Public Engine Room component: bounded Lean proof-search lab for tiny fixture statements, oracle-firewall negatives, ablation, and axiom-cleanliness checks.",
     "statement": "Public Engine Room component: bounded Lean proof-search lab for tiny fixture statements, oracle-firewall negatives, ablation, and axiom-cleanliness checks.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_lean_proof_search_lab.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 189
    },
    {
     "object_id": "paper_module:paper_module.engine_room_navigation_fitness_benchmark",
     "id": "paper_module.engine_room_navigation_fitness_benchmark",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Engine Room Navigation Fitness Benchmark",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark",
     "read_href": "docs/paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark",
     "context_href": "docs/rules-and-ideas.html#paper-module-engine-room-navigation-fitness-benchmark",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_navigation_fitness_benchmark.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/88",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Public Engine Room component: route-packet benchmark evaluator for stable-id recall, precision, forbidden first routes, latency, and debt candidates.",
     "synopsis": "Public Engine Room component: route-packet benchmark evaluator for stable-id recall, precision, forbidden first routes, latency, and debt candidates.",
     "statement": "Public Engine Room component: route-packet benchmark evaluator for stable-id recall, precision, forbidden first routes, latency, and debt candidates.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_navigation_fitness_benchmark.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 190
    },
    {
     "object_id": "paper_module:paper_module.cold_clone_probe",
     "id": "paper_module.cold_clone_probe",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Cold Clone Probe",
     "relative_href": "docs/paper-modules.html#paper-module-cold-clone-probe",
     "read_href": "docs/paper-modules.html#paper-module-cold-clone-probe",
     "context_href": "docs/rules-and-ideas.html#paper-module-cold-clone-probe",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_clone_probe.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/89",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The cold-clone probe validates the first public source-root bootstrap path: src import, secret-exclusion scan, first-wave pattern-binding fixture replay, public result record refs, and ignored local result record emission.",
     "synopsis": "The cold-clone probe validates the first public source-root bootstrap path: src import, secret-exclusion scan, first-wave pattern-binding fixture replay, public result record refs, and ignored local result record emission.",
     "statement": "The cold-clone probe validates the first public source-root bootstrap path: src import, secret-exclusion scan, first-wave pattern-binding fixture replay, public result record refs, and ignored local result record emission.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_clone_probe.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 239
    },
    {
     "object_id": "paper_module:paper_module.first_screen_composition_root",
     "id": "paper_module.first_screen_composition_root",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "First-Screen Composition Root",
     "relative_href": "docs/paper-modules.html#paper-module-first-screen-composition-root",
     "read_href": "docs/paper-modules.html#paper-module-first-screen-composition-root",
     "context_href": "docs/rules-and-ideas.html#paper-module-first-screen-composition-root",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/first_screen_composition_root.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/90",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The first-screen composition root validates the public one-screen entry card, reader branches, omission result records, evidence accounting frame, text projection, README order, and scope limit without becoming launch or hosted-publishing-scope decision.",
     "synopsis": "The first-screen composition root validates the public one-screen entry card, reader branches, omission result records, evidence accounting frame, text projection, README order, and scope limit without becoming launch or hosted-publishing-scope decision.",
     "statement": "The first-screen composition root validates the public one-screen entry card, reader branches, omission result records, evidence accounting frame, text projection, README order, and scope limit without becoming launch or hosted-publishing-scope decision.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/first_screen_composition_root.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 284
    },
    {
     "object_id": "paper_module:paper_module.batch7_secondary_runtime_capsule",
     "id": "paper_module.batch7_secondary_runtime_capsule",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Set 7 Secondary Runtime Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-secondary-runtime-capsule",
     "read_href": "docs/paper-modules.html#paper-module-batch7-secondary-runtime-capsule",
     "context_href": "docs/rules-and-ideas.html#paper-module-batch7-secondary-runtime-capsule",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_secondary_runtime_capsule.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/91",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "Set 7 Secondary Runtime Bundle imports runtime, graph, cartography, stockgrid, and Polymarket bodies and exercises their fixture-bound boundaries.",
     "synopsis": "Set 7 Secondary Runtime Bundle imports runtime, graph, cartography, stockgrid, and Polymarket bodies and exercises their fixture-bound boundaries.",
     "statement": "Set 7 Secondary Runtime Bundle imports runtime, graph, cartography, stockgrid, and Polymarket bodies and exercises their fixture-bound boundaries.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_secondary_runtime_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 177
    },
    {
     "object_id": "paper_module:paper_module.microcosm_axiom_substrate",
     "id": "paper_module.microcosm_axiom_substrate",
     "kind": "paper_module",
     "kind_label": "paper module",
     "title": "Microcosm Axiom System",
     "relative_href": "docs/paper-modules.html#paper-module-microcosm-axiom-substrate",
     "read_href": "docs/paper-modules.html#paper-module-microcosm-axiom-substrate",
     "context_href": "docs/rules-and-ideas.html#paper-module-microcosm-axiom-substrate",
     "source_href": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/microcosm_axiom_substrate.md",
     "read_route_role": "authoritative_read",
     "canonical_route_role": "canonical_read",
     "context_route_role": "lattice_relationship_context",
     "body_bearing_view": "paper_modules_page",
     "body_rendered_on_reference_page": false,
     "route_status": "read_and_context_split",
     "payload_role": "doctrine_reference_projection",
     "body_payload_role": "reference_projection_synopsis_only",
     "body_pointer": "/visible_text_index/logical_records/paper_modules/92",
     "complete_body_in_record": false,
     "omitted_complete_body_fields": [
      "statement",
      "gloss"
     ],
     "summary_line": "The public Microcosm axiom system routes readers from axiom doctrine to the read-only support-cover evaluator, routing registry, standard, tests, and result records without claiming proof, launch, or source-file changes.",
     "synopsis": "The public Microcosm axiom system routes readers from axiom doctrine to the read-only support-cover evaluator, routing registry, standard, tests, and result records without claiming proof, launch, or source-file changes.",
     "statement": "The public Microcosm axiom system routes readers from axiom doctrine to the read-only support-cover evaluator, routing registry, standard, tests, and result records without claiming proof, launch, or source-file changes.",
     "statement_payload_role": "bounded_synopsis_compatibility_field",
     "status": "",
     "anti_claims": [],
     "cross_refs": [],
     "links": [],
     "source_ref": "",
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/microcosm_axiom_substrate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 243
    }
   ],
   "evidence_profiles": [
    {
     "id": "evidence_profile:anti_principle:AP-1",
     "object_id": "anti_principle:AP-1",
     "object_kind": "anti_principle",
     "label": "Fixture-label echo",
     "relative_href": "docs/doctrine.html#dcard-ap-1",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-1.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-1.json"
      }
     ],
     "visible_text_byte_count": 515
    },
    {
     "id": "evidence_profile:anti_principle:AP-10",
     "object_id": "anti_principle:AP-10",
     "object_kind": "anti_principle",
     "label": "Prose-as-executable-authority",
     "relative_href": "docs/doctrine.html#dcard-ap-10",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-10.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-10.json"
      }
     ],
     "visible_text_byte_count": 526
    },
    {
     "id": "evidence_profile:anti_principle:AP-11",
     "object_id": "anti_principle:AP-11",
     "object_kind": "anti_principle",
     "label": "Meta-artifact exemption",
     "relative_href": "docs/doctrine.html#dcard-ap-11",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-11.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-11.json"
      }
     ],
     "visible_text_byte_count": 520
    },
    {
     "id": "evidence_profile:anti_principle:AP-12",
     "object_id": "anti_principle:AP-12",
     "object_kind": "anti_principle",
     "label": "Synthetic system substitution",
     "relative_href": "docs/doctrine.html#dcard-ap-12",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-12.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-12.json"
      }
     ],
     "visible_text_byte_count": 526
    },
    {
     "id": "evidence_profile:anti_principle:AP-13",
     "object_id": "anti_principle:AP-13",
     "object_kind": "anti_principle",
     "label": "Generated-result record source inversion",
     "relative_href": "docs/doctrine.html#dcard-ap-13",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-13.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-13.json"
      }
     ],
     "visible_text_byte_count": 537
    },
    {
     "id": "evidence_profile:anti_principle:AP-14",
     "object_id": "anti_principle:AP-14",
     "object_kind": "anti_principle",
     "label": "Public-authority inflation",
     "relative_href": "docs/doctrine.html#dcard-ap-14",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-14.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-14.json"
      }
     ],
     "visible_text_byte_count": 523
    },
    {
     "id": "evidence_profile:anti_principle:AP-15",
     "object_id": "anti_principle:AP-15",
     "object_kind": "anti_principle",
     "label": "Mechanism theater",
     "relative_href": "docs/doctrine.html#dcard-ap-15",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-15.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-15.json"
      }
     ],
     "visible_text_byte_count": 514
    },
    {
     "id": "evidence_profile:anti_principle:AP-16",
     "object_id": "anti_principle:AP-16",
     "object_kind": "anti_principle",
     "label": "Receiver inflation",
     "relative_href": "docs/doctrine.html#dcard-ap-16",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-16.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-16.json"
      }
     ],
     "visible_text_byte_count": 515
    },
    {
     "id": "evidence_profile:anti_principle:AP-17",
     "object_id": "anti_principle:AP-17",
     "object_kind": "anti_principle",
     "label": "Projection-as-source",
     "relative_href": "docs/doctrine.html#dcard-ap-17",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-17.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-17.json"
      }
     ],
     "visible_text_byte_count": 517
    },
    {
     "id": "evidence_profile:anti_principle:AP-2",
     "object_id": "anti_principle:AP-2",
     "object_kind": "anti_principle",
     "label": "Producer trust",
     "relative_href": "docs/doctrine.html#dcard-ap-2",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-2.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-2.json"
      }
     ],
     "visible_text_byte_count": 511
    },
    {
     "id": "evidence_profile:anti_principle:AP-3",
     "object_id": "anti_principle:AP-3",
     "object_kind": "anti_principle",
     "label": "Rank-as-product-score",
     "relative_href": "docs/doctrine.html#dcard-ap-3",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-3.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-3.json"
      }
     ],
     "visible_text_byte_count": 518
    },
    {
     "id": "evidence_profile:anti_principle:AP-4",
     "object_id": "anti_principle:AP-4",
     "object_kind": "anti_principle",
     "label": "Cache-across-drift",
     "relative_href": "docs/doctrine.html#dcard-ap-4",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-4.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-4.json"
      }
     ],
     "visible_text_byte_count": 515
    },
    {
     "id": "evidence_profile:anti_principle:AP-5",
     "object_id": "anti_principle:AP-5",
     "object_kind": "anti_principle",
     "label": "Unknown-unknown exhaustiveness",
     "relative_href": "docs/doctrine.html#dcard-ap-5",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-5.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-5.json"
      }
     ],
     "visible_text_byte_count": 527
    },
    {
     "id": "evidence_profile:anti_principle:AP-6",
     "object_id": "anti_principle:AP-6",
     "object_kind": "anti_principle",
     "label": "Inadmissible number emission",
     "relative_href": "docs/doctrine.html#dcard-ap-6",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-6.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-6.json"
      }
     ],
     "visible_text_byte_count": 525
    },
    {
     "id": "evidence_profile:anti_principle:AP-7",
     "object_id": "anti_principle:AP-7",
     "object_kind": "anti_principle",
     "label": "Public/private membrane breach",
     "relative_href": "docs/doctrine.html#dcard-ap-7",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-7.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-7.json"
      }
     ],
     "visible_text_byte_count": 527
    },
    {
     "id": "evidence_profile:anti_principle:AP-8",
     "object_id": "anti_principle:AP-8",
     "object_kind": "anti_principle",
     "label": "Blind irreversible mutation",
     "relative_href": "docs/doctrine.html#dcard-ap-8",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-8.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-8.json"
      }
     ],
     "visible_text_byte_count": 524
    },
    {
     "id": "evidence_profile:anti_principle:AP-9",
     "object_id": "anti_principle:AP-9",
     "object_kind": "anti_principle",
     "label": "Frozen live fact",
     "relative_href": "docs/doctrine.html#dcard-ap-9",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active anti-principle JSON record does not flip source authority away from ANTI_PRINCIPLES.md.",
       "Guarding an axiom is bounded evidence that every relevant principle failure has been mapped."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/anti_principles/AP-9.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/anti_principles/AP-9.json"
      }
     ],
     "visible_text_byte_count": 513
    },
    {
     "id": "evidence_profile:axiom:AX-1",
     "object_id": "axiom:AX-1",
     "object_kind": "axiom",
     "label": "Derivation before assertion",
     "relative_href": "docs/doctrine.html#dcard-ax-1",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-1.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-1.json"
      }
     ],
     "visible_text_byte_count": 494
    },
    {
     "id": "evidence_profile:axiom:AX-10",
     "object_id": "axiom:AX-10",
     "object_kind": "axiom",
     "label": "Temporal validity and freshness contracts",
     "relative_href": "docs/doctrine.html#dcard-ax-10",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-10.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-10.json"
      }
     ],
     "visible_text_byte_count": 508
    },
    {
     "id": "evidence_profile:axiom:AX-11",
     "object_id": "axiom:AX-11",
     "object_kind": "axiom",
     "label": "Executable grammar before doctrine authority",
     "relative_href": "docs/doctrine.html#dcard-ax-11",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-11.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-11.json"
      }
     ],
     "visible_text_byte_count": 511
    },
    {
     "id": "evidence_profile:axiom:AX-12",
     "object_id": "axiom:AX-12",
     "object_kind": "axiom",
     "label": "Reflexive accountability / no privileged meta-layer",
     "relative_href": "docs/doctrine.html#dcard-ax-12",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-12.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-12.json"
      }
     ],
     "visible_text_byte_count": 518
    },
    {
     "id": "evidence_profile:axiom:AX-2",
     "object_id": "axiom:AX-2",
     "object_kind": "axiom",
     "label": "Kernelized verification",
     "relative_href": "docs/doctrine.html#dcard-ax-2",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-2.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-2.json"
      }
     ],
     "visible_text_byte_count": 490
    },
    {
     "id": "evidence_profile:axiom:AX-3",
     "object_id": "axiom:AX-3",
     "object_kind": "axiom",
     "label": "Authority by derivation, not possession",
     "relative_href": "docs/doctrine.html#dcard-ax-3",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-3.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-3.json"
      }
     ],
     "visible_text_byte_count": 506
    },
    {
     "id": "evidence_profile:axiom:AX-4",
     "object_id": "axiom:AX-4",
     "object_kind": "axiom",
     "label": "Content-addressed determinism",
     "relative_href": "docs/doctrine.html#dcard-ax-4",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-4.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-4.json"
      }
     ],
     "visible_text_byte_count": 496
    },
    {
     "id": "evidence_profile:axiom:AX-5",
     "object_id": "axiom:AX-5",
     "object_kind": "axiom",
     "label": "Fail-closed monotone lattice",
     "relative_href": "docs/doctrine.html#dcard-ax-5",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-5.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-5.json"
      }
     ],
     "visible_text_byte_count": 495
    },
    {
     "id": "evidence_profile:axiom:AX-6",
     "object_id": "axiom:AX-6",
     "object_kind": "axiom",
     "label": "Open-world epistemics",
     "relative_href": "docs/doctrine.html#dcard-ax-6",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-6.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-6.json"
      }
     ],
     "visible_text_byte_count": 488
    },
    {
     "id": "evidence_profile:axiom:AX-7",
     "object_id": "axiom:AX-7",
     "object_kind": "axiom",
     "label": "Typed partiality and refusal",
     "relative_href": "docs/doctrine.html#dcard-ax-7",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-7.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-7.json"
      }
     ],
     "visible_text_byte_count": 495
    },
    {
     "id": "evidence_profile:axiom:AX-8",
     "object_id": "axiom:AX-8",
     "object_kind": "axiom",
     "label": "Provenance propagation and non-interference",
     "relative_href": "docs/doctrine.html#dcard-ax-8",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-8.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-8.json"
      }
     ],
     "visible_text_byte_count": 510
    },
    {
     "id": "evidence_profile:axiom:AX-9",
     "object_id": "axiom:AX-9",
     "object_kind": "axiom",
     "label": "Compensable transactional effects",
     "relative_href": "docs/doctrine.html#dcard-ax-9",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
      "scope_limit": null,
      "anti_claims": [
       "This active axiom JSON record does not flip source authority away from core/axiom_organ_routing.json.",
       "Legacy witness_strength is not a computed support verdict."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/axioms/AX-9.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/axioms/AX-9.json"
      }
     ],
     "visible_text_byte_count": 500
    },
    {
     "id": "evidence_profile:component:agent_benchmark_integrity_anti_gaming_replay",
     "object_id": "component:agent_benchmark_integrity_anti_gaming_replay",
     "object_kind": "component",
     "label": "Agent Benchmark Integrity Anti Gaming Replay",
     "relative_href": "docs/components.html#component-agent_benchmark_integrity_anti_gaming_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It authorizes only bounded public runtime validation over copied source-open pattern provenance bodies and metadata-only benchmark-integrity replay rows; it does not establish any benchmark or SWE-bench score, agent capability, external model service, live-repo mutation, private/oracle/hidden-gold body access, product progress, or launch-scope decision.",
      "scope_limit": "It authorizes only bounded public runtime validation over copied source-open pattern provenance bodies and metadata-only benchmark-integrity replay rows; it does not establish any benchmark or SWE-bench score, agent capability, external model service, live-repo mutation, private/oracle/hidden-gold body access, product progress, or launch-scope decision.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 979
    },
    {
     "id": "evidence_profile:component:agent_closeout_faithfulness_audit",
     "object_id": "component:agent_closeout_faithfulness_audit",
     "object_kind": "component",
     "label": "Agent Completion Faithfulness Audit",
     "relative_href": "docs/components.html#component-agent_closeout_faithfulness_audit",
     "evidence": {
      "kind": "External tool run",
      "class_id": "external_subprocess_witness",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "verified means the referenced evidence object exists or a pytest span ran; it does not imply the span passed unless exit-zero status was explicitly checked",
      "scope_limit": "verified means the referenced evidence object exists or a pytest span ran; it does not imply the span passed unless exit-zero status was explicitly checked",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.agent_closeout_faithfulness_audit"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 570
    },
    {
     "id": "evidence_profile:component:agent_memory_temporal_conflict_replay",
     "object_id": "component:agent_memory_temporal_conflict_replay",
     "object_kind": "component",
     "label": "Agent Memory Temporal Conflict Replay",
     "relative_href": "docs/components.html#component-agent_memory_temporal_conflict_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates the projection mechanics of a synthetic memory fixture only \u2014 that the required refs, decisions, paired replays, negative cases, and secret-exclusion scan line up and that result records are metadata-only. It does not claim live-memory product quality, judge whether memory decisions were domain-correct, treat memory recall as source authority, adopt active injection, export private transcripts, use external model services, change source files, or include launch operations.",
      "scope_limit": "It validates the projection mechanics of a synthetic memory fixture only \u2014 that the required refs, decisions, paired replays, negative cases, and secret-exclusion scan line up and that result records are metadata-only. It does not claim live-memory product quality, judge whether memory decisions were domain-correct, treat memory recall as source authority, adopt active injection, export private transcripts, use external model services, change source files, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_memory_temporal_conflict_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1246
    },
    {
     "id": "evidence_profile:component:agent_monitor_redteam_falsification_replay",
     "object_id": "component:agent_monitor_redteam_falsification_replay",
     "object_kind": "component",
     "label": "Agent Monitor Redteam Falsification Replay",
     "relative_href": "docs/components.html#component-agent_monitor_redteam_falsification_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed monitor-verdict spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live agent execution, monitor product performance, control-eval score, safety-validation, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.",
      "scope_limit": "Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed monitor-verdict spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live agent execution, monitor product performance, control-eval score, safety-validation, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_monitor_redteam_falsification_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1109
    },
    {
     "id": "evidence_profile:component:agent_route_observability_runtime",
     "object_id": "component:agent_route_observability_runtime",
     "object_kind": "component",
     "label": "Agent Route Observability Runtime",
     "relative_href": "docs/components.html#component-agent_route_observability_runtime",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only public, recorded trace-feedback metadata and regression fixtures; it does not inspect live operator state, certify or prove runtime behavior, read model-output data, mutate the work log, authorize pattern assimilation, or include launch operations.",
      "scope_limit": "It validates only public, recorded trace-feedback metadata and regression fixtures; it does not inspect live operator state, certify or prove runtime behavior, read model-output data, mutate the work log, authorize pattern assimilation, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_route_observability_runtime.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 790
    },
    {
     "id": "evidence_profile:component:agent_sabotage_scheming_monitor_replay",
     "object_id": "component:agent_sabotage_scheming_monitor_replay",
     "object_kind": "component",
     "label": "Agent Sabotage Scheming Monitor Replay",
     "relative_href": "docs/components.html#component-agent_sabotage_scheming_monitor_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed sabotage/scheming monitor spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live sabotage, live agent execution, exploit instruction, account secret/account, private-reasoning, harmful-payload, monitor-product-performance, deployment-risk, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.",
      "scope_limit": "Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed sabotage/scheming monitor spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live sabotage, live agent execution, exploit instruction, account secret/account, private-reasoning, harmful-payload, monitor-product-performance, deployment-risk, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sabotage_scheming_monitor_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1273
    },
    {
     "id": "evidence_profile:component:agent_sandbox_policy_escape_replay",
     "object_id": "component:agent_sandbox_policy_escape_replay",
     "object_kind": "component",
     "label": "Agent Sandbox Policy Escape Replay",
     "relative_href": "docs/components.html#component-agent_sandbox_policy_escape_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates the projection / trace-refactor mechanics over a synthetic fixture only; it excludes live sandbox escape, secret or account secret handling, live network access, host filesystem mutation, executable payload export, raw environment export, external model access, security benchmark claims, source-file changes, or launch. A pass proves the projection boundary and trace-refactor mechanics for this contract, not real sandbox security, exploit resistance, or whole-system safety.",
      "scope_limit": "It validates the projection / trace-refactor mechanics over a synthetic fixture only; it excludes live sandbox escape, secret or account secret handling, live network access, host filesystem mutation, executable payload export, raw environment export, external model access, security benchmark claims, source-file changes, or launch. A pass proves the projection boundary and trace-refactor mechanics for this contract, not real sandbox security, exploit resistance, or whole-system safety.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sandbox_policy_escape_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1239
    },
    {
     "id": "evidence_profile:component:agentic_vulnerability_discovery_patch_proof_replay",
     "object_id": "component:agentic_vulnerability_discovery_patch_proof_replay",
     "object_kind": "component",
     "label": "Agentic Vulnerability Discovery Patch Proof Replay",
     "relative_href": "docs/components.html#component-agentic_vulnerability_discovery_patch_proof_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the projection/evidence-chain mechanics of a synthetic replay: structural presence, cross-reference consistency, declared boolean flags, and the secret/live-access exclusion scan. It executes small regression witnesses but performs no real vulnerability discovery and makes no judgment of real-world security or fix correctness. It excludes live-target testing, real CVE exploitation, weaponized payloads, account secret handling, network exfiltration, actionable exploit steps, external model access, source-file changes, benchmark security scores, launch, or any whole-system security claim.",
      "scope_limit": "It validates only the projection/evidence-chain mechanics of a synthetic replay: structural presence, cross-reference consistency, declared boolean flags, and the secret/live-access exclusion scan. It executes small regression witnesses but performs no real vulnerability discovery and makes no judgment of real-world security or fix correctness. It excludes live-target testing, real CVE exploitation, weaponized payloads, account secret handling, network exfiltration, actionable exploit steps, external model access, source-file changes, benchmark security scores, launch, or any whole-system security claim.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1497
    },
    {
     "id": "evidence_profile:component:batch10_cold_eval_honesty_capsule",
     "object_id": "component:batch10_cold_eval_honesty_capsule",
     "object_kind": "component",
     "label": "Cold Evaluation Honesty Bundle",
     "relative_href": "docs/components.html#component-batch10_cold_eval_honesty_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "verified cold-eval source body import only, not a live benchmark, navigation truth, source authority, external model access, private-system equivalence, public sharing, or launch-scope decision",
      "scope_limit": "verified cold-eval source body import only, not a live benchmark, navigation truth, source authority, external model access, private-system equivalence, public sharing, or launch-scope decision",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_cold_eval_honesty_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 641
    },
    {
     "id": "evidence_profile:component:batch10_governance_compilers_capsule",
     "object_id": "component:batch10_governance_compilers_capsule",
     "object_kind": "component",
     "label": "Governance & Compiler Mechanisms Bundle",
     "relative_href": "docs/components.html#component-batch10_governance_compilers_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live ledger control, or source-file changes.",
      "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live ledger control, or source-file changes.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_governance_compilers_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 616
    },
    {
     "id": "evidence_profile:component:batch10_live_source_drift_capsule",
     "object_id": "component:batch10_live_source_drift_capsule",
     "object_kind": "component",
     "label": "Live Source Drift Bundle",
     "relative_href": "docs/components.html#component-batch10_live_source_drift_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "verified source body import only, not route authority, work log or work log mutation authority, mission-transaction execution, git staging or commit approval, source-file changes, non-public runtime export, launch, or public sharing",
      "scope_limit": "verified source body import only, not route authority, work log or work log mutation authority, mission-transaction execution, git staging or commit approval, source-file changes, non-public runtime export, launch, or public sharing",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_live_source_drift_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 713
    },
    {
     "id": "evidence_profile:component:batch11_saturation_engines_capsule",
     "object_id": "component:batch11_saturation_engines_capsule",
     "object_kind": "component",
     "label": "Saturation Engines Bundle",
     "relative_href": "docs/components.html#component-batch11_saturation_engines_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live runtime control, or source-file changes.",
      "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live runtime control, or source-file changes.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch11_saturation_engines_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 604
    },
    {
     "id": "evidence_profile:component:batch12_market_dashboard_read_model_capsule",
     "object_id": "component:batch12_market_dashboard_read_model_capsule",
     "object_kind": "component",
     "label": "Market Dashboard Read-Model Bundle",
     "relative_href": "docs/components.html#component-batch12_market_dashboard_read_model_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "This is fixture-bound read-model, freshness, and relation-grouping evidence only; it is not live market-level conclusions, not investment-related actions, not external model access, not launch-scope decision, and not whole-system correctness.",
      "scope_limit": "This is fixture-bound read-model, freshness, and relation-grouping evidence only; it is not live market-level conclusions, not investment-related actions, not external model access, not launch-scope decision, and not whole-system correctness.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_market_dashboard_read_model_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 743
    },
    {
     "id": "evidence_profile:component:batch12_prediction_market_board_capsule",
     "object_id": "component:batch12_prediction_market_board_capsule",
     "object_kind": "component",
     "label": "Prediction Market Board Bundle",
     "relative_href": "docs/components.html#component-batch12_prediction_market_board_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "This is deterministic fixture evidence for copied quant helpers only; it is not live prediction-market-level conclusions, not provider truth, not forecast correctness, not investment-related actions, not external model access, and not launch-scope decision.",
      "scope_limit": "This is deterministic fixture evidence for copied quant helpers only; it is not live prediction-market-level conclusions, not provider truth, not forecast correctness, not investment-related actions, not external model access, and not launch-scope decision.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_prediction_market_board_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 769
    },
    {
     "id": "evidence_profile:component:batch12_release_claim_language_gate",
     "object_id": "component:batch12_release_claim_language_gate",
     "object_kind": "component",
     "label": "Release Public Wording Gate",
     "relative_href": "docs/components.html#component-batch12_release_claim_language_gate",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "This is lexical fixture evidence only; it is not launch-scope decision, not publishing-scope decision, not semantic NLP truth, not secret-scan coverage, and not whole-system correctness.",
      "scope_limit": "This is lexical fixture evidence only; it is not launch-scope decision, not publishing-scope decision, not semantic NLP truth, not secret-scan coverage, and not whole-system correctness.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_release_claim_language_gate.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 624
    },
    {
     "id": "evidence_profile:component:batch4_proof_authority_runtime",
     "object_id": "component:batch4_proof_authority_runtime",
     "object_kind": "component",
     "label": "Proof / Control / Runtime Import Bundle",
     "relative_href": "docs/components.html#component-batch4_proof_authority_runtime",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only a public source-open bundle and bounded negative fixtures; it is not an Erdos #257 solution, not benchmark evidence, not public sharing or launch-scope decision, not live Codex/browser/runtime authority, and not private-system equivalence.",
      "scope_limit": "It validates only a public source-open bundle and bounded negative fixtures; it is not an Erdos #257 solution, not benchmark evidence, not public sharing or launch-scope decision, not live Codex/browser/runtime authority, and not private-system equivalence.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch4_proof_authority_runtime.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 778
    },
    {
     "id": "evidence_profile:component:batch5_authority_systems_capsule",
     "object_id": "component:batch5_authority_systems_capsule",
     "object_kind": "component",
     "label": "Authority Systems Source Bundle",
     "relative_href": "docs/components.html#component-batch5_authority_systems_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only copied Set 5 authority-system source bodies and bounded deterministic exercises; it does not dispatch providers, prove Lean success, send live process signals, mutate generated state, change source files, authorize public sharing, include launch operations, or claim private-system equivalence.",
      "scope_limit": "It validates only copied Set 5 authority-system source bodies and bounded deterministic exercises; it does not dispatch providers, prove Lean success, send live process signals, mutate generated state, change source files, authorize public sharing, include launch operations, or claim private-system equivalence.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch5_authority_systems_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 880
    },
    {
     "id": "evidence_profile:component:batch6_unsurfaced_primitives_capsule",
     "object_id": "component:batch6_unsurfaced_primitives_capsule",
     "object_kind": "component",
     "label": "Unsurfaced Source Primitives Bundle",
     "relative_href": "docs/components.html#component-batch6_unsurfaced_primitives_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only a public source-open bundle and bounded public exercises; it is not raw operator memory, not prompt-shelf capture authority, not live market data, not provider/browser state, not media launch, and not public sharing or launch-scope decision.",
      "scope_limit": "It validates only a public source-open bundle and bounded public exercises; it is not raw operator memory, not prompt-shelf capture authority, not live market data, not provider/browser state, not media launch, and not public sharing or launch-scope decision.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch6_unsurfaced_primitives_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 778
    },
    {
     "id": "evidence_profile:component:batch7_demo_take_console_capsule",
     "object_id": "component:batch7_demo_take_console_capsule",
     "object_kind": "component",
     "label": "Demo Take Console Source Bundle",
     "relative_href": "docs/components.html#component-batch7_demo_take_console_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only Demo Take Console copied Swift source bodies and bounded deterministic exercises; it does not launch the app, authorize screen or microphone capture, export recording sessions, execute FFmpeg, dispatch WhisperKit or other models, change source files, prove complete UI coverage, authorize public sharing, or include launch operations.",
      "scope_limit": "It validates only Demo Take Console copied Swift source bodies and bounded deterministic exercises; it does not launch the app, authorize screen or microphone capture, export recording sessions, execute FFmpeg, dispatch WhisperKit or other models, change source files, prove complete UI coverage, authorize public sharing, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_demo_take_console_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 960
    },
    {
     "id": "evidence_profile:component:batch7_macro_engines_capsule",
     "object_id": "component:batch7_macro_engines_capsule",
     "object_kind": "component",
     "label": "Trace, Code-Map & Scheduling Engines Bundle",
     "relative_href": "docs/components.html#component-batch7_macro_engines_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only a public source-open bundle and bounded exercises; it is not live source authority, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, public sharing, or launch-scope decision.",
      "scope_limit": "It validates only a public source-open bundle and bounded exercises; it is not live source authority, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, public sharing, or launch-scope decision.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_macro_engines_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 812
    },
    {
     "id": "evidence_profile:component:batch7_oracle_sibling_capsule",
     "object_id": "component:batch7_oracle_sibling_capsule",
     "object_kind": "component",
     "label": "Oracle Sibling Source Bundle",
     "relative_href": "docs/components.html#component-batch7_oracle_sibling_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only Oracle sibling copied source bodies and bounded deterministic exercises; it does not run Oracle reasoning, dispatch providers or bridges, invoke private orchestration engine, change source files, prove semantic truth, prove all Oracle paths are covered, authorize public sharing, or include launch operations.",
      "scope_limit": "It validates only Oracle sibling copied source bodies and bounded deterministic exercises; it does not run Oracle reasoning, dispatch providers or bridges, invoke private orchestration engine, change source files, prove semantic truth, prove all Oracle paths are covered, authorize public sharing, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_oracle_sibling_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 907
    },
    {
     "id": "evidence_profile:component:batch7_secondary_runtime_capsule",
     "object_id": "component:batch7_secondary_runtime_capsule",
     "object_kind": "component",
     "label": "Secondary Runtime Source Bundle",
     "relative_href": "docs/components.html#component-batch7_secondary_runtime_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "verified source body import only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, source-file changes, private-system equivalence, public sharing, launch, semantic-truth, or whole-system correctness claim",
      "scope_limit": "verified source body import only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, source-file changes, private-system equivalence, public sharing, launch, semantic-truth, or whole-system correctness claim",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_secondary_runtime_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 796
    },
    {
     "id": "evidence_profile:component:batch8_audio_level_rms_port",
     "object_id": "component:batch8_audio_level_rms_port",
     "object_kind": "component",
     "label": "Audio Level RMS Port",
     "relative_href": "docs/components.html#component-batch8_audio_level_rms_port",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "projection mechanics only, not domain-level conclusions",
      "scope_limit": "projection mechanics only, not domain-level conclusions",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_audio_level_rms_port.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 355
    },
    {
     "id": "evidence_profile:component:batch8_compliance_pipeline_capsule",
     "object_id": "component:batch8_compliance_pipeline_capsule",
     "object_kind": "component",
     "label": "Compliance Pipeline Bundle",
     "relative_href": "docs/components.html#component-batch8_compliance_pipeline_capsule",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "validates declared public Set 8 compliance pipeline bundle contract only; no full compliance-ledger freshness, external model access, model dispatch, source-file changes, source note mutation, launch, public sharing, non-public data equivalence, or whole-system correctness",
      "scope_limit": "validates declared public Set 8 compliance pipeline bundle contract only; no full compliance-ledger freshness, external model access, model dispatch, source-file changes, source note mutation, launch, public sharing, non-public data equivalence, or whole-system correctness",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_compliance_pipeline_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 797
    },
    {
     "id": "evidence_profile:component:batch8_policy_engines_capsule",
     "object_id": "component:batch8_policy_engines_capsule",
     "object_kind": "component",
     "label": "Policy Engines Bundle",
     "relative_href": "docs/components.html#component-batch8_policy_engines_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
      "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_policy_engines_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 514
    },
    {
     "id": "evidence_profile:component:batch8_structural_theses_capsule",
     "object_id": "component:batch8_structural_theses_capsule",
     "object_kind": "component",
     "label": "Structural Theses Finance Bundle",
     "relative_href": "docs/components.html#component-batch8_structural_theses_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
      "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_structural_theses_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 525
    },
    {
     "id": "evidence_profile:component:batch8_tools_tail_primitives_capsule",
     "object_id": "component:batch8_tools_tail_primitives_capsule",
     "object_kind": "component",
     "label": "Tools-Tail Primitives Bundle",
     "relative_href": "docs/components.html#component-batch8_tools_tail_primitives_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
      "scope_limit": "It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_tools_tail_primitives_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 521
    },
    {
     "id": "evidence_profile:component:batch8_validator_checker_capsule",
     "object_id": "component:batch8_validator_checker_capsule",
     "object_kind": "component",
     "label": "Validator Checker Bundle",
     "relative_href": "docs/components.html#component-batch8_validator_checker_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the imported validators.py source body and its checker membrane. It does not claim source authority, a full validator-suite proof, private-system equivalence, launch, hosted-public status, public sharing, external model access, or source-file changes.",
      "scope_limit": "It validates only the imported validators.py source body and its checker membrane. It does not claim source authority, a full validator-suite proof, private-system equivalence, launch, hosted-public status, public sharing, external model access, or source-file changes.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_validator_checker_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 787
    },
    {
     "id": "evidence_profile:component:batch9_macro_engines_capsule",
     "object_id": "component:batch9_macro_engines_capsule",
     "object_kind": "component",
     "label": "Backend & Governance Engines Bundle",
     "relative_href": "docs/components.html#component-batch9_macro_engines_capsule",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only a public source-open bundle and bounded synthetic exercises; it is not live lineage truth, human approval authority, market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
      "scope_limit": "It validates only a public source-open bundle and bounded synthetic exercises; it is not live lineage truth, human approval authority, market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch9_macro_engines_capsule.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 862
    },
    {
     "id": "evidence_profile:component:belief_state_process_reward_replay",
     "object_id": "component:belief_state_process_reward_replay",
     "object_kind": "component",
     "label": "Belief State Process Reward Replay",
     "relative_href": "docs/components.html#component-belief_state_process_reward_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only checks that the projection's accounting lines up under its own schema rules over recorded synthetic fixtures; it excludes hidden-reasoning export, RL training, hidden gold or neural-judge-only labels, benchmark-performance claims, external model access, source-file changes, or launch, and proves nothing about real-world reward, live agent behavior, or domain-level conclusions.",
      "scope_limit": "It only checks that the projection's accounting lines up under its own schema rules over recorded synthetic fixtures; it excludes hidden-reasoning export, RL training, hidden gold or neural-judge-only labels, benchmark-performance claims, external model access, source-file changes, or launch, and proves nothing about real-world reward, live agent behavior, or domain-level conclusions.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/belief_state_process_reward_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1033
    },
    {
     "id": "evidence_profile:component:bounded_autonomy_campaign_packet",
     "object_id": "component:bounded_autonomy_campaign_packet",
     "object_kind": "component",
     "label": "Bounded Autonomy Campaign Packet",
     "relative_href": "docs/components.html#component-bounded_autonomy_campaign_packet",
     "evidence": {
      "kind": "External tool run",
      "class_id": "external_subprocess_witness",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "self-proposal campaign packet only; no self-repair or unsupervised source-file changes",
      "scope_limit": "self-proposal campaign packet only; no self-repair or unsupervised source-file changes",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bounded_autonomy_campaign_packet.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 429
    },
    {
     "id": "evidence_profile:component:bridge_phase_continuity_runtime",
     "object_id": "component:bridge_phase_continuity_runtime",
     "object_kind": "component",
     "label": "Bridge Phase Continuity Runtime",
     "relative_href": "docs/components.html#component-bridge_phase_continuity_runtime",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public continuity contract over synthetic fixtures; it does not run live bridge transport, use external model services, read operator HUD/browser/phase-runtime or private-memory state, prove provider or UI uptime, land work, change source files, or include launch operations.",
      "scope_limit": "It validates only the declared public continuity contract over synthetic fixtures; it does not run live bridge transport, use external model services, read operator HUD/browser/phase-runtime or private-memory state, prove provider or UI uptime, land work, change source files, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.bridge_phase_continuity_runtime"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 868
    },
    {
     "id": "evidence_profile:component:certificate_kernel_execution_lab",
     "object_id": "component:certificate_kernel_execution_lab",
     "object_kind": "component",
     "label": "Certificate Kernel Execution Lab",
     "relative_href": "docs/components.html#component-certificate_kernel_execution_lab",
     "evidence": {
      "kind": "External tool run",
      "class_id": "external_subprocess_witness",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It is a local tool-witness that the declared public fixture rows compiled and were adjudicated by the local Lean verifier; it excludes general proof authority, count oracle/provider output as proof, expose proof text, change source files, claim a benchmark solve-rate, or include launch operations.",
      "scope_limit": "It is a local tool-witness that the declared public fixture rows compiled and were adjudicated by the local Lean verifier; it excludes general proof authority, count oracle/provider output as proof, expose proof text, change source files, claim a benchmark solve-rate, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/certificate_kernel_execution_lab.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 853
    },
    {
     "id": "evidence_profile:component:cognitive_operator_registry",
     "object_id": "component:cognitive_operator_registry",
     "object_kind": "component",
     "label": "Cognitive Operator Registry",
     "relative_href": "docs/components.html#component-cognitive_operator_registry",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public registry contract and copied source bodies; it never becomes registry source authority, mutates operators, proves operator correctness, exposes source notes, or authorizes launch, external model access, or any whole-system-correctness claim.",
      "scope_limit": "It validates only the declared public registry contract and copied source bodies; it never becomes registry source authority, mutates operators, proves operator correctness, exposes source notes, or authorizes launch, external model access, or any whole-system-correctness claim.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.cognitive_operator_registry"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 810
    },
    {
     "id": "evidence_profile:component:cold_reader_route_map",
     "object_id": "component:cold_reader_route_map",
     "object_kind": "component",
     "label": "Cold Reader Route Map",
     "relative_href": "docs/components.html#component-cold_reader_route_map",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It is projection-only metadata that validates the declared public route contract; it is not route registry control and excludes source-file changes, external model access, launch/public sharing, financial decisions, private-data equivalence, or whole-system correctness.",
      "scope_limit": "It is projection-only metadata that validates the declared public route contract; it is not route registry control and excludes source-file changes, external model access, launch/public sharing, financial decisions, private-data equivalence, or whole-system correctness.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.cold_reader_route_map"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 786
    },
    {
     "id": "evidence_profile:component:concurrency_mission_control",
     "object_id": "component:concurrency_mission_control",
     "object_kind": "component",
     "label": "Concurrency Mission Control",
     "relative_href": "docs/components.html#component-concurrency_mission_control",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "verified concurrency mission-control source body import only, not a live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, public sharing, or launch-scope decision",
      "scope_limit": "verified concurrency mission-control source body import only, not a live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, public sharing, or launch-scope decision",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/concurrency_mission_control.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 756
    },
    {
     "id": "evidence_profile:component:corpus_readiness_mathlib_absence_gate",
     "object_id": "component:corpus_readiness_mathlib_absence_gate",
     "object_kind": "component",
     "label": "Corpus Readiness Mathlib Absence Gate",
     "relative_href": "docs/components.html#component-corpus_readiness_mathlib_absence_gate",
     "evidence": {
      "kind": "External tool run",
      "class_id": "external_subprocess_witness",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only projects and gate-checks recorded corpus/toolchain readiness accounting, re-verifies recorded source digests and leakage guards, and runs a bounded Lean/Lake import probe when a toolchain is present. It does not run a full Lake build, prove formal-result correctness, claim Mathlib is available beyond the probe result, benchmark corpora, score model performance, use external model services, or include launch operations or public sharing.",
      "scope_limit": "It only projects and gate-checks recorded corpus/toolchain readiness accounting, re-verifies recorded source digests and leakage guards, and runs a bounded Lean/Lake import probe when a toolchain is present. It does not run a full Lake build, prove formal-result correctness, claim Mathlib is available beyond the probe result, benchmark corpora, score model performance, use external model services, or include launch operations or public sharing.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/corpus_readiness_mathlib_absence.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1158
    },
    {
     "id": "evidence_profile:component:doctrine_fact_claim_audit",
     "object_id": "component:doctrine_fact_claim_audit",
     "object_kind": "component",
     "label": "Doctrine Fact Claim Audit",
     "relative_href": "docs/components.html#component-doctrine_fact_claim_audit",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "fact assertion, code-loci, and DAG fixture truth gate only; it is not a comprehension engine and does not establish a minimum read graph",
      "scope_limit": "fact assertion, code-loci, and DAG fixture truth gate only; it is not a comprehension engine and does not establish a minimum read graph",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/doctrine_fact_claim_audit.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 522
    },
    {
     "id": "evidence_profile:component:durable_agent_work_landing_replay",
     "object_id": "component:durable_agent_work_landing_replay",
     "object_kind": "component",
     "label": "Durable Agent Work Landing Replay",
     "relative_href": "docs/components.html#component-durable_agent_work_landing_replay",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public work-landing contract over recorded rows. It is evidence for fixture-local completion mechanics, not for live Git side effects, unrelated-path staging, non-public body export, service operation, or distribution clearance.",
      "scope_limit": "It validates only the declared public work-landing contract over recorded rows. It is evidence for fixture-local completion mechanics, not for live Git side effects, unrelated-path staging, non-public body export, service operation, or distribution clearance.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.durable_agent_work_landing_replay"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 776
    },
    {
     "id": "evidence_profile:component:engine_room_demo",
     "object_id": "component:engine_room_demo",
     "object_kind": "component",
     "label": "Engine Room Demo",
     "relative_href": "docs/components.html#component-engine_room_demo",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the public Engine Room composition contract; it is not deployment posture, private-system equivalence, frontier theorem proving, complete security proof, public sharing, or launch-scope decision.",
      "scope_limit": "It validates only the public Engine Room composition contract; it is not deployment posture, private-system equivalence, frontier theorem proving, complete security proof, public sharing, or launch-scope decision.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_demo.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 667
    },
    {
     "id": "evidence_profile:component:executable_doctrine_grammar",
     "object_id": "component:executable_doctrine_grammar",
     "object_kind": "component",
     "label": "Executable Doctrine Grammar",
     "relative_href": "docs/components.html#component-executable_doctrine_grammar",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates an exported public executable-grammar metabolism bundle with exact copied-body digests and redacted result records, plus fixture regressions for standards/paper-module shape. It does not publish source doctrine bodies in result records, prove doctrine completeness, export a private standards engine, authorize later components, or claim external model access, private-data equivalence, launch-scope decision, or whole-system correctness.",
      "scope_limit": "It validates an exported public executable-grammar metabolism bundle with exact copied-body digests and redacted result records, plus fixture regressions for standards/paper-module shape. It does not publish source doctrine bodies in result records, prove doctrine completeness, export a private standards engine, authorize later components, or claim external model access, private-data equivalence, launch-scope decision, or whole-system correctness.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.executable_doctrine_grammar"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1154
    },
    {
     "id": "evidence_profile:component:finance_forecast_evaluation_spine",
     "object_id": "component:finance_forecast_evaluation_spine",
     "object_kind": "component",
     "label": "Finance Forecast Evaluation Spine",
     "relative_href": "docs/components.html#component-finance_forecast_evaluation_spine",
     "evidence": {
      "kind": "External tool run",
      "class_id": "external_subprocess_witness",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "synthetic fixture forecast-evaluation statistics only; no investment-related actions, live market data, track record, or performance claim",
      "scope_limit": "synthetic fixture forecast-evaluation statistics only; no investment-related actions, live market data, track record, or performance claim",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/finance_forecast_evaluation_spine.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 534
    },
    {
     "id": "evidence_profile:component:formal_evidence_cell_anchor_resolver",
     "object_id": "component:formal_evidence_cell_anchor_resolver",
     "object_kind": "component",
     "label": "Formal Evidence Cell Anchor Resolver",
     "relative_href": "docs/components.html#component-formal_evidence_cell_anchor_resolver",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates claim-to-evidence anchoring mechanics only: claim-to-cell resolution, source-anchor presence, permitted claim strength, copied-source-module digest checks, and leakage refusals. It does not run Lean/Lake, certify theorem or mathematical correctness, expose proof bodies or non-public source refs, use external model services, or include launch operations/public sharing.",
      "scope_limit": "It validates claim-to-evidence anchoring mechanics only: claim-to-cell resolution, source-anchor presence, permitted claim strength, copied-source-module digest checks, and leakage refusals. It does not run Lean/Lake, certify theorem or mathematical correctness, expose proof bodies or non-public source refs, use external model services, or include launch operations/public sharing.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_evidence_cell_anchor_resolver.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1027
    },
    {
     "id": "evidence_profile:component:formal_math_lean_proof_witness",
     "object_id": "component:formal_math_lean_proof_witness",
     "object_kind": "component",
     "label": "Formal Math Lean Proof Witness",
     "relative_href": "docs/components.html#component-formal_math_lean_proof_witness",
     "evidence": {
      "kind": "External tool run",
      "class_id": "external_subprocess_witness",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It authorizes only a witness that a tiny declared public toy proof compiled under the locally installed Lean/Lake toolchain in a temporary workspace, plus confirmation that its leakage guardrails fired. It excludes Mathlib/Aesop/Batteries-dependent or general proof or theorem-program authority, external model access, private proof import, benchmark or performance claims, whole-system correctness, or any launch, hosted deployment, or public sharing.",
      "scope_limit": "It authorizes only a witness that a tiny declared public toy proof compiled under the locally installed Lean/Lake toolchain in a temporary workspace, plus confirmation that its leakage guardrails fired. It excludes Mathlib/Aesop/Batteries-dependent or general proof or theorem-program authority, external model access, private proof import, benchmark or performance claims, whole-system correctness, or any launch, hosted deployment, or public sharing.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_lean_proof_witness.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1159
    },
    {
     "id": "evidence_profile:component:formal_math_premise_retrieval",
     "object_id": "component:formal_math_premise_retrieval",
     "object_kind": "component",
     "label": "Formal Math Premise Retrieval",
     "relative_href": "docs/components.html#component-formal_math_premise_retrieval",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only checks that public retrieval metadata is internally coherent, term-scored over a copied index, budget-bounded, and leakage-clean; it does not run Lean/Lake, use external model services, prove any theorem or its own correctness, claim benchmark performance, or include launch operations.",
      "scope_limit": "It only checks that public retrieval metadata is internally coherent, term-scored over a copied index, budget-bounded, and leakage-clean; it does not run Lean/Lake, use external model services, prove any theorem or its own correctness, claim benchmark performance, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_premise_retrieval.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 842
    },
    {
     "id": "evidence_profile:component:formal_math_readiness_gate",
     "object_id": "component:formal_math_readiness_gate",
     "object_kind": "component",
     "label": "Formal Math Readiness Gate",
     "relative_href": "docs/components.html#component-formal_math_readiness_gate",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only validates and projects declared readiness metadata; it does not run Lean/Lake, inspect the real toolchain, use external model services, prove any theorem correct, produce benchmark claims, or authorize Mathlib-dependent proof attempts.",
      "scope_limit": "It only validates and projects declared readiness metadata; it does not run Lean/Lake, inspect the real toolchain, use external model services, prove any theorem correct, produce benchmark claims, or authorize Mathlib-dependent proof attempts.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_readiness_gate.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 737
    },
    {
     "id": "evidence_profile:component:formal_math_verifier_trace_repair_loop",
     "object_id": "component:formal_math_verifier_trace_repair_loop",
     "object_kind": "component",
     "label": "Formal Math Verifier Trace Repair Loop",
     "relative_href": "docs/components.html#component-formal_math_verifier_trace_repair_loop",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It demonstrates control-loop projection mechanics over copied Ring2 run rows only; it does not run Lean/Lake, use external model services, expose proof bodies or oracle premise ids, treat human or provider advice as correctness, prove any theorem, or include launch operations.",
      "scope_limit": "It demonstrates control-loop projection mechanics over copied Ring2 run rows only; it does not run Lean/Lake, use external model services, expose proof bodies or oracle premise ids, treat human or provider advice as correctness, prove any theorem, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.formal_math_verifier_trace_repair_loop"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 817
    },
    {
     "id": "evidence_profile:component:indirect_prompt_injection_information_flow_policy_replay",
     "object_id": "component:indirect_prompt_injection_information_flow_policy_replay",
     "object_kind": "component",
     "label": "Indirect Prompt Injection Information Flow Policy Replay",
     "relative_href": "docs/components.html#component-indirect_prompt_injection_information_flow_policy_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "Passing result records only show this projection satisfies the named information-flow contract over synthetic, redacted, metadata-only rows; they do not prove general prompt-injection robustness, benchmark performance, live account/tool/provider safety, hidden-message handling in a real system, source-file changes, or launch-scope decision.",
      "scope_limit": "Passing result records only show this projection satisfies the named information-flow contract over synthetic, redacted, metadata-only rows; they do not prove general prompt-injection robustness, benchmark performance, live account/tool/provider safety, hidden-message handling in a real system, source-file changes, or launch-scope decision.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 965
    },
    {
     "id": "evidence_profile:component:lean_std_premise_index",
     "object_id": "component:lean_std_premise_index",
     "object_kind": "component",
     "label": "Lean Std Premise Index",
     "relative_href": "docs/components.html#component-lean_std_premise_index",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only validates the projection of premise metadata and copied source bodies; it does not run Lean or Lake, prove any theorem correct, expose proof bodies or oracle-needed ids, use external model services, produce benchmark claims, or include launch operations.",
      "scope_limit": "It only validates the projection of premise metadata and copied source bodies; it does not run Lean or Lake, prove any theorem correct, expose proof bodies or oracle-needed ids, use external model services, produce benchmark claims, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/lean_std_premise_index.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 771
    },
    {
     "id": "evidence_profile:component:macro_projection_import_protocol",
     "object_id": "component:macro_projection_import_protocol",
     "object_kind": "component",
     "label": "Source Projection Import Protocol",
     "relative_href": "docs/components.html#component-macro_projection_import_protocol",
     "evidence": {
      "kind": "Verified source import",
      "class_id": "verified_macro_body_import",
      "rank": 5,
      "basis": "Copied source body",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It authorizes only verified source body import with provenance and content-digest checks; it does not grant source authority, private-system equivalence, launch, hosted deployment, public sharing, recipient work, provider or Lean/Lake execution, secret or private-source-body export, or any whole-system correctness claim.",
      "scope_limit": "It authorizes only verified source body import with provenance and content-digest checks; it does not grant source authority, private-system equivalence, launch, hosted deployment, public sharing, recipient work, provider or Lean/Lake execution, secret or private-source-body export, or any whole-system correctness claim.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/macro_projection_import_protocol.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 902
    },
    {
     "id": "evidence_profile:component:materials_chemistry_closed_loop_lab_safety_replay",
     "object_id": "component:materials_chemistry_closed_loop_lab_safety_replay",
     "object_kind": "component",
     "label": "Materials Chemistry Closed Loop Lab Safety Replay",
     "relative_href": "docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It documents projection and replay mechanics only and excludes wetlab protocols, hazardous synthesis steps, reagent amounts, controlled/bioactive targets, robot commands, live assay data, discovery claims, benchmark claims, external model access, or any judgment of domain/chemical correctness.",
      "scope_limit": "It documents projection and replay mechanics only and excludes wetlab protocols, hazardous synthesis steps, reagent amounts, controlled/bioactive targets, robot commands, live assay data, discovery claims, benchmark claims, external model access, or any judgment of domain/chemical correctness.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 862
    },
    {
     "id": "evidence_profile:component:mathematical_strategy_atlas_hypothesis_scorer",
     "object_id": "component:mathematical_strategy_atlas_hypothesis_scorer",
     "object_kind": "component",
     "label": "Mathematical Strategy Atlas Hypothesis Scorer",
     "relative_href": "docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only projects pre-oracle strategy-hypothesis and retrieval mechanics; it does not run Lean/Lake, prove theorems, establish domain or formal-result correctness, reveal oracle labels, expose proof bodies, use external model services, tune on test answers, or include launch operations.",
      "scope_limit": "It only projects pre-oracle strategy-hypothesis and retrieval mechanics; it does not run Lean/Lake, prove theorems, establish domain or formal-result correctness, reveal oracle labels, expose proof bodies, use external model services, tune on test answers, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mathematical_strategy_atlas.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 842
    },
    {
     "id": "evidence_profile:component:mcp_tool_authority_replay",
     "object_id": "component:mcp_tool_authority_replay",
     "object_kind": "component",
     "label": "MCP Tool Authority Replay",
     "relative_href": "docs/components.html#component-mcp_tool_authority_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only checks that the tool-authority evidence in a recorded bundle (scopes, approvals, rollbacks, instruction/data splits, cold replays, redaction, and the expected abuse-case failures) is present and internally consistent. It does not run tools or authorize live MCP/account access, account secret or payload export, treating tool output as instruction, source-file changes, benchmark safety scores, or launch, and it makes no claim that the underlying tool-use policy is domain-correct.",
      "scope_limit": "It only checks that the tool-authority evidence in a recorded bundle (scopes, approvals, rollbacks, instruction/data splits, cold replays, redaction, and the expected abuse-case failures) is present and internally consistent. It does not run tools or authorize live MCP/account access, account secret or payload export, treating tool output as instruction, source-file changes, benchmark safety scores, or launch, and it makes no claim that the underlying tool-use policy is domain-correct.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mcp_tool_authority_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1230
    },
    {
     "id": "evidence_profile:component:mechanistic_interpretability_circuit_attribution_replay",
     "object_id": "component:mechanistic_interpretability_circuit_attribution_replay",
     "object_kind": "component",
     "label": "Mechanistic Interpretability Circuit Attribution Replay",
     "relative_href": "docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public circuit-attribution runtime-result record contract. It excludes model-transparency product claims, live model access, export of private weights/raw activations/proprietary prompts/hidden chain-of-thought, external model access, benchmark claims, or public sharing/launch.",
      "scope_limit": "It validates only the declared public circuit-attribution runtime-result record contract. It excludes model-transparency product claims, live model access, export of private weights/raw activations/proprietary prompts/hidden chain-of-thought, external model access, benchmark claims, or public sharing/launch.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 898
    },
    {
     "id": "evidence_profile:component:mission_transaction_work_spine",
     "object_id": "component:mission_transaction_work_spine",
     "object_kind": "component",
     "label": "Mission Transaction Work Spine",
     "relative_href": "docs/components.html#component-mission_transaction_work_spine",
     "evidence": {
      "kind": "Bounded runtime computation",
      "class_id": "bounded_runtime_computation",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates work-landing, claim, checkpoint-lane, and dependency metadata projections over fixed fixtures only; it does not mutate live ledgers or git, certify real completion, authorize broad staging without operator intent, or prove any change is actually correct or complete.",
      "scope_limit": "It validates work-landing, claim, checkpoint-lane, and dependency metadata projections over fixed fixtures only; it does not mutate live ledgers or git, certify real completion, authorize broad staging without operator intent, or prove any change is actually correct or complete.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.mission_transaction_work_spine"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 813
    },
    {
     "id": "evidence_profile:component:navigation_hologram_route_plane",
     "object_id": "component:navigation_hologram_route_plane",
     "object_kind": "component",
     "label": "Navigation Hologram Route Plane",
     "relative_href": "docs/components.html#component-navigation_hologram_route_plane",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public toy route-plane contract and its regression fixtures (plus exact copied navigation source modules in the bundle path); it does not establish live route freshness, grant source authority, authorize any later component, run any provider/live-kernel call, or certify the whole wave.",
      "scope_limit": "It validates only the declared public toy route-plane contract and its regression fixtures (plus exact copied navigation source modules in the bundle path); it does not establish live route freshness, grant source authority, authorize any later component, run any provider/live-kernel call, or certify the whole wave.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.navigation_hologram_route_plane"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 890
    },
    {
     "id": "evidence_profile:component:pattern_assimilation_step",
     "object_id": "component:pattern_assimilation_step",
     "object_kind": "component",
     "label": "Pattern Assimilation Step",
     "relative_href": "docs/components.html#component-pattern_assimilation_step",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public completion contract over synthetic fixture data; it does not ingest private lessons, mutate live ledgers, promote global doctrine, include launch operations or public sharing, make external model access, claim private-data equivalence, or certify public runtime behavior.",
      "scope_limit": "It validates only the declared public completion contract over synthetic fixture data; it does not ingest private lessons, mutate live ledgers, promote global doctrine, include launch operations or public sharing, make external model access, claim private-data equivalence, or certify public runtime behavior.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_assimilation.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 868
    },
    {
     "id": "evidence_profile:component:pattern_binding_contract",
     "object_id": "component:pattern_binding_contract",
     "object_kind": "component",
     "label": "Pattern Binding Contract",
     "relative_href": "docs/components.html#component-pattern_binding_contract",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public pattern-binding/route-readiness contract; it does not certify the private pattern ledger, public launch or hosted-public posture, public sharing, external model access, private-data equivalence, or whole-system correctness, and it does not turn any mined pattern row into a standalone public leaf (selection stays component-first and fixture-bound).",
      "scope_limit": "It validates only the declared public pattern-binding/route-readiness contract; it does not certify the private pattern ledger, public launch or hosted-public posture, public sharing, external model access, private-data equivalence, or whole-system correctness, and it does not turn any mined pattern row into a standalone public leaf (selection stays component-first and fixture-bound).",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_binding_contract.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1023
    },
    {
     "id": "evidence_profile:component:prediction_oracle_reconciliation",
     "object_id": "component:prediction_oracle_reconciliation",
     "object_kind": "component",
     "label": "Prediction Oracle Reconciliation",
     "relative_href": "docs/components.html#component-prediction_oracle_reconciliation",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It exercises projection mechanics on a synthetic, invented packet only. It does not establish forecasting correctness or accuracy, give trading/financial/investment-related actions, call live market data or providers, publish predictions, claim any performance or track record, import non-public data, or include launch operations.",
      "scope_limit": "It exercises projection mechanics on a synthetic, invented packet only. It does not establish forecasting correctness or accuracy, give trading/financial/investment-related actions, call live market data or providers, publish predictions, claim any performance or track record, import non-public data, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/prediction_oracle_reconciliation.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 919
    },
    {
     "id": "evidence_profile:component:proof_derived_governed_mutation_authorization",
     "object_id": "component:proof_derived_governed_mutation_authorization",
     "object_kind": "component",
     "label": "Proof Derived Governed Mutation Authorization",
     "relative_href": "docs/components.html#component-proof_derived_governed_mutation_authorization",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only a declared, synthetic governed-mutation contract and excludes live cloud/account action, standing account secrets, source or irreversible mutation, policy-after-execution, hidden votes, external model access, benchmark-score claims, or launch.",
      "scope_limit": "It validates only a declared, synthetic governed-mutation contract and excludes live cloud/account action, standing account secrets, source or irreversible mutation, policy-after-execution, hidden votes, external model access, benchmark-score claims, or launch.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.proof_derived_governed_mutation_authorization"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 792
    },
    {
     "id": "evidence_profile:component:proof_diagnostic_evidence_spine",
     "object_id": "component:proof_diagnostic_evidence_spine",
     "object_kind": "component",
     "label": "Proof Diagnostic Evidence Spine",
     "relative_href": "docs/components.html#component-proof_diagnostic_evidence_spine",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It records proof/evidence diagnostics over existing result record references only. It does not run Lean, use external model services, expose proof bodies, turn a passing check into formal-proof or theorem authority, prove runtime or whole-system correctness, authorize later components, certify public launch, authorize public sharing or recipient work, or establish secret export.",
      "scope_limit": "It records proof/evidence diagnostics over existing result record references only. It does not run Lean, use external model services, expose proof bodies, turn a passing check into formal-proof or theorem authority, prove runtime or whole-system correctness, authorize later components, certify public launch, authorize public sharing or recipient work, or establish secret export.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.proof_diagnostic_evidence_spine"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1018
    },
    {
     "id": "evidence_profile:component:provider_context_recipe_budget_policy",
     "object_id": "component:provider_context_recipe_budget_policy",
     "object_kind": "component",
     "label": "Provider Context Recipe Budget Policy",
     "relative_href": "docs/components.html#component-provider_context_recipe_budget_policy",
     "evidence": {
      "kind": "Bounded runtime computation",
      "class_id": "bounded_runtime_computation",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates context-budget projection mechanics (byte ceilings, ordered section fill, omitted-section manifests, deliverable routing, and digest-checked source-body imports) only. It excludes provider/API calls, run Lean/Lake, expose or carry proof or oracle truth-side material, assert theorem or domain-level conclusions, or include launch operations.",
      "scope_limit": "It validates context-budget projection mechanics (byte ceilings, ordered section fill, omitted-section manifests, deliverable routing, and digest-checked source-body imports) only. It excludes provider/API calls, run Lean/Lake, expose or carry proof or oracle truth-side material, assert theorem or domain-level conclusions, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/provider_context_recipe_budget.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 970
    },
    {
     "id": "evidence_profile:component:public_reveal_walkthrough",
     "object_id": "component:public_reveal_walkthrough",
     "object_kind": "component",
     "label": "Public Reveal Walkthrough",
     "relative_href": "docs/components.html#component-public_reveal_walkthrough",
     "evidence": {
      "kind": "Bounded runtime computation",
      "class_id": "bounded_runtime_computation",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It authorizes only bounded public reveal runtime behavior and a digest-verified public body-import witness; it excludes launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-data equivalence, Lean/Lake execution, whole-system correctness, or general product authority.",
      "scope_limit": "It authorizes only bounded public reveal runtime behavior and a digest-verified public body-import witness; it excludes launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-data equivalence, Lean/Lake execution, whole-system correctness, or general product authority.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/public_reveal_walkthrough.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 888
    },
    {
     "id": "evidence_profile:component:research_replication_rubric_artifact_replay",
     "object_id": "component:research_replication_rubric_artifact_replay",
     "object_kind": "component",
     "label": "Research Replication Rubric Artifact Replay",
     "relative_href": "docs/components.html#component-research_replication_rubric_artifact_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates the shape and presence of synthetic replay metadata and result record references only - it does not run any experiment, metric script, or rerun, excludes any claim that a paper was actually replicated, that a benchmark claims was achieved, or that the underlying science is correct, and it never calls providers, exposes private paper/data bodies, or authorizes public sharing or launch.",
      "scope_limit": "It validates the shape and presence of synthetic replay metadata and result record references only - it does not run any experiment, metric script, or rerun, excludes any claim that a paper was actually replicated, that a benchmark claims was achieved, or that the underlying science is correct, and it never calls providers, exposes private paper/data bodies, or authorizes public sharing or launch.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/research_replication_rubric_artifact_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1068
    },
    {
     "id": "evidence_profile:component:ring2_premise_retrieval_precision_recall_harness",
     "object_id": "component:ring2_premise_retrieval_precision_recall_harness",
     "object_kind": "component",
     "label": "Ring2 Premise Retrieval Precision Recall Harness",
     "relative_href": "docs/components.html#component-ring2_premise_retrieval_precision_recall_harness",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "These are after-the-fact retrieval-attribution labels and precision/recall counts over copied run records only. The component does not run Lean or Lake, call any provider, expose proof bodies, tune on test answers, claim benchmark performance, prove formal-result correctness, or include launch operations, and its labels are explicitly forbidden from flowing into provider context. The aggregate numbers describe only the copied fixture/bundle replayed, not any benchmark claims.",
      "scope_limit": "These are after-the-fact retrieval-attribution labels and precision/recall counts over copied run records only. The component does not run Lean or Lake, call any provider, expose proof bodies, tune on test answers, claim benchmark performance, prove formal-result correctness, or include launch operations, and its labels are explicitly forbidden from flowing into provider context. The aggregate numbers describe only the copied fixture/bundle replayed, not any benchmark claims.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/ring2_premise_precision_recall.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1233
    },
    {
     "id": "evidence_profile:component:routing_anti_patterns_registry",
     "object_id": "component:routing_anti_patterns_registry",
     "object_kind": "component",
     "label": "Routing Anti Patterns Registry",
     "relative_href": "docs/components.html#component-routing_anti_patterns_registry",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public routing anti-pattern registry contract and copied source body; it never becomes route source authority, mutates routes, exposes private routing notes, calls providers, authorizes launch, or proves whole-system correctness.",
      "scope_limit": "It validates only the declared public routing anti-pattern registry contract and copied source body; it never becomes route source authority, mutates routes, exposes private routing notes, calls providers, authorizes launch, or proves whole-system correctness.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/routing_anti_patterns_registry.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 775
    },
    {
     "id": "evidence_profile:component:self_ignorance_coverage_ledger",
     "object_id": "component:self_ignorance_coverage_ledger",
     "object_kind": "component",
     "label": "Self Ignorance Coverage Ledger",
     "relative_href": "docs/components.html#component-self_ignorance_coverage_ledger",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "known Kind Atlas coverage debt projection only; it does not claim literal unknown-unknown omniscience or absence proof",
      "scope_limit": "known Kind Atlas coverage debt projection only; it does not claim literal unknown-unknown omniscience or absence proof",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/self_ignorance_coverage_ledger.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 491
    },
    {
     "id": "evidence_profile:component:sleeper_memory_poisoning_quarantine_replay",
     "object_id": "component:sleeper_memory_poisoning_quarantine_replay",
     "object_kind": "component",
     "label": "Sleeper Memory Poisoning Quarantine Replay",
     "relative_href": "docs/components.html#component-sleeper_memory_poisoning_quarantine_replay",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only checks the structural shape and internal consistency of a synthetic memory-security policy projection recorded as JSON. It does not run or validate any real memory store, does not itself quarantine, delete, or re-run anything, and does not establish that any system actually resists poisoning. It exports no private memory bodies or transcripts, calls no providers, mutates no source, produces no benchmark claims, and excludes launch (all scope limit flags are hardcoded false).",
      "scope_limit": "It only checks the structural shape and internal consistency of a synthetic memory-security policy projection recorded as JSON. It does not run or validate any real memory store, does not itself quarantine, delete, or re-run anything, and does not establish that any system actually resists poisoning. It exports no private memory bodies or transcripts, calls no providers, mutates no source, produces no benchmark claims, and excludes launch (all scope limit flags are hardcoded false).",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/sleeper_memory_poisoning_quarantine_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1241
    },
    {
     "id": "evidence_profile:component:spatial_world_model_counterfactual_simulation_replay",
     "object_id": "component:spatial_world_model_counterfactual_simulation_replay",
     "object_kind": "component",
     "label": "Spatial World Model Counterfactual Simulation Replay",
     "relative_href": "docs/components.html#component-spatial_world_model_counterfactual_simulation_replay",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public contract of synthetic spatial counterfactual-replay metadata rows. It is evidence for inspectable replay rows and limitation labels, not for real-world spatial accuracy, simulator-product validity, media-only authority, operational deployment, service distribution, or scope decisions.",
      "scope_limit": "It validates only the declared public contract of synthetic spatial counterfactual-replay metadata rows. It is evidence for inspectable replay rows and limitation labels, not for real-world spatial accuracy, simulator-product validity, media-only authority, operational deployment, service distribution, or scope decisions.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/spatial_world_model_counterfactual_simulation_replay.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 923
    },
    {
     "id": "evidence_profile:component:standards_meta_diagnostics",
     "object_id": "component:standards_meta_diagnostics",
     "object_kind": "component",
     "label": "Standards Meta Diagnostics",
     "relative_href": "docs/components.html#component-standards_meta_diagnostics",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared public coverage contract and never becomes source authority for the registries, mutates source, exposes private material, or authorizes launch, external model access, or any whole-system-correctness claim.",
      "scope_limit": "It validates only the declared public coverage contract and never becomes source authority for the registries, mutates source, exposes private material, or authorizes launch, external model access, or any whole-system-correctness claim.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/standards_meta_diagnostics.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 723
    },
    {
     "id": "evidence_profile:component:tactic_portfolio_availability_probe",
     "object_id": "component:tactic_portfolio_availability_probe",
     "object_kind": "component",
     "label": "Tactic Portfolio Availability Probe",
     "relative_href": "docs/components.html#component-tactic_portfolio_availability_probe",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only projects and validates which tactics were recorded as compiling in one captured environment; it does not run Lean/Lake at all, prove any goal, certify domain-level conclusions, use external model services, claim benchmark performance, or include launch operations.",
      "scope_limit": "It only projects and validates which tactics were recorded as compiling in one captured environment; it does not run Lean/Lake at all, prove any goal, certify domain-level conclusions, use external model services, claim benchmark performance, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tactic_portfolio_availability.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 804
    },
    {
     "id": "evidence_profile:component:target_shape_tactic_routing_gate",
     "object_id": "component:target_shape_tactic_routing_gate",
     "object_kind": "component",
     "label": "Target Shape Tactic Routing Gate",
     "relative_href": "docs/components.html#component-target_shape_tactic_routing_gate",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only inspects and records the projection mechanics of pre-execution tactic-routing references \u2014 emitting per-tactic allow/reject decisions with reasons. It does not run Lean/Lake, does not establish or judge the correctness of any goal, emits no proof bodies, makes no external model access, performs no post-execution route selection, reports no benchmark claims or maturity, and excludes launch.",
      "scope_limit": "It only inspects and records the projection mechanics of pre-execution tactic-routing references \u2014 emitting per-tactic allow/reject decisions with reasons. It does not run Lean/Lake, does not establish or judge the correctness of any goal, emits no proof bodies, makes no external model access, performs no post-execution route selection, reports no benchmark claims or maturity, and excludes launch.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/target_shape_tactic_routing.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 1061
    },
    {
     "id": "evidence_profile:component:tool_server_pressure_inventory",
     "object_id": "component:tool_server_pressure_inventory",
     "object_kind": "component",
     "label": "Tool Server Pressure Inventory",
     "relative_href": "docs/components.html#component-tool_server_pressure_inventory",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "validates declared public helper-process pressure inventory contract only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, non-public data equivalence, or whole-system correctness",
      "scope_limit": "validates declared public helper-process pressure inventory contract only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, non-public data equivalence, or whole-system correctness",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tool_server_pressure_inventory.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 725
    },
    {
     "id": "evidence_profile:component:undeclared_library_prior_symbol_classifier",
     "object_id": "component:undeclared_library_prior_symbol_classifier",
     "object_kind": "component",
     "label": "Undeclared Library Prior Symbol Classifier",
     "relative_href": "docs/components.html#component-undeclared_library_prior_symbol_classifier",
     "evidence": {
      "kind": "Computed projection",
      "class_id": "algorithmic_projection",
      "rank": 3,
      "basis": "Source-faithful refactor",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only projects the symbol-boundary classification mechanic over copied Lean/Std premise rows and pre-extracted symbol observations; it does not read proof source, run Lean or Lake, prove formal-result correctness, treat the whole standard library as an implicit allowlist, claim Mathlib availability, use external model services, or include launch operations.",
      "scope_limit": "It only projects the symbol-boundary classification mechanic over copied Lean/Std premise rows and pre-extracted symbol observations; it does not read proof source, run Lean or Lake, prove formal-result correctness, treat the whole standard library as an implicit allowlist, claim Mathlib availability, use external model services, or include launch operations.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/undeclared_library_prior_classifier.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 989
    },
    {
     "id": "evidence_profile:component:verifier_lab_execution_spine",
     "object_id": "component:verifier_lab_execution_spine",
     "object_kind": "component",
     "label": "Verifier Lab Execution Spine",
     "relative_href": "docs/components.html#component-verifier_lab_execution_spine",
     "evidence": {
      "kind": "External tool run",
      "class_id": "external_subprocess_witness",
      "rank": 4,
      "basis": "Real runtime result",
      "runs_real_tools": true
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It is a tool-witness result record for bounded public Lean transition rows only: it does not establish general proof authority, count oracle/provider output as proof, export proof bodies or tactic scripts, use external model services, change source files, claim benchmark solve-rates, or include launch operations/public sharing.",
      "scope_limit": "It is a tool-witness result record for bounded public Lean transition rows only: it does not establish general proof authority, count oracle/provider output as proof, export proof bodies or tactic scripts, use external model services, change source files, claim benchmark solve-rates, or include launch operations/public sharing.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_execution_spine.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 911
    },
    {
     "id": "evidence_profile:component:verifier_lab_kernel",
     "object_id": "component:verifier_lab_kernel",
     "object_kind": "component",
     "label": "Verifier Lab Kernel",
     "relative_href": "docs/components.html#component-verifier_lab_kernel",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates the declared public contract shape of the proof packet and component result records only; it does not establish anything correct, count oracle/provider output as forward proof success, import private or Mathlib-dependent proof bodies, use external model services, change source files, or claim benchmark solve rates, launch, or maturity.",
      "scope_limit": "It validates the declared public contract shape of the proof packet and component result records only; it does not establish anything correct, count oracle/provider output as forward proof success, import private or Mathlib-dependent proof bodies, use external model services, change source files, or claim benchmark solve rates, launch, or maturity.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_kernel.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 944
    },
    {
     "id": "evidence_profile:component:voice_to_doctrine_self_improvement_loop",
     "object_id": "component:voice_to_doctrine_self_improvement_loop",
     "object_kind": "component",
     "label": "Voice To Doctrine Self Improvement Loop",
     "relative_href": "docs/components.html#component-voice_to_doctrine_self_improvement_loop",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It validates only the declared contract of the loop on fixtures; it does not export source notes or private bodies, grant source/doctrine edits, global-promotion, live work log mutation, or publishing-scope decision, make external model access, prove correctness, or claim private-system equivalence.",
      "scope_limit": "It validates only the declared contract of the loop on fixtures; it does not export source notes or private bodies, grant source/doctrine edits, global-promotion, live work log mutation, or publishing-scope decision, make external model access, prove correctness, or claim private-system equivalence.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/voice_to_doctrine_self_improvement_loop.md"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 864
    },
    {
     "id": "evidence_profile:component:world_model_projection_drift_control_room",
     "object_id": "component:world_model_projection_drift_control_room",
     "object_kind": "component",
     "label": "World Model Projection Drift Control Room",
     "relative_href": "docs/components.html#component-world_model_projection_drift_control_room",
     "evidence": {
      "kind": "Contract validator",
      "class_id": "semantic_validator",
      "rank": 5,
      "basis": "Import validation",
      "runs_real_tools": false
     },
     "boundary": {
      "evidence_boundary": "component_evidence_rank_scope_limit_and_source_links",
      "does_not_prove": "It only validates the declared public, metadata-only drift-result record contract. It supports inspection of recorded drift rows and source-linked refs; live repair, source control, doctrine changes, model-output export, public sharing, and launch are outside the fixture. It does not claim complete drift coverage or live repair control.",
      "scope_limit": "It only validates the declared public, metadata-only drift-result record contract. It supports inspection of recorded drift rows and source-linked refs; live repair, source control, doctrine changes, model-output export, public sharing, and launch are outside the fixture. It does not claim complete drift coverage or live repair control.",
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "component_registry_and_atlas_projection",
     "source_refs": [
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.world_model_projection_drift_control_room"
      },
      {
       "label": "Source atlas",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md"
      }
     ],
     "visible_text_byte_count": 942
    },
    {
     "id": "evidence_profile:concept:concept.agent_reliability_and_safety_validator_bundle",
     "object_id": "concept:concept.agent_reliability_and_safety_validator_bundle",
     "object_kind": "concept",
     "label": "agent reliability and safety validators as bounded public scope limits",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This family concept is a source-bound grouping of accepted Microcosm validators, not a claim that the agents are safe in the world.",
      "scope_limit": null,
      "anti_claims": [
       "This family concept is a source-bound grouping of accepted Microcosm validators, not a claim that the agents are safe in the world.",
       "The concept does not upgrade negative-case coverage into propagation proof or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.agent_reliability_and_safety_validator_bundle.json"
      }
     ],
     "visible_text_byte_count": 639
    },
    {
     "id": "evidence_profile:concept:concept.architecture_and_navigation_route_contract_bundle",
     "object_id": "concept:concept.architecture_and_navigation_route_contract_bundle",
     "object_kind": "concept",
     "label": "architecture and navigation route contracts as executable doctrine boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This family concept does not make browsable route projections source authority.",
      "scope_limit": null,
      "anti_claims": [
       "This family concept does not make browsable route projections source authority.",
       "The concept does not establish complete system navigation coverage or public launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.architecture_and_navigation_route_contract_bundle.json"
      }
     ],
     "visible_text_byte_count": 541
    },
    {
     "id": "evidence_profile:concept:concept.entry_and_reveal_route_readiness_bundle",
     "object_id": "concept:concept.entry_and_reveal_route_readiness_bundle",
     "object_kind": "concept",
     "label": "entry and reveal routes as bounded cold-reader readiness evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This family concept is not a public sharing, launch, or private-data equivalence claim.",
      "scope_limit": null,
      "anti_claims": [
       "This family concept is not a public sharing, launch, or private-data equivalence claim.",
       "Cold-reader reachability is not whole-lattice completeness."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.entry_and_reveal_route_readiness_bundle.json"
      }
     ],
     "visible_text_byte_count": 505
    },
    {
     "id": "evidence_profile:concept:concept.executable_doctrine_grammar_standard_bundle",
     "object_id": "concept:concept.executable_doctrine_grammar_standard_bundle",
     "object_kind": "concept",
     "label": "standard as schema contract with explicit scope limit",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This specimen validates public standard shape only.",
      "scope_limit": null,
      "anti_claims": [
       "This specimen validates public standard shape only.",
       "This specimen does not establish source doctrine completeness."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.executable_doctrine_grammar_standard_bundle.json"
      }
     ],
     "visible_text_byte_count": 424
    },
    {
     "id": "evidence_profile:concept:concept.first_screen_doctrine_effect_frame",
     "object_id": "concept:concept.first_screen_doctrine_effect_frame",
     "object_kind": "concept",
     "label": "doctrine handles as typed mistake-prevention boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-first-screen-doctrine-effect-frame",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This specimen proves entry routing and shape, not doctrine completeness.",
      "scope_limit": null,
      "anti_claims": [
       "This specimen proves entry routing and shape, not doctrine completeness.",
       "This specimen excludes launch or private-data equivalence."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.first_screen_doctrine_effect_frame.json"
      }
     ],
     "visible_text_byte_count": 464
    },
    {
     "id": "evidence_profile:concept:concept.formal_math_and_proof_witness_bundle",
     "object_id": "concept:concept.formal_math_and_proof_witness_bundle",
     "object_kind": "concept",
     "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This family concept is not theorem-prover authority beyond the named public witness result records.",
      "scope_limit": null,
      "anti_claims": [
       "This family concept is not theorem-prover authority beyond the named public witness result records.",
       "Provider suggestions, oracle comparisons, and negative cases do not count as proof success."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.formal_math_and_proof_witness_bundle.json"
      }
     ],
     "visible_text_byte_count": 575
    },
    {
     "id": "evidence_profile:concept:concept.import_projection_and_drift_control_bundle",
     "object_id": "concept:concept.import_projection_and_drift_control_bundle",
     "object_kind": "concept",
     "label": "source import and projection drift controls as provenance-preserving boundaries",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This family concept does not flip legacy or generated projections into source authority.",
      "scope_limit": null,
      "anti_claims": [
       "This family concept does not flip legacy or generated projections into source authority.",
       "Digest parity and drift checks are bounded import evidence, not whole-system correctness."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.import_projection_and_drift_control_bundle.json"
      }
     ],
     "visible_text_byte_count": 551
    },
    {
     "id": "evidence_profile:concept:concept.research_and_science_replay_evidence_bundle",
     "object_id": "concept:concept.research_and_science_replay_evidence_bundle",
     "object_kind": "concept",
     "label": "research and science replay validators as reproducibility scope limits",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This family concept is not external scientific validation, financial decisions, or benchmark superiority evidence.",
      "scope_limit": null,
      "anti_claims": [
       "This family concept is not external scientific validation, financial decisions, or benchmark superiority evidence.",
       "Replay result records expose bounded evidence and gaps, not full replication certainty."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.research_and_science_replay_evidence_bundle.json"
      }
     ],
     "visible_text_byte_count": 592
    },
    {
     "id": "evidence_profile:concept:concept.standards_meta_diagnostics_bundle",
     "object_id": "concept:concept.standards_meta_diagnostics_bundle",
     "object_kind": "concept",
     "label": "component-standard-runtime-result record coverage as projection-only evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This specimen is coverage projection, not registry source authority.",
      "scope_limit": null,
      "anti_claims": [
       "This specimen is coverage projection, not registry source authority.",
       "This specimen excludes launch, external model access, or whole-system correctness."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.standards_meta_diagnostics_bundle.json"
      }
     ],
     "visible_text_byte_count": 502
    },
    {
     "id": "evidence_profile:concept:concept.voice_to_doctrine_self_improvement_loop_bundle",
     "object_id": "concept:concept.voice_to_doctrine_self_improvement_loop_bundle",
     "object_kind": "concept",
     "label": "local pressure rows as typed candidates for owner-surface refinement",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This specimen demonstrates local refinement, not global doctrine changes.",
      "scope_limit": null,
      "anti_claims": [
       "This specimen demonstrates local refinement, not global doctrine changes.",
       "This specimen excludes hand-editing doctrine nodes or exporting raw voice."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json"
      }
     ],
     "visible_text_byte_count": 495
    },
    {
     "id": "evidence_profile:concept:concept.work_landing_and_continuity_control_bundle",
     "object_id": "concept:concept.work_landing_and_continuity_control_bundle",
     "object_kind": "concept",
     "label": "work landing and continuity controls as transaction-scoped coordination evidence",
     "relative_href": "docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This family concept does not establish publishing-scope decision, clean branch state, or external delivery.",
      "scope_limit": null,
      "anti_claims": [
       "This family concept does not establish publishing-scope decision, clean branch state, or external delivery.",
       "Coordination result records do not authorize unrelated path mutation or broad staging."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/concepts/concept.work_landing_and_continuity_control_bundle.json"
      }
     ],
     "visible_text_byte_count": 587
    },
    {
     "id": "evidence_profile:coverage_gap:component_relation_fill_gap",
     "object_id": "coverage_gap:component_relation_fill_gap",
     "object_kind": "coverage_gap",
     "label": "Component relation fill",
     "relative_href": "docs/rules-and-ideas.html#coverage-gap-component-relation-fill",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "coverage_projection_only_not_relation_promotion",
      "does_not_prove": null,
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_lattice_coverage_projection",
     "source_refs": [
      "microcosm-substrate/core/doctrine_lattice_coverage.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/doctrine_lattice_coverage.json"
      }
     ],
     "visible_text_byte_count": 244
    },
    {
     "id": "evidence_profile:coverage_gap:mechanism_relation_fill_gap",
     "object_id": "coverage_gap:mechanism_relation_fill_gap",
     "object_kind": "coverage_gap",
     "label": "Mechanism relation fill",
     "relative_href": "docs/rules-and-ideas.html#coverage-gap-mechanism-relation-fill",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "coverage_projection_only_not_relation_promotion",
      "does_not_prove": null,
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_lattice_coverage_projection",
     "source_refs": [
      "microcosm-substrate/core/doctrine_lattice_coverage.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/doctrine_lattice_coverage.json"
      }
     ],
     "visible_text_byte_count": 244
    },
    {
     "id": "evidence_profile:mechanism:mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "object_id": "mechanism:mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "object_kind": "mechanism",
     "label": "validates public benchmark integrity replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json"
      }
     ],
     "visible_text_byte_count": 546
    },
    {
     "id": "evidence_profile:mechanism:mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "object_id": "mechanism:mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "object_kind": "mechanism",
     "label": "validates completion evidence claims",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json"
      }
     ],
     "visible_text_byte_count": 539
    },
    {
     "id": "evidence_profile:mechanism:mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "object_id": "mechanism:mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "object_kind": "mechanism",
     "label": "validates public memory conflict replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json"
      }
     ],
     "visible_text_byte_count": 542
    },
    {
     "id": "evidence_profile:mechanism:mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "object_id": "mechanism:mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "object_kind": "mechanism",
     "label": "validates public monitor verdict result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json"
      }
     ],
     "visible_text_byte_count": 550
    },
    {
     "id": "evidence_profile:mechanism:mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "object_id": "mechanism:mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "object_kind": "mechanism",
     "label": "validates public route feedback",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json"
      }
     ],
     "visible_text_byte_count": 534
    },
    {
     "id": "evidence_profile:mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "object_id": "mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "object_kind": "mechanism",
     "label": "validates public sabotage scheming monitor replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json"
      }
     ],
     "visible_text_byte_count": 552
    },
    {
     "id": "evidence_profile:mechanism:mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "object_id": "mechanism:mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "object_kind": "mechanism",
     "label": "validates public sandbox policy trace",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json"
      }
     ],
     "visible_text_byte_count": 540
    },
    {
     "id": "evidence_profile:mechanism:mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "object_id": "mechanism:mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "object_kind": "mechanism",
     "label": "validates public agentic vulnerability patch proof replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json"
      }
     ],
     "visible_text_byte_count": 560
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "object_id": "mechanism:mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "object_kind": "mechanism",
     "label": "validates public cold eval honesty bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "object_id": "mechanism:mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "object_kind": "mechanism",
     "label": "validates public governance compilers bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json"
      }
     ],
     "visible_text_byte_count": 547
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "object_id": "mechanism:mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "object_kind": "mechanism",
     "label": "validates public live source drift bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "object_id": "mechanism:mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "object_kind": "mechanism",
     "label": "validates public saturation engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 545
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "object_id": "mechanism:mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "object_kind": "mechanism",
     "label": "validates public market dashboard read model bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json"
      }
     ],
     "visible_text_byte_count": 554
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "object_id": "mechanism:mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "object_kind": "mechanism",
     "label": "validates public prediction market board bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json"
      }
     ],
     "visible_text_byte_count": 550
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "object_id": "mechanism:mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "object_kind": "mechanism",
     "label": "validates public launch claim language gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json"
      }
     ],
     "visible_text_byte_count": 546
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "object_id": "mechanism:mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "object_kind": "mechanism",
     "label": "validates public proof authority runtime bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json"
      }
     ],
     "visible_text_byte_count": 550
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "object_id": "mechanism:mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "object_kind": "mechanism",
     "label": "validates public authority systems bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "object_id": "mechanism:mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "object_kind": "mechanism",
     "label": "validates public unsurfaced primitives bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "object_id": "mechanism:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "object_kind": "mechanism",
     "label": "validates public demo take console bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "object_id": "mechanism:mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "object_kind": "mechanism",
     "label": "validates public source engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 541
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "object_id": "mechanism:mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "object_kind": "mechanism",
     "label": "validates public oracle sibling bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json"
      }
     ],
     "visible_text_byte_count": 541
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "object_id": "mechanism:mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "object_kind": "mechanism",
     "label": "validates public secondary runtime bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "object_id": "mechanism:mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "object_kind": "mechanism",
     "label": "validates public audio level rms port",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json"
      }
     ],
     "visible_text_byte_count": 540
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "object_id": "mechanism:mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "object_kind": "mechanism",
     "label": "validates public compliance pipeline bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json"
      }
     ],
     "visible_text_byte_count": 546
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "object_id": "mechanism:mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "object_kind": "mechanism",
     "label": "validates public policy engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 541
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "object_id": "mechanism:mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "object_kind": "mechanism",
     "label": "validates public structural theses bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "object_id": "mechanism:mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "object_kind": "mechanism",
     "label": "validates public tools tail primitives bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "object_id": "mechanism:mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "object_kind": "mechanism",
     "label": "validates public validator checker bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "object_id": "mechanism:mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "object_kind": "mechanism",
     "label": "validates public source engines bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json"
      }
     ],
     "visible_text_byte_count": 541
    },
    {
     "id": "evidence_profile:mechanism:mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "object_id": "mechanism:mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "object_kind": "mechanism",
     "label": "validates public belief state process reward replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json"
      }
     ],
     "visible_text_byte_count": 554
    },
    {
     "id": "evidence_profile:mechanism:mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "object_id": "mechanism:mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "object_kind": "mechanism",
     "label": "validates public bounded autonomy campaign packet",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json"
      }
     ],
     "visible_text_byte_count": 552
    },
    {
     "id": "evidence_profile:mechanism:mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "object_id": "mechanism:mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "object_kind": "mechanism",
     "label": "validates synthetic bridge continuity",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json"
      }
     ],
     "visible_text_byte_count": 540
    },
    {
     "id": "evidence_profile:mechanism:mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "object_id": "mechanism:mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "object_kind": "mechanism",
     "label": "validates public certificate kernel execution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "object_id": "mechanism:mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "object_kind": "mechanism",
     "label": "validates public operator contract",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json"
      }
     ],
     "visible_text_byte_count": 537
    },
    {
     "id": "evidence_profile:mechanism:mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "object_id": "mechanism:mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "object_kind": "mechanism",
     "label": "validates public source root bootstrap",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json"
      }
     ],
     "visible_text_byte_count": 541
    },
    {
     "id": "evidence_profile:mechanism:mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "object_id": "mechanism:mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "object_kind": "mechanism",
     "label": "validates public first run route map",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json"
      }
     ],
     "visible_text_byte_count": 539
    },
    {
     "id": "evidence_profile:mechanism:mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "object_id": "mechanism:mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "object_kind": "mechanism",
     "label": "validates public concurrency mission control",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json"
      }
     ],
     "visible_text_byte_count": 547
    },
    {
     "id": "evidence_profile:mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "object_id": "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "object_kind": "mechanism",
     "label": "validates public corpus readiness boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json"
      }
     ],
     "visible_text_byte_count": 545
    },
    {
     "id": "evidence_profile:mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "object_id": "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "object_kind": "mechanism",
     "label": "validates public mathlib absence boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "object_id": "mechanism:mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "object_kind": "mechanism",
     "label": "validates public doctrine fact claim audit",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json"
      }
     ],
     "visible_text_byte_count": 545
    },
    {
     "id": "evidence_profile:mechanism:mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "object_id": "mechanism:mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "object_kind": "mechanism",
     "label": "validates public work landing replay contract",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "object_id": "mechanism:mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "object_kind": "mechanism",
     "label": "validates public reference knowledge router",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json"
      }
     ],
     "visible_text_byte_count": 546
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "object_id": "mechanism:mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "object_kind": "mechanism",
     "label": "validates public command run singleflight",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_demo.validates_public_engine_room_demo",
     "object_id": "mechanism:mechanism.engine_room_demo.validates_public_engine_room_demo",
     "object_kind": "mechanism",
     "label": "validates public engine room demo",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json"
      }
     ],
     "visible_text_byte_count": 536
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "object_id": "mechanism:mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "object_kind": "mechanism",
     "label": "validates public derived fact provider engine",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "object_id": "mechanism:mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "object_kind": "mechanism",
     "label": "validates public egress self compliance gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json"
      }
     ],
     "visible_text_byte_count": 547
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "object_id": "mechanism:mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "object_kind": "mechanism",
     "label": "validates public generated projection drift gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json"
      }
     ],
     "visible_text_byte_count": 551
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "object_id": "mechanism:mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "object_kind": "mechanism",
     "label": "validates public lean proof search lab",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json"
      }
     ],
     "visible_text_byte_count": 541
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "object_id": "mechanism:mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "object_kind": "mechanism",
     "label": "validates public navigation fitness benchmark",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "object_id": "mechanism:mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "object_kind": "mechanism",
     "label": "validates public projection leak gate",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json"
      }
     ],
     "visible_text_byte_count": 540
    },
    {
     "id": "evidence_profile:mechanism:mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "object_id": "mechanism:mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "object_kind": "mechanism",
     "label": "validates public doctrine grammar bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json"
      }
     ],
     "visible_text_byte_count": 543
    },
    {
     "id": "evidence_profile:mechanism:mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "object_id": "mechanism:mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "object_kind": "mechanism",
     "label": "validates public finance forecast evaluation spine",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json"
      }
     ],
     "visible_text_byte_count": 553
    },
    {
     "id": "evidence_profile:mechanism:mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "object_id": "mechanism:mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "object_kind": "mechanism",
     "label": "validates public first screen composition root",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json"
      }
     ],
     "visible_text_byte_count": 549
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "object_id": "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "object_kind": "mechanism",
     "label": "validates public evidence cell anchor resolution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json"
      }
     ],
     "visible_text_byte_count": 551
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "object_id": "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "object_kind": "mechanism",
     "label": "validates public evidence cell anchors",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json"
      }
     ],
     "visible_text_byte_count": 541
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "object_id": "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "object_kind": "mechanism",
     "label": "validates public lean lake witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json"
      }
     ],
     "visible_text_byte_count": 537
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "object_id": "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "object_kind": "mechanism",
     "label": "validates public lean witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json"
      }
     ],
     "visible_text_byte_count": 532
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "object_id": "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "object_kind": "mechanism",
     "label": "validates public premise retrieval projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "object_id": "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "object_kind": "mechanism",
     "label": "validates public premise retrieval slice",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json"
      }
     ],
     "visible_text_byte_count": 543
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "object_id": "mechanism:mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "object_kind": "mechanism",
     "label": "validates public formal math readiness bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "object_id": "mechanism:mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "object_kind": "mechanism",
     "label": "validates public readiness boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json"
      }
     ],
     "visible_text_byte_count": 538
    },
    {
     "id": "evidence_profile:mechanism:mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "object_id": "mechanism:mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "object_kind": "mechanism",
     "label": "validates public verifier trace repair bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json"
      }
     ],
     "visible_text_byte_count": 548
    },
    {
     "id": "evidence_profile:mechanism:mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "object_id": "mechanism:mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "object_kind": "mechanism",
     "label": "validates public indirect prompt injection information flow policy replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json"
      }
     ],
     "visible_text_byte_count": 576
    },
    {
     "id": "evidence_profile:mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "object_id": "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "object_kind": "mechanism",
     "label": "validates public lean std premise catalog",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json"
      }
     ],
     "visible_text_byte_count": 544
    },
    {
     "id": "evidence_profile:mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "object_id": "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "object_kind": "mechanism",
     "label": "validates public lean std premise index",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json"
      }
     ],
     "visible_text_byte_count": 542
    },
    {
     "id": "evidence_profile:mechanism:mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "object_id": "mechanism:mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "object_kind": "mechanism",
     "label": "validates public source projection imports",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json"
      }
     ],
     "visible_text_byte_count": 545
    },
    {
     "id": "evidence_profile:mechanism:mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "object_id": "mechanism:mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "object_kind": "mechanism",
     "label": "validates public materials lab safety replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json"
      }
     ],
     "visible_text_byte_count": 547
    },
    {
     "id": "evidence_profile:mechanism:mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "object_id": "mechanism:mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "object_kind": "mechanism",
     "label": "validates public strategy hypothesis projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json"
      }
     ],
     "visible_text_byte_count": 550
    },
    {
     "id": "evidence_profile:mechanism:mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "object_id": "mechanism:mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "object_kind": "mechanism",
     "label": "validates public mcp tool authority replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json"
      }
     ],
     "visible_text_byte_count": 545
    },
    {
     "id": "evidence_profile:mechanism:mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "object_id": "mechanism:mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "object_kind": "mechanism",
     "label": "validates public mechanistic interpretability circuit attribution replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json"
      }
     ],
     "visible_text_byte_count": 575
    },
    {
     "id": "evidence_profile:mechanism:mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "object_id": "mechanism:mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "object_kind": "mechanism",
     "label": "validates public axiom support boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json"
      }
     ],
     "visible_text_byte_count": 542
    },
    {
     "id": "evidence_profile:mechanism:mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "object_id": "mechanism:mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "object_kind": "mechanism",
     "label": "validates public mission transaction bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json"
      }
     ],
     "visible_text_byte_count": 546
    },
    {
     "id": "evidence_profile:mechanism:mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "object_id": "mechanism:mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "object_kind": "mechanism",
     "label": "validates public route plane bundle",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json"
      }
     ],
     "visible_text_byte_count": 538
    },
    {
     "id": "evidence_profile:mechanism:mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "object_id": "mechanism:mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "object_kind": "mechanism",
     "label": "validates public pattern assimilation step",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json"
      }
     ],
     "visible_text_byte_count": 545
    },
    {
     "id": "evidence_profile:mechanism:mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "object_id": "mechanism:mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "object_kind": "mechanism",
     "label": "validates public pattern bindings",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json"
      }
     ],
     "visible_text_byte_count": 536
    },
    {
     "id": "evidence_profile:mechanism:mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "object_id": "mechanism:mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "object_kind": "mechanism",
     "label": "validates public prediction oracle reconciliation",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json"
      }
     ],
     "visible_text_byte_count": 552
    },
    {
     "id": "evidence_profile:mechanism:mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "object_id": "mechanism:mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "object_kind": "mechanism",
     "label": "validates synthetic governed mutation authorization",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json"
      }
     ],
     "visible_text_byte_count": 554
    },
    {
     "id": "evidence_profile:mechanism:mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "object_id": "mechanism:mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "object_kind": "mechanism",
     "label": "validates ring2 diagnostic evidence membrane",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json"
      }
     ],
     "visible_text_byte_count": 547
    },
    {
     "id": "evidence_profile:mechanism:mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "object_id": "mechanism:mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "object_kind": "mechanism",
     "label": "validates public context budget boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json"
      }
     ],
     "visible_text_byte_count": 543
    },
    {
     "id": "evidence_profile:mechanism:mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "object_id": "mechanism:mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "object_kind": "mechanism",
     "label": "validates public reveal walkthrough",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json"
      }
     ],
     "visible_text_byte_count": 538
    },
    {
     "id": "evidence_profile:mechanism:mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "object_id": "mechanism:mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "object_kind": "mechanism",
     "label": "validates public research replication replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json"
      }
     ],
     "visible_text_byte_count": 547
    },
    {
     "id": "evidence_profile:mechanism:mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "object_id": "mechanism:mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "object_kind": "mechanism",
     "label": "validates public premise retrieval attribution",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json"
      }
     ],
     "visible_text_byte_count": 549
    },
    {
     "id": "evidence_profile:mechanism:mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "object_id": "mechanism:mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "object_kind": "mechanism",
     "label": "validates public routing anti patterns registry",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json"
      }
     ],
     "visible_text_byte_count": 550
    },
    {
     "id": "evidence_profile:mechanism:mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "object_id": "mechanism:mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "object_kind": "mechanism",
     "label": "validates public self ignorance coverage ledger",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json"
      }
     ],
     "visible_text_byte_count": 550
    },
    {
     "id": "evidence_profile:mechanism:mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "object_id": "mechanism:mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "object_kind": "mechanism",
     "label": "validates public sleeper memory poisoning quarantine replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json"
      }
     ],
     "visible_text_byte_count": 562
    },
    {
     "id": "evidence_profile:mechanism:mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "object_id": "mechanism:mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "object_kind": "mechanism",
     "label": "validates public spatial world model counterfactual simulation replay",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json"
      }
     ],
     "visible_text_byte_count": 572
    },
    {
     "id": "evidence_profile:mechanism:mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "object_id": "mechanism:mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "object_kind": "mechanism",
     "label": "validates public standards meta diagnostics",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json"
      }
     ],
     "visible_text_byte_count": 546
    },
    {
     "id": "evidence_profile:mechanism:mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "object_id": "mechanism:mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "object_kind": "mechanism",
     "label": "validates public tactic availability projection",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json"
      }
     ],
     "visible_text_byte_count": 550
    },
    {
     "id": "evidence_profile:mechanism:mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "object_id": "mechanism:mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "object_kind": "mechanism",
     "label": "validates public tactic routing boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json"
      }
     ],
     "visible_text_byte_count": 543
    },
    {
     "id": "evidence_profile:mechanism:mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "object_id": "mechanism:mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "object_kind": "mechanism",
     "label": "validates public tool server pressure inventory",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json"
      }
     ],
     "visible_text_byte_count": 550
    },
    {
     "id": "evidence_profile:mechanism:mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "object_id": "mechanism:mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "object_kind": "mechanism",
     "label": "validates public symbol boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json"
      }
     ],
     "visible_text_byte_count": 535
    },
    {
     "id": "evidence_profile:mechanism:mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "object_id": "mechanism:mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "object_kind": "mechanism",
     "label": "validates public verifier transition witness",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json"
      }
     ],
     "visible_text_byte_count": 547
    },
    {
     "id": "evidence_profile:mechanism:mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "object_id": "mechanism:mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "object_kind": "mechanism",
     "label": "composes public formal math result records",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json"
      }
     ],
     "visible_text_byte_count": 545
    },
    {
     "id": "evidence_profile:mechanism:mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "object_id": "mechanism:mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "object_kind": "mechanism",
     "label": "validates public voice to doctrine self improvement loop",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json"
      }
     ],
     "visible_text_byte_count": 559
    },
    {
     "id": "evidence_profile:mechanism:mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "object_id": "mechanism:mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "object_kind": "mechanism",
     "label": "validates public projection drift control boundary",
     "relative_href": "docs/rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
      "scope_limit": null,
      "anti_claims": [
       "This mechanism JSON seed does not flip source authority away from core/mechanism_sources.json.",
       "Resolved code-locus paths prove filesystem grounding only, not runtime correctness or launch-scope decision."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json"
      }
     ],
     "visible_text_byte_count": 553
    },
    {
     "id": "evidence_profile:paper_module:paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "object_id": "paper_module:paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "object_kind": "paper_module",
     "label": "Agent Benchmark Integrity Anti-Gaming Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied public source pattern provenance bodies and metadata-only synthetic benchmark-integrity replay result records only; no benchmark claims, SWE-bench performance claim, hidden-gold access, oracle patch body export, private issue body export, external model access, live repository mutation, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.",
      "does_not_prove": "Copied public source pattern provenance bodies and metadata-only synthetic benchmark-integrity replay result records only; no benchmark claims, SWE-bench performance claim, hidden-gold access, oracle patch body export, private issue body export, external model access, live repository mutation, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied public source pattern provenance bodies and metadata-only synthetic benchmark-integrity replay result records only; no benchmark claims, SWE-bench performance claim, hidden-gold access, oracle patch body export, private issue body export, external model access, live repository mutation, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1501
    },
    {
     "id": "evidence_profile:paper_module:paper_module.agent_closeout_faithfulness_audit",
     "object_id": "paper_module:paper_module.agent_closeout_faithfulness_audit",
     "object_kind": "paper_module",
     "label": "Agent Completion Faithfulness Audit",
     "relative_href": "docs/paper-modules.html#paper-module-agent-closeout-faithfulness-audit",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public fixture and exported-bundle result records only; no arbitrary live commit proof, work log mutation or closure, live Git mutation, external model access, launch-scope decision, broad completion certification, or pytest-pass claim without explicit exit-zero status.",
      "does_not_prove": "Public fixture and exported-bundle result records only; no arbitrary live commit proof, work log mutation or closure, live Git mutation, external model access, launch-scope decision, broad completion certification, or pytest-pass claim without explicit exit-zero status.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public fixture and exported-bundle result records only; no arbitrary live commit proof, work log mutation or closure, live Git mutation, external model access, launch-scope decision, broad completion certification, or pytest-pass claim without explicit exit-zero status.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_closeout_faithfulness_audit.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1117
    },
    {
     "id": "evidence_profile:paper_module:paper_module.agent_memory_temporal_conflict_replay",
     "object_id": "paper_module:paper_module.agent_memory_temporal_conflict_replay",
     "object_kind": "paper_module",
     "label": "Agent Memory Temporal-Conflict Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-memory-temporal-conflict-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Synthetic replay fixture only; not a live memory product, private transcript export, source-authority claim, or launch claim.",
      "does_not_prove": "Synthetic replay fixture only; not a live memory product, private transcript export, source-authority claim, or launch claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Synthetic replay fixture only; not a live memory product, private transcript export, source-authority claim, or launch claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_memory_temporal_conflict_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 684
    },
    {
     "id": "evidence_profile:paper_module:paper_module.agent_monitor_redteam_falsification_replay",
     "object_id": "paper_module:paper_module.agent_monitor_redteam_falsification_replay",
     "object_kind": "paper_module",
     "label": "Agent Monitor Redteam Falsification Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Synthetic replay fixture only; not a live monitor product, control eval, exploit guide, product-spine system, or complete-security claim.",
      "does_not_prove": "Synthetic replay fixture only; not a live monitor product, control eval, exploit guide, product-spine system, or complete-security claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Synthetic replay fixture only; not a live monitor product, control eval, exploit guide, product-spine system, or complete-security claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_monitor_redteam_falsification_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 725
    },
    {
     "id": "evidence_profile:paper_module:paper_module.agent_route_observability_runtime",
     "object_id": "paper_module:paper_module.agent_route_observability_runtime",
     "object_kind": "paper_module",
     "label": "Agent Route Observability Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-agent-route-observability-runtime",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public synthetic route-observability fixtures, copied source body digests, and exported-bundle result records only; no live session introspection, provider/browser UI/account authority, live hook control, benchmark-performance proof, source-file changes, launch-scope decision, or whole-system correctness.",
      "does_not_prove": "Public synthetic route-observability fixtures, copied source body digests, and exported-bundle result records only; no live session introspection, provider/browser UI/account authority, live hook control, benchmark-performance proof, source-file changes, launch-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public synthetic route-observability fixtures, copied source body digests, and exported-bundle result records only; no live session introspection, provider/browser UI/account authority, live hook control, benchmark-performance proof, source-file changes, launch-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_route_observability_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1223
    },
    {
     "id": "evidence_profile:paper_module:paper_module.agent_sabotage_scheming_monitor_replay",
     "object_id": "paper_module:paper_module.agent_sabotage_scheming_monitor_replay",
     "object_kind": "paper_module",
     "label": "Agent Sabotage Scheming-Monitor Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "No live sabotage, exploit instruction, account secret/account material, private reasoning, harmful payload, or deployment-risk product claim; synthetic fixtures and metadata-only result records only.",
      "does_not_prove": "No live sabotage, exploit instruction, account secret/account material, private reasoning, harmful payload, or deployment-risk product claim; synthetic fixtures and metadata-only result records only.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "No live sabotage, exploit instruction, account secret/account material, private reasoning, harmful payload, or deployment-risk product claim; synthetic fixtures and metadata-only result records only.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sabotage_scheming_monitor_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 907
    },
    {
     "id": "evidence_profile:paper_module:paper_module.agent_sandbox_policy_escape_replay",
     "object_id": "paper_module:paper_module.agent_sandbox_policy_escape_replay",
     "object_kind": "paper_module",
     "label": "Agent Sandbox Policy-Escape Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agent-sandbox-policy-escape-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "No live sandbox escape, live secret handling, or live network; source-faithful refactored fixtures and metadata-only result records only; not a complete-security or launch claim.",
      "does_not_prove": "No live sandbox escape, live secret handling, or live network; source-faithful refactored fixtures and metadata-only result records only; not a complete-security or launch claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "No live sandbox escape, live secret handling, or live network; source-faithful refactored fixtures and metadata-only result records only; not a complete-security or launch claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sandbox_policy_escape_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 840
    },
    {
     "id": "evidence_profile:paper_module:paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "object_id": "paper_module:paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "object_kind": "paper_module",
     "label": "Agentic Vulnerability Discovery Patch-Proof Replay",
     "relative_href": "docs/paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied public source/control/standard/tool bodies, metadata-only synthetic patch-proof replay result records, public agent-execution trace spans, and fixture validation only; no live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, external model access, source-file changes, benchmark security score, launch-scope decision, publishing-scope decision, whole-system security claim, or product-progress evidence.",
      "does_not_prove": "Copied public source/control/standard/tool bodies, metadata-only synthetic patch-proof replay result records, public agent-execution trace spans, and fixture validation only; no live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, external model access, source-file changes, benchmark security score, launch-scope decision, publishing-scope decision, whole-system security claim, or product-progress evidence.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied public source/control/standard/tool bodies, metadata-only synthetic patch-proof replay result records, public agent-execution trace spans, and fixture validation only; no live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, external model access, source-file changes, benchmark security score, launch-scope decision, publishing-scope decision, whole-system security claim, or product-progress evidence.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1843
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch10_cold_eval_honesty_capsule",
     "object_id": "paper_module:paper_module.batch10_cold_eval_honesty_capsule",
     "object_kind": "paper_module",
     "label": "Set 10 Cold Eval Honesty Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound route-quality scorecard and copied source refs only; no live benchmark, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.",
      "does_not_prove": "Fixture-bound route-quality scorecard and copied source refs only; no live benchmark, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound route-quality scorecard and copied source refs only; no live benchmark, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_cold_eval_honesty_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 954
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch10_governance_compilers_capsule",
     "object_id": "paper_module:paper_module.batch10_governance_compilers_capsule",
     "object_kind": "paper_module",
     "label": "Set 10 Governance And Compilers Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-governance-compilers-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public source-body import, source-faithful public refactor evidence, deterministic exercise evidence, and metadata-only result records only; no live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, market advice, private-system equivalence, neutral benchmark claim, or whole-system correctness.",
      "does_not_prove": "Fixture-bound public source-body import, source-faithful public refactor evidence, deterministic exercise evidence, and metadata-only result records only; no live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, market advice, private-system equivalence, neutral benchmark claim, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public source-body import, source-faithful public refactor evidence, deterministic exercise evidence, and metadata-only result records only; no live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, market advice, private-system equivalence, neutral benchmark claim, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_governance_compilers_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1480
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch10_live_source_drift_capsule",
     "object_id": "paper_module:paper_module.batch10_live_source_drift_capsule",
     "object_kind": "paper_module",
     "label": "Set 10 Live Source Drift Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch10-live-source-drift-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound source-digest, anchor, compile, and scope limit evidence only; no route authority, Work or work log mutation, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.",
      "does_not_prove": "Fixture-bound source-digest, anchor, compile, and scope limit evidence only; no route authority, Work or work log mutation, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound source-digest, anchor, compile, and scope limit evidence only; no route authority, Work or work log mutation, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_live_source_drift_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1065
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch11_saturation_engines_capsule",
     "object_id": "paper_module:paper_module.batch11_saturation_engines_capsule",
     "object_kind": "paper_module",
     "label": "Set 11 Saturation Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch11-saturation-engines-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public source-body import, source-faithful public port evidence, computed negative-probe evidence, and metadata-only result records only; no live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
      "does_not_prove": "Fixture-bound public source-body import, source-faithful public port evidence, computed negative-probe evidence, and metadata-only result records only; no live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public source-body import, source-faithful public port evidence, computed negative-probe evidence, and metadata-only result records only; no live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch11_saturation_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1690
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch12_market_dashboard_read_model_capsule",
     "object_id": "paper_module:paper_module.batch12_market_dashboard_read_model_capsule",
     "object_kind": "paper_module",
     "label": "Set 12 Market Dashboard Read-Model Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound market-dashboard read-model evidence and copied source refs only; no launch-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Fixture-bound market-dashboard read-model evidence and copied source refs only; no launch-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound market-dashboard read-model evidence and copied source refs only; no launch-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_market_dashboard_read_model_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1111
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch12_prediction_market_board_capsule",
     "object_id": "paper_module:paper_module.batch12_prediction_market_board_capsule",
     "object_kind": "paper_module",
     "label": "Set 12 Prediction Market Board Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-prediction-market-board-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound prediction-board and quant-mart diagnostic evidence plus copied source refs only; no market-level conclusions, provider truth, investment-related actions, external model access, private-system equivalence, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Fixture-bound prediction-board and quant-mart diagnostic evidence plus copied source refs only; no market-level conclusions, provider truth, investment-related actions, external model access, private-system equivalence, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound prediction-board and quant-mart diagnostic evidence plus copied source refs only; no market-level conclusions, provider truth, investment-related actions, external model access, private-system equivalence, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_prediction_market_board_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1203
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch12_release_claim_language_gate",
     "object_id": "paper_module:paper_module.batch12_release_claim_language_gate",
     "object_kind": "paper_module",
     "label": "Set 12 launch claim-Language Gate",
     "relative_href": "docs/paper-modules.html#paper-module-batch12-release-claim-language-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound launch-claim language gate evidence and copied source refs only; no launch-scope decision, publishing-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, or whole-system correctness.",
      "does_not_prove": "Fixture-bound launch-claim language gate evidence and copied source refs only; no launch-scope decision, publishing-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound launch-claim language gate evidence and copied source refs only; no launch-scope decision, publishing-scope decision, external model access, private-system equivalence, market-level conclusions, investment-related actions, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_release_claim_language_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1100
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch4_proof_authority_runtime",
     "object_id": "paper_module:paper_module.batch4_proof_authority_runtime",
     "object_kind": "paper_module",
     "label": "Set 4 Proof, Authority, and Runtime Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch4-proof-authority-runtime",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public source-body import, static proof-placeholder checks, dry-run authority-boundary evidence, source-anchor evidence, negative-case evidence, and metadata-only result records only; no theorem success, Erdos #257 solution, official benchmark claims, live sandbox enforcement, live Codex orchestration, external model access, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
      "does_not_prove": "Fixture-bound public source-body import, static proof-placeholder checks, dry-run authority-boundary evidence, source-anchor evidence, negative-case evidence, and metadata-only result records only; no theorem success, Erdos #257 solution, official benchmark claims, live sandbox enforcement, live Codex orchestration, external model access, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public source-body import, static proof-placeholder checks, dry-run authority-boundary evidence, source-anchor evidence, negative-case evidence, and metadata-only result records only; no theorem success, Erdos #257 solution, official benchmark claims, live sandbox enforcement, live Codex orchestration, external model access, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch4_proof_authority_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1718
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch5_authority_systems_capsule",
     "object_id": "paper_module:paper_module.batch5_authority_systems_capsule",
     "object_kind": "paper_module",
     "label": "Set 5 Authority and Systems Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch5-authority-systems-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public source-body import, copied-module digest and anchor evidence, synthetic source-exercise evidence, and metadata-only result records only; no live external model access, proof success, process signal authority, generated-state mutation authority, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
      "does_not_prove": "Fixture-bound public source-body import, copied-module digest and anchor evidence, synthetic source-exercise evidence, and metadata-only result records only; no live external model access, proof success, process signal authority, generated-state mutation authority, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public source-body import, copied-module digest and anchor evidence, synthetic source-exercise evidence, and metadata-only result records only; no live external model access, proof success, process signal authority, generated-state mutation authority, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch5_authority_systems_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1485
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch6_unsurfaced_primitives_capsule",
     "object_id": "paper_module:paper_module.batch6_unsurfaced_primitives_capsule",
     "object_kind": "paper_module",
     "label": "Set 6 Unsurfaced Primitives Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public source-body import, copied-module digest/anchor evidence, synthetic source-exercise evidence, and metadata-only result records only; no live operator memory, prompt-shelf capture authority, live market data, provider/browser state, media launch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
      "does_not_prove": "Fixture-bound public source-body import, copied-module digest/anchor evidence, synthetic source-exercise evidence, and metadata-only result records only; no live operator memory, prompt-shelf capture authority, live market data, provider/browser state, media launch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public source-body import, copied-module digest/anchor evidence, synthetic source-exercise evidence, and metadata-only result records only; no live operator memory, prompt-shelf capture authority, live market data, provider/browser state, media launch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch6_unsurfaced_primitives_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1488
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch7_demo_take_console_capsule",
     "object_id": "paper_module:paper_module.batch7_demo_take_console_capsule",
     "object_kind": "paper_module",
     "label": "Set 7 Demo Take Console Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-demo-take-console-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public Swift source-body import, copied-module digest and anchor evidence, deterministic local exercise evidence, SwiftPM build-witness evidence, and metadata-only result records only; no app launch authority, screen capture authority, microphone capture authority, recording-session export, FFmpeg execution, WhisperKit/model dispatch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete UI coverage, or whole-system correctness.",
      "does_not_prove": "Fixture-bound public Swift source-body import, copied-module digest and anchor evidence, deterministic local exercise evidence, SwiftPM build-witness evidence, and metadata-only result records only; no app launch authority, screen capture authority, microphone capture authority, recording-session export, FFmpeg execution, WhisperKit/model dispatch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete UI coverage, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public Swift source-body import, copied-module digest and anchor evidence, deterministic local exercise evidence, SwiftPM build-witness evidence, and metadata-only result records only; no app launch authority, screen capture authority, microphone capture authority, recording-session export, FFmpeg execution, WhisperKit/model dispatch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete UI coverage, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_demo_take_console_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1802
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch7_macro_engines_capsule",
     "object_id": "paper_module:paper_module.batch7_macro_engines_capsule",
     "object_kind": "paper_module",
     "label": "Set 7 Source Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-macro-engines-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public source-body import and deterministic exercise evidence only; no launch-scope decision, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, external model access, or source-file changes.",
      "does_not_prove": "Fixture-bound public source-body import and deterministic exercise evidence only; no launch-scope decision, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, external model access, or source-file changes.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public source-body import and deterministic exercise evidence only; no launch-scope decision, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, external model access, or source-file changes.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_macro_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1148
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch7_oracle_sibling_capsule",
     "object_id": "paper_module:paper_module.batch7_oracle_sibling_capsule",
     "object_kind": "paper_module",
     "label": "Set 7 Oracle Sibling Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-oracle-sibling-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public Oracle source-body import, copied-module digest and anchor evidence, deterministic local exercise evidence, original pytest witness evidence, and metadata-only result records only; no Oracle reasoning authority, semantic truth authority, external model access, bridge-backed reasoning, private orchestration engine invocation, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete Oracle coverage, or whole-system correctness.",
      "does_not_prove": "Fixture-bound public Oracle source-body import, copied-module digest and anchor evidence, deterministic local exercise evidence, original pytest witness evidence, and metadata-only result records only; no Oracle reasoning authority, semantic truth authority, external model access, bridge-backed reasoning, private orchestration engine invocation, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete Oracle coverage, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public Oracle source-body import, copied-module digest and anchor evidence, deterministic local exercise evidence, original pytest witness evidence, and metadata-only result records only; no Oracle reasoning authority, semantic truth authority, external model access, bridge-backed reasoning, private orchestration engine invocation, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, complete Oracle coverage, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_oracle_sibling_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1802
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch7_secondary_runtime_capsule",
     "object_id": "paper_module:paper_module.batch7_secondary_runtime_capsule",
     "object_kind": "paper_module",
     "label": "Set 7 Secondary Runtime Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch7-secondary-runtime-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public source-body import and secondary runtime/market witness evidence only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, launch-scope decision, private-system equivalence, semantic truth, source-file changes, or complete UI/ranking coverage proof.",
      "does_not_prove": "Fixture-bound public source-body import and secondary runtime/market witness evidence only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, launch-scope decision, private-system equivalence, semantic truth, source-file changes, or complete UI/ranking coverage proof.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public source-body import and secondary runtime/market witness evidence only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, launch-scope decision, private-system equivalence, semantic truth, source-file changes, or complete UI/ranking coverage proof.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_secondary_runtime_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1298
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch8_audio_level_rms_port",
     "object_id": "paper_module:paper_module.batch8_audio_level_rms_port",
     "object_kind": "paper_module",
     "label": "Set 8 Audio Level RMS Port",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-audio-level-rms-port",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Deterministic RMS parity evidence over public fixture inputs and copied source refs only; no macOS audio-session evidence, microphone permission authority, device capture, recorded audio, UI readiness, source-file changes, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Deterministic RMS parity evidence over public fixture inputs and copied source refs only; no macOS audio-session evidence, microphone permission authority, device capture, recorded audio, UI readiness, source-file changes, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Deterministic RMS parity evidence over public fixture inputs and copied source refs only; no macOS audio-session evidence, microphone permission authority, device capture, recorded audio, UI readiness, source-file changes, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_audio_level_rms_port.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1201
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch8_compliance_pipeline_capsule",
     "object_id": "paper_module:paper_module.batch8_compliance_pipeline_capsule",
     "object_kind": "paper_module",
     "label": "Set 8 Compliance Pipeline Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-compliance-pipeline-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Declared public compliance and pipeline fixture evidence plus copied source-module digest checks only; no full compliance-ledger refresh, bridge/external model access authority, source note mutation, repository mutation, complete compliance proof, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Declared public compliance and pipeline fixture evidence plus copied source-module digest checks only; no full compliance-ledger refresh, bridge/external model access authority, source note mutation, repository mutation, complete compliance proof, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Declared public compliance and pipeline fixture evidence plus copied source-module digest checks only; no full compliance-ledger refresh, bridge/external model access authority, source note mutation, repository mutation, complete compliance proof, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_compliance_pipeline_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1282
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch8_policy_engines_capsule",
     "object_id": "paper_module:paper_module.batch8_policy_engines_capsule",
     "object_kind": "paper_module",
     "label": "Set 8 Policy Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-policy-engines-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Deterministic public policy-engine fixture evidence and copied source source refs only; no live campaign execution, external model access, repository mutation, private artifact export, market validation, publishing-scope decision, launch-scope decision, or whole-system correctness.",
      "does_not_prove": "Deterministic public policy-engine fixture evidence and copied source source refs only; no live campaign execution, external model access, repository mutation, private artifact export, market validation, publishing-scope decision, launch-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Deterministic public policy-engine fixture evidence and copied source source refs only; no live campaign execution, external model access, repository mutation, private artifact export, market validation, publishing-scope decision, launch-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_policy_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1145
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch8_structural_theses_capsule",
     "object_id": "paper_module:paper_module.batch8_structural_theses_capsule",
     "object_kind": "paper_module",
     "label": "Set 8 Structural Theses Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-structural-theses-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Deterministic fixture evidence over public synthetic thesis rows and copied source refs only; no financial decisions, investment recommendation, live-market validation, external model access, portfolio authority, publishing-scope decision, launch-scope decision, or whole-system correctness.",
      "does_not_prove": "Deterministic fixture evidence over public synthetic thesis rows and copied source refs only; no financial decisions, investment recommendation, live-market validation, external model access, portfolio authority, publishing-scope decision, launch-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Deterministic fixture evidence over public synthetic thesis rows and copied source refs only; no financial decisions, investment recommendation, live-market validation, external model access, portfolio authority, publishing-scope decision, launch-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_structural_theses_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1175
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch8_tools_tail_primitives_capsule",
     "object_id": "paper_module:paper_module.batch8_tools_tail_primitives_capsule",
     "object_kind": "paper_module",
     "label": "Set 8 Tools-Tail Primitives Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Deterministic public tools-tail fixture evidence and copied source source refs only; no oracle truth, prediction correctness, semantic edit correctness, Lab execution authority, live bridge authority, repository mutation authority, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Deterministic public tools-tail fixture evidence and copied source source refs only; no oracle truth, prediction correctness, semantic edit correctness, Lab execution authority, live bridge authority, repository mutation authority, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Deterministic public tools-tail fixture evidence and copied source source refs only; no oracle truth, prediction correctness, semantic edit correctness, Lab execution authority, live bridge authority, repository mutation authority, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_tools_tail_primitives_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1305
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch8_validator_checker_capsule",
     "object_id": "paper_module:paper_module.batch8_validator_checker_capsule",
     "object_kind": "paper_module",
     "label": "Set 8 Validator Checker Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch8-validator-checker-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Selected public checker-group fixture and copied validator-source evidence only; no launch-scope decision, hosted-public proof, source-file changes, complete validator-suite proof, external model access authority, publishing-scope decision, launch-scope decision, or whole-system correctness.",
      "does_not_prove": "Selected public checker-group fixture and copied validator-source evidence only; no launch-scope decision, hosted-public proof, source-file changes, complete validator-suite proof, external model access authority, publishing-scope decision, launch-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Selected public checker-group fixture and copied validator-source evidence only; no launch-scope decision, hosted-public proof, source-file changes, complete validator-suite proof, external model access authority, publishing-scope decision, launch-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_validator_checker_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1178
    },
    {
     "id": "evidence_profile:paper_module:paper_module.batch9_macro_engines_capsule",
     "object_id": "paper_module:paper_module.batch9_macro_engines_capsule",
     "object_kind": "paper_module",
     "label": "Set 9 Source Engines Bundle",
     "relative_href": "docs/paper-modules.html#paper-module-batch9-macro-engines-capsule",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Fixture-bound public source-body import and deterministic exercise evidence only; no live lineage truth, human approval authority, real market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
      "does_not_prove": "Fixture-bound public source-body import and deterministic exercise evidence only; no live lineage truth, human approval authority, real market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Fixture-bound public source-body import and deterministic exercise evidence only; no live lineage truth, human approval authority, real market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch9_macro_engines_capsule.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1205
    },
    {
     "id": "evidence_profile:paper_module:paper_module.belief_state_process_reward_replay",
     "object_id": "paper_module:paper_module.belief_state_process_reward_replay",
     "object_kind": "paper_module",
     "label": "Belief-State Process Reward Replay",
     "relative_href": "docs/paper-modules.html#paper-module-belief-state-process-reward-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Source-faithful refactored fixtures and copied source bodies only; not fixture-echo product evidence, benchmark result, or launch claim.",
      "does_not_prove": "Source-faithful refactored fixtures and copied source bodies only; not fixture-echo product evidence, benchmark result, or launch claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Source-faithful refactored fixtures and copied source bodies only; not fixture-echo product evidence, benchmark result, or launch claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/belief_state_process_reward_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 714
    },
    {
     "id": "evidence_profile:paper_module:paper_module.bounded_autonomy_campaign_packet",
     "object_id": "paper_module:paper_module.bounded_autonomy_campaign_packet",
     "object_kind": "paper_module",
     "label": "Bounded Autonomy Campaign Packet",
     "relative_href": "docs/paper-modules.html#paper-module-bounded-autonomy-campaign-packet",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Self-proposal campaign packet fixture and exported-bundle result record evidence only; no self-repair authority, unsupervised source-file changes, live scheduler authority, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Self-proposal campaign packet fixture and exported-bundle result record evidence only; no self-repair authority, unsupervised source-file changes, live scheduler authority, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Self-proposal campaign packet fixture and exported-bundle result record evidence only; no self-repair authority, unsupervised source-file changes, live scheduler authority, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bounded_autonomy_campaign_packet.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1126
    },
    {
     "id": "evidence_profile:paper_module:paper_module.bridge_phase_continuity_runtime",
     "object_id": "paper_module:paper_module.bridge_phase_continuity_runtime",
     "object_kind": "paper_module",
     "label": "Bridge Phase Continuity Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-bridge-phase-continuity-runtime",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public synthetic observe/apply fixture and copied body digest evidence only; no live bridge transport, provider/UI uptime, operator HUD/browser state, live phase runtime, prompt-shelf/private-memory bodies, work landing, source-file changes, launch-scope decision, or whole-system correctness.",
      "does_not_prove": "Public synthetic observe/apply fixture and copied body digest evidence only; no live bridge transport, provider/UI uptime, operator HUD/browser state, live phase runtime, prompt-shelf/private-memory bodies, work landing, source-file changes, launch-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public synthetic observe/apply fixture and copied body digest evidence only; no live bridge transport, provider/UI uptime, operator HUD/browser state, live phase runtime, prompt-shelf/private-memory bodies, work landing, source-file changes, launch-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bridge_phase_continuity_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1182
    },
    {
     "id": "evidence_profile:paper_module:paper_module.certificate_kernel_execution_lab",
     "object_id": "paper_module:paper_module.certificate_kernel_execution_lab",
     "object_kind": "paper_module",
     "label": "Certificate Kernel Execution Lab",
     "relative_href": "docs/paper-modules.html#paper-module-certificate-kernel-execution-lab",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public Lean/Lake subprocess witness, copied source proof/tool/profile bodies, first-wave fixture result records, and exported bundle result records only; no general formal-result correctness, private proof body export, external model access, oracle authority, source-file changes, benchmark solve-rate, launch-scope decision, publishing-scope decision, or whole-system proof claim.",
      "does_not_prove": "Public Lean/Lake subprocess witness, copied source proof/tool/profile bodies, first-wave fixture result records, and exported bundle result records only; no general formal-result correctness, private proof body export, external model access, oracle authority, source-file changes, benchmark solve-rate, launch-scope decision, publishing-scope decision, or whole-system proof claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public Lean/Lake subprocess witness, copied source proof/tool/profile bodies, first-wave fixture result records, and exported bundle result records only; no general formal-result correctness, private proof body export, external model access, oracle authority, source-file changes, benchmark solve-rate, launch-scope decision, publishing-scope decision, or whole-system proof claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/certificate_kernel_execution_lab.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1447
    },
    {
     "id": "evidence_profile:paper_module:paper_module.cognitive_operator_registry",
     "object_id": "paper_module:paper_module.cognitive_operator_registry",
     "object_kind": "paper_module",
     "label": "Cognitive Operator Registry",
     "relative_href": "docs/paper-modules.html#paper-module-cognitive-operator-registry",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public registry-contract fixture and copied source body evidence only; no live operator execution, registry mutation, source-file changes, external model access, launch-scope decision, private-data equivalence, operator correctness proof, or whole-system correctness.",
      "does_not_prove": "Public registry-contract fixture and copied source body evidence only; no live operator execution, registry mutation, source-file changes, external model access, launch-scope decision, private-data equivalence, operator correctness proof, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public registry-contract fixture and copied source body evidence only; no live operator execution, registry mutation, source-file changes, external model access, launch-scope decision, private-data equivalence, operator correctness proof, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cognitive_operator_registry.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1100
    },
    {
     "id": "evidence_profile:paper_module:paper_module.cold_clone_probe",
     "object_id": "paper_module:paper_module.cold_clone_probe",
     "object_kind": "paper_module",
     "label": "Cold Clone Probe",
     "relative_href": "docs/paper-modules.html#paper-module-cold-clone-probe",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public source-root bootstrap mechanics and metadata-only result record refs only; no launch-scope decision, hosted-product readiness, external model access, source-file changes, private-system equivalence, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Public source-root bootstrap mechanics and metadata-only result record refs only; no launch-scope decision, hosted-product readiness, external model access, source-file changes, private-system equivalence, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public source-root bootstrap mechanics and metadata-only result record refs only; no launch-scope decision, hosted-product readiness, external model access, source-file changes, private-system equivalence, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_clone_probe.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1071
    },
    {
     "id": "evidence_profile:paper_module:paper_module.cold_reader_route_map",
     "object_id": "paper_module:paper_module.cold_reader_route_map",
     "object_kind": "paper_module",
     "label": "Cold-Reader Route Map",
     "relative_href": "docs/paper-modules.html#paper-module-cold-reader-route-map",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public route-map fixture, exported-bundle result records, and copied source cold-entry body evidence only; no route registry control, external model access, source-file changes, launch-scope decision, private-data equivalence, trading or financial decisions, or whole-system correctness.",
      "does_not_prove": "Public route-map fixture, exported-bundle result records, and copied source cold-entry body evidence only; no route registry control, external model access, source-file changes, launch-scope decision, private-data equivalence, trading or financial decisions, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public route-map fixture, exported-bundle result records, and copied source cold-entry body evidence only; no route registry control, external model access, source-file changes, launch-scope decision, private-data equivalence, trading or financial decisions, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/cold_reader_route_map.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1154
    },
    {
     "id": "evidence_profile:paper_module:paper_module.computer_use_action_trace_replay",
     "object_id": "paper_module:paper_module.computer_use_action_trace_replay",
     "object_kind": "paper_module",
     "label": "Computer-Use Action Trace Replay",
     "relative_href": "docs/paper-modules.html#paper-module-computer-use-action-trace-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Synthetic public computer-use action-trace fixtures, exported bundle metadata, copied source-module digests, and metadata-only result records only; no live account action, account secret entry, external network mutation, purchase/send authority, destructive host action, hidden screen-state claim, benchmark-score claim, launch-scope decision, or whole-system correctness.",
      "does_not_prove": "Synthetic public computer-use action-trace fixtures, exported bundle metadata, copied source-module digests, and metadata-only result records only; no live account action, account secret entry, external network mutation, purchase/send authority, destructive host action, hidden screen-state claim, benchmark-score claim, launch-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Synthetic public computer-use action-trace fixtures, exported bundle metadata, copied source-module digests, and metadata-only result records only; no live account action, account secret entry, external network mutation, purchase/send authority, destructive host action, hidden screen-state claim, benchmark-score claim, launch-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/computer_use_action_trace_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1420
    },
    {
     "id": "evidence_profile:paper_module:paper_module.concurrency_mission_control",
     "object_id": "paper_module:paper_module.concurrency_mission_control",
     "object_kind": "paper_module",
     "label": "Concurrency Mission Control",
     "relative_href": "docs/paper-modules.html#paper-module-concurrency-mission-control",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Verified concurrency mission-control fixture and source-module import evidence only; no live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Verified concurrency mission-control fixture and source-module import evidence only; no live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Verified concurrency mission-control fixture and source-module import evidence only; no live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/concurrency_mission_control.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1229
    },
    {
     "id": "evidence_profile:paper_module:paper_module.corpus_readiness_mathlib_absence_gate",
     "object_id": "paper_module:paper_module.corpus_readiness_mathlib_absence_gate",
     "object_kind": "paper_module",
     "label": "Corpus Readiness Mathlib Absence Gate",
     "relative_href": "docs/paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public algorithmic projection over copied corpus/toolchain readiness system, first-wave fixture result records, and exported bundle result records only; no Lean/Lake rerun, Mathlib availability claim, formal-result correctness, proof body export, external model access, benchmark/corpus completeness, launch-scope decision, publishing-scope decision, or whole-system proof claim.",
      "does_not_prove": "Public algorithmic projection over copied corpus/toolchain readiness system, first-wave fixture result records, and exported bundle result records only; no Lean/Lake rerun, Mathlib availability claim, formal-result correctness, proof body export, external model access, benchmark/corpus completeness, launch-scope decision, publishing-scope decision, or whole-system proof claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public algorithmic projection over copied corpus/toolchain readiness system, first-wave fixture result records, and exported bundle result records only; no Lean/Lake rerun, Mathlib availability claim, formal-result correctness, proof body export, external model access, benchmark/corpus completeness, launch-scope decision, publishing-scope decision, or whole-system proof claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/corpus_readiness_mathlib_absence.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1446
    },
    {
     "id": "evidence_profile:paper_module:paper_module.doctrine_fact_claim_audit",
     "object_id": "paper_module:paper_module.doctrine_fact_claim_audit",
     "object_kind": "paper_module",
     "label": "Doctrine Fact Claim Audit",
     "relative_href": "docs/paper-modules.html#paper-module-doctrine-fact-claim-audit",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Declared fact-assertion, code-locus, and DAG fixture truth gate only; no comprehension engine, no minimum-read-graph proof, no doctrine saturation claim, no source-file changes, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "does_not_prove": "Declared fact-assertion, code-locus, and DAG fixture truth gate only; no comprehension engine, no minimum-read-graph proof, no doctrine saturation claim, no source-file changes, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Declared fact-assertion, code-locus, and DAG fixture truth gate only; no comprehension engine, no minimum-read-graph proof, no doctrine saturation claim, no source-file changes, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/doctrine_fact_claim_audit.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1095
    },
    {
     "id": "evidence_profile:paper_module:paper_module.durable_agent_work_landing_replay",
     "object_id": "paper_module:paper_module.durable_agent_work_landing_replay",
     "object_kind": "paper_module",
     "label": "Durable Agent Work-Landing Replay",
     "relative_href": "docs/paper-modules.html#paper-module-durable-agent-work-landing-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public synthetic replay result records and copied source work-landing/internal control source bodies only; no live Git mutation, unrelated staging, broad checkpoint authority, arbitrary commit proof, external model access, non-public body export, public sharing, hosting, launch-scope decision, or whole-system correctness.",
      "does_not_prove": "Public synthetic replay result records and copied source work-landing/internal control source bodies only; no live Git mutation, unrelated staging, broad checkpoint authority, arbitrary commit proof, external model access, non-public body export, public sharing, hosting, launch-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public synthetic replay result records and copied source work-landing/internal control source bodies only; no live Git mutation, unrelated staging, broad checkpoint authority, arbitrary commit proof, external model access, non-public body export, public sharing, hosting, launch-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/durable_agent_work_landing_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1274
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_annex_knowledge_router",
     "object_id": "paper_module:paper_module.engine_room_annex_knowledge_router",
     "object_kind": "paper_module",
     "label": "Engine Room Reference Knowledge Router",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-annex-knowledge-router",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public sanitized-reference routing fixture and focused regression evidence only; no BM25, TF-IDF, embedding search, repository cloning, license authority, private reference corpus export, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "does_not_prove": "Public sanitized-reference routing fixture and focused regression evidence only; no BM25, TF-IDF, embedding search, repository cloning, license authority, private reference corpus export, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public sanitized-reference routing fixture and focused regression evidence only; no BM25, TF-IDF, embedding search, repository cloning, license authority, private reference corpus export, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_annex_knowledge_router.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1174
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_bridge_campaign_dag",
     "object_id": "paper_module:paper_module.engine_room_bridge_campaign_dag",
     "object_kind": "paper_module",
     "label": "Engine Room Bridge Campaign DAG",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-bridge-campaign-dag",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Component evidence for the accepted staged Engine Room demo only; no external model access, campaign execution, reducer or synthesis correctness proof, provider safety proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "does_not_prove": "Component evidence for the accepted staged Engine Room demo only; no external model access, campaign execution, reducer or synthesis correctness proof, provider safety proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Component evidence for the accepted staged Engine Room demo only; no external model access, campaign execution, reducer or synthesis correctness proof, provider safety proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_bridge_campaign_dag.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1128
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_command_run_singleflight",
     "object_id": "paper_module:paper_module.engine_room_command_run_singleflight",
     "object_kind": "paper_module",
     "label": "Engine Room Command-Run Singleflight",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-command-run-singleflight",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public subprocess singleflight fixture and focused regression result records only; no job scheduler, daemon, distributed lock service, live command_runs export, external model access authority, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "does_not_prove": "Public subprocess singleflight fixture and focused regression result records only; no job scheduler, daemon, distributed lock service, live command_runs export, external model access authority, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public subprocess singleflight fixture and focused regression result records only; no job scheduler, daemon, distributed lock service, live command_runs export, external model access authority, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_command_run_singleflight.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1190
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_demo",
     "object_id": "paper_module:paper_module.engine_room_demo",
     "object_kind": "paper_module",
     "label": "Engine Room Demo",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-demo",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Validates the declared public composition contract only; not deployment posture, not private-system equivalence, not a frontier theorem-proving claim, not a complete security proof, not benchmark validation, not launch-scope decision.",
      "does_not_prove": "Validates the declared public composition contract only; not deployment posture, not private-system equivalence, not a frontier theorem-proving claim, not a complete security proof, not benchmark validation, not launch-scope decision.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Validates the declared public composition contract only; not deployment posture, not private-system equivalence, not a frontier theorem-proving claim, not a complete security proof, not benchmark validation, not launch-scope decision.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_demo.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 990
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_derived_fact_provider_engine",
     "object_id": "paper_module:paper_module.engine_room_derived_fact_provider_engine",
     "object_kind": "paper_module",
     "label": "Engine Room Derived Fact Provider Engine",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-derived-fact-provider-engine",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public fixture-root fact-provider evidence only; no doctrine truth audit, no semantic claim validation, no full source fact registry export, no launch-scope decision, no private-system equivalence, no source-file changes, and no whole-system correctness.",
      "does_not_prove": "Public fixture-root fact-provider evidence only; no doctrine truth audit, no semantic claim validation, no full source fact registry export, no launch-scope decision, no private-system equivalence, no source-file changes, and no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public fixture-root fact-provider evidence only; no doctrine truth audit, no semantic claim validation, no full source fact registry export, no launch-scope decision, no private-system equivalence, no source-file changes, and no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_derived_fact_provider_engine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1074
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_egress_self_compliance_gate",
     "object_id": "paper_module:paper_module.engine_room_egress_self_compliance_gate",
     "object_kind": "paper_module",
     "label": "Engine Room Egress Self-Compliance Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-egress-self-compliance-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public phrase-policy fixture evidence only; no taint analysis, prompt-injection defense, sandboxing, information-flow proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "does_not_prove": "Public phrase-policy fixture evidence only; no taint analysis, prompt-injection defense, sandboxing, information-flow proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public phrase-policy fixture evidence only; no taint analysis, prompt-injection defense, sandboxing, information-flow proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_egress_self_compliance_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 986
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_generated_projection_drift_gate",
     "object_id": "paper_module:paper_module.engine_room_generated_projection_drift_gate",
     "object_kind": "paper_module",
     "label": "Engine Room Generated Projection Drift Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-generated-projection-drift-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public owner-routed generated projection drift fixture and focused regression result records only; no semantic drift proof, full source registry validation, repair authority, launch-scope decision, private-system equivalence, source-file changes, external model access, or whole-system correctness.",
      "does_not_prove": "Public owner-routed generated projection drift fixture and focused regression result records only; no semantic drift proof, full source registry validation, repair authority, launch-scope decision, private-system equivalence, source-file changes, external model access, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public owner-routed generated projection drift fixture and focused regression result records only; no semantic drift proof, full source registry validation, repair authority, launch-scope decision, private-system equivalence, source-file changes, external model access, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_generated_projection_drift_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1209
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_lean_proof_search_lab",
     "object_id": "paper_module:paper_module.engine_room_lean_proof_search_lab",
     "object_kind": "paper_module",
     "label": "Engine Room Lean Proof Search Lab",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-lean-proof-search-lab",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public tiny-fixture Lean proof-search evidence only; no neural theorem proving, frontier-scale automation, private source run export, oracle-body forward solving, launch-scope decision, private-system equivalence, source-file changes, or whole-system formal-result correctness.",
      "does_not_prove": "Public tiny-fixture Lean proof-search evidence only; no neural theorem proving, frontier-scale automation, private source run export, oracle-body forward solving, launch-scope decision, private-system equivalence, source-file changes, or whole-system formal-result correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public tiny-fixture Lean proof-search evidence only; no neural theorem proving, frontier-scale automation, private source run export, oracle-body forward solving, launch-scope decision, private-system equivalence, source-file changes, or whole-system formal-result correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_lean_proof_search_lab.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1136
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_metabolism_runtime",
     "object_id": "paper_module:paper_module.engine_room_metabolism_runtime",
     "object_kind": "paper_module",
     "label": "Engine Room Metabolism Runtime",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-metabolism-runtime",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Component evidence for the accepted staged Engine Room demo only; not a live non-public runtime export, not external model service, not agent dispatch, not distributed database proof, not launch-scope decision, and not source-file changes.",
      "does_not_prove": "Component evidence for the accepted staged Engine Room demo only; not a live non-public runtime export, not external model service, not agent dispatch, not distributed database proof, not launch-scope decision, and not source-file changes.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Component evidence for the accepted staged Engine Room demo only; not a live non-public runtime export, not external model service, not agent dispatch, not distributed database proof, not launch-scope decision, and not source-file changes.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_metabolism_runtime.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1019
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_navigation_fitness_benchmark",
     "object_id": "paper_module:paper_module.engine_room_navigation_fitness_benchmark",
     "object_kind": "paper_module",
     "label": "Engine Room Navigation Fitness Benchmark",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public route-packet fixture evidence only; no live private kernel run, no embedding benchmark, no universal navigation benchmark, no launch-scope decision, no private-system equivalence, no source-file changes, and no whole-system correctness.",
      "does_not_prove": "Public route-packet fixture evidence only; no live private kernel run, no embedding benchmark, no universal navigation benchmark, no launch-scope decision, no private-system equivalence, no source-file changes, and no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public route-packet fixture evidence only; no live private kernel run, no embedding benchmark, no universal navigation benchmark, no launch-scope decision, no private-system equivalence, no source-file changes, and no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_navigation_fitness_benchmark.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1041
    },
    {
     "id": "evidence_profile:paper_module:paper_module.engine_room_public_projection_leak_gate",
     "object_id": "paper_module:paper_module.engine_room_public_projection_leak_gate",
     "object_kind": "paper_module",
     "label": "Engine Room Public Projection Leak Gate",
     "relative_href": "docs/paper-modules.html#paper-module-engine-room-public-projection-leak-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public projection leak-gate fixture and rendered-root scan result records only; no general security scanner, prompt-injection defense, sandbox, information-flow proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "does_not_prove": "Public projection leak-gate fixture and rendered-root scan result records only; no general security scanner, prompt-injection defense, sandbox, information-flow proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public projection leak-gate fixture and rendered-root scan result records only; no general security scanner, prompt-injection defense, sandbox, information-flow proof, launch-scope decision, private-system equivalence, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_public_projection_leak_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1115
    },
    {
     "id": "evidence_profile:paper_module:paper_module.executable_doctrine_grammar",
     "object_id": "paper_module:paper_module.executable_doctrine_grammar",
     "object_kind": "paper_module",
     "label": "Executable Doctrine Grammar",
     "relative_href": "docs/paper-modules.html#paper-module-executable-doctrine-grammar",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public fixture, exported standards bundle, and copied source specimen/body digest evidence only; no private standards engine export, source doctrine completeness, source notes export, model-output data export, source-file changes, launch-scope decision, publishing-scope decision, private-data equivalence, or whole-system correctness.",
      "does_not_prove": "Public fixture, exported standards bundle, and copied source specimen/body digest evidence only; no private standards engine export, source doctrine completeness, source notes export, model-output data export, source-file changes, launch-scope decision, publishing-scope decision, private-data equivalence, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public fixture, exported standards bundle, and copied source specimen/body digest evidence only; no private standards engine export, source doctrine completeness, source notes export, model-output data export, source-file changes, launch-scope decision, publishing-scope decision, private-data equivalence, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/executable_doctrine_grammar.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1304
    },
    {
     "id": "evidence_profile:paper_module:paper_module.finance_forecast_evaluation_spine",
     "object_id": "paper_module:paper_module.finance_forecast_evaluation_spine",
     "object_kind": "paper_module",
     "label": "Finance Forecast Evaluation Spine",
     "relative_href": "docs/paper-modules.html#paper-module-finance-forecast-evaluation-spine",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Synthetic market-shaped fixtures only; not investment or trading decisions, no live market data, no track record or performance claim, mutates no optimizer, SciPy absence is a typed HLN refusal.",
      "does_not_prove": "Synthetic market-shaped fixtures only; not investment or trading decisions, no live market data, no track record or performance claim, mutates no optimizer, SciPy absence is a typed HLN refusal.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Synthetic market-shaped fixtures only; not investment or trading decisions, no live market data, no track record or performance claim, mutates no optimizer, SciPy absence is a typed HLN refusal.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/finance_forecast_evaluation_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 887
    },
    {
     "id": "evidence_profile:paper_module:paper_module.first_screen_composition_root",
     "object_id": "paper_module:paper_module.first_screen_composition_root",
     "object_kind": "paper_module",
     "label": "First-Screen Composition Root",
     "relative_href": "docs/paper-modules.html#paper-module-first-screen-composition-root",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public first-screen card composition and focused validation only; no launch-scope decision, hosted-publishing-scope decision, external model access authority, source-file changes, private-data equivalence, score-based progress, reader-success certification, or whole-system correctness.",
      "does_not_prove": "Public first-screen card composition and focused validation only; no launch-scope decision, hosted-publishing-scope decision, external model access authority, source-file changes, private-data equivalence, score-based progress, reader-success certification, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public first-screen card composition and focused validation only; no launch-scope decision, hosted-publishing-scope decision, external model access authority, source-file changes, private-data equivalence, score-based progress, reader-success certification, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/first_screen_composition_root.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1159
    },
    {
     "id": "evidence_profile:paper_module:paper_module.formal_evidence_cell_anchor_resolver",
     "object_id": "paper_module:paper_module.formal_evidence_cell_anchor_resolver",
     "object_kind": "paper_module",
     "label": "Formal Evidence Cell Anchor Resolver",
     "relative_href": "docs/paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Evidence-cell anchor metadata and source-open runtime result records only; no formal-result correctness, proof-body import, private source-ref authority, human approval as proof authority, Lean/Lake execution, external model access, launch-scope decision, publishing-scope decision, source-file changes, or formal-proof certification.",
      "does_not_prove": "Evidence-cell anchor metadata and source-open runtime result records only; no formal-result correctness, proof-body import, private source-ref authority, human approval as proof authority, Lean/Lake execution, external model access, launch-scope decision, publishing-scope decision, source-file changes, or formal-proof certification.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Evidence-cell anchor metadata and source-open runtime result records only; no formal-result correctness, proof-body import, private source-ref authority, human approval as proof authority, Lean/Lake execution, external model access, launch-scope decision, publishing-scope decision, source-file changes, or formal-proof certification.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_evidence_cell_anchor_resolver.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1310
    },
    {
     "id": "evidence_profile:paper_module:paper_module.formal_math_lean_proof_witness",
     "object_id": "paper_module:paper_module.formal_math_lean_proof_witness",
     "object_kind": "paper_module",
     "label": "Formal Math Lean Proof Witness",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-lean-proof-witness",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Declared public toy Lean/Lake fixture result records only; no Mathlib/Aesop/Batteries authority, general formal-result correctness, private proof import, external model access, benchmark performance, launch-scope decision, publishing-scope decision, source-file changes, or whole-system correctness.",
      "does_not_prove": "Declared public toy Lean/Lake fixture result records only; no Mathlib/Aesop/Batteries authority, general formal-result correctness, private proof import, external model access, benchmark performance, launch-scope decision, publishing-scope decision, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Declared public toy Lean/Lake fixture result records only; no Mathlib/Aesop/Batteries authority, general formal-result correctness, private proof import, external model access, benchmark performance, launch-scope decision, publishing-scope decision, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_lean_proof_witness.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1199
    },
    {
     "id": "evidence_profile:paper_module:paper_module.formal_math_premise_retrieval",
     "object_id": "paper_module:paper_module.formal_math_premise_retrieval",
     "object_kind": "paper_module",
     "label": "Formal Math Premise Retrieval",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-premise-retrieval",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied public source retrieval metadata and runtime validation result records only; no formal-result correctness, proof-body import, oracle-needed premise authority, Mathlib authority, Lean/Lake execution, external model access, benchmark claim, launch-scope decision, publishing-scope decision, source-file changes, or general formal-proof authority.",
      "does_not_prove": "Copied public source retrieval metadata and runtime validation result records only; no formal-result correctness, proof-body import, oracle-needed premise authority, Mathlib authority, Lean/Lake execution, external model access, benchmark claim, launch-scope decision, publishing-scope decision, source-file changes, or general formal-proof authority.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied public source retrieval metadata and runtime validation result records only; no formal-result correctness, proof-body import, oracle-needed premise authority, Mathlib authority, Lean/Lake execution, external model access, benchmark claim, launch-scope decision, publishing-scope decision, source-file changes, or general formal-proof authority.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_premise_retrieval.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1354
    },
    {
     "id": "evidence_profile:paper_module:paper_module.formal_math_readiness_gate",
     "object_id": "paper_module:paper_module.formal_math_readiness_gate",
     "object_kind": "paper_module",
     "label": "Formal Math Readiness Gate",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-readiness-gate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public readiness metadata, copied PROVER smoke-run readiness/probe artifacts, public component source body floor, fixture result records, and exported-bundle result records only; no Lean/Lake execution, Mathlib availability beyond probe status, formal proof authority, formal-result correctness, external model access, private proof body, oracle premise id, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Public readiness metadata, copied PROVER smoke-run readiness/probe artifacts, public component source body floor, fixture result records, and exported-bundle result records only; no Lean/Lake execution, Mathlib availability beyond probe status, formal proof authority, formal-result correctness, external model access, private proof body, oracle premise id, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public readiness metadata, copied PROVER smoke-run readiness/probe artifacts, public component source body floor, fixture result records, and exported-bundle result records only; no Lean/Lake execution, Mathlib availability beyond probe status, formal proof authority, formal-result correctness, external model access, private proof body, oracle premise id, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_readiness_gate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1606
    },
    {
     "id": "evidence_profile:paper_module:paper_module.formal_math_verifier_trace_repair_loop",
     "object_id": "paper_module:paper_module.formal_math_verifier_trace_repair_loop",
     "object_kind": "paper_module",
     "label": "Formal Math Verifier Trace Repair Loop",
     "relative_href": "docs/paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied Ring2 verifier-trace repair metadata, source-module digests, public fixture result records, and one deterministic public toy-theorem rerun only; no Lean/Lake authority, formal-result correctness, proof body, oracle premise id, external model access, human approval as proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Copied Ring2 verifier-trace repair metadata, source-module digests, public fixture result records, and one deterministic public toy-theorem rerun only; no Lean/Lake authority, formal-result correctness, proof body, oracle premise id, external model access, human approval as proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied Ring2 verifier-trace repair metadata, source-module digests, public fixture result records, and one deterministic public toy-theorem rerun only; no Lean/Lake authority, formal-result correctness, proof body, oracle premise id, external model access, human approval as proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_verifier_trace_repair_loop.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1420
    },
    {
     "id": "evidence_profile:paper_module:paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "object_id": "paper_module:paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "object_kind": "paper_module",
     "label": "Indirect Prompt-Injection Information-Flow Policy Replay",
     "relative_href": "docs/paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Source-faithful refactored fixtures and metadata-only result records only; not a live information-flow product, complete-security proof, or launch claim.",
      "does_not_prove": "Source-faithful refactored fixtures and metadata-only result records only; not a live information-flow product, complete-security proof, or launch claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Source-faithful refactored fixtures and metadata-only result records only; not a live information-flow product, complete-security proof, or launch claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 787
    },
    {
     "id": "evidence_profile:paper_module:paper_module.lean_std_premise_index",
     "object_id": "paper_module:paper_module.lean_std_premise_index",
     "object_kind": "paper_module",
     "label": "Lean/Std Premise Index",
     "relative_href": "docs/paper-modules.html#paper-module-lean-std-premise-index",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied public Lean/Std descriptor index and Ring2 premise-retrieval source result records only; no Lean/Lake execution, Mathlib authority, proof-body import, oracle-needed premise authority, external model access, benchmark claim, launch-scope decision, publishing-scope decision, source-file changes, or theorem-correctness claim.",
      "does_not_prove": "Copied public Lean/Std descriptor index and Ring2 premise-retrieval source result records only; no Lean/Lake execution, Mathlib authority, proof-body import, oracle-needed premise authority, external model access, benchmark claim, launch-scope decision, publishing-scope decision, source-file changes, or theorem-correctness claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied public Lean/Std descriptor index and Ring2 premise-retrieval source result records only; no Lean/Lake execution, Mathlib authority, proof-body import, oracle-needed premise authority, external model access, benchmark claim, launch-scope decision, publishing-scope decision, source-file changes, or theorem-correctness claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/lean_std_premise_index.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1287
    },
    {
     "id": "evidence_profile:paper_module:paper_module.macro_projection_import_protocol",
     "object_id": "paper_module:paper_module.macro_projection_import_protocol",
     "object_kind": "paper_module",
     "label": "Source Projection Import Protocol",
     "relative_href": "docs/paper-modules.html#paper-module-macro-projection-import-protocol",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Verified source body imports, fixture result records, exported projection-bundle result records, per-slice manifest refs, and metadata-only result record fields only; no live source source authority, private-system equivalence, launch, public sharing, hosted deployment, recipient work, provider or Lean/Lake execution, secret/non-public body export, source-file changes, or whole-system correctness.",
      "does_not_prove": "Verified source body imports, fixture result records, exported projection-bundle result records, per-slice manifest refs, and metadata-only result record fields only; no live source source authority, private-system equivalence, launch, public sharing, hosted deployment, recipient work, provider or Lean/Lake execution, secret/non-public body export, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Verified source body imports, fixture result records, exported projection-bundle result records, per-slice manifest refs, and metadata-only result record fields only; no live source source authority, private-system equivalence, launch, public sharing, hosted deployment, recipient work, provider or Lean/Lake execution, secret/non-public body export, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/macro_projection_import_protocol.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1505
    },
    {
     "id": "evidence_profile:paper_module:paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "object_id": "paper_module:paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "object_kind": "paper_module",
     "label": "Materials Chemistry Closed-Loop Lab-Safety Replay",
     "relative_href": "docs/paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied public Lab/Evolve source/control/result record/standard bodies, metadata-only simulator-only fixture result records, runtime bundle result records, and artifact safety/refusal validation only; no wetlab execution, hazardous synthesis guidance, reagent quantity, controlled or bioactive target, live assay, robot command, private lab notebook, external model access, discovery claim, benchmark claims, launch-scope decision, publishing-scope decision, or product-progress evidence.",
      "does_not_prove": "Copied public Lab/Evolve source/control/result record/standard bodies, metadata-only simulator-only fixture result records, runtime bundle result records, and artifact safety/refusal validation only; no wetlab execution, hazardous synthesis guidance, reagent quantity, controlled or bioactive target, live assay, robot command, private lab notebook, external model access, discovery claim, benchmark claims, launch-scope decision, publishing-scope decision, or product-progress evidence.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied public Lab/Evolve source/control/result record/standard bodies, metadata-only simulator-only fixture result records, runtime bundle result records, and artifact safety/refusal validation only; no wetlab execution, hazardous synthesis guidance, reagent quantity, controlled or bioactive target, live assay, robot command, private lab notebook, external model access, discovery claim, benchmark claims, launch-scope decision, publishing-scope decision, or product-progress evidence.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1782
    },
    {
     "id": "evidence_profile:paper_module:paper_module.mathematical_strategy_atlas",
     "object_id": "paper_module:paper_module.mathematical_strategy_atlas",
     "object_kind": "paper_module",
     "label": "Mathematical Strategy Atlas",
     "relative_href": "docs/paper-modules.html#paper-module-mathematical-strategy-atlas",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied public strategy metadata, public source tool bodies, and public fixture/exported-bundle result records only; no Lean/Lake execution, formal-result correctness, oracle-label visibility, external model access, benchmark performance, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Copied public strategy metadata, public source tool bodies, and public fixture/exported-bundle result records only; no Lean/Lake execution, formal-result correctness, oracle-label visibility, external model access, benchmark performance, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied public strategy metadata, public source tool bodies, and public fixture/exported-bundle result records only; no Lean/Lake execution, formal-result correctness, oracle-label visibility, external model access, benchmark performance, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mathematical_strategy_atlas.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1247
    },
    {
     "id": "evidence_profile:paper_module:paper_module.mcp_tool_authority_replay",
     "object_id": "paper_module:paper_module.mcp_tool_authority_replay",
     "object_kind": "paper_module",
     "label": "MCP Tool Authority Replay",
     "relative_href": "docs/paper-modules.html#paper-module-mcp-tool-authority-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Synthetic MCP-like replay fixture only; not a live MCP account test, external model access, account secret-handling certification, benchmark security result, or launch claim.",
      "does_not_prove": "Synthetic MCP-like replay fixture only; not a live MCP account test, external model access, account secret-handling certification, benchmark security result, or launch claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Synthetic MCP-like replay fixture only; not a live MCP account test, external model access, account secret-handling certification, benchmark security result, or launch claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mcp_tool_authority_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 819
    },
    {
     "id": "evidence_profile:paper_module:paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "object_id": "paper_module:paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "object_kind": "paper_module",
     "label": "Mechanistic Interpretability Circuit Attribution Replay",
     "relative_href": "docs/paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Declared public circuit-attribution runtime result record and source-module import evidence only; no live model access, model-transparency product claim, export of private weights, raw activations, proprietary prompts, hidden reasoning, external model access, benchmark claims, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Declared public circuit-attribution runtime result record and source-module import evidence only; no live model access, model-transparency product claim, export of private weights, raw activations, proprietary prompts, hidden reasoning, external model access, benchmark claims, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Declared public circuit-attribution runtime result record and source-module import evidence only; no live model access, model-transparency product claim, export of private weights, raw activations, proprietary prompts, hidden reasoning, external model access, benchmark claims, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1395
    },
    {
     "id": "evidence_profile:paper_module:paper_module.microcosm_axiom_substrate",
     "object_id": "paper_module:paper_module.microcosm_axiom_substrate",
     "object_kind": "paper_module",
     "label": "Microcosm Axiom System",
     "relative_href": "docs/paper-modules.html#paper-module-microcosm-axiom-substrate",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public doctrine/routing/standard/result record evidence and read-only evaluator result records only; axiom witness-route source authority remains core/axiom_organ_routing.json, and claim_ceiling/strongest_allowed_claim remain computed by validator.microcosm.axiom_support_cover, not hand-stamped by this bundle or generated projections. No axiom proof certification, no candidate-law promotion, no source-file changes, no provider/Lean/Lake execution, no launch/publishing-scope decision, no private-system equivalence, and no whole-system correctness.",
      "does_not_prove": "Public doctrine/routing/standard/result record evidence and read-only evaluator result records only; axiom witness-route source authority remains core/axiom_organ_routing.json, and claim_ceiling/strongest_allowed_claim remain computed by validator.microcosm.axiom_support_cover, not hand-stamped by this bundle or generated projections. No axiom proof certification, no candidate-law promotion, no source-file changes, no provider/Lean/Lake execution, no launch/publishing-scope decision, no private-system equivalence, and no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public doctrine/routing/standard/result record evidence and read-only evaluator result records only; axiom witness-route source authority remains core/axiom_organ_routing.json, and claim_ceiling/strongest_allowed_claim remain computed by validator.microcosm.axiom_support_cover, not hand-stamped by this bundle or generated projections. No axiom proof certification, no candidate-law promotion, no source-file changes, no provider/Lean/Lake execution, no launch/publishing-scope decision, no private-system equivalence, and no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/microcosm_axiom_substrate.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1950
    },
    {
     "id": "evidence_profile:paper_module:paper_module.mission_transaction_work_spine",
     "object_id": "paper_module:paper_module.mission_transaction_work_spine",
     "object_kind": "paper_module",
     "label": "Mission Transaction Work Spine",
     "relative_href": "docs/paper-modules.html#paper-module-mission-transaction-work-spine",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public fixture and exported-bundle result records only; no live work log mutation, live work log mutation, live git mutation, private backup execution, broad checkpoint authorization, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Public fixture and exported-bundle result records only; no live work log mutation, live work log mutation, live git mutation, private backup execution, broad checkpoint authorization, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public fixture and exported-bundle result records only; no live work log mutation, live work log mutation, live git mutation, private backup execution, broad checkpoint authorization, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mission_transaction_work_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1088
    },
    {
     "id": "evidence_profile:paper_module:paper_module.navigation_hologram_route_plane",
     "object_id": "paper_module:paper_module.navigation_hologram_route_plane",
     "object_kind": "paper_module",
     "label": "Navigation Hologram Route Plane",
     "relative_href": "docs/paper-modules.html#paper-module-navigation-hologram-route-plane",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public fixture and exported-bundle result records only; no live route freshness, source authority, provider/live-kernel execution, private operator state, later-component authorization, launch-scope decision, or whole-wave certification.",
      "does_not_prove": "Public fixture and exported-bundle result records only; no live route freshness, source authority, provider/live-kernel execution, private operator state, later-component authorization, launch-scope decision, or whole-wave certification.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public fixture and exported-bundle result records only; no live route freshness, source authority, provider/live-kernel execution, private operator state, later-component authorization, launch-scope decision, or whole-wave certification.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/navigation_hologram_route_plane.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1014
    },
    {
     "id": "evidence_profile:paper_module:paper_module.pattern_assimilation",
     "object_id": "paper_module:paper_module.pattern_assimilation",
     "object_kind": "paper_module",
     "label": "Pattern Assimilation",
     "relative_href": "docs/paper-modules.html#paper-module-pattern-assimilation",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public fixture metadata, exported assimilation bundle metadata, copied body-import digest evidence, and metadata-only result records only; no live work log or work log mutation, source note ingestion, global doctrine changes, launch or publishing-scope decision, external model access, behavior-change proof, private-data equivalence, or whole-system correctness.",
      "does_not_prove": "Public fixture metadata, exported assimilation bundle metadata, copied body-import digest evidence, and metadata-only result records only; no live work log or work log mutation, source note ingestion, global doctrine changes, launch or publishing-scope decision, external model access, behavior-change proof, private-data equivalence, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public fixture metadata, exported assimilation bundle metadata, copied body-import digest evidence, and metadata-only result records only; no live work log or work log mutation, source note ingestion, global doctrine changes, launch or publishing-scope decision, external model access, behavior-change proof, private-data equivalence, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_assimilation.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1381
    },
    {
     "id": "evidence_profile:paper_module:paper_module.pattern_binding_contract",
     "object_id": "paper_module:paper_module.pattern_binding_contract",
     "object_kind": "paper_module",
     "label": "Pattern Binding Contract",
     "relative_href": "docs/paper-modules.html#paper-module-pattern-binding-contract",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public pattern-binding fixtures, exported system bundles, route-readiness selector bundles, source-bundle refs, and metadata-only result records only; no private pattern-ledger certification, launch-scope decision, external model access, hosted-public posture, recipient work, private-data equivalence, source-file changes, or whole-system correctness.",
      "does_not_prove": "Public pattern-binding fixtures, exported system bundles, route-readiness selector bundles, source-bundle refs, and metadata-only result records only; no private pattern-ledger certification, launch-scope decision, external model access, hosted-public posture, recipient work, private-data equivalence, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public pattern-binding fixtures, exported system bundles, route-readiness selector bundles, source-bundle refs, and metadata-only result records only; no private pattern-ledger certification, launch-scope decision, external model access, hosted-public posture, recipient work, private-data equivalence, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_binding_contract.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1352
    },
    {
     "id": "evidence_profile:paper_module:paper_module.prediction_oracle_reconciliation",
     "object_id": "paper_module:paper_module.prediction_oracle_reconciliation",
     "object_kind": "paper_module",
     "label": "Prediction Oracle Reconciliation",
     "relative_href": "docs/paper-modules.html#paper-module-prediction-oracle-reconciliation",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Synthetic invented prediction packet and source-module import evidence only; no forecasting correctness or accuracy, no trading, financial, or investment-related actions, no live market data, no external model access, no prediction public sharing, no performance track record, no non-public data import, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "does_not_prove": "Synthetic invented prediction packet and source-module import evidence only; no forecasting correctness or accuracy, no trading, financial, or investment-related actions, no live market data, no external model access, no prediction public sharing, no performance track record, no non-public data import, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Synthetic invented prediction packet and source-module import evidence only; no forecasting correctness or accuracy, no trading, financial, or investment-related actions, no live market data, no external model access, no prediction public sharing, no performance track record, no non-public data import, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/prediction_oracle_reconciliation.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1480
    },
    {
     "id": "evidence_profile:paper_module:paper_module.proof_derived_governed_mutation_authorization",
     "object_id": "paper_module:paper_module.proof_derived_governed_mutation_authorization",
     "object_kind": "paper_module",
     "label": "Proof-Derived Governed Mutation Authorization",
     "relative_href": "docs/paper-modules.html#paper-module-proof-derived-governed-mutation-authorization",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public synthetic governed-mutation result records and copied source body digest evidence only; no standing account secret authority, live cloud/account mutation, source-file changes, external model access, hidden vote, policy-after-execution authority, benchmark security claim, launch-scope decision, public sharing, hosting, or whole-system correctness.",
      "does_not_prove": "Public synthetic governed-mutation result records and copied source body digest evidence only; no standing account secret authority, live cloud/account mutation, source-file changes, external model access, hidden vote, policy-after-execution authority, benchmark security claim, launch-scope decision, public sharing, hosting, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public synthetic governed-mutation result records and copied source body digest evidence only; no standing account secret authority, live cloud/account mutation, source-file changes, external model access, hidden vote, policy-after-execution authority, benchmark security claim, launch-scope decision, public sharing, hosting, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_derived_governed_mutation_authorization.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1382
    },
    {
     "id": "evidence_profile:paper_module:paper_module.proof_diagnostic_evidence_spine",
     "object_id": "paper_module:paper_module.proof_diagnostic_evidence_spine",
     "object_kind": "paper_module",
     "label": "Proof Diagnostic Evidence Spine",
     "relative_href": "docs/paper-modules.html#paper-module-proof-diagnostic-evidence-spine",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public diagnostic result record refs, copied Ring2 runtime artifacts, and copied public component source body only; no Lean/Lake execution, formal proof authority, formal-result correctness, external model access authority, runtime correctness, launch-scope decision, publishing-scope decision, private-system equivalence, or whole-system correctness.",
      "does_not_prove": "Public diagnostic result record refs, copied Ring2 runtime artifacts, and copied public component source body only; no Lean/Lake execution, formal proof authority, formal-result correctness, external model access authority, runtime correctness, launch-scope decision, publishing-scope decision, private-system equivalence, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public diagnostic result record refs, copied Ring2 runtime artifacts, and copied public component source body only; no Lean/Lake execution, formal proof authority, formal-result correctness, external model access authority, runtime correctness, launch-scope decision, publishing-scope decision, private-system equivalence, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/proof_diagnostic_evidence_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1356
    },
    {
     "id": "evidence_profile:paper_module:paper_module.provider_context_recipe_budget",
     "object_id": "paper_module:paper_module.provider_context_recipe_budget",
     "object_kind": "paper_module",
     "label": "Provider Context Recipe Budget",
     "relative_href": "docs/paper-modules.html#paper-module-provider-context-recipe-budget",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Context-budget projection fixture and source-body import evidence only; no provider or API call authorization, no Lean or Lake execution, no proof or oracle truth-side material, no theorem or domain-level conclusions, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "does_not_prove": "Context-budget projection fixture and source-body import evidence only; no provider or API call authorization, no Lean or Lake execution, no proof or oracle truth-side material, no theorem or domain-level conclusions, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Context-budget projection fixture and source-body import evidence only; no provider or API call authorization, no Lean or Lake execution, no proof or oracle truth-side material, no theorem or domain-level conclusions, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/provider_context_recipe_budget.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1220
    },
    {
     "id": "evidence_profile:paper_module:paper_module.public_reveal_walkthrough",
     "object_id": "paper_module:paper_module.public_reveal_walkthrough",
     "object_kind": "paper_module",
     "label": "Public Reveal Walkthrough",
     "relative_href": "docs/paper-modules.html#paper-module-public-reveal-walkthrough",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public reveal fixture and exported-bundle result records only; no launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness.",
      "does_not_prove": "Public reveal fixture and exported-bundle result records only; no launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public reveal fixture and exported-bundle result records only; no launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/public_reveal_walkthrough.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1080
    },
    {
     "id": "evidence_profile:paper_module:paper_module.research_replication_rubric_artifact_replay",
     "object_id": "paper_module:paper_module.research_replication_rubric_artifact_replay",
     "object_kind": "paper_module",
     "label": "Research Replication Rubric Artifact Replay",
     "relative_href": "docs/paper-modules.html#paper-module-research-replication-rubric-artifact-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied public source pattern provenance bodies, exact-copy public Python internal control body, metadata-only research-replication replay result records, public agent-execution trace spans, and fixture validation only; no actual paper replication success, benchmark performance claim, private paper/data body export, hidden-rubric export, external model access, unbounded compute search, original-author code reuse, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.",
      "does_not_prove": "Copied public source pattern provenance bodies, exact-copy public Python internal control body, metadata-only research-replication replay result records, public agent-execution trace spans, and fixture validation only; no actual paper replication success, benchmark performance claim, private paper/data body export, hidden-rubric export, external model access, unbounded compute search, original-author code reuse, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied public source pattern provenance bodies, exact-copy public Python internal control body, metadata-only research-replication replay result records, public agent-execution trace spans, and fixture validation only; no actual paper replication success, benchmark performance claim, private paper/data body export, hidden-rubric export, external model access, unbounded compute search, original-author code reuse, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/research_replication_rubric_artifact_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1863
    },
    {
     "id": "evidence_profile:paper_module:paper_module.ring2_premise_precision_recall",
     "object_id": "paper_module:paper_module.ring2_premise_precision_recall",
     "object_kind": "paper_module",
     "label": "Ring-2 Premise Precision Recall",
     "relative_href": "docs/paper-modules.html#paper-module-ring2-premise-precision-recall",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied Ring2 retrieval records and public fixture/exported-bundle result records only; no Lean/Lake execution, theorem proof, benchmark performance, external model access, provider-context label flow, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Copied Ring2 retrieval records and public fixture/exported-bundle result records only; no Lean/Lake execution, theorem proof, benchmark performance, external model access, provider-context label flow, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied Ring2 retrieval records and public fixture/exported-bundle result records only; no Lean/Lake execution, theorem proof, benchmark performance, external model access, provider-context label flow, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/ring2_premise_precision_recall.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1140
    },
    {
     "id": "evidence_profile:paper_module:paper_module.routing_anti_patterns_registry",
     "object_id": "paper_module:paper_module.routing_anti_patterns_registry",
     "object_kind": "paper_module",
     "label": "Routing Anti-Patterns Registry",
     "relative_href": "docs/paper-modules.html#paper-module-routing-anti-patterns-registry",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Declared public routing anti-pattern registry fixture and copied source body evidence only; no route source authority, no route mutation, no private routing-note export, no external model access, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "does_not_prove": "Declared public routing anti-pattern registry fixture and copied source body evidence only; no route source authority, no route mutation, no private routing-note export, no external model access, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Declared public routing anti-pattern registry fixture and copied source body evidence only; no route source authority, no route mutation, no private routing-note export, no external model access, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/routing_anti_patterns_registry.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1154
    },
    {
     "id": "evidence_profile:paper_module:paper_module.self_ignorance_coverage_ledger",
     "object_id": "paper_module:paper_module.self_ignorance_coverage_ledger",
     "object_kind": "paper_module",
     "label": "Self-Ignorance Coverage Ledger",
     "relative_href": "docs/paper-modules.html#paper-module-self-ignorance-coverage-ledger",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Known Kind Atlas coverage-debt projection only; no literal unknown-unknown omniscience, no absence proof, no total repository search proof, no source-file changes, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "does_not_prove": "Known Kind Atlas coverage-debt projection only; no literal unknown-unknown omniscience, no absence proof, no total repository search proof, no source-file changes, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Known Kind Atlas coverage-debt projection only; no literal unknown-unknown omniscience, no absence proof, no total repository search proof, no source-file changes, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/self_ignorance_coverage_ledger.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1058
    },
    {
     "id": "evidence_profile:paper_module:paper_module.sleeper_memory_poisoning_quarantine_replay",
     "object_id": "paper_module:paper_module.sleeper_memory_poisoning_quarantine_replay",
     "object_kind": "paper_module",
     "label": "Sleeper Memory Poisoning Quarantine Replay",
     "relative_href": "docs/paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Synthetic replay fixture only; not a live memory product, live user memory import, benchmark security result, private memory export, or launch claim.",
      "does_not_prove": "Synthetic replay fixture only; not a live memory product, live user memory import, benchmark security result, private memory export, or launch claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Synthetic replay fixture only; not a live memory product, live user memory import, benchmark security result, private memory export, or launch claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/sleeper_memory_poisoning_quarantine_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 761
    },
    {
     "id": "evidence_profile:paper_module:paper_module.spatial_world_model_counterfactual_simulation_replay",
     "object_id": "paper_module:paper_module.spatial_world_model_counterfactual_simulation_replay",
     "object_kind": "paper_module",
     "label": "Spatial World Model Counterfactual Simulation Replay",
     "relative_href": "docs/paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Declared public synthetic spatial counterfactual-replay metadata and source-module import evidence only; no robot or AV operation, real-world geographic accuracy, simulator product validation, generated-video authority, benchmark claims, external model access, hosting, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Declared public synthetic spatial counterfactual-replay metadata and source-module import evidence only; no robot or AV operation, real-world geographic accuracy, simulator product validation, generated-video authority, benchmark claims, external model access, hosting, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Declared public synthetic spatial counterfactual-replay metadata and source-module import evidence only; no robot or AV operation, real-world geographic accuracy, simulator product validation, generated-video authority, benchmark claims, external model access, hosting, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/spatial_world_model_counterfactual_simulation_replay.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1368
    },
    {
     "id": "evidence_profile:paper_module:paper_module.standards_meta_diagnostics",
     "object_id": "paper_module:paper_module.standards_meta_diagnostics",
     "object_kind": "paper_module",
     "label": "Standards Meta Diagnostics",
     "relative_href": "docs/paper-modules.html#paper-module-standards-meta-diagnostics",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Projection-only diagnostic; never source authority for core/standards_registry.json, no source-file changes, no provider/launch-scope decision, no whole-system correctness.",
      "does_not_prove": "Projection-only diagnostic; never source authority for core/standards_registry.json, no source-file changes, no provider/launch-scope decision, no whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Projection-only diagnostic; never source authority for core/standards_registry.json, no source-file changes, no provider/launch-scope decision, no whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/standards_meta_diagnostics.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 814
    },
    {
     "id": "evidence_profile:paper_module:paper_module.tactic_portfolio_availability",
     "object_id": "paper_module:paper_module.tactic_portfolio_availability",
     "object_kind": "paper_module",
     "label": "Tactic Portfolio Availability",
     "relative_href": "docs/paper-modules.html#paper-module-tactic-portfolio-availability",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied tactic affordance probe rows and public fixture/exported-bundle result records only; no Lean/Lake rerun, theorem proof, benchmark performance, external model access, Mathlib-dependent proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Copied tactic affordance probe rows and public fixture/exported-bundle result records only; no Lean/Lake rerun, theorem proof, benchmark performance, external model access, Mathlib-dependent proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied tactic affordance probe rows and public fixture/exported-bundle result records only; no Lean/Lake rerun, theorem proof, benchmark performance, external model access, Mathlib-dependent proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tactic_portfolio_availability.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1159
    },
    {
     "id": "evidence_profile:paper_module:paper_module.target_shape_tactic_routing",
     "object_id": "paper_module:paper_module.target_shape_tactic_routing",
     "object_kind": "paper_module",
     "label": "Target Shape Tactic Routing",
     "relative_href": "docs/paper-modules.html#paper-module-target-shape-tactic-routing",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public route-reference fixture and exported-bundle result records only; no Lean/Lake execution, formal-result correctness, post-execution routing, external model access, proof body export, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Public route-reference fixture and exported-bundle result records only; no Lean/Lake execution, formal-result correctness, post-execution routing, external model access, proof body export, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public route-reference fixture and exported-bundle result records only; no Lean/Lake execution, formal-result correctness, post-execution routing, external model access, proof body export, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/target_shape_tactic_routing.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1100
    },
    {
     "id": "evidence_profile:paper_module:paper_module.tool_server_pressure_inventory",
     "object_id": "paper_module:paper_module.tool_server_pressure_inventory",
     "object_kind": "paper_module",
     "label": "Tool Server Pressure Inventory",
     "relative_href": "docs/paper-modules.html#paper-module-tool-server-pressure-inventory",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Declared public helper-process pressure inventory fixture and source-module digest evidence only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, private-data equivalence, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Declared public helper-process pressure inventory fixture and source-module digest evidence only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, private-data equivalence, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Declared public helper-process pressure inventory fixture and source-module digest evidence only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, private-data equivalence, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tool_server_pressure_inventory.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1151
    },
    {
     "id": "evidence_profile:paper_module:paper_module.undeclared_library_prior_classifier",
     "object_id": "paper_module:paper_module.undeclared_library_prior_classifier",
     "object_kind": "paper_module",
     "label": "Undeclared Library Prior Classifier",
     "relative_href": "docs/paper-modules.html#paper-module-undeclared-library-prior-classifier",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Symbol-boundary classification fixture over copied Lean/Std premise rows and pre-extracted symbol observations only; no proof-source reads, Lean or Lake execution, formal-result correctness, whole-library implicit allowlist, Mathlib availability, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Symbol-boundary classification fixture over copied Lean/Std premise rows and pre-extracted symbol observations only; no proof-source reads, Lean or Lake execution, formal-result correctness, whole-library implicit allowlist, Mathlib availability, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Symbol-boundary classification fixture over copied Lean/Std premise rows and pre-extracted symbol observations only; no proof-source reads, Lean or Lake execution, formal-result correctness, whole-library implicit allowlist, Mathlib availability, external model access, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/undeclared_library_prior_classifier.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1351
    },
    {
     "id": "evidence_profile:paper_module:paper_module.verifier_lab_execution_spine",
     "object_id": "paper_module:paper_module.verifier_lab_execution_spine",
     "object_kind": "paper_module",
     "label": "Verifier Lab Execution Spine",
     "relative_href": "docs/paper-modules.html#paper-module-verifier-lab-execution-spine",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Bounded public fixture and exported-bundle execution result records only; no general formal-result correctness, benchmark solve-rate claim, external model access, oracle-to-proof authority, proof body export, source-file changes, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "does_not_prove": "Bounded public fixture and exported-bundle execution result records only; no general formal-result correctness, benchmark solve-rate claim, external model access, oracle-to-proof authority, proof body export, source-file changes, launch-scope decision, publishing-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Bounded public fixture and exported-bundle execution result records only; no general formal-result correctness, benchmark solve-rate claim, external model access, oracle-to-proof authority, proof body export, source-file changes, launch-scope decision, publishing-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_execution_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1224
    },
    {
     "id": "evidence_profile:paper_module:paper_module.verifier_lab_kernel",
     "object_id": "paper_module:paper_module.verifier_lab_kernel",
     "object_kind": "paper_module",
     "label": "Verifier Lab Kernel",
     "relative_href": "docs/paper-modules.html#paper-module-verifier-lab-kernel",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public fixture and exported-bundle result records only; no theorem-prover authority, Mathlib import authority, oracle-to-forward success, provider proof authority, benchmark solve-rate claim, launch-scope decision, publishing-scope decision, source-file changes, or secret export.",
      "does_not_prove": "Public fixture and exported-bundle result records only; no theorem-prover authority, Mathlib import authority, oracle-to-forward success, provider proof authority, benchmark solve-rate claim, launch-scope decision, publishing-scope decision, source-file changes, or secret export.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public fixture and exported-bundle result records only; no theorem-prover authority, Mathlib import authority, oracle-to-forward success, provider proof authority, benchmark solve-rate claim, launch-scope decision, publishing-scope decision, source-file changes, or secret export.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_kernel.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1131
    },
    {
     "id": "evidence_profile:paper_module:paper_module.voice_to_doctrine_self_improvement_loop",
     "object_id": "paper_module:paper_module.voice_to_doctrine_self_improvement_loop",
     "object_kind": "paper_module",
     "label": "Voice to Doctrine Self-Improvement Loop",
     "relative_href": "docs/paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Declared lesson-propagation fixture only; no source notes export, non-public body export, model-output data export, source or doctrine mutation authority, global-promotion authority, live work log mutation, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
      "does_not_prove": "Declared lesson-propagation fixture only; no source notes export, non-public body export, model-output data export, source or doctrine mutation authority, global-promotion authority, live work log mutation, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Declared lesson-propagation fixture only; no source notes export, non-public body export, model-output data export, source or doctrine mutation authority, global-promotion authority, live work log mutation, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/voice_to_doctrine_self_improvement_loop.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1319
    },
    {
     "id": "evidence_profile:paper_module:paper_module.work_landing_control_spine",
     "object_id": "paper_module:paper_module.work_landing_control_spine",
     "object_kind": "paper_module",
     "label": "Work Landing Control Spine",
     "relative_href": "docs/paper-modules.html#paper-module-work-landing-control-spine",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Copied source internal control source bundle, validator result record, source-manifest digest evidence, required-anchor evidence, no-live-mutation contract flags, and secret-exclusion evidence only; no live Git mutation, live work log or work log mutation, claim launch, shared-index mutation, private-index commit execution, broad staging, external model access, account secret export, public sharing, launch-scope decision, or whole-system correctness.",
      "does_not_prove": "Copied source internal control source bundle, validator result record, source-manifest digest evidence, required-anchor evidence, no-live-mutation contract flags, and secret-exclusion evidence only; no live Git mutation, live work log or work log mutation, claim launch, shared-index mutation, private-index commit execution, broad staging, external model access, account secret export, public sharing, launch-scope decision, or whole-system correctness.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Copied source internal control source bundle, validator result record, source-manifest digest evidence, required-anchor evidence, no-live-mutation contract flags, and secret-exclusion evidence only; no live Git mutation, live work log or work log mutation, claim launch, shared-index mutation, private-index commit execution, broad staging, external model access, account secret export, public sharing, launch-scope decision, or whole-system correctness.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/work_landing_control_spine.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1660
    },
    {
     "id": "evidence_profile:paper_module:paper_module.world_model_projection_drift_control_room",
     "object_id": "paper_module:paper_module.world_model_projection_drift_control_room",
     "object_kind": "paper_module",
     "label": "World-Model Projection Drift Control Room",
     "relative_href": "docs/paper-modules.html#paper-module-world-model-projection-drift-control-room",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "Public metadata-only runtime result record and copied source-module evidence only; no private runtime body inspection, source authority, source-file changes, live route repair, automatic doctrine changes, model-output data export, launch-scope decision, publishing-scope decision, or whole-system correctness claim.",
      "does_not_prove": "Public metadata-only runtime result record and copied source-module evidence only; no private runtime body inspection, source authority, source-file changes, live route repair, automatic doctrine changes, model-output data export, launch-scope decision, publishing-scope decision, or whole-system correctness claim.",
      "scope_limit": null,
      "anti_claims": [],
      "omitted_fields": [
       "code_loci",
       "legacy_markdown_projection",
       "strangler_note",
       "generated_projections",
       "source_authority"
      ],
      "omission_reason": null
     },
     "authority_ceiling": "Public metadata-only runtime result record and copied source-module evidence only; no private runtime body inspection, source authority, source-file changes, live route repair, automatic doctrine changes, model-output data export, launch-scope decision, publishing-scope decision, or whole-system correctness claim.",
     "source_authority": "paper_module_capsule_projection",
     "source_refs": [
      "microcosm-substrate/core/paper_module_capsules.json"
     ],
     "source_links": [
      {
       "label": "Design note",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/world_model_projection_drift_control_room.md"
      },
      {
       "label": "Source registry",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json"
      }
     ],
     "visible_text_byte_count": 1258
    },
    {
     "id": "evidence_profile:principle:P-1",
     "object_id": "principle:P-1",
     "object_kind": "principle",
     "label": "Recompute, do not echo",
     "relative_href": "docs/doctrine.html#dcard-p-1",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-1.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-1.json"
      }
     ],
     "visible_text_byte_count": 503
    },
    {
     "id": "evidence_profile:principle:P-10",
     "object_id": "principle:P-10",
     "object_kind": "principle",
     "label": "Do not land effects without compensation",
     "relative_href": "docs/doctrine.html#dcard-p-10",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-10.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-10.json"
      }
     ],
     "visible_text_byte_count": 521
    },
    {
     "id": "evidence_profile:principle:P-11",
     "object_id": "principle:P-11",
     "object_kind": "principle",
     "label": "Bind volatile facts to refresh routes",
     "relative_href": "docs/doctrine.html#dcard-p-11",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-11.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-11.json"
      }
     ],
     "visible_text_byte_count": 518
    },
    {
     "id": "evidence_profile:principle:P-12",
     "object_id": "principle:P-12",
     "object_kind": "principle",
     "label": "Make doctrine executable before authoritative",
     "relative_href": "docs/doctrine.html#dcard-p-12",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-12.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-12.json"
      }
     ],
     "visible_text_byte_count": 526
    },
    {
     "id": "evidence_profile:principle:P-13",
     "object_id": "principle:P-13",
     "object_kind": "principle",
     "label": "Apply the same floor to meta artifacts",
     "relative_href": "docs/doctrine.html#dcard-p-13",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-13.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-13.json"
      }
     ],
     "visible_text_byte_count": 519
    },
    {
     "id": "evidence_profile:principle:P-14",
     "object_id": "principle:P-14",
     "object_kind": "principle",
     "label": "Carry basis and provenance together",
     "relative_href": "docs/doctrine.html#dcard-p-14",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-14.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-14.json"
      }
     ],
     "visible_text_byte_count": 516
    },
    {
     "id": "evidence_profile:principle:P-15",
     "object_id": "principle:P-15",
     "object_kind": "principle",
     "label": "Keep projections below source authority",
     "relative_href": "docs/doctrine.html#dcard-p-15",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-15.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-15.json"
      }
     ],
     "visible_text_byte_count": 520
    },
    {
     "id": "evidence_profile:principle:P-16",
     "object_id": "principle:P-16",
     "object_kind": "principle",
     "label": "Bind authority to transaction scope",
     "relative_href": "docs/doctrine.html#dcard-p-16",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-16.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-16.json"
      }
     ],
     "visible_text_byte_count": 516
    },
    {
     "id": "evidence_profile:principle:P-17",
     "object_id": "principle:P-17",
     "object_kind": "principle",
     "label": "Anchor graph mutations to unique source rows",
     "relative_href": "docs/doctrine.html#dcard-p-17",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-17.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-17.json"
      }
     ],
     "visible_text_byte_count": 525
    },
    {
     "id": "evidence_profile:principle:P-18",
     "object_id": "principle:P-18",
     "object_kind": "principle",
     "label": "Require fan-in before activation",
     "relative_href": "docs/doctrine.html#dcard-p-18",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-18.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-18.json"
      }
     ],
     "visible_text_byte_count": 513
    },
    {
     "id": "evidence_profile:principle:P-19",
     "object_id": "principle:P-19",
     "object_kind": "principle",
     "label": "Classify residual pressure before wiring",
     "relative_href": "docs/doctrine.html#dcard-p-19",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-19.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-19.json"
      }
     ],
     "visible_text_byte_count": 521
    },
    {
     "id": "evidence_profile:principle:P-2",
     "object_id": "principle:P-2",
     "object_kind": "principle",
     "label": "Lower claim strength to checker strength",
     "relative_href": "docs/doctrine.html#dcard-p-2",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-2.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-2.json"
      }
     ],
     "visible_text_byte_count": 521
    },
    {
     "id": "evidence_profile:principle:P-20",
     "object_id": "principle:P-20",
     "object_kind": "principle",
     "label": "Bind result records before record authority",
     "relative_href": "docs/doctrine.html#dcard-p-20",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-20.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-20.json"
      }
     ],
     "visible_text_byte_count": 524
    },
    {
     "id": "evidence_profile:principle:P-3",
     "object_id": "principle:P-3",
     "object_kind": "principle",
     "label": "Concentrate trust in small checkers",
     "relative_href": "docs/doctrine.html#dcard-p-3",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-3.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-3.json"
      }
     ],
     "visible_text_byte_count": 516
    },
    {
     "id": "evidence_profile:principle:P-4",
     "object_id": "principle:P-4",
     "object_kind": "principle",
     "label": "Possession is not permission",
     "relative_href": "docs/doctrine.html#dcard-p-4",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-4.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-4.json"
      }
     ],
     "visible_text_byte_count": 509
    },
    {
     "id": "evidence_profile:principle:P-5",
     "object_id": "principle:P-5",
     "object_kind": "principle",
     "label": "Cache by content, not by name",
     "relative_href": "docs/doctrine.html#dcard-p-5",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-5.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-5.json"
      }
     ],
     "visible_text_byte_count": 510
    },
    {
     "id": "evidence_profile:principle:P-6",
     "object_id": "principle:P-6",
     "object_kind": "principle",
     "label": "Status fails closed",
     "relative_href": "docs/doctrine.html#dcard-p-6",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-6.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-6.json"
      }
     ],
     "visible_text_byte_count": 500
    },
    {
     "id": "evidence_profile:principle:P-7",
     "object_id": "principle:P-7",
     "object_kind": "principle",
     "label": "Track known unknowns without claiming the unknown is mapped",
     "relative_href": "docs/doctrine.html#dcard-p-7",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-7.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-7.json"
      }
     ],
     "visible_text_byte_count": 540
    },
    {
     "id": "evidence_profile:principle:P-8",
     "object_id": "principle:P-8",
     "object_kind": "principle",
     "label": "Refuse inadmissible computations with typed reasons",
     "relative_href": "docs/doctrine.html#dcard-p-8",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-8.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-8.json"
      }
     ],
     "visible_text_byte_count": 532
    },
    {
     "id": "evidence_profile:principle:P-9",
     "object_id": "principle:P-9",
     "object_kind": "principle",
     "label": "Preserve provenance across every boundary",
     "relative_href": "docs/doctrine.html#dcard-p-9",
     "evidence": {},
     "boundary": {
      "evidence_boundary": "source_row_plus_projected_relations",
      "does_not_prove": "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
      "scope_limit": null,
      "anti_claims": [
       "This active principle JSON record does not flip source authority away from PRINCIPLES.md.",
       "Grounding to an axiom obligation is bounded evidence that the principle is obligation-supported."
      ],
      "omitted_fields": [],
      "omission_reason": null
     },
     "authority_ceiling": "",
     "source_authority": "doctrine_source_row_projection",
     "source_refs": [
      "microcosm-substrate/principles/P-9.json"
     ],
     "source_links": [
      {
       "label": "Source JSON",
       "url": "https://github.com/wcook04/microcosm-substrate/blob/main/principles/P-9.json"
      }
     ],
     "visible_text_byte_count": 522
    }
   ],
   "rosters": [
    {
     "id": "components_by_area",
     "title": "Components by area",
     "description": "Bounded public components grouped by source family.",
     "projection_role": "canonical_object",
     "packaging": "slim one-liner rows (card_href values are docs/-relative); full roster rows live in content-graph.json#/rosters",
     "row_count": 78,
     "rows": [
      {
       "id": "cold_reader_route_map",
       "kind": "component",
       "label": "Cold Reader Route Map",
       "one_line": "Verifies the first-run guided path so every step names a real command, doc, and evidence.",
       "group_id": "entry_and_reveal",
       "group_label": "Entry & orientation",
       "evidence_rank": 5,
       "card_href": "components.html#component-cold_reader_route_map"
      },
      {
       "id": "public_reveal_walkthrough",
       "kind": "component",
       "label": "Public Reveal Walkthrough",
       "one_line": "Binds the first-time reader tour to evidence so each count leads to a source.",
       "group_id": "entry_and_reveal",
       "group_label": "Entry & orientation",
       "evidence_rank": 4,
       "card_href": "components.html#component-public_reveal_walkthrough"
      },
      {
       "id": "pattern_binding_contract",
       "kind": "component",
       "label": "Pattern Binding Contract",
       "one_line": "Checks a real pattern catalog for digest, cross-reference, and dependency-cycle integrity.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-pattern_binding_contract"
      },
      {
       "id": "pattern_assimilation_step",
       "kind": "component",
       "label": "Pattern Assimilation Step",
       "one_line": "Verifies each landed task filed exactly one learning record naming what it changed.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-pattern_assimilation_step"
      },
      {
       "id": "executable_doctrine_grammar",
       "kind": "component",
       "label": "Executable Doctrine Grammar",
       "one_line": "Checks that example standards files declare their purpose, rule, records, and what they do not claim.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-executable_doctrine_grammar"
      },
      {
       "id": "navigation_hologram_route_plane",
       "kind": "component",
       "label": "Navigation Hologram Route Plane",
       "one_line": "Audits a folder's navigation so browse rows never pose as the source of truth.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-navigation_hologram_route_plane"
      },
      {
       "id": "standards_meta_diagnostics",
       "kind": "component",
       "label": "Standards Meta Diagnostics",
       "one_line": "Confirms every accepted part still ties to a written rule, a run command, and a saved proof.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-standards_meta_diagnostics"
      },
      {
       "id": "voice_to_doctrine_self_improvement_loop",
       "kind": "component",
       "label": "Voice To Doctrine Self Improvement Loop",
       "one_line": "Verifies each lesson changed a named owner page with evidence before the loop closes.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-voice_to_doctrine_self_improvement_loop"
      },
      {
       "id": "cognitive_operator_registry",
       "kind": "component",
       "label": "Cognitive Operator Registry",
       "one_line": "Checks the catalog of named thinking-moves so each is fully described and backed by evidence.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-cognitive_operator_registry"
      },
      {
       "id": "routing_anti_patterns_registry",
       "kind": "component",
       "label": "Routing Anti Patterns Registry",
       "one_line": "Indexes the navigation mistakes agents repeat and guards the public list.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-routing_anti_patterns_registry"
      },
      {
       "id": "doctrine_fact_claim_audit",
       "kind": "component",
       "label": "Doctrine Fact Claim Audit",
       "one_line": "Checks that public fact rows state the right count and point at live, anchored code.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 5,
       "card_href": "components.html#component-doctrine_fact_claim_audit"
      },
      {
       "id": "self_ignorance_coverage_ledger",
       "kind": "component",
       "label": "Self Ignorance Coverage Ledger",
       "one_line": "Compares expected against built entities to report known coverage gaps.",
       "group_id": "architecture_and_navigation",
       "group_label": "Architecture & navigation",
       "evidence_rank": 3,
       "card_href": "components.html#component-self_ignorance_coverage_ledger"
      },
      {
       "id": "proof_diagnostic_evidence_spine",
       "kind": "component",
       "label": "Proof Diagnostic Evidence Spine",
       "one_line": "Sorts proof-pipeline checks into accepted or rejected without inflating a pass.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-proof_diagnostic_evidence_spine"
      },
      {
       "id": "formal_math_readiness_gate",
       "kind": "component",
       "label": "Formal Math Readiness Gate",
       "one_line": "Reads declared math setups and lists which proof tactics may be attempted versus blocked.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-formal_math_readiness_gate"
      },
      {
       "id": "corpus_readiness_mathlib_absence_gate",
       "kind": "component",
       "label": "Corpus Readiness Mathlib Absence Gate",
       "one_line": "Runs the real Lean toolchain to confirm the math library is absent, then gates proof tasks.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 4,
       "card_href": "components.html#component-corpus_readiness_mathlib_absence_gate"
      },
      {
       "id": "mathematical_strategy_atlas_hypothesis_scorer",
       "kind": "component",
       "label": "Mathematical Strategy Atlas Hypothesis Scorer",
       "one_line": "Picks a first-guess proof strategy from a problem's tags and flags any it cannot map.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-mathematical_strategy_atlas_hypothesis_scorer"
      },
      {
       "id": "tactic_portfolio_availability_probe",
       "kind": "component",
       "label": "Tactic Portfolio Availability Probe",
       "one_line": "Maps which Lean proof tactics a recorded run marked usable before any code relies on one.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-tactic_portfolio_availability_probe"
      },
      {
       "id": "target_shape_tactic_routing_gate",
       "kind": "component",
       "label": "Target Shape Tactic Routing Gate",
       "one_line": "Records an allow-or-reject decision and reason for each proof tactic before any proof runs.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-target_shape_tactic_routing_gate"
      },
      {
       "id": "lean_std_premise_index",
       "kind": "component",
       "label": "Lean Std Premise Index",
       "one_line": "Lists a fixed catalog of public Lean building blocks and confirms none hides proof text or test answers.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-lean_std_premise_index"
      },
      {
       "id": "formal_math_premise_retrieval",
       "kind": "component",
       "label": "Formal Math Premise Retrieval",
       "one_line": "Shows which lemmas a plain search surfaces per query, and never leaks proof text or answer keys.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-formal_math_premise_retrieval"
      },
      {
       "id": "formal_math_verifier_trace_repair_loop",
       "kind": "component",
       "label": "Formal Math Verifier Trace Repair Loop",
       "one_line": "Replays how a proof lab turns verifier failures into fixes, with no promotion without a fresh re-run.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-formal_math_verifier_trace_repair_loop"
      },
      {
       "id": "formal_evidence_cell_anchor_resolver",
       "kind": "component",
       "label": "Formal Evidence Cell Anchor Resolver",
       "one_line": "Resolves each proof-flavored math claim to named evidence and flags ones that overreach or lack backing.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-formal_evidence_cell_anchor_resolver"
      },
      {
       "id": "undeclared_library_prior_symbol_classifier",
       "kind": "component",
       "label": "Undeclared Library Prior Symbol Classifier",
       "one_line": "Detects when a checked Lean proof cites a library result outside its approved set.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-undeclared_library_prior_symbol_classifier"
      },
      {
       "id": "ring2_premise_retrieval_precision_recall_harness",
       "kind": "component",
       "label": "Ring2 Premise Retrieval Precision Recall Harness",
       "one_line": "Scores how much proof support a premise search found, problem by problem.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 3,
       "card_href": "components.html#component-ring2_premise_retrieval_precision_recall_harness"
      },
      {
       "id": "formal_math_lean_proof_witness",
       "kind": "component",
       "label": "Formal Math Lean Proof Witness",
       "one_line": "Compiles a tiny Lean example with the real prover and records whether it built, leaking no proof text.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 4,
       "card_href": "components.html#component-formal_math_lean_proof_witness"
      },
      {
       "id": "verifier_lab_kernel",
       "kind": "component",
       "label": "Verifier Lab Kernel",
       "one_line": "Folds nine proof checks into one report labeling each line by which source actually backs it.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 5,
       "card_href": "components.html#component-verifier_lab_kernel"
      },
      {
       "id": "verifier_lab_execution_spine",
       "kind": "component",
       "label": "Verifier Lab Execution Spine",
       "one_line": "Runs Lean on small bounded proof attempts in a temp copy and records what passed or failed.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 4,
       "card_href": "components.html#component-verifier_lab_execution_spine"
      },
      {
       "id": "certificate_kernel_execution_lab",
       "kind": "component",
       "label": "Certificate Kernel Execution Lab",
       "one_line": "Runs the Lean verifier over a small public proof project and reports which rows it accepted.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 4,
       "card_href": "components.html#component-certificate_kernel_execution_lab"
      },
      {
       "id": "batch4_proof_authority_runtime",
       "kind": "component",
       "label": "Proof / Control / Runtime Import Bundle",
       "one_line": "Checks fourteen proof, control, and runtime parts as one unit that rejects every overclaim.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch4_proof_authority_runtime"
      },
      {
       "id": "proof_derived_governed_mutation_authorization",
       "kind": "component",
       "label": "Proof Derived Governed Mutation Authorization",
       "one_line": "Checks a synthetic change-authorization record for its proof-and-approval chain, bound to a real commit.",
       "group_id": "formal_math_and_proof",
       "group_label": "Formal math & proof",
       "evidence_rank": 5,
       "card_href": "components.html#component-proof_derived_governed_mutation_authorization"
      },
      {
       "id": "agent_benchmark_integrity_anti_gaming_replay",
       "kind": "component",
       "label": "Agent Benchmark Integrity Anti Gaming Replay",
       "one_line": "Validates a synthetic benchmark-integrity record and flags the contamination cases it declares.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-agent_benchmark_integrity_anti_gaming_replay"
      },
      {
       "id": "batch10_cold_eval_honesty_capsule",
       "kind": "component",
       "label": "Cold Evaluation Honesty Bundle",
       "one_line": "Runs a copied route-quality simulator and checks its all-B scorecard against the original code.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch10_cold_eval_honesty_capsule"
      },
      {
       "id": "batch8_validator_checker_capsule",
       "kind": "component",
       "label": "Validator Checker Bundle",
       "one_line": "Runs the real validator code over public examples so its safety checks stay inspectable.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch8_validator_checker_capsule"
      },
      {
       "id": "agent_monitor_redteam_falsification_replay",
       "kind": "component",
       "label": "Agent Monitor Redteam Falsification Replay",
       "one_line": "Replays honest and deceptive agent runs and flags any verdict missing its declared backing evidence.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-agent_monitor_redteam_falsification_replay"
      },
      {
       "id": "agent_sabotage_scheming_monitor_replay",
       "kind": "component",
       "label": "Agent Sabotage Scheming Monitor Replay",
       "one_line": "Audits a hidden-goal catch claim for the steps, suspicion scores, and counterfactual it needs.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-agent_sabotage_scheming_monitor_replay"
      },
      {
       "id": "agent_memory_temporal_conflict_replay",
       "kind": "component",
       "label": "Agent Memory Temporal Conflict Replay",
       "one_line": "Replays a memory edit-and-delete to show stale facts get flagged before they sway an answer.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-agent_memory_temporal_conflict_replay"
      },
      {
       "id": "sleeper_memory_poisoning_quarantine_replay",
       "kind": "component",
       "label": "Sleeper Memory Poisoning Quarantine Replay",
       "one_line": "Replays a recorded memory-tamper case, checking its declared quarantine, block, and delete steps line up.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-sleeper_memory_poisoning_quarantine_replay"
      },
      {
       "id": "mcp_tool_authority_replay",
       "kind": "component",
       "label": "MCP Tool Authority Replay",
       "one_line": "Audits a recorded tool-use log to confirm each action was scoped, approved, undoable, and fenced.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-mcp_tool_authority_replay"
      },
      {
       "id": "belief_state_process_reward_replay",
       "kind": "component",
       "label": "Belief State Process Reward Replay",
       "one_line": "Checks that each step reward in a recorded run cites a declared verifier-feedback row, not a trick.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-belief_state_process_reward_replay"
      },
      {
       "id": "agent_sandbox_policy_escape_replay",
       "kind": "component",
       "label": "Agent Sandbox Policy Escape Replay",
       "one_line": "Maps sandboxed agent actions to show each was approved or blocked before running, then rolled back.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-agent_sandbox_policy_escape_replay"
      },
      {
       "id": "indirect_prompt_injection_information_flow_policy_replay",
       "kind": "component",
       "label": "Indirect Prompt Injection Information Flow Policy Replay",
       "one_line": "Replays an agent run to show untrusted text was gated before any sensitive action, leaking no secret.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-indirect_prompt_injection_information_flow_policy_replay"
      },
      {
       "id": "agentic_vulnerability_discovery_patch_proof_replay",
       "kind": "component",
       "label": "Agentic Vulnerability Discovery Patch Proof Replay",
       "one_line": "Checks a fixed-bug evidence chain and re-runs three small real security checks; no real attack material.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 3,
       "card_href": "components.html#component-agentic_vulnerability_discovery_patch_proof_replay"
      },
      {
       "id": "agent_route_observability_runtime",
       "kind": "component",
       "label": "Agent Route Observability Runtime",
       "one_line": "Recomputes an agent run's route-compliance score and anti-pattern flags with real trace-analytics code.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 5,
       "card_href": "components.html#component-agent_route_observability_runtime"
      },
      {
       "id": "provider_context_recipe_budget_policy",
       "kind": "component",
       "label": "Provider Context Recipe Budget Policy",
       "one_line": "Runs the real context harness to measure assembled byte sizes and check each bundle fits its budget.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 4,
       "card_href": "components.html#component-provider_context_recipe_budget_policy"
      },
      {
       "id": "agent_closeout_faithfulness_audit",
       "kind": "component",
       "label": "Agent Completion Faithfulness Audit",
       "one_line": "Runs real git and pytest on a sample repo so wrap-up claims state only what the evidence proves.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 4,
       "card_href": "components.html#component-agent_closeout_faithfulness_audit"
      },
      {
       "id": "bounded_autonomy_campaign_packet",
       "kind": "component",
       "label": "Bounded Autonomy Campaign Packet",
       "one_line": "Drafts proposed work from coverage gaps and proves it cannot repair or rewrite the code itself.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 4,
       "card_href": "components.html#component-bounded_autonomy_campaign_packet"
      },
      {
       "id": "batch7_secondary_runtime_capsule",
       "kind": "component",
       "label": "Secondary Runtime Source Bundle",
       "one_line": "Runs eight trace, graph, and market engines on test rows without fetching live markets.",
       "group_id": "agent_reliability_and_safety",
       "group_label": "Agent reliability & safety",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch7_secondary_runtime_capsule"
      },
      {
       "id": "research_replication_rubric_artifact_replay",
       "kind": "component",
       "label": "Research Replication Rubric Artifact Replay",
       "one_line": "Audits whether a paper-replication claim carries the full evidence trail.",
       "group_id": "research_and_science_replays",
       "group_label": "Research & science",
       "evidence_rank": 3,
       "card_href": "components.html#component-research_replication_rubric_artifact_replay"
      },
      {
       "id": "spatial_world_model_counterfactual_simulation_replay",
       "kind": "component",
       "label": "Spatial World Model Counterfactual Simulation Replay",
       "one_line": "Replays six what-if robotics scenes to show what a spatial prediction claim is built from.",
       "group_id": "research_and_science_replays",
       "group_label": "Research & science",
       "evidence_rank": 4,
       "card_href": "components.html#component-spatial_world_model_counterfactual_simulation_replay"
      },
      {
       "id": "materials_chemistry_closed_loop_lab_safety_replay",
       "kind": "component",
       "label": "Materials Chemistry Closed Loop Lab Safety Replay",
       "one_line": "Replays a self-driving lab loop as records, with safety gates and no real chemicals, robot, or lab.",
       "group_id": "research_and_science_replays",
       "group_label": "Research & science",
       "evidence_rank": 3,
       "card_href": "components.html#component-materials_chemistry_closed_loop_lab_safety_replay"
      },
      {
       "id": "mechanistic_interpretability_circuit_attribution_replay",
       "kind": "component",
       "label": "Mechanistic Interpretability Circuit Attribution Replay",
       "one_line": "Records which model features drove an answer, each tied to checkable evidence.",
       "group_id": "research_and_science_replays",
       "group_label": "Research & science",
       "evidence_rank": 4,
       "card_href": "components.html#component-mechanistic_interpretability_circuit_attribution_replay"
      },
      {
       "id": "prediction_oracle_reconciliation",
       "kind": "component",
       "label": "Prediction Oracle Reconciliation",
       "one_line": "Replays a forecast against the discipline a careful predictor would have to defend.",
       "group_id": "research_and_science_replays",
       "group_label": "Research & science",
       "evidence_rank": 3,
       "card_href": "components.html#component-prediction_oracle_reconciliation"
      },
      {
       "id": "finance_forecast_evaluation_spine",
       "kind": "component",
       "label": "Finance Forecast Evaluation Spine",
       "one_line": "Replays synthetic forecast tests through copied finance stats, recording p-values with no advice.",
       "group_id": "research_and_science_replays",
       "group_label": "Research & science",
       "evidence_rank": 4,
       "card_href": "components.html#component-finance_forecast_evaluation_spine"
      },
      {
       "id": "batch12_market_dashboard_read_model_capsule",
       "kind": "component",
       "label": "Market Dashboard Read-Model Bundle",
       "one_line": "Runs a copied market-dashboard reader to catch broken links, stale feeds, and trading overclaims.",
       "group_id": "research_and_science_replays",
       "group_label": "Research & science",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch12_market_dashboard_read_model_capsule"
      },
      {
       "id": "batch12_prediction_market_board_capsule",
       "kind": "component",
       "label": "Prediction Market Board Bundle",
       "one_line": "Replays imported quant market math on test rows, with duplicate retention and seven refusals.",
       "group_id": "research_and_science_replays",
       "group_label": "Research & science",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch12_prediction_market_board_capsule"
      },
      {
       "id": "macro_projection_import_protocol",
       "kind": "component",
       "label": "Source Projection Import Protocol",
       "one_line": "Gates private-to-public imports, accepting only files with matching fingerprints and sources.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-macro_projection_import_protocol"
      },
      {
       "id": "world_model_projection_drift_control_room",
       "kind": "component",
       "label": "World Model Projection Drift Control Room",
       "one_line": "Pinpoints where a projected world-model copy drifted from its real source, with repair routes.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-world_model_projection_drift_control_room"
      },
      {
       "id": "batch6_unsurfaced_primitives_capsule",
       "kind": "component",
       "label": "Unsurfaced Source Primitives Bundle",
       "one_line": "Exposes eleven real but under-surfaced parts and rejects non-public-state and overclaim cases.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch6_unsurfaced_primitives_capsule"
      },
      {
       "id": "batch5_authority_systems_capsule",
       "kind": "component",
       "label": "Authority Systems Source Bundle",
       "one_line": "Replays eight authority and systems checks, rejecting provider, proof, and launch overclaims.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch5_authority_systems_capsule"
      },
      {
       "id": "batch7_macro_engines_capsule",
       "kind": "component",
       "label": "Trace, Code-Map & Scheduling Engines Bundle",
       "one_line": "Runs fifteen trace, code-map, and scheduling engines on test data, blocking truth overclaims.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch7_macro_engines_capsule"
      },
      {
       "id": "batch7_oracle_sibling_capsule",
       "kind": "component",
       "label": "Oracle Sibling Source Bundle",
       "one_line": "Replays subject-index and truth-diff logic on copied code, rejecting reasoning overclaims.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch7_oracle_sibling_capsule"
      },
      {
       "id": "batch7_demo_take_console_capsule",
       "kind": "component",
       "label": "Demo Take Console Source Bundle",
       "one_line": "Replays the recording console's Swift logic without launching the app or capturing audio.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch7_demo_take_console_capsule"
      },
      {
       "id": "batch8_tools_tail_primitives_capsule",
       "kind": "component",
       "label": "Tools-Tail Primitives Bundle",
       "one_line": "Exercises four copied helper tools over fixed inputs without touching live systems or data.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch8_tools_tail_primitives_capsule"
      },
      {
       "id": "batch8_policy_engines_capsule",
       "kind": "component",
       "label": "Policy Engines Bundle",
       "one_line": "Maps three policy engines over test data without model calls or live campaign execution.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch8_policy_engines_capsule"
      },
      {
       "id": "batch8_audio_level_rms_port",
       "kind": "component",
       "label": "Audio Level RMS Port",
       "one_line": "Computes the audio loudness math on test arrays without opening a microphone or capturing input.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 3,
       "card_href": "components.html#component-batch8_audio_level_rms_port"
      },
      {
       "id": "batch8_structural_theses_capsule",
       "kind": "component",
       "label": "Structural Theses Finance Bundle",
       "one_line": "Runs a copied finance-thesis model through dated test cases with no live market data or advice.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch8_structural_theses_capsule"
      },
      {
       "id": "engine_room_demo",
       "kind": "component",
       "label": "Engine Room Demo",
       "one_line": "Runs proof, runtime, security, and routing demos through bounded public examples with stated limits.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-engine_room_demo"
      },
      {
       "id": "batch9_macro_engines_capsule",
       "kind": "component",
       "label": "Backend & Governance Engines Bundle",
       "one_line": "Exercises thirteen copied backend and governance engines over fixed public test cases.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch9_macro_engines_capsule"
      },
      {
       "id": "batch10_governance_compilers_capsule",
       "kind": "component",
       "label": "Governance & Compiler Mechanisms Bundle",
       "one_line": "Checks thirteen copied governance and compiler routines against the code they were copied from.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch10_governance_compilers_capsule"
      },
      {
       "id": "batch11_saturation_engines_capsule",
       "kind": "component",
       "label": "Saturation Engines Bundle",
       "one_line": "Verifies twelve copied engine routines and computes each failure probe from inputs, not echoes.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch11_saturation_engines_capsule"
      },
      {
       "id": "tool_server_pressure_inventory",
       "kind": "component",
       "label": "Tool Server Pressure Inventory",
       "one_line": "Flags detached helper processes and launch pressure from synthetic rows, not live hosts.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-tool_server_pressure_inventory"
      },
      {
       "id": "batch8_compliance_pipeline_capsule",
       "kind": "component",
       "label": "Compliance Pipeline Bundle",
       "one_line": "Confirms six copied compliance source files carry their functions; runs one helper on sample text.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 3,
       "card_href": "components.html#component-batch8_compliance_pipeline_capsule"
      },
      {
       "id": "batch10_live_source_drift_capsule",
       "kind": "component",
       "label": "Live Source Drift Bundle",
       "one_line": "Compares four copied router and landing routines against current code to surface stale copies.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch10_live_source_drift_capsule"
      },
      {
       "id": "batch12_release_claim_language_gate",
       "kind": "component",
       "label": "Release Public Wording Gate",
       "one_line": "Flags affirmative open-source and deployment-posture wording while allowing safe boundary notes.",
       "group_id": "import_projection_and_drift",
       "group_label": "Import & drift control",
       "evidence_rank": 5,
       "card_href": "components.html#component-batch12_release_claim_language_gate"
      },
      {
       "id": "mission_transaction_work_spine",
       "kind": "component",
       "label": "Mission Transaction Work Spine",
       "one_line": "Runs the real work-ledger engine on a sanitised snapshot to re-derive each change's verdict.",
       "group_id": "work_landing_and_continuity",
       "group_label": "Work & continuity",
       "evidence_rank": 4,
       "card_href": "components.html#component-mission_transaction_work_spine"
      },
      {
       "id": "durable_agent_work_landing_replay",
       "kind": "component",
       "label": "Durable Agent Work Landing Replay",
       "one_line": "Audits recorded work-claims so each cites files, validates before commit, and proves HEAD moved.",
       "group_id": "work_landing_and_continuity",
       "group_label": "Work & continuity",
       "evidence_rank": 5,
       "card_href": "components.html#component-durable_agent_work_landing_replay"
      },
      {
       "id": "bridge_phase_continuity_runtime",
       "kind": "component",
       "label": "Bridge Phase Continuity Runtime",
       "one_line": "Replays a paused job to prove the rules for safely resuming it hold and reject duplicate resumes.",
       "group_id": "work_landing_and_continuity",
       "group_label": "Work & continuity",
       "evidence_rank": 5,
       "card_href": "components.html#component-bridge_phase_continuity_runtime"
      },
      {
       "id": "concurrency_mission_control",
       "kind": "component",
       "label": "Concurrency Mission Control",
       "one_line": "Runs copied claim-coordination code so duplicate, stale, and conflicting claims get blocked.",
       "group_id": "work_landing_and_continuity",
       "group_label": "Work & continuity",
       "evidence_rank": 5,
       "card_href": "components.html#component-concurrency_mission_control"
      }
     ]
    },
    {
     "id": "rules_and_ideas",
     "title": "Doctrine reference",
     "description": "Principles, axioms, concepts, mechanisms, and paper modules from the public rule lattice.",
     "projection_role": "canonical_object",
     "packaging": "slim one-liner rows (card_href values are docs/-relative); full roster rows live in content-graph.json#/rosters",
     "row_count": 248,
     "rows": [
      {
       "id": "P-1",
       "kind": "principle",
       "label": "Recompute, do not echo",
       "one_line": "Do not trust a fixture label, declared verdict, route status, count, or public copy line as proof.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-1"
      },
      {
       "id": "P-2",
       "kind": "principle",
       "label": "Lower claim strength to checker strength",
       "one_line": "The scope limit is the strongest thing the named checker, validator, registry, or witness route actually computes.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-2"
      },
      {
       "id": "P-3",
       "kind": "principle",
       "label": "Concentrate trust in small checkers",
       "one_line": "Prefer a small verifier, parser, harness, compiler route, registry contract, or kernel over broad narrative confidence.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-3"
      },
      {
       "id": "P-4",
       "kind": "principle",
       "label": "Possession is not permission",
       "one_line": "Authority comes from dereferenced proof, policy, result record, rollback evidence, and current world state.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-4"
      },
      {
       "id": "P-5",
       "kind": "principle",
       "label": "Cache by content, not by name",
       "one_line": "A reusable result record, command result, source import, or work-landing attempt must carry its content basis.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-5"
      },
      {
       "id": "P-6",
       "kind": "principle",
       "label": "Status fails closed",
       "one_line": "Missing evidence, policy files, source digests, secret scans, negative cases, or result record self-scans block or demote.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-6"
      },
      {
       "id": "P-7",
       "kind": "principle",
       "label": "Track known unknowns without claiming the unknown is mapped",
       "one_line": "Coverage reports name declared domains and materialized gaps.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-7"
      },
      {
       "id": "P-8",
       "kind": "principle",
       "label": "Refuse inadmissible computations with typed reasons",
       "one_line": "When preconditions fail, return a reasoned refusal.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-8"
      },
      {
       "id": "P-9",
       "kind": "principle",
       "label": "Preserve provenance across every boundary",
       "one_line": "Every shard crossing from source source, fixture, result record, public copy, provider shape, or private-system adjacency must carry a prov\u2026",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-9"
      },
      {
       "id": "P-10",
       "kind": "principle",
       "label": "Do not land effects without compensation",
       "one_line": "Writes, launch steps, claim launch, source imports, and rollback-shaped operations need ordered transaction evidence.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-10"
      },
      {
       "id": "P-11",
       "kind": "principle",
       "label": "Bind volatile facts to refresh routes",
       "one_line": "Counts, \"current\" states, live route totals, CI floors, body-import floors, and readiness signals must cite how they can be re-derived.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-11"
      },
      {
       "id": "P-12",
       "kind": "principle",
       "label": "Make doctrine executable before authoritative",
       "one_line": "A doctrine surface earns authority through grammar, required fields, result record obligations, scope boundaries, and validator coverage.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-12"
      },
      {
       "id": "P-13",
       "kind": "principle",
       "label": "Apply the same floor to meta artifacts",
       "one_line": "Microcosm artifacts about Microcosm do not get exemptions.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-13"
      },
      {
       "id": "P-14",
       "kind": "principle",
       "label": "Carry basis and provenance together",
       "one_line": "Content basis says which bytes or rows were used; provenance says where they may flow and how strongly they may be claimed.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-14"
      },
      {
       "id": "P-15",
       "kind": "principle",
       "label": "Keep projections below source authority",
       "one_line": "Generated docs, markdown summaries, route cards, and paper modules may expose a source truth, but they cannot upgrade it.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-15"
      },
      {
       "id": "P-16",
       "kind": "principle",
       "label": "Bind authority to transaction scope",
       "one_line": "Mutation authority is not merely who can touch a file.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-16"
      },
      {
       "id": "P-17",
       "kind": "principle",
       "label": "Anchor graph mutations to unique source rows",
       "one_line": "Before adding or removing a lattice edge in a repeated registry, anchor the mutation to the unique source row, target id, and builder route\u2026",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-17"
      },
      {
       "id": "P-18",
       "kind": "principle",
       "label": "Require fan-in before activation",
       "one_line": "A staged law, standard, component, or projection is not active authority until its owner boundary, source row, generated parity, validation\u2026",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-18"
      },
      {
       "id": "P-19",
       "kind": "principle",
       "label": "Classify residual pressure before wiring",
       "one_line": "A residual is a typed pressure route, not an edge.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-19"
      },
      {
       "id": "P-20",
       "kind": "principle",
       "label": "Bind result records before record authority",
       "one_line": "A doctrine record is not fully active by projection alone.",
       "group_id": "principle",
       "group_label": "Principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-p-20"
      },
      {
       "id": "AX-1",
       "kind": "axiom",
       "label": "Derivation before assertion",
       "one_line": "For any claim phi over basis B, admissibility requires a derivation certificate c and checker K such that K(B,c,phi)=accept; strength(phi)\u2026",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-1"
      },
      {
       "id": "AX-2",
       "kind": "axiom",
       "label": "Kernelized verification",
       "one_line": "Trusted claims are decided by a small checker K over certificates c; producers emit c and K decides.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-2"
      },
      {
       "id": "AX-3",
       "kind": "axiom",
       "label": "Authority by derivation, not possession",
       "one_line": "auth(subject,effect)=F(deref(tokens_presented),policy,proof_refs,world_state); ambient identity is insufficient.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-3"
      },
      {
       "id": "AX-4",
       "kind": "axiom",
       "label": "Content-addressed determinism",
       "one_line": "a=f(B) and id(a)=H(B); equal B permits reuse; drift(B) forces recompute; missing(B)=bottom.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-4"
      },
      {
       "id": "AX-5",
       "kind": "axiom",
       "label": "Fail-closed monotone lattice",
       "one_line": "status(composite)=meet(status(parts)); no evidence defaults to blocked; later stages may lower but not raise authority without new derivati\u2026",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-5"
      },
      {
       "id": "AX-6",
       "kind": "axiom",
       "label": "Open-world epistemics",
       "one_line": "not_proven(P) does not imply proven(not P); coverage is closed-world only inside declared finite domains.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-6"
      },
      {
       "id": "AX-7",
       "kind": "axiom",
       "label": "Typed partiality and refusal",
       "one_line": "Partial computation g is totalized as Result: Ok(y) under Pre(x), otherwise Refusal(reason,evidence).",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-7"
      },
      {
       "id": "AX-8",
       "kind": "axiom",
       "label": "Provenance propagation and non-interference",
       "one_line": "Data labels propagate along flows; untrusted labels reach privileged sinks only through declared transforms satisfying sink policy.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-8"
      },
      {
       "id": "AX-9",
       "kind": "axiom",
       "label": "Compensable transactional effects",
       "one_line": "Effect e requires a compensator or declared irreversible boundary; multi-step effects land as saga with CAS and single-writer constraints.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-9"
      },
      {
       "id": "AX-10",
       "kind": "axiom",
       "label": "Temporal validity and freshness contracts",
       "one_line": "Claims over live state are cached reads valid only under <value,as_of,basis,rederive> invalidation contracts.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-10"
      },
      {
       "id": "AX-11",
       "kind": "axiom",
       "label": "Executable grammar before doctrine authority",
       "one_line": "authority(d) implies d in L(G), result record obligations, and scope boundary are present; prose alone is projection.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-11"
      },
      {
       "id": "AX-12",
       "kind": "axiom",
       "label": "Reflexive accountability / no privileged meta-layer",
       "one_line": "For every Microcosm artifact a, any claim phi carried by a must satisfy the same admissibility relation as external claims.",
       "group_id": "axiom",
       "group_label": "Axioms",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ax-12"
      },
      {
       "id": "AP-1",
       "kind": "anti_principle",
       "label": "Fixture-label echo",
       "one_line": "Echoing a fixture verdict, registry label, markdown claim, or model answer instead of recomputing it from lower-level evidence.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-1"
      },
      {
       "id": "AP-2",
       "kind": "anti_principle",
       "label": "Producer trust",
       "one_line": "Trusting a producer, persona, route, account secret, or prior success instead of a checker, proof, policy, or dereferenced capability.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-2"
      },
      {
       "id": "AP-3",
       "kind": "anti_principle",
       "label": "Rank-as-product-score",
       "one_line": "Treating counts, handles, passing validators, or evidence classes as product maturity, launch-scope decision, or whole-system correctness.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-3"
      },
      {
       "id": "AP-4",
       "kind": "anti_principle",
       "label": "Cache-across-drift",
       "one_line": "Caching by name, path, route, display label, or producer while basis content has drifted.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-4"
      },
      {
       "id": "AP-5",
       "kind": "anti_principle",
       "label": "Unknown-unknown exhaustiveness",
       "one_line": "Treating missing evidence as evidence of absence outside a declared closed domain.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-5"
      },
      {
       "id": "AP-6",
       "kind": "anti_principle",
       "label": "Inadmissible number emission",
       "one_line": "Emitting inadmissible numbers or conclusions instead of typed refusal.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-6"
      },
      {
       "id": "AP-7",
       "kind": "anti_principle",
       "label": "Public/private membrane breach",
       "one_line": "Letting untrusted, private, provider, prompt, account secret, or raw-voice material reach a privileged or public sink without provenance an\u2026",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-7"
      },
      {
       "id": "AP-8",
       "kind": "anti_principle",
       "label": "Blind irreversible mutation",
       "one_line": "Performing irreversible mutation without a compensator, rollback result record, CAS/world-version guard, or explicit irreversible boundary.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-8"
      },
      {
       "id": "AP-9",
       "kind": "anti_principle",
       "label": "Frozen live fact",
       "one_line": "Freezing live facts in prose without `as_of`, basis, and rederive contract.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-9"
      },
      {
       "id": "AP-10",
       "kind": "anti_principle",
       "label": "Prose-as-executable-authority",
       "one_line": "Granting executable authority to prose doctrine without grammar and result record obligations.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-10"
      },
      {
       "id": "AP-11",
       "kind": "anti_principle",
       "label": "Meta-artifact exemption",
       "one_line": "Exempting Microcosm's own result records, docs, releases, generated projections, or validators from Microcosm's evidence gates.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-11"
      },
      {
       "id": "AP-12",
       "kind": "anti_principle",
       "label": "Synthetic system substitution",
       "one_line": "Using synthetic fixtures as substitutes for available system.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-12"
      },
      {
       "id": "AP-13",
       "kind": "anti_principle",
       "label": "Generated-result record source inversion",
       "one_line": "Treating generated result records as hand-authored source.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-13"
      },
      {
       "id": "AP-14",
       "kind": "anti_principle",
       "label": "Public-authority inflation",
       "one_line": "Letting public docs imply a hosted service, external service access, source-file mutation, financial or trading decisions, deployment postu\u2026",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-14"
      },
      {
       "id": "AP-15",
       "kind": "anti_principle",
       "label": "Mechanism theater",
       "one_line": "Using field vocabulary such as proof, verifier, information flow, world model, or benchmark integrity when the public mechanism only valida\u2026",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-15"
      },
      {
       "id": "AP-16",
       "kind": "anti_principle",
       "label": "Receiver inflation",
       "one_line": "Displaying a declared, inferred, or generated downstream target as an observed runtime effect without evidence of the effect relation.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-16"
      },
      {
       "id": "AP-17",
       "kind": "anti_principle",
       "label": "Projection-as-source",
       "one_line": "Letting a markdown page, generated card, atlas row, or compact result record summary override the executable contract it summarizes.",
       "group_id": "anti_principle",
       "group_label": "Anti-principles",
       "evidence_rank": null,
       "card_href": "doctrine.html#dcard-ap-17"
      },
      {
       "id": "concept.agent_reliability_and_safety_validator_bundle",
       "kind": "concept",
       "label": "agent reliability and safety validators as bounded public scope limits",
       "one_line": "safety and reliability claims remain bounded to named public fixtures, validators, and result record rows instead of global agent capabilit\u2026",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle"
      },
      {
       "id": "concept.architecture_and_navigation_route_contract_bundle",
       "kind": "concept",
       "label": "architecture and navigation route contracts as executable doctrine boundaries",
       "one_line": "navigation and doctrine surfaces become walkable through source-bound contracts while generated views stay below source authority",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle"
      },
      {
       "id": "concept.entry_and_reveal_route_readiness_bundle",
       "kind": "concept",
       "label": "entry and reveal routes as bounded cold-reader readiness evidence",
       "one_line": "entry evidence shows what a reader can inspect, not that the whole system is ready or correct",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-entry-and-reveal-route-readiness-bundle"
      },
      {
       "id": "concept.executable_doctrine_grammar_standard_bundle",
       "kind": "concept",
       "label": "standard as schema contract with explicit scope limit",
       "one_line": "invalid standards are blocked by negative cases such as missing teleology, missing result record expectations, or prose-only authority",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle"
      },
      {
       "id": "concept.first_screen_doctrine_effect_frame",
       "kind": "concept",
       "label": "doctrine handles as typed mistake-prevention boundaries",
       "one_line": "runtime first-screen output emits CONCEPTS and MECHANISMS before standards-tree search is required",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-first-screen-doctrine-effect-frame"
      },
      {
       "id": "concept.formal_math_and_proof_witness_bundle",
       "kind": "concept",
       "label": "formal math and proof witnesses as bounded public proof-adjacent result records",
       "one_line": "proof-related artifacts expose bounded witness status without claiming theorem completeness or provider proof authority",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle"
      },
      {
       "id": "concept.import_projection_and_drift_control_bundle",
       "kind": "concept",
       "label": "source import and projection drift controls as provenance-preserving boundaries",
       "one_line": "imported material remains tied to source anchors and drift result records instead of becoming ambient doctrine authority",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle"
      },
      {
       "id": "concept.research_and_science_replay_evidence_bundle",
       "kind": "concept",
       "label": "research and science replay validators as reproducibility scope limits",
       "one_line": "research claims remain scoped to public replay evidence and known gaps instead of becoming external scientific truth claims",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle"
      },
      {
       "id": "concept.standards_meta_diagnostics_bundle",
       "kind": "concept",
       "label": "component-standard-runtime-result record coverage as projection-only evidence",
       "one_line": "accepted_organ_count and covered_organ_ids are validated without becoming launch-scope decision",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle"
      },
      {
       "id": "concept.voice_to_doctrine_self_improvement_loop_bundle",
       "kind": "concept",
       "label": "local pressure rows as typed candidates for owner-surface refinement",
       "one_line": "status_counts distinguish refined_existing_surface, workitem_captured, and nothing_to_refine",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-voice-to-doctrine-self-improvement-loop-bundle"
      },
      {
       "id": "concept.work_landing_and_continuity_control_bundle",
       "kind": "concept",
       "label": "work landing and continuity controls as transaction-scoped coordination evidence",
       "one_line": "work progress claims stay tied to owned paths, result records, and transaction scope rather than chat status or generated projections",
       "group_id": "concept",
       "group_label": "Concepts",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle"
      },
      {
       "id": "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
       "kind": "mechanism",
       "label": "validates public benchmark integrity replay",
       "one_line": "The agent benchmark integrity anti-gaming replay component validates public benchmark-claim boundaries by checking locked evaluator policy\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay"
      },
      {
       "id": "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
       "kind": "mechanism",
       "label": "validates completion evidence claims",
       "one_line": "The agent completion faithfulness audit component validates public completion evidence claims by checking fixture commit objects and HEAD w\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims"
      },
      {
       "id": "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
       "kind": "mechanism",
       "label": "validates public memory conflict replay",
       "one_line": "The agent memory temporal-conflict replay component validates public memory projection mechanics by checking ADD/UPDATE/DELETE/NOOP decisio\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay"
      },
      {
       "id": "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
       "kind": "mechanism",
       "label": "validates public monitor verdict result records",
       "one_line": "The agent monitor redteam falsification replay component validates public monitor-verdict evidence shape by checking trajectory rosters, su\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts"
      },
      {
       "id": "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
       "kind": "mechanism",
       "label": "validates public route feedback",
       "one_line": "The agent route observability runtime validates public route-feedback and observability fixture bundles by checking actor-axis authority bo\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback"
      },
      {
       "id": "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
       "kind": "mechanism",
       "label": "validates public sabotage scheming monitor replay",
       "one_line": "The agent sabotage scheming-monitor replay validates a public synthetic sabotage-monitor bundle through task episodes, action traces, monit\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay"
      },
      {
       "id": "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
       "kind": "mechanism",
       "label": "validates public sandbox policy trace",
       "one_line": "The agent sandbox policy escape replay component validates public sandbox-policy projection mechanics by checking action requests, pre-exec\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace"
      },
      {
       "id": "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
       "kind": "mechanism",
       "label": "validates public agentic vulnerability patch proof replay",
       "one_line": "The agentic vulnerability discovery patch-proof replay component validates public vulnerability-claim boundaries by checking projection pro\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay"
      },
      {
       "id": "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
       "kind": "mechanism",
       "label": "validates public proof authority runtime bundle",
       "one_line": "The Set 4 proof, authority, and runtime bundle validates copied public proof-control, formal-math, Codex runtime, completion, bitemporal, t\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule"
      },
      {
       "id": "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
       "kind": "mechanism",
       "label": "validates public authority systems bundle",
       "one_line": "The Set 5 authority systems bundle validates copied public source authority/control bodies through deterministic fixture and exported-bundl\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule"
      },
      {
       "id": "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
       "kind": "mechanism",
       "label": "validates public unsurfaced primitives bundle",
       "one_line": "The Set 6 unsurfaced primitives bundle validates copied public source-primitive bodies through deterministic fixture and exported-bundle ex\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule"
      },
      {
       "id": "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
       "kind": "mechanism",
       "label": "validates public demo take console bundle",
       "one_line": "The Set 7 Demo Take Console bundle validates copied public Swift source bodies through deterministic SwiftPM build-witness, recording-state\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-demo-take-console-capsule-validates-public-demo-take-console-capsule"
      },
      {
       "id": "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
       "kind": "mechanism",
       "label": "validates public source engines bundle",
       "one_line": "The Set 7 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule"
      },
      {
       "id": "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
       "kind": "mechanism",
       "label": "validates public oracle sibling bundle",
       "one_line": "The Set 7 Oracle sibling bundle validates copied public Oracle source bodies through deterministic subject-index, subject-snapshot, truth-d\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-oracle-sibling-capsule-validates-public-oracle-sibling-capsule"
      },
      {
       "id": "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
       "kind": "mechanism",
       "label": "validates public secondary runtime bundle",
       "one_line": "The Set 7 secondary runtime bundle validates copied public runtime, graph, cartography, stockgrid, and Polymarket source-body behavior thro\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule"
      },
      {
       "id": "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
       "kind": "mechanism",
       "label": "validates public audio level rms port",
       "one_line": "The Set 8 audio level RMS port validates a source-faithful public projection of AudioLevelMonitor normalized-level RMS behavior by running\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port"
      },
      {
       "id": "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
       "kind": "mechanism",
       "label": "validates public compliance pipeline bundle",
       "one_line": "The Set 8 compliance pipeline bundle validates a bounded public compliance/pipeline import by exercising the compliance adapter registry, b\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule"
      },
      {
       "id": "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
       "kind": "mechanism",
       "label": "validates public policy engines bundle",
       "one_line": "The Set 8 policy engines bundle validates copied public policy-engine bodies by exercising lab contract audit, market fusion readiness, cam\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule"
      },
      {
       "id": "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
       "kind": "mechanism",
       "label": "validates public structural theses bundle",
       "one_line": "The Set 8 structural theses bundle validates a copied public structural-theses finance body by running synthetic winner, loser, and control\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule"
      },
      {
       "id": "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
       "kind": "mechanism",
       "label": "validates public tools tail primitives bundle",
       "one_line": "The Set 8 tools-tail primitives bundle validates four copied public tools-tail source modules by exercising observer set diffs, JSON patch\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule"
      },
      {
       "id": "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
       "kind": "mechanism",
       "label": "validates public validator checker bundle",
       "one_line": "The Set 8 validator checker bundle validates an exact copied public validators.py body by exercising policy/status judging, private-boundar\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule"
      },
      {
       "id": "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
       "kind": "mechanism",
       "label": "validates public source engines bundle",
       "one_line": "The Set 9 source engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercises, s\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule"
      },
      {
       "id": "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
       "kind": "mechanism",
       "label": "validates public cold eval honesty bundle",
       "one_line": "The Set 10 cold-eval honesty bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule"
      },
      {
       "id": "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
       "kind": "mechanism",
       "label": "validates public governance compilers bundle",
       "one_line": "The Set 10 governance compilers bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exerc\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule"
      },
      {
       "id": "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
       "kind": "mechanism",
       "label": "validates public live source drift bundle",
       "one_line": "The Set 10 live-source drift bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercise\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule"
      },
      {
       "id": "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
       "kind": "mechanism",
       "label": "validates public saturation engines bundle",
       "one_line": "The Set 11 saturation engines bundle validates copied public source-body behavior through deterministic fixture and exported-bundle exercis\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule"
      },
      {
       "id": "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
       "kind": "mechanism",
       "label": "validates public market dashboard read model bundle",
       "one_line": "The Set 12 market dashboard read-model bundle validates copied public read-model helpers over synthetic fixtures through market-dashboard i\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule"
      },
      {
       "id": "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
       "kind": "mechanism",
       "label": "validates public prediction market board bundle",
       "one_line": "The Set 12 prediction market board bundle validates copied public prediction-board and quant-mart diagnostics over synthetic fixtures throu\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule"
      },
      {
       "id": "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
       "kind": "mechanism",
       "label": "validates public launch claim language gate",
       "one_line": "The Set 12 launch-claim language gate component validates launch-claim fixture generation, claim-language blocking, assert-clear exits, sou\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate"
      },
      {
       "id": "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
       "kind": "mechanism",
       "label": "validates public belief state process reward replay",
       "one_line": "The belief-state process reward replay component validates public belief summaries, verifier-feedback observations, process and outcome rew\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay"
      },
      {
       "id": "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
       "kind": "mechanism",
       "label": "validates public bounded autonomy campaign packet",
       "one_line": "The bounded-autonomy campaign packet component validates campaign policy, failed-campaign digest handling, source-write refusal, source-mod\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet"
      },
      {
       "id": "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
       "kind": "mechanism",
       "label": "validates synthetic bridge continuity",
       "one_line": "The bridge phase continuity runtime validates public synthetic observe/apply bridge continuity by checking disk-first continuation packets\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity"
      },
      {
       "id": "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
       "kind": "mechanism",
       "label": "validates public certificate kernel execution",
       "one_line": "The certificate kernel execution lab component validates public proof-adjacent execution boundaries by checking a Lean/Lake certificate-ker\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution"
      },
      {
       "id": "mechanism.cognitive_operator_registry.validates_public_operator_contract",
       "kind": "mechanism",
       "label": "validates public operator contract",
       "one_line": "The cognitive operator registry component validates public reusable-cognition system by checking operator-shape fields, active-operator dog\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract"
      },
      {
       "id": "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
       "kind": "mechanism",
       "label": "validates public source root bootstrap",
       "one_line": "The cold-clone probe validates source-root public bootstrap mechanics by importing the package from src, running the secret-exclusion scan\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-clone-probe-validates-public-source-root-bootstrap"
      },
      {
       "id": "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
       "kind": "mechanism",
       "label": "validates public first run route map",
       "one_line": "The cold-reader route-map component validates public first-run route projections by checking route-row command refs, public docs refs, rout\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map"
      },
      {
       "id": "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
       "kind": "mechanism",
       "label": "validates public concurrency mission control",
       "one_line": "The concurrency mission-control component validates copied public mission-control builder and bridge artifacts through fixture failure clas\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control"
      },
      {
       "id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
       "kind": "mechanism",
       "label": "validates public corpus readiness boundary",
       "one_line": "The corpus readiness Mathlib absence gate component validates public formal-math corpus readiness boundaries by checking copied PROVER smok\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary"
      },
      {
       "id": "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
       "kind": "mechanism",
       "label": "validates public mathlib absence boundary",
       "one_line": "The corpus readiness Mathlib absence gate validates recorded corpus and toolchain readiness accounting, Mathlib absence boundaries, consume\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary"
      },
      {
       "id": "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
       "kind": "mechanism",
       "label": "validates public doctrine fact claim audit",
       "one_line": "The doctrine fact-claim audit component validates fact assertions, numeric claim bindings, DAG references, code-locus anchors, source-modul\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit"
      },
      {
       "id": "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
       "kind": "mechanism",
       "label": "validates public work landing replay contract",
       "one_line": "The durable agent work-landing replay component validates public work-landing replay rows by checking owned-path claim evidence, owner-nati\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract"
      },
      {
       "id": "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
       "kind": "mechanism",
       "label": "validates public reference knowledge router",
       "one_line": "The Engine Room reference knowledge router mechanism validates explainable tiered routing over sanitized reference catalog fixtures by scor\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router"
      },
      {
       "id": "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
       "kind": "mechanism",
       "label": "validates public command run singleflight",
       "one_line": "The Engine Room command-run singleflight mechanism validates content-addressed subprocess run keys, fcntl-backed leader/follower collapse\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight"
      },
      {
       "id": "mechanism.engine_room_demo.validates_public_engine_room_demo",
       "kind": "mechanism",
       "label": "validates public engine room demo",
       "one_line": "The Engine Room demo component validates the staged public Engine Room composition over bounded fixtures, controller audits, missing-target\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo"
      },
      {
       "id": "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
       "kind": "mechanism",
       "label": "validates public derived fact provider engine",
       "one_line": "The Engine Room derived fact provider engine mechanism validates registry-backed fact resolution over public fixture roots by resolving JSO\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine"
      },
      {
       "id": "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
       "kind": "mechanism",
       "label": "validates public egress self compliance gate",
       "one_line": "The Engine Room egress self-compliance gate mechanism validates phrase-membership policy over public agent-output fixtures by detecting per\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate"
      },
      {
       "id": "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
       "kind": "mechanism",
       "label": "validates public generated projection drift gate",
       "one_line": "The Engine Room generated projection drift gate validates owner-routed generated artifact freshness over public fixtures by selecting proje\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate"
      },
      {
       "id": "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
       "kind": "mechanism",
       "label": "validates public lean proof search lab",
       "one_line": "The Engine Room Lean proof-search lab mechanism validates bounded public proof-search fixtures by running tiny Lean statements through symb\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab"
      },
      {
       "id": "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
       "kind": "mechanism",
       "label": "validates public navigation fitness benchmark",
       "one_line": "The Engine Room navigation fitness benchmark mechanism validates public route-packet benchmark fixtures by checking expected stable-id reca\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark"
      },
      {
       "id": "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
       "kind": "mechanism",
       "label": "validates public projection leak gate",
       "one_line": "The Engine Room public projection leak gate validates rendered public projection roots by scanning file content, path names, symlink target\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate"
      },
      {
       "id": "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
       "kind": "mechanism",
       "label": "validates public doctrine grammar bundle",
       "one_line": "The executable doctrine grammar component validates public standards and paper-module grammar fixtures by checking required standard fields\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle"
      },
      {
       "id": "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
       "kind": "mechanism",
       "label": "validates public finance forecast evaluation spine",
       "one_line": "The finance forecast evaluation spine validates copied public finance-evaluation helpers over synthetic market-shaped fixtures through Dieb\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine"
      },
      {
       "id": "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
       "kind": "mechanism",
       "label": "validates public first screen composition root",
       "one_line": "The first-screen composition root validates the public one-screen entry card by checking reader-route ids, shared first commands, behavior-\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root"
      },
      {
       "id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
       "kind": "mechanism",
       "label": "validates public evidence cell anchor resolution",
       "one_line": "The formal evidence cell anchor resolver validates proof-language evidence boundaries by resolving public paper claims to evidence-cell ids\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution"
      },
      {
       "id": "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
       "kind": "mechanism",
       "label": "validates public evidence cell anchors",
       "one_line": "The formal evidence cell anchor resolver validates claim-to-evidence-cell resolution, public source anchors, permitted claim strength, copi\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors"
      },
      {
       "id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
       "kind": "mechanism",
       "label": "validates public lean lake witness",
       "one_line": "The formal math Lean proof witness component validates a bounded public Lean/Lake witness by copying a declared toy Lake project into a tem\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness"
      },
      {
       "id": "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
       "kind": "mechanism",
       "label": "validates public lean witness",
       "one_line": "The formal math Lean proof witness validates a bounded public toy Lean/Lake witness by checking tool availability, temporary-workspace buil\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness"
      },
      {
       "id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
       "kind": "mechanism",
       "label": "validates public premise retrieval projection",
       "one_line": "The formal math premise retrieval component validates public retrieval metadata, premise-index references, strategy cases, retrieval querie\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection"
      },
      {
       "id": "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
       "kind": "mechanism",
       "label": "validates public premise retrieval slice",
       "one_line": "The formal math premise retrieval component validates a formal-math retrieval slice by checking copied Lean/Std premise descriptors, retrie\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice"
      },
      {
       "id": "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
       "kind": "mechanism",
       "label": "validates public formal math readiness bundle",
       "one_line": "The formal math readiness gate component validates public formal-math readiness evidence by checking declared corpus and Mathlib readiness\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle"
      },
      {
       "id": "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
       "kind": "mechanism",
       "label": "validates public readiness boundary",
       "one_line": "The formal math readiness gate validates declared readiness metadata, tactic availability references, premise-index boundaries, target-shap\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary"
      },
      {
       "id": "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
       "kind": "mechanism",
       "label": "validates public verifier trace repair bundle",
       "one_line": "The formal math verifier-trace repair loop component validates public proof-lab repair evidence by checking copied Ring2 run refs and diges\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle"
      },
      {
       "id": "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
       "kind": "mechanism",
       "label": "validates public indirect prompt injection information flow policy replay",
       "one_line": "The indirect prompt-injection information-flow policy replay component validates public source-trust rows, taint-flow edges, policy verdict\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay"
      },
      {
       "id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
       "kind": "mechanism",
       "label": "validates public lean std premise catalog",
       "one_line": "The Lean/Std premise index component validates a copied Lean/Std premise descriptor catalog and Ring2 premise-retrieval source body bundle\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog"
      },
      {
       "id": "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
       "kind": "mechanism",
       "label": "validates public lean std premise index",
       "one_line": "The Lean Std premise index validates premise metadata, Lean/Init source refs, copied public source manifests, forbidden proof/oracle fields\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index"
      },
      {
       "id": "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
       "kind": "mechanism",
       "label": "validates public source projection imports",
       "one_line": "The source projection import protocol component validates fixture and exported projection bundles by checking source refs, public target re\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports"
      },
      {
       "id": "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
       "kind": "mechanism",
       "label": "validates public materials lab safety replay",
       "one_line": "The materials chemistry closed-loop lab-safety replay component validates public lab-safety claim boundaries by checking candidate material\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay"
      },
      {
       "id": "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
       "kind": "mechanism",
       "label": "validates public strategy hypothesis projection",
       "one_line": "The mathematical strategy atlas hypothesis scorer validates pre-oracle strategy selection, feature-overlap routing, source-artifact consist\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection"
      },
      {
       "id": "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
       "kind": "mechanism",
       "label": "validates public mcp tool authority replay",
       "one_line": "The MCP tool authority replay component validates public tool manifest scope, call metadata, approval token refs, side-effect ledger refs\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay"
      },
      {
       "id": "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
       "kind": "mechanism",
       "label": "validates public mechanistic interpretability circuit attribution replay",
       "one_line": "The mechanistic interpretability circuit-attribution replay component validates public toy-transformer attribution rows, machine-readable g\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay"
      },
      {
       "id": "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
       "kind": "mechanism",
       "label": "validates public axiom support boundary",
       "one_line": "The Microcosm axiom system support-cover evaluator projects public axiom support cases, support frontiers, anti-axiom rejection mappings, p\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-microcosm-axiom-substrate-validates-public-axiom-support-boundary"
      },
      {
       "id": "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
       "kind": "mechanism",
       "label": "validates public mission transaction bundle",
       "one_line": "The mission transaction work-spine component validates public work-landing and completion metadata by checking fixed Work item, claim, depe\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle"
      },
      {
       "id": "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
       "kind": "mechanism",
       "label": "validates public route plane bundle",
       "one_line": "The navigation hologram route-plane component validates public route-plane fixture rows and exported bundle inputs by checking route projec\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle"
      },
      {
       "id": "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
       "kind": "mechanism",
       "label": "validates public pattern assimilation step",
       "one_line": "The pattern-assimilation step component validates refinement, nothing-to-refine, stewardship, re-entry, source-module manifest, negative-ca\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step"
      },
      {
       "id": "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
       "kind": "mechanism",
       "label": "validates public pattern bindings",
       "one_line": "The pattern-binding contract component validates public pattern rows, source bundles, reference bundles, authority handles, exported system\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings"
      },
      {
       "id": "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
       "kind": "mechanism",
       "label": "validates public prediction oracle reconciliation",
       "one_line": "The prediction oracle reconciliation component validates synthetic prediction packets through CP1 fork preservation, CP2 target-universe ch\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation"
      },
      {
       "id": "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
       "kind": "mechanism",
       "label": "validates synthetic governed mutation authorization",
       "one_line": "The proof-derived governed-mutation authorization component validates public synthetic mutation-authority proposals by checking proof-cell\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization"
      },
      {
       "id": "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
       "kind": "mechanism",
       "label": "validates ring2 diagnostic evidence membrane",
       "one_line": "The proof diagnostic evidence spine component validates proof-adjacent public evidence by checking Ring2 diagnostic result record refs, cop\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane"
      },
      {
       "id": "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
       "kind": "mechanism",
       "label": "validates public context budget boundary",
       "one_line": "The provider context recipe budget policy validates byte-bounded context recipe projection, ordered section fill, omitted-section manifests\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary"
      },
      {
       "id": "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
       "kind": "mechanism",
       "label": "validates public reveal walkthrough",
       "one_line": "The public reveal walkthrough component validates public entry material by checking reveal-step density, runnable command refs, evidence re\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough"
      },
      {
       "id": "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
       "kind": "mechanism",
       "label": "validates public research replication replay",
       "one_line": "The research replication rubric-artifact replay component validates public research-replication claim boundaries by checking contribution d\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay"
      },
      {
       "id": "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
       "kind": "mechanism",
       "label": "validates public premise retrieval attribution",
       "one_line": "The Ring2 premise retrieval precision/recall harness validates copied retrieval rankings, needed-premise attribution labels, aggregate hit\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution"
      },
      {
       "id": "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
       "kind": "mechanism",
       "label": "validates public routing anti patterns registry",
       "one_line": "The routing anti-patterns registry component validates public routing anti-pattern rows, source-module digest anchors, private-leak rejecti\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry"
      },
      {
       "id": "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
       "kind": "mechanism",
       "label": "validates public self ignorance coverage ledger",
       "one_line": "The self-ignorance coverage ledger component validates known Kind Atlas coverage-debt fixtures through declared gap rows, missing-category\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger"
      },
      {
       "id": "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
       "kind": "mechanism",
       "label": "validates public sleeper memory poisoning quarantine replay",
       "one_line": "The sleeper memory poisoning quarantine replay component validates metadata-only public memory-security policy projections, poisoned-source\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay"
      },
      {
       "id": "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
       "kind": "mechanism",
       "label": "validates public spatial world model counterfactual simulation replay",
       "one_line": "The spatial world-model counterfactual simulation replay component validates synthetic scene-state transitions, counterfactual replay rows\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay"
      },
      {
       "id": "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
       "kind": "mechanism",
       "label": "validates public standards meta diagnostics",
       "one_line": "The standards meta diagnostics component validates public projection-only diagnostics over accepted-component standards inventory, runtime\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics"
      },
      {
       "id": "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
       "kind": "mechanism",
       "label": "validates public tactic availability projection",
       "one_line": "The tactic portfolio availability probe validates recorded tactic compile-status rows, captured probe source digests, unavailable-tactic ro\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection"
      },
      {
       "id": "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
       "kind": "mechanism",
       "label": "validates public tactic routing boundary",
       "one_line": "The target-shape tactic routing gate validates pre-execution tactic allow/reject decisions against target shape, recorded tactic availabili\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary"
      },
      {
       "id": "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
       "kind": "mechanism",
       "label": "validates public tool server pressure inventory",
       "one_line": "The tool-server pressure inventory component validates public helper-process pressure fixtures through synthetic process rows, active-owner\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory"
      },
      {
       "id": "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
       "kind": "mechanism",
       "label": "validates public symbol boundary",
       "one_line": "The undeclared library prior symbol classifier validates symbol-boundary observations against allowed premise ids, classifier policy, sourc\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary"
      },
      {
       "id": "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
       "kind": "mechanism",
       "label": "validates public verifier transition witness",
       "one_line": "The verifier lab execution spine validates bounded public Lean transition rows by running the local checker on a temporary fixture, preserv\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness"
      },
      {
       "id": "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
       "kind": "mechanism",
       "label": "composes public formal math result records",
       "one_line": "The verifier lab kernel composes public formal-math component result records into one leak-proof aggregate result record, preserving verifi\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts"
      },
      {
       "id": "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
       "kind": "mechanism",
       "label": "validates public voice to doctrine self improvement loop",
       "one_line": "The voice-to-doctrine self-improvement loop component validates lesson propagation through projection protocol, policy, owner-surface check\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop"
      },
      {
       "id": "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
       "kind": "mechanism",
       "label": "validates public projection drift control boundary",
       "one_line": "The world-model projection drift control room component validates public metadata-only projection-drift rows and copied world-model/view-qu\u2026",
       "group_id": "mechanism",
       "group_label": "Mechanisms",
       "evidence_rank": null,
       "card_href": "rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary"
      },
      {
       "id": "paper_module.verifier_lab_kernel",
       "kind": "paper_module",
       "label": "Verifier Lab Kernel",
       "one_line": "The public verifier-lab composition root folds bounded formal-math component result records into one leak-proof result record while separating verifier-backed, oracle-compared, provider-suggested, retrieval-miss, CP2, Evolve, and contract-rejected rows.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-verifier-lab-kernel"
      },
      {
       "id": "paper_module.navigation_hologram_route_plane",
       "kind": "paper_module",
       "label": "Navigation Hologram Route Plane",
       "one_line": "The public navigation route-plane fixture validates bounded route projections, source-coupling gates, entry floors, affordance passports, and copied navigation source-module digests without treating browse rows as authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-navigation-hologram-route-plane"
      },
      {
       "id": "paper_module.agent_route_observability_runtime",
       "kind": "paper_module",
       "label": "Agent Route Observability Runtime",
       "one_line": "The public route-observability fixture validates synthetic route feedback, route leases, hook-shadow advisory rows, anti-pattern debt, copied source trace manifests, and metadata-only result records without claiming live session authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-route-observability-runtime"
      },
      {
       "id": "paper_module.agent_benchmark_integrity_anti_gaming_replay",
       "kind": "paper_module",
       "label": "Agent Benchmark Integrity Anti-Gaming Replay",
       "one_line": "The agent benchmark integrity anti-gaming replay validates copied public source pattern provenance bodies and metadata-only benchmark replay rows before any score-like language is allowed.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay"
      },
      {
       "id": "paper_module.research_replication_rubric_artifact_replay",
       "kind": "paper_module",
       "label": "Research Replication Rubric Artifact Replay",
       "one_line": "The research replication rubric-artifact replay validates source-backed public replication bundles before any paper-replication language is allowed.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-research-replication-rubric-artifact-replay"
      },
      {
       "id": "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
       "kind": "paper_module",
       "label": "Agentic Vulnerability Discovery Patch-Proof Replay",
       "one_line": "The agentic vulnerability discovery patch-proof replay validates metadata-only synthetic vulnerability evidence chains before any found-and-fixed security language is allowed.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay"
      },
      {
       "id": "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
       "kind": "paper_module",
       "label": "Materials Chemistry Closed-Loop Lab-Safety Replay",
       "one_line": "The materials chemistry lab-safety replay validates metadata-only simulator-only closed-loop rows before any materials-lab or discovery language is allowed.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay"
      },
      {
       "id": "paper_module.certificate_kernel_execution_lab",
       "kind": "paper_module",
       "label": "Certificate Kernel Execution Lab",
       "one_line": "The certificate kernel execution lab validates bounded public Lean/Lake certificate-kernel rows before any proof-adjacent claim is allowed.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-certificate-kernel-execution-lab"
      },
      {
       "id": "paper_module.corpus_readiness_mathlib_absence_gate",
       "kind": "paper_module",
       "label": "Corpus Readiness Mathlib Absence Gate",
       "one_line": "The corpus readiness Mathlib absence gate validates copied corpus/toolchain readiness bodies before any Mathlib-dependent proof or retrieval claim is allowed.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate"
      },
      {
       "id": "paper_module.pattern_binding_contract",
       "kind": "paper_module",
       "label": "Pattern Binding Contract",
       "one_line": "The public pattern-binding component validates pattern rows, source bundles, authority handles, exported system bundles, and route-readiness selector overlays while keeping mined rows component-first and fixture-bound.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-pattern-binding-contract"
      },
      {
       "id": "paper_module.bridge_phase_continuity_runtime",
       "kind": "paper_module",
       "label": "Bridge Phase Continuity Runtime",
       "one_line": "The public bridge-continuity fixture validates disk-first continuation packets, heartbeat/resource-pressure boundaries, resume-once semantics, worker-skip dedupe, tracked result record-write gates, and non-public-state exclusion without live bridge transport.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-bridge-phase-continuity-runtime"
      },
      {
       "id": "paper_module.cognitive_operator_registry",
       "kind": "paper_module",
       "label": "Cognitive Operator Registry",
       "one_line": "The public cognitive-operator registry fixture validates operator-shape rows, active-operator dogfood result records, anti-sprawl decisions, copied source registry/standard/tool bodies, and scope limits without becoming operator source authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-cognitive-operator-registry"
      },
      {
       "id": "paper_module.agent_closeout_faithfulness_audit",
       "kind": "paper_module",
       "label": "Agent Completion Faithfulness Audit",
       "one_line": "The public completion-faithfulness fixture checks commit, ledger-cap, and pytest-span claims with real git/pytest subprocess witnesses while refusing unchecked pass overclaims.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-closeout-faithfulness-audit"
      },
      {
       "id": "paper_module.cold_reader_route_map",
       "kind": "paper_module",
       "label": "Cold-Reader Route Map",
       "one_line": "The public cold-reader route-map fixture validates first-run command order, docs refs, result record refs, scope limits, copied cold-entry source-module digests, and non-public-state exclusion without becoming route registry control.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-cold-reader-route-map"
      },
      {
       "id": "paper_module.proof_diagnostic_evidence_spine",
       "kind": "paper_module",
       "label": "Proof Diagnostic Evidence Spine",
       "one_line": "The public proof-diagnostic evidence spine fixture validates Ring2 diagnostic result record refs, copied runtime artifact digests, provider/proof-body exclusions, stale-coupling visibility, and scope limits without becoming formal proof authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-proof-diagnostic-evidence-spine"
      },
      {
       "id": "paper_module.proof_derived_governed_mutation_authorization",
       "kind": "paper_module",
       "label": "Proof-Derived Governed Mutation Authorization",
       "one_line": "The public proof-derived governed-mutation fixture validates synthetic mutation proposals through proof cells, visible pre-execution policy verdicts, logged side effects, rollback result records, cold replay, negative cases, and copied source internal control bodies without granting live mutation authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-proof-derived-governed-mutation-authorization"
      },
      {
       "id": "paper_module.durable_agent_work_landing_replay",
       "kind": "paper_module",
       "label": "Durable Agent Work-Landing Replay",
       "one_line": "The public durable work-landing replay fixture validates recorded agent landing rows, copied source internal control source bodies, validation-before-commit ordering, HEAD-advance evidence, blocker capture, and work log completion without performing live Git work.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-durable-agent-work-landing-replay"
      },
      {
       "id": "paper_module.work_landing_control_spine",
       "kind": "paper_module",
       "label": "Work Landing Control Spine",
       "one_line": "The public work-landing control spine validates copied work-landing internal control source bodies without authorizing live Git, ledger, claim-launch, private-index, public sharing, or launch operations.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-work-landing-control-spine"
      },
      {
       "id": "paper_module.executable_doctrine_grammar",
       "kind": "paper_module",
       "label": "Executable Doctrine Grammar",
       "one_line": "The public executable-doctrine grammar fixture validates public standard rows, paper-module sections, negative cases, copied executable-grammar and standards/type-plane source-module bodies, and metadata-only result records without claiming doctrine completeness.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-executable-doctrine-grammar"
      },
      {
       "id": "paper_module.macro_projection_import_protocol",
       "kind": "paper_module",
       "label": "Source Projection Import Protocol",
       "one_line": "The public source-projection import protocol validates classified source-to-Microcosm projection cells, per-slice source-module manifests, digest relations, omission result records, intake statuses, and scope limits without claiming source or launch-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-macro-projection-import-protocol"
      },
      {
       "id": "paper_module.mission_transaction_work_spine",
       "kind": "paper_module",
       "label": "Mission Transaction Work Spine",
       "one_line": "The public mission-transaction fixture validates work-landing, claim, dependency, scoped-commit, checkpoint-lane, result record-drain, completion, and copied control source-module contracts without mutating live ledgers or git.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-mission-transaction-work-spine"
      },
      {
       "id": "paper_module.formal_math_readiness_gate",
       "kind": "paper_module",
       "label": "Formal Math Readiness Gate",
       "one_line": "The public formal-math readiness gate validates declared corpus, tactic, premise, routing, provider-budget, source-module manifest, copied PROVER probe body, and negative-case boundaries without claiming Lean/Lake or proof authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-math-readiness-gate"
      },
      {
       "id": "paper_module.formal_math_lean_proof_witness",
       "kind": "paper_module",
       "label": "Formal Math Lean Proof Witness",
       "one_line": "The public Lean proof witness runs local Lean/Lake over a tiny synthetic project, validates copied public source-module digests and negative cases, and emits redacted result records without claiming general proof authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-math-lean-proof-witness"
      },
      {
       "id": "paper_module.formal_math_verifier_trace_repair_loop",
       "kind": "paper_module",
       "label": "Formal Math Verifier Trace Repair Loop",
       "one_line": "The public verifier-trace repair fixture validates copied Ring2 failure taxonomy, graph-update, oracle-repair contrast rows, source-module digests, negative cases, and one deterministic toy rerun without claiming proof authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop"
      },
      {
       "id": "paper_module.formal_evidence_cell_anchor_resolver",
       "kind": "paper_module",
       "label": "Formal Evidence Cell Anchor Resolver",
       "one_line": "The formal evidence cell anchor resolver binds proof-language paper claims to public evidence cells, source anchors, machine-anchor metadata, copied source modules, and negative-case result records without claiming formal-result correctness.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver"
      },
      {
       "id": "paper_module.formal_math_premise_retrieval",
       "kind": "paper_module",
       "label": "Formal Math Premise Retrieval",
       "one_line": "Formal math premise retrieval validates copied public Lean/Std premise metadata, query scoring, context budgets, strategy gates, body-floor provenance, and leakage negative cases without claiming proof authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-math-premise-retrieval"
      },
      {
       "id": "paper_module.lean_std_premise_index",
       "kind": "paper_module",
       "label": "Lean/Std Premise Index",
       "one_line": "The Lean/Std premise index validates a copied public Lean/Std descriptor catalog plus Ring2 premise-retrieval source bodies without claiming proof, Mathlib, Lean/Lake, provider, launch, or theorem-correctness authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-lean-std-premise-index"
      },
      {
       "id": "paper_module.world_model_projection_drift_control_room",
       "kind": "paper_module",
       "label": "World-Model Projection Drift Control Room",
       "one_line": "The world-model projection drift control room validates public metadata-only projection-drift rows and copied source-module bodies without treating projections as source authority or repair authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
      },
      {
       "id": "paper_module.public_reveal_walkthrough",
       "kind": "paper_module",
       "label": "Public Reveal Walkthrough",
       "one_line": "The public reveal walkthrough validates a ten-minute cold-reader path through commands, routes, evidence refs, source-open body imports, negative cases, and scope limits without claiming launch-scope decision or private-system equivalence.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-public-reveal-walkthrough"
      },
      {
       "id": "paper_module.standards_meta_diagnostics",
       "kind": "paper_module",
       "label": "Standards Meta Diagnostics",
       "one_line": "Terminal public coverage diagnostic: verifies every accepted component stays mapped to a standard, runtime contract, result record, and scope limit.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-standards-meta-diagnostics"
      },
      {
       "id": "paper_module.finance_forecast_evaluation_spine",
       "kind": "paper_module",
       "label": "Finance Forecast Evaluation Spine",
       "one_line": "Forecast-evaluation component: Diebold-Mariano / Hansen-SPA / stationary-bootstrap stats over synthetic fixtures with typed refusal discipline; no market authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-finance-forecast-evaluation-spine"
      },
      {
       "id": "paper_module.engine_room_demo",
       "kind": "paper_module",
       "label": "Engine Room Demo",
       "one_line": "Composition component: verifies the 14 staged Engine Room jewel targets and their owned bundle surfaces through the public fixture chain; composition contract only.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-demo"
      },
      {
       "id": "paper_module.agent_memory_temporal_conflict_replay",
       "kind": "paper_module",
       "label": "Agent Memory Temporal-Conflict Replay",
       "one_line": "Synthetic replay fixture for an agent-memory honesty contract: models scoped-preference episodes and checks temporal-conflict handling; no live memory product.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-memory-temporal-conflict-replay"
      },
      {
       "id": "paper_module.agent_monitor_redteam_falsification_replay",
       "kind": "paper_module",
       "label": "Agent Monitor Redteam Falsification Replay",
       "one_line": "Synthetic regression drilldown for a monitor/redteam honesty contract; checks falsification handling, negative cases, non-public-state scan, scope limits.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay"
      },
      {
       "id": "paper_module.agent_sabotage_scheming_monitor_replay",
       "kind": "paper_module",
       "label": "Agent Sabotage Scheming-Monitor Replay",
       "one_line": "Drilldown regression contract for synthetic sabotage/scheming monitor claims: replays task episodes, action traces, monitor scores, counterfactual/cold replay.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay"
      },
      {
       "id": "paper_module.agent_sandbox_policy_escape_replay",
       "kind": "paper_module",
       "label": "Agent Sandbox Policy-Escape Replay",
       "one_line": "Validator-backed public refactor of source agent_execution_trace for sandbox/security: metadata-only trace spans, pre-exec policy verdicts, side-effect diffs",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-sandbox-policy-escape-replay"
      },
      {
       "id": "paper_module.belief_state_process_reward_replay",
       "kind": "paper_module",
       "label": "Belief-State Process Reward Replay",
       "one_line": "Public projection of a belief-state process-reward claim contract, backed by the agent-execution trace refactor and copied source bodies.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-belief-state-process-reward-replay"
      },
      {
       "id": "paper_module.sleeper_memory_poisoning_quarantine_replay",
       "kind": "paper_module",
       "label": "Sleeper Memory Poisoning Quarantine Replay",
       "one_line": "Synthetic replay fixture for a persistent-memory security contract: quarantine of poisoned memory, audit refs, rerun result records, negative cases, authority",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay"
      },
      {
       "id": "paper_module.indirect_prompt_injection_information_flow_policy_replay",
       "kind": "paper_module",
       "label": "Indirect Prompt-Injection Information-Flow Policy Replay",
       "one_line": "Validator-backed claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay"
      },
      {
       "id": "paper_module.mcp_tool_authority_replay",
       "kind": "paper_module",
       "label": "MCP Tool Authority Replay",
       "one_line": "Synthetic MCP-like replay fixture for a tool-authority claim contract: replay result records, negative cases, scope limits; no live MCP/provider/account secret",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-mcp-tool-authority-replay"
      },
      {
       "id": "paper_module.tactic_portfolio_availability",
       "kind": "paper_module",
       "label": "Tactic Portfolio Availability",
       "one_line": "Environment-scoped tactic availability rows gate downstream tactic routing without becoming proof, benchmark, or launch-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-tactic-portfolio-availability"
      },
      {
       "id": "paper_module.target_shape_tactic_routing",
       "kind": "paper_module",
       "label": "Target Shape Tactic Routing",
       "one_line": "Pre-execution tactic routing admits or rejects tactics from target shape and probe evidence without proving the target.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-target-shape-tactic-routing"
      },
      {
       "id": "paper_module.ring2_premise_precision_recall",
       "kind": "paper_module",
       "label": "Ring-2 Premise Precision Recall",
       "one_line": "After-the-fact premise retrieval metrics separate retrieval misses from proof failures without becoming theorem authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-ring2-premise-precision-recall"
      },
      {
       "id": "paper_module.mathematical_strategy_atlas",
       "kind": "paper_module",
       "label": "Mathematical Strategy Atlas",
       "one_line": "Pre-oracle strategy hypotheses make the first proof-search move inspectable without claiming proof or provider authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-mathematical-strategy-atlas"
      },
      {
       "id": "paper_module.verifier_lab_execution_spine",
       "kind": "paper_module",
       "label": "Verifier Lab Execution Spine",
       "one_line": "Bounded public verifier execution result records witness command execution without upgrading output into theorem authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-verifier-lab-execution-spine"
      },
      {
       "id": "paper_module.bounded_autonomy_campaign_packet",
       "kind": "paper_module",
       "label": "Bounded Autonomy Campaign Packet",
       "one_line": "Bounded autonomy campaign packets propose guarded agent work without authorizing source-file changes or unsupervised repair.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-bounded-autonomy-campaign-packet"
      },
      {
       "id": "paper_module.computer_use_action_trace_replay",
       "kind": "paper_module",
       "label": "Computer-Use Action Trace Replay",
       "one_line": "Validator-backed public replay for synthetic computer-use action traces under the route-observability runtime.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-computer-use-action-trace-replay"
      },
      {
       "id": "paper_module.concurrency_mission_control",
       "kind": "paper_module",
       "label": "Concurrency Mission Control",
       "one_line": "Concurrency Mission Control validates metadata-only coordination result records without becoming a live scheduler or production concurrency proof.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-concurrency-mission-control"
      },
      {
       "id": "paper_module.doctrine_fact_claim_audit",
       "kind": "paper_module",
       "label": "Doctrine Fact Claim Audit",
       "one_line": "Doctrine Fact Claim Audit rejects wrong fact counts and dead anchors without claiming comprehension or route completeness.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-doctrine-fact-claim-audit"
      },
      {
       "id": "paper_module.self_ignorance_coverage_ledger",
       "kind": "paper_module",
       "label": "Self-Ignorance Coverage Ledger",
       "one_line": "Self-Ignorance Coverage Ledger counts known coverage debt while refusing unknown-unknown or absence-proof claims.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-self-ignorance-coverage-ledger"
      },
      {
       "id": "paper_module.tool_server_pressure_inventory",
       "kind": "paper_module",
       "label": "Tool Server Pressure Inventory",
       "one_line": "Tool Server Pressure Inventory validates public pressure-inventory fixtures without reading or mutating live host process state.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-tool-server-pressure-inventory"
      },
      {
       "id": "paper_module.mechanistic_interpretability_circuit_attribution_replay",
       "kind": "paper_module",
       "label": "Mechanistic Interpretability Circuit Attribution Replay",
       "one_line": "Mechanistic interpretability replay validates public circuit-attribution result record contracts without live model access or private activation export.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay"
      },
      {
       "id": "paper_module.spatial_world_model_counterfactual_simulation_replay",
       "kind": "paper_module",
       "label": "Spatial World Model Counterfactual Simulation Replay",
       "one_line": "Spatial world-model replay validates synthetic counterfactual metadata without robot operation, simulator product claims, or real-world accuracy claims.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay"
      },
      {
       "id": "paper_module.prediction_oracle_reconciliation",
       "kind": "paper_module",
       "label": "Prediction Oracle Reconciliation",
       "one_line": "Prediction Oracle Reconciliation exercises synthetic forecast reconciliation gates without forecasting, trading, provider, or live-market authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-prediction-oracle-reconciliation"
      },
      {
       "id": "paper_module.provider_context_recipe_budget",
       "kind": "paper_module",
       "label": "Provider Context Recipe Budget",
       "one_line": "Provider Context Recipe Budget validates context-budget projection mechanics without authorizing external model access or truth-side material.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-provider-context-recipe-budget"
      },
      {
       "id": "paper_module.undeclared_library_prior_classifier",
       "kind": "paper_module",
       "label": "Undeclared Library Prior Classifier",
       "one_line": "Undeclared Library Prior Classifier scores extracted Lean symbol observations against an allowed premise set without running Lean or treating libraries as implicit allowlists.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-undeclared-library-prior-classifier"
      },
      {
       "id": "paper_module.voice_to_doctrine_self_improvement_loop",
       "kind": "paper_module",
       "label": "Voice to Doctrine Self-Improvement Loop",
       "one_line": "Voice to Doctrine Self-Improvement Loop validates lesson propagation without exporting source notes or granting doctrine mutation authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop"
      },
      {
       "id": "paper_module.routing_anti_patterns_registry",
       "kind": "paper_module",
       "label": "Routing Anti-Patterns Registry",
       "one_line": "Routing Anti-Patterns Registry validates public anti-pattern registry rows without becoming route source authority or mutating routes.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-routing-anti-patterns-registry"
      },
      {
       "id": "paper_module.batch8_audio_level_rms_port",
       "kind": "paper_module",
       "label": "Set 8 Audio Level RMS Port",
       "one_line": "Set 8 Audio Level RMS Port validates deterministic RMS math parity over public synthetic samples without audio capture, microphone permission, or UI readiness authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-audio-level-rms-port"
      },
      {
       "id": "paper_module.batch8_compliance_pipeline_capsule",
       "kind": "paper_module",
       "label": "Set 8 Compliance Pipeline Bundle",
       "one_line": "Set 8 Compliance Pipeline Bundle validates copied compliance scanner and observe-pipeline mechanics without refreshing the full ledger or dispatching bridge/provider work.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-compliance-pipeline-capsule"
      },
      {
       "id": "paper_module.batch8_policy_engines_capsule",
       "kind": "paper_module",
       "label": "Set 8 Policy Engines Bundle",
       "one_line": "Set 8 Policy Engines Bundle validates three deterministic public policy-engine exercises without running campaigns, providers, markets, or repository mutations.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-policy-engines-capsule"
      },
      {
       "id": "paper_module.batch8_structural_theses_capsule",
       "kind": "paper_module",
       "label": "Set 8 Structural Theses Bundle",
       "one_line": "Set 8 Structural Theses Bundle validates public synthetic thesis-family replay without financial decisions, live-market validation, external model access, or portfolio authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-structural-theses-capsule"
      },
      {
       "id": "paper_module.batch8_tools_tail_primitives_capsule",
       "kind": "paper_module",
       "label": "Set 8 Tools-Tail Primitives Bundle",
       "one_line": "Set 8 Tools-Tail Primitives Bundle validates four public tools-tail primitive exercises without Oracle truth, external model access, live bridge work, or repository mutation authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule"
      },
      {
       "id": "paper_module.batch8_validator_checker_capsule",
       "kind": "paper_module",
       "label": "Set 8 Validator Checker Bundle",
       "one_line": "Set 8 Validator Checker Bundle validates selected public checker groups without becoming launch-scope decision or a complete validator-suite proof.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-validator-checker-capsule"
      },
      {
       "id": "paper_module.batch12_market_dashboard_read_model_capsule",
       "kind": "paper_module",
       "label": "Set 12 Market Dashboard Read-Model Bundle",
       "one_line": "Set 12 Market Dashboard Read-Model Bundle validates copied read-model helpers over public fixtures without market-level conclusions, external model access, or launch-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule"
      },
      {
       "id": "paper_module.batch12_prediction_market_board_capsule",
       "kind": "paper_module",
       "label": "Set 12 Prediction Market Board Bundle",
       "one_line": "Set 12 Prediction Market Board Bundle validates copied prediction-board and quant-mart diagnostics over public fixtures without market-level conclusions or provider authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch12-prediction-market-board-capsule"
      },
      {
       "id": "paper_module.batch12_release_claim_language_gate",
       "kind": "paper_module",
       "label": "Set 12 launch claim-Language Gate",
       "one_line": "Set 12 launch claim-Language Gate checks public claim language against result record-backed scope limits without approving launch or public sharing.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch12-release-claim-language-gate"
      },
      {
       "id": "paper_module.batch10_cold_eval_honesty_capsule",
       "kind": "paper_module",
       "label": "Set 10 Cold Eval Honesty Bundle",
       "one_line": "Set 10 Cold Eval Honesty Bundle runs cold-eval over public fixtures without benchmark, navigation-truth, or launch-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule"
      },
      {
       "id": "paper_module.batch10_live_source_drift_capsule",
       "kind": "paper_module",
       "label": "Set 10 Live Source Drift Bundle",
       "one_line": "Set 10 Live Source Drift Bundle validates copied current internal control source bodies without route, ledger-mutation, or launch-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch10-live-source-drift-capsule"
      },
      {
       "id": "paper_module.batch7_macro_engines_capsule",
       "kind": "paper_module",
       "label": "Set 7 Source Engines Bundle",
       "one_line": "Set 7 Source Engines Bundle imports source engine bodies and exercises trace, graph, scheduling, source-index, patch, numeric, rank, and regression-selection invariants.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch7-macro-engines-capsule"
      },
      {
       "id": "paper_module.batch9_macro_engines_capsule",
       "kind": "paper_module",
       "label": "Set 9 Source Engines Bundle",
       "one_line": "Set 9 Source Engines Bundle imports backend and governance source-engine bodies and exercises provenance, approval, AST, finance-news, mission graph, dependency, config, edge, WorkAtlas, host-pressure, doctrine-enrichment, worker-budget, and milestone-quality invariants.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch9-macro-engines-capsule"
      },
      {
       "id": "paper_module.pattern_assimilation",
       "kind": "paper_module",
       "label": "Pattern Assimilation",
       "one_line": "Pattern Assimilation validates public completion-learning metadata, owner-routed refinement result records, typed nothing-to-refine decisions, and copied body-import manifests without promoting local lessons into global doctrine.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-pattern-assimilation"
      },
      {
       "id": "paper_module.batch10_governance_compilers_capsule",
       "kind": "paper_module",
       "label": "Set 10 Governance And Compilers Bundle",
       "one_line": "Set 10 Governance And Compilers Bundle imports governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source bodies as public source-open evidence without granting live ledger, public sharing, launch, market, or source-file changes.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch10-governance-compilers-capsule"
      },
      {
       "id": "paper_module.batch11_saturation_engines_capsule",
       "kind": "paper_module",
       "label": "Set 11 Saturation Engines Bundle",
       "one_line": "Set 11 Saturation Engines Bundle imports saturation, diagnostic, wayfinding, market-board, secret-scan, and demo-take source bodies as public source-open evidence without granting live runtime, launch, market, or navigation authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch11-saturation-engines-capsule"
      },
      {
       "id": "paper_module.batch4_proof_authority_runtime",
       "kind": "paper_module",
       "label": "Set 4 Proof, Authority, and Runtime Bundle",
       "one_line": "Set 4 Proof, Authority, and Runtime Bundle imports proof-search, reasoning-authority, completion, Codex runtime, bitemporal, taskpolicy, and context-yield source bodies as public source-open evidence without claiming proof success, benchmark claims, live runtime control, or launch-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch4-proof-authority-runtime"
      },
      {
       "id": "paper_module.batch6_unsurfaced_primitives_capsule",
       "kind": "paper_module",
       "label": "Set 6 Unsurfaced Primitives Bundle",
       "one_line": "Set 6 Unsurfaced Primitives Bundle imports provenance, operator-handoff, market, finance, provider-recovery, and demo-take source primitives as public source-open evidence without granting live operator memory, market, provider, media, public sharing, or launch-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule"
      },
      {
       "id": "paper_module.engine_room_public_projection_leak_gate",
       "kind": "paper_module",
       "label": "Engine Room Public Projection Leak Gate",
       "one_line": "The Engine Room public projection leak gate validates rendered public projection roots for account secret-shaped strings, non-public paths shapes, symlink escapes, policy-exception handling, and optional gitleaks status while keeping findings hash-only.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-public-projection-leak-gate"
      },
      {
       "id": "paper_module.batch5_authority_systems_capsule",
       "kind": "paper_module",
       "label": "Set 5 Authority and Systems Bundle",
       "one_line": "Set 5 Authority and Systems Bundle imports post-execution authority, replay, proof-repair, process, generated-state, trace, blast-radius, and doctrine-graph source bodies as public source-open evidence without claiming live authority or launch-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch5-authority-systems-capsule"
      },
      {
       "id": "paper_module.batch7_oracle_sibling_capsule",
       "kind": "paper_module",
       "label": "Set 7 Oracle Sibling Bundle",
       "one_line": "Set 7 Oracle Sibling Bundle imports Oracle sibling source bodies and exercises deterministic subject-index, snapshot, truth-diff, quartet-plan, and original pytest witness boundaries.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch7-oracle-sibling-capsule"
      },
      {
       "id": "paper_module.batch7_demo_take_console_capsule",
       "kind": "paper_module",
       "label": "Set 7 Demo Take Console Bundle",
       "one_line": "Set 7 Demo Take Console Bundle imports Swift capture-console source bodies and exercises SwiftPM build, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, and transcribe-payload boundaries.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch7-demo-take-console-capsule"
      },
      {
       "id": "paper_module.engine_room_generated_projection_drift_gate",
       "kind": "paper_module",
       "label": "Engine Room Generated Projection Drift Gate",
       "one_line": "Public generated-projection drift fixture: owner-routed checks fingerprint declared sources and artifacts, reuse clean result records only under matching hashes, and fail planted-byte or missing-artifact cases.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-generated-projection-drift-gate"
      },
      {
       "id": "paper_module.engine_room_command_run_singleflight",
       "kind": "paper_module",
       "label": "Engine Room Command-Run Singleflight",
       "one_line": "Public command-run singleflight fixture: content-addressed subprocess keys collapse duplicate active runs and replay captured result records without claiming scheduler or daemon authority.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-command-run-singleflight"
      },
      {
       "id": "paper_module.engine_room_metabolism_runtime",
       "kind": "paper_module",
       "label": "Engine Room Metabolism Runtime",
       "one_line": "Staged Engine Room component: synthetic SQLite metabolism runtime exercise for queues, leases, blackboard projection, and reconciliation.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-metabolism-runtime"
      },
      {
       "id": "paper_module.engine_room_bridge_campaign_dag",
       "kind": "paper_module",
       "label": "Engine Room Bridge Campaign DAG",
       "one_line": "Staged Engine Room component: pre-dispatch bridge-campaign DAG validator for typed nodes, acyclicity, synthesis reachability, and provider fan-out ceilings.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-bridge-campaign-dag"
      },
      {
       "id": "paper_module.engine_room_annex_knowledge_router",
       "kind": "paper_module",
       "label": "Engine Room Reference Knowledge Router",
       "one_line": "Public Engine Room component: sanitized reference router for structured fields, note relevance, domain filters, and no-match boundaries.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-annex-knowledge-router"
      },
      {
       "id": "paper_module.engine_room_derived_fact_provider_engine",
       "kind": "paper_module",
       "label": "Engine Room Derived Fact Provider Engine",
       "one_line": "Public Engine Room component: registry-backed derived fact provider over JSON pointers, glob counts, git-backed callables, and provider error rows.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-derived-fact-provider-engine"
      },
      {
       "id": "paper_module.engine_room_egress_self_compliance_gate",
       "kind": "paper_module",
       "label": "Engine Room Egress Self-Compliance Gate",
       "one_line": "Public Engine Room component: phrase-membership egress gate for permission ceremony, self-error capture binding, and command-displacement evidence.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-egress-self-compliance-gate"
      },
      {
       "id": "paper_module.engine_room_lean_proof_search_lab",
       "kind": "paper_module",
       "label": "Engine Room Lean Proof Search Lab",
       "one_line": "Public Engine Room component: bounded Lean proof-search lab for tiny fixture statements, oracle-firewall negatives, ablation, and axiom-cleanliness checks.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-lean-proof-search-lab"
      },
      {
       "id": "paper_module.engine_room_navigation_fitness_benchmark",
       "kind": "paper_module",
       "label": "Engine Room Navigation Fitness Benchmark",
       "one_line": "Public Engine Room component: route-packet benchmark evaluator for stable-id recall, precision, forbidden first routes, latency, and debt candidates.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark"
      },
      {
       "id": "paper_module.cold_clone_probe",
       "kind": "paper_module",
       "label": "Cold Clone Probe",
       "one_line": "The cold-clone probe validates the first public source-root bootstrap path: src import, secret-exclusion scan, first-wave pattern-binding fixture replay, public result record refs, and ignored local result record emission.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-cold-clone-probe"
      },
      {
       "id": "paper_module.first_screen_composition_root",
       "kind": "paper_module",
       "label": "First-Screen Composition Root",
       "one_line": "The first-screen composition root validates the public one-screen entry card, reader branches, omission result records, evidence accounting frame, text projection, README order, and scope limit without becoming launch or hosted-publishing-scope decision.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-first-screen-composition-root"
      },
      {
       "id": "paper_module.batch7_secondary_runtime_capsule",
       "kind": "paper_module",
       "label": "Set 7 Secondary Runtime Bundle",
       "one_line": "Set 7 Secondary Runtime Bundle imports runtime, graph, cartography, stockgrid, and Polymarket bodies and exercises their fixture-bound boundaries.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch7-secondary-runtime-capsule"
      },
      {
       "id": "paper_module.microcosm_axiom_substrate",
       "kind": "paper_module",
       "label": "Microcosm Axiom System",
       "one_line": "The public Microcosm axiom system routes readers from axiom doctrine to the read-only support-cover evaluator, routing registry, standard, tests, and result records without claiming proof, launch, or source-file changes.",
       "group_id": "paper_module",
       "group_label": "Paper modules",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-microcosm-axiom-substrate"
      }
     ]
    },
    {
     "id": "paper_module_detail",
     "title": "Paper module detail projection",
     "description": "An alternate richer view of paper modules with component and rule-feed links.",
     "projection_role": "alternate_projection",
     "packaging": "slim one-liner rows (card_href values are docs/-relative); full roster rows live in content-graph.json#/rosters",
     "row_count": 93,
     "rows": [
      {
       "id": "paper_module.verifier_lab_kernel",
       "kind": "paper_module",
       "label": "Verifier Lab Kernel",
       "one_line": "The public verifier-lab composition root folds bounded formal-math component result records into one leak-proof result record while separating verifier-backed, oracle-compared, provider-suggested, retrieval-miss, CP2, Evolve, and contract-rejected rows.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-verifier-lab-kernel"
      },
      {
       "id": "paper_module.navigation_hologram_route_plane",
       "kind": "paper_module",
       "label": "Navigation Hologram Route Plane",
       "one_line": "The public navigation route-plane fixture validates bounded route projections, source-coupling gates, entry floors, affordance passports, and copied navigation source-module digests without treating browse rows as authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-navigation-hologram-route-plane"
      },
      {
       "id": "paper_module.agent_route_observability_runtime",
       "kind": "paper_module",
       "label": "Agent Route Observability Runtime",
       "one_line": "The public route-observability fixture validates synthetic route feedback, route leases, hook-shadow advisory rows, anti-pattern debt, copied source trace manifests, and metadata-only result records without claiming live session authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-route-observability-runtime"
      },
      {
       "id": "paper_module.agent_benchmark_integrity_anti_gaming_replay",
       "kind": "paper_module",
       "label": "Agent Benchmark Integrity Anti-Gaming Replay",
       "one_line": "The agent benchmark integrity anti-gaming replay validates copied public source pattern provenance bodies and metadata-only benchmark replay rows before any score-like language is allowed.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay"
      },
      {
       "id": "paper_module.research_replication_rubric_artifact_replay",
       "kind": "paper_module",
       "label": "Research Replication Rubric Artifact Replay",
       "one_line": "The research replication rubric-artifact replay validates source-backed public replication bundles before any paper-replication language is allowed.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-research-replication-rubric-artifact-replay"
      },
      {
       "id": "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
       "kind": "paper_module",
       "label": "Agentic Vulnerability Discovery Patch-Proof Replay",
       "one_line": "The agentic vulnerability discovery patch-proof replay validates metadata-only synthetic vulnerability evidence chains before any found-and-fixed security language is allowed.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay"
      },
      {
       "id": "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
       "kind": "paper_module",
       "label": "Materials Chemistry Closed-Loop Lab-Safety Replay",
       "one_line": "The materials chemistry lab-safety replay validates metadata-only simulator-only closed-loop rows before any materials-lab or discovery language is allowed.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay"
      },
      {
       "id": "paper_module.certificate_kernel_execution_lab",
       "kind": "paper_module",
       "label": "Certificate Kernel Execution Lab",
       "one_line": "The certificate kernel execution lab validates bounded public Lean/Lake certificate-kernel rows before any proof-adjacent claim is allowed.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-certificate-kernel-execution-lab"
      },
      {
       "id": "paper_module.corpus_readiness_mathlib_absence_gate",
       "kind": "paper_module",
       "label": "Corpus Readiness Mathlib Absence Gate",
       "one_line": "The corpus readiness Mathlib absence gate validates copied corpus/toolchain readiness bodies before any Mathlib-dependent proof or retrieval claim is allowed.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate"
      },
      {
       "id": "paper_module.pattern_binding_contract",
       "kind": "paper_module",
       "label": "Pattern Binding Contract",
       "one_line": "The public pattern-binding component validates pattern rows, source bundles, authority handles, exported system bundles, and route-readiness selector overlays while keeping mined rows component-first and fixture-bound.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-pattern-binding-contract"
      },
      {
       "id": "paper_module.bridge_phase_continuity_runtime",
       "kind": "paper_module",
       "label": "Bridge Phase Continuity Runtime",
       "one_line": "The public bridge-continuity fixture validates disk-first continuation packets, heartbeat/resource-pressure boundaries, resume-once semantics, worker-skip dedupe, tracked result record-write gates, and non-public-state exclusion without live bridge transport.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-bridge-phase-continuity-runtime"
      },
      {
       "id": "paper_module.cognitive_operator_registry",
       "kind": "paper_module",
       "label": "Cognitive Operator Registry",
       "one_line": "The public cognitive-operator registry fixture validates operator-shape rows, active-operator dogfood result records, anti-sprawl decisions, copied source registry/standard/tool bodies, and scope limits without becoming operator source authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-cognitive-operator-registry"
      },
      {
       "id": "paper_module.agent_closeout_faithfulness_audit",
       "kind": "paper_module",
       "label": "Agent Completion Faithfulness Audit",
       "one_line": "The public completion-faithfulness fixture checks commit, ledger-cap, and pytest-span claims with real git/pytest subprocess witnesses while refusing unchecked pass overclaims.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-closeout-faithfulness-audit"
      },
      {
       "id": "paper_module.cold_reader_route_map",
       "kind": "paper_module",
       "label": "Cold-Reader Route Map",
       "one_line": "The public cold-reader route-map fixture validates first-run command order, docs refs, result record refs, scope limits, copied cold-entry source-module digests, and non-public-state exclusion without becoming route registry control.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-cold-reader-route-map"
      },
      {
       "id": "paper_module.proof_diagnostic_evidence_spine",
       "kind": "paper_module",
       "label": "Proof Diagnostic Evidence Spine",
       "one_line": "The public proof-diagnostic evidence spine fixture validates Ring2 diagnostic result record refs, copied runtime artifact digests, provider/proof-body exclusions, stale-coupling visibility, and scope limits without becoming formal proof authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-proof-diagnostic-evidence-spine"
      },
      {
       "id": "paper_module.proof_derived_governed_mutation_authorization",
       "kind": "paper_module",
       "label": "Proof-Derived Governed Mutation Authorization",
       "one_line": "The public proof-derived governed-mutation fixture validates synthetic mutation proposals through proof cells, visible pre-execution policy verdicts, logged side effects, rollback result records, cold replay, negative cases, and copied source internal control bodies without granting live mutation authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-proof-derived-governed-mutation-authorization"
      },
      {
       "id": "paper_module.durable_agent_work_landing_replay",
       "kind": "paper_module",
       "label": "Durable Agent Work-Landing Replay",
       "one_line": "The public durable work-landing replay fixture validates recorded agent landing rows, copied source internal control source bodies, validation-before-commit ordering, HEAD-advance evidence, blocker capture, and work log completion without performing live Git work.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-durable-agent-work-landing-replay"
      },
      {
       "id": "paper_module.work_landing_control_spine",
       "kind": "paper_module",
       "label": "Work Landing Control Spine",
       "one_line": "The public work-landing control spine validates copied work-landing internal control source bodies without authorizing live Git, ledger, claim-launch, private-index, public sharing, or launch operations.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-work-landing-control-spine"
      },
      {
       "id": "paper_module.executable_doctrine_grammar",
       "kind": "paper_module",
       "label": "Executable Doctrine Grammar",
       "one_line": "The public executable-doctrine grammar fixture validates public standard rows, paper-module sections, negative cases, copied executable-grammar and standards/type-plane source-module bodies, and metadata-only result records without claiming doctrine completeness.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-executable-doctrine-grammar"
      },
      {
       "id": "paper_module.macro_projection_import_protocol",
       "kind": "paper_module",
       "label": "Source Projection Import Protocol",
       "one_line": "The public source-projection import protocol validates classified source-to-Microcosm projection cells, per-slice source-module manifests, digest relations, omission result records, intake statuses, and scope limits without claiming source or launch-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-macro-projection-import-protocol"
      },
      {
       "id": "paper_module.mission_transaction_work_spine",
       "kind": "paper_module",
       "label": "Mission Transaction Work Spine",
       "one_line": "The public mission-transaction fixture validates work-landing, claim, dependency, scoped-commit, checkpoint-lane, result record-drain, completion, and copied control source-module contracts without mutating live ledgers or git.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-mission-transaction-work-spine"
      },
      {
       "id": "paper_module.formal_math_readiness_gate",
       "kind": "paper_module",
       "label": "Formal Math Readiness Gate",
       "one_line": "The public formal-math readiness gate validates declared corpus, tactic, premise, routing, provider-budget, source-module manifest, copied PROVER probe body, and negative-case boundaries without claiming Lean/Lake or proof authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-math-readiness-gate"
      },
      {
       "id": "paper_module.formal_math_lean_proof_witness",
       "kind": "paper_module",
       "label": "Formal Math Lean Proof Witness",
       "one_line": "The public Lean proof witness runs local Lean/Lake over a tiny synthetic project, validates copied public source-module digests and negative cases, and emits redacted result records without claiming general proof authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-math-lean-proof-witness"
      },
      {
       "id": "paper_module.formal_math_verifier_trace_repair_loop",
       "kind": "paper_module",
       "label": "Formal Math Verifier Trace Repair Loop",
       "one_line": "The public verifier-trace repair fixture validates copied Ring2 failure taxonomy, graph-update, oracle-repair contrast rows, source-module digests, negative cases, and one deterministic toy rerun without claiming proof authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop"
      },
      {
       "id": "paper_module.formal_evidence_cell_anchor_resolver",
       "kind": "paper_module",
       "label": "Formal Evidence Cell Anchor Resolver",
       "one_line": "The formal evidence cell anchor resolver binds proof-language paper claims to public evidence cells, source anchors, machine-anchor metadata, copied source modules, and negative-case result records without claiming formal-result correctness.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver"
      },
      {
       "id": "paper_module.formal_math_premise_retrieval",
       "kind": "paper_module",
       "label": "Formal Math Premise Retrieval",
       "one_line": "Formal math premise retrieval validates copied public Lean/Std premise metadata, query scoring, context budgets, strategy gates, body-floor provenance, and leakage negative cases without claiming proof authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-formal-math-premise-retrieval"
      },
      {
       "id": "paper_module.lean_std_premise_index",
       "kind": "paper_module",
       "label": "Lean/Std Premise Index",
       "one_line": "The Lean/Std premise index validates a copied public Lean/Std descriptor catalog plus Ring2 premise-retrieval source bodies without claiming proof, Mathlib, Lean/Lake, provider, launch, or theorem-correctness authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-lean-std-premise-index"
      },
      {
       "id": "paper_module.world_model_projection_drift_control_room",
       "kind": "paper_module",
       "label": "World-Model Projection Drift Control Room",
       "one_line": "The world-model projection drift control room validates public metadata-only projection-drift rows and copied source-module bodies without treating projections as source authority or repair authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-world-model-projection-drift-control-room"
      },
      {
       "id": "paper_module.public_reveal_walkthrough",
       "kind": "paper_module",
       "label": "Public Reveal Walkthrough",
       "one_line": "The public reveal walkthrough validates a ten-minute cold-reader path through commands, routes, evidence refs, source-open body imports, negative cases, and scope limits without claiming launch-scope decision or private-system equivalence.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-public-reveal-walkthrough"
      },
      {
       "id": "paper_module.standards_meta_diagnostics",
       "kind": "paper_module",
       "label": "Standards Meta Diagnostics",
       "one_line": "Terminal public coverage diagnostic: verifies every accepted component stays mapped to a standard, runtime contract, result record, and scope limit.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-standards-meta-diagnostics"
      },
      {
       "id": "paper_module.finance_forecast_evaluation_spine",
       "kind": "paper_module",
       "label": "Finance Forecast Evaluation Spine",
       "one_line": "Forecast-evaluation component: Diebold-Mariano / Hansen-SPA / stationary-bootstrap stats over synthetic fixtures with typed refusal discipline; no market authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-finance-forecast-evaluation-spine"
      },
      {
       "id": "paper_module.engine_room_demo",
       "kind": "paper_module",
       "label": "Engine Room Demo",
       "one_line": "Composition component: verifies the 14 staged Engine Room jewel targets and their owned bundle surfaces through the public fixture chain; composition contract only.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-demo"
      },
      {
       "id": "paper_module.agent_memory_temporal_conflict_replay",
       "kind": "paper_module",
       "label": "Agent Memory Temporal-Conflict Replay",
       "one_line": "Synthetic replay fixture for an agent-memory honesty contract: models scoped-preference episodes and checks temporal-conflict handling; no live memory product.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-memory-temporal-conflict-replay"
      },
      {
       "id": "paper_module.agent_monitor_redteam_falsification_replay",
       "kind": "paper_module",
       "label": "Agent Monitor Redteam Falsification Replay",
       "one_line": "Synthetic regression drilldown for a monitor/redteam honesty contract; checks falsification handling, negative cases, non-public-state scan, scope limits.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay"
      },
      {
       "id": "paper_module.agent_sabotage_scheming_monitor_replay",
       "kind": "paper_module",
       "label": "Agent Sabotage Scheming-Monitor Replay",
       "one_line": "Drilldown regression contract for synthetic sabotage/scheming monitor claims: replays task episodes, action traces, monitor scores, counterfactual/cold replay.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay"
      },
      {
       "id": "paper_module.agent_sandbox_policy_escape_replay",
       "kind": "paper_module",
       "label": "Agent Sandbox Policy-Escape Replay",
       "one_line": "Validator-backed public refactor of source agent_execution_trace for sandbox/security: metadata-only trace spans, pre-exec policy verdicts, side-effect diffs",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-agent-sandbox-policy-escape-replay"
      },
      {
       "id": "paper_module.belief_state_process_reward_replay",
       "kind": "paper_module",
       "label": "Belief-State Process Reward Replay",
       "one_line": "Public projection of a belief-state process-reward claim contract, backed by the agent-execution trace refactor and copied source bodies.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-belief-state-process-reward-replay"
      },
      {
       "id": "paper_module.sleeper_memory_poisoning_quarantine_replay",
       "kind": "paper_module",
       "label": "Sleeper Memory Poisoning Quarantine Replay",
       "one_line": "Synthetic replay fixture for a persistent-memory security contract: quarantine of poisoned memory, audit refs, rerun result records, negative cases, authority",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay"
      },
      {
       "id": "paper_module.indirect_prompt_injection_information_flow_policy_replay",
       "kind": "paper_module",
       "label": "Indirect Prompt-Injection Information-Flow Policy Replay",
       "one_line": "Validator-backed claim: a source-faithful trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay"
      },
      {
       "id": "paper_module.mcp_tool_authority_replay",
       "kind": "paper_module",
       "label": "MCP Tool Authority Replay",
       "one_line": "Synthetic MCP-like replay fixture for a tool-authority claim contract: replay result records, negative cases, scope limits; no live MCP/provider/account secret",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-mcp-tool-authority-replay"
      },
      {
       "id": "paper_module.tactic_portfolio_availability",
       "kind": "paper_module",
       "label": "Tactic Portfolio Availability",
       "one_line": "Environment-scoped tactic availability rows gate downstream tactic routing without becoming proof, benchmark, or launch-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-tactic-portfolio-availability"
      },
      {
       "id": "paper_module.target_shape_tactic_routing",
       "kind": "paper_module",
       "label": "Target Shape Tactic Routing",
       "one_line": "Pre-execution tactic routing admits or rejects tactics from target shape and probe evidence without proving the target.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-target-shape-tactic-routing"
      },
      {
       "id": "paper_module.ring2_premise_precision_recall",
       "kind": "paper_module",
       "label": "Ring-2 Premise Precision Recall",
       "one_line": "After-the-fact premise retrieval metrics separate retrieval misses from proof failures without becoming theorem authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-ring2-premise-precision-recall"
      },
      {
       "id": "paper_module.mathematical_strategy_atlas",
       "kind": "paper_module",
       "label": "Mathematical Strategy Atlas",
       "one_line": "Pre-oracle strategy hypotheses make the first proof-search move inspectable without claiming proof or provider authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-mathematical-strategy-atlas"
      },
      {
       "id": "paper_module.verifier_lab_execution_spine",
       "kind": "paper_module",
       "label": "Verifier Lab Execution Spine",
       "one_line": "Bounded public verifier execution result records witness command execution without upgrading output into theorem authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-verifier-lab-execution-spine"
      },
      {
       "id": "paper_module.bounded_autonomy_campaign_packet",
       "kind": "paper_module",
       "label": "Bounded Autonomy Campaign Packet",
       "one_line": "Bounded autonomy campaign packets propose guarded agent work without authorizing source-file changes or unsupervised repair.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-bounded-autonomy-campaign-packet"
      },
      {
       "id": "paper_module.computer_use_action_trace_replay",
       "kind": "paper_module",
       "label": "Computer-Use Action Trace Replay",
       "one_line": "Validator-backed public replay for synthetic computer-use action traces under the route-observability runtime.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-computer-use-action-trace-replay"
      },
      {
       "id": "paper_module.concurrency_mission_control",
       "kind": "paper_module",
       "label": "Concurrency Mission Control",
       "one_line": "Concurrency Mission Control validates metadata-only coordination result records without becoming a live scheduler or production concurrency proof.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-concurrency-mission-control"
      },
      {
       "id": "paper_module.doctrine_fact_claim_audit",
       "kind": "paper_module",
       "label": "Doctrine Fact Claim Audit",
       "one_line": "Doctrine Fact Claim Audit rejects wrong fact counts and dead anchors without claiming comprehension or route completeness.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-doctrine-fact-claim-audit"
      },
      {
       "id": "paper_module.self_ignorance_coverage_ledger",
       "kind": "paper_module",
       "label": "Self-Ignorance Coverage Ledger",
       "one_line": "Self-Ignorance Coverage Ledger counts known coverage debt while refusing unknown-unknown or absence-proof claims.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-self-ignorance-coverage-ledger"
      },
      {
       "id": "paper_module.tool_server_pressure_inventory",
       "kind": "paper_module",
       "label": "Tool Server Pressure Inventory",
       "one_line": "Tool Server Pressure Inventory validates public pressure-inventory fixtures without reading or mutating live host process state.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-tool-server-pressure-inventory"
      },
      {
       "id": "paper_module.mechanistic_interpretability_circuit_attribution_replay",
       "kind": "paper_module",
       "label": "Mechanistic Interpretability Circuit Attribution Replay",
       "one_line": "Mechanistic interpretability replay validates public circuit-attribution result record contracts without live model access or private activation export.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay"
      },
      {
       "id": "paper_module.spatial_world_model_counterfactual_simulation_replay",
       "kind": "paper_module",
       "label": "Spatial World Model Counterfactual Simulation Replay",
       "one_line": "Spatial world-model replay validates synthetic counterfactual metadata without robot operation, simulator product claims, or real-world accuracy claims.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay"
      },
      {
       "id": "paper_module.prediction_oracle_reconciliation",
       "kind": "paper_module",
       "label": "Prediction Oracle Reconciliation",
       "one_line": "Prediction Oracle Reconciliation exercises synthetic forecast reconciliation gates without forecasting, trading, provider, or live-market authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-prediction-oracle-reconciliation"
      },
      {
       "id": "paper_module.provider_context_recipe_budget",
       "kind": "paper_module",
       "label": "Provider Context Recipe Budget",
       "one_line": "Provider Context Recipe Budget validates context-budget projection mechanics without authorizing external model access or truth-side material.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-provider-context-recipe-budget"
      },
      {
       "id": "paper_module.undeclared_library_prior_classifier",
       "kind": "paper_module",
       "label": "Undeclared Library Prior Classifier",
       "one_line": "Undeclared Library Prior Classifier scores extracted Lean symbol observations against an allowed premise set without running Lean or treating libraries as implicit allowlists.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-undeclared-library-prior-classifier"
      },
      {
       "id": "paper_module.voice_to_doctrine_self_improvement_loop",
       "kind": "paper_module",
       "label": "Voice to Doctrine Self-Improvement Loop",
       "one_line": "Voice to Doctrine Self-Improvement Loop validates lesson propagation without exporting source notes or granting doctrine mutation authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop"
      },
      {
       "id": "paper_module.routing_anti_patterns_registry",
       "kind": "paper_module",
       "label": "Routing Anti-Patterns Registry",
       "one_line": "Routing Anti-Patterns Registry validates public anti-pattern registry rows without becoming route source authority or mutating routes.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-routing-anti-patterns-registry"
      },
      {
       "id": "paper_module.batch8_audio_level_rms_port",
       "kind": "paper_module",
       "label": "Set 8 Audio Level RMS Port",
       "one_line": "Set 8 Audio Level RMS Port validates deterministic RMS math parity over public synthetic samples without audio capture, microphone permission, or UI readiness authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-audio-level-rms-port"
      },
      {
       "id": "paper_module.batch8_compliance_pipeline_capsule",
       "kind": "paper_module",
       "label": "Set 8 Compliance Pipeline Bundle",
       "one_line": "Set 8 Compliance Pipeline Bundle validates copied compliance scanner and observe-pipeline mechanics without refreshing the full ledger or dispatching bridge/provider work.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-compliance-pipeline-capsule"
      },
      {
       "id": "paper_module.batch8_policy_engines_capsule",
       "kind": "paper_module",
       "label": "Set 8 Policy Engines Bundle",
       "one_line": "Set 8 Policy Engines Bundle validates three deterministic public policy-engine exercises without running campaigns, providers, markets, or repository mutations.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-policy-engines-capsule"
      },
      {
       "id": "paper_module.batch8_structural_theses_capsule",
       "kind": "paper_module",
       "label": "Set 8 Structural Theses Bundle",
       "one_line": "Set 8 Structural Theses Bundle validates public synthetic thesis-family replay without financial decisions, live-market validation, external model access, or portfolio authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-structural-theses-capsule"
      },
      {
       "id": "paper_module.batch8_tools_tail_primitives_capsule",
       "kind": "paper_module",
       "label": "Set 8 Tools-Tail Primitives Bundle",
       "one_line": "Set 8 Tools-Tail Primitives Bundle validates four public tools-tail primitive exercises without Oracle truth, external model access, live bridge work, or repository mutation authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule"
      },
      {
       "id": "paper_module.batch8_validator_checker_capsule",
       "kind": "paper_module",
       "label": "Set 8 Validator Checker Bundle",
       "one_line": "Set 8 Validator Checker Bundle validates selected public checker groups without becoming launch-scope decision or a complete validator-suite proof.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch8-validator-checker-capsule"
      },
      {
       "id": "paper_module.batch12_market_dashboard_read_model_capsule",
       "kind": "paper_module",
       "label": "Set 12 Market Dashboard Read-Model Bundle",
       "one_line": "Set 12 Market Dashboard Read-Model Bundle validates copied read-model helpers over public fixtures without market-level conclusions, external model access, or launch-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule"
      },
      {
       "id": "paper_module.batch12_prediction_market_board_capsule",
       "kind": "paper_module",
       "label": "Set 12 Prediction Market Board Bundle",
       "one_line": "Set 12 Prediction Market Board Bundle validates copied prediction-board and quant-mart diagnostics over public fixtures without market-level conclusions or provider authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch12-prediction-market-board-capsule"
      },
      {
       "id": "paper_module.batch12_release_claim_language_gate",
       "kind": "paper_module",
       "label": "Set 12 launch claim-Language Gate",
       "one_line": "Set 12 launch claim-Language Gate checks public claim language against result record-backed scope limits without approving launch or public sharing.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch12-release-claim-language-gate"
      },
      {
       "id": "paper_module.batch10_cold_eval_honesty_capsule",
       "kind": "paper_module",
       "label": "Set 10 Cold Eval Honesty Bundle",
       "one_line": "Set 10 Cold Eval Honesty Bundle runs cold-eval over public fixtures without benchmark, navigation-truth, or launch-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule"
      },
      {
       "id": "paper_module.batch10_live_source_drift_capsule",
       "kind": "paper_module",
       "label": "Set 10 Live Source Drift Bundle",
       "one_line": "Set 10 Live Source Drift Bundle validates copied current internal control source bodies without route, ledger-mutation, or launch-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch10-live-source-drift-capsule"
      },
      {
       "id": "paper_module.batch7_macro_engines_capsule",
       "kind": "paper_module",
       "label": "Set 7 Source Engines Bundle",
       "one_line": "Set 7 Source Engines Bundle imports source engine bodies and exercises trace, graph, scheduling, source-index, patch, numeric, rank, and regression-selection invariants.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch7-macro-engines-capsule"
      },
      {
       "id": "paper_module.batch9_macro_engines_capsule",
       "kind": "paper_module",
       "label": "Set 9 Source Engines Bundle",
       "one_line": "Set 9 Source Engines Bundle imports backend and governance source-engine bodies and exercises provenance, approval, AST, finance-news, mission graph, dependency, config, edge, WorkAtlas, host-pressure, doctrine-enrichment, worker-budget, and milestone-quality invariants.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch9-macro-engines-capsule"
      },
      {
       "id": "paper_module.pattern_assimilation",
       "kind": "paper_module",
       "label": "Pattern Assimilation",
       "one_line": "Pattern Assimilation validates public completion-learning metadata, owner-routed refinement result records, typed nothing-to-refine decisions, and copied body-import manifests without promoting local lessons into global doctrine.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-pattern-assimilation"
      },
      {
       "id": "paper_module.batch10_governance_compilers_capsule",
       "kind": "paper_module",
       "label": "Set 10 Governance And Compilers Bundle",
       "one_line": "Set 10 Governance And Compilers Bundle imports governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source bodies as public source-open evidence without granting live ledger, public sharing, launch, market, or source-file changes.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch10-governance-compilers-capsule"
      },
      {
       "id": "paper_module.batch11_saturation_engines_capsule",
       "kind": "paper_module",
       "label": "Set 11 Saturation Engines Bundle",
       "one_line": "Set 11 Saturation Engines Bundle imports saturation, diagnostic, wayfinding, market-board, secret-scan, and demo-take source bodies as public source-open evidence without granting live runtime, launch, market, or navigation authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch11-saturation-engines-capsule"
      },
      {
       "id": "paper_module.batch4_proof_authority_runtime",
       "kind": "paper_module",
       "label": "Set 4 Proof, Authority, and Runtime Bundle",
       "one_line": "Set 4 Proof, Authority, and Runtime Bundle imports proof-search, reasoning-authority, completion, Codex runtime, bitemporal, taskpolicy, and context-yield source bodies as public source-open evidence without claiming proof success, benchmark claims, live runtime control, or launch-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch4-proof-authority-runtime"
      },
      {
       "id": "paper_module.batch6_unsurfaced_primitives_capsule",
       "kind": "paper_module",
       "label": "Set 6 Unsurfaced Primitives Bundle",
       "one_line": "Set 6 Unsurfaced Primitives Bundle imports provenance, operator-handoff, market, finance, provider-recovery, and demo-take source primitives as public source-open evidence without granting live operator memory, market, provider, media, public sharing, or launch-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule"
      },
      {
       "id": "paper_module.engine_room_public_projection_leak_gate",
       "kind": "paper_module",
       "label": "Engine Room Public Projection Leak Gate",
       "one_line": "The Engine Room public projection leak gate validates rendered public projection roots for account secret-shaped strings, non-public paths shapes, symlink escapes, policy-exception handling, and optional gitleaks status while keeping findings hash-only.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-public-projection-leak-gate"
      },
      {
       "id": "paper_module.batch5_authority_systems_capsule",
       "kind": "paper_module",
       "label": "Set 5 Authority and Systems Bundle",
       "one_line": "Set 5 Authority and Systems Bundle imports post-execution authority, replay, proof-repair, process, generated-state, trace, blast-radius, and doctrine-graph source bodies as public source-open evidence without claiming live authority or launch-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch5-authority-systems-capsule"
      },
      {
       "id": "paper_module.batch7_oracle_sibling_capsule",
       "kind": "paper_module",
       "label": "Set 7 Oracle Sibling Bundle",
       "one_line": "Set 7 Oracle Sibling Bundle imports Oracle sibling source bodies and exercises deterministic subject-index, snapshot, truth-diff, quartet-plan, and original pytest witness boundaries.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch7-oracle-sibling-capsule"
      },
      {
       "id": "paper_module.batch7_demo_take_console_capsule",
       "kind": "paper_module",
       "label": "Set 7 Demo Take Console Bundle",
       "one_line": "Set 7 Demo Take Console Bundle imports Swift capture-console source bodies and exercises SwiftPM build, recording-state, helper-bridge, recorder-store, hotkey/audio-meter, and transcribe-payload boundaries.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch7-demo-take-console-capsule"
      },
      {
       "id": "paper_module.engine_room_generated_projection_drift_gate",
       "kind": "paper_module",
       "label": "Engine Room Generated Projection Drift Gate",
       "one_line": "Public generated-projection drift fixture: owner-routed checks fingerprint declared sources and artifacts, reuse clean result records only under matching hashes, and fail planted-byte or missing-artifact cases.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-generated-projection-drift-gate"
      },
      {
       "id": "paper_module.engine_room_command_run_singleflight",
       "kind": "paper_module",
       "label": "Engine Room Command-Run Singleflight",
       "one_line": "Public command-run singleflight fixture: content-addressed subprocess keys collapse duplicate active runs and replay captured result records without claiming scheduler or daemon authority.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-command-run-singleflight"
      },
      {
       "id": "paper_module.engine_room_metabolism_runtime",
       "kind": "paper_module",
       "label": "Engine Room Metabolism Runtime",
       "one_line": "Staged Engine Room component: synthetic SQLite metabolism runtime exercise for queues, leases, blackboard projection, and reconciliation.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-metabolism-runtime"
      },
      {
       "id": "paper_module.engine_room_bridge_campaign_dag",
       "kind": "paper_module",
       "label": "Engine Room Bridge Campaign DAG",
       "one_line": "Staged Engine Room component: pre-dispatch bridge-campaign DAG validator for typed nodes, acyclicity, synthesis reachability, and provider fan-out ceilings.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-bridge-campaign-dag"
      },
      {
       "id": "paper_module.engine_room_annex_knowledge_router",
       "kind": "paper_module",
       "label": "Engine Room Reference Knowledge Router",
       "one_line": "Public Engine Room component: sanitized reference router for structured fields, note relevance, domain filters, and no-match boundaries.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-annex-knowledge-router"
      },
      {
       "id": "paper_module.engine_room_derived_fact_provider_engine",
       "kind": "paper_module",
       "label": "Engine Room Derived Fact Provider Engine",
       "one_line": "Public Engine Room component: registry-backed derived fact provider over JSON pointers, glob counts, git-backed callables, and provider error rows.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-derived-fact-provider-engine"
      },
      {
       "id": "paper_module.engine_room_egress_self_compliance_gate",
       "kind": "paper_module",
       "label": "Engine Room Egress Self-Compliance Gate",
       "one_line": "Public Engine Room component: phrase-membership egress gate for permission ceremony, self-error capture binding, and command-displacement evidence.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-egress-self-compliance-gate"
      },
      {
       "id": "paper_module.engine_room_lean_proof_search_lab",
       "kind": "paper_module",
       "label": "Engine Room Lean Proof Search Lab",
       "one_line": "Public Engine Room component: bounded Lean proof-search lab for tiny fixture statements, oracle-firewall negatives, ablation, and axiom-cleanliness checks.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-lean-proof-search-lab"
      },
      {
       "id": "paper_module.engine_room_navigation_fitness_benchmark",
       "kind": "paper_module",
       "label": "Engine Room Navigation Fitness Benchmark",
       "one_line": "Public Engine Room component: route-packet benchmark evaluator for stable-id recall, precision, forbidden first routes, latency, and debt candidates.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark"
      },
      {
       "id": "paper_module.cold_clone_probe",
       "kind": "paper_module",
       "label": "Cold Clone Probe",
       "one_line": "The cold-clone probe validates the first public source-root bootstrap path: src import, secret-exclusion scan, first-wave pattern-binding fixture replay, public result record refs, and ignored local result record emission.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-cold-clone-probe"
      },
      {
       "id": "paper_module.first_screen_composition_root",
       "kind": "paper_module",
       "label": "First-Screen Composition Root",
       "one_line": "The first-screen composition root validates the public one-screen entry card, reader branches, omission result records, evidence accounting frame, text projection, README order, and scope limit without becoming launch or hosted-publishing-scope decision.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-first-screen-composition-root"
      },
      {
       "id": "paper_module.batch7_secondary_runtime_capsule",
       "kind": "paper_module",
       "label": "Set 7 Secondary Runtime Bundle",
       "one_line": "Set 7 Secondary Runtime Bundle imports runtime, graph, cartography, stockgrid, and Polymarket bodies and exercises their fixture-bound boundaries.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-batch7-secondary-runtime-capsule"
      },
      {
       "id": "paper_module.microcosm_axiom_substrate",
       "kind": "paper_module",
       "label": "Microcosm Axiom System",
       "one_line": "The public Microcosm axiom system routes readers from axiom doctrine to the read-only support-cover evaluator, routing registry, standard, tests, and result records without claiming proof, launch, or source-file changes.",
       "group_id": "paper_module_detail",
       "group_label": "Paper module detail",
       "evidence_rank": null,
       "card_href": "paper-modules.html#paper-module-microcosm-axiom-substrate"
      }
     ]
    }
   ]
  },
  "diagram_assets": {
   "schema": "microcosm_public_compressed_diagram_assets_v1",
   "packaging": "Rendered SVG and layout HTML are omitted. Mermaid source, source hashes, routes, and graph node/edge labels carry the viewable diagram text.",
   "paper_module_diagrams": {
    "count": 93,
    "assets": [
     {
      "asset_id": "paper_module.verifier_lab_kernel.diagram.1",
      "module_id": "paper_module.verifier_lab_kernel",
      "module_label": "Verifier Lab Kernel",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"Bundle and structured source record core/paper_module_capsules.json paper_modules/verifier_lab_kernel.json\"] packet[\"Public verifier packet fixtures/first_wave/verifier_lab_kernel/input/verifier_lab_packet.json\"] kernel[\"Composition root src/microcosm_core/components/verifier_lab_kernel.py\"] components[\"Public component result records tactic portfolio / target shape / trace repair / Lean witness\"] buckets[\"Separated claim buckets lean_verified | oracle_compared | provider_suggested | retrieval_miss | cp2_translated | evolve_candidate | contract_rejected\"] result records[\"Public board/result/validation result records result records/first_wave/verifier_lab_kernel/*.json\"] ceiling[\"Scope limit no proof-body import; no oracle/provider forward success; no launch claim\"] bundle --> packet --> kernel kernel --> components --> buckets --> result records kernel --> ceiling buckets --> ceiling",
      "source_hash": "sha256:c0465b97735952c184c22b412df96069d9ee44648ab2722ae3d6e0a487c00254",
      "source_ref": "microcosm-substrate/paper_modules/verifier_lab_kernel.md",
      "canonical_route": "docs/paper-modules.html#paper-module-verifier-lab-kernel",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.navigation_hologram_route_plane.diagram.1",
      "module_id": "paper_module.navigation_hologram_route_plane",
      "module_label": "Navigation Hologram Route Plane",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Entry[\"Control entry first browse row that claims first contact is replaced with the entry route\"] subgraph Gates[\"Route-plane gates\"] Couple[\"Source coupling SHA-256 over route rows vs manifest fingerprint + row count\"] Rows[\"Route rows surface role, actionable command, no source-authority claim, omission result record when required\"] Modules[\"Source-module manifest 5 copied source bodies digest + required anchors, body never in result record\"] Lease[\"Route-lease policy selected lane, permitted actions, source authority rejected\"] Floor[\"Entry-packet floor required control fields survive compaction\"] Pass[\"Affordance passports anti-trigger rows demoted before similarity can select them\"] end Verdict{\"Coupling current, all gates pass, card row selected?\"} Entry --> Couple Couple --> Rows --> Modules --> Lease --> Floor --> Pass --> Verdict Verdict -->|yes| Result records[\"metadata-only result records cluster flag, card, coupling, route lease, entry admission, affordance, code-architecture packet\"] Verdict -->|no| Blocked[\"Blocked stable error codes, findings, bodies redacted\"] Negative[\"Negative-case floor BANNED_FIRST_CONTACT_ROUTE, SOURCE_COUPLING_STALE, and 7 more\"] -.-> Gates Result records --> Ceiling[\"Scope limit projection evidence only; no live route freshness, source authority, or launch\"] Blocked --> Ceiling",
      "source_hash": "sha256:b8e7ac526413104febca3cdab5da666ed6408a55d0cc0bcc46dd107f58c7e734",
      "source_ref": "microcosm-substrate/paper_modules/navigation_hologram_route_plane.md",
      "canonical_route": "docs/paper-modules.html#paper-module-navigation-hologram-route-plane",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.agent_route_observability_runtime.diagram.1",
      "module_id": "paper_module.agent_route_observability_runtime",
      "module_label": "Agent Route Observability Runtime",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"JSON bundle core/paper_module_capsules.json::paper_modules[2]\"] Standard[\"Authority boundary standards/std_microcosm_agent_route_observability_runtime.json\"] Runtime[\"Runtime component src/microcosm_core/components/agent_route_observability_runtime.py\"] Fixtures[\"Public fixture input fixtures/first_wave/agent_route_observability_runtime/input\"] Manifests[\"Source-open manifests examples/agent_route_observability_runtime/*/source_module_manifest.json\"] Negatives[\"Required negative cases actor axis, route lease, hook shadow, non-public-state floors\"] Bundles[\"10 exported bundle validators 31 source-module rows\"] Card[\"Compact result card large/private payloads omitted\"] Result records[\"metadata-only result records result records/first_wave/agent_route_observability_runtime/\"] Tests[\"Focused checks tests/test_agent_route_observability_runtime.py\"] Ceiling[\"Scope limit public route-observability fixtures only\"] Bundle --> Standard --> Runtime Runtime --> Fixtures --> Negatives --> Result records Runtime --> Manifests --> Bundles --> Result records Result records --> Card Result records --> Tests --> Ceiling",
      "source_hash": "sha256:e9248e3cd123736ef227618daf296ec030383d96e7a468a9e1c331291518de6f",
      "source_ref": "microcosm-substrate/paper_modules/agent_route_observability_runtime.md",
      "canonical_route": "docs/paper-modules.html#paper-module-agent-route-observability-runtime",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.agent_benchmark_integrity_anti_gaming_replay.diagram.1",
      "module_id": "paper_module.agent_benchmark_integrity_anti_gaming_replay",
      "module_label": "Agent Benchmark Integrity Anti-Gaming Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Bundle[\"JSON bundle authority\"] --> Markdown[\"Reader projection\"] Protocol[\"projection_protocol.json\"] --> ProtocolGate[\"source refs and result record density\"] Manifest[\"source_module_manifest.json\"] --> DigestGate[\"material class and digest gate\"] DigestGate --> Bodies[\"copied public source provenance bodies\"] DigestGate --> RealTrace[\"sanitised real command-run trace passing pytest, sha256 digests, declared omissions\"] Cases[\"3 public case ids\"] --> ReplayGate[\"case roster and required replay refs\"] Policy[\"locked evaluator policy\"] --> EvaluatorGate[\"locked ids and config hashes\"] Replays[\"3 replay observations\"] --> ReplayGate EvaluatorGate --> ReplayGate ProtocolGate --> ReplayGate ReplayGate --> EvidenceGate[\"per-ref evidence artifacts file-access, contamination, trusted reference, output replay\"] EvidenceGate --> Recompute[\"recompute integrity_pass or quarantine\"] RealTrace --> Recompute Recompute --> Trace[\"public trace verdict recomputation\"] Trace --> Verdicts[\"2 integrity_pass and 1 quarantine\"] Negatives[\"11 anti-gaming fixtures\"] --> Quarantine[\"quarantine or blocking finding\"] Bodies --> PrivateScan[\"metadata-only non-public-state scan\"] RealTrace --> PrivateScan Verdicts --> Result record[\"metadata-only integrity result record\"] Quarantine --> Result record PrivateScan --> Result record Result record --> Ceiling[\"anti-score scope limit\"]",
      "source_hash": "sha256:77dd79c09a231262e26cb18014deab3fa1b79f13aa3a2546ffae6c8b5c9726ee",
      "source_ref": "microcosm-substrate/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-agent-benchmark-integrity-anti-gaming-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.research_replication_rubric_artifact_replay.diagram.1",
      "module_id": "paper_module.research_replication_rubric_artifact_replay",
      "module_label": "Research Replication Rubric Artifact Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON bundle authority paper_module.research_replication_rubric_artifact_replay\"] policy[\"Replication policy required fields + rubric axes + forbidden claims\"] replay[\"Research replay rows 2 synthetic paper bundles\"] artifacts[\"Execution artifacts allowed input + metric spec + declared hash\"] metric[\"Local metric replay public_sum_metric over allowed input\"] source_manifest[\"Source-module manifest 3 source pattern slices + 1 exact-copy component body\"] trace[\"Public execution trace 2 metadata-only spans\"] negatives[\"Negative fixtures 8 overclaim cases\"] result records[\"metadata-only result records counts, refs, digests, scope boundaries\"] ceiling[\"Scope limit no replication-success or publishing-scope decision\"] bundle --> policy policy --> replay replay --> artifacts artifacts --> metric source_manifest --> result records metric --> result records trace --> result records negatives --> result records result records --> ceiling",
      "source_hash": "sha256:7c3328476b88327bd6c7b253eb41e3e204f07b6a9e0248854a09beae228dd703",
      "source_ref": "microcosm-substrate/paper_modules/research_replication_rubric_artifact_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-research-replication-rubric-artifact-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.agentic_vulnerability_discovery_patch_proof_replay.diagram.1",
      "module_id": "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
      "module_label": "Agentic Vulnerability Discovery Patch-Proof Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"patch-proof replay runtime\"] fixture[\"first-wave fixture\"] bundle[\"exported patch-proof bundle\"] targets[\"synthetic target refs\"] hypotheses[\"issue hypotheses\"] traces[\"trace evidence refs\"] proofs[\"abstract exploitability refs\"] patches[\"patch diff refs\"] regressions[\"regression test refs\"] executable[\"executable regression witnesses\"] verifiers[\"verifier result records\"] sandbox[\"sandbox verdicts\"] negative[\"negative-case fixtures\"] secret_scan[\"secret-exclusion scan\"] replay[\"cold replay rows\"] public_trace[\"public trace spans\"] source_modules[\"source-module body floor\"] result records[\"metadata-only result records\"] consumer[\"focused proof-consumer tests\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle fixture --> targets bundle --> targets targets --> hypotheses hypotheses --> traces traces --> proofs proofs --> patches patches --> regressions regressions --> executable executable --> verifiers verifiers --> sandbox negative --> result records secret_scan --> result records sandbox --> replay replay --> public_trace source_modules --> secret_scan source_modules --> public_trace public_trace --> result records result records --> consumer result records --> ceiling",
      "source_hash": "sha256:b3838dc2fa8bbc7e833961f555039129a9b60cd4878c714e07c1b63e8da81e03",
      "source_ref": "microcosm-substrate/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-agentic-vulnerability-discovery-patch-proof-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.materials_chemistry_closed_loop_lab_safety_replay.diagram.1",
      "module_id": "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
      "module_label": "Materials Chemistry Closed-Loop Lab-Safety Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD policy[\"replay_policy.json numeric policy + expected label\"] candidates[\"candidate_materials.json 4 candidate refs + safety gates\"] assays[\"simulator_assays.json 4 public assay proxy values\"] decisions[\"active_learning_decisions.json 4 active-learning scores\"] numeric[\"numeric replay weighted recompute of the winner\"] labelcheck{\"recomputed pick == declared label? safety gate >= 0.70?\"} negatives[\"negative-case fixtures 8 forbidden lab classes\"] refuse{\"any forbidden MATERIALS_*_FORBIDDEN observed?\"} manifest[\"source_module_manifest.json 4 copied public body modules\"] replay[\"Lab/Evolve replay graph replay cases\"] verdict[\"safety verdict\"] accepted[\"public_safe_simulator_replay_accepted\"] blocked[\"blocked_public_safety_boundary\"] result record[\"metadata-only result records counts, digests, findings\"] ceiling[\"scope limit no wetlab / no discovery / no launch\"] policy --> numeric candidates --> numeric assays --> numeric decisions --> numeric numeric --> labelcheck labelcheck -->|stale label or gate fail| blocked labelcheck -->|match| verdict negatives --> refuse refuse -->|yes| blocked refuse -->|no| verdict manifest --> replay replay --> verdict verdict --> accepted accepted --> result record blocked --> result record result record --> ceiling",
      "source_hash": "sha256:96d895bbcbf9d091aa63d8d4667f34ecc2b6b30659390c26a2010438277aa967",
      "source_ref": "microcosm-substrate/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-materials-chemistry-closed-loop-lab-safety-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.certificate_kernel_execution_lab.diagram.1",
      "module_id": "paper_module.certificate_kernel_execution_lab",
      "module_label": "Certificate Kernel Execution Lab",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"certificate-kernel runtime\"] fixture[\"first-wave Lean fixture\"] bundle[\"exported certificate bundle\"] manifest[\"certificate manifest\"] lake[\"Lean/Lake subprocess\"] analyzer[\"Lean analyzer metadata\"] transitions[\"transition trace rows\"] cp2[\"CP2 typed-action reruns\"] evolve[\"bounded Evolve reruns\"] source_modules[\"source-module body floor\"] readout[\"public readout\"] result records[\"metadata-only result records\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle fixture --> manifest bundle --> manifest manifest --> lake lake --> analyzer lake --> transitions transitions --> cp2 cp2 --> evolve source_modules --> analyzer analyzer --> readout evolve --> result records readout --> result records result records --> ceiling",
      "source_hash": "sha256:5435e99374c51f35788c6a5b94839236aa282205838b6030bc348fef9e2890ba",
      "source_ref": "microcosm-substrate/paper_modules/certificate_kernel_execution_lab.md",
      "canonical_route": "docs/paper-modules.html#paper-module-certificate-kernel-execution-lab",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.corpus_readiness_mathlib_absence_gate.diagram.1",
      "module_id": "paper_module.corpus_readiness_mathlib_absence_gate",
      "module_label": "Corpus Readiness Mathlib Absence Gate",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD fixture[\"Fixture or exported bundle input corpus readiness rows + consumer gate cases\"] probe[\"runtime_lean_import_probe lake env lean: Std compiles, Mathlib import rejected\"] artifacts[\"validate_runtime_source_artifacts check SHA-256 digests, parse probe JSON\"] mathlib{\"Mathlib lane available? corpus exists + Lake file + probe passes\"} corpus[\"validate_corpus_readiness 7 corpus rows, alias fields must agree with probe\"] gates[\"validate_consumer_gate_cases derive verdicts from readiness facts\"] imports[\"validate_source_module_imports 4 copied source artifacts, digest match\"] allowed[\"Allowed: Lean3 translation smoke (needs no Mathlib project)\"] blocked[\"Blocked: Mathlib-dependent and absent-corpus consumers\"] result records[\"metadata-only result records result, board, validation, sign-off, bundle\"] ceiling[\"Scope limit no Mathlib availability, proof, provider, launch\"] fixture --> artifacts artifacts --> probe probe --> mathlib mathlib -->|no, probe false| corpus corpus --> gates gates --> allowed gates --> blocked fixture --> imports corpus --> result records gates --> result records imports --> result records result records --> ceiling",
      "source_hash": "sha256:312d385e007fd2fcba60c7acd8e7bb4fb29702481e519d116f78a07e9186d784",
      "source_ref": "microcosm-substrate/paper_modules/corpus_readiness_mathlib_absence.md",
      "canonical_route": "docs/paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.pattern_binding_contract.diagram.1",
      "module_id": "paper_module.pattern_binding_contract",
      "module_label": "Pattern Binding Contract",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR subgraph Inputs[\"Pattern-binding inputs\"] Patterns[\"Pattern rows id, governing standard, scope boundary, source refs, projection posture\"] Bundles[\"Source bundles metadata-only refs to public runtime or regression harness\"] Handles[\"Authority-chain handles resolver result records\"] end Validator[\"pattern_binding_contract required fields, duplicate ids, bundle resolution, secret-exclusion scan\"] subgraph Negative[\"Refusal floor\"] Dup[\"Duplicate id rejected\"] Leak[\"Private body leak rejected\"] Overclaim[\"Public-leaf overclaim rejected\"] Unsupported[\"Unsupported authority handle not upgraded\"] end subgraph Bundle[\"Exported-bundle path\"] Truth[\"Truth accounting runtime-metadata rows vs real pattern-ledger import\"] RouteReadiness[\"Route-readiness selector component-first admission, fixture contract, hard no-standalone gate\"] end Result records[\"Result records refs, digests, counts, verdicts; body text omitted\"] Patterns --> Validator Bundles --> Validator Handles --> Validator Validator --> Negative Validator --> Bundle Truth --> RouteReadiness Negative --> Result records Bundle --> Result records",
      "source_hash": "sha256:7ed1be41b0ac1acdc65e8f8646ce0f608773a1ec62c55f254e07027f6c399f80",
      "source_ref": "microcosm-substrate/paper_modules/pattern_binding_contract.md",
      "canonical_route": "docs/paper-modules.html#paper-module-pattern-binding-contract",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.bridge_phase_continuity_runtime.diagram.1",
      "module_id": "paper_module.bridge_phase_continuity_runtime",
      "module_label": "Bridge Phase Continuity Runtime",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Inputs[\"Six synthetic transport inputs detached job, continuation packet, heartbeat rows, resource pressure, worker-skip result record, forbidden terms\"] --> Transport[\"_validate_synthetic_transport_contract\"] Transport --> Good{\"Valid job? yielded to disk, packet not consumed, fresh heartbeat, phase and continuity match\"} Good -->|\"yes\"| Accept[\"Positive path accepted\"] Good -->|\"no\"| Refuse[\"Refusal floor: missing packet, missing fields, duplicate resume, heartbeat claims resume, stale heartbeat overclaim, dispatch blocked\"] Refuse --> Codes[\"Concrete error codes\"] Accept --> Fixture[\"_validate_fixture_contract source digests, completion finalizer, apply-failure rollback, public boundary\"] Codes --> Fixture Fixture --> Scan[\"private_state scan fixture and transport inputs\"] Scan --> Result records[\"Five metadata-only result records continuation, heartbeat, resource pressure, resume, completion transition\"] Result records --> Gate{\"Tracked result record-write gate\"} Gate -->|\"env set\"| Written[\"Result records written\"] Gate -->|\"env absent\"| Blocked[\"tracked_receipt_writes_blocked\"] Written --> Ceiling[\"Scope limit: no live bridge transport, external model access, HUD/browser/private memory, source-file changes, launch, or whole-system proof\"] Blocked --> Ceiling",
      "source_hash": "sha256:b824d70bb2e87ba950765ff90af8fe74534f4d9164dd40f75f62544fcd6050ac",
      "source_ref": "microcosm-substrate/paper_modules/bridge_phase_continuity_runtime.md",
      "canonical_route": "docs/paper-modules.html#paper-module-bridge-phase-continuity-runtime",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.cognitive_operator_registry.diagram.1",
      "module_id": "paper_module.cognitive_operator_registry",
      "module_label": "Cognitive Operator Registry",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Registry[\"Public operator registry operator ids, roles, runtime refs\"] Standard[\"Operator standard required fields, scope limit\"] Dogfood[\"Dogfood result records cognition-delta evidence\"] Validator[\"cognitive_operator_registry validator\"] Source[\"Copied source bodies registry, standard, validator tool\"] Negative[\"Negative floor missing fields, no dogfood, sprawl, overclaim, private leakage\"] Result record[\"Result records refs, hashes, counts, verdicts; body text omitted\"] Registry --> Validator Standard --> Validator Dogfood --> Validator Source --> Validator Validator --> Negative Validator --> Result record",
      "source_hash": "sha256:1a21141d734dc88334c530e70d75cf7ca588f70ad7cfc7efce9aa4e906c9bfdf",
      "source_ref": "microcosm-substrate/paper_modules/cognitive_operator_registry.md",
      "canonical_route": "docs/paper-modules.html#paper-module-cognitive-operator-registry",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.agent_closeout_faithfulness_audit.diagram.1",
      "module_id": "paper_module.agent_closeout_faithfulness_audit",
      "module_label": "Agent Completion Faithfulness Audit",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Claims[completion_claims.json 3 fixture claims] --> Audit[agent_completion_faithfulness_audit.run] Ledger[fixture_ledger.json 2 cap rows] --> Audit Repo[public_fixture_repo git fixture] --> Audit Pytest[tests/test_completion_fixture.py declared nodeid] --> Audit Manifest[source_module_manifest.json 1 exact-copy source body] --> Audit Audit --> Pass[pass result record 3 verified claims] Audit --> Neg[negative-case semantics 4 overclaim classes] Audit --> Ceiling[scope limit no live mutation or launch]",
      "source_hash": "sha256:7b7db3af29ea8c60ea00b4cf5b5d645d16537643456cde92cce96a2d85a2e046",
      "source_ref": "microcosm-substrate/paper_modules/agent_closeout_faithfulness_audit.md",
      "canonical_route": "docs/paper-modules.html#paper-module-agent-closeout-faithfulness-audit",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.cold_reader_route_map.diagram.1",
      "module_id": "paper_module.cold_reader_route_map",
      "module_label": "Cold-Reader Route Map",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR subgraph Entry[\"First-screen entry\"] Project[\"Public project path repo -> .microcosm\"] First[\"First-screen card claim frame, first command, evidence legend, exit rule\"] end subgraph Accounting[\"Route-map accounting\"] Route[\"Ordered route rows command, result record ref, evidence class\"] Ceiling[\"Scope boundary and scope limit attached to each row\"] end subgraph ReaderBranch[\"Reader branch\"] Branch[\"Reader branch choose one first action\"] Safety[\"Safety/evals status, authority, workingness\"] Hiring[\"Hiring reviewer first-screen card, legibility scorecard\"] Developer[\"Peer developer tour, observe, explain or compile\"] end subgraph Boundary[\"Proof boundary\"] Drilldown[\"Drilldowns tour, status, explain, observe, compile, serve\"] Result record[\"Result records and route refs public refs only; body_in_receipt false\"] end Project --> First First --> Route Route --> Ceiling Route --> Branch Branch --> Safety Branch --> Hiring Branch --> Developer Safety --> Drilldown Hiring --> Drilldown Developer --> Drilldown Ceiling --> Result record Drilldown --> Result record",
      "source_hash": "sha256:3b14712addef3b322844ac4843018094e53087dcb279a8a4224c0822b4c78741",
      "source_ref": "microcosm-substrate/paper_modules/cold_reader_route_map.md",
      "canonical_route": "docs/paper-modules.html#paper-module-cold-reader-route-map",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.proof_diagnostic_evidence_spine.diagram.1",
      "module_id": "paper_module.proof_diagnostic_evidence_spine",
      "module_label": "Proof Diagnostic Evidence Spine",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Check[\"Diagnostic check row source_refs, receipt_anchor_refs, source_digest_refs\"] Resolve[\"Resolve source ref to real public file\"] Hash[\"Re-hash file (sha256) compare to expected digest\"] Result record[\"Open result record anchor does payload contain this ref and digest?\"] Floor[\"Semantic floor failure-taxonomy / graph-update source and result record match\"] Accept[\"Accepted check verdict = recomputed, body_in_receipt false\"] Reject[\"Rejected / retained as diagnostic evidence\"] Stale[\"Stale source fingerprint\"] Provider[\"Provider advisory payload\"] Proofbody[\"Forbidden proof-body field\"] Check --> Resolve --> Hash --> Result record --> Floor Floor -->|all agree| Accept Floor -->|any mismatch| Reject Stale -. retained as evidence .-> Reject Provider -. metadata kept, authority denied .-> Reject Proofbody -. scrubbed, kept as regression .-> Reject Accept --> Board[\"diagnostic_board.json evidence accounting only\"] Reject --> Board Board -. denies .-> Ceiling[\"no Lean/Lake run, no formal-result correctness, no provider authority, no launch\"]",
      "source_hash": "sha256:b5662673d460a8e63e45a9c43743d5730ee4e5c2d1623a9483d97d95699124e6",
      "source_ref": "microcosm-substrate/paper_modules/proof_diagnostic_evidence_spine.md",
      "canonical_route": "docs/paper-modules.html#paper-module-proof-diagnostic-evidence-spine",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.proof_derived_governed_mutation_authorization.diagram.1",
      "module_id": "paper_module.proof_derived_governed_mutation_authorization",
      "module_label": "Proof-Derived Governed Mutation Authorization",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Proposals[\"mutation_proposals.json 3 synthetic proposals: read-only, scoped write, rollback\"] subgraph Evidence[\"Resolved evidence chain\"] ProofCells[\"proof_evidence_cells.json validator-backed proof refs\"] Policies[\"policy_verdicts.json 2+ visible verdicts before execution identity\"] Effects[\"side_effect_ledger.json logged diff for write / rollback\"] Rollbacks[\"rollback_receipts.json paired rollback result record\"] Replay[\"cold_replay.json cold rerun per proposal\"] end Hash{\"Recompute evidence-chain hash declared == derived?\"} Records[\"governed_mutation_records.json real repo record + git commit ref\"] AntiBake{\"Anti-bake gate git commit touched this source/test? re-derived refs match declared?\"} SourceManifest[\"source_module_manifest.json 6 copied source bodies verified by digest\"] Negatives[\"8 negative cases standing account secret, hidden vote, policy-after-execution, ...\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"scope limit no account secrets, live mutation, provider, source-file changes, hosting, public sharing, or launch\"] Proposals --> Evidence Evidence --> Hash Hash -->|match| AntiBake Hash -->|mismatch| Negatives Records --> AntiBake AntiBake -->|real record bound| Result records AntiBake -->|unbound or baked| Negatives SourceManifest --> Result records Negatives --> Result records Result records --> Ceiling",
      "source_hash": "sha256:b7d762590d361eee7f3a246ddc78f9cea86bb21436fb0abfc5c59d56ae9db882",
      "source_ref": "microcosm-substrate/paper_modules/proof_derived_governed_mutation_authorization.md",
      "canonical_route": "docs/paper-modules.html#paper-module-proof-derived-governed-mutation-authorization",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.durable_agent_work_landing_replay.diagram.1",
      "module_id": "paper_module.durable_agent_work_landing_replay",
      "module_label": "Durable Agent Work-Landing Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Fixture[\"Public replay fixture claimed rows, validation refs, commit attempts, blocker rows\"] Source[\"Copied internal control source bodies work landing, preflight, scoped commit, work log\"] Validator[\"durable_agent_work_landing_replay validator\"] Mechanics[\"Replay mechanics claim before mutation, validate before commit, HEAD movement before landed language\"] Negative[\"Negative floor live Git authority, missing completion, uncaptured blocker, private leakage\"] Result record[\"Result records board, result, validation, sign-off; no live mutation authority\"] Fixture --> Validator Source --> Validator Validator --> Mechanics Validator --> Negative Mechanics --> Result record Negative --> Result record",
      "source_hash": "sha256:177786792f5e6e4cc481a835431ebae511d3ae060a9f1e0cbc14fad7055f9655",
      "source_ref": "microcosm-substrate/paper_modules/durable_agent_work_landing_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-durable-agent-work-landing-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.work_landing_control_spine.diagram.1",
      "module_id": "paper_module.work_landing_control_spine",
      "module_label": "Work Landing Control Spine",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR A[\"Copied source source bundle 5 internal control bodies + manifest + contract\"] --> B[\"Manifest digest and line-count check is the copy exact?\"] B --> C[\"Required anchor scan is the load-bearing logic still present?\"] C --> D[\"Runtime no-live-mutation contract are all authority flags false?\"] D --> E[\"Secret-exclusion scan any private/account secret material?\"] E --> F[\"Validation result record refs, hashes, counts, findings\"] B --> G[\"Reject stale or missing source body\"] C --> G D --> H[\"Reject authority overclaim\"] E --> I[\"Reject private payload leakage\"]",
      "source_hash": "sha256:120c2d4938fddf71ce9e0ac9318273ab6f312f3f54323fa552614653dce2d71c",
      "source_ref": "microcosm-substrate/paper_modules/work_landing_control_spine.md",
      "canonical_route": "docs/paper-modules.html#paper-module-work-landing-control-spine",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.executable_doctrine_grammar.diagram.1",
      "module_id": "paper_module.executable_doctrine_grammar",
      "module_label": "Executable Doctrine Grammar",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Public doctrine fixtures fixtures/first_wave/executable_doctrine_grammar/input\"] --> B[\"Executable grammar validator src/microcosm_core/components/executable_doctrine_grammar.py\"] C[\"Exported standards bundle examples/executable_doctrine_grammar/exported_standards_bundle\"] --> B D[\"Source-module manifest examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle/source_module_manifest.json\"] --> B B --> E[\"metadata-only deterministic result records result records/first_wave/executable_doctrine_grammar/\"] E --> F[\"Bundle and atlas evidence core/paper_module_capsules.json::paper_modules[18]\"] F --> G[\"Bounded reader claim doctrine-shape validation, not launch-scope decision\"]",
      "source_hash": "sha256:1736cad390db51df07a5e44e592b13865b7adc9954c5b566123324d4dcc4a8cd",
      "source_ref": "microcosm-substrate/paper_modules/executable_doctrine_grammar.md",
      "canonical_route": "docs/paper-modules.html#paper-module-executable-doctrine-grammar",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.macro_projection_import_protocol.diagram.1",
      "module_id": "paper_module.macro_projection_import_protocol",
      "module_label": "Source Projection Import Protocol",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Copied material row source ref, target ref, digest, material class\"] --> B{\"Material class?\"} B -- \"forbidden class (secret, account secret, source note, operator, provider, launch)\" --> R[\"Reject: forbidden body import\"] B -- \"class (pattern, standard, tool, result record, proof)\" --> C{\"Verification record present and target digest bound?\"} C -- \"no\" --> R2[\"Reject: unverified import\"] C -- \"yes, exact copy\" --> D[\"Re-hash live source source on disk\"] D --> E{\"Source digest still matches?\"} E -- \"yes\" --> F[\"body floor\"] E -- \"no\" --> G[\"Flag live source drift (honest copy, refresh later)\"] G --> F F --> H[\"Per-slice manifest + metadata-only result record\"] H --> I[\"Reader projection\"] H -. does not grant .-> J[\"live source authority, public sharing, launch, or source-file changes\"]",
      "source_hash": "sha256:b9853a8da4a4518b47c8c0f78a7ac1b3bf9ea944f92c837c6944b2539cbc340c",
      "source_ref": "microcosm-substrate/paper_modules/macro_projection_import_protocol.md",
      "canonical_route": "docs/paper-modules.html#paper-module-macro-projection-import-protocol",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.mission_transaction_work_spine.diagram.1",
      "module_id": "paper_module.mission_transaction_work_spine",
      "module_label": "Mission Transaction Work Spine",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"JSON bundle paper_module.mission_transaction_work_spine\"] Fixture[\"First-wave fixture Work items, claims, deps, lanes, result records\"] Bundle[\"Exported bundle work log, work log, checkpoint, scoped commit, preflight source bodies\"] Snapshot[\"Real work log session snapshot active claims, heartbeat, source hash\"] Runtime[\"Component runtime mission_transaction_work_spine.py\"] R3[\"R3 replay verdict runtime-derived, not label-derived\"] Result records[\"metadata-only result records refs, hashes, counts, limits\"] Ceiling[\"Scope limit no live ledger, git, launch, or provider authority\"] Bundle --> Runtime Fixture --> Runtime Bundle --> Runtime Snapshot --> Runtime Runtime --> R3 Runtime --> Result records R3 --> Ceiling Result records --> Ceiling",
      "source_hash": "sha256:cdd46b941e39209ebf137ccebc61cbcc2cfb1e09ceb6a5132bc3f29c3bae8b93",
      "source_ref": "microcosm-substrate/paper_modules/mission_transaction_work_spine.md",
      "canonical_route": "docs/paper-modules.html#paper-module-mission-transaction-work-spine",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.formal_math_readiness_gate.diagram.1",
      "module_id": "paper_module.formal_math_readiness_gate",
      "module_label": "Formal Math Readiness Gate",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Inputs[\"Five public JSON inputs corpus, tactics, premises, routes, provider recipes\"] Scan[\"Secret-exclusion scan zero blocking hits required\"] Corpus[\"validate_corpus_readiness reject Mathlib-availability overclaim\"] Tactics[\"validate_tactic_portfolio each available tactic needs a probe result record\"] Premises[\"validate_premise_index reject proof_body / oracle premise ids\"] Routing[\"validate_target_shape_routing reject route admitting an unavailable tactic\"] Provider[\"validate_provider_context_recipes reject over-budget or proof-body recipe\"] SourceFloor[\"validate_source_module_imports copied probe bodies, digest-checked\"] Reconcile[\"Reconcile findings vs EXPECTED_NEGATIVE_CASES every known overclaim must be caught\"] Board[\"Readiness board + extension board available / blocked capabilities, counts\"] Ceiling[\"Scope limit no Lean/Lake, proof, provider, launch, or private-system authority\"] Inputs --> Scan Scan --> Corpus Scan --> Tactics Scan --> Premises Scan --> Provider Tactics -->|unavailable tactic ids| Routing Corpus --> Reconcile Tactics --> Reconcile Premises --> Reconcile Routing --> Reconcile Provider --> Reconcile SourceFloor --> Reconcile Reconcile --> Board Board --> Ceiling",
      "source_hash": "sha256:80af348c44dc0b502c9b53c0c0370728f18d18af44fee689e95cdb769bab53fc",
      "source_ref": "microcosm-substrate/paper_modules/formal_math_readiness_gate.md",
      "canonical_route": "docs/paper-modules.html#paper-module-formal-math-readiness-gate",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.formal_math_lean_proof_witness.diagram.1",
      "module_id": "paper_module.formal_math_lean_proof_witness",
      "module_label": "Formal Math Lean Proof Witness",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"First-wave fixture fixtures/first_wave/.../input\"] --> B[\"run() include_negative=true\"] C[\"Exported public bundle examples/.../exported_lean_proof_witness_bundle\"] --> D[\"run_witness_bundle() include_negative=false\"] B --> E[\"Validate witness manifest: reject embedded proof bodies, oracle ids, non-public source refs\"] D --> F[\"Validate source_module_manifest.json: copied public source digests, exact-copy vs replacement\"] E --> G[\"Copy Lake project to temp workspace lake build MicrocosmProofWitness\"] G --> H[\"Negative cases run real Lean: invalid proof rejected, Mathlib/Aesop/Batteries import blocked\"] F --> I[\"Standalone exported-witness contract or fresh bundle result record reuse (no live build)\"] G --> J[\"metadata-only JSON result records: return code, line counts, hashes, declaration names\"] H --> J I --> J J --> K[\"Scope limit: toy public witness only\"]",
      "source_hash": "sha256:5d6f8dad08be9992a0faabd9eb00bab57c7cbb6d3df54e0e0169e32949fc9a31",
      "source_ref": "microcosm-substrate/paper_modules/formal_math_lean_proof_witness.md",
      "canonical_route": "docs/paper-modules.html#paper-module-formal-math-lean-proof-witness",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.formal_math_verifier_trace_repair_loop.diagram.1",
      "module_id": "paper_module.formal_math_verifier_trace_repair_loop",
      "module_label": "Formal Math Verifier Trace Repair Loop",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Input[\"Fixture input or exported bundle copied Ring2 rows + source-module manifest\"] Protocol[\"Projection protocol copied-material provenance\"] Manifest[\"Source-module manifest digest, line and byte match, body_in_receipt false\"] Secret[\"Secret-exclusion scan proof bodies, oracle ids, model-output data forbidden\"] Attempts[\"Verifier-attempt replay grade needs trace events, repair needs failure class\"] Curriculum[\"Repair-curriculum replay failure-mode ledger, curriculum deltas\"] Promotion[\"Promotion policy requires cold-rerun result record\"] Toy[\"Deterministic toy rerun fail then repair over public inputs\"] Realness[\"Realness gate clean source replay -> top rung; any drift downgrades\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"Scope limit repair-loop accounting, bounded evidence\"] Input --> Protocol Protocol --> Manifest Manifest --> Secret Secret --> Attempts Attempts --> Curriculum Curriculum --> Promotion Promotion --> Toy Attempts --> Realness Curriculum --> Realness Toy --> Realness Realness --> Result records Result records --> Ceiling",
      "source_hash": "sha256:66a602b3ad09df9cd4e8e5f943691d94ecf2a57c9a2f944b5385366f8fb4cadf",
      "source_ref": "microcosm-substrate/paper_modules/formal_math_verifier_trace_repair_loop.md",
      "canonical_route": "docs/paper-modules.html#paper-module-formal-math-verifier-trace-repair-loop",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.formal_evidence_cell_anchor_resolver.diagram.1",
      "module_id": "paper_module.formal_evidence_cell_anchor_resolver",
      "module_label": "Formal Evidence Cell Anchor Resolver",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"source record core/paper_module_capsules.json::paper_modules[24]\"] --> structured source record[\"structured source record paper_modules/formal_evidence_cell_anchor_resolver.json source basis: source record\"] structured source record --> Mermaid[\"diagram view available_from_capsule_edges\"] structured source record --> Atlas[\"map view blocked_until_organ_atlas_owner_lane_binds_edges\"] structured source record --> Reader[\"this page this page\"] Reader --> Runtime[\"runtime locus src/microcosm_core/components/formal_evidence_cell_anchor_resolver.py\"] Runtime --> Fixture[\"first-wave fixture input fixtures/first_wave/formal_evidence_cell_anchor_resolver/input\"] Runtime --> Bundle[\"exported evidence-cell anchor bundle examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle\"] Bundle --> Manifest[\"source-open body manifest source_module_manifest.json\"] Fixture --> Result records[\"validation result records result records/first_wave/... + result records/sign-off/...\"] Bundle --> BundleReceipt[\"runtime-shell result record result records/runtime_shell/demo_project/components/formal_evidence_cell_anchor_resolver/...\"] Result records --> Ceiling[\"proof boundary + scope limit anchor metadata only, not formal-result correctness\"] BundleReceipt --> Ceiling",
      "source_hash": "sha256:743aa85dc1d159195dd26cc0dbd5d38be7f4c4890641f6eee3229aa690e2e34e",
      "source_ref": "microcosm-substrate/paper_modules/formal_evidence_cell_anchor_resolver.md",
      "canonical_route": "docs/paper-modules.html#paper-module-formal-evidence-cell-anchor-resolver",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.formal_math_premise_retrieval.diagram.1",
      "module_id": "paper_module.formal_math_premise_retrieval",
      "module_label": "Formal Math Premise Retrieval",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON source record paper_module.formal_math_premise_retrieval\"] --> instance[\"Generated paper-module instance 15 relationship edges\"] instance --> component[\"Runtime component formal_math_premise_retrieval.py\"] subgraph Inputs[\"Public inputs\"] index[\"Premise index copied Lean/Std metadata\"] queries[\"Retrieval queries terms, split, strategy, top_k\"] recipes[\"Context recipes byte budgets\"] negatives[\"Negative-case inputs proof body, oracle ids, test-split tuning, budget, strategy\"] end component --> index component --> queries component --> recipes component --> negatives index --> split[\"Split gate skip premises not in allowed_for_split\"] queries --> split split --> score[\"Term-overlap scoring shared tokens + strategy bonus\"] score --> shortlist[\"Ranked top_k shortlist\"] shortlist --> recall[\"Recall check vs expected premise ids\"] negatives --> reject[\"Required rejections five leakage/overclaim guards\"] recipes --> reject recall --> result records[\"metadata-only result records board, validation, sign-off\"] reject --> result records result records --> ceiling[\"Scope limit metadata coherence, no Lean/Lake, no proof\"]",
      "source_hash": "sha256:2a537a867822aa6a3b3621163a9ea5be58875acc136a92764c6a5fc6bc4fb1fe",
      "source_ref": "microcosm-substrate/paper_modules/formal_math_premise_retrieval.md",
      "canonical_route": "docs/paper-modules.html#paper-module-formal-math-premise-retrieval",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.lean_std_premise_index.diagram.1",
      "module_id": "paper_module.lean_std_premise_index",
      "module_label": "Lean/Std Premise Index",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"core/paper_module_capsules.json paper_module.lean_std_premise_index source basis: source record\"] instance[\"paper_modules/lean_std_premise_index.json generated instance from source record Markdown stays reader projection\"] generated[\"Generated status Mermaid: available_from_capsule_edges Atlas: blocked_until_organ_atlas_owner_lane_binds_edges\"] runtime[\"src/microcosm_core/components/lean_std_premise_index.py run / run_index_bundle / scope_limit\"] standard[\"standards/std_microcosm_lean_std_premise_index.json closed Lean/Std premise-index contract\"] fixtures[\"fixtures/first_wave/lean_std_premise_index/input projection_protocol, premise_index, index_policy, negative cases\"] bundle[\"examples/lean_std_premise_index/exported_lean_std_premise_index_bundle source_module_manifest: 6 copied body modules\"] tests[\"tests/test_lean_std_premise_index.py fixture, manifest, bundle, and runtime-shape checks\"] result records[\"result records/first_wave/lean_std_premise_index result records/runtime_shell/demo_project/components/lean_std_premise_index\"] ceiling[\"Scope limit no Lean/Lake, Mathlib, proof bodies, providers, benchmark authority, source-file changes, public sharing, or launch-scope decision\"] bundle --> instance instance --> generated standard --> runtime fixtures --> runtime bundle --> runtime runtime --> tests tests --> result records generated --> ceiling result records --> ceiling",
      "source_hash": "sha256:9887573ac76c00ecdff9e50436107011224c58598bdb1ae926c0e8a6c85c6da8",
      "source_ref": "microcosm-substrate/paper_modules/lean_std_premise_index.md",
      "canonical_route": "docs/paper-modules.html#paper-module-lean-std-premise-index",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.world_model_projection_drift_control_room.diagram.1",
      "module_id": "paper_module.world_model_projection_drift_control_room",
      "module_label": "World-Model Projection Drift Control Room",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Result record[\"Public runtime result record public_projection_drift_control_lens.json\"] Recompute[\"Recompute drift rows from selected_pattern_ids + result record rows\"] Snapshot[\"Supplied drift_rows.json expected snapshot, source-linked only\"] SourceDiff[\"Source-state diff extracted-pattern ledger + view-quality action map\"] Geometry[\"View-quality geometry grade via copied view_quality_census.py\"] Witness[\"Runtime result record witness every recomputed row appears in the result record\"] Reject[\"Rejection gates missing/fake refs, private export, source authority, live repair, source-file changes, doctrine changes, launch\"] Result records[\"metadata-only result records first-wave, sign-off, exported bundle\"] Ceiling[\"Scope limit projection evidence only\"] Result record --> Recompute Recompute --> Snapshot Recompute --> SourceDiff Recompute --> Witness Recompute --> Geometry Snapshot --> Reject SourceDiff --> Reject Witness --> Reject Geometry --> Reject Reject --> Result records Result records --> Ceiling",
      "source_hash": "sha256:59753dba127a94331e85ebf216db08743cd7989f26835e0afe318113fe453bdd",
      "source_ref": "microcosm-substrate/paper_modules/world_model_projection_drift_control_room.md",
      "canonical_route": "docs/paper-modules.html#paper-module-world-model-projection-drift-control-room",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.public_reveal_walkthrough.diagram.1",
      "module_id": "paper_module.public_reveal_walkthrough",
      "module_label": "Public Reveal Walkthrough",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"JSON bundle paper_module.public_reveal_walkthrough\"] Fixture[\"First-wave public reveal fixture 10-minute route + negative cases\"] Bundle[\"Exported public reveal bundle 5 copied source bodies\"] Runtime[\"Runtime component public_reveal_walkthrough.py\"] Shell[\"Runtime shell bridge microcosm intake + public reveal view\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Reader[\"Cold reader route command -> route -> evidence refs -> ceiling\"] Ceiling[\"Scope limit no launch, hosting, provider, or private-system claims\"] Bundle --> Runtime Fixture --> Runtime Bundle --> Runtime Runtime --> Result records Runtime --> Shell Shell --> Reader Result records --> Reader Reader --> Ceiling",
      "source_hash": "sha256:45d33a6bd66ec9d73c41796c7a5779a901eb9b37fe87c944e828764350c3880f",
      "source_ref": "microcosm-substrate/paper_modules/public_reveal_walkthrough.md",
      "canonical_route": "docs/paper-modules.html#paper-module-public-reveal-walkthrough",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.standards_meta_diagnostics.diagram.1",
      "module_id": "paper_module.standards_meta_diagnostics",
      "module_label": "Standards Meta Diagnostics",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"paper_module bundle: subjects + code_loci + scope limit\"] inventory[\"standards_inventory.json\"] contracts[\"organ_runtime_contracts.json\"] policy[\"diagnostic_policy.json\"] negatives[\"negative fixtures: missing standard, unmapped component, missing result record, overclaim, private source\"] runtime[\"standards_meta_diagnostics.run / run_diagnostics_bundle\"] scan[\"secret_exclusion_scan + public_runtime_refs\"] result record[\"sign-off result record: counts, error codes, scope boundary\"] projections[\"generated navigation projections: mermaid + atlas card\"] bundle --> projections inventory --> runtime contracts --> runtime policy --> runtime negatives --> runtime runtime --> scan scan --> result record runtime --> result record",
      "source_hash": "sha256:a4a84cba972577673380f486135e1e877d7bf28cf07b90095ec22a2c74b06153",
      "source_ref": "microcosm-substrate/paper_modules/standards_meta_diagnostics.md",
      "canonical_route": "docs/paper-modules.html#paper-module-standards-meta-diagnostics",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.finance_forecast_evaluation_spine.diagram.1",
      "module_id": "paper_module.finance_forecast_evaluation_spine",
      "module_label": "Finance Forecast Evaluation Spine",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Fixture[\"Synthetic fixture inputs family_loss_matrix, paired_loss_series, finance_boundary_policy, projection_protocol\"] Source[\"Copied finance modules plus source manifest digests\"] Runner[\"finance_forecast_evaluation_spine.run\"] Guards[\"Guards run first policy no-advice flags, lookahead-split leakage check\"] Blocked[\"Blocked result record statistics subprocess never starts\"] Branch{\"Admissible and exported bundle?\"} Subprocess[\"Statistics subprocess DM/HAC, Hansen SPA, MCS, stationary bootstrap, HLN refusal\"] Standalone[\"Standalone statistics contract no live source-root subprocess\"] Result record[\"Result records refs, hashes, counts, verdicts, scope boundaries; body_in_receipt false\"] Fixture --> Runner Source --> Runner Runner --> Guards Guards -->|\"boundary fails\"| Blocked Guards -->|\"boundary passes\"| Branch Branch -->|\"first-wave fixture\"| Subprocess Branch -->|\"exported bundle\"| Standalone Subprocess --> Result record Standalone --> Result record Blocked --> Result record",
      "source_hash": "sha256:7ba378c16648cb18eae4bf9c2b5acb0b8163afb82614c795473c9e1eee3ad3c7",
      "source_ref": "microcosm-substrate/paper_modules/finance_forecast_evaluation_spine.md",
      "canonical_route": "docs/paper-modules.html#paper-module-finance-forecast-evaluation-spine",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_demo.diagram.1",
      "module_id": "paper_module.engine_room_demo",
      "module_label": "Engine Room Demo",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR A[\"Engine Room fixture cases\"] --> B[\"Accepted component wrapper\"] B --> C[\"Controller coverage audit\"] C --> D[\"10 staged bundle evaluators\"] D --> E[\"14 covered jewel targets\"] C --> F[\"Shared surface integration check\"] B --> G[\"Result, board, validation result record\"] G --> H[\"Sign-off result record\"] A --> I[\"Missing-target negative case\"] I --> C",
      "source_hash": "sha256:cc34faf72753172c7c95afa5b8dbbf6a3c80b3ed69066510896b9eb05ff1d80d",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_demo.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-demo",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.agent_memory_temporal_conflict_replay.diagram.1",
      "module_id": "paper_module.agent_memory_temporal_conflict_replay",
      "module_label": "Agent Memory Temporal-Conflict Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD BodyFloor[\"Source-open body floor\"] -->|digest verified; body_in_receipt=false| Policy[\"Policy vocabulary\"] Policy -->|allows ADD / UPDATE / DELETE / NOOP only| EpisodeA[\"Episode A: ADD rows\"] EpisodeA -->|creates baseline memory metadata| EpisodeB[\"Episode B: UPDATE / DELETE rows\"] EpisodeB -->|touches older memory| ConflictGate[\"Temporal conflict gate\"] ConflictGate -->|requires conflict_edge_ref| DowngradeGate[\"Stale downgrade gate\"] DowngradeGate -->|requires stale_downgrade_ref| Recompute[\"Semantic recompute\"] Recompute -->|checks timestamp, priority, source trust| Enabled[\"Episode C: memory-enabled replay\"] Recompute -->|keeps paired baseline| Disabled[\"Episode C: memory-disabled replay\"] Enabled -->|uses evidence_handle_refs| Delta[\"Answer-delta result record\"] Disabled -->|no memory evidence used| Delta Delta -->|paired by replay_group_id| Trace[\"Public 7-span trace\"] Trace -->|covers events plus cold replays| Result record[\"metadata-only result record\"] Result record -->|omits private bodies and model-output data| Ceiling[\"Scope limit / scope boundary\"] Ceiling -->|denies live-memory and source-authority claims| Done[\"Fixture-level validation claim only\"]",
      "source_hash": "sha256:d2f13800ccca160a8c458d901bf525a075fdac51ed592658820348aef1178a73",
      "source_ref": "microcosm-substrate/paper_modules/agent_memory_temporal_conflict_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-agent-memory-temporal-conflict-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.agent_monitor_redteam_falsification_replay.diagram.1",
      "module_id": "paper_module.agent_monitor_redteam_falsification_replay",
      "module_label": "Agent Monitor Redteam Falsification Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] manifest[\"source_module_manifest.json\"] digest[\"2 source-artifact digest gates\"] cases[\"three trajectory cases\"] policy[\"public monitor policy\"] observations[\"three observations\"] required[\"required refs: span, probe, escalation, mitigation, replay\"] trace[\"public trace verdict recomputation\"] verdicts[\"pass / escalate / block\"] negatives[\"7 negative semantic floors\"] privateScan[\"metadata-only non-public-state scan\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limits\"] bundle --> markdown manifest --> digest digest --> observations cases --> required policy --> required required --> observations observations --> trace trace --> verdicts negatives --> result record digest --> privateScan verdicts --> result record privateScan --> result record result record --> ceiling",
      "source_hash": "sha256:dc11228527571d1a549984bec8a2b8fd003628ddcf7a4a068f0c2398e76f54d1",
      "source_ref": "microcosm-substrate/paper_modules/agent_monitor_redteam_falsification_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.agent_sabotage_scheming_monitor_replay.diagram.1",
      "module_id": "paper_module.agent_sabotage_scheming_monitor_replay",
      "module_label": "Agent Sabotage Scheming-Monitor Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON bundle authority\"] fixture[\"fixture or exported bundle\"] episodes[\"task episodes\"] actions[\"action traces\"] scores[\"monitor scores\"] sourceManifest[\"source module manifest\"] sourceArtifacts[\"digest-checked public artifacts\"] counterfactual[\"counterfactual replay\"] cold[\"cold replay\"] recompute[\"public trace recomputation\"] negatives[\"negative/falsification cases\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limit\"] bundle --> fixture fixture --> episodes fixture --> actions fixture --> scores fixture --> counterfactual fixture --> cold fixture --> sourceManifest sourceManifest --> sourceArtifacts episodes --> recompute actions --> recompute scores --> recompute counterfactual --> recompute cold --> recompute negatives --> result record sourceArtifacts --> result record recompute --> result record result record --> ceiling",
      "source_hash": "sha256:e880f407048ad4b77c7f392f6536468ac6043342f10a8bc406d2de1349d2e203",
      "source_ref": "microcosm-substrate/paper_modules/agent_sabotage_scheming_monitor_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-agent-sabotage-scheming-monitor-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.agent_sandbox_policy_escape_replay.diagram.1",
      "module_id": "paper_module.agent_sandbox_policy_escape_replay",
      "module_label": "Agent Sandbox Policy-Escape Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] manifest[\"source module manifest\"] requests[\"six action requests\"] verdicts[\"six pre-execution verdicts\"] effects[\"six side-effect result records\"] rollbacks[\"two rollback result records\"] replay[\"six cold replay rows\"] trace[\"public agent-execution trace\"] negative[\"negative-case refusals\"] tests[\"focused proof consumer\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limits\"] bundle --> markdown manifest --> result record requests --> verdicts verdicts --> effects effects --> rollbacks effects --> replay verdicts --> negative effects --> negative replay --> trace negative --> tests trace --> result record tests --> result record result record --> ceiling",
      "source_hash": "sha256:b954ad21a7c2b9dc9afb4dcc0aa4e0647f834e22292815f3c9c0f34114cc883e",
      "source_ref": "microcosm-substrate/paper_modules/agent_sandbox_policy_escape_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-agent-sandbox-policy-escape-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.belief_state_process_reward_replay.diagram.1",
      "module_id": "paper_module.belief_state_process_reward_replay",
      "module_label": "Belief-State Process Reward Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON source record paper_module_capsules.json[36]\"] standard[\"Local standard std_microcosm_belief_state_process_reward_replay.json\"] component[\"Runtime locus belief_state_process_reward_replay.py\"] fixtureMode[\"run (fixture mode) 8 positive + 7 negative inputs\"] bundleMode[\"run_reward_bundle (bundle mode) copied-body manifest floor required\"] floors[\"Per-file floors projection protocol, reward policy, episodes, belief states, feedback, rewards, trajectory groups, cold replay\"] recompute[\"Semantic recompute rebuild belief -> feedback -> process reward -> trajectory -> outcome reward -> cold replay\"] negatives[\"Negative cases 7 planted traps must be observed\"] scan[\"Secret-exclusion scan plus metadata-only public trace span set\"] gate{\"All floors pass, chain recomputes, every trap observed, no secret hit?\"} pass[\"status: pass\"] blocked[\"status: blocked with reason codes\"] result records[\"Result records + compact card refs, hashes, counts, verdicts; body_in_receipt false\"] ceiling[\"Scope limit source-faithful replay only\"] bundle --> component standard --> component component --> fixtureMode component --> bundleMode fixtureMode --> floors bundleMode --> floors floors --> recompute recompute --> negatives negatives --> scan scan --> gate gate -->|yes| pass gate -->|no| blocked pass --> result records blocked --> result records result records --> ceiling",
      "source_hash": "sha256:40825d077645197cdf15539a006419fdeb994be4d5ddbec9250e0e2d0bb73b16",
      "source_ref": "microcosm-substrate/paper_modules/belief_state_process_reward_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-belief-state-process-reward-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.sleeper_memory_poisoning_quarantine_replay.diagram.1",
      "module_id": "paper_module.sleeper_memory_poisoning_quarantine_replay",
      "module_label": "Sleeper Memory Poisoning Quarantine Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD inputs[\"Public metadata inputs sessions, write proposals, retrieval replays, rollback rows\"] subgraph Gates[\"Four ordered gates\"] provenance[\"Provenance gate poisoned write quarantined + provenance-bound control admitted\"] influence[\"Delayed-influence gate later retrieval blocked before action, same memory ref + audit + cold-replay ref\"] rollback[\"Rollback gate deletion audit + cold-rerun result record + memory absent after rerun\"] bodies[\"Source-body gate copied bodies digest-checked, result records stay metadata-only\"] end negatives[\"Eight negative cases each must be observed as a typed finding\"] result records[\"metadata-only result records refs, hashes, counts, verdicts\"] ceiling[\"Scope limit synthetic replay only\"] inputs --> provenance provenance -->|quarantined memory ref| influence influence --> rollback rollback --> bodies inputs --> negatives provenance --> result records influence --> result records rollback --> result records bodies --> result records negatives --> result records result records --> ceiling",
      "source_hash": "sha256:59a2bc92da0366b1624e689ed68dcff0d3638de0028642d63c586db4599d3ba1",
      "source_ref": "microcosm-substrate/paper_modules/sleeper_memory_poisoning_quarantine_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-sleeper-memory-poisoning-quarantine-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.indirect_prompt_injection_information_flow_policy_replay.diagram.1",
      "module_id": "paper_module.indirect_prompt_injection_information_flow_policy_replay",
      "module_label": "Indirect Prompt-Injection Information-Flow Policy Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD sources[\"Source rows trusted and untrusted, with taint labels\"] flows[\"Source-to-sink flow rows (declared taint and verdict)\"] propagate[\"Propagate taint along the source-to-sink graph\"] derive[\"Derive verdict from taint + sink privilege + sanitizer + sink kind + action\"] compare{\"Declared labels and verdict match the derived ones?\"} blocked[\"Block the row (relabelled or wrong verdict)\"] gate{\"Untrusted into a privileged sink?\"} verdicts[\"Pre-action verdict allow / warn / review / block\"] outputs[\"Sanitized output no trusted context disclosed, no untrusted instruction obeyed\"] toolspan[\"One public tool-call trace span treated as untrusted tool output\"] result records[\"metadata-only result records refs, digests, counts, status\"] sources --> flows flows --> propagate propagate --> derive derive --> compare compare -- no --> blocked compare -- yes --> gate gate -- yes --> verdicts gate -- no --> verdicts verdicts --> outputs toolspan --> propagate outputs --> result records blocked --> result records",
      "source_hash": "sha256:d39bdce91f262ab0bbb93ae8f16c5c7a2f0ab63460fca6c13d0e1348e831938e",
      "source_ref": "microcosm-substrate/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-indirect-prompt-injection-information-flow-policy-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.mcp_tool_authority_replay.diagram.1",
      "module_id": "paper_module.mcp_tool_authority_replay",
      "module_label": "MCP Tool Authority Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"MCP authority runtime\"] fixture[\"first-wave fixture\"] bundle[\"exported authority bundle\"] manifest[\"tool manifest\"] calls[\"scoped tool calls\"] results[\"tool result rows\"] side_effects[\"side-effect ledger\"] replay[\"cold replay rows\"] trace[\"public trace spans\"] source_modules[\"source-module body floor\"] result records[\"metadata-only result records\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle bundle --> manifest manifest --> calls calls --> results calls --> side_effects side_effects --> replay results --> trace replay --> trace source_modules --> trace trace --> result records result records --> ceiling",
      "source_hash": "sha256:87f5bee4b36bfd37bcca16e7ba6ff489e3be2de3ce35114da33622eb7b7c21e4",
      "source_ref": "microcosm-substrate/paper_modules/mcp_tool_authority_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-mcp-tool-authority-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.tactic_portfolio_availability.diagram.1",
      "module_id": "paper_module.tactic_portfolio_availability",
      "module_label": "Tactic Portfolio Availability",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Copied Lean/Std affordance probe rows (compile_status, requires_mathlib, duration_ms)\"] --> B[\"tactic_portfolio_availability_probe\"] C[\"Environment probe mathlib_lake_project_import_available\"] --> B B --> D{\"Copied compile_status\"} D -->|PASS| E[\"available band duration fast / moderate / slow\"] D -->|FAIL + requires_mathlib + Mathlib absent| F[\"environment_fail reason MATHLIB_IMPORT_MISSING\"] D -->|FAIL otherwise| G[\"compile_fail\"] E --> H[\"Availability board for target-shape routing\"] F --> H G --> H I[\"Downstream tactic reference\"] --> J{\"Tactic in probed portfolio?\"} J -->|no| K[\"Rejected: unprobed tactic referenced\"] J -->|yes| H B --> L[\"metadata-only fixture and bundle result records no proof, Lean, or provider bodies\"] L --> M[\"Generated paper-module row and validation result records\"]",
      "source_hash": "sha256:38e4b18430b85bcac4484f389e79552b7576ebffbd68c29a3580b119b9f0d5e2",
      "source_ref": "microcosm-substrate/paper_modules/tactic_portfolio_availability.md",
      "canonical_route": "docs/paper-modules.html#paper-module-tactic-portfolio-availability",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.target_shape_tactic_routing.diagram.1",
      "module_id": "paper_module.target_shape_tactic_routing",
      "module_label": "Target Shape Tactic Routing",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"JSON bundle paper_module.target_shape_tactic_routing\"] structured source record[\"Generated structured source record paper_modules/target_shape_tactic_routing.json\"] Component[\"Runtime component target_shape_tactic_routing_gate.py\"] Portfolio[\"Tactic probe portfolio available/unavailable tactic ids\"] Routes[\"Target-shape route cases pre_execution selected tactics\"] SourceFloor[\"Copied Ring2 source artifacts 4 body imports, body_in_receipt=false\"] Decisions{\"Route admissible before proof execution?\"} Result records[\"Result records result, board, validation, sign-off\"] Tests[\"Focused tests negative cases and digest checks\"] Ceiling[\"Scope limit no Lean/Lake, proof, provider, post-execution, launch\"] Bundle --> structured source record Bundle --> Component Component --> Portfolio Component --> Routes Portfolio --> Decisions Routes --> Decisions SourceFloor --> Decisions Decisions --> Result records Tests --> Result records Result records --> Ceiling",
      "source_hash": "sha256:0548790beff38ad3d3b3daac0463f333bb2a27bd8aba0a6dad71e9ceaea695c2",
      "source_ref": "microcosm-substrate/paper_modules/target_shape_tactic_routing.md",
      "canonical_route": "docs/paper-modules.html#paper-module-target-shape-tactic-routing",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.ring2_premise_precision_recall.diagram.1",
      "module_id": "paper_module.ring2_premise_precision_recall",
      "module_label": "Ring-2 Premise Precision Recall",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"source record core/paper_module_capsules.json[42]\"] --> JSON[\"structured source record paper_modules/ring2_premise_precision_recall.json\"] JSON --> Markdown[\"this page reader projection\"] JSON --> Mermaid[\"diagram view available_from_capsule_edges\"] JSON --> Atlas[\"map view organ_atlas.ring2_premise_retrieval_precision_recall_harness\"] Fixture[\"fixture input fixtures/first_wave/.../input\"] --> Runtime[\"runtime component ring2_premise_retrieval_precision_recall_harness.py\"] Bundle[\"exported bundle examples/.../exported_ring2_precision_recall_bundle\"] --> Runtime Runtime --> Metrics[\"precision/recall labels retrieval vs proof-failure attribution\"] Runtime --> Result records[\"validation result records first_wave + runtime_shell\"] Runtime --> Negatives[\"negative cases leakage, tuning, overclaim, missing decoy\"] Result records --> Boundary[\"proof boundary metrics and copied artifacts only\"]",
      "source_hash": "sha256:ed0e7e2605d0669cd1de354147f3a533bf7c35b3c99c1aa7a3048416448dcaa1",
      "source_ref": "microcosm-substrate/paper_modules/ring2_premise_precision_recall.md",
      "canonical_route": "docs/paper-modules.html#paper-module-ring2-premise-precision-recall",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.mathematical_strategy_atlas.diagram.1",
      "module_id": "paper_module.mathematical_strategy_atlas",
      "module_label": "Mathematical Strategy Atlas",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD subgraph Inputs[\"Public inputs\"] atlas[\"strategy_atlas.json trigger / negative / retrieval terms\"] features[\"problem_features.json feature tags, oracle hidden\"] cases[\"hypothesis_cases.json candidate strategy ids\"] end subgraph Scoring[\"Per-candidate scoring\"] score[\"score = trigger_hits x4 - negative_hits x3 + retrieval_bonus (cap 2)\"] rank[\"rank positive scores tie-break by order, then id\"] end select{\"any positive score?\"} selected[\"selected_strategy_id + score components\"] miss[\"STRATEGY_SELECTION_MISS (unknown)\"] recheck[\"recompute vs declared selection / score / ranking\"] result records[\"metadata-only result records refs, counts, hits, verdicts\"] ceiling[\"Scope limit no Lean/Lake, oracle labels, external model access, or launch\"] atlas --> score features --> score cases --> score score --> rank rank --> select select -- yes --> selected select -- no --> miss selected --> recheck miss --> recheck recheck --> result records result records --> ceiling",
      "source_hash": "sha256:e0300a89414989ef36a1074cd1e834317fa1cb44473c9fe6c83e1d497940386d",
      "source_ref": "microcosm-substrate/paper_modules/mathematical_strategy_atlas.md",
      "canonical_route": "docs/paper-modules.html#paper-module-mathematical-strategy-atlas",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.verifier_lab_execution_spine.diagram.1",
      "module_id": "paper_module.verifier_lab_execution_spine",
      "module_label": "Verifier Lab Execution Spine",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Packet[\"Execution packet transition candidates, CP2 requests, Evolve mutations, oracle/provider refs\"] Gate[\"Leak contract gate forbidden fields? oracle/provider visible? action class out of vocabulary?\"] Rejected[\"contract_rejected rejected before Lean runs\"] Build[\"Build Lake project lake build MicrocosmProofWitness (once, cached)\"] Run[\"Run candidate write .lean, lake env lean, return code = accepted?\"] Verified[\"lean_verified return code 0\"] Residual[\"retrieval_miss / proof_synthesis_fail non-zero return code\"] CP2[\"cp2_translated typed next action, no proof body\"] Evolve[\"evolve_candidate / evolve_accepted bounded policy artifacts only\"] Refs[\"oracle_compared / provider_suggested references, never counted as success\"] Counters[\"Authority counters oracle_forward_success = 0, provider_results = 0, proof_body_export = 0\"] Result records[\"metadata-only result records result, board, validation, sign-off; return codes kept, bodies omitted\"] Ceiling[\"Scope limit bounded public transition result record only\"] Packet --> Gate Gate -->|leak found| Rejected Gate -->|clean| Build Build --> Run Run -->|exit 0| Verified Run -->|non-zero| Residual Packet --> CP2 Packet --> Evolve Packet --> Refs Verified --> Counters Residual --> Counters CP2 --> Counters Evolve --> Counters Refs --> Counters Rejected --> Result records Counters --> Result records Result records --> Ceiling",
      "source_hash": "sha256:55451913d4d912b932bdbf7f46d1704e7883c7b5b59a2ad3dc78bda28806507e",
      "source_ref": "microcosm-substrate/paper_modules/verifier_lab_execution_spine.md",
      "canonical_route": "docs/paper-modules.html#paper-module-verifier-lab-execution-spine",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.bounded_autonomy_campaign_packet.diagram.1",
      "module_id": "paper_module.bounded_autonomy_campaign_packet",
      "module_label": "Bounded Autonomy Campaign Packet",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Inputs[\"Public synthetic inputs coverage_gaps, campaign_policy, failed_campaign_digests\"] PolicyGate{\"campaign_policy allows write_source?\"} Witness[\"Read-only builder witness build_standard_skill_pairing_campaign.py --check --report\"] WitnessGate{\"reports candidate targets and wrote_packet unset?\"} Draft[\"Draft candidate packet write_surface: none, requires_human_review, source_mutation: false\"] DigestGate{\"failed digest repeated?\"} Refuse[\"Refuse SOURCE_WRITE_FORBIDDEN / REPEATED_FAILED_DIGEST / witness blocked\"] Result records[\"metadata-only result records refs, digests, stdout/stderr hashes; builder output bodies excluded\"] Ceiling[\"Scope limit no self-repair, source-file changes, providers, launch, or public sharing\"] Inputs --> PolicyGate PolicyGate -- \"yes\" --> Refuse PolicyGate -- \"no\" --> Witness Witness --> WitnessGate WitnessGate -- \"no\" --> Refuse WitnessGate -- \"yes\" --> Draft Draft --> DigestGate DigestGate -- \"yes\" --> Refuse DigestGate -- \"no\" --> Result records Refuse --> Result records Result records --> Ceiling",
      "source_hash": "sha256:36a8748109745a7642777567ee2061ac0a58a4227fbd3ad8377841165a322cba",
      "source_ref": "microcosm-substrate/paper_modules/bounded_autonomy_campaign_packet.md",
      "canonical_route": "docs/paper-modules.html#paper-module-bounded-autonomy-campaign-packet",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.computer_use_action_trace_replay.diagram.1",
      "module_id": "paper_module.computer_use_action_trace_replay",
      "module_label": "Computer-Use Action Trace Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON source record\"] bundle --> mermaid[\"generated Mermaid available\"] bundle --> atlas[\"generated Atlas linked\"] bundle --> component[\"agent_route_observability_runtime runtime\"] component --> bundle[\"exported computer-use bundle\"] bundle --> observations[\"visible observations: digest + visible-state hash, no raw pixels\"] observations --> actions[\"action rows: cite observation + affordance, allowed kind, redacted\"] actions --> verdicts[\"pre-action authority verdict per action\"] verdicts -->|allow| executed[\"transition: executed + oracle status pass\"] verdicts -->|block or review| held[\"transition: not executed + blocked / review-required\"] held --> recovery[\"recovery result record, no upgrade to executed\"] executed --> cold[\"cold replay reproduces action, verdict, transition\"] recovery --> cold cold --> trace[\"public trace spans: refs, counts, hashes, redaction posture\"] trace --> result record[\"metadata-only validation result record\"] result record --> ceiling[\"scope limit: no live control\"]",
      "source_hash": "sha256:b06e705700669dba51ecf7c2b262a137f4426710811928646d39d39a5b693702",
      "source_ref": "microcosm-substrate/paper_modules/computer_use_action_trace_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-computer-use-action-trace-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.concurrency_mission_control.diagram.1",
      "module_id": "paper_module.concurrency_mission_control",
      "module_label": "Concurrency Mission Control",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Builder[\"Copied source builder run in temp seed root: mission board, bridges, result record\"] Bridge[\"Public bridge artifacts provider canary and work log cap economy\"] Seed[\"work log seed-speed snapshot claims, heartbeats, collisions, session cards\"] subgraph Engines[\"Six engines (all must pass)\"] Matrix[\"failure_matrix_gate conflict, duplicate run, dependency, lease, result record, finalizer visible\"] Membrane[\"bridge_authority_membrane bridges green, authority-collapse zero, forbidden claims blocked\"] SeedGate[\"work_ledger_seed_speed_gate heartbeat current, path claims collision-free\"] SurfaceLens[\"generated_surface_claim_lens dirty generated file: owner live / stale / absent -> allowed action\"] ClosureLens[\"closure_state_lens closed and committed, validation deferred, or open and unclassified\"] end Negative[\"Negative floor missing seed root, blocked bridge, authority collapse, private runtime, claim collision\"] Result record[\"metadata-only result records refs, digests, anchors, counts, verdicts; no session or proof bodies\"] Builder --> Matrix Builder --> Membrane Bridge --> Membrane Seed --> SeedGate Seed --> SurfaceLens Seed --> ClosureLens Engines --> Negative Negative --> Result record",
      "source_hash": "sha256:f852dadb923f4d1ede2737dc13dafa9ad07aa708fa5326241431a9f570f63f3b",
      "source_ref": "microcosm-substrate/paper_modules/concurrency_mission_control.md",
      "canonical_route": "docs/paper-modules.html#paper-module-concurrency-mission-control",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.doctrine_fact_claim_audit.diagram.1",
      "module_id": "paper_module.doctrine_fact_claim_audit",
      "module_label": "Doctrine Fact Claim Audit",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Facts[\"fact_assertions.json facts + expected_fact_count\"] --> Eval[\"evaluate\"] Dag[\"fact_dag.json edges\"] --> Eval Numerics[\"numeric_claims.json cases\"] --> Eval Manifest[\"source module manifest copied bodies\"] --> Eval Eval --> Count{\"declared fact count = table length?\"} Eval --> Loci{\"each code locus path on disk + anchor in body?\"} Eval --> DagRef{\"DAG endpoints are known fact ids?\"} Eval --> Bound{\"current-state numerics bound to a fact assertion section?\"} Count -->|mismatch| Block[\"typed blocking finding\"] Loci -->|missing path or anchor| Block DagRef -->|dead ref| Block Bound -->|unbound| Block Count -->|ok| Result record[\"metadata-only result record body_in_receipt: false\"] Loci -->|ok| Result record DagRef -->|ok| Result record Bound -->|ok| Result record Neg[\"evaluate_negative_case mutate fixture, rerun evaluator\"] --> Codes[\"expected stable error codes\"]",
      "source_hash": "sha256:d4f5857e4034b44a959b14c6fdcb830850cdda55e26da350ce853621d437ba33",
      "source_ref": "microcosm-substrate/paper_modules/doctrine_fact_claim_audit.md",
      "canonical_route": "docs/paper-modules.html#paper-module-doctrine-fact-claim-audit",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.self_ignorance_coverage_ledger.diagram.1",
      "module_id": "paper_module.self_ignorance_coverage_ledger",
      "module_label": "Self-Ignorance Coverage Ledger",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR KA[\"Live Kind Atlas rows 503 selected rows\"] Graph[\"System Atlas graph slice 307 materialized entities\"] Proto[\"projection_protocol.json scope + build_system_atlas.py result record\"] Source[\"Source source files concept/mechanism/standard ids\"] Manifest[\"source_module_manifest.json copied_non_secret_macro_body\"] Eval[\"evaluate()\"] Neg[\"semantic negative-case replay\"] Debt[\"known debt vector 196 units\"] Result record[\"metadata-only result records counts, refs, hashes, scope boundaries\"] Ceiling[\"scope limit known debt projection only\"] KA --> Eval Graph --> Eval Proto --> Eval Source --> Eval Manifest --> Eval Eval --> Debt Eval --> Neg Debt --> Result record Neg --> Result record Result record --> Ceiling",
      "source_hash": "sha256:7cf316b0fbd9f77a37d11eb5d9720fbdad90f3a8c9ef853388af9971eb46fdde",
      "source_ref": "microcosm-substrate/paper_modules/self_ignorance_coverage_ledger.md",
      "canonical_route": "docs/paper-modules.html#paper-module-self-ignorance-coverage-ledger",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.tool_server_pressure_inventory.diagram.1",
      "module_id": "paper_module.tool_server_pressure_inventory",
      "module_label": "Tool Server Pressure Inventory",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Fixture[\"Synthetic pressure fixture process_table, pressure_policy, owner_classes\"] Classifier[\"Classify helper kind, walk owner chain (up to 8 hops), hash command to command_hash\"] Owner{\"Owner status?\"} Detached[\"Detached orphan ppid == 1\"] Keep[\"Active owner or keep runtime\"] SafeClose[\"candidate_safe_close only if allowlisted and age >= min\"] Check[\"requires_owner_check or keep\"] launch[\"Over-budget owner: launch REQUEST, never a kill\"] Negative[\"Boundary failures unsafe safe-close, command leak, process signal, absolute path, launch overclaim\"] Source[\"Source manifest public refactor digest + anchors\"] Result records[\"metadata-only result records result, board, validation, fixture sign-off\"] Fixture --> Classifier Classifier --> Owner Owner --> Detached Owner --> Keep Detached --> SafeClose Detached --> Check Keep --> Check Keep --> launch Classifier --> Negative SafeClose --> Result records Check --> Result records launch --> Result records Negative --> Result records Source --> Result records",
      "source_hash": "sha256:b4217e2ab162bd24f55837b837186b1721eb085944e138cfa1de5519704c37b1",
      "source_ref": "microcosm-substrate/paper_modules/tool_server_pressure_inventory.md",
      "canonical_route": "docs/paper-modules.html#paper-module-tool-server-pressure-inventory",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.mechanistic_interpretability_circuit_attribution_replay.diagram.1",
      "module_id": "paper_module.mechanistic_interpretability_circuit_attribution_replay",
      "module_label": "Mechanistic Interpretability Circuit Attribution Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"JSON bundle paper_module.mechanistic_interpretability_circuit_attribution_replay\"] Fixture[\"Fixture / exported bundle feature catalog, replay rows, toy-transformer spec\"] Policy[\"Policy gates required fields, forbidden private/raw exports, faithfulness limits\"] Graph[\"Graph analyzer feature ids -> edges -> public error nodes\"] Toy[\"Toy-transformer replay forward + gradient + ablation recomputation\"] Source[\"Source-open body floor copied source bodies + digest checks\"] Result records[\"metadata-only result records refs, digests, counts, verdicts\"] Ceiling[\"Scope limit public replay accounting only\"] Bundle --> Fixture Fixture --> Policy Fixture --> Graph Fixture --> Toy Fixture --> Source Policy --> Result records Graph --> Result records Toy --> Result records Source --> Result records Result records --> Ceiling",
      "source_hash": "sha256:2d52fb4301ef5a928a1787bc70375a34a8482a4ae0dff9a170c310bd2af3c6c1",
      "source_ref": "microcosm-substrate/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-mechanistic-interpretability-circuit-attribution-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.spatial_world_model_counterfactual_simulation_replay.diagram.1",
      "module_id": "paper_module.spatial_world_model_counterfactual_simulation_replay",
      "module_label": "Spatial World Model Counterfactual Simulation Replay",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Scene[\"Scene-state row actor count + topology\"] --> Replay[\"Counterfactual replay row event + sensor refs + budget\"] Replay --> Step[\"Deterministic toy gridworld step 8x8 bounded recomputation\"] Step --> Actual[\"Actual next state actor delta + spawn cells\"] Replay --> Expected[\"Declared predicted state transition diff + oracle check\"] Actual --> Compare{\"Actual matches declared transition?\"} Expected --> Compare Compare -->|yes| Result record[\"metadata-only pass result record counts + refs + digests\"] Compare -->|no| Finding[\"Typed mismatch finding blocked status\"] Replay --> Boundary{\"Forbidden payload or claim?\"} Boundary -->|no| Result record Boundary -->|yes| Finding",
      "source_hash": "sha256:dd35214cb2a9d31144afab9f482d2f2be5bb892406e7ff63a1beb747973ca3f0",
      "source_ref": "microcosm-substrate/paper_modules/spatial_world_model_counterfactual_simulation_replay.md",
      "canonical_route": "docs/paper-modules.html#paper-module-spatial-world-model-counterfactual-simulation-replay",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.prediction_oracle_reconciliation.diagram.1",
      "module_id": "paper_module.prediction_oracle_reconciliation",
      "module_label": "Prediction Oracle Reconciliation",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Packet[\"Synthetic prediction packet target universe, CP1 branches, CP2 predictions, oracle diff, numeric rows, dossier mutations\"] CP1[\"CP1 resolution chosen side + rationale + why the opposite side lost; equity lane needs confirmation\"] CP2[\"CP2 universe + evidence target inside declared universe; evidence must be pre-target (T-)\"] Numeric[\"Recomputed numeric grading abs error, percent error, direction hit recomputed; claimed values must match\"] Oracle[\"Oracle diff + mutation realized vs predicted direction; bounded dossier deltas\"] LargeMiss[\"Direction-right, numeric-miss surfaced, not hidden\"] Gated[\"Degraded / missing-truth rows gated, not fabricated\"] Result records[\"metadata-only result records result, board, validation, sign-off; counts and verdicts\"] Ceiling[\"Scope limit synthetic fixture only; no trading, advice, provider, live market, publish, launch\"] Packet --> CP1 Packet --> CP2 Packet --> Numeric Packet --> Oracle Numeric --> LargeMiss Numeric --> Gated CP1 --> Result records CP2 --> Result records LargeMiss --> Result records Gated --> Result records Oracle --> Result records Result records --> Ceiling",
      "source_hash": "sha256:191721619721d20cd10449cd88dd7593711a7c8639515f1104ddddc48bd40fee",
      "source_ref": "microcosm-substrate/paper_modules/prediction_oracle_reconciliation.md",
      "canonical_route": "docs/paper-modules.html#paper-module-prediction-oracle-reconciliation",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.provider_context_recipe_budget.diagram.1",
      "module_id": "paper_module.provider_context_recipe_budget",
      "module_label": "Provider Context Recipe Budget",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"JSON bundle paper_module.provider_context_recipe_budget\"] --> Instance[\"Generated instance 19 relationships, no selective residuals\"] Bundle --> Markdown[\"Reader projection provider_context_recipe_budget.md\"] Recipes[\"provider_context_recipes.json 6 public recipe budgets\"] --> Runtime[\"provider_context_recipe_budget_policy.py\"] Sections[\"section_materials.json 9 source-backed sections\"] --> Runtime SourceManifest[\"source_module_manifest.json 8 copied bodies\"] --> Runtime NegativeCases[\"negative fixtures 7 forbidden-boundary cases\"] --> Runtime Runtime --> Projection[\"context_packets included/omitted sections, byte counts, routes\"] Runtime --> Result records[\"metadata-only result records result, board, validation, sign-off\"] Projection --> Ceiling[\"scope limit no provider/proof/launch-scope decision\"] Result records --> Ceiling",
      "source_hash": "sha256:35fc396f20ff56ed971d7167445dd746b608bdc4e4f3c26a4752db3823e55e69",
      "source_ref": "microcosm-substrate/paper_modules/provider_context_recipe_budget.md",
      "canonical_route": "docs/paper-modules.html#paper-module-provider-context-recipe-budget",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.undeclared_library_prior_classifier.diagram.1",
      "module_id": "paper_module.undeclared_library_prior_classifier",
      "module_label": "Undeclared Library Prior Classifier",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON source record paper_module.undeclared_library_prior_classifier\"] structured source record[\"structured source record 19 edges, no selective residuals\"] runtime[\"Runtime component undeclared_library_prior_symbol_classifier.py\"] premise[\"Copied Lean/Std premise index 11 sanctioned symbols\"] observations[\"Pre-extracted symbol observations Nat/List/Bool/Iff/Eq refs\"] budget[\"cited_unallowed_premise_ids present\"] residual[\"Known qualified symbol outside allowed_premise_ids\"] clean[\"Allowed symbol or no known undeclared symbol\"] retry[\"PREMISE_BUDGET_VIOLATION route: retry\"] escalate[\"UNDECLARED_LIBRARY_PRIOR route: bridge_escalate\"] advisory[\"NONE route: accept_as_advisory\"] result records[\"Result record stream fixture, board, validation, sign-off\"] ceiling[\"Scope limit no Lean/Lake, proof, provider, launch, private-system claim\"] bundle --> structured source record structured source record --> runtime runtime --> premise runtime --> observations observations --> budget observations --> residual observations --> clean budget --> retry residual --> escalate clean --> advisory retry --> result records escalate --> result records advisory --> result records result records --> ceiling",
      "source_hash": "sha256:cb516b3ee00f0b842b65a4096a7b0065d1517061f09a2c46a780aa8da562edf1",
      "source_ref": "microcosm-substrate/paper_modules/undeclared_library_prior_classifier.md",
      "canonical_route": "docs/paper-modules.html#paper-module-undeclared-library-prior-classifier",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.voice_to_doctrine_self_improvement_loop.diagram.1",
      "module_id": "paper_module.voice_to_doctrine_self_improvement_loop",
      "module_label": "Voice to Doctrine Self-Improvement Loop",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Signal[\"Local pressure mistake, route gap, validation finding, residual\"] Classify[\"Classify owner surface + action\"] Owner[\"Owner surface skill, paper module, standard, Work item\"] Refused[\"Refused raw voice, private body, direct node edit, result record-only, unvalidated promotion\"] subgraph Outcome[\"One of four typed outcomes\"] Refined[\"refined_existing_surface changed ref + validation\"] Captured[\"workitem_captured with re-entry condition\"] Null[\"nothing_to_refine stewardship + next-lane checked\"] Already[\"already_propagated_verified\"] end Recompute[\"Recompute verdict from evidence expected_label ignored\"] Validate[\"Validation owner evidence + completion ref; every ref must resolve\"] Source[\"Exact source bodies 8 manifest rows: hashes, anchors\"] Result records[\"metadata-only result records result, board, validation, fixture sign-off\"] Signal --> Classify Classify --> Owner Owner --> Refused Owner --> Outcome Outcome --> Recompute Recompute --> Validate Source --> Result records Validate --> Result records Refused --> Result records",
      "source_hash": "sha256:2c67518e56832066010bd26e7e6c33cefbe8292042f9963d49138c0487372e12",
      "source_ref": "microcosm-substrate/paper_modules/voice_to_doctrine_self_improvement_loop.md",
      "canonical_route": "docs/paper-modules.html#paper-module-voice-to-doctrine-self-improvement-loop",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.routing_anti_patterns_registry.diagram.1",
      "module_id": "paper_module.routing_anti_patterns_registry",
      "module_label": "Routing Anti-Patterns Registry",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"core/paper_module_capsules.json paper_module.routing_anti_patterns_registry\"] Standard[\"standards/std_microcosm_routing_anti_patterns_registry.json\"] Markdown[\"paper_modules/routing_anti_patterns_registry.md reader projection; not route authority\"] Runtime[\"src/microcosm_core/components/routing_anti_patterns_registry.py run / run-bundle / result record writer\"] Fixture[\"fixtures/first_wave/routing_anti_patterns_registry/input registry + negative cases\"] Bundle[\"examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle source_module_manifest + exact copied body\"] Tests[\"tests/test_routing_anti_patterns_registry.py\"] Result records[\"result records/.../routing_anti_patterns_registry*.json refs, hashes, counts, verdicts\"] structured source record[\"paper_modules/routing_anti_patterns_registry.json 22 edges; Mermaid available; Atlas linked\"] Ceiling[\"Scope limit no route authority, mutation, external model access, launch, or whole-system proof\"] Bundle --> Markdown Bundle --> structured source record Standard --> Runtime Fixture --> Runtime Bundle --> Runtime Runtime --> Tests Runtime --> Result records Tests --> Result records structured source record --> Ceiling Result records --> Ceiling Markdown --> Ceiling",
      "source_hash": "sha256:a9e129ddfc8118e910060c8c9a3db1e27300f3bc456a58ad2ceeff869de03405",
      "source_ref": "microcosm-substrate/paper_modules/routing_anti_patterns_registry.md",
      "canonical_route": "docs/paper-modules.html#paper-module-routing-anti-patterns-registry",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch8_audio_level_rms_port.diagram.1",
      "module_id": "paper_module.batch8_audio_level_rms_port",
      "module_label": "Set 8 Audio Level RMS Port",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD swift[\"Copied Swift source AudioLevelMonitor.normalizedLevel metadata-only; anchors only\"] manifest[\"Public probe manifest synthetic sample arrays + WAV bytes expected level per case\"] samples[\"normalized_level(samples, format)\"] fmt{\"format tag?\"} refuse[\"raise ValueError unsupported format refused\"] empty{\"buffer empty?\"} zero[\"return 0.0\"] scale[\"square + accumulate int16 divided by 32767\"] rms[\"rms = sqrt(total / count)\"] clamp[\"min(max(rms * 8, 0), 1) scaled, then clamped to 0..1\"] compare[\"compare observed vs expected within tolerance\"] verdict{\"any finding?\"} blocked[\"status: blocked\"] passed[\"status: pass\"] ceiling[\"Scope limit RMS parity over public fixtures only no audio session, microphone, device, source-file changes, public sharing, or launch\"] swift --> samples manifest --> samples samples --> fmt fmt -->|\"not float32/int16\"| refuse fmt -->|\"float32 or int16\"| empty empty -->|\"yes\"| zero empty -->|\"no\"| scale scale --> rms rms --> clamp clamp --> compare refuse --> compare zero --> compare compare --> verdict verdict -->|\"yes\"| blocked verdict -->|\"no\"| passed blocked --> ceiling passed --> ceiling",
      "source_hash": "sha256:9661d52ab724bdec4978dd913e85c2213b16ef150570e75f13731b38d23655ec",
      "source_ref": "microcosm-substrate/paper_modules/batch8_audio_level_rms_port.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch8-audio-level-rms-port",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch8_compliance_pipeline_capsule.diagram.1",
      "module_id": "paper_module.batch8_compliance_pipeline_capsule",
      "module_label": "Set 8 Compliance Pipeline Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR bundle[\"Copied source bundle 11 source bodies body_in_receipt: false\"] subgraph Compliance[\"Compliance subsystem (3 engines)\"] reg[\"Registry runtime witness adapter table, scan_all, coverage self-audit\"] bounded[\"Bounded ledger check --check --report reports ok, wrote_ledger: false\"] base[\"Baseline scanner contract row admits no domain adapter\"] end subgraph Pipeline[\"Observe pipeline (3 engines)\"] digest[\"Digest and shard helpers buried directive survives; status normalised, variant kept\"] compile[\"Compile helpers file mentions, follow-ups, probe questions\"] boundary[\"Dispatch and process boundary observe_dispatch_skipped\"] end neg[\"6 negative cases remove one token per body; matching engine reports blocked\"] result records[\"metadata-only result records result, board, validation\"] ceiling[\"Scope limit no ledger refresh, no provider/bridge dispatch, no source note or source-file changes, no public sharing or launch\"] bundle --> reg & bounded & base bundle --> digest & compile & boundary bundle --> neg reg & bounded & base --> result records digest & compile & boundary --> result records neg --> result records result records --> ceiling",
      "source_hash": "sha256:38fab06954fb63ac1c22135cdd8b08dbf79e3ad57a5549099dc6471d716c9f17",
      "source_ref": "microcosm-substrate/paper_modules/batch8_compliance_pipeline_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch8-compliance-pipeline-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch8_policy_engines_capsule.diagram.1",
      "module_id": "paper_module.batch8_policy_engines_capsule",
      "module_label": "Set 8 Policy Engines Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"Copied source source bodies lab_contract_audit.py market_fusion_readiness.py campaign_state_transition.py\"] fixtures[\"Public synthetic fixtures Lab node artifacts, candidate claims, dispatch status pairs\"] subgraph Lab[\"Lab contract audit\"] labrun[\"compute_lab_contract_audit question-mark ban, tuple/annotation, thesis inheritance, target grounding\"] labgreen[\"green no hard fails\"] labred[\"red QUESTION_MARK_OUTPUT and others\"] end subgraph Market[\"Market-fusion readiness\"] mkrun[\"preflight_candidate_situation\"] mknamed[\"refuse: named reasons registered situation\"] mkmissing[\"refuse: candidate_situation_gate_missing fail-closed default\"] end subgraph Campaign[\"Campaign dispatch adjudicator\"] cprun[\"validate_dispatch_transition\"] cplegal[\"legal_transition / already_target\"] cpillegal[\"CampaignTransitionError completed is terminal\"] end exercises[\"Bundle evaluator three engines must pass, three stable negative cases\"] ceiling[\"Scope limit fixture evidence and copied source refs only no live campaign, provider, market, repo, or launch-scope decision\"] bundle --> labrun bundle --> mkrun bundle --> cprun fixtures --> labrun fixtures --> mkrun fixtures --> cprun labrun --> labgreen labrun --> labred mkrun --> mknamed mkrun --> mkmissing cprun --> cplegal cprun --> cpillegal labred --> exercises mkmissing --> exercises cpillegal --> exercises exercises --> ceiling",
      "source_hash": "sha256:4aa2e749e1f916922a2885d974a1352e00d688de84f049cd920c0c06f4c6abcc",
      "source_ref": "microcosm-substrate/paper_modules/batch8_policy_engines_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch8-policy-engines-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch8_structural_theses_capsule.diagram.1",
      "module_id": "paper_module.batch8_structural_theses_capsule",
      "module_label": "Set 8 Structural Theses Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Bundle[\"JSON source record core/paper_module_capsules.json[63]\"] --> Runtime[\"Runtime locus components/batch8_structural_theses_capsule.py\"] Source[\"Exact copied source tools/finance/structural_theses.py\"] -->|digest + anchor parity| Runtime Probe[\"Public synthetic probe winner, loser, control rows plus realized returns\"] --> Runtime Runtime --> Build[\"build_structural_thesis_family CP1 admit forward-only CP2 resolve vs frozen criterion proper-scoring + purged replay\"] Build --> Clean[\"validate_structural_thesis_family on the clean family\"] Clean --> CleanCheck{\"Winner confirmed, loser refuted + valid evidence, control not confirmed?\"} Runtime --> Neg[\"Three broken variants\"] Neg --> Survivor[\"Survivor-only family NO_LOSER_FLOWED_THROUGH NO_NEGATIVE_CONTROL SURVIVORSHIP_SAMPLE\"] Neg --> Forward[\"Refuted pattern smuggled into forward candidates FORWARD_GATE_BREACH\"] Neg --> Control[\"Control mutated to confirmed CONTROL_LEAK\"] CleanCheck -->|yes| Pass[\"Bounded pass result record\"] CleanCheck -->|no| Block[\"Blocked finding\"] Survivor -->|refusal fires| Pass Forward -->|refusal fires| Pass Control -->|refusal fires| Pass Survivor -->|refusal missing| Block Forward -->|refusal missing| Block Control -->|refusal missing| Block Pass --> Ceiling[\"Scope limit public synthetic fixture + copied source only\"] Ceiling -. forbids .-> NoClaims[\"No advice, recommendation, live market data, external model access, portfolio action, public sharing, launch\"]",
      "source_hash": "sha256:312a758ff1895b9074020305f21fe7290cb311adfbf16eaf9dc62f380bcb24c2",
      "source_ref": "microcosm-substrate/paper_modules/batch8_structural_theses_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch8-structural-theses-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch8_tools_tail_primitives_capsule.diagram.1",
      "module_id": "paper_module.batch8_tools_tail_primitives_capsule",
      "module_label": "Set 8 Tools-Tail Primitives Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON source record core/paper_module_capsules.json[64] source basis: source record\"] instance[\"Generated JSON instance paper_modules/batch8_tools_tail_primitives_capsule.json 20 edges; 0 unresolved selective relations\"] markdown[\"Reader projection paper_modules/batch8_tools_tail_primitives_capsule.md\"] standard[\"Local standard standards/std_microcosm_batch8_tools_tail_primitives_capsule.json\"] runtime[\"Runtime/source locus src/microcosm_core/components/batch8_tools_tail_primitives_capsule.py loads copied modules, runs four exercises, checks exact output\"] exercises[\"Four primitive exercises observer set diff | JSON-patch VM ledger-id hash | shadow envelope parse each: accept path + negative case\"] fixture[\"Public fixture input fixtures/first_wave/batch8_tools_tail_primitives_capsule/input four primitives + negative cases\"] bundle[\"Copied source bundle examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle source_module_manifest.json\"] tests[\"Tests and result records tests/test_batch8_tools_tail_primitives_capsule.py result records/first_wave + sign-off + bundle validation\"] projections[\"Generated navigation Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] ceiling[\"Scope limit deterministic public primitive exercises and metadata-only source refs only no oracle truth, semantic edit correctness, live bridge/Lab execution, external model access, repo mutation, public sharing, launch, or whole-system proof\"] bundle --> instance bundle --> runtime instance --> projections instance --> markdown standard --> runtime runtime --> bundle bundle --> runtime fixture --> runtime runtime --> exercises exercises --> tests fixture --> tests bundle --> tests tests --> ceiling projections --> ceiling markdown --> ceiling",
      "source_hash": "sha256:d7a03dd97ac2480e2247b0737cb6ae16ab5a122685f3b0ce8be2709b9b3fe877",
      "source_ref": "microcosm-substrate/paper_modules/batch8_tools_tail_primitives_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch8-tools-tail-primitives-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch8_validator_checker_capsule.diagram.1",
      "module_id": "paper_module.batch8_validator_checker_capsule",
      "module_label": "Set 8 Validator Checker Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Fixture input or exported bundle\"] --> B[\"Source manifest validation\"] B --> C[\"Exact copied validators.py digest and required anchors\"] C --> D{\"Source state available?\"} D -- \"yes\" --> E[\"Six runtime checker engines\"] D -- \"no\" --> F[\"Copied-source anchors plus source-only witnesses\"] E --> G[\"Semantic negative-case evaluator\"] F --> G G --> H[\"Crown-jewel result, board, validation, sign-off result records\"] H --> I[\"Result card authority_floor and body_floor\"] I --> J[\"Reader claim: bounded checker membrane, not launch-scope decision\"]",
      "source_hash": "sha256:549ea6d5b2d5f43b4a40d320800c4d2ee5e3529637a07807a2b051c3b2a5b392",
      "source_ref": "microcosm-substrate/paper_modules/batch8_validator_checker_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch8-validator-checker-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch12_market_dashboard_read_model_capsule.diagram.1",
      "module_id": "paper_module.batch12_market_dashboard_read_model_capsule",
      "module_label": "Set 12 Market Dashboard Read-Model Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Synthetic dashboard, freshness, related fixtures\"] --> B[\"Copied read-model helpers (market_dashboard_read_model.py)\"] B --> C[\"validate_market_dashboard_read_model\"] C --> C1[\"Structure: schema, queue-to-detail, graph edges, drilldown route safety\"] C --> C2[\"Scope limit: no auto-apply, review-gated, no-advice, no trading language, zero silent omissions\"] B --> D[\"_runtime_feed_freshness_overlay\"] D --> D1[\"fresh_green_feed\"] D --> D2[\"stale_green_feed\"] D --> D3[\"blocked_missing_artifact\"] B --> E[\"_related_situations\"] E --> E1[\"Entity overlap or type match; self-excluded, capped at six; no overlap means empty\"] C1 --> F[\"metadata-only result record and card (refs, digests, counts, verdicts)\"] C2 --> F D1 --> F D2 --> F D3 --> F E1 --> F",
      "source_hash": "sha256:ddeef4898f215927976ba86697e7b8e23a427ca48fdf5391b46cb84934863bfb",
      "source_ref": "microcosm-substrate/paper_modules/batch12_market_dashboard_read_model_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch12-market-dashboard-read-model-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch12_prediction_market_board_capsule.diagram.1",
      "module_id": "paper_module.batch12_prediction_market_board_capsule",
      "module_label": "Set 12 Prediction Market Board Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Rows[\"Synthetic market rows\"] --> Join[\"Event join + identity match _prediction_market_board\"] Identity[\"Polymarket identity snapshot\"] --> Join Helpers[\"Quant-mart helper fixtures\"] --> Drift[\"Provider drift monitor generic vs FRED flags\"] Helpers --> Miss[\"Missingness board zero_rows vs quality_degraded\"] Helpers --> Delta[\"Prior-green delta unavailable with no baseline\"] Helpers --> Source[\"Source regime board vintage status bound to structured source record\"] Join --> Dedup{\"Slug + outcome seen before?\"} Dedup -->|yes| Keep[\"Keep higher-volume market\"] Dedup -->|no, unmatched| Orphan[\"missing_from_feed_artifact no fabricated event id\"] Dedup -->|no, matched| Append[\"Append to event aggregate\"] Keep --> Result record[\"metadata-only result record and card diagnostic rows, negative cases, scope limit\"] Orphan --> Result record Append --> Result record Drift --> Result record Miss --> Result record Delta --> Result record Source --> Result record",
      "source_hash": "sha256:3d1db58db99a74e9088e3971fd9e23146e339885532339b579d06a85ad900c10",
      "source_ref": "microcosm-substrate/paper_modules/batch12_prediction_market_board_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch12-prediction-market-board-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch12_release_claim_language_gate.diagram.1",
      "module_id": "paper_module.batch12_release_claim_language_gate",
      "module_label": "Set 12 launch claim-Language Gate",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Fixture[\"release_gate_fixture.json safe and active public copy surfaces\"] Manifest[\"source_module_manifest.json exact copied source gate body\"] Loader[\"load source module digest equality and required anchors\"] SafeRoot[\"safe fixture root _write_gate_fixture(active=false)\"] ActiveRoot[\"active fixture root _write_gate_fixture(active=true)\"] Scan[\"build_gate scan manifest files for RISKY_PHRASES\"] Classify{\"_classify_hit read each phrase in context\"} Boundary[\"boundary_or_negative_context negation marker or forbidden example => allowed\"] Active[\"active_claim_blocker affirmative line, no downgrade => status active_claim_blocked\"] Review[\"needs_review no clear marker either way => fail-closed no-go queue\"] Assert[\"main --assert-clear exit 2 when not public_copy_clean\"] Negatives[\"computed negative cases affirmative claim blocks assert-clear exits 2 private internal control leak blocks\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"scope limit no launch, public sharing, NLP truth, secret completeness, or whole-system claim\"] Fixture --> SafeRoot Fixture --> ActiveRoot Manifest --> Loader Loader --> Scan SafeRoot --> Scan ActiveRoot --> Scan Scan --> Classify Classify -->|allowed| Boundary Classify -->|blocked| Active Classify -->|ambiguous| Review Active --> Assert Review --> Assert Boundary --> Negatives Active --> Negatives Assert --> Negatives Negatives --> Result records Result records --> Ceiling",
      "source_hash": "sha256:b8792efc4879dfecf6bd03ab118f299b203a7f8fa7d84f6e22816ccf1de756ef",
      "source_ref": "microcosm-substrate/paper_modules/batch12_release_claim_language_gate.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch12-release-claim-language-gate",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch10_cold_eval_honesty_capsule.diagram.1",
      "module_id": "paper_module.batch10_cold_eval_honesty_capsule",
      "module_label": "Set 10 Cold Eval Honesty Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Public cold-eval workspace (tasks, navigation packets)\"] --> B[\"Copied cold_eval.py runner\"] B --> A1[\"Arm A: flat repo entry (README, quickstart, pyproject)\"] B --> A2[\"Arm B: idea-first packet (entry packet, atlas, index)\"] A1 --> SC[\"Score each task by declared route refs covered (refs scored, never injected)\"] A2 --> SC SC --> W[\"Winner per task, idea-first win count\"] W --> C[\"Scorecard shape audit all-B win + route asymmetry + no non-public refs\"] C --> D[\"Scope limit gate injection off, forbidden benchmark/launch claims named\"] D --> E[\"metadata-only result record and card\"]",
      "source_hash": "sha256:5278f9079a9b8309211673fa9214cb364e564f57b571294eb553ed960af9e9c0",
      "source_ref": "microcosm-substrate/paper_modules/batch10_cold_eval_honesty_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch10-cold-eval-honesty-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch10_live_source_drift_capsule.diagram.1",
      "module_id": "paper_module.batch10_live_source_drift_capsule",
      "module_label": "Set 10 Live Source Drift Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Probe manifest stale + current digests\"] --> C B[\"Copied internal control bodies and source manifest\"] --> C C[\"Digest refresh matrix copied = target = current, stale differs from current\"] --> F B --> D[\"Compile gate py_compile, no import\"] B --> E[\"Anchor matrix named command and contract surfaces present\"] D --> F E --> F F[\"Scope limit gate import is not route or mutation authority\"] --> G[\"metadata-only result record and card\"] C -. mismatch .-> H[\"Blocked: refresh copies via exact-copy source lane\"]",
      "source_hash": "sha256:bb9094da55129e842750bf452405b24a7645783d72f721cabace1322f290a1a2",
      "source_ref": "microcosm-substrate/paper_modules/batch10_live_source_drift_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch10-live-source-drift-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch7_macro_engines_capsule.diagram.1",
      "module_id": "paper_module.batch7_macro_engines_capsule",
      "module_label": "Set 7 Source Engines Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR input[\"Input dir\"] mode{\"Live fixture or exported bundle?\"} subgraph Live[\"Live fixture: run each engine\"] trace[\"Trace IR parser node --test\"] codemap[\"Code-map layout Vitest + orbit non-overlap\"] dag[\"DAG scheduler waves + cycle reject\"] rest[\"launch index, source surgeon, clean clone, calculator, PageRank, regression selection\"] end subgraph Bundle[\"Exported bundle: gate on manifest\"] manifest[\"Source manifest: digests match + anchors present\"] rows[\"Nine engine rows source_open_manifest_verified\"] end neg[\"Negative cases must keep failing\"] result[\"metadata-only result status, counts, digests\"] ceiling[\"scope limit no launch, no semantic truth, no source-file changes\"] input --> mode mode -->|live| trace mode -->|live| codemap mode -->|live| dag mode -->|live| rest mode -->|bundle| manifest manifest --> rows trace --> neg codemap --> neg dag --> neg rest --> neg rows --> result neg --> result result --> ceiling",
      "source_hash": "sha256:60feec778abd5e8471761fd25cb27381410f9f0b76ab7082ad764954cabd38dd",
      "source_ref": "microcosm-substrate/paper_modules/batch7_macro_engines_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch7-macro-engines-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch9_macro_engines_capsule.diagram.1",
      "module_id": "paper_module.batch9_macro_engines_capsule",
      "module_label": "Set 9 Source Engines Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD manifest[\"source_module_manifest.json 13 copied source bodies\"] fixtures[\"first_wave fixture input probe manifest + 13 negative cases\"] runtime[\"batch9_macro_engines_capsule.py run / run_batch9_bundle\"] digest[\"Digest + anchor check copied bytes match source, required anchors present\"] exercise[\"Re-execute imported logic _run_all_exercises\"] py[\"10 Python bodies importlib load, call real functions (lineage, approval, AST, mission graph, pin drift, config, host pressure, doctrine, worker gate, milestone)\"] ts[\"3 TS-backed bodies parse constants/branches, mirror (finance, WorkAtlas, edge extractor)\"] pos[\"Positive case expected shape\"] neg[\"Negative case e.g. self-loop pruned, preacquired claim refused, forbidden surface blocked\"] result records[\"metadata-only result records result, board, validation, sign-off; body_in_receipt false\"] ceiling[\"Scope limit fixture evidence only\"] manifest --> runtime fixtures --> runtime runtime --> digest runtime --> exercise exercise --> py exercise --> ts py --> pos py --> neg ts --> pos ts --> neg digest --> result records pos --> result records neg --> result records result records --> ceiling",
      "source_hash": "sha256:8e656d3df0255ab6ef0a084804720799b7357cd0ce6f9a9142b0ede8864c0733",
      "source_ref": "microcosm-substrate/paper_modules/batch9_macro_engines_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch9-macro-engines-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.pattern_assimilation.diagram.1",
      "module_id": "paper_module.pattern_assimilation",
      "module_label": "Pattern Assimilation",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD landings[\"Landed component rows organ_landing_summaries.jsonl each names a completion result and result record ref\"] refinement[\"Refinement result records owner_surface, changed artifact\"] nothing[\"Nothing-to-refine result records stewardship, next-best lane, re-entry\"] validator[\"sign-off.py validate_pattern_assimilation\"] filter[\"Pre-filter valid result records refinement: named owner, no doctrine upgrade nothing: all three fields present\"] match{\"Per landed component: exactly one completion, ref resolves to a matching row?\"} pass[\"Accepted typed, owner-routed completion learning\"] negatives[\"Negative cases recorded MISSING_PATTERN_ASSIMILATION_Completion MISSING_REFINEMENT_OWNER_SURFACE DUPLICATE_REFINEMENT_RECEIPT_ID LOCAL_LESSON_AUTHORITY_UPGRADE RAW_SEED_BODY_IN_ASSIMILATION_FIXTURE\"] result records[\"metadata-only result records result records/first_wave/pattern_assimilation_*\"] ceiling[\"Scope limit public fixture metadata, no doctrine changes\"] landings --> match refinement --> filter nothing --> filter filter --> match validator --> filter match -->|resolved| pass match -->|missing, dangling, duplicate, upgraded| negatives pass --> result records negatives --> result records result records --> ceiling",
      "source_hash": "sha256:43220412a5cfccc5dbbbcff3642b09465b5ef19affb488a9c8c810cad82f4608",
      "source_ref": "microcosm-substrate/paper_modules/pattern_assimilation.md",
      "canonical_route": "docs/paper-modules.html#paper-module-pattern-assimilation",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch10_governance_compilers_capsule.diagram.1",
      "module_id": "paper_module.batch10_governance_compilers_capsule",
      "module_label": "Set 10 Governance And Compilers Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Bundle[\"JSON bundle source row core/paper_module_capsules.json paper_module.batch10_governance_compilers_capsule\"] Instance[\"Generated JSON instance paper_modules/batch10_governance_compilers_capsule.json\"] Markdown[\"Markdown reader projection paper_modules/batch10_governance_compilers_capsule.md\"] Standard[\"Standards std_microcosm_batch10_governance_compilers_capsule std_microcosm\"] Runtime[\"Runtime/source loci batch10_governance_compilers_capsule.py exercise 14 mechanism ports resolve source evidence per mechanism recompute each negative case flag fixture_verdict_echo_risk\"] Fixtures[\"Fixtures and source bundle fixtures/first_wave/.../input (labels + expected codes) exported bundle: 13 copied source modules source_module_manifest.json\"] Tests[\"Tests and result records tests/test_batch10_governance_compilers_capsule.py result records/runtime_shell/demo_project/components/batch10_governance_compilers_capsule\"] Projections[\"Generated navigation projections Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] Ceiling[\"Scope limit fixture-bound public source-open evidence only no live ledger truth, source-file changes, public sharing, launch, provider, private-system, benchmark, or market authority\"] Bundle -->|seeds| Instance Bundle -->|bounds prose| Markdown Bundle -->|names laws and source authority| Standard Bundle -->|cites code locus| Runtime Runtime -->|computes integrity matrix and result records| Tests Fixtures -->|public inputs, exact copies, declared refactor| Runtime Fixtures -->|manifest and source bundle validate| Tests Instance -->|derives edges| Projections Projections -->|navigation only| Markdown Tests -->|result record evidence remains below| Ceiling Standard -->|enforces public/private and launch boundary| Ceiling Markdown -->|must not outrank| Bundle",
      "source_hash": "sha256:03a9f24bf12d2ecb936ec4be57fea41c03dffe0e853ccc3123cc293af7eef1df",
      "source_ref": "microcosm-substrate/paper_modules/batch10_governance_compilers_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch10-governance-compilers-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch11_saturation_engines_capsule.diagram.1",
      "module_id": "paper_module.batch11_saturation_engines_capsule",
      "module_label": "Set 11 Saturation Engines Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"core/paper_module_capsules.json paper_modules[76:paper_module.batch11_saturation_engines_capsule] source basis: source record\"] instance[\"paper_modules/batch11_saturation_engines_capsule.json governed JSON instance markdown: legacy_import_projection_until_roundtrip_builder\"] standard[\"standards/std_microcosm_batch11_saturation_engines_capsule.json active public runtime standard boundary: not live navigation/ledger/market/secret authority\"] runtime[\"src/microcosm_core/components/batch11_saturation_engines_capsule.py run, validate-bundle, result_card, scope_limit\"] fixture[\"fixtures/first_wave/batch11_saturation_engines_capsule/input public mechanism and negative-case probes\"] bundle[\"examples/batch11_saturation_engines_capsule/exported_batch11_saturation_engines_capsule_bundle source_module_manifest.json: 12 copied/refactored public source modules\"] tests[\"tests/test_batch11_saturation_engines_capsule.py scripts/build_doctrine_projection.py --check-paper-module-corpus scripts/build_doctrine_projection.py --check\"] result records[\"result records/first_wave/batch11_saturation_engines_capsule/* result records/sign-off/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json status: pass; accepted: true; body_in_receipt: false\"] atlas[\"atlas/doctrine_lattice_graph.mmd and doctrine_lattice_projection.json Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] ceiling[\"Scope limit fixture-bound source-body import, source-faithful public ports, computed negative probes, metadata-only result records only\"] bundle -->|seeds subjects, dependencies, code locus, projection status| instance bundle -->|governed by| standard instance -->|cites resolved runtime/source locus| runtime standard -->|requires fixture and result record contract| fixture standard -->|requires copied/source-faithful public bundle| bundle runtime -->|exercises| fixture runtime -->|validates exact-copy/source-faithful evidence| bundle runtime -->|writes metadata-only result and validation result records| result records tests -->|checks runtime, bundle, corpus, projection freshness| result records instance -->|generated projection edge status| atlas result records -->|bounded evidence, not launch-scope decision| ceiling atlas -->|projection, source-linked only| ceiling",
      "source_hash": "sha256:8987d39d975f0189a02d1956a79018c569cfaa74074fe04bdac1c6b47bd0d7a2",
      "source_ref": "microcosm-substrate/paper_modules/batch11_saturation_engines_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch11-saturation-engines-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch4_proof_authority_runtime.diagram.1",
      "module_id": "paper_module.batch4_proof_authority_runtime",
      "module_label": "Set 4 Proof, Authority, and Runtime Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD fixture[\"Public fixture manifest 14 mechanism rows + 14 negative cases\"] bundle[\"Exported public bundle 19 copied source modules\"] runtime[\"Set 4 runtime run / validate-bundle\"] anchors[\"Per-mechanism source check module present + required anchors in body\"] scan[\"Erdos #257 static scan reject sorry / admit / axiom\"] probe[\"Optional Lean/Lake probe copied kernel elaborates? availability only\"] negatives[\"Negative cases recomputed verdict derived from source, not declared\"] result records[\"metadata-only result records refs, digests, anchors, counts, verdicts\"] ceiling[\"Scope limit authority delta = none\"] leanWitness[\"Sibling Lean/Lake components actually run local proofs\"] fixture --> runtime bundle --> runtime runtime --> anchors runtime --> scan scan --> probe runtime --> negatives anchors --> result records scan --> result records probe --> result records negatives --> result records result records --> ceiling leanWitness -. \"separate execution evidence\" .-> ceiling",
      "source_hash": "sha256:98f5eaa11a715e1d2414b66a3fb9694c60d077342dd674dbc1bae2f9e288ef3d",
      "source_ref": "microcosm-substrate/paper_modules/batch4_proof_authority_runtime.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch4-proof-authority-runtime",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch6_unsurfaced_primitives_capsule.diagram.1",
      "module_id": "paper_module.batch6_unsurfaced_primitives_capsule",
      "module_label": "Set 6 Unsurfaced Primitives Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR Bundle[\"JSON bundle source row core/paper_module_capsules.json paper_module.batch6_unsurfaced_primitives_capsule\"] Instance[\"Generated JSON instance paper_modules/batch6_unsurfaced_primitives_capsule.json source basis: source record\"] Markdown[\"Markdown reader projection paper_modules/batch6_unsurfaced_primitives_capsule.md\"] Standards[\"Standards standards/std_microcosm_batch6_unsurfaced_primitives_capsule.json std_microcosm public Microcosm boundary\"] Runtime[\"Runtime/source loci src/microcosm_core/components/batch6_unsurfaced_primitives_capsule.py runtime_shell and macro_engines_gallery routes\"] Fixtures[\"Fixtures, examples, source bundle fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input examples/.../exported_batch6_unsurfaced_primitives_capsule_bundle source_module_manifest.json\"] Result records[\"Tests and result records tests/test_batch6_unsurfaced_primitives_capsule.py result records/first_wave/... validation/result/board result records/sign-off/... fixture_acceptance.json\"] Projections[\"Generated navigation projections Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] Ceiling[\"Scope limit fixture-bound public source-body import digest/anchor checks, synthetic exercises, negative cases, metadata-only result records only\"] Forbidden[\"Not authorized live operator memory, prompt capture authority, live market data, provider/browser state, media launch, source-file changes, public sharing or launch-scope decision, private-system equivalence, whole-system correctness\"] Bundle -->|seeds| Instance Bundle -->|bounds| Markdown Bundle -->|names standard contract and ceiling| Standards Bundle -->|cites resolved code locus| Runtime Runtime -->|runs fixture and bundle validators| Result records Fixtures -->|public inputs and exact copied source bodies| Runtime Fixtures -->|26 copied modules; sha256 and anchor checks; body_in_receipt false| Result records Instance -->|derives relationship edges| Projections Projections -->|navigation projection only| Markdown Standards -->|public/private and launch boundary| Ceiling Result records -->|pass/fail evidence remains bounded by| Ceiling Ceiling -->|excludes| Forbidden Markdown -->|must not outrank| Bundle",
      "source_hash": "sha256:47412d0482125e4117e7f8c0c59ab75fc007ff979097422f66c5d3f94b3f22dc",
      "source_ref": "microcosm-substrate/paper_modules/batch6_unsurfaced_primitives_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch6-unsurfaced-primitives-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_public_projection_leak_gate.diagram.1",
      "module_id": "paper_module.engine_room_public_projection_leak_gate",
      "module_label": "Engine Room Public Projection Leak Gate",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Root[\"Rendered projection root walk files and path names\"] Root --> Content[\"Content scan account secret and private-path regexes\"] Root --> PathScan[\"Path-name scan source note, ledger, Obsidian, transport\"] Root --> Symlink{\"Symlink escapes root?\"} Root --> Gitleaks[\"Optional gitleaks run pass / red / unavailable / fail-closed\"] Content --> Hash[\"Findings as hash-only records category, path, line, match_sha256 matched value dropped\"] PathScan --> Hash Hash --> Split{\"Path in policy exception list?\"} Split -- \"yes\" --> Allowed[\"Policy exception retained, non-blocking\"] Split -- \"no\" --> Blocking[\"Blocking hit\"] Verdict{\"Any blocking hit, symlink escape, or gitleaks red / fail-closed?\"} Blocking --> Verdict Symlink -- \"yes\" --> Verdict Gitleaks --> Verdict Allowed --> Green Verdict -- \"yes\" --> Red[\"red result record public_release_allowed_by_scan = false\"] Verdict -- \"no\" --> Green[\"green result record no blocker found in this scan\"]",
      "source_hash": "sha256:e3fa671efe58c604a58b4de05ea8e712615fc78b88113fe98381582d5fbf4a08",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_public_projection_leak_gate.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-public-projection-leak-gate",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch5_authority_systems_capsule.diagram.1",
      "module_id": "paper_module.batch5_authority_systems_capsule",
      "module_label": "Set 5 Authority and Systems Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Manifest[\"Copied source bundle + exercise manifest digests and required anchors checked first\"] --> Component[\"Runtime component batch5_authority_systems_capsule.py\"] Component --> E1[\"Result record validator flag provider/context/artifact drift\"] Component --> E2[\"Replay scope no_replay when changed context is disjoint\"] Component --> E3[\"Proof gate reject sorry/plan-only before Lean\"] Component --> E4[\"Orphan reaper live descendant -> requires_owner_check\"] Component --> E5[\"Fixpoint drainer residual source moved -> non-converging\"] Component --> E6[\"Trace tape over-budget -> pointer + omission result record\"] Component --> E7[\"Blast radius reverse closure; empty leaf stays empty\"] Component --> E8[\"Doctrine graph report deleted paths and tombstones\"] E1 --> Refusal[\"Shared refusal check each exercise recomputes its own verdict\"] E2 --> Refusal E3 --> Refusal E4 --> Refusal E5 --> Refusal E6 --> Refusal E7 --> Refusal E8 --> Refusal Refusal --> Result records[\"metadata-only result records result records/first_wave/batch5_authority_systems_capsule\"] Result records --> Ceiling[\"Scope limit: no external model access, mutation, proof success, launch, or private equivalence\"]",
      "source_hash": "sha256:ca57ed0a2df17b8745c20232a3de4e7cc1b6362ed335f8aea95a58bc7f8e59e7",
      "source_ref": "microcosm-substrate/paper_modules/batch5_authority_systems_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch5-authority-systems-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch7_oracle_sibling_capsule.diagram.1",
      "module_id": "paper_module.batch7_oracle_sibling_capsule",
      "module_label": "Set 7 Oracle Sibling Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"JSON bundle source row core/paper_module_capsules.json::paper_modules[82:paper_module.batch7_oracle_sibling_capsule]\"] instance[\"Generated JSON instance paper_modules/batch7_oracle_sibling_capsule.json\"] md[\"Reader projection paper_modules/batch7_oracle_sibling_capsule.md\"] standard[\"Standards std_microcosm_paper_module std_microcosm_batch7_oracle_sibling_capsule\"] mechanism[\"Mechanism subject mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule\"] runtime[\"Runtime/source locus src/microcosm_core/components/batch7_oracle_sibling_capsule.py\"] copied[\"Copied Oracle sibling source bundle examples/batch7_oracle_sibling_capsule/exported_batch7_oracle_sibling_capsule_bundle\"] fixture[\"Fixture input fixtures/first_wave/batch7_oracle_sibling_capsule/input\"] subgraph Exercise[\"Deterministic exercises (in-memory temp runs)\"] subjectIndex[\"subject_index admissible vs contextual evidence missing-support targets preserved\"] snapshot[\"subject_snapshot hydrate artifact, keep provenance\"] truthDiff[\"truth_diff_macro changed / new / dropped series\"] quartet[\"run_quartet plan + alias readiness BLOCKED, alias materialised\"] stop([\"STOP: run_missing_quartet / private orchestration engine excluded, not invoked\"]) pytest[\"original pytest witness focused Oracle v1 + quartet tests\"] quartet -.excluded.-> stop end tests[\"Focused tests tests/test_batch7_oracle_sibling_capsule.py\"] result records[\"metadata-only result records summaries, counts, digests, booleans; no source/stdout bodies\"] projections[\"Generated projection status Mermaid: available_from_capsule_edges Atlas: blocked_until_organ_atlas_owner_lane_binds_edges\"] ceiling[\"Scope limit fixture-bound local replay only; no Oracle reasoning, external model access, source-file changes, launch, or semantic truth authority\"] bundle --> instance bundle --> mechanism bundle --> runtime bundle --> projections instance --> md standard --> bundle standard --> tests runtime --> copied runtime --> fixture copied --> Exercise fixture --> Exercise Exercise --> tests tests --> result records result records --> md projections --> md ceiling --> md",
      "source_hash": "sha256:4e01b6844447ee837154f370d9b4776bed85389ee0b881fea05dd2e437ebe331",
      "source_ref": "microcosm-substrate/paper_modules/batch7_oracle_sibling_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch7-oracle-sibling-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch7_demo_take_console_capsule.diagram.1",
      "module_id": "paper_module.batch7_demo_take_console_capsule",
      "module_label": "Set 7 Demo Take Console Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"Copied public Swift bundle eight exact-copy source files body_in_receipt = false\"] subgraph Engines[\"Six source-contract engines\"] build[\"swift build witness app target compiles exit code + build marker only\"] state[\"Recording state model eleven typed states present marker uses wall + video time\"] bridge[\"Helper-bridge contract eleven helper commands script bound to repo\"] fsm[\"RecorderStore state machine start needs display + disk pause / resume / stop-to-review\"] meter[\"Hotkey + audio meter Control-Option-Command-M level clamped 0 to 1\"] transcribe[\"Transcribe payload builder WhisperKit decode config guards missing audio\"] end subgraph Negatives[\"Paired negative cases\"] mutate[\"Copy bundle to scratch delete one guard token\"] rerun[\"Re-run that engine expect it to flip to blocked\"] end result records[\"metadata-only result records refs, digests, anchors, booleans no source bodies, no logs\"] ceiling[\"Scope limit source-copy + fixture evidence only no app launch, capture, FFmpeg, WhisperKit dispatch, or launch\"] bundle --> Engines bundle --> mutate mutate --> rerun Engines --> result records rerun --> result records result records --> ceiling",
      "source_hash": "sha256:5726510915cbfb98e29f50aaddbe387712fa5899bc3a489f8ba6e85d59a48fe6",
      "source_ref": "microcosm-substrate/paper_modules/batch7_demo_take_console_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch7-demo-take-console-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_generated_projection_drift_gate.diagram.1",
      "module_id": "paper_module.engine_room_generated_projection_drift_gate",
      "module_label": "Engine Room Generated Projection Drift Gate",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR A[\"Changed path or owner id\"] --> B[\"Select projection owner\"] B --> C[\"Fingerprint source authorities\"] B --> D[\"Fingerprint generated artifacts\"] C --> E{\"Prior clean result record still matches?\"} D --> E E -- \"yes\" --> F[\"source-hash cache hit\"] E -- \"no\" --> G[\"Run owner's no-write check\"] F --> H{\"Artifact missing or check failed?\"} G --> H H -- \"yes\" --> I[\"drift result record\"] H -- \"no\" --> J[\"clean result record\"]",
      "source_hash": "sha256:a327006cc65d938c1080b439ef16861d1be79475cbaa48b365ac535083d1bad0",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_generated_projection_drift_gate.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-generated-projection-drift-gate",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_command_run_singleflight.diagram.1",
      "module_id": "paper_module.engine_room_command_run_singleflight",
      "module_label": "Engine Room Command-Run Singleflight",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Command argv, cwd, env, scope paths\"] --> B[\"Build content-addressed key argv + cwd + env + scoped worktree state\"] B --> K[\"Hash key to key_hash\"] K --> C[\"Take per-key fcntl lock\"] C --> D{\"Active run for this key?\"} D -- \"running\" --> E[\"Follower waits on active result record\"] D -- \"completed and reuse allowed\" --> G[\"Reused: replay completed result record\"] D -- \"none, or stale\" --> H[\"Leader runs subprocess once\"] E --> F{\"Active finished in window?\"} F -- \"yes\" --> R[\"Follower: replay leader output shared run_id, same exit code\"] F -- \"no\" --> T[\"stale_or_timeout, exit 124 no rerun\"] H --> I[\"Capture stdout, stderr, exit code write run and latest-by-key result records\"] R --> Z[\"Return result record\"] G --> Z T --> Z I --> Z",
      "source_hash": "sha256:863d2104afccbc946e1100e0c70c5cddb50c7cd4711cd7c07fa7f6ec90d24667",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_command_run_singleflight.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-command-run-singleflight",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_metabolism_runtime.diagram.1",
      "module_id": "paper_module.engine_room_metabolism_runtime",
      "module_label": "Engine Room Metabolism Runtime",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Fixture[\"Public fixture cases queue recovery, blackboard projection, running-job reconciliation\"] Schema[\"connect / ensure_schema WAL SQLite jobs, runs, blackboard_claim_events\"] Queue[\"enqueue_job active-state idempotency\"] Lease[\"claim_next_job requeue_expired_jobs\"] Runs[\"start_run / complete_run run lifecycle rows\"] Blackboard[\"append_claim_event build_blackboard_projection\"] Reconcile[\"reconcile running_job_no_run_row, run_finalized_but_job_running, running_job_stale_launch_log\"] Result record[\"evaluate_fixture_dir JSON result record with counts, scope boundaries, and scope limit\"] Ceiling[\"Scope limit synthetic SQLite behavior only\"] Fixture --> Schema Schema --> Queue Queue --> Lease Lease --> Runs Schema --> Blackboard Runs --> Reconcile Blackboard --> Reconcile Reconcile --> Result record Result record --> Ceiling",
      "source_hash": "sha256:169a7086286a897d7dfb5b4042a73e06f36f3018b2f6e59c77e5b3c10bd61f10",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_metabolism_runtime.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-metabolism-runtime",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_bridge_campaign_dag.diagram.1",
      "module_id": "paper_module.engine_room_bridge_campaign_dag",
      "module_label": "Engine Room Bridge Campaign DAG",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"Typed campaign spec (JSON object)\"] --> B[\"Envelope checks schema, kind, kebab-case id, intent, plan path, continuation\"] B --> C[\"Node checks unique labels, probe/reducer/ synthesis roles, input modes, dependencies resolve\"] C --> D[\"Acyclicity check\"] D --> E[\"Exactly one synthesis node barrier binds that node\"] E --> F[\"Synthesis transitively reaches a probe\"] F --> G[\"Provider fan-out ceiling workers <= safe_parallelism\"] G --> H[\"Pass result record ValidationResult ok = true\"] B -.->|\"rule reject\"| R[\"Reject result record rule id, target, reason\"] C -.->|\"rule reject\"| R D -.->|\"rule reject\"| R E -.->|\"rule reject\"| R F -.->|\"rule reject\"| R G -.->|\"rule reject\"| R",
      "source_hash": "sha256:99ea0e3c88d6734ebddb51aa7b9aad1c27bf51c6337bc23685ba59703a7a7328",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_bridge_campaign_dag.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-bridge-campaign-dag",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_annex_knowledge_router.diagram.1",
      "module_id": "paper_module.engine_room_annex_knowledge_router",
      "module_label": "Engine Room Reference Knowledge Router",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TB Problem[\"Problem statement normalized to tokens\"] --> Empty{\"Empty after normalization?\"} Empty -->|yes| NoMatch[\"No-match result record status: no_match\"] Empty -->|no| Loop[\"For each reference row in sanitized catalog\"] Loop --> Filter{\"Domain / cluster filter matches?\"} Filter -->|no| Drop[\"Excluded before scoring\"] Filter -->|yes| Score[\"Four-tier token scorer\"] subgraph Tiers[\"Weighted scoring (exact / phrase / per-token)\"] Structured[\"Structured routing fields 120 / 80 / 18\"] Family[\"Family text: slug, name, description, tags 32 / 24 / 6\"] OpenFirst[\"Open-first summaries 20 / 16 / 4\"] Notes[\"Curated notes, relevance-sorted 18 / 12 / 3\"] end Score --> Structured Score --> Family Score --> OpenFirst Score --> Notes Structured --> Sum[\"Sum tiers into total score + match_breakdown + matched_note_ids\"] Family --> Sum OpenFirst --> Sum Notes --> Sum Sum --> Threshold{\"total score > 0?\"} Threshold -->|no| Drop Threshold -->|yes| Ranked[\"Ranked reference matches highest score first, with score breakdown\"] Drop --> Loop Loop -->|no rows scored| NoMatch",
      "source_hash": "sha256:9da1ee85d0ed8416b49121d9a46349e7524575c50ae2d78c591d4e897fbcf71f",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_annex_knowledge_router.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-annex-knowledge-router",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_derived_fact_provider_engine.diagram.1",
      "module_id": "paper_module.engine_room_derived_fact_provider_engine",
      "module_label": "Engine Room Derived Fact Provider Engine",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Registry[\"public fixture registry authored fact rows\"] Resolver[\"evaluate_provider selects provider_type branch\"] JsonPointer[\"json_pointer read value at pointer in a JSON file\"] GlobCount[\"glob_count count matching files, keep sample matches\"] Callable[\"callable git-backed repo-state count\"] Resolved[\"resolved fact row value + value_repr\"] ErrorRow[\"error-as-data row error_class, message, required_next_action\"] Registry2[\"evaluate_registry aggregate rows, count statuses\"] Status{\"any row errored?\"} Ok[\"status: ok\"] Degraded[\"status: degraded\"] Result record[\"public provider result record ledger + audit findings + navigation cache + sha256\"] Ceiling[\"scope limit provider resolution only; no truth audit, registry completeness, semantic validation, or launch-scope decision\"] Registry --> Resolver Resolver --> JsonPointer Resolver --> GlobCount Resolver --> Callable JsonPointer --> Resolved GlobCount --> Resolved Callable --> Resolved JsonPointer -. on failure .-> ErrorRow GlobCount -. on failure .-> ErrorRow Callable -. on failure .-> ErrorRow Resolved --> Registry2 ErrorRow --> Registry2 Registry2 --> Status Status -- no --> Ok Status -- yes --> Degraded Ok --> Result record Degraded --> Result record Result record --> Ceiling",
      "source_hash": "sha256:bbd69df2c9575a52465385592b245cf0d7b5037f6f1d8e5a5df70a803b7f8608",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_derived_fact_provider_engine.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-derived-fact-provider-engine",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_egress_self_compliance_gate.diagram.1",
      "module_id": "paper_module.engine_room_egress_self_compliance_gate",
      "module_label": "Engine Room Egress Self-Compliance Gate",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TB Text[\"Agent output text (lowercased)\"] --> D1 Text --> D2 Text --> D3 subgraph Permission[\"detect_permission_gate_without_blocker\"] D1{\"Permission ceremony phrase?\"} D1 -->|no| Skip1[\"no row\"] D1 -->|yes| B1{\"Names a real blocker?\"} B1 -->|yes| OK1[\"informational: blocker named\"] B1 -->|no| V1[\"violation: ceremony without blocker\"] end subgraph SelfError[\"detect_self_error_without_capture\"] D2{\"Self-error phrase?\"} D2 -->|no| Skip2[\"no row\"] D2 -->|yes| B2{\"Binds to durable capture?\"} B2 -->|yes| OK2[\"informational: capture bound\"] B2 -->|no| V2[\"violation: error without capture\"] end subgraph Command[\"detect_command_displacement_to_operator\"] D3{\"Command handed to operator?\"} D3 -->|no| Skip3[\"no row\"] D3 -->|yes| B3{\"Reports it was run?\"} B3 -->|yes| OK3[\"informational: result record present\"] B3 -->|no| V3[\"violation: command displaced\"] end V1 --> Result record[\"evaluate_text result record red if any violation, else green\"] V2 --> Result record V3 --> Result record OK1 --> Result record OK2 --> Result record OK3 --> Result record Fixtures[\"Public fixture JSON cases\"] --> Runner[\"evaluate_fixture_dir compare status to expected\"] Runner --> Result record",
      "source_hash": "sha256:36d40909827963fe8679cd1857b3dceb6db1472a33907a805bac30cdf85c723f",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_egress_self_compliance_gate.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-egress-self-compliance-gate",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_lean_proof_search_lab.diagram.1",
      "module_id": "paper_module.engine_room_lean_proof_search_lab",
      "module_label": "Engine Room Lean Proof Search Lab",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR A[\"Public theorem statement\"] --> B[\"Forward-field firewall\"] B --> C[\"Bounded symbolic tactic search\"] C --> D[\"Lean subprocess check\"] D --> E[\"Axiom cleanliness audit\"] C --> F[\"Statement-only hammer table\"] F --> G[\"Problem-id ablation\"] E --> H[\"Fixture result record\"] G --> H B --> I[\"Reject oracle or provider body leak\"] E --> J[\"Reject sorry-tainted proof\"]",
      "source_hash": "sha256:6174c0674ad1c565901979ffd500632bcbeda449e93a0a1147f8687a91a09d61",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_lean_proof_search_lab.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-lean-proof-search-lab",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.engine_room_navigation_fitness_benchmark.diagram.1",
      "module_id": "paper_module.engine_room_navigation_fitness_benchmark",
      "module_label": "Engine Room Navigation Fitness Benchmark",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart LR A[\"Cold navigation fixture expected ids, forbidden routes, latency budget, scent terms\"] --> B[\"Route packet under test\"] B --> S[\"Sufficiency axis\"] B --> L[\"Latency axis wall time vs budget\"] subgraph SufficiencyLadder[\"Sufficiency verdict (first failing check wins)\"] S --> T[\"Timeout or error?\"] T --> M[\"Missing expected id?\"] M --> N[\"Weak scent term?\"] N --> R[\"Forbidden first route?\"] R --> P[\"Pass\"] end S --> Rec[\"Per-case result record recall, precision, status, failure kind\"] L --> Rec Rec --> Sum[\"Suite summary pass/fail counts, p50/p95 wall, route-type metrics\"] Sum --> Debt[\"Debt candidates sufficiency debt + latency debt\"]",
      "source_hash": "sha256:fcfccc3b674d8c84262f00ffdd6b656ba4fe7726094a81682b44c9ab334417f7",
      "source_ref": "microcosm-substrate/paper_modules/engine_room_navigation_fitness_benchmark.md",
      "canonical_route": "docs/paper-modules.html#paper-module-engine-room-navigation-fitness-benchmark",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.cold_clone_probe.diagram.1",
      "module_id": "paper_module.cold_clone_probe",
      "module_label": "Cold Clone Probe",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[Fresh public checkout] --> B[\"bootstrap.sh set PYTHONPATH=src, pick python\"] B --> C[\"run_probe(root, suite, emit_ref)\"] C --> D{Suite supported?} D -- no --> X1[\"blocked_invalid_input UNKNOWN_COLD_CLONE_SUITE\"] D -- yes --> E{REQUIRED_INPUTS present?} E -- no --> X2[\"blocked_dependency_missing MISSING_FIXTURE_INPUT\"] E -- yes --> F[Secret-exclusion scan] F -- scan unavailable --> X3[\"blocked_command_unavailable COMMAND_UNAVAILABLE\"] F -- scan fails --> X4[\"blocked_secret_exclusion SECRET_EXCLUSION_SCAN_BLOCKED\"] F -- scan passes --> G[\"Validate first-wave pattern-binding fixture\"] G --> H[\"Mirror missing PATTERN_RECEIPTS into canonical slots\"] H --> I{All five result records present?} I -- no --> X5[\"blocked_dependency_missing MISSING_PATTERN_BINDING_RECEIPT\"] I -- yes --> P[\"status=pass emit ref + five result record refs, metadata-only scan summary\"] P --> R[README map and component map]",
      "source_hash": "sha256:ef198362222e9de07e61b1103c7976bd0405e807e0d3671f66b37ee84c64ac4b",
      "source_ref": "microcosm-substrate/paper_modules/cold_clone_probe.md",
      "canonical_route": "docs/paper-modules.html#paper-module-cold-clone-probe",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.first_screen_composition_root.diagram.1",
      "module_id": "paper_module.first_screen_composition_root",
      "module_label": "First-Screen Composition Root",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD A[\"First-screen standard standards/std_microcosm_first_screen_composition_root.json\"] --> B[\"Compose card first_screen_composition.py: build slots, six reader routes, evidence frame\"] B --> C[\"Scan card against standard _standard_backed_first_screen_scan + _validation_checks\"] C -->|all checks true| D[\"status: pass\"] C -->|drift, rename, missing route| E[\"status: blocked failing check named\"] D --> F[\"Emit scripts/first_screen_composition_card.py --format json or text\"] E --> F F --> G[\"Reader output JSON contract or terminal text card, one screen\"] A -.binds.-> H[\"JSON source record + mechanism subject core/paper_module_capsules.json\"]",
      "source_hash": "sha256:9dc84f170bc53dbb2dd3c07bc9a14e988da66635ed318b4e8b92453f364ef323",
      "source_ref": "microcosm-substrate/paper_modules/first_screen_composition_root.md",
      "canonical_route": "docs/paper-modules.html#paper-module-first-screen-composition-root",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.batch7_secondary_runtime_capsule.diagram.1",
      "module_id": "paper_module.batch7_secondary_runtime_capsule",
      "module_label": "Set 7 Secondary Runtime Bundle",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD bundle[\"Exported bundle copied bodies + source digest anchors\"] witness[\"Vitest witness world/graph/cartography tests\"] subgraph Engines[\"Eight fixture engines\"] ui[\"Trace view-model and lane progress\"] graph[\"Graph lens and graph projection\"] carto[\"Cartography observe-only render\"] market[\"Stockgrid + Polymarket CLOB and four-lens scoring\"] end subgraph Negatives[\"Planted regressions\"] invert[\"Mis-sorted book must still find extrema\"] momentum[\"-100% change must be refused\"] selfedge[\"Self-edge must be dropped\"] resolved[\"Resolved market must gate NEWSBREAKER\"] end result records[\"metadata-only result records status, digests, anchor checks\"] ceiling[\"scope limit\"] bundle --> witness witness --> ui bundle --> graph bundle --> carto bundle --> market ui --> Negatives graph --> Negatives carto --> Negatives market --> Negatives Negatives --> result records result records --> ceiling",
      "source_hash": "sha256:6a53399a6b2a8ea167d1454ca455e04577e6147a44de3ee7ef4727ef0e4a570f",
      "source_ref": "microcosm-substrate/paper_modules/batch7_secondary_runtime_capsule.md",
      "canonical_route": "docs/paper-modules.html#paper-module-batch7-secondary-runtime-capsule",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     },
     {
      "asset_id": "paper_module.microcosm_axiom_substrate.diagram.1",
      "module_id": "paper_module.microcosm_axiom_substrate",
      "module_label": "Microcosm Axiom System",
      "kind": "mermaid",
      "source_format": "mermaid",
      "source": "flowchart TD Routing[\"Routing rows core/axiom_organ_routing.json axiom, anti-axiom, obligations, hand-stamped witness_strength\"] Bind[\"Per-obligation binding witness components, checker surfaces, result records, negative-case codes\"] Resolve{\"Does the binding resolve on disk?\"} Capped[\"Capped support blocked or layer_debt\"] Ceiling[\"Eight-component ceiling vector evidence_class, checker_scope, provenance, freshness, domain, negative_case, authority, projection\"] Reject[\"Anti-axiom rejection mapping tier + mapping_relation; mapping_verified stays false without a source-owned row\"] Meet[\"Bilattice meet support status AND rejection status\"] Claim[\"Node scope limit strongest_allowed_claim strong_certified: false\"] Pressure[\"Candidate-axiom pressure witness debt, rejection-mapping debt, sharpen the over-stamped row\"] Routing --> Bind --> Resolve Resolve -- \"no\" --> Capped --> Meet Resolve -- \"yes\" --> Ceiling --> Meet Bind --> Reject --> Meet Meet --> Claim Claim --> Pressure",
      "source_hash": "sha256:6426b3b4b6d91eef506eab2d1741987063172da7aa5642c1a9550a8805b181a0",
      "source_ref": "microcosm-substrate/paper_modules/microcosm_axiom_substrate.md",
      "canonical_route": "docs/paper-modules.html#paper-module-microcosm-axiom-substrate",
      "render_status": "build_time_svg_available",
      "rendered_body_omitted": true,
      "authority_boundary": "reader_packet_structured_asset_manifest_not_external_runtime_dependency"
     }
    ]
   },
   "architecture_graph": {
    "path": "docs/architecture-graph-scene.json",
    "summary": {
     "schema": "microcosm_public_architecture_graph_summary_v1",
     "area_count": 7,
     "component_count": 78,
     "wired_component_count": 52,
     "explicit_wire_count": 208,
     "spine_step_count": 10,
     "edge_semantics": "declared_dependency_untyped",
     "source_refs": [
      "microcosm-substrate/core/organ_families.json",
      "microcosm-substrate/core/organ_atlas.json",
      "microcosm-substrate/core/organ_registry.json",
      "microcosm-substrate/core/architecture_kernel.json"
     ]
    },
    "long_description": "This map shows 7 public areas, 78 components, and the shared path they bind to. 52 components declare 208 direct links to neighbours. Those direct links are source-declared but not typed as stronger proof, causal, or maturity relations.",
    "edge_semantics": {
     "area_relation": "binds_to_shared_path",
     "spine_relation": "spine_sequence",
     "explicit_wire_relation": "declared_dependency_untyped",
     "typing_policy": "wires_to is source-declared neighbour wiring; wiring notes are human annotations, not typed relation authority."
    },
    "node_count": 96,
    "edge_count": 224,
    "nodes": [
     {
      "id": "shared_path",
      "kind": "shared_spine",
      "label": "Shared path",
      "state": "active",
      "parent_cluster_id": "cluster:areas",
      "metrics": {
       "step_count": 10
      }
     },
     {
      "id": "primitive:project",
      "kind": "spine_step",
      "label": "Project",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 1
      }
     },
     {
      "id": "primitive:catalog",
      "kind": "spine_step",
      "label": "Catalog",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 2
      }
     },
     {
      "id": "primitive:pattern",
      "kind": "spine_step",
      "label": "Pattern",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 3
      }
     },
     {
      "id": "primitive:standard",
      "kind": "spine_step",
      "label": "Standard",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 4
      }
     },
     {
      "id": "primitive:route",
      "kind": "spine_step",
      "label": "Route",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 5
      }
     },
     {
      "id": "primitive:work",
      "kind": "spine_step",
      "label": "Work",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 6
      }
     },
     {
      "id": "primitive:event",
      "kind": "spine_step",
      "label": "Event",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 7
      }
     },
     {
      "id": "primitive:evidence",
      "kind": "spine_step",
      "label": "Evidence",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 8
      }
     },
     {
      "id": "primitive:explanation",
      "kind": "spine_step",
      "label": "Explanation",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 9
      }
     },
     {
      "id": "primitive:assimilation",
      "kind": "spine_step",
      "label": "Assimilation",
      "state": "active",
      "parent_cluster_id": "cluster:shared_spine",
      "metrics": {
       "order": 10
      }
     },
     {
      "id": "area:entry_and_reveal",
      "kind": "area",
      "label": "Entry & orientation",
      "state": "active",
      "parent_cluster_id": "cluster:areas",
      "metrics": {
       "component_count": 2
      }
     },
     {
      "id": "area:architecture_and_navigation",
      "kind": "area",
      "label": "Architecture & navigation",
      "state": "active",
      "parent_cluster_id": "cluster:areas",
      "metrics": {
       "component_count": 10
      }
     },
     {
      "id": "area:formal_math_and_proof",
      "kind": "area",
      "label": "Formal math & proof",
      "state": "active",
      "parent_cluster_id": "cluster:areas",
      "metrics": {
       "component_count": 18
      }
     },
     {
      "id": "area:agent_reliability_and_safety",
      "kind": "area",
      "label": "Agent reliability & safety",
      "state": "active",
      "parent_cluster_id": "cluster:areas",
      "metrics": {
       "component_count": 17
      }
     },
     {
      "id": "area:research_and_science_replays",
      "kind": "area",
      "label": "Research & science",
      "state": "active",
      "parent_cluster_id": "cluster:areas",
      "metrics": {
       "component_count": 8
      }
     },
     {
      "id": "area:import_projection_and_drift",
      "kind": "area",
      "label": "Import & drift control",
      "state": "active",
      "parent_cluster_id": "cluster:areas",
      "metrics": {
       "component_count": 19
      }
     },
     {
      "id": "area:work_landing_and_continuity",
      "kind": "area",
      "label": "Work & continuity",
      "state": "active",
      "parent_cluster_id": "cluster:areas",
      "metrics": {
       "component_count": 4
      }
     },
     {
      "id": "component:agent_benchmark_integrity_anti_gaming_replay",
      "kind": "wired_component",
      "label": "Agent Benchmark Integrity Anti Gaming Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:agent_closeout_faithfulness_audit",
      "kind": "wired_component",
      "label": "Agent Completion Faithfulness Audit",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:agent_memory_temporal_conflict_replay",
      "kind": "wired_component",
      "label": "Agent Memory Temporal Conflict Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:agent_monitor_redteam_falsification_replay",
      "kind": "wired_component",
      "label": "Agent Monitor Redteam Falsification Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:agent_route_observability_runtime",
      "kind": "wired_component",
      "label": "Agent Route Observability Runtime",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:agent_sabotage_scheming_monitor_replay",
      "kind": "wired_component",
      "label": "Agent Sabotage Scheming Monitor Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:agent_sandbox_policy_escape_replay",
      "kind": "wired_component",
      "label": "Agent Sandbox Policy Escape Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:agentic_vulnerability_discovery_patch_proof_replay",
      "kind": "wired_component",
      "label": "Agentic Vulnerability Discovery Patch Proof Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch10_cold_eval_honesty_capsule",
      "kind": "wired_component",
      "label": "Cold Evaluation Honesty Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch10_governance_compilers_capsule",
      "kind": "wired_component",
      "label": "Governance & Compiler Mechanisms Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch10_live_source_drift_capsule",
      "kind": "wired_component",
      "label": "Live Source Drift Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch11_saturation_engines_capsule",
      "kind": "wired_component",
      "label": "Saturation Engines Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch12_market_dashboard_read_model_capsule",
      "kind": "wired_component",
      "label": "Market Dashboard Read-Model Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:research_and_science_replays",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch12_prediction_market_board_capsule",
      "kind": "wired_component",
      "label": "Prediction Market Board Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:research_and_science_replays",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch12_release_claim_language_gate",
      "kind": "wired_component",
      "label": "Release Public Wording Gate",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch4_proof_authority_runtime",
      "kind": "wired_component",
      "label": "Proof / Control / Runtime Import Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch5_authority_systems_capsule",
      "kind": "wired_component",
      "label": "Authority Systems Source Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch6_unsurfaced_primitives_capsule",
      "kind": "wired_component",
      "label": "Unsurfaced Source Primitives Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch7_demo_take_console_capsule",
      "kind": "wired_component",
      "label": "Demo Take Console Source Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch7_macro_engines_capsule",
      "kind": "wired_component",
      "label": "Trace, Code-Map & Scheduling Engines Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch7_oracle_sibling_capsule",
      "kind": "wired_component",
      "label": "Oracle Sibling Source Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch7_secondary_runtime_capsule",
      "kind": "wired_component",
      "label": "Secondary Runtime Source Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch8_audio_level_rms_port",
      "kind": "wired_component",
      "label": "Audio Level RMS Port",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch8_compliance_pipeline_capsule",
      "kind": "wired_component",
      "label": "Compliance Pipeline Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch8_policy_engines_capsule",
      "kind": "wired_component",
      "label": "Policy Engines Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch8_structural_theses_capsule",
      "kind": "wired_component",
      "label": "Structural Theses Finance Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch8_tools_tail_primitives_capsule",
      "kind": "wired_component",
      "label": "Tools-Tail Primitives Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch8_validator_checker_capsule",
      "kind": "wired_component",
      "label": "Validator Checker Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:batch9_macro_engines_capsule",
      "kind": "wired_component",
      "label": "Backend & Governance Engines Bundle",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:belief_state_process_reward_replay",
      "kind": "wired_component",
      "label": "Belief State Process Reward Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:bounded_autonomy_campaign_packet",
      "kind": "wired_component",
      "label": "Bounded Autonomy Campaign Packet",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:bridge_phase_continuity_runtime",
      "kind": "wired_component",
      "label": "Bridge Phase Continuity Runtime",
      "state": "active",
      "parent_cluster_id": "cluster:work_landing_and_continuity",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:certificate_kernel_execution_lab",
      "kind": "wired_component",
      "label": "Certificate Kernel Execution Lab",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:cognitive_operator_registry",
      "kind": "component",
      "label": "Cognitive Operator Registry",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": false
      }
     },
     {
      "id": "component:cold_reader_route_map",
      "kind": "wired_component",
      "label": "Cold Reader Route Map",
      "state": "active",
      "parent_cluster_id": "cluster:entry_and_reveal",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:concurrency_mission_control",
      "kind": "wired_component",
      "label": "Concurrency Mission Control",
      "state": "active",
      "parent_cluster_id": "cluster:work_landing_and_continuity",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:corpus_readiness_mathlib_absence_gate",
      "kind": "wired_component",
      "label": "Corpus Readiness Mathlib Absence Gate",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:doctrine_fact_claim_audit",
      "kind": "wired_component",
      "label": "Doctrine Fact Claim Audit",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:durable_agent_work_landing_replay",
      "kind": "wired_component",
      "label": "Durable Agent Work Landing Replay",
      "state": "active",
      "parent_cluster_id": "cluster:work_landing_and_continuity",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:engine_room_demo",
      "kind": "wired_component",
      "label": "Engine Room Demo",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:executable_doctrine_grammar",
      "kind": "wired_component",
      "label": "Executable Doctrine Grammar",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:finance_forecast_evaluation_spine",
      "kind": "wired_component",
      "label": "Finance Forecast Evaluation Spine",
      "state": "active",
      "parent_cluster_id": "cluster:research_and_science_replays",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:formal_evidence_cell_anchor_resolver",
      "kind": "wired_component",
      "label": "Formal Evidence Cell Anchor Resolver",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:formal_math_lean_proof_witness",
      "kind": "wired_component",
      "label": "Formal Math Lean Proof Witness",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:formal_math_premise_retrieval",
      "kind": "wired_component",
      "label": "Formal Math Premise Retrieval",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:formal_math_readiness_gate",
      "kind": "wired_component",
      "label": "Formal Math Readiness Gate",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:formal_math_verifier_trace_repair_loop",
      "kind": "wired_component",
      "label": "Formal Math Verifier Trace Repair Loop",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:indirect_prompt_injection_information_flow_policy_replay",
      "kind": "component",
      "label": "Indirect Prompt Injection Information Flow Policy Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": false
      }
     },
     {
      "id": "component:lean_std_premise_index",
      "kind": "wired_component",
      "label": "Lean Std Premise Index",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:macro_projection_import_protocol",
      "kind": "wired_component",
      "label": "Source Projection Import Protocol",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:materials_chemistry_closed_loop_lab_safety_replay",
      "kind": "wired_component",
      "label": "Materials Chemistry Closed Loop Lab Safety Replay",
      "state": "active",
      "parent_cluster_id": "cluster:research_and_science_replays",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:mathematical_strategy_atlas_hypothesis_scorer",
      "kind": "wired_component",
      "label": "Mathematical Strategy Atlas Hypothesis Scorer",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:mcp_tool_authority_replay",
      "kind": "wired_component",
      "label": "MCP Tool Authority Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:mechanistic_interpretability_circuit_attribution_replay",
      "kind": "wired_component",
      "label": "Mechanistic Interpretability Circuit Attribution Replay",
      "state": "active",
      "parent_cluster_id": "cluster:research_and_science_replays",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:mission_transaction_work_spine",
      "kind": "wired_component",
      "label": "Mission Transaction Work Spine",
      "state": "active",
      "parent_cluster_id": "cluster:work_landing_and_continuity",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:navigation_hologram_route_plane",
      "kind": "wired_component",
      "label": "Navigation Hologram Route Plane",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:pattern_assimilation_step",
      "kind": "wired_component",
      "label": "Pattern Assimilation Step",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:pattern_binding_contract",
      "kind": "wired_component",
      "label": "Pattern Binding Contract",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:prediction_oracle_reconciliation",
      "kind": "wired_component",
      "label": "Prediction Oracle Reconciliation",
      "state": "active",
      "parent_cluster_id": "cluster:research_and_science_replays",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:proof_derived_governed_mutation_authorization",
      "kind": "wired_component",
      "label": "Proof Derived Governed Mutation Authorization",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:proof_diagnostic_evidence_spine",
      "kind": "wired_component",
      "label": "Proof Diagnostic Evidence Spine",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:provider_context_recipe_budget_policy",
      "kind": "wired_component",
      "label": "Provider Context Recipe Budget Policy",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:public_reveal_walkthrough",
      "kind": "wired_component",
      "label": "Public Reveal Walkthrough",
      "state": "active",
      "parent_cluster_id": "cluster:entry_and_reveal",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:research_replication_rubric_artifact_replay",
      "kind": "wired_component",
      "label": "Research Replication Rubric Artifact Replay",
      "state": "active",
      "parent_cluster_id": "cluster:research_and_science_replays",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:ring2_premise_retrieval_precision_recall_harness",
      "kind": "wired_component",
      "label": "Ring2 Premise Retrieval Precision Recall Harness",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:routing_anti_patterns_registry",
      "kind": "wired_component",
      "label": "Routing Anti Patterns Registry",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:self_ignorance_coverage_ledger",
      "kind": "wired_component",
      "label": "Self Ignorance Coverage Ledger",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:sleeper_memory_poisoning_quarantine_replay",
      "kind": "wired_component",
      "label": "Sleeper Memory Poisoning Quarantine Replay",
      "state": "active",
      "parent_cluster_id": "cluster:agent_reliability_and_safety",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:spatial_world_model_counterfactual_simulation_replay",
      "kind": "wired_component",
      "label": "Spatial World Model Counterfactual Simulation Replay",
      "state": "active",
      "parent_cluster_id": "cluster:research_and_science_replays",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:standards_meta_diagnostics",
      "kind": "component",
      "label": "Standards Meta Diagnostics",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": false
      }
     },
     {
      "id": "component:tactic_portfolio_availability_probe",
      "kind": "wired_component",
      "label": "Tactic Portfolio Availability Probe",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:target_shape_tactic_routing_gate",
      "kind": "wired_component",
      "label": "Target Shape Tactic Routing Gate",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:tool_server_pressure_inventory",
      "kind": "wired_component",
      "label": "Tool Server Pressure Inventory",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:undeclared_library_prior_symbol_classifier",
      "kind": "wired_component",
      "label": "Undeclared Library Prior Symbol Classifier",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:verifier_lab_execution_spine",
      "kind": "wired_component",
      "label": "Verifier Lab Execution Spine",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:verifier_lab_kernel",
      "kind": "wired_component",
      "label": "Verifier Lab Kernel",
      "state": "active",
      "parent_cluster_id": "cluster:formal_math_and_proof",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:voice_to_doctrine_self_improvement_loop",
      "kind": "wired_component",
      "label": "Voice To Doctrine Self Improvement Loop",
      "state": "active",
      "parent_cluster_id": "cluster:architecture_and_navigation",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     },
     {
      "id": "component:world_model_projection_drift_control_room",
      "kind": "wired_component",
      "label": "World Model Projection Drift Control Room",
      "state": "active",
      "parent_cluster_id": "cluster:import_projection_and_drift",
      "metrics": {
       "declared_wiring_endpoint": true
      }
     }
    ],
    "edges": [
     {
      "id": "edge:spine:project:catalog",
      "source": "primitive:project",
      "target": "primitive:catalog",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:spine:catalog:pattern",
      "source": "primitive:catalog",
      "target": "primitive:pattern",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:spine:pattern:standard",
      "source": "primitive:pattern",
      "target": "primitive:standard",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:spine:standard:route",
      "source": "primitive:standard",
      "target": "primitive:route",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:spine:route:work",
      "source": "primitive:route",
      "target": "primitive:work",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:spine:work:event",
      "source": "primitive:work",
      "target": "primitive:event",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:spine:event:evidence",
      "source": "primitive:event",
      "target": "primitive:evidence",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:spine:evidence:explanation",
      "source": "primitive:evidence",
      "target": "primitive:explanation",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:spine:explanation:assimilation",
      "source": "primitive:explanation",
      "target": "primitive:assimilation",
      "relation": "spine_sequence",
      "label": "next shared path step"
     },
     {
      "id": "edge:area:entry_and_reveal:shared_path",
      "source": "area:entry_and_reveal",
      "target": "shared_path",
      "relation": "binds_to_shared_path",
      "label": "uses shared path"
     },
     {
      "id": "edge:area:architecture_and_navigation:shared_path",
      "source": "area:architecture_and_navigation",
      "target": "shared_path",
      "relation": "binds_to_shared_path",
      "label": "uses shared path"
     },
     {
      "id": "edge:area:formal_math_and_proof:shared_path",
      "source": "area:formal_math_and_proof",
      "target": "shared_path",
      "relation": "binds_to_shared_path",
      "label": "uses shared path"
     },
     {
      "id": "edge:area:agent_reliability_and_safety:shared_path",
      "source": "area:agent_reliability_and_safety",
      "target": "shared_path",
      "relation": "binds_to_shared_path",
      "label": "uses shared path"
     },
     {
      "id": "edge:area:research_and_science_replays:shared_path",
      "source": "area:research_and_science_replays",
      "target": "shared_path",
      "relation": "binds_to_shared_path",
      "label": "uses shared path"
     },
     {
      "id": "edge:area:import_projection_and_drift:shared_path",
      "source": "area:import_projection_and_drift",
      "target": "shared_path",
      "relation": "binds_to_shared_path",
      "label": "uses shared path"
     },
     {
      "id": "edge:area:work_landing_and_continuity:shared_path",
      "source": "area:work_landing_and_continuity",
      "target": "shared_path",
      "relation": "binds_to_shared_path",
      "label": "uses shared path"
     },
     {
      "id": "edge:wire:agent_benchmark_integrity_anti_gaming_replay:research_replication_rubric_artifact_replay",
      "source": "component:agent_benchmark_integrity_anti_gaming_replay",
      "target": "component:research_replication_rubric_artifact_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_benchmark_integrity_anti_gaming_replay:batch10_cold_eval_honesty_capsule",
      "source": "component:agent_benchmark_integrity_anti_gaming_replay",
      "target": "component:batch10_cold_eval_honesty_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_memory_temporal_conflict_replay:sleeper_memory_poisoning_quarantine_replay",
      "source": "component:agent_memory_temporal_conflict_replay",
      "target": "component:sleeper_memory_poisoning_quarantine_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_monitor_redteam_falsification_replay:agent_sabotage_scheming_monitor_replay",
      "source": "component:agent_monitor_redteam_falsification_replay",
      "target": "component:agent_sabotage_scheming_monitor_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:navigation_hologram_route_plane",
      "source": "component:agent_route_observability_runtime",
      "target": "component:navigation_hologram_route_plane",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:cold_reader_route_map",
      "source": "component:agent_route_observability_runtime",
      "target": "component:cold_reader_route_map",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:routing_anti_patterns_registry",
      "source": "component:agent_route_observability_runtime",
      "target": "component:routing_anti_patterns_registry",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:pattern_binding_contract",
      "source": "component:agent_route_observability_runtime",
      "target": "component:pattern_binding_contract",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:macro_projection_import_protocol",
      "source": "component:agent_route_observability_runtime",
      "target": "component:macro_projection_import_protocol",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:bounded_autonomy_campaign_packet",
      "source": "component:agent_route_observability_runtime",
      "target": "component:bounded_autonomy_campaign_packet",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:batch11_saturation_engines_capsule",
      "source": "component:agent_route_observability_runtime",
      "target": "component:batch11_saturation_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:batch4_proof_authority_runtime",
      "source": "component:agent_route_observability_runtime",
      "target": "component:batch4_proof_authority_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:batch6_unsurfaced_primitives_capsule",
      "source": "component:agent_route_observability_runtime",
      "target": "component:batch6_unsurfaced_primitives_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:batch7_macro_engines_capsule",
      "source": "component:agent_route_observability_runtime",
      "target": "component:batch7_macro_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:batch8_compliance_pipeline_capsule",
      "source": "component:agent_route_observability_runtime",
      "target": "component:batch8_compliance_pipeline_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:agent_memory_temporal_conflict_replay",
      "source": "component:agent_route_observability_runtime",
      "target": "component:agent_memory_temporal_conflict_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:agent_sandbox_policy_escape_replay",
      "source": "component:agent_route_observability_runtime",
      "target": "component:agent_sandbox_policy_escape_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:provider_context_recipe_budget_policy",
      "source": "component:agent_route_observability_runtime",
      "target": "component:provider_context_recipe_budget_policy",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_route_observability_runtime:belief_state_process_reward_replay",
      "source": "component:agent_route_observability_runtime",
      "target": "component:belief_state_process_reward_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:agent_sandbox_policy_escape_replay:sleeper_memory_poisoning_quarantine_replay",
      "source": "component:agent_sandbox_policy_escape_replay",
      "target": "component:sleeper_memory_poisoning_quarantine_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch10_live_source_drift_capsule:batch10_governance_compilers_capsule",
      "source": "component:batch10_live_source_drift_capsule",
      "target": "component:batch10_governance_compilers_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch11_saturation_engines_capsule:macro_projection_import_protocol",
      "source": "component:batch11_saturation_engines_capsule",
      "target": "component:macro_projection_import_protocol",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch11_saturation_engines_capsule:batch8_compliance_pipeline_capsule",
      "source": "component:batch11_saturation_engines_capsule",
      "target": "component:batch8_compliance_pipeline_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch11_saturation_engines_capsule:navigation_hologram_route_plane",
      "source": "component:batch11_saturation_engines_capsule",
      "target": "component:navigation_hologram_route_plane",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch11_saturation_engines_capsule:agent_route_observability_runtime",
      "source": "component:batch11_saturation_engines_capsule",
      "target": "component:agent_route_observability_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch12_market_dashboard_read_model_capsule:batch6_unsurfaced_primitives_capsule",
      "source": "component:batch12_market_dashboard_read_model_capsule",
      "target": "component:batch6_unsurfaced_primitives_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch12_prediction_market_board_capsule:batch8_structural_theses_capsule",
      "source": "component:batch12_prediction_market_board_capsule",
      "target": "component:batch8_structural_theses_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch7_demo_take_console_capsule:batch8_audio_level_rms_port",
      "source": "component:batch7_demo_take_console_capsule",
      "target": "component:batch8_audio_level_rms_port",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch7_demo_take_console_capsule:batch6_unsurfaced_primitives_capsule",
      "source": "component:batch7_demo_take_console_capsule",
      "target": "component:batch6_unsurfaced_primitives_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch7_macro_engines_capsule:batch8_policy_engines_capsule",
      "source": "component:batch7_macro_engines_capsule",
      "target": "component:batch8_policy_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch7_macro_engines_capsule:batch8_tools_tail_primitives_capsule",
      "source": "component:batch7_macro_engines_capsule",
      "target": "component:batch8_tools_tail_primitives_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch7_macro_engines_capsule:batch9_macro_engines_capsule",
      "source": "component:batch7_macro_engines_capsule",
      "target": "component:batch9_macro_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch7_oracle_sibling_capsule:batch8_tools_tail_primitives_capsule",
      "source": "component:batch7_oracle_sibling_capsule",
      "target": "component:batch8_tools_tail_primitives_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch8_compliance_pipeline_capsule:macro_projection_import_protocol",
      "source": "component:batch8_compliance_pipeline_capsule",
      "target": "component:macro_projection_import_protocol",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch8_compliance_pipeline_capsule:batch11_saturation_engines_capsule",
      "source": "component:batch8_compliance_pipeline_capsule",
      "target": "component:batch11_saturation_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch8_compliance_pipeline_capsule:navigation_hologram_route_plane",
      "source": "component:batch8_compliance_pipeline_capsule",
      "target": "component:navigation_hologram_route_plane",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch8_compliance_pipeline_capsule:agent_route_observability_runtime",
      "source": "component:batch8_compliance_pipeline_capsule",
      "target": "component:agent_route_observability_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch8_structural_theses_capsule:batch12_prediction_market_board_capsule",
      "source": "component:batch8_structural_theses_capsule",
      "target": "component:batch12_prediction_market_board_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch8_validator_checker_capsule:batch10_cold_eval_honesty_capsule",
      "source": "component:batch8_validator_checker_capsule",
      "target": "component:batch10_cold_eval_honesty_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch8_validator_checker_capsule:batch12_release_claim_language_gate",
      "source": "component:batch8_validator_checker_capsule",
      "target": "component:batch12_release_claim_language_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:batch9_macro_engines_capsule:batch10_governance_compilers_capsule",
      "source": "component:batch9_macro_engines_capsule",
      "target": "component:batch10_governance_compilers_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:bridge_phase_continuity_runtime:agent_memory_temporal_conflict_replay",
      "source": "component:bridge_phase_continuity_runtime",
      "target": "component:agent_memory_temporal_conflict_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:bridge_phase_continuity_runtime:concurrency_mission_control",
      "source": "component:bridge_phase_continuity_runtime",
      "target": "component:concurrency_mission_control",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:cold_reader_route_map:navigation_hologram_route_plane",
      "source": "component:cold_reader_route_map",
      "target": "component:navigation_hologram_route_plane",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:cold_reader_route_map:agent_route_observability_runtime",
      "source": "component:cold_reader_route_map",
      "target": "component:agent_route_observability_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:cold_reader_route_map:pattern_binding_contract",
      "source": "component:cold_reader_route_map",
      "target": "component:pattern_binding_contract",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:cold_reader_route_map:doctrine_fact_claim_audit",
      "source": "component:cold_reader_route_map",
      "target": "component:doctrine_fact_claim_audit",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:cold_reader_route_map:pattern_assimilation_step",
      "source": "component:cold_reader_route_map",
      "target": "component:pattern_assimilation_step",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:cold_reader_route_map:routing_anti_patterns_registry",
      "source": "component:cold_reader_route_map",
      "target": "component:routing_anti_patterns_registry",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:cold_reader_route_map:self_ignorance_coverage_ledger",
      "source": "component:cold_reader_route_map",
      "target": "component:self_ignorance_coverage_ledger",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:cold_reader_route_map:voice_to_doctrine_self_improvement_loop",
      "source": "component:cold_reader_route_map",
      "target": "component:voice_to_doctrine_self_improvement_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:concurrency_mission_control:mission_transaction_work_spine",
      "source": "component:concurrency_mission_control",
      "target": "component:mission_transaction_work_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:concurrency_mission_control:batch10_live_source_drift_capsule",
      "source": "component:concurrency_mission_control",
      "target": "component:batch10_live_source_drift_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:corpus_readiness_mathlib_absence_gate:verifier_lab_kernel",
      "source": "component:corpus_readiness_mathlib_absence_gate",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:corpus_readiness_mathlib_absence_gate:tactic_portfolio_availability_probe",
      "source": "component:corpus_readiness_mathlib_absence_gate",
      "target": "component:tactic_portfolio_availability_probe",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:corpus_readiness_mathlib_absence_gate:undeclared_library_prior_symbol_classifier",
      "source": "component:corpus_readiness_mathlib_absence_gate",
      "target": "component:undeclared_library_prior_symbol_classifier",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:corpus_readiness_mathlib_absence_gate:formal_math_lean_proof_witness",
      "source": "component:corpus_readiness_mathlib_absence_gate",
      "target": "component:formal_math_lean_proof_witness",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:doctrine_fact_claim_audit:engine_room_demo",
      "source": "component:doctrine_fact_claim_audit",
      "target": "component:engine_room_demo",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:doctrine_fact_claim_audit:self_ignorance_coverage_ledger",
      "source": "component:doctrine_fact_claim_audit",
      "target": "component:self_ignorance_coverage_ledger",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:durable_agent_work_landing_replay:agent_closeout_faithfulness_audit",
      "source": "component:durable_agent_work_landing_replay",
      "target": "component:agent_closeout_faithfulness_audit",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:durable_agent_work_landing_replay:macro_projection_import_protocol",
      "source": "component:durable_agent_work_landing_replay",
      "target": "component:macro_projection_import_protocol",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:engine_room_demo:batch8_compliance_pipeline_capsule",
      "source": "component:engine_room_demo",
      "target": "component:batch8_compliance_pipeline_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:engine_room_demo:batch8_validator_checker_capsule",
      "source": "component:engine_room_demo",
      "target": "component:batch8_validator_checker_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:executable_doctrine_grammar:doctrine_fact_claim_audit",
      "source": "component:executable_doctrine_grammar",
      "target": "component:doctrine_fact_claim_audit",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:finance_forecast_evaluation_spine:batch12_prediction_market_board_capsule",
      "source": "component:finance_forecast_evaluation_spine",
      "target": "component:batch12_prediction_market_board_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:finance_forecast_evaluation_spine:prediction_oracle_reconciliation",
      "source": "component:finance_forecast_evaluation_spine",
      "target": "component:prediction_oracle_reconciliation",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_evidence_cell_anchor_resolver:formal_math_verifier_trace_repair_loop",
      "source": "component:formal_evidence_cell_anchor_resolver",
      "target": "component:formal_math_verifier_trace_repair_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_evidence_cell_anchor_resolver:proof_diagnostic_evidence_spine",
      "source": "component:formal_evidence_cell_anchor_resolver",
      "target": "component:proof_diagnostic_evidence_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_evidence_cell_anchor_resolver:target_shape_tactic_routing_gate",
      "source": "component:formal_evidence_cell_anchor_resolver",
      "target": "component:target_shape_tactic_routing_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_lean_proof_witness:formal_math_premise_retrieval",
      "source": "component:formal_math_lean_proof_witness",
      "target": "component:formal_math_premise_retrieval",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_lean_proof_witness:formal_math_readiness_gate",
      "source": "component:formal_math_lean_proof_witness",
      "target": "component:formal_math_readiness_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_lean_proof_witness:proof_diagnostic_evidence_spine",
      "source": "component:formal_math_lean_proof_witness",
      "target": "component:proof_diagnostic_evidence_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_lean_proof_witness:verifier_lab_kernel",
      "source": "component:formal_math_lean_proof_witness",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_lean_proof_witness:verifier_lab_execution_spine",
      "source": "component:formal_math_lean_proof_witness",
      "target": "component:verifier_lab_execution_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_premise_retrieval:formal_math_lean_proof_witness",
      "source": "component:formal_math_premise_retrieval",
      "target": "component:formal_math_lean_proof_witness",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_premise_retrieval:formal_math_verifier_trace_repair_loop",
      "source": "component:formal_math_premise_retrieval",
      "target": "component:formal_math_verifier_trace_repair_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_premise_retrieval:lean_std_premise_index",
      "source": "component:formal_math_premise_retrieval",
      "target": "component:lean_std_premise_index",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_premise_retrieval:verifier_lab_kernel",
      "source": "component:formal_math_premise_retrieval",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_premise_retrieval:mathematical_strategy_atlas_hypothesis_scorer",
      "source": "component:formal_math_premise_retrieval",
      "target": "component:mathematical_strategy_atlas_hypothesis_scorer",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_premise_retrieval:ring2_premise_retrieval_precision_recall_harness",
      "source": "component:formal_math_premise_retrieval",
      "target": "component:ring2_premise_retrieval_precision_recall_harness",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_readiness_gate:formal_math_lean_proof_witness",
      "source": "component:formal_math_readiness_gate",
      "target": "component:formal_math_lean_proof_witness",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_readiness_gate:macro_projection_import_protocol",
      "source": "component:formal_math_readiness_gate",
      "target": "component:macro_projection_import_protocol",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_readiness_gate:batch4_proof_authority_runtime",
      "source": "component:formal_math_readiness_gate",
      "target": "component:batch4_proof_authority_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_readiness_gate:provider_context_recipe_budget_policy",
      "source": "component:formal_math_readiness_gate",
      "target": "component:provider_context_recipe_budget_policy",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_readiness_gate:tactic_portfolio_availability_probe",
      "source": "component:formal_math_readiness_gate",
      "target": "component:tactic_portfolio_availability_probe",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_readiness_gate:target_shape_tactic_routing_gate",
      "source": "component:formal_math_readiness_gate",
      "target": "component:target_shape_tactic_routing_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_verifier_trace_repair_loop:formal_evidence_cell_anchor_resolver",
      "source": "component:formal_math_verifier_trace_repair_loop",
      "target": "component:formal_evidence_cell_anchor_resolver",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_verifier_trace_repair_loop:proof_diagnostic_evidence_spine",
      "source": "component:formal_math_verifier_trace_repair_loop",
      "target": "component:proof_diagnostic_evidence_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_verifier_trace_repair_loop:verifier_lab_kernel",
      "source": "component:formal_math_verifier_trace_repair_loop",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_verifier_trace_repair_loop:target_shape_tactic_routing_gate",
      "source": "component:formal_math_verifier_trace_repair_loop",
      "target": "component:target_shape_tactic_routing_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:formal_math_verifier_trace_repair_loop:verifier_lab_execution_spine",
      "source": "component:formal_math_verifier_trace_repair_loop",
      "target": "component:verifier_lab_execution_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:lean_std_premise_index:formal_math_verifier_trace_repair_loop",
      "source": "component:lean_std_premise_index",
      "target": "component:formal_math_verifier_trace_repair_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:lean_std_premise_index:verifier_lab_kernel",
      "source": "component:lean_std_premise_index",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:lean_std_premise_index:mathematical_strategy_atlas_hypothesis_scorer",
      "source": "component:lean_std_premise_index",
      "target": "component:mathematical_strategy_atlas_hypothesis_scorer",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:lean_std_premise_index:undeclared_library_prior_symbol_classifier",
      "source": "component:lean_std_premise_index",
      "target": "component:undeclared_library_prior_symbol_classifier",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:formal_math_readiness_gate",
      "source": "component:macro_projection_import_protocol",
      "target": "component:formal_math_readiness_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:agent_route_observability_runtime",
      "source": "component:macro_projection_import_protocol",
      "target": "component:agent_route_observability_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:mission_transaction_work_spine",
      "source": "component:macro_projection_import_protocol",
      "target": "component:mission_transaction_work_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:navigation_hologram_route_plane",
      "source": "component:macro_projection_import_protocol",
      "target": "component:navigation_hologram_route_plane",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:pattern_binding_contract",
      "source": "component:macro_projection_import_protocol",
      "target": "component:pattern_binding_contract",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:materials_chemistry_closed_loop_lab_safety_replay",
      "source": "component:macro_projection_import_protocol",
      "target": "component:materials_chemistry_closed_loop_lab_safety_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch11_saturation_engines_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch11_saturation_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch8_compliance_pipeline_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch8_compliance_pipeline_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch10_governance_compilers_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch10_governance_compilers_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch10_live_source_drift_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch10_live_source_drift_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch4_proof_authority_runtime",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch4_proof_authority_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch5_authority_systems_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch5_authority_systems_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch6_unsurfaced_primitives_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch6_unsurfaced_primitives_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch7_macro_engines_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch7_macro_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch7_demo_take_console_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch7_demo_take_console_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch7_oracle_sibling_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch7_oracle_sibling_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch7_secondary_runtime_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch7_secondary_runtime_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch8_audio_level_rms_port",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch8_audio_level_rms_port",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch8_policy_engines_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch8_policy_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:batch9_macro_engines_capsule",
      "source": "component:macro_projection_import_protocol",
      "target": "component:batch9_macro_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:concurrency_mission_control",
      "source": "component:macro_projection_import_protocol",
      "target": "component:concurrency_mission_control",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:engine_room_demo",
      "source": "component:macro_projection_import_protocol",
      "target": "component:engine_room_demo",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:macro_projection_import_protocol:executable_doctrine_grammar",
      "source": "component:macro_projection_import_protocol",
      "target": "component:executable_doctrine_grammar",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:materials_chemistry_closed_loop_lab_safety_replay:spatial_world_model_counterfactual_simulation_replay",
      "source": "component:materials_chemistry_closed_loop_lab_safety_replay",
      "target": "component:spatial_world_model_counterfactual_simulation_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mcp_tool_authority_replay:agent_sandbox_policy_escape_replay",
      "source": "component:mcp_tool_authority_replay",
      "target": "component:agent_sandbox_policy_escape_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mcp_tool_authority_replay:sleeper_memory_poisoning_quarantine_replay",
      "source": "component:mcp_tool_authority_replay",
      "target": "component:sleeper_memory_poisoning_quarantine_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:bounded_autonomy_campaign_packet",
      "source": "component:mission_transaction_work_spine",
      "target": "component:bounded_autonomy_campaign_packet",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:concurrency_mission_control",
      "source": "component:mission_transaction_work_spine",
      "target": "component:concurrency_mission_control",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:macro_projection_import_protocol",
      "source": "component:mission_transaction_work_spine",
      "target": "component:macro_projection_import_protocol",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:tool_server_pressure_inventory",
      "source": "component:mission_transaction_work_spine",
      "target": "component:tool_server_pressure_inventory",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:batch10_live_source_drift_capsule",
      "source": "component:mission_transaction_work_spine",
      "target": "component:batch10_live_source_drift_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:batch4_proof_authority_runtime",
      "source": "component:mission_transaction_work_spine",
      "target": "component:batch4_proof_authority_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:batch8_tools_tail_primitives_capsule",
      "source": "component:mission_transaction_work_spine",
      "target": "component:batch8_tools_tail_primitives_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:agent_benchmark_integrity_anti_gaming_replay",
      "source": "component:mission_transaction_work_spine",
      "target": "component:agent_benchmark_integrity_anti_gaming_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:mission_transaction_work_spine:agentic_vulnerability_discovery_patch_proof_replay",
      "source": "component:mission_transaction_work_spine",
      "target": "component:agentic_vulnerability_discovery_patch_proof_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:cold_reader_route_map",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:cold_reader_route_map",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:agent_route_observability_runtime",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:agent_route_observability_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:routing_anti_patterns_registry",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:routing_anti_patterns_registry",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:pattern_binding_contract",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:pattern_binding_contract",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:doctrine_fact_claim_audit",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:doctrine_fact_claim_audit",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:macro_projection_import_protocol",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:macro_projection_import_protocol",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:self_ignorance_coverage_ledger",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:self_ignorance_coverage_ledger",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:voice_to_doctrine_self_improvement_loop",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:voice_to_doctrine_self_improvement_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:engine_room_demo",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:engine_room_demo",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:batch11_saturation_engines_capsule",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:batch11_saturation_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:navigation_hologram_route_plane:batch8_compliance_pipeline_capsule",
      "source": "component:navigation_hologram_route_plane",
      "target": "component:batch8_compliance_pipeline_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:pattern_binding_contract:navigation_hologram_route_plane",
      "source": "component:pattern_binding_contract",
      "target": "component:navigation_hologram_route_plane",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:pattern_binding_contract:agent_route_observability_runtime",
      "source": "component:pattern_binding_contract",
      "target": "component:agent_route_observability_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:pattern_binding_contract:cold_reader_route_map",
      "source": "component:pattern_binding_contract",
      "target": "component:cold_reader_route_map",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:pattern_binding_contract:macro_projection_import_protocol",
      "source": "component:pattern_binding_contract",
      "target": "component:macro_projection_import_protocol",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:pattern_binding_contract:pattern_assimilation_step",
      "source": "component:pattern_binding_contract",
      "target": "component:pattern_assimilation_step",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:pattern_binding_contract:voice_to_doctrine_self_improvement_loop",
      "source": "component:pattern_binding_contract",
      "target": "component:voice_to_doctrine_self_improvement_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:prediction_oracle_reconciliation:batch12_market_dashboard_read_model_capsule",
      "source": "component:prediction_oracle_reconciliation",
      "target": "component:batch12_market_dashboard_read_model_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:prediction_oracle_reconciliation:batch12_prediction_market_board_capsule",
      "source": "component:prediction_oracle_reconciliation",
      "target": "component:batch12_prediction_market_board_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:prediction_oracle_reconciliation:batch8_structural_theses_capsule",
      "source": "component:prediction_oracle_reconciliation",
      "target": "component:batch8_structural_theses_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_derived_governed_mutation_authorization:batch12_release_claim_language_gate",
      "source": "component:proof_derived_governed_mutation_authorization",
      "target": "component:batch12_release_claim_language_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_derived_governed_mutation_authorization:batch4_proof_authority_runtime",
      "source": "component:proof_derived_governed_mutation_authorization",
      "target": "component:batch4_proof_authority_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_derived_governed_mutation_authorization:batch8_policy_engines_capsule",
      "source": "component:proof_derived_governed_mutation_authorization",
      "target": "component:batch8_policy_engines_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_diagnostic_evidence_spine:formal_math_verifier_trace_repair_loop",
      "source": "component:proof_diagnostic_evidence_spine",
      "target": "component:formal_math_verifier_trace_repair_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_diagnostic_evidence_spine:formal_evidence_cell_anchor_resolver",
      "source": "component:proof_diagnostic_evidence_spine",
      "target": "component:formal_evidence_cell_anchor_resolver",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_diagnostic_evidence_spine:formal_math_lean_proof_witness",
      "source": "component:proof_diagnostic_evidence_spine",
      "target": "component:formal_math_lean_proof_witness",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_diagnostic_evidence_spine:verifier_lab_kernel",
      "source": "component:proof_diagnostic_evidence_spine",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_diagnostic_evidence_spine:ring2_premise_retrieval_precision_recall_harness",
      "source": "component:proof_diagnostic_evidence_spine",
      "target": "component:ring2_premise_retrieval_precision_recall_harness",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:proof_diagnostic_evidence_spine:target_shape_tactic_routing_gate",
      "source": "component:proof_diagnostic_evidence_spine",
      "target": "component:target_shape_tactic_routing_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:provider_context_recipe_budget_policy:bounded_autonomy_campaign_packet",
      "source": "component:provider_context_recipe_budget_policy",
      "target": "component:bounded_autonomy_campaign_packet",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:provider_context_recipe_budget_policy:tool_server_pressure_inventory",
      "source": "component:provider_context_recipe_budget_policy",
      "target": "component:tool_server_pressure_inventory",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:public_reveal_walkthrough:batch12_release_claim_language_gate",
      "source": "component:public_reveal_walkthrough",
      "target": "component:batch12_release_claim_language_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:public_reveal_walkthrough:mechanistic_interpretability_circuit_attribution_replay",
      "source": "component:public_reveal_walkthrough",
      "target": "component:mechanistic_interpretability_circuit_attribution_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:public_reveal_walkthrough:batch8_audio_level_rms_port",
      "source": "component:public_reveal_walkthrough",
      "target": "component:batch8_audio_level_rms_port",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:public_reveal_walkthrough:batch8_validator_checker_capsule",
      "source": "component:public_reveal_walkthrough",
      "target": "component:batch8_validator_checker_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:research_replication_rubric_artifact_replay:materials_chemistry_closed_loop_lab_safety_replay",
      "source": "component:research_replication_rubric_artifact_replay",
      "target": "component:materials_chemistry_closed_loop_lab_safety_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:research_replication_rubric_artifact_replay:mechanistic_interpretability_circuit_attribution_replay",
      "source": "component:research_replication_rubric_artifact_replay",
      "target": "component:mechanistic_interpretability_circuit_attribution_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:research_replication_rubric_artifact_replay:prediction_oracle_reconciliation",
      "source": "component:research_replication_rubric_artifact_replay",
      "target": "component:prediction_oracle_reconciliation",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:research_replication_rubric_artifact_replay:spatial_world_model_counterfactual_simulation_replay",
      "source": "component:research_replication_rubric_artifact_replay",
      "target": "component:spatial_world_model_counterfactual_simulation_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:research_replication_rubric_artifact_replay:batch10_cold_eval_honesty_capsule",
      "source": "component:research_replication_rubric_artifact_replay",
      "target": "component:batch10_cold_eval_honesty_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:ring2_premise_retrieval_precision_recall_harness:mathematical_strategy_atlas_hypothesis_scorer",
      "source": "component:ring2_premise_retrieval_precision_recall_harness",
      "target": "component:mathematical_strategy_atlas_hypothesis_scorer",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:ring2_premise_retrieval_precision_recall_harness:verifier_lab_kernel",
      "source": "component:ring2_premise_retrieval_precision_recall_harness",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:routing_anti_patterns_registry:navigation_hologram_route_plane",
      "source": "component:routing_anti_patterns_registry",
      "target": "component:navigation_hologram_route_plane",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:routing_anti_patterns_registry:agent_route_observability_runtime",
      "source": "component:routing_anti_patterns_registry",
      "target": "component:agent_route_observability_runtime",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:routing_anti_patterns_registry:cold_reader_route_map",
      "source": "component:routing_anti_patterns_registry",
      "target": "component:cold_reader_route_map",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:tactic_portfolio_availability_probe:corpus_readiness_mathlib_absence_gate",
      "source": "component:tactic_portfolio_availability_probe",
      "target": "component:corpus_readiness_mathlib_absence_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:tactic_portfolio_availability_probe:formal_math_verifier_trace_repair_loop",
      "source": "component:tactic_portfolio_availability_probe",
      "target": "component:formal_math_verifier_trace_repair_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:tactic_portfolio_availability_probe:target_shape_tactic_routing_gate",
      "source": "component:tactic_portfolio_availability_probe",
      "target": "component:target_shape_tactic_routing_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:tactic_portfolio_availability_probe:undeclared_library_prior_symbol_classifier",
      "source": "component:tactic_portfolio_availability_probe",
      "target": "component:undeclared_library_prior_symbol_classifier",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:tactic_portfolio_availability_probe:verifier_lab_kernel",
      "source": "component:tactic_portfolio_availability_probe",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:target_shape_tactic_routing_gate:formal_math_verifier_trace_repair_loop",
      "source": "component:target_shape_tactic_routing_gate",
      "target": "component:formal_math_verifier_trace_repair_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:target_shape_tactic_routing_gate:formal_evidence_cell_anchor_resolver",
      "source": "component:target_shape_tactic_routing_gate",
      "target": "component:formal_evidence_cell_anchor_resolver",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:target_shape_tactic_routing_gate:proof_diagnostic_evidence_spine",
      "source": "component:target_shape_tactic_routing_gate",
      "target": "component:proof_diagnostic_evidence_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:target_shape_tactic_routing_gate:tactic_portfolio_availability_probe",
      "source": "component:target_shape_tactic_routing_gate",
      "target": "component:tactic_portfolio_availability_probe",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:target_shape_tactic_routing_gate:verifier_lab_kernel",
      "source": "component:target_shape_tactic_routing_gate",
      "target": "component:verifier_lab_kernel",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:undeclared_library_prior_symbol_classifier:corpus_readiness_mathlib_absence_gate",
      "source": "component:undeclared_library_prior_symbol_classifier",
      "target": "component:corpus_readiness_mathlib_absence_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:undeclared_library_prior_symbol_classifier:tactic_portfolio_availability_probe",
      "source": "component:undeclared_library_prior_symbol_classifier",
      "target": "component:tactic_portfolio_availability_probe",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:undeclared_library_prior_symbol_classifier:provider_context_recipe_budget_policy",
      "source": "component:undeclared_library_prior_symbol_classifier",
      "target": "component:provider_context_recipe_budget_policy",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_execution_spine:certificate_kernel_execution_lab",
      "source": "component:verifier_lab_execution_spine",
      "target": "component:certificate_kernel_execution_lab",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_execution_spine:engine_room_demo",
      "source": "component:verifier_lab_execution_spine",
      "target": "component:engine_room_demo",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:corpus_readiness_mathlib_absence_gate",
      "source": "component:verifier_lab_kernel",
      "target": "component:corpus_readiness_mathlib_absence_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:lean_std_premise_index",
      "source": "component:verifier_lab_kernel",
      "target": "component:lean_std_premise_index",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:formal_math_premise_retrieval",
      "source": "component:verifier_lab_kernel",
      "target": "component:formal_math_premise_retrieval",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:tactic_portfolio_availability_probe",
      "source": "component:verifier_lab_kernel",
      "target": "component:tactic_portfolio_availability_probe",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:target_shape_tactic_routing_gate",
      "source": "component:verifier_lab_kernel",
      "target": "component:target_shape_tactic_routing_gate",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:ring2_premise_retrieval_precision_recall_harness",
      "source": "component:verifier_lab_kernel",
      "target": "component:ring2_premise_retrieval_precision_recall_harness",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:formal_math_verifier_trace_repair_loop",
      "source": "component:verifier_lab_kernel",
      "target": "component:formal_math_verifier_trace_repair_loop",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:proof_diagnostic_evidence_spine",
      "source": "component:verifier_lab_kernel",
      "target": "component:proof_diagnostic_evidence_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:formal_math_lean_proof_witness",
      "source": "component:verifier_lab_kernel",
      "target": "component:formal_math_lean_proof_witness",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:verifier_lab_kernel:verifier_lab_execution_spine",
      "source": "component:verifier_lab_kernel",
      "target": "component:verifier_lab_execution_spine",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:voice_to_doctrine_self_improvement_loop:pattern_assimilation_step",
      "source": "component:voice_to_doctrine_self_improvement_loop",
      "target": "component:pattern_assimilation_step",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:world_model_projection_drift_control_room:materials_chemistry_closed_loop_lab_safety_replay",
      "source": "component:world_model_projection_drift_control_room",
      "target": "component:materials_chemistry_closed_loop_lab_safety_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:world_model_projection_drift_control_room:mechanistic_interpretability_circuit_attribution_replay",
      "source": "component:world_model_projection_drift_control_room",
      "target": "component:mechanistic_interpretability_circuit_attribution_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:world_model_projection_drift_control_room:prediction_oracle_reconciliation",
      "source": "component:world_model_projection_drift_control_room",
      "target": "component:prediction_oracle_reconciliation",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:world_model_projection_drift_control_room:spatial_world_model_counterfactual_simulation_replay",
      "source": "component:world_model_projection_drift_control_room",
      "target": "component:spatial_world_model_counterfactual_simulation_replay",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:world_model_projection_drift_control_room:tool_server_pressure_inventory",
      "source": "component:world_model_projection_drift_control_room",
      "target": "component:tool_server_pressure_inventory",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:world_model_projection_drift_control_room:batch12_market_dashboard_read_model_capsule",
      "source": "component:world_model_projection_drift_control_room",
      "target": "component:batch12_market_dashboard_read_model_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     },
     {
      "id": "edge:wire:world_model_projection_drift_control_room:batch8_structural_theses_capsule",
      "source": "component:world_model_projection_drift_control_room",
      "target": "component:batch8_structural_theses_capsule",
      "relation": "declared_dependency_untyped",
      "label": "declared wiring"
     }
    ],
    "rendered_body_omitted": true
   }
  }
 },
 "pages": [
  {
   "id": "page:overview",
   "relative_href": "index.html",
   "path": "index.html",
   "title": "Microcosm",
   "nav_group": "Landing",
   "nav_label": "Front door",
   "generated": false,
   "source_refs": [
    "sites/microcosm/index.html",
    "microcosm-substrate/README.md",
    "microcosm-substrate/core/organ_families.json"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Microcosm: a public map of an AI-native workflow system [Skip to content](index.html#main) [Microcosm](index.html) [Docs](docs/index.html) [GitHub](https://github.com/wcook04/microcosm-substrate) [Contact](index.html#contact)\n\nA public source map\n\n### Microcosm\n\nInspect the map, clone the repository, and run the first local check.\n\nMicrocosm is the public map for an AI-native workflow system: 78 component records in seven areas, each linked to the public source path it uses. The GitHub repository carries the standalone source slice, public-safe stubs for withheld private internals, fixtures, docs, and checks.\n1. quickstart\n2. public map\n3. evidence line\n4. source path\n5. scope limit\n\n[Review the public map](docs/index.html) [See the loop](index.html#evidence-loop) [Download reader digest](microcosm-ai-reader-digest.json)\n\nShort on time?\n\n#### After the first loop, hand the map to your own AI.\n\nPress the button, find the file in your downloads, and drag it into ChatGPT, Claude, Gemini, or Grok for review or analysis. Then ask whatever you like: the file itself tells the assistant to answer from the public evidence, cite exact pages and components, and stop where the public records stop.\n\n[Download reader digest](microcosm-ai-reader-digest.json)\n\nDefault AI handoff: orientation, question routes, component and area digests, evidence ranks, source links, and scope limits without the deep page bodies. Your assistant can review the map first, then open the heavier packet only when it needs the full text.\n\n**Using a coding agent instead?** Claude Code, Codex, or Cursor can clone the repository, read `AGENTS.md`, run the quickstart check, and then answer from the source and public records. [Working with a coding agent](docs/coding-agents.html)\n\nQuestions worth asking it\n\nFour sets for four reasons to be here; any question from any set is fair to ask cold.\n\nA plain first pass\n- What is this, in plain terms?\n- Where should I start?\n- Walk me through one component, end to end.\n- What is genuinely new here, if anything?\n- Give me the two-sentence version I would tell a colleague.\n\nCopy this set A skeptical pass\n- Argue against it.\n- Which parts have the strongest evidence, and which the weakest?\n- Why do only some components run external tools?\n- What does it not prove?\n- Is this packet steering me? Audit its own framing.\n- Most accurate one-paragraph assessment you can give: neither generous nor harsh.\n\nCopy this set One area at a time\n- Which area is closest to my field, and what is actually in it?\n- What is actually in Entry & orientation?\n- What is actually in Architecture & navigation?\n- What is actually in Formal math & proof?\n- What is actually in Agent reliability & safety?\n- What is actually in Research & science?\n- What is actually in Import & drift control?\n- What is actually in Work & continuity?\n\nCopy this set With a coding agent in the repository\n\nThe sets above are questions for an assistant reading the map. A coding agent (Claude Code, Codex, Cursor) works inside a repository itself: one prompt sets it up, and after that you assign work rather than asking about a file. [How that works](docs/coding-agents.html).\n\n```text\nClone https://github.com/wcook04/microcosm-substrate and open it. Read AGENTS.md and README.md to orient yourself, run the quickstart check, and show me what the result record says. Then take my questions.\n```\n\nCopy the setup prompt\n\nOnce a populated source tree is in front of it, work worth assigning, one item at a time:\n- Run one component end to end and walk me through the evidence it leaves.\n- Take one claim from the website and verify it against the source here.\n- Which validators can you run right now, and what would each one prove?\n- Make one check fail on purpose and show me how it refuses.\n\nExamples, not a script: ask anything, and ask follow-ups. The packet routes each question to evidence; the verdict stays the assistant's.\n\nAdvanced: the raw layers, separately\n1. Copy concise guide\n\nA short orientation to paste in, for chats where a file upload is not possible.\n2. [Download full review packet](microcosm-ai-review-packet.json)\n\nThe advanced full-text layer: starter prompts, view descriptors, component records, and the public page bodies in one larger file.\n3. Download full JSON map\n\nThe raw public map without the packet\u2019s instruction layers, for automation.\n\nDirect files, if a button fails or JavaScript is off: [reader digest](microcosm-ai-reader-digest.json) \u00b7 [full review packet](microcosm-ai-review-packet.json) \u00b7 [llms.txt](llms.txt)\n\nStart here\n1. [1 Clone the repository](https://github.com/wcook04/microcosm-substrate)\n2. [2 Run the quickstart check](docs/quickstart.html)\n3. [3 Check the evidence line](docs/evidence.html)\n4. [4 Open the system map](docs/architecture.html#whole-system-map)\n5. [5 Review it both ways](index.html#review)\n\nThis is a working local source slice, not a finished or hosted product.\n\nruns locally public source slice you can report issues no hosted service evidence-scoped claims\n\nWhy this is here\n\n#### A way in, and a way to check it.\n\nMicrocosm comes from a larger AI-native system I have been building with AI. I have not put all of it online: it includes live tools and non-public data, and releasing the whole thing at once did not seem sensible or responsible. This is a smaller public source slice instead, built around source-linked components, public-safe stubs, and small synthetic fixtures, so the shape of the work can be inspected without publishing the live working environment.\n\nThe idea behind it is that useful AI capability should build up in things you can inspect, like source links, evidence ranks, result records, and stated limits, rather than inside one-off model runs that leave nothing to check. The site is a small, checkable version of that.\n- It is meant as a way in. You can start from the map, open a component, and read its evidence record, source reference, and the line on its scope boundary, so nothing here asks you to take a summary on trust. The public repository carries the standalone source slice and its local checks.\n- If something here is confusing, or claims more than it shows, I would rather hear it. Please [let me know](docs/contact.html).\n\nThis is the everyday version of [derivation before assertion](docs/doctrine.html#the-root-constraints): where the site makes a claim, it tries to give you enough of the source trail to check it yourself, including the point where the public version stops.\n\nFirst loop\n\n#### What is here, and what is not, in one pass.\n\nThe fastest way to understand Microcosm today is not to read all 78 component records. Clone the repository, run the quickstart check, then follow one public record to its evidence line, source path, and scope limit.\n1. [1 Clone the repository.](https://github.com/wcook04/microcosm-substrate)\n2. [2 Run the quickstart check and inspect the result record.](docs/quickstart.html)\n3. [3 Read the evidence kind, rank, real-tool marker, and the line that says what the pass scope boundary.](docs/evidence.html)\n4. [4 Inspect one component card, such as the cold-reader route map, and follow its source link.](docs/components.html#component-cold_reader_route_map)\n5. [5 Read where the public record stops, and check the site never claims past it.](docs/source.html#provenance)\n\nThe loop is the useful unit: quickstart \u2192 public map \u2192 component card \u2192 evidence line \u2192 source path \u2192 scope limit.\n\nHow to read this site\n\n#### The source first, then the map.\n\nThis website is the current public map over the source slice. The quickstart is the natural first step; the architecture, evidence, and source pages read better once you have seen the local result record.\n- [First Run quickstart Clone the public source slice and inspect the first local result record.](docs/quickstart.html)\n- [Evidence What the pass proves Read the evidence kind, independence rank, real-tool marker, and the scope limit.](docs/evidence.html)\n- [Architecture Whole-system map The shared path every component binds to, drawn from the source files.](docs/architecture.html#whole-system-map)\n- [Source Open the repository Apache-2.0 source slice with public-safe stubs where private internals are withheld.](https://github.com/wcook04/microcosm-substrate)\n\nThe site and repository must agree: the map explains the public slice, and the repository is the source you can inspect and run.\n\nWhat this is\n\n#### [Seventy-eight components across seven areas. \u2192](docs/components.html)\n- Each of the seven areas carries component records for the public slice. Formal math and proof has a Lean and Lake proof-witness pipeline, premise retrieval, tactic routing, and verifier-trace repair. Agent reliability and safety replays sabotage, sandbox-escape, prompt-injection, and memory-poisoning cases. Research and science covers finance forecasting, a spatial world model, and a replication rubric. The rest cover source import and drift control, architecture and navigation, work and continuity, and entry and orientation.\n- The populated source slice is designed to run locally against a folder and write readable state without external model calls. The public repository contains the standalone source slice; non-public internals stay out or appear only as explicit public-safe stubs.\n- Most bind to one shared path that runs from a project on disk through to a result you can read.\n- Each component declares its own evidence: a class, a strength rank from 1 to 5 for how independently it is checked, and a line on its scope boundary. The card gives you that, so you can judge it on the evidence rather than the wording.\n- Some components run real tools: the Lean prover, Lake, finance statistics, git provenance checks. Others derive their verdict over copied source or a declared contract against small synthetic fixtures. Each card says which, in plain language.\n\n**What it is not.** It is not a hosted agent service, not a production security product, and not a maturity score. Reads as 78 components Means 78 public component contracts, each with its own evidence line Does not mean product maturity, or whole-system correctness To check it open a [component card](docs/components.html), read its [evidence class and rank](docs/evidence.html), then the line on its scope boundary\n\nWhat's real\n\n#### [What runs, and how it's checked. \u2192](docs/evidence.html)\n\nSome components execute real tools or runtimes: the [Lean prover](docs/area-formal-math.html) and Lake, [finance statistics code](docs/area-research.html#component-finance_forecast_evaluation_spine), git provenance checks, or copied modules run in process. Others derive an independent verdict over a public contract and small fixtures. These are separate signals: the rank tells you how independent the verdict is; the execution marker tells you whether the public witness invokes extra machinery.\n\n**How to read the rank.** Rank measures verdict independence, not how much machinery a component runs or how mature it is: how far a check can reach its own pass or fail rather than echo an answer a fixture handed it, from 1, where the fixture supplies the answer, to 5, where the check derives the whole verdict with nothing fed to it. A component can run real tools and still sit at a bounded rank; a validator with no tool can rank higher when it checks more of its own contract unaided.\n- Running a real tool and earning a high rank are separate signals. A real-tool run is bounded to a small scope on purpose, so it is capped at 4: a bounded run proves less than a check that derives its own verdict. [The evidence page](docs/evidence.html) ranks all 78 and says what each class checks.\n- A fixture-bound replay is not a product substitute. It is the public-safe form of a mechanism that should not be disclosed as live private-system authority: it exposes the mechanism, the boundary, and the refusal, not a running service.\n- The weakest class is honest about being weak: it confirms a fixture is well-formed. That is shape, not behaviour, and the components that carry it say so on their own card.\n\nA class and a rank describe how a component checks its own contract and fixtures. They do not claim whole-system correctness, live freshness, or anything past the component's stated scope. Each component holds that line in its own \u201cscope boundary\u201d text.\n\nClaim audit\n\n#### When an agent says it's done.\n\nThe Agent Claim Audit Casebook is a small evidence companion released with this site: redacted, replayable cases where an agent completion note or a monitor sign-off sounds finished, and the evidence records say something smaller. Each case runs a deliberately shallow reader next to the evidence check, so you can see exactly which claims survive and which are lowered or blocked.\n- One case is a real agent trace whose \"committed, clean\" completion note lacked a final delta and any terminal validation; the claim is lowered, not accepted.\n- One plants fabricated commit, ledger, and test-pass claims in a fixture completion note: real git and pytest witnesses block each one with a typed error code.\n- One takes a monitor's \"coverage complete, cleared\" sign-off and reduces it to what its probes actually backed. A verdict is not authority; its evidence is.\n\nThe casebook also records what it refused: candidates rejected for publication safety, candidates deferred as redundant, and a selection index over recent agent sessions, so the cases are picked by criteria rather than chosen to flatter. It does not claim general agent honesty, deception detection, or production monitoring coverage; each case states its scope boundary. The casebook is available as a download alongside this site.\n\nWhy this shape\n\n#### Why a slice, and not the whole thing.\n\nThe fuller system is not all here, and that is on purpose. Putting its live parts and private data online at once did not seem sensible or responsible, so the public version shows the shape of the work in a form you can inspect on your own.\n- It is standalone code you can run, with non-secret source copied and checked against where it came from, and result records over small synthetic fixtures.\n- The fixtures are there for a reason: they are how a piece of the work can be shown without shipping the live system it normally runs against. Where a component only checks the shape of a fixture, its card says so.\n- You can inspect the public map with no special access: run the quickstart, read the ranks, open the source paths, and follow the records.\n\nIf you would find it useful to see more of the fuller system, and have the background to, the [contact routes](index.html#contact) are below.\n\nExplore by area\n\n#### [Seven areas, one map. \u2192](docs/components.html)\n\nThe 78 components are grouped into seven areas, and each one leads into the source behind it. The one that matches why you came is the natural way in. The strongest material is near the top; the lighter, fixture-bound pieces say so on their own card.\n\n[##### Formal math & proof \u2192 Pieces of a proof pipeline you can open and run: premise retrieval over a copied Lean Std index, tactic routing, verifier-trace repair, claim separation. Three components run the real Lean prover locally on bounded examples; the rest release the checking layers as contracts you can open. Lean proof witness \u00b7 Verifier trace repair \u00b7 Premise retrieval](docs/area-formal-math.html) [##### Architecture & navigation \u2192 The shared path every component binds to, and the pattern rules and routing that give the system its shape and let you move through it. Pattern binding \u00b7 Routing plane \u00b7 Standards diagnostics](docs/area-architecture.html) [##### Import & drift control \u2192 The boundary that copies non-secret material into the public tree, checks it against its origin, and flags anything that has drifted. Source projection import \u00b7 Source-drift checks \u00b7 Drift control room](docs/area-import-drift.html) [##### Work & continuity \u2192 How reversible work is recorded, how landing decisions are made, and how a detached run picks back up where it left off. Work transactions \u00b7 Landing replay \u00b7 Continuity runtime](docs/area-continuity.html) [##### Research & science \u2192 Replays of scientific and forecasting work, run over synthetic fixtures. One runs real finance statistics code; the rest check the shape of a result rather than producing it. Finance forecast evaluation \u00b7 Spatial world model \u00b7 Replication rubric](docs/area-research.html) [##### Agent reliability & safety \u2192 Agent failure modes you can open and inspect, replayed over fixtures: sabotage, sandbox escape, prompt injection, memory poisoning. These are specimens, not live defences. Sabotage monitor \u00b7 Sandbox-escape replay \u00b7 Prompt-injection policy](docs/area-agent-reliability.html) [##### Entry & orientation \u2192 How a newcomer first meets the system and follows a short guided path through it. Cold-reader route map \u00b7 Guided walkthrough](docs/area-entry.html) [##### Browse the docs \u2192 Open the documentation to browse every area, the quickstart, and how the system fits together. Go to the docs](docs/index.html)\n\nOptional context\n\n#### Wider-system views, mapped back to evidence.\n\nMicrocosm is the public map of a wider system I have been building. These globally-blurred stills are optional context from its frontend, the working console its backend serves. The public artifact is still the map above: each still only opens the part of the public map it points at. Additional orientation, code-map, component, and inspector views are held until their source-capability receipts exist. The underlying source footage stays private.\n\n[Work in motion##### See how the system watches its agents run An agent-trace workbench: a live fleet of runs streaming in. Opens the agent-observability runtime in the public map. Open in the map \u2192](docs/architecture.html#map=component:agent_route_observability_runtime) [Domain execution##### See a research workload running A market-intelligence view: records on the left, an inspector on the right. Opens the finance-forecast evaluation spine in the public map. Open in the map \u2192](docs/architecture.html#map=component:finance_forecast_evaluation_spine) \u2039 \u203a\n\nOpen a view to land on its node in the public map. There you can select any node to inspect it, then open it (double-click, or press Enter) to follow it into the component, its evidence record, and the source on GitHub. The blur is baked into the image, not a filter that can be switched off. Additional code-map, orientation, inspection, and component views are prepared privately and added only when their source-capability receipts exist.\n\nReview it\n\n#### Built to be read sceptically.\n\nIt is worth reading sceptically, in both directions: a rank can overstate a component, but the plain wording can also undersell one. The system is built to be held to that standard, so it seems fair to do the same. A short route:\n1. [1 Start from a component card and its evidence record here.](docs/components.html)\n2. [2 Run the quickstart check before expecting broad component behaviour.](docs/quickstart.html)\n3. [3 Read how each component is checked: the 1-to-5 rank and the line on its scope boundary.](docs/evidence.html)\n4. [4 Compare a strong component with a weak one. The weak ones say so on their own card; check that they are right to.](docs/evidence.html)\n5. [5 Read where the public version stops, and confirm the site never claims past it.](docs/source.html#provenance)\n\nOr hand it to your own assistant and ask it to argue against me:\n\n```text\nRead this repository as a calibration reviewer. First, by area, name the strongest components and what each actually does, with its evidence class. Then judge both directions: where the wording claims more than the evidence shows, and where it undersells what a component demonstrates. Do not reduce the system to a set of projections; computed projection is one evidence class among several.\n```\n\nWhat would help\n\n#### If you think this is worth it.\n\nI'm not selling anything and there is nothing to sign up for. If Microcosm seems worth your time, here is what actually helps.\n1. [1 Run the review route and tell me where a claim reaches past its evidence, or where the wording undersells what is there.](index.html#review)\n2. [2 Open an issue or start a discussion if a component claims more than it proves.](https://github.com/wcook04/microcosm-substrate/discussions)\n3. 3 Tell me what I have got wrong, or what you would do differently. I'm a student without industry experience, so a careful outside read of the design, the boundaries, or the writing helps more than anything.\n\nThe model time this runs on comes out of a student budget I cover myself, so it is the real limit on how fast the work moves. Feedback is still the most useful thing you can give; if you would rather help with the compute side, the email above is the way to do it.\n\nSource & contact\n\n#### Open the source, or get in touch.\n\nThe public repository is up now with the standalone source slice, docs, fixtures, and checks. You can reach me directly below.\n\n[**GitHub repository** Standalone source slice, docs, fixtures, and checks. Open repo](https://github.com/wcook04/microcosm-substrate) [**Documentation** Quickstart, architecture, whole-system map, and the seven areas. Read docs](docs/index.html) [**Whole-system map** The architecture map, drawn from the public source files behind it. Open map](docs/architecture.html#whole-system-map) [**Source, license & provenance** Apache-2.0 terms, authorship, the no-affiliation note, and where the public slice ends. Open reference](docs/source.html#provenance) [**Security policy** Use the public repository policy for vulnerability reports or source-site issues. Open policy](https://github.com/wcook04/microcosm-substrate/security/policy) [**Repository discussions** Use public repository issues or discussions for questions, critique, or collaboration. Open GitHub](https://github.com/wcook04/microcosm-substrate/discussions) **Email** Reach me at williamwkcook+microcosm@gmail.com with questions, feedback, or anything you think I have got wrong. Send email [**LinkedIn** Will Cook, who builds and maintains Microcosm. Open profile](https://www.linkedin.com/in/will-cook-278127234/)\n\nPublic security contact: [repository security policy](https://github.com/wcook04/microcosm-substrate/security/policy) \u00b7 [GitHub source](https://github.com/wcook04/microcosm-substrate)\n\nEvery area names the public source path it maps and the evidence record that bounds it. **The website, reader digest, and repository should agree on the public source slice and its scope limits.** If you are pointing an automated agent at Microcosm today, give it the repository, public packets, and this site.\n\nMicrocosm: a public cross-section of an AI-native workflow system.\n\n[Docs](docs/index.html) [GitHub](https://github.com/wcook04/microcosm-substrate) [Contact](index.html#contact)",
    "byte_count": 22957,
    "packaging": "curated_landing_public_text_markdown_without_repeated_export_chrome"
   }
  },
  {
   "id": "page:docs-overview",
   "relative_href": "docs/index.html",
   "path": "docs/index.html",
   "title": "Overview",
   "nav_group": "Getting started",
   "nav_label": "Overview",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/README.md",
    "microcosm-substrate/core/organ_families.json"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Getting started\n\n### Overview\n\nMicrocosm is a runnable public inspection surface for an AI-native workflow system. You run bounded components locally and read what they produced; every component declares the evidence behind it and a plain boundary showing where its scope stops.\n\n#### [What it is \u2192](docs/tour.html)\n\nMicrocosm is the part of a larger working system that can stand on its own in public: components that are runnable, readable, and checkable against their own source. The rest stays private: parts of it are live and handle private data, so the whole thing is not online.\n\nIt is not a hosted service and makes no external model calls. When you run it locally, it writes its state into a folder beside your project so you can follow what it did and trace each step back to the source behind it.\n\n#### What you can do here\n- [**Run one local witness**](docs/quickstart.html) by cloning the repository and running the first component against a folder.\n- **Read the result record** in the local `.microcosm/` state, then open the component card it points to.\n- [**Check the evidence line**](docs/evidence.html): evidence kind, independence rank, real-tool marker, and the scope limit.\n- [**Open the whole-system map**](docs/architecture.html#whole-system-map) after the first loop is concrete.\n- **Browse the seven areas**, the system's components grouped by what they do.\n- **Open the source**, and follow any page back to the files behind it.\n\n#### [The seven areas \u2192](docs/components.html)\n\nThere are 78 components in total. That's a lot to meet at once, so they're grouped into seven areas; the one that matches why you came is the way in:\n- [Entry & orientation](docs/area-entry.html). How a newcomer first meets Microcosm and follows a short guided path through it.\n- [Architecture & navigation](docs/area-architecture.html). The core primitives, pattern rules, and routing that give the system its shape.\n- [Formal math & proof](docs/area-formal-math.html). Inspectable pieces of a proof pipeline: premise retrieval over a copied Lean Std index, tactic routing, verifier-trace repair, and claim-separation result records. Three components run the real Lean/Lake prover locally on bounded examples; the rest publish the pipeline's checking layers as contracts you can open.\n- [Agent reliability & safety](docs/area-agent-reliability.html). Source-open replays of agent failure modes as inspectable specimens.\n- [Research & science](docs/area-research.html). Replays that stand in for scientific and forecasting workflows, run over synthetic fixtures.\n- [Import & drift control](docs/area-import-drift.html). The boundary that brings non-secret material into the public tree and flags drift.\n- [Work & continuity](docs/area-continuity.html). How reversible work is recorded, landing decisions are made, and runs resume.\n\n#### Next steps\n\n[**Quickstart \u2192** Clone and run the first local witness.](docs/quickstart.html) [**What it is, in full \u2192** A guided read after the evidence loop is concrete.](docs/tour.html) [**What the pass proves \u2192** Evidence kinds, ranks, real-tool markers, and boundaries.](docs/evidence.html) [**Whole-system map \u2192** The rendered map and scene packet behind the architecture.](docs/architecture.html#whole-system-map) [**Components \u2192** Browse the generated component index.](docs/components.html)",
    "byte_count": 3353,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:tour",
   "relative_href": "docs/tour.html",
   "path": "docs/tour.html",
   "title": "What Microcosm is",
   "nav_group": "Getting started",
   "nav_label": "What it is (full tour)",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Getting started\n\n### What Microcosm is\n\nA plain walk through what Microcosm publishes today: a source-linked public map of a working local system, the [components](docs/components.html) you can inspect from public records, the [evidence](docs/evidence.html) each one names, and the line where every claim stops.\n\n#### What it is\n\nMicrocosm is the public map of a larger working system. The larger system is AI-native: software where the ideas come from a person and AI agents execute the building and the upkeep, structured so that an agent's work is stored as evidence a separate check can read. Most of that system stays private. What is open here today is the public source slice: component cards, evidence classes, source paths, synthetic-fixture boundaries, scope limits, source files, and pages that say plainly how far each claim goes. The live public repository carries the runnable standalone slice, not the private working root behind it.\n\nStart with the [Quickstart](docs/quickstart.html) or the repository `README.md`. A coding agent can clone the repository, read `AGENTS.md`, run the bounded quickstart check, and inspect the `.microcosm/` result record. The public slice stays local: it writes beside your files, does not call a model provider, and keeps each claim tied to the source, evidence record, and scope limit that support it.\n\n#### [What a component is, and how to read one \u2192](docs/components.html)\n\nThe public map contains seventy-eight [components](docs/components.html) grouped into seven areas. Each one takes a single job and turns it into a public contract: what the component is for, what evidence class backs it, which source path owns it, and where the claim stops. Some contracts run over bounded public files; others are fixture-bound, card-only, or evidence records. Every component carries a card that says what it does, which class of evidence backs it, the command or route associated with it, and the line that matters most, the thing it refuses to claim. The [evidence rank](docs/evidence.html) is how independently the check can fail, not a maturity badge: a high rank means the result is hard to fake, and even the strongest check stops at the scope its card declares. One card read this way carries the idea; the full map comes easier after it.\n\n#### [Doctrine \u2192](docs/doctrine.html)\n\nUnderneath all of it is a short set of [rules](docs/rules-and-ideas.html) the whole slice obeys, the floor every claim has to meet before it is allowed to mean anything. [Recompute a verdict from the evidence underneath](docs/doctrine.html#dcard-p-1) rather than trust a label, since an assertion on its own carries no weight. [Keep the trust in a small checker](docs/doctrine.html#dcard-p-3) you can rerun, the way a proof is only ever as strong as the kernel willing to accept it. Authority comes from proof, policy, and the state of the world, never from a standing account secret or a confident voice. When the evidence is missing, [fail closed](docs/doctrine.html#dcard-p-6) and stay blocked until something genuinely earns the pass, and never read silence as success. When a computation cannot be done honestly, [refuse it with a reason](docs/doctrine.html#dcard-p-8) instead of returning a number that looks fine and means nothing. [Carry where every value came from](docs/doctrine.html#dcard-p-9), hold a live count to [a way of refreshing it](docs/doctrine.html#dcard-p-11), and [keep a generated page below the source](docs/doctrine.html#dcard-p-15) it was built from. The rule I lean on hardest is the last one: this page meets the same floor as everything else, which is why it can tell you what it cannot prove. The axioms and principles behind these are laid out on the [Doctrine](docs/doctrine.html) page.\n\n#### [The seven areas \u2192](docs/components.html)\n\nWhat makes them one system is a shared path most of them plug into rather than calling each other, `project -> catalog -> pattern -> standard -> route -> work -> event -> evidence -> explanation -> assimilation`.\n- [Entry and orientation](docs/area-entry.html) is the front door and the short guided path, honest that it is a walk-through and not the whole system.\n- [Architecture and navigation](docs/area-architecture.html) is the shape itself, the kernel primitives and routing that every other component binds to.\n- [Import and drift control](docs/area-import-drift.html) is the membrane between this open slice and the private system, bringing in material by [manifest and digest](docs/area-import-drift.html#component-macro_projection_import_protocol), watching for [drift](docs/area-import-drift.html#component-world_model_projection_drift_control_room) when a projection wanders from its source, and never letting a copy outrank the original.\n- [Work and continuity](docs/area-continuity.html) is how a run actually lands, with [landing records](docs/area-continuity.html#component-durable_agent_work_landing_replay), leases, [resumes](docs/area-continuity.html#component-bridge_phase_continuity_runtime) after a pause, and [concurrency control](docs/area-continuity.html#component-concurrency_mission_control) so two writers cannot quietly clobber each other and a cheerful `done` is never mistaken for finished work.\n- [Agent reliability and safety](docs/area-agent-reliability.html) keeps the ways agents go wrong as specimens you can open, from [sandbox escape](docs/area-agent-reliability.html#component-agent_sandbox_policy_escape_replay) and [prompt injection](docs/area-agent-reliability.html#component-indirect_prompt_injection_information_flow_policy_replay) through [memory poisoning](docs/area-agent-reliability.html#component-sleeper_memory_poisoning_quarantine_replay), [sabotage](docs/area-agent-reliability.html#component-agent_sabotage_scheming_monitor_replay), [tool authority](docs/area-agent-reliability.html#component-mcp_tool_authority_replay), and [benchmark gaming](docs/area-agent-reliability.html#component-agent_benchmark_integrity_anti_gaming_replay), all as study specimens and not live defenses.\n- [Formal math and proof](docs/area-formal-math.html) is a proof pipeline under glass, where most steps check [premises](docs/area-formal-math.html#component-formal_math_premise_retrieval), [tactics](docs/area-formal-math.html#component-target_shape_tactic_routing_gate), and [traces](docs/area-formal-math.html#component-formal_math_verifier_trace_repair_loop), and only a few like the [Lean witness](docs/area-formal-math.html#component-formal_math_lean_proof_witness) compile a tiny public example through Lean.\n- [Research and science](docs/area-research.html) runs the same honesty over synthetic fixtures, showing what [replication](docs/area-research.html#component-research_replication_rubric_artifact_replay), [forecasting](docs/area-research.html#component-prediction_oracle_reconciliation), [interpretability](docs/area-research.html#component-mechanistic_interpretability_circuit_attribution_replay), and a [finance forecast](docs/area-research.html#component-finance_forecast_evaluation_spine) would each have to carry before anyone should believe them, with the advice boundary kept shut.\n\n#### [Where to start \u2192](docs/quickstart.html)\n\nIf you have ten minutes today, open the overview, run or read the quickstart, then inspect one component card, its evidence line, its source path, and its scope limit. That one loop is the idea in small: a public claim, the evidence record it names, and a clear edge where the claim ends. The site and AI packet are the reading surface; the repository is the source of record.",
    "byte_count": 7569,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:quickstart",
   "relative_href": "docs/quickstart.html",
   "path": "docs/quickstart.html",
   "title": "Quickstart",
   "nav_group": "Getting started",
   "nav_label": "Quickstart",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/QUICKSTART.md",
    "microcosm-substrate/SOURCE_STATUS.md"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Getting started\n\n### Quickstart\n\nMicrocosm runs locally against a folder. The shortest path is a clone, a clean check, and the first screen.\n\nA coding agent (Claude Code, Codex, Cursor) can run this whole page for you; [working with a coding agent](docs/coding-agents.html) is that path.\n\n#### 1. Clone the repository\n\n```text\ngit clone https://github.com/wcook04/microcosm-substrate\ncd microcosm-substrate\n```\n\n#### 2. Run the one-command check\n\nA single command confirms the local slice is runnable on your machine before you install anything:\n\n```text\n./bootstrap.sh\n```\n\nIt runs against a small built-in example and writes its output into an ignored `.microcosm/` folder beside the project. Nothing leaves your machine.\n\n#### 3. Open the first screen\n\nFrom a source checkout, run the behavior-first card first, then inspect status, boundaries, and the optional map:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core tour --card .\nPYTHONPATH=src python3 -m microcosm_core status --card .\nPYTHONPATH=src python3 -m microcosm_core authority --card\nPYTHONPATH=src python3 -m microcosm_core workingness --card\nPYTHONPATH=src python3 -m microcosm_core hello .\nPYTHONPATH=src python3 -m microcosm_core first-screen --card .\nPYTHONPATH=src python3 -m microcosm_core legibility-scorecard\n```\n\nOr, after installing the local command:\n\n```text\nmicrocosm tour --card .\nmicrocosm status --card .\nmicrocosm authority --card\nmicrocosm workingness --card\nmicrocosm hello .\nmicrocosm first-screen --card .\nmicrocosm legibility-scorecard\n```\n\n`tour --card` writes the local witness; `hello` prints the non-writing map; `status` and the boundary cards show what the run recorded and where it stops.\n\nThe [Overview](docs/index.html) is the gentler first read. The full first-run guide and command reference live in the repository's README.",
    "byte_count": 1823,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:coding-agents",
   "relative_href": "docs/coding-agents.html",
   "path": "docs/coding-agents.html",
   "title": "Working with a coding agent",
   "nav_group": "Getting started",
   "nav_label": "With a coding agent",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/AGENTS.md",
    "microcosm-substrate/README.md"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Getting started\n\n### Working with a coding agent\n\nMost commands on this site will be run by an agent, not typed by a person. This page is the path for that.\n\n#### The third reading form\n\nMicrocosm reads in three forms. The pages here are for people. The [Reader digest](../microcosm-ai-reader-digest.json) is for a chat assistant: one smaller file it reads and compresses for you. The repository itself is for a coding agent: an AI that works inside a folder of files rather than a chat tab, such as Claude Code, Codex, or Cursor. Opened inside the repository, the agent reads the source, runs the components, and checks the result records directly: the same loop this site describes, executed rather than narrated.\n\n#### The path\n\nNo git knowledge is assumed, and nothing here needs typing into a terminal: the agent performs the clone and runs the commands itself.\n1. Install a coding agent. Claude Code, Codex, and Cursor each install from their own documentation; any agent harness that works in a local folder fits.\n2. Give it the prompt below.\n3. Ask in plain language from there.\n\n```text\nClone https://github.com/wcook04/microcosm-substrate and open it. Read AGENTS.md and README.md to orient yourself, run the quickstart check, and show me what the result record says. Then take my questions.\n```\n\nCopy the setup prompt\n\nThe repository carries its own orientation file for agents, `AGENTS.md`, so the agent does not arrive cold.\n\n#### What the agent finds\n\nThe repository gives the agent the same material this site projects, in runnable form: the component source under `src/`, the fixtures each component runs against, validators it can execute, result records accumulating in `.microcosm/`, and the same scope limits the site prints. The command blocks across this site are written so an agent can execute them verbatim; the [quickstart](docs/quickstart.html) is the usual first request.\n\n#### [Same evidence rules \u2192](docs/evidence.html)\n\nThe agent works under the same boundary the packet states: claims stop where public records stop, and a scope limit bounds authority rather than describing depth. Asking the agent to take one claim from this site and verify it against the source is the intended use, not an adversarial one.",
    "byte_count": 2243,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:architecture",
   "relative_href": "docs/architecture.html",
   "path": "docs/architecture.html",
   "title": "How it fits together",
   "nav_group": "The system",
   "nav_label": "How it fits together",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/ARCHITECTURE.md",
    "microcosm-substrate/core/architecture_kernel.json",
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "The system\n\n### How it fits together\n\nMost components are standalone. What holds them together is one shared path and a clear line between the public slice and the private system.\n\n#### A slice, not the whole\n\nMicrocosm is a cross-section of a larger system. What's here runs on its own; the larger working environment stays out of the public tree. Each component is chosen because it can be understood and run without that context.\n\n#### The shared path\n\nHowever different the areas look, most components bind to one shared path. It runs from a project on disk through to an explanation you can read and an assimilation loop that feeds the next pass:\n\nproject \u2192 catalog \u2192 pattern \u2192 standard \u2192 route \u2192 work \u2192 event \u2192 evidence \u2192 explanation \u2192 assimilation\n\nA component reads a **project**, finds the right **pattern** and the **standard** it answers to, follows a **route** to do some **work**, records the **events** and the **evidence** they produced, reaches a plain **explanation**, and feeds **assimilation** back into the system. That repetition is what makes a large system navigable.\n\nGenerated map\n\n#### Whole-system map\n\nThis map shows 7 public areas, 78 components, and the shared path they bind to. 52 components declare 208 direct links to neighbours. Those direct links are source-declared but not typed as stronger proof, causal, or maturity relations.\n\nAn interactive picture of the seven public areas, the shared path, and every public component. Hover or select a node to isolate its neighbours, pick a focus, or open a component to drill into its card. Whole map Seven areas and shared path Shared architecture path Explicit component wiring Area Shared path Component project -> catalog -> pattern -> standard -> route -> work -> event -> evidence -> explanation -> assimilation\n1. [**Entry & orientation** 2 components](docs/area-entry.html)\n2. [**Architecture & navigation** 10 components](docs/area-architecture.html)\n3. [**Formal math & proof** 18 components](docs/area-formal-math.html)\n4. [**Agent reliability & safety** 17 components](docs/area-agent-reliability.html)\n5. [**Research & science** 8 components](docs/area-research.html)\n6. [**Import & drift control** 19 components](docs/area-import-drift.html)\n7. [**Work & continuity** 4 components](docs/area-continuity.html)\n\n**7 areas** 78 components 208 declared links\n\n##### Explicit component wiring\n\nOnly source-declared neighbour links are shown here. They stay marked as declared wiring, not stronger relation types.\n- Agent Benchmark Integrity Anti Gaming Replay 2 declared links\n- Agent Memory Temporal Conflict Replay 1 declared links\n- Agent Monitor Redteam Falsification Replay 1 declared links\n- Agent Route Observability Runtime 15 declared links\n- Agent Sandbox Policy Escape Replay 1 declared links\n- Live Source Drift Bundle 1 declared links\n- Saturation Engines Bundle 4 declared links\n- Market Dashboard Read-Model Bundle 1 declared links\n- Prediction Market Board Bundle 1 declared links\n- Demo Take Console Source Bundle 2 declared links\n- Trace, Code-Map & Scheduling Engines Bundle 3 declared links\n- Oracle Sibling Source Bundle 1 declared links\n- Compliance Pipeline Bundle 4 declared links\n- Structural Theses Finance Bundle 1 declared links\n- Validator Checker Bundle 2 declared links\n- Backend & Governance Engines Bundle 1 declared links\n- Bridge Phase Continuity Runtime 2 declared links\n- Cold Reader Route Map 8 declared links\n- Concurrency Mission Control 2 declared links\n- Corpus Readiness Mathlib Absence Gate 4 declared links\n- Doctrine Fact Claim Audit 2 declared links\n- Durable Agent Work Landing Replay 2 declared links\n- Engine Room Demo 2 declared links\n- Executable Doctrine Grammar 1 declared links\n- Finance Forecast Evaluation Spine 2 declared links\n- Formal Evidence Cell Anchor Resolver 3 declared links\n- Formal Math Lean Proof Witness 5 declared links\n- Formal Math Premise Retrieval 6 declared links\n- Formal Math Readiness Gate 6 declared links\n- Formal Math Verifier Trace Repair Loop 5 declared links\n- Lean Std Premise Index 4 declared links\n- Source Projection Import Protocol 23 declared links\n- Materials Chemistry Closed Loop Lab Safety Replay 1 declared links\n- MCP Tool Authority Replay 2 declared links\n- Mission Transaction Work Spine 9 declared links\n- Navigation Hologram Route Plane 11 declared links\n- Pattern Binding Contract 6 declared links\n- Prediction Oracle Reconciliation 3 declared links\n- Proof Derived Governed Mutation Authorization 3 declared links\n- Proof Diagnostic Evidence Spine 6 declared links\n- Provider Context Recipe Budget Policy 2 declared links\n- Public Reveal Walkthrough 4 declared links\n- Research Replication Rubric Artifact Replay 5 declared links\n- Ring2 Premise Retrieval Precision Recall Harness 2 declared links\n- Routing Anti Patterns Registry 3 declared links\n- Tactic Portfolio Availability Probe 5 declared links\n- Target Shape Tactic Routing Gate 5 declared links\n- Undeclared Library Prior Symbol Classifier 3 declared links\n- Verifier Lab Execution Spine 2 declared links\n- Verifier Lab Kernel 10 declared links\n- Voice To Doctrine Self Improvement Loop 1 declared links\n- World Model Projection Drift Control Room 7 declared links\n\nMachine-readable scene packet: [architecture-graph-scene.json](architecture-graph-scene.json).\n\n#### Standalone by default\n\nMost components don't call each other. They're independent specimens that share the path above. A few are wired to named neighbours, and each one says which.\n\n#### Local and self-contained\n\nRunning a component writes into a `.microcosm/` folder beside your project. It doesn't change your source files and doesn't make external calls. The output is something you can open and trace.\n\nThis is the public overview map of the areas and the path most components share.",
    "byte_count": 5825,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:doctrine",
   "relative_href": "docs/doctrine.html",
   "path": "docs/doctrine.html",
   "title": "Doctrine",
   "nav_group": "The system",
   "nav_label": "Doctrine",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/axioms/AX-1.json",
    "microcosm-substrate/principles/P-1.json",
    "microcosm-substrate/anti_principles/AP-1.json",
    "microcosm-substrate/core/doctrine_lattice_coverage.json"
   ],
   "content_refs": {
    "doctrine_entity_refs": [
     "principle:P-1",
     "principle:P-2",
     "principle:P-3",
     "principle:P-4",
     "principle:P-5",
     "principle:P-6",
     "principle:P-7",
     "principle:P-8",
     "principle:P-9",
     "principle:P-10",
     "principle:P-11",
     "principle:P-12",
     "principle:P-13",
     "principle:P-14",
     "principle:P-15",
     "principle:P-16",
     "principle:P-17",
     "principle:P-18",
     "principle:P-19",
     "principle:P-20",
     "axiom:AX-1",
     "axiom:AX-2",
     "axiom:AX-3",
     "axiom:AX-4",
     "axiom:AX-5",
     "axiom:AX-6",
     "axiom:AX-7",
     "axiom:AX-8",
     "axiom:AX-9",
     "axiom:AX-10",
     "axiom:AX-11",
     "axiom:AX-12",
     "anti_principle:AP-1",
     "anti_principle:AP-2",
     "anti_principle:AP-3",
     "anti_principle:AP-4",
     "anti_principle:AP-5",
     "anti_principle:AP-6",
     "anti_principle:AP-7",
     "anti_principle:AP-8",
     "anti_principle:AP-9",
     "anti_principle:AP-10",
     "anti_principle:AP-11",
     "anti_principle:AP-12",
     "anti_principle:AP-13",
     "anti_principle:AP-14",
     "anti_principle:AP-15",
     "anti_principle:AP-16",
     "anti_principle:AP-17",
     "concept:concept.agent_reliability_and_safety_validator_bundle",
     "concept:concept.architecture_and_navigation_route_contract_bundle",
     "concept:concept.entry_and_reveal_route_readiness_bundle",
     "concept:concept.executable_doctrine_grammar_standard_bundle",
     "concept:concept.first_screen_doctrine_effect_frame",
     "concept:concept.formal_math_and_proof_witness_bundle",
     "concept:concept.import_projection_and_drift_control_bundle",
     "concept:concept.research_and_science_replay_evidence_bundle",
     "concept:concept.standards_meta_diagnostics_bundle",
     "concept:concept.voice_to_doctrine_self_improvement_loop_bundle",
     "concept:concept.work_landing_and_continuity_control_bundle",
     "mechanism:mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "mechanism:mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "mechanism:mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "mechanism:mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "mechanism:mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "mechanism:mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "mechanism:mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "mechanism:mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "mechanism:mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "mechanism:mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "mechanism:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "mechanism:mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "mechanism:mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "mechanism:mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "mechanism:mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "mechanism:mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "mechanism:mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "mechanism:mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "mechanism:mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "mechanism:mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "mechanism:mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "mechanism:mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "mechanism:mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "mechanism:mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "mechanism:mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "mechanism:mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "mechanism:mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "mechanism:mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "mechanism:mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "mechanism:mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "mechanism:mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "mechanism:mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "mechanism:mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "mechanism:mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "mechanism:mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "mechanism:mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "mechanism:mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "mechanism:mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "mechanism:mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "mechanism:mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "mechanism:mechanism.engine_room_demo.validates_public_engine_room_demo",
     "mechanism:mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "mechanism:mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "mechanism:mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "mechanism:mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "mechanism:mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "mechanism:mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "mechanism:mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "mechanism:mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "mechanism:mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "mechanism:mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "mechanism:mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "mechanism:mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "mechanism:mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "mechanism:mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "mechanism:mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "mechanism:mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "mechanism:mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "mechanism:mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "mechanism:mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "mechanism:mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "mechanism:mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "mechanism:mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "mechanism:mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "mechanism:mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "mechanism:mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "mechanism:mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "mechanism:mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "mechanism:mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "mechanism:mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "mechanism:mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "mechanism:mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "mechanism:mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "mechanism:mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "mechanism:mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "mechanism:mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "mechanism:mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "mechanism:mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "mechanism:mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "mechanism:mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "mechanism:mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "mechanism:mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "mechanism:mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "mechanism:mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary"
    ],
    "rules_and_ideas_refs": [
     "P-1",
     "P-2",
     "P-3",
     "P-4",
     "P-5",
     "P-6",
     "P-7",
     "P-8",
     "P-9",
     "P-10",
     "P-11",
     "P-12",
     "P-13",
     "P-14",
     "P-15",
     "P-16",
     "P-17",
     "P-18",
     "P-19",
     "P-20",
     "AX-1",
     "AX-2",
     "AX-3",
     "AX-4",
     "AX-5",
     "AX-6",
     "AX-7",
     "AX-8",
     "AX-9",
     "AX-10",
     "AX-11",
     "AX-12",
     "AP-1",
     "AP-2",
     "AP-3",
     "AP-4",
     "AP-5",
     "AP-6",
     "AP-7",
     "AP-8",
     "AP-9",
     "AP-10",
     "AP-11",
     "AP-12",
     "AP-13",
     "AP-14",
     "AP-15",
     "AP-16",
     "AP-17",
     "concept.agent_reliability_and_safety_validator_bundle",
     "concept.architecture_and_navigation_route_contract_bundle",
     "concept.entry_and_reveal_route_readiness_bundle",
     "concept.executable_doctrine_grammar_standard_bundle",
     "concept.first_screen_doctrine_effect_frame",
     "concept.formal_math_and_proof_witness_bundle",
     "concept.import_projection_and_drift_control_bundle",
     "concept.research_and_science_replay_evidence_bundle",
     "concept.standards_meta_diagnostics_bundle",
     "concept.voice_to_doctrine_self_improvement_loop_bundle",
     "concept.work_landing_and_continuity_control_bundle",
     "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "mechanism.engine_room_demo.validates_public_engine_room_demo",
     "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "paper_module.verifier_lab_kernel",
     "paper_module.navigation_hologram_route_plane",
     "paper_module.agent_route_observability_runtime",
     "paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "paper_module.research_replication_rubric_artifact_replay",
     "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "paper_module.certificate_kernel_execution_lab",
     "paper_module.corpus_readiness_mathlib_absence_gate",
     "paper_module.pattern_binding_contract",
     "paper_module.bridge_phase_continuity_runtime",
     "paper_module.cognitive_operator_registry",
     "paper_module.agent_closeout_faithfulness_audit",
     "paper_module.cold_reader_route_map",
     "paper_module.proof_diagnostic_evidence_spine",
     "paper_module.proof_derived_governed_mutation_authorization",
     "paper_module.durable_agent_work_landing_replay",
     "paper_module.work_landing_control_spine",
     "paper_module.executable_doctrine_grammar",
     "paper_module.macro_projection_import_protocol",
     "paper_module.mission_transaction_work_spine",
     "paper_module.formal_math_readiness_gate",
     "paper_module.formal_math_lean_proof_witness",
     "paper_module.formal_math_verifier_trace_repair_loop",
     "paper_module.formal_evidence_cell_anchor_resolver",
     "paper_module.formal_math_premise_retrieval",
     "paper_module.lean_std_premise_index",
     "paper_module.world_model_projection_drift_control_room",
     "paper_module.public_reveal_walkthrough",
     "paper_module.standards_meta_diagnostics",
     "paper_module.finance_forecast_evaluation_spine",
     "paper_module.engine_room_demo",
     "paper_module.agent_memory_temporal_conflict_replay",
     "paper_module.agent_monitor_redteam_falsification_replay",
     "paper_module.agent_sabotage_scheming_monitor_replay",
     "paper_module.agent_sandbox_policy_escape_replay",
     "paper_module.belief_state_process_reward_replay",
     "paper_module.sleeper_memory_poisoning_quarantine_replay",
     "paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "paper_module.mcp_tool_authority_replay",
     "paper_module.tactic_portfolio_availability",
     "paper_module.target_shape_tactic_routing",
     "paper_module.ring2_premise_precision_recall",
     "paper_module.mathematical_strategy_atlas",
     "paper_module.verifier_lab_execution_spine",
     "paper_module.bounded_autonomy_campaign_packet",
     "paper_module.computer_use_action_trace_replay",
     "paper_module.concurrency_mission_control",
     "paper_module.doctrine_fact_claim_audit",
     "paper_module.self_ignorance_coverage_ledger",
     "paper_module.tool_server_pressure_inventory",
     "paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "paper_module.spatial_world_model_counterfactual_simulation_replay",
     "paper_module.prediction_oracle_reconciliation",
     "paper_module.provider_context_recipe_budget",
     "paper_module.undeclared_library_prior_classifier",
     "paper_module.voice_to_doctrine_self_improvement_loop",
     "paper_module.routing_anti_patterns_registry",
     "paper_module.batch8_audio_level_rms_port",
     "paper_module.batch8_compliance_pipeline_capsule",
     "paper_module.batch8_policy_engines_capsule",
     "paper_module.batch8_structural_theses_capsule",
     "paper_module.batch8_tools_tail_primitives_capsule",
     "paper_module.batch8_validator_checker_capsule",
     "paper_module.batch12_market_dashboard_read_model_capsule",
     "paper_module.batch12_prediction_market_board_capsule",
     "paper_module.batch12_release_claim_language_gate",
     "paper_module.batch10_cold_eval_honesty_capsule",
     "paper_module.batch10_live_source_drift_capsule",
     "paper_module.batch7_macro_engines_capsule",
     "paper_module.batch9_macro_engines_capsule",
     "paper_module.pattern_assimilation",
     "paper_module.batch10_governance_compilers_capsule",
     "paper_module.batch11_saturation_engines_capsule",
     "paper_module.batch4_proof_authority_runtime",
     "paper_module.batch6_unsurfaced_primitives_capsule",
     "paper_module.engine_room_public_projection_leak_gate",
     "paper_module.batch5_authority_systems_capsule",
     "paper_module.batch7_oracle_sibling_capsule",
     "paper_module.batch7_demo_take_console_capsule",
     "paper_module.engine_room_generated_projection_drift_gate",
     "paper_module.engine_room_command_run_singleflight",
     "paper_module.engine_room_metabolism_runtime",
     "paper_module.engine_room_bridge_campaign_dag",
     "paper_module.engine_room_annex_knowledge_router",
     "paper_module.engine_room_derived_fact_provider_engine",
     "paper_module.engine_room_egress_self_compliance_gate",
     "paper_module.engine_room_lean_proof_search_lab",
     "paper_module.engine_room_navigation_fitness_benchmark",
     "paper_module.cold_clone_probe",
     "paper_module.first_screen_composition_root",
     "paper_module.batch7_secondary_runtime_capsule",
     "paper_module.microcosm_axiom_substrate"
    ],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Doctrine. The commitments Microcosm applies before a claim, route, count, import, or page is allowed to mean anything: its axioms, principles, and anti-principles. The full doctrine entity body records are carried once in visible_text_index.logical_records.doctrine_entities. Doctrine synopsis and relationship rows point to those records by body_pointer.",
    "byte_count": 355,
    "packaging": "reference_page_shell_with_doctrine_entity_records_carried_once"
   }
  },
  {
   "id": "page:area-entry",
   "relative_href": "docs/area-entry.html",
   "path": "docs/area-entry.html",
   "title": "Entry & orientation",
   "nav_group": "Areas",
   "nav_label": "Entry & orientation",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [
     "cold_reader_route_map",
     "public_reveal_walkthrough"
    ],
    "family_id": "entry_and_reveal"
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Area \u00b7 2 components\n\n### Entry & orientation\n\nHow a newcomer first meets Microcosm and follows a short guided path through it.\n\n#### Components\n\nCold Reader Route Map Verifies the first-run guided path so every step names a real command, doc, and evidence. 5/5\n\nDoes It checks Microcosm's \"what do I run first\" guided path so that every step on the cold-reader route map is backed by a real command, a public doc reference, and an evidence result record instead of just prose promises. A newcomer can therefore trust that the suggested ten-minute first-run tour is actually wired and honestly labeled, with small verified counts shown as plain accounting rather than success badges.\n\nScope limit It is projection-only metadata that validates the declared public route contract; it is not route registry control and excludes source-file changes, external model access, launch/public sharing, financial decisions, private-data equivalence, or whole-system correctness.\n\nRun\n\n```text\nmicrocosm cold-reader-route-map run-route-map-bundle --input examples/cold_reader_route_map/exported_cold_reader_route_map_bundle --out receipts/runtime_shell/demo_project/organs/cold_reader_route_map --card\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Navigation Hologram Route Plane](docs/components.html#component-navigation_hologram_route_plane), [Agent Route Observability Runtime](docs/components.html#component-agent_route_observability_runtime), [Pattern Binding Contract](docs/components.html#component-pattern_binding_contract), [Doctrine Fact Claim Audit](docs/components.html#component-doctrine_fact_claim_audit), [Pattern Assimilation Step](docs/components.html#component-pattern_assimilation_step), [Routing Anti Patterns Registry](docs/components.html#component-routing_anti_patterns_registry), [Self Ignorance Coverage Ledger](docs/components.html#component-self_ignorance_coverage_ledger), [Voice To Doctrine Self Improvement Loop](docs/components.html#component-voice_to_doctrine_self_improvement_loop)\n\nagent-entry getting-started interesting-parts\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.cold_reader_route_map) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Cold-Reader Route Map\n\nExplains component [Cold Reader Route Map](docs/components.html#component-cold_reader_route_map) mechanism [validates public first run route map](docs/rules-and-ideas.html#lattice-mechanism-mechanism-cold-reader-route-map-validates-public-first-run-route-map) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Make doctrine executable before authoritative](docs/doctrine.html#dcard-p-12)\n\n`cold_reader_route_map` makes Microcosm's first ten minutes executable. It validates a public route map whose rows bind the first-run sequence to runnable commands, docs refs, result record refs, and scope limits.\n\n###### Purpose\n\nA cold technical reader should not have to infer the product path from a long README or raw result record tree. The route map answers one question: what should I run first, and what evidence proves that path is wired?\n\nThe unusual part is how the validator checks that proof. It does not merely confirm that each route row carries the right fields. It replays every route against real source: each row's command, its docs refs, its result record refs, and the human-readable signals it claims to show are matched against the actual text of copied source modules and public docs. A command whose material tokens do not appear anywhere in that source corpus is blocked, as is a docs ref that does not resolve to a real heading and a result record ref that does not open a pass-status result record. So a route cannot promise a command the system does not actually run, which is the failure mode a hand-written quick-start guide drifts into the moment the commands change underneath it.\n\nThe evidence contract is source-open by default: public route cards, route result record bindings, route policy, exported bundle refs, and generated result records carry the system, while `secret_exclusion_scan` excludes only private source bodies, model-output data, account or browser material, secrets, and account secret-equivalent live-access data. Result record bodies are not inlined; they are represented by `body_in_receipt: false` plus public runtime refs.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR subgraph Entry[\"First-screen entry\"] Project[\"Public project path repo -> .microcosm\"] First[\"First-screen card claim frame, first command, evidence legend, exit rule\"] end subgraph Accounting[\"Route-map accounting\"] Route[\"Ordered route rows command, result record ref, evidence class\"] Ceiling[\"Scope boundary and scope limit attached to each row\"] end subgraph ReaderBranch[\"Reader branch\"] Branch[\"Reader branch choose one first action\"] Safety[\"Safety/evals status, authority, workingness\"] Hiring[\"Hiring reviewer first-screen card, legibility scorecard\"] Developer[\"Peer developer tour, observe, explain or compile\"] end subgraph Boundary[\"Proof boundary\"] Drilldown[\"Drilldowns tour, status, explain, observe, compile, serve\"] Result record[\"Result records and route refs public refs only; body_in_receipt false\"] end Project --> First First --> Route Route --> Ceiling Route --> Branch Branch --> Safety Branch --> Hiring Branch --> Developer Safety --> Drilldown Hiring --> Drilldown Developer --> Drilldown Ceiling --> Result record Drilldown --> Result record\n```\n\n###### Reader Evidence Routing\n\nStart with `core/paper_module_capsules.json::paper_modules[13:paper_module.cold_reader_route_map]`, then read the generated JSON projection for the resolved relationships. A diagram view is generated for this module and an atlas card entry is available. The route-map fixture, exported bundle, source-module manifests, and temporary result records are evidence for replay shape. This Markdown gives cold readers the interpretation order, source-linked only.\n\n###### Prior Art Grounding\n\nThis component is grounded in documentation systems that treat reader state and task shape as first-class. [Diataxis](https://diataxis.fr/) separates tutorials, how-to guides, reference, and explanation so readers are not forced through one undifferentiated documentation pile. Knuth's [literate programming](https://cs.stanford.edu/~knuth/lp.html) is an older anchor for the idea that executable systems should be written for human comprehension as well as machine execution.\n\nMicrocosm borrows the reader-route pattern: first command, result record ref, evidence class, scope boundary, scope limit, and next drilldown are ordered for a cold reader. It does not make the route map source authority or substitute documentation sequence for validator evidence.\n\n###### Reader-Specific Evidence Routing\n\nThe route map should make the evidence-count frame visible before the reader chooses a drilldown. Honest counters are not progress badges:\n- A safety/evals engineer follows `microcosm status --card`, `microcosm authority --card`, and `microcosm workingness --card` first. The useful question is whether each claim names its evidence class, validator, failure mode, and scope limit.\n- A hiring reviewer follows the first-screen card and legibility scorecard first. The useful question is whether small verified counts are framed as honest proof boundaries instead of hidden or inflated.\n- A peer developer follows `microcosm tour --card`, `microcosm observe --card`, and then full `microcosm observe`, `microcosm compile`, or `microcosm explain` as drilldowns. The useful question is whether a fresh clone can reproduce the route/work/event/evidence chain locally without opening full event rows first.\n\nThe route map must therefore preserve both the command order and the evidence interpretation order: command, result record ref, evidence class, scope boundary, scope limit, then deeper route. Reader-specific branches may hide other branches, but they may not hide the accounting frame that prevents \"1 verified import\" from being read as either failure or marketing.\n\n###### One-Screen Handoff Contract\n\nThe route map consumes the first-screen card as the handoff, not as another route row. A cold reader should see this sequence:\n1. First-screen card: claim frame, `microcosm hello <project>`, shared proof, evidence legend, structural join, reader rail, and exit rule.\n2. Route map: the accepted command order, with result record refs and scope limits attached to each command.\n3. Reader branch: one audience-specific first action, one proof surface, one success criterion, and one next drilldown.\n\nThe handoff fails when the first screen turns into a complete route inventory, or when the route map assumes the reader already understands evidence classes. The first screen should compress; the route map should sequence; the reveal should demonstrate the path against public result records.\n\n###### Comparison-Backed Route Rows\n\nEach route row should make the unusual discipline visible by naming the normal failure mode it is avoiding. The route map is not just a command list; it is a sequence of claim-boundary checks:\n\nRoute row field Failure avoided Required reader cue `command_ref` Prose-only claims about what runs. Show the exact local command before the claim it supports. `receipt_ref` Trusting generated summaries as source authority. Point to the result record or validator that bounds the row. `evidence_class` Treating all evidence as equal proof. Label body import, subprocess witness, projection, validator, or fixture evidence. anti_claim Letting a successful demo imply launch, production, provider, or proof authority. State the forbidden read beside the positive claim. `failure_mode_ref` Governance looking like abstract ceremony. Name the concrete overclaim or missing-standard case this row catches.\n\nRows that omit the comparison cue are still technically navigable, but they make the rigor invisible to a cold reader. The validator should prefer a shorter row with command, result record, class, scope boundary, and failure mode over a longer row that lists more components without explaining what each boundary prevents.\n\n###### Observable Drilldown Order\n\nBrowser-first readers follow the same route map as terminal-first readers. The route order is compressed, not replaced:\n1. First-screen card or compact browser board.\n2. `microcosm tour --card <project>` as the shared behavior proof.\n3. Selected route plus work/event/evidence refs.\n4. Compact observatory view for the same route.\n5. Full route map, result records, standards, and raw JSON drilldowns.\n\nThe compact observatory row must carry the same command ref, result record ref, evidence class, scope boundary, and scope limit as the terminal route row. If the browser board cannot show those fields, it is a preview only and cannot serve as the cold-reader route handoff.\n\n`readme_onboarding_route` is the selected route only for projects with a README; folders without one still get a route/work/event/evidence path through the selected route emitted by `tour` and `compile`.\n\nEach route card must include a command and public docs refs. Each route id must also resolve to at least one result record ref. The sequence must be ordinal sorted so the public entry does not drift into a bag of impressive but unordered components.\n\n###### Validation\n\nThe fixture observes negative cases for missing command refs, missing result record refs, route sequence gaps, launch/provider overclaims, and private source body fields. The exported bundle omits negative cases and validates the real runtime shape used by `microcosm run`, with synthetic result record stand-ins explicitly disallowed as product evidence. If focused validation reports an exact-copy source-module body mismatch, route that repair through `microcosm_exact_copy_refresh`; do not treat this Markdown projection as the authority for copied source bodies.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThe focused pytest file is the proof consumer for this Markdown section. It asserts the fixture status, ten-route command and result record-ref counts, front-door route order, expected negative cases, route-source replay support, exported bundle shape, copied source-module digest and anchor matches, source-open fixture-manifest counts, no source bodies in public result records, streamed line-count and digest handling, and fresh exported-bundle card reuse. The corpus check verifies that this page remains in the 98-module paper-module set and that the JSON bundle, generated Mermaid, Atlas card, and Markdown projection stay mutually consistent.\n\nThese result records validate the route-map fixture, exported bundle result records, copied cold-entry evidence, and paper-module corpus membership only; they do not grant route registry control, external model service, source-file changes, launch-scope decision, private-data equivalence, financial decisions, publishing-scope decision, hosted readiness, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module covers public cold-reader route-map validation: command refs, result record refs, ordinal route sequencing, evidence classes, scope boundaries, scope limits, exported-bundle provenance, copied cold-entry evidence, and negative cases for missing refs, sequence gaps, overclaims, and private body fields.\n\nThe ceiling stops before route-registry source authority, live session inspection, external model service, source-file changes, hosted readiness, launch, public sharing, private-data equivalence, or whole-system correctness. The route map can tell a cold reader what to run first and which result record bounds that run; it cannot promote the docs sequence into proof beyond those public fixtures and result records.\n\n###### Scope limit\n\nThis component is projection-only metadata. It is not route registry control, it does not change source files projects, it does not use external model services, and it excludes launch, public sharing, trading or financial decisions, private-data equivalence, or whole-system correctness claims.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open body floor is the public route-map fixture, route card set, route policy, exported cold-reader route-map bundle, source-module manifests, and generated result records. It carries public refs, digests, route ids, result record refs, evidence classes, scope boundaries, scope limits, and `body_in_receipt: false` markers instead of inlining private source or live state.\n\nThe floor excludes private source bodies, model-output data, account or browser material, browser or HUD state, account secret-equivalent live-access data, recipient state, and route-registry mutation authority. A reader can inspect the route map and exported bundle to reproduce the first-run sequence, but the bundle remains evidence for public replay shape rather than launch or production authority.\n\nPublic Reveal Walkthrough Binds the first-time reader tour to evidence so each count leads to a source. 4/5 Runs real tools\n\nDoes This checks the short guided tour Microcosm advertises for a first-time reader and binds it to real public evidence: the declared route through patterns, work, events, and evidence must still point to result records, and the exported reveal bundle must carry digest-verified copies of the public source bodies that back the walkthrough. The card remains bounded, but each impressive-looking count leads to a source-body witness instead of stopping at marketing copy.\n\nScope limit It authorizes only bounded public reveal runtime behavior and a digest-verified public body-import witness; it excludes launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-data equivalence, Lean/Lake execution, whole-system correctness, or general product authority.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.public_reveal_walkthrough run --input fixtures/first_wave/public_reveal_walkthrough/input --out receipts/first_wave/public_reveal_walkthrough\n```\n\nEvidence Bounded runtime computation evidence 4/5 Real runtime result\n\nLinks to [Release Public Wording Gate](docs/components.html#component-batch12_release_claim_language_gate), [Mechanistic Interpretability Circuit Attribution Replay](docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay), [Audio Level RMS Port](docs/components.html#component-batch8_audio_level_rms_port), [Validator Checker Bundle](docs/components.html#component-batch8_validator_checker_capsule)\n\ngetting-started interesting-parts evaluation\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/public_reveal_walkthrough.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Public Reveal Walkthrough\n\nExplains component [Public Reveal Walkthrough](docs/components.html#component-public_reveal_walkthrough) mechanisms [validates public reveal walkthrough](docs/rules-and-ideas.html#lattice-mechanism-mechanism-public-reveal-walkthrough-validates-public-reveal-walkthrough) [validates public first screen composition root](docs/rules-and-ideas.html#lattice-mechanism-mechanism-first-screen-composition-root-validates-public-first-screen-composition-root) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\n`public_reveal_walkthrough` is the accepted component that makes Microcosm's public reveal executable instead of descriptive.\n\nIt validates a ten-minute cold-reader path:\n1. Compile a project into `.microcosm/`.\n2. Inspect catalog, patterns, and routes.\n3. Explain one route through patterns, standard pressure, work, events, and evidence.\n4. Open the observatory causal chain before raw JSON drilldown.\n5. Run `microcosm intake` to see the source projection intake cells connected to spine, reveal, and runtime evidence.\n6. Read the result records and scope limit.\n\nThe component reads public fixtures from `fixtures/first_wave/public_reveal_walkthrough/input/` and exported runtime input from `examples/public_reveal_walkthrough/exported_public_reveal_bundle/`.\n\nIt emits:\n- `receipts/first_wave/public_reveal_walkthrough/public_reveal_walkthrough_result.json`\n- `receipts/first_wave/public_reveal_walkthrough/ten_minute_reveal_board.json`\n- `receipts/first_wave/public_reveal_walkthrough/public_reveal_validation_receipt.json`\n- result records/sign-off/first_wave/public_reveal_walkthrough_fixture_acceptance.json\n\nThe reveal path treats `microcosm intake` as a runtime bridge rather than a private planning note. The command exposes `runtime_reveal_import_bridge`, keeps `formal_math_readiness_extensions` visible as a public replacement when its extension board exists, and points back to the source projection intake board without copying private source bodies.\n\n###### Purpose\n\nA cold reader meeting Microcosm for the first time needs one thing the README cannot give them on its own: proof that the first ten minutes are real and not a tour of screenshots. This component answers a single question. Can a reader who has never seen the system run a short, fixed path from a command to local state, to a route, to the result record and source boundary behind it, with nothing on that path that the system does not actually run?\n\nThe validator enforces that path as an accounting floor rather than a narrative. A reveal only passes if it carries at least five steps, four distinct runnable commands, and four evidence refs, and if four overclaim fixtures stay rejected: a launch or hosting claim, a private-data equivalence claim, a step with no evidence ref, and marketing copy with no command behind it. The floor exists because a walkthrough drifts towards a hero pitch the moment it is allowed to. Removing the commands and the result record refs is the easiest way to make a reveal look more impressive and prove less.\n\nThe part worth noting is the real-lane witness. The fixture run does not pass on its own paperwork. It is gated on the exported reveal bundle actually running, with its copied source bodies present and digest-verified. If that backing run is missing or blocked, the fixture is marked blocked too, with `real_runtime_receipt` set to false. So the reveal cannot describe a runnable path while the runnable path is broken underneath it, which is the quiet failure mode of every quick-start guide that says more than it can execute.\n\n###### Shape\n\nPublic Reveal Walkthrough is the source-backed entry membrane for a cold technical reader. It turns the local Microcosm first-run path into a runnable accounting exercise: commands produce local state, routes point at work and events, evidence refs point at result records, and scope limits keep the visual or browser layer from becoming a product or public-sharing claims.\n\nSource refs\n\nJSON bundle `paper_module.public_reveal_walkthrough` Runtime component `public_reveal_walkthrough.py` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.public_reveal_walkthrough\"] Fixture[\"First-wave public reveal fixture 10-minute route + negative cases\"] Bundle[\"Exported public reveal bundle 5 copied source bodies\"] Runtime[\"Runtime component public_reveal_walkthrough.py\"] Shell[\"Runtime shell bridge microcosm intake + public reveal view\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Reader[\"Cold reader route command -> route -> evidence refs -> ceiling\"] Ceiling[\"Scope limit no launch, hosting, provider, or private-system claims\"] Bundle --> Runtime Fixture --> Runtime Bundle --> Runtime Runtime --> Result records Runtime --> Shell Shell --> Reader Result records --> Reader Reader --> Ceiling\n```\n\nThe runtime shape has five bounded inputs:\n- the public reveal fixture under `fixtures/first_wave/public_reveal_walkthrough/input`;\n- the exported reveal bundle under `examples/public_reveal_walkthrough/exported_public_reveal_bundle`;\n- the source-module manifest for copied source bodies;\n- the component source and focused tests that enforce command, evidence, and negative-case behavior;\n- the standard and JSON bundle that bind the paper module to the mechanism, source locus, and scope limit.\n\nThe proof shape is route-first rather than dashboard-first. A valid reveal shows a command, a selected route, the route explanation through work/events/ evidence, result record refs, evidence-class counts, and the scope boundary beside any impressive total. Generated cards, observatory views, and browser/video boards are presentation layers over that accounting path.\n\nThe negative-case shape is part of the floor. launch or hosting overclaims, private-data equivalence, missing evidence refs, and marketing-only reveal material must remain rejected. If those refusals stop appearing, the reveal is no longer bounded enough for a cold reader.\n\nThe source-open shape is also bounded. The exported bundle carries five copied public bodies, and the manifest verifies exact-copy relation, digests, material classes, and metadata-only result records.\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[paper_module.public_reveal_walkthrough]` sets `source_authority: json_capsule`, binds the component, binds `mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough`, and resolves `src/microcosm_core/organs/public_reveal_walkthrough.py`.\n- Generated instance: `paper_modules/public_reveal_walkthrough.json` reports `source_authority: json_capsule`, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges_after_atlas_binding`, 20 relationship edges, and a resolved `paper_module.depends_on.paper_module` edge to `paper_module.first_screen_composition_root` because the reveal path spends the first-screen composition contract before deeper route/evidence drilldown.\n- Runtime and shell consumers: `src/microcosm_core/organs/public_reveal_walkthrough.py` exposes `run`, `run_reveal_bundle`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `PUBLIC_SAFE_SOURCE_BODY_CLASSES`. `src/microcosm_core/runtime_shell.py` routes the exported reveal bundle through `public_reveal_walkthrough.run_reveal_bundle` and publishes the `public_reveal_view` runtime lens.\n- Result record and test floor: `receipts/first_wave/public_reveal_walkthrough/public_reveal_walkthrough_result.json`, `ten_minute_reveal_board.json`, `public_reveal_validation_receipt.json`, and result records/sign-off/first_wave/public_reveal_walkthrough_fixture_acceptance.json are metadata-only evidence. `tests/test_public_reveal_walkthrough.py` checks the fixture path, exported-bundle path, source-module digest validation, negative cases, and public-relative result record posture.\n- Claim boundary: `standards/std_microcosm_public_reveal_walkthrough.json`, the generated structured source record, and this page limit the module to public reveal walkability, route/evidence accounting, exact-copy public source-body import evidence, negative-case rejection, and metadata-only result records. They do not include launch operations, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, source-file changes, Lean/Lake execution, or whole-system correctness.\n\n###### Source-Backed Mechanism\n\nThe source mechanism is `mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough` in `core/mechanism_sources.json`.\n\nThe runtime locus is `src/microcosm_core/organs/public_reveal_walkthrough.py`. The source symbols that matter for cold-agent drilldown are:\n- `run`\n- `run_reveal_bundle`\n- `_source_module_manifest_result`\n- `_source_open_body_import_summary`\n- `EXPECTED_NEGATIVE_CASES`\n- `AUTHORITY_CEILING`\n- `PUBLIC_SAFE_SOURCE_BODY_CLASSES`\n\nThe governing standard is `standards/std_microcosm_public_reveal_walkthrough.json`. Its `paper_module_contract` binds this Markdown module to `core/paper_module_capsules.json#paper_module.public_reveal_walkthrough` and to the mechanism row above.\n\nThe atlas source row is intentionally not claimed as complete in this pass: `core/organ_atlas.json` is the source surface that must later receive `paper_module_ref`, `mechanism_refs`, and `code_loci` for this component. The re-entry capture is `cap_quick_public_reveal_atlas_edge_population_wait_147e39c7a896`.\n\n###### Source-Open Body Imports\n\nThe exported reveal bundle carries five copied source bodies under `examples/public_reveal_walkthrough/exported_public_reveal_bundle/source_modules/`. The authority manifest is `examples/public_reveal_walkthrough/exported_public_reveal_bundle/source_module_manifest.json`.\n\nThe copied materials are:\n\nModule id Material class What it contributes `public_reveal_first_slice_execution_receipt_body_import` `public_macro_receipt_body` First public Microcosm slice validation result record with launch/public sharing/hosting boundaries. `public_reveal_runtime_shell_reorientation_receipt_body_import` `public_macro_receipt_body` Source result record for the shift from result record archive posture to runnable runtime shell posture. `public_reveal_clean_clone_state_fixture_receipt_body_import` `public_macro_receipt_body` Clean-clone fixture repair result record showing self-contained public validation. `public_reveal_public_substrate_boundary_policy_body_import` `public_macro_tool_body` Boundary policy for source import and excluded material classes. `public_reveal_walkthrough_control_plane_source_body_import` `public_python_source_body` The public component source body that validates reveal commands, claims, digest evidence, and metadata-only result records.\n\nAll five rows are exact-copy imports, `body_in_receipt=false`, and digest checks must pass before the exported reveal bundle can count as source-backed. Result records may name refs, hashes, counts, and verdicts; they do not embed copied body text.\n\n###### First Commands\n\nFrom `microcosm-substrate/`, the first fixture command is:\n\nThe exported bundle command is:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.public_reveal_walkthrough run-reveal-bundle --input examples/public_reveal_walkthrough/exported_public_reveal_bundle --out receipts/runtime_shell/demo_project/organs/public_reveal_walkthrough --card\n```\n\nFocused regression:\n\n```text\nPYTHONPATH=src ../repo-pytest tests/test_public_reveal_walkthrough.py -q --basetemp=/tmp/microcosm-public-reveal-pytest --ignore-host-pressure\n```\n\n###### Evidence Counts In The Reveal\n\nThe reveal board should not ask a cold reader to decode evidence-class numbers from context. When the walkthrough shows source-open body material counts, verified import counts, subprocess witnesses, algorithmic projection counts, or rows with source imports, it should pair each number with the evidence class and the scope boundary:\n- Counts prove that the public route exposes an inspectable accounting surface.\n- Counts do not prove launch-scope decision, whole-system correctness, or equal evidence depth across every component.\n- A small high-authority count is stronger than a large low-authority count for the claim it actually covers.\n- Generated or projected rows are reveal handles; source files, validators, result records, and scope limits remain the proof surfaces.\n\nThis keeps the public reveal from becoming a dashboard of impressive totals. The first reveal task is to show how a reader can move from number to result record to source boundary without crossing into private bodies, model-output data, account or browser state, or launch claims.\n\n###### Reveal First View\n\nThe reveal board should open with the same compression grammar as the first-screen card, then widen only after the reader has a route to inspect:\n1. Restate the bounded claim frame.\n2. Show the command that produced the local state.\n3. Show one route explanation with result record refs.\n4. Show the evidence-count legend beside the result record refs.\n5. Show the scope limit before any totals, drilldowns, or observatory links.\n\nThis gives video-first or browser-first readers a visible artifact without turning the reveal into a marketing hero. Motion, screenshots, and observatory views are allowed presentation layers only when the same evidence legend, scope boundary, and result record refs remain on the first view.\n\n###### Discipline In The Reveal\n\nThe reveal should make discipline legible as prevented failure, not as a wall of policy labels. Before showing totals or motion, the board should pair each impressive-looking artifact with the boundary that keeps it honest:\n\nReveal artifact Boundary shown beside it What the boundary prevents Local `.microcosm/` state `source_files_mutated=false` plus route/work/event/evidence refs. Reading a local demo as source-file changes, hosted launch, or external model service. Body-import counts `verified_macro_body_import` rows with validator or result record refs. Reading copied public material as private-system equivalence. Projection counts Source-coupling and generated-row scope boundaries. Reading generated cards as source authority or domain proof. Observatory views Compact endpoint first, full model as drilldown. Letting browser motion replace command, result record, and evidence-class checks. Doctrine constraints Failure mode or scope boundary beside the constraint. Reading governance as ceremony rather than as a specific overclaim guard.\n\nIf the reveal cannot show those boundaries on the first view, it should defer the visual flourish and keep the compact result record-backed route visible instead.\n\n###### Prior Art Grounding\n\nThe public reveal path is grounded in first-run CLI and progressive-disclosure practice. The [Command Line Interface Guidelines](https://clig.dev/) motivate a single runnable command, examples, discoverable next steps, and machine-readable output. Nielsen Norman Group's [progressive disclosure](https://www.nngroup.com/articles/progressive-disclosure/) pattern motivates showing the bounded first route before expanding into full observatory or JSON drilldowns.\n\nThe reveal's evidence walk also borrows from provenance and tracing patterns: [W3C PROV](https://www.w3.org/TR/prov-overview/) for moving from artifact to source and result record, and [OpenTelemetry traces](https://opentelemetry.io/docs/concepts/signals/traces/) for representing causal chains as inspectable linked work. Microcosm applies those patterns to a local walkthrough so the visual board remains evidence accounting, not a launch or maturity claim.\n\n###### Browser/Video Reveal Board\n\nThe reveal board is the public visual candidate for a 60-second walkthrough. It must therefore be more than raw JSON, but it must still be less than a product claim. The first browser/video frame should show:\n1. The command that produced the local state.\n2. The selected route and one-line route reason.\n3. The route explanation through work, events, evidence, and result record refs.\n4. The evidence legend, including evidence class and scope boundary.\n5. The compact observatory or first-screen endpoint used for the board.\n6. The scope limit before totals, motion, or full-model drilldown.\n\nMotion is allowed to make the causal order easier to inspect: command to local state, local state to selected route, selected route to work/event/evidence, and evidence to result record or validator. Motion is not allowed to displace the command, result record/evidence ref, scope boundary, or scope limit from the first view.\n\nThe board should end by offering exactly three next steps: reader-specific branch, result record drilldown, and full observatory JSON. That keeps the visual surface from expanding into a second README while still making the public reveal inspectable by readers who will not start in the terminal.\n\nThe validated claim is narrow:\n\n> Microcosm turns a repo into a local operating system: patterns, routes, > work transactions, events, evidence, and explanations.\n\nNegative fixtures reject launch or hosting overclaim, private-data equivalence, missing evidence refs, and marketing-only reveal material without runtime commands.\n\n###### Reader Evidence Routing\n- Start with the first commands and the JSON Bundle Binding to identify the fixture, exported bundle, source record, mechanism row, standard, and result record surfaces.\n- For behavior questions, read `src/microcosm_core/organs/public_reveal_walkthrough.py` and `tests/test_public_reveal_walkthrough.py` before trusting this prose.\n- For source-open body questions, read the exported bundle's `source_module_manifest.json`; it is the evidence for exact-copy relation, digest match, material class, and metadata-only result record posture.\n- For visual or browser walkthrough questions, read the evidence legend, result record refs, scope boundary, and scope limit before reading totals, observatory links, or motion as meaningful.\n- Treat generated atlas docs, generated coverage projections, generated result records, copied-body presence, and browser/video boards as navigation or validation projections. They do not become source authority for launch, hosting, provider, private-system-equivalence, or whole-system claims.\n\n###### Validation Result record Path\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_public_reveal_walkthrough.py -q --basetemp=/tmp/microcosm_public_reveal_walkthrough_pytest --ignore-host-pressure\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module describes public reveal walkthrough validation only. It excludes launch, hosted deployment, public sharing, recipient work, external model access, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness.\n\nGenerated atlas docs, generated coverage projections, generated result records, copied-body presence, browser/video boards, and impressive evidence totals are source-linked only. The source authority remains with the standard, bundle, mechanism row, component source, source-module manifest, validators, and result record refs named above.\n\n###### Scope limit\n\nThis module may claim a bounded public reveal walkthrough over the local fixture and exported bundle: runnable commands, selected route explanation, work/event/evidence refs, source-open body import manifest checks, evidence legend, negative-case refusals, metadata-only result records, and scope limits. A diagram view is generated for this module; an atlas card is a staged exercise pending atlas owner-lane binding. One selective dependency remains open and requires a governed bundle update to resolve.\n\nIt does not claim launch-scope decision, hosted deployment, publishing-scope decision, recipient work, external model service, secret export, private-system equivalence, Lean/Lake execution, source-file changes, or whole-system correctness. Visual boards, screenshots, observatory motion, copied-body counts, and generated cards remain presentation or navigation projections over the result record path.\n\n#### Source refs\n\nBuilt from public source refs, with each input path recorded for provenance.\n\nEach component has a stable public source path with commands, source links, and its supported scope.",
    "byte_count": 38345,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:area-architecture",
   "relative_href": "docs/area-architecture.html",
   "path": "docs/area-architecture.html",
   "title": "Architecture & navigation",
   "nav_group": "Areas",
   "nav_label": "Architecture & navigation",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "executable_doctrine_grammar",
     "navigation_hologram_route_plane",
     "standards_meta_diagnostics",
     "voice_to_doctrine_self_improvement_loop",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "doctrine_fact_claim_audit",
     "self_ignorance_coverage_ledger"
    ],
    "family_id": "architecture_and_navigation"
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Area \u00b7 10 components\n\n### Architecture & navigation\n\nThe core primitives, pattern rules, and routing that give the system its shape.\n\n#### Components\n\nPattern Binding Contract Checks a real pattern catalog for digest, cross-reference, and dependency-cycle integrity. 5/5\n\nDoes It checks that each declared \"pattern\" (a reusable bit of system structure) is properly hooked up: it has the required fields, points at real source material by reference, names the rule it answers to and what it explicitly does NOT claim, has no duplicate pattern IDs, and leaks no secrets or private bodies into the public record. It produces a written result record showing the overall pass/fail, which pattern rows are accepted versus rejected and why, and what each row is forbidden from claiming.\n\nScope limit It validates only the declared public pattern-binding/route-readiness contract; it does not certify the private pattern ledger, public launch or hosted-public posture, public sharing, external model access, private-data equivalence, or whole-system correctness, and it does not turn any mined pattern row into a standalone public leaf (selection stays component-first and fixture-bound).\n\nRun\n\n```text\nmicrocosm pattern-route-readiness validate-bundle --input examples/pattern_binding_contract/exported_route_readiness_bundle --out /tmp/microcosm-pattern-route-readiness\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Navigation Hologram Route Plane](docs/components.html#component-navigation_hologram_route_plane), [Agent Route Observability Runtime](docs/components.html#component-agent_route_observability_runtime), [Cold Reader Route Map](docs/components.html#component-cold_reader_route_map), [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol), [Pattern Assimilation Step](docs/components.html#component-pattern_assimilation_step), [Voice To Doctrine Self Improvement Loop](docs/components.html#component-voice_to_doctrine_self_improvement_loop)\n\narchitecture navigation doctrine\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_binding_contract.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Pattern Binding Contract\n\nExplains component [Pattern Binding Contract](docs/components.html#component-pattern_binding_contract) mechanism [validates public pattern bindings](docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-binding-contract-validates-public-pattern-bindings) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Make doctrine executable before authoritative](docs/doctrine.html#dcard-p-12)\n\n###### Teleology\n\n`pattern_binding_contract` is the public root component that binds pattern rows to source-available source bundles, public runtime refs, authority-chain handles, scope boundaries, and secret-exclusion result records. Synthetic rows are allowed only as regression controls or negative cases; they are not product evidence.\n\n###### Purpose\n\nA mined engineering pattern is a tempting thing to publish on its own. It reads like a self-contained insight, so it is easy to lift a single row out of a private ledger and present it as a finished public claim. This component exists to stop that. It answers one question: can a given pattern row be admitted to the public surface, and if so, under exactly what evidence and what ceiling?\n\nThe check is binding rather than display. Every pattern row must name a source bundle that points at a real public runtime ref or regression-harness ref, a governing standard, and an scope boundary. A row that lacks any of these, duplicates another row's id, or claims to be a standalone public leaf is rejected. The same validator runs deliberate negative cases alongside the positive control, so the result record proves not only that good rows pass but that each known failure mode is still caught.\n\nThe less obvious idea is truth accounting. When an exported bundle is validated, the component separates rows that merely describe runtime metadata from rows that represent a real pattern-ledger import, and records that a high accepted-row count is not the same as system progress. This guards against the quiet inflation where counting accepted rows starts to read like a measure of how much real work has landed. The route-readiness layer closes the matching gap on the selector side: a row can look selectable in isolation, but it is only admitted through the component that owns it, its fixture contract, and a gate that refuses to let hard no-standalone rows appear as selectable targets.\n\n###### Public Contract\n\nThe validator checks required binding fields, duplicate pattern conflicts, unsupported authority-chain handles, unresolved reference bundles, secret/provider/operator body sentinels, and public-leaf overclaim failures. It emits command-owned result records under `receipts/first_wave/pattern_binding_contract/`.\n\nThe exported system bundle also carries the source route-readiness selector overlays as public source-open bodies: `examples/pattern_binding_contract/exported_route_readiness_bundle/`. The validator recomputes the selector contract against the imported pattern ledger, route-readiness audit, row-to-component router, route cards, fixture specs, decision matrix, dependency DAG, internal routing graph, and copied source validation report. This closes the old gap where a mined pattern row could look selectable without opening the component bundle that owns it.\n\nCold readers should use `microcosm pattern-route-readiness validate-bundle` against `examples/pattern_binding_contract/exported_route_readiness_bundle/` when the question is selector admission rather than generic pattern binding. The older `pattern-binding validate-route-readiness-bundle` action remains a compatibility route to the same validator.\n\n###### Shape\n\nSource refs\n\nrequired fields, duplicate ids, bundle resolution, secret-exclusion scan `pattern_binding_contract` Diagram source\n\n```text\nflowchart LR subgraph Inputs[\"Pattern-binding inputs\"] Patterns[\"Pattern rows id, governing standard, scope boundary, source refs, projection posture\"] Bundles[\"Source bundles metadata-only refs to public runtime or regression harness\"] Handles[\"Authority-chain handles resolver result records\"] end Validator[\"pattern_binding_contract required fields, duplicate ids, bundle resolution, secret-exclusion scan\"] subgraph Negative[\"Refusal floor\"] Dup[\"Duplicate id rejected\"] Leak[\"Private body leak rejected\"] Overclaim[\"Public-leaf overclaim rejected\"] Unsupported[\"Unsupported authority handle not upgraded\"] end subgraph Bundle[\"Exported-bundle path\"] Truth[\"Truth accounting runtime-metadata rows vs real pattern-ledger import\"] RouteReadiness[\"Route-readiness selector component-first admission, fixture contract, hard no-standalone gate\"] end Result records[\"Result records refs, digests, counts, verdicts; body text omitted\"] Patterns --> Validator Bundles --> Validator Handles --> Validator Validator --> Negative Validator --> Bundle Truth --> RouteReadiness Negative --> Result records Bundle --> Result records\n```\n\n###### Evidence Binding\n\nAccepted component row: `core/organ_registry.json::implemented_organs[pattern_binding_contract]`. Evidence class: `core/organ_evidence_classes.json::organ_evidence_classes[pattern_binding_contract]` with rank 5 semantic-validator authority. The runtime locus is `src/microcosm_core/organs/pattern_binding_contract.py`, with focused coverage in `tests/test_pattern_binding_contract.py`.\n\nPaper bundle authority: `core/paper_module_capsules.json#paper_module.pattern_binding_contract`. Mechanism source: `core/mechanism_sources.json#mechanism.pattern_binding_contract.validates_public_pattern_bindings`.\n\n###### Reader Evidence Routing\n\nRead this module as a public binding membrane for pattern rows, not as a private pattern-ledger certificate or a standalone public-leaf selector. Start with `paper_modules/pattern_binding_contract.json` for the bundle payload, then open `standards/std_microcosm_pattern_binding_contract.json` to check the required fields, public/private boundary, source-open body import floor, route-readiness rules, and result record expectations.\n\nUse `core/fixture_manifests/pattern_binding_contract.fixture_manifest.json` before inspecting fixtures or exported bundles. The manifest and the `source_module_manifest.json` files name the copied source body floor; result record payloads should carry source refs, digests, anchors, counts, verdicts, and omission result records rather than inlining body text.\n\nTreat route-readiness selection as component-first evidence. A mined pattern row can be selectable only through the route-readiness bundle, selector contract, and result records that keep duplicates, unknown refs, private leakage, missing fixture contracts, dependency cycles, hard no-standalone rows, and companion-overlay gaps rejected.\n\n###### Prior Art Grounding\n\nThis component follows the software pattern-language tradition of making reusable engineering structures explicit, named, and reviewable. The [Hillside patterns library](https://hillside.net/patterns/) is the direct prior-art family for treating patterns as shared vocabulary rather than loose implementation notes.\n\nThe binding layer also borrows from provenance and supply-chain attestation patterns. [W3C PROV](https://www.w3.org/TR/prov-overview/) motivates the source/ref/evidence relation shape, while [SLSA](https://slsa.dev/spec/) and [in-toto](https://in-toto.io/) motivate digest-bound artifact claims and step-level metadata. Microcosm applies those ideas to pattern rows and route-readiness selectors, not to launch certification.\n\nRe-entry condition: if copied source bodies, route-readiness overlays, or negative-case rules change, rerun the three first commands above and update this paper module plus `standards/std_microcosm_pattern_binding_contract.json` from the new result record fields. Do not raise the scope limit from selector and binding validation to launch, public sharing, private-data equivalence, or standalone public-leaf authority.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThese checks validate public pattern-binding fixtures, system-bundle result records, route-readiness selector result records, and metadata-only authority handles only; they do not certify the private pattern ledger, hosted readiness, launch, external model access, private-data equivalence, or whole-system correctness.\n\nThe current authority is the runtime result record set under `receipts/first_wave/pattern_binding_contract/`; do not cite a separate pattern-specific sign-off result record unless an sign-off-lane artifact is actually present. Cold readers should inspect result record fields rather than markdown constants: `status`, `secret_exclusion_scan`, `source_open_body_imports`, `truth_accounting`, `route_readiness_summary`, `selection_contract`, and `source_manifest`.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module covers public pattern-binding mechanics: source-bundle validation, reference-bundle validation, authority-handle validation, route-readiness selector admission, duplicate and unknown-ref rejection, private-leakage sentinel checks, and metadata-only result record shape. It is evidence for the `pattern_binding_contract` component and `mechanism.pattern_binding_contract.validates_public_pattern_bindings`.\n\nThe ceiling stops before private pattern-ledger authority, hosted or public launch-scope decision, deployment posture, standalone public-leaf selector status, private-data equivalence, external model access, recipient work, source-file changes, publishing-scope decision, or whole-system correctness.\n\n###### Scope boundary\n\nThis module documents public pattern-binding mechanics and regression harnesses. It does not certify the private pattern ledger, public launch operations, hosted-public posture, public sharing, recipient work, external model access, private-data equivalence, or whole-system correctness. Route-readiness import does not make any mined pattern row a standalone public leaf; selection remains component-first and fixture-bound.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open body floor is the imported public bundle, not the private pattern ledger. Cold readers can open `examples/pattern_binding_contract/exported_substrate_bundle/` and `examples/pattern_binding_contract/exported_route_readiness_bundle/` to inspect the copied source module manifests, source bundles, reference bundles, authority-chain handles, route-readiness overlays, selector contract inputs, and copied source validation report. The required body floor is named by each `source_module_manifest.json` plus `source_capsules.json`, `reference_capsules.json`, and `authority_chain_handles.json`.\n\nResult records and manifests must stay metadata-only where the standard requires it: they carry refs, digests, anchors, counts, verdicts, omission result records, and secret-exclusion results. They do not inline private source bodies, raw operator payloads, model-output data, recipient data, or hidden pattern-ledger material.\n\nPattern Assimilation Step Verifies each landed task filed exactly one learning record naming what it changed. 5/5\n\nDoes When a piece of work lands in the local system, this component checks the completion records for it \u2014 confirming that exactly one same-lane \"what did we learn from this\" decision was filed per landed item, that any claimed refinement names an owner-visible surface and the artifact it changed, that a \"nothing to refine\" entry carries its required typed fields, and that there are no duplicate or off-lane entries. It runs over fixture data and makes the completion bookkeeping inspectable, showing whether the recorded completions conform to the system's stated learning-from-landed-work rules, rather than leaving that on faith.\n\nScope limit It validates only the declared public completion contract over synthetic fixture data; it does not ingest private lessons, mutate live ledgers, promote global doctrine, include launch operations or public sharing, make external model access, claim private-data equivalence, or certify public runtime behavior.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.validators.acceptance --only pattern_assimilation_step --input fixtures/first_wave/pattern_assimilation_step/input --out receipts/first_wave/pattern_assimilation_acceptance.json\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\narchitecture navigation doctrine\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/pattern_assimilation.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Pattern Assimilation\n\nExplains component [Pattern Assimilation Step](docs/components.html#component-pattern_assimilation_step) mechanism [validates public pattern assimilation step](docs/rules-and-ideas.html#lattice-mechanism-mechanism-pattern-assimilation-step-validates-public-pattern-assimilation-step) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Track known unknowns without claiming the unknown is mapped](docs/doctrine.html#dcard-p-7)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\n`pattern_assimilation_step` is the public completion-learning contract for landed components. It validates that every component recorded as landed in a fixture set carries exactly one same-lane completion decision, and that the decision resolves to a result record that can be inspected rather than to a phrase.\n\n###### Purpose\n\nWhen a development pass claims that local work taught the system something, that claim is usually prose: a note that the run \"improved the fixture\" or \"found nothing to refine\". Prose is easy to assert and impossible to check. This component answers a single question: did each landed component actually deposit an inspectable completion decision, or is the learning claim unbacked?\n\nThe decision is forced into one of two typed shapes. Either a concrete refinement result record that names the owner surface it changed and the artifact it touched, or a typed `nothing_to_refine` result record that proves stewardship was checked, the next-best lane was considered, and a re-entry condition was recorded. A landed component with no completion, or with a completion that points at a result record that does not exist or does not match, is rejected. So is a duplicate result record id that would let one lesson be counted twice.\n\nThe interesting constraint is the one the component refuses to relax. A local lesson may route to the owner surface that owns the affected artifact, but it may not promote itself into global doctrine. A refinement row that sets `claims_global_doctrine_authority` is blocked outright. The point is that learning has to land on a specific board with a named steward, not become a free-floating rule, which is the failure mode that turns a useful local note into unsupported general advice.\n\n###### Route Card\n- Component id: `pattern_assimilation_step`\n- JSON bundle authority: `core/paper_module_capsules.json::paper_module.pattern_assimilation`\n- Accepted-component evidence class: `semantic_validator`\n- Standard: `standards/std_microcosm_pattern_assimilation_step.json`\n- Validator authority: src/microcosm_core/validators/sign-off.py\n- Fixture manifest: `core/fixture_manifests/pattern_assimilation_step.fixture_manifest.json`\n- Fixture input: `fixtures/first_wave/pattern_assimilation_step/input`\n- Runtime bundle: `examples/pattern_assimilation_step/exported_assimilation_bundle`\n- Primary result records: `receipts/first_wave/pattern_assimilation_acceptance.json`, `receipts/first_wave/pattern_assimilation_receipt.json`, and `receipts/first_wave/pattern_assimilation_step/exported_assimilation_bundle_validation_result.json`\n- Projection posture: the JSON bundle is the paper-module source authority. This Markdown is the cold-reader explanation.\n\n###### Shape\n\nSource refs\n\nLanded component rows each names a completion result and result record ref `organ_landing_summaries.jsonl` Validator `acceptance.py` `validate_pattern_assimilation` metadata-only result records `receipts/first_wave/pattern_assimilation_*` Diagram source\n\n```text\nflowchart TD landings[\"Landed component rows organ_landing_summaries.jsonl each names a completion result and result record ref\"] refinement[\"Refinement result records owner_surface, changed artifact\"] nothing[\"Nothing-to-refine result records stewardship, next-best lane, re-entry\"] validator[\"sign-off.py validate_pattern_assimilation\"] filter[\"Pre-filter valid result records refinement: named owner, no doctrine upgrade nothing: all three fields present\"] match{\"Per landed component: exactly one completion, ref resolves to a matching row?\"} pass[\"Accepted typed, owner-routed completion learning\"] negatives[\"Negative cases recorded MISSING_PATTERN_ASSIMILATION_Completion MISSING_REFINEMENT_OWNER_SURFACE DUPLICATE_REFINEMENT_RECEIPT_ID LOCAL_LESSON_AUTHORITY_UPGRADE RAW_SEED_BODY_IN_ASSIMILATION_FIXTURE\"] result records[\"metadata-only result records result records/first_wave/pattern_assimilation_*\"] ceiling[\"Scope limit public fixture metadata, no doctrine changes\"] landings --> match refinement --> filter nothing --> filter filter --> match validator --> filter match -->|resolved| pass match -->|missing, dangling, duplicate, upgraded| negatives pass --> result records negatives --> result records result records --> ceiling\n```\n\nThe bundle is present, so the cold-reader path starts from `core/paper_module_capsules.json::paper_module.pattern_assimilation`, not from a legacy-only boundary. That bundle binds this Markdown to the accepted `pattern_assimilation_step` component, the sign-off.py validator locus, the standard, first-wave fixture manifest, exported assimilation bundle, focused tests, metadata-only result records, and generated Mermaid/Atlas navigation status.\n\nRead the diagram as the validation flow, not an authority upgrade. The validator pre-filters the refinement and nothing-to-refine result records, then walks each landed component row and checks that its declared completion resolves to a matching valid result record; unresolved, missing, duplicate, or doctrine-upgraded rows become recorded negative cases. The ceiling remains public fixture and exported-bundle metadata plus metadata-only result records, with no live ledger mutation, source-file changes, source note ingestion, private-system equivalence, global doctrine changes, launch or publishing-scope decision, behavior-change proof, or whole-system correctness.\n\n###### First Command\n\nFrom `microcosm-substrate`:\n\nUse the exported bundle validator when the question is whether the public source-open body imports still match their declared source bodies:\n\n###### What It Proves\n\nPattern assimilation is the public completion-learning contract for landed components. It validates that each landed component in the fixture set has exactly one same-lane completion decision: either a concrete refinement result record naming the owner surface and changed artifact, or a typed `nothing_to_refine` result record with stewardship checked, next-best-lane checked, and a re-entry condition.\n\nA cold agent should use this component when a pass claims that local work taught the system something. The validator makes that claim inspectable: it checks owner-surface evidence, duplicate result record ids, off-lane completions, missing completion decisions, residual lifecycle posture, and attempts to promote a local lesson into global doctrine authority without the governing lane.\n\n###### Bundle-Bound Reader Shape\n\nThe paper-module bundle binds this Markdown to two explained subjects: `pattern_assimilation_step` and `mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step`. It also carries the route-contract concept `concept.architecture_and_navigation_route_contract_bundle`.\n\nThe executable locus is src/microcosm_core/validators/sign-off.py, specifically `validate_pattern_assimilation`, `run_assimilation_bundle`, `validate_source_module_manifest`, `_write_jsonl_upsert`, `EXPECTED_NEGATIVE_CASES`, `PATTERN_ASSIMILATION_AUTHORITY_CEILING`, and `main`.\n\nIts law edges are bounded to the local completion-learning scope limit: `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-7`, `P-8`, `P-9`, `P-12`, `P-13`, `P-15`, `AX-1`, `AX-4`, `AX-5`, `AX-6`, `AX-7`, `AX-8`, `AX-11`, and `AX-12`. Its paper-module neighbors are `cold_reader_route_map`, `pattern_binding_contract`, and `voice_to_doctrine_self_improvement_loop`.\n\nIf the generated JSON instance disagrees with the bundle or validator source, the bundle and validator win; refresh the projection rather than editing it.\n\n###### Source-Backed System\n\nThis component is more than a prose rule. The exported assimilation bundle imports four bodies by manifest:\n- `macro_pattern_autonomy_process_contract_body_import` from `state/microcosm_portfolio/reconstruction/macro_pattern_autonomy_process_contract_v1.json`\n- `macro_pattern_assimilation_fixture_manifest_body_import` from `state/microcosm_portfolio/reconstruction/fixture_manifests/pattern_assimilation_step.fixture_manifest.json`\n- `pattern_assimilation_retracted_adapter_receipt_body_import` from `state/microcosm_portfolio/reconstruction/pattern_assimilation_step_real_substrate_adapter_receipt_v1.json`\n- `pattern_assimilation_acceptance_validator_source_body_import` from src/microcosm_core/validators/sign-off.py\n\nThe manifest is `examples/pattern_assimilation_step/exported_assimilation_bundle/source_module_manifest.json`. It must keep `body_in_receipt: false`, exact source and target digests, required anchors, and validation refs. The copied validator body anchors `validate_pattern_assimilation`, `run_assimilation_bundle`, and `PATTERN_ASSIMILATION_AUTHORITY_CEILING`.\n\n###### Result record Floor\n\nA passing fixture run emits:\n- `receipts/first_wave/pattern_assimilation_acceptance.json`\n- `receipts/first_wave/pattern_assimilation_receipt.json`\n- `state/microcosm_portfolio/reconstruction/macro_pattern_autonomy_process_runs_v1.jsonl`\n\nA passing exported-bundle run emits:\n- `receipts/first_wave/pattern_assimilation_step/exported_assimilation_bundle_validation_result.json`\n\nThe first-wave result records must include public-relative paths, no private root paths, no copied body text, a redacted non-public-state scan with zero blocking hits, observed negative cases, error codes, scope limit, scope boundary, and the exact result record paths. The bundle result record must show `source_module_manifest_status: pass`, `body_copied_material_count: 4`, the four body-material ids above, `body_in_receipt: false`, `body_text_in_receipt: false`, and only public replacement refs.\n\n###### Reader Evidence Routing\n\nA cold reader should inspect the evidence in this order:\n1. Open the JSON source record to confirm subject ids, dependency ids, principle and axiom refs, and code locus.\n2. Run the focused sign-off test or fixture command to prove the completion learning shape still accepts valid fixture rows and rejects the required negative cases.\n3. Run the exported bundle validator when source-module digest, anchor, copied body, or replacement posture is the question.\n4. Treat generated JSON, Mermaid, Atlas, and coverage as projection evidence only; if they drift, refresh them through the doctrine-lattice builder.\n5. Use the result record floor to check public-relative paths, metadata-only source verification, source note exclusion, and local-lesson scope limits.\n\n###### Negative Cases\n\nThe current negative-case floor is:\n- `MISSING_PATTERN_ASSIMILATION_CLOSEOUT` for a landed component without a refinement or typed no-op completion.\n- `MISSING_REFINEMENT_OWNER_SURFACE`, `MISSING_STEWARDSHIP_CHECK`, and `MISSING_REENTRY_CONDITION` for refinement result records that cannot route the lesson to an owner surface and re-entry condition.\n- `DUPLICATE_REFINEMENT_RECEIPT_ID` for duplicate refinement result records.\n- `LOCAL_LESSON_AUTHORITY_UPGRADE` for local lessons that claim global doctrine authority.\n- `RAW_SEED_BODY_IN_ASSIMILATION_FIXTURE` for source notes or private source note bodies in the public fixture.\n- `ASSIMILATION_BUNDLE_SOURCE_MODULE_INVALID` for exported source-module digest or anchor mismatch.\n\nThese are not ornamental checks. If a run stops observing them, the module can no longer support the claim that Microcosm learns from landed work without turning local notes into unsupported global doctrine.\n\n###### Prior Art Grounding\n\nPattern assimilation is grounded in software pattern-language practice: recurring engineering lessons should be named, bounded, reviewed, and connected to the context where they apply. The [Hillside patterns library](https://hillside.net/patterns/) is the direct prior-art family for treating patterns as a shared engineering vocabulary rather than one-off notes.\n\nThe result record and trace shape also borrows from provenance and observability practice. [W3C PROV](https://www.w3.org/TR/prov-overview/) informs the requirement that each refinement cite its owner surface and evidence relation, while [OpenTelemetry traces](https://opentelemetry.io/docs/concepts/signals/traces/) are a useful analogue for linking spans of work into an inspectable causal chain. Microcosm uses those inspirations for completion learning only; a local lesson still needs the owning lane before it can become broader doctrine.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, keep validation result records outside tracked first-wave paths unless the owning result record lane intends to refresh them:\n\nThe fixture and bundle result records prove same-lane completion-learning shape over the public fixtures and copied body imports only; they do not promote a local lesson to global doctrine authority. Source-copy or result record drift is an owning validator/manifest lane issue, not Markdown source authority.\n\nFocused pytest re-entry is:\n\n```text\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_pattern_assimilation_step.py -q --basetemp=/tmp/microcosm_pattern_assimilation_pytest\n```\n\nUse an isolated `/tmp` basetemp for focused pytest runs so result record scratch paths do not rewrite source-run rows inside the checkout.\n\n###### Validation Anchors\n\nFocused coverage lives in `tests/test_pattern_assimilation_step.py` and checks:\n- streamed JSONL loading and upsert behavior;\n- required negative-case observation;\n- public-relative redacted result records;\n- source result record field floors from the fixture manifest;\n- exported assimilation bundle runtime shape;\n- source-module digest mismatch rejection;\n- exported bundle result records;\n- exact copied source body imports.\n\n###### Scope boundary\n\n###### Scope limit\n\nPattern assimilation validates public completion-learning metadata plus regression fixtures. It does not ingest private lessons, read source note bodies, mutate live work log or work log state, promote global doctrine, include launch operations or public sharing, make external model access, claim private-data equivalence, prove behavior changes, or certify public runtime behavior.\n\nIts useful claim is narrower: over the supplied fixtures and copied public body imports, the component shows that completion learning has a typed, same-lane, owner-routed shape and that invalid completion claims are rejected before they become doctrine.\n\n###### Scope limit\n\nThis module may claim public completion-learning validation over the supplied fixtures and copied body-import manifests: same-lane completion decisions, owner-surface refinement evidence, typed `nothing_to_refine` result records, stewardship and re-entry fields, duplicate result record rejection, local-lesson scope limits, source note exclusion, public-relative result records, and metadata-only source-module verification.\n\nIt does not claim complete pattern coverage, private source-root equivalence, live work log or work log mutation, source note ingestion, external model access, global doctrine changes, behavior-change proof, launch or publishing-scope decision, or whole-system correctness. The generated diagram and atlas views are navigation surfaces; they do not upgrade local lessons into global doctrine.\n\nExecutable Doctrine Grammar Checks that example standards files declare their purpose, rule, records, and what they do not claim. 5/5\n\nDoes It checks that a folder of example \"doctrine\" files (toy public standards and write-ups that describe how the system is supposed to behave) actually have the required parts: a stated purpose, the rule that governs them, the result records they are expected to produce, and an honest statement of what they do NOT claim. It reports, file by file, which entries are well-formed and which ones fail a required check, including ones that overclaim (saying a passing grammar check proves the doctrine is complete) or that try to treat plain advice as enforceable authority.\n\nScope limit It validates an exported public executable-grammar metabolism bundle with exact copied-body digests and redacted result records, plus fixture regressions for standards/paper-module shape. It does not publish source doctrine bodies in result records, prove doctrine completeness, export a private standards engine, authorize later components, or claim external model access, private-data equivalence, launch-scope decision, or whole-system correctness.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate-executable-grammar-metabolism-bundle --input examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle --out receipts/first_wave/executable_doctrine_grammar --card\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Doctrine Fact Claim Audit](docs/components.html#component-doctrine_fact_claim_audit)\n\narchitecture navigation doctrine\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.executable_doctrine_grammar) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Executable Doctrine Grammar\n\nExplains component [Executable Doctrine Grammar](docs/components.html#component-executable_doctrine_grammar) mechanism [validates public doctrine grammar bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-executable-doctrine-grammar-validates-public-doctrine-grammar-bundle) Governed by principles\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Make doctrine executable before authoritative](docs/doctrine.html#dcard-p-12)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nconcepts [standard as schema contract with explicit scope limit](docs/rules-and-ideas.html#lattice-concept-concept-executable-doctrine-grammar-standard-bundle) [architecture and navigation route contracts as executable doctrine boundaries](docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle) Abides by axioms\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n- [Reflexive accountability / no privileged meta-layer](docs/doctrine.html#dcard-ax-12)\n\n###### Purpose\n\nDoctrine in most systems is prose convention. A standard says a rule should hold, a paper module says a section should be present, and nothing checks whether the claim is actually true. This component exists to make doctrine shape a thing a program can pass or fail. It answers one question: does a standard row or a paper-module fixture carry the structure that doctrine here requires, or is it just text that looks the part?\n\nWhat it checks is deliberately structural rather than semantic. A standard row must declare a teleology, a governing standard, result record expectations, and an scope boundary. A paper module must carry the matching sections by heading. The validator does not judge whether the prose is good. It judges whether the load-bearing fields are present, so a row cannot quietly drop its result record expectations or its scope boundary and still pass.\n\nThe less obvious part is that the failures are first-class. Five negative cases are part of the contract: a row missing its required fields, a prose-only standard that tries to claim executable authority, a source doctrine body copied into a public fixture, a duplicate standard slug, and a grammar pass that overclaims doctrine completeness. A run that does not observe each of these classes is blocked, so the checker is held to demonstrating that it can reject, not only that it can accept.\n\nThe component also imports copied source bodies, but only through a source-module manifest with declared SHA-256 digests, and never inlines a body into a result record. The result record reports refs, hashes, counts, and verdicts; the bodies live in the bundle. The point is to make the doctrine shape checkable without turning the public surface into an export of the private standards engine.\n\n###### Teleology\n\n`executable_doctrine_grammar` turns toy public standards and paper-module fixtures into deterministic grammar result records. It makes doctrine-shape claims checkable while importing copied, source bodies only through source-module manifests, digests, and result record boundaries.\n\n###### Shape\n\nSource refs\n\nPublic doctrine fixtures `fixtures/first_wave/executable_doctrine_grammar/input` Executable grammar validator `src/microcosm_core/organs/executable_doctrine_grammar.py` Exported standards bundle `examples/executable_doctrine_grammar/exported_standards_bundle` Source-module manifest `examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle/source_module_manifest.json` metadata-only deterministic result records `receipts/first_wave/executable_doctrine_grammar/` Bundle and atlas evidence `core/paper_module_capsules.json::paper_modules[18]` Diagram source\n\n```text\nflowchart TD A[\"Public doctrine fixtures fixtures/first_wave/executable_doctrine_grammar/input\"] --> B[\"Executable grammar validator src/microcosm_core/components/executable_doctrine_grammar.py\"] C[\"Exported standards bundle examples/executable_doctrine_grammar/exported_standards_bundle\"] --> B D[\"Source-module manifest examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle/source_module_manifest.json\"] --> B B --> E[\"metadata-only deterministic result records result records/first_wave/executable_doctrine_grammar/\"] E --> F[\"Bundle and atlas evidence core/paper_module_capsules.json::paper_modules[18]\"] F --> G[\"Bounded reader claim doctrine-shape validation, not launch-scope decision\"]\n```\n\n###### Reader Evidence Routing\n\nReader evidence routes through the executable-grammar runtime, fixture inputs, exported standards bundle, executable-grammar metabolism bundle, source-module manifests, public result records, and focused tests. The Mermaid diagram and Atlas card are generated navigation projections; this page is the cold-reader explanation of the proof boundary.\n\n###### Public Contract\n\nThe validator checks standard slugs, teleology, governing standard refs, result record expectations, scope boundaries, paper-module sections, source-body sentinels, duplicate slug conflicts, prose-only authority claims, and doctrine-completeness overclaims. It also validates the imported public executable-grammar specimen, standards registry, standards type-plane, lattice registry, kind-atlas runtime, and standards option-surface runtime as exact copied source modules.\n\n###### Prior Art Grounding\n\nThis component is grounded in schema validation, parser generators, and executable semantics traditions. [JSON Schema](https://json-schema.org/specification) anchors the idea that document shape can be validated by a shared machine contract, [Tree-sitter](https://github.com/tree-sitter/tree-sitter) shows the practical value of generated grammars for inspectable source structure, and the [K framework](https://kframework.org/) is a close reference point for turning semantic rules into executable artifacts.\n\nMicrocosm borrows the executable-contract pattern: doctrine shape, result record expectations, duplicate slugs, imported source bodies, and scope boundaries are checked by a validator instead of left as prose convention. It does not claim source doctrine completeness or launch-scope decision.\n\n###### First Commands\n\nFrom `microcosm-substrate/`, a cold agent can prove the fixture path:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate --input fixtures/first_wave/executable_doctrine_grammar/input --out receipts/first_wave/executable_doctrine_grammar --card\n```\n\nThe exported public standards bundle uses the same component with a narrower input:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate-standards-bundle --input examples/executable_doctrine_grammar/exported_standards_bundle --out receipts/first_wave/executable_doctrine_grammar --card\n```\n\nThe source-open source-body floor is the executable-grammar metabolism bundle:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.executable_doctrine_grammar validate-executable-grammar-metabolism-bundle --input examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle --out receipts/first_wave/executable_doctrine_grammar --card\n```\n\n###### Source-Backed Mechanism\n\nThe mechanism row `mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle` points at `validate`, `validate_standards_bundle`, `validate_executable_grammar_metabolism_bundle`, `validate_source_module_imports`, `validate_standard_registry`, `validate_paper_module_shape`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `GRAMMAR_AUTHORITY_CEILING`.\n\nThose symbols are the runnable floor:\n- `validate` writes the fixture standards, paper-module, group-index, and sign-off result records.\n- `validate_standards_bundle` validates the exported public standards bundle and keeps result record paths public-relative.\n- `validate_executable_grammar_metabolism_bundle` validates the copied executable-grammar metabolism specimen, standards registry/type-plane, lattice registry, kind-atlas, and standards option-surface bodies.\n- `validate_source_module_imports` requires `source_module_manifest.json`, `copied_non_secret_macro_body`, `exact_copy`, allowlisted source refs, body-in-result record exclusion, and SHA-256 digest matches.\n- `result_card` compresses result record evidence without duplicating body text.\n\n###### Negative Cases\n\nThe fixture must keep these failures executable rather than prose-only:\n- `invalid_standard_and_module`: missing teleology, result record expectations, governing standard, and scope boundary.\n- `prose_standard_claims_runtime_authority`: prose cannot claim executable runtime authority.\n- `macro_doctrine_body_copied_into_fixture`: source doctrine body sentinels are rejected from public fixtures.\n- `duplicate_standard_slug_conflict`: duplicate slugs are rejected deterministically.\n- `grammar_index_pass_overclaims_doctrine_complete`: grammar pass is not doctrine-completeness authority.\n\n###### Atlas Binding\n- `paper_module_ref`: `core/paper_module_capsules.json#paper_module.executable_doctrine_grammar`\n- `mechanism_refs[].ref`: `mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle`\n- `code_loci[]`: `src/microcosm_core/organs/executable_doctrine_grammar.py` with the mechanism symbols named above.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_executable_doctrine_grammar.py -q --basetemp=/tmp/microcosm_executable_doctrine_grammar_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope boundary\n\nThis module documents a public grammar fixture plus exact source body imports. It does not claim source doctrine completeness, public launch-scope decision, hosted-public posture, public sharing, recipient work, external model access, private-data equivalence, or whole-system correctness.\n\n###### Scope limit\n\nThis paper module can claim an executable-doctrine grammar fixture with a generated diagram view and an Atlas card. It can explain the public grammar specimen, exact source body imports, and metadata-only result record boundary.\n\nIt cannot claim source doctrine completeness, public launch-scope decision, hosted-public posture, publishing-scope decision, recipient execution, external model access, private-data equivalence, source-file changes, launch-scope decision, or whole-system correctness. Higher claims must land in the JSON bundle and generated projection before Markdown can narrate them.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\n`examples/executable_doctrine_grammar/exported_executable_grammar_metabolism_bundle/source_module_manifest.json` declares 12 copied source bodies. Result records may report refs, hashes, counts, classes, and verdicts, but `body_in_receipt=false` remains required.\n\nThe body-material classes are `public_macro_receipt_body`, `public_macro_standard_body`, and `public_macro_tool_body`. The body set covers the executable-grammar specimen README, board, and result record; standards registry and group-index standards; standard type-plane and core authority index; lattice registry and standard; and the kind-atlas / standards option-surface runtime tools.\n\nNavigation Hologram Route Plane Audits a folder's navigation so browse rows never pose as the source of truth. 5/5\n\nDoes This checks that a folder's local \"how to get around\" surface behaves: the path starts from one control entry, then drills into browsable lists of routes and cards, and those browse rows are never allowed to pose as the source of truth. It makes visible, in plain result record files, that stale or mislabeled navigation is caught, that compressed cards keep a note of what they left out, and that nothing private or secret leaks into the navigation material while moving around. It only inspects toy fixture files and exact copied-but-navigation source modules; it does not touch any live system.\n\nScope limit It validates only the declared public toy route-plane contract and its regression fixtures (plus exact copied navigation source modules in the bundle path); it does not establish live route freshness, grant source authority, authorize any later component, run any provider/live-kernel call, or certify the whole wave.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out receipts/first_wave/navigation_hologram_route_plane\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Cold Reader Route Map](docs/components.html#component-cold_reader_route_map), [Agent Route Observability Runtime](docs/components.html#component-agent_route_observability_runtime), [Routing Anti Patterns Registry](docs/components.html#component-routing_anti_patterns_registry), [Pattern Binding Contract](docs/components.html#component-pattern_binding_contract), [Doctrine Fact Claim Audit](docs/components.html#component-doctrine_fact_claim_audit), [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol), [Self Ignorance Coverage Ledger](docs/components.html#component-self_ignorance_coverage_ledger), [Voice To Doctrine Self Improvement Loop](docs/components.html#component-voice_to_doctrine_self_improvement_loop), [Engine Room Demo](docs/components.html#component-engine_room_demo), [Saturation Engines Bundle](docs/components.html#component-batch11_saturation_engines_capsule), [Compliance Pipeline Bundle](docs/components.html#component-batch8_compliance_pipeline_capsule)\n\nagent-entry architecture navigation\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.navigation_hologram_route_plane) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Navigation Hologram Route Plane\n\nExplains component [Navigation Hologram Route Plane](docs/components.html#component-navigation_hologram_route_plane) mechanism [validates public route plane bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-navigation-hologram-route-plane-validates-public-route-plane-bundle) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Make doctrine executable before authoritative](docs/doctrine.html#dcard-p-12)\n\n###### Purpose\n\nA large codebase has a recurring failure: the agent or reader that lands in it starts from whatever browse surface is nearest to hand, treats that surface as the authority, and acts on a stale or partial view. The route plane exists to make the first move legible and to stop a browse row from being mistaken for the thing it describes. It answers one question: given a control entry, what is the safe ordered path into the browsable route projections, and what proof says that path is wired rather than asserted?\n\nThe unusual part is that the component never asserts a route is correct from prose. It treats every browse row as a projection and demands a coupling result record before that projection is allowed any authority. Source coupling is a plain SHA-256 over the route rows: the manifest carries an expected fingerprint and an expected row count, and if either disagrees with the rows on disk the projection is denied current authority. A route summary that claims to be current while its coupling is stale is rejected outright.\n\nThe other half of the design is what it refuses to do. First contact must begin at the control entry, not at a drilldown projection, so a request that tries to start from a browse row is replaced with the entry route. Compaction of the entry packet may not drop a required control field. An affordance row whose passport carries an anti-trigger is demoted before similarity search can ever select it. None of these are stylistic preferences; each is a named negative case the fixture must keep catching, so the route plane is defined as much by the eight things it blocks as by the path it permits.\n\n###### Teleology\n\nThe navigation route plane gives a public clone a typed way to move from a control entry to browseable route projections without treating browse rows as authority.\n\n###### Public Contract\n\nThe component runs in two modes against the same checks. The fixture mode loads a set of synthetic inputs, builds a toy option-surface from the rows (a cluster-flag summary plus one selected card), and then runs the negative-case validators that prove each guard still fires. The exported-bundle mode runs the same kind of checks against a real copied bundle: it validates the route rows, the source-coupling fingerprint, the source-module manifest, the route-lease policy, the entry-packet floor, the affordance passports, and the code-architecture projection packet, and only reports a pass when the secret scan is clean, a card row is selected, and every component validator passes.\n\nThe source-coupling gate is the spine. It hashes the route rows with SHA-256 and compares that against the fingerprint and row count declared in the manifest; a mismatch denies the projection any current authority, and a summary that claims current authority while coupling is stale is recorded as an overclaim. The source-module manifest names five exact copies of source route and control bodies. Each is checked by digest and by required navigation anchors, and each must declare that its body is copied but never written into the result record, so the evidence is reproducible without exposing the source text.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Entry[\"Control entry first browse row that claims first contact is replaced with the entry route\"] subgraph Gates[\"Route-plane gates\"] Couple[\"Source coupling SHA-256 over route rows vs manifest fingerprint + row count\"] Rows[\"Route rows surface role, actionable command, no source-authority claim, omission result record when required\"] Modules[\"Source-module manifest 5 copied source bodies digest + required anchors, body never in result record\"] Lease[\"Route-lease policy selected lane, permitted actions, source authority rejected\"] Floor[\"Entry-packet floor required control fields survive compaction\"] Pass[\"Affordance passports anti-trigger rows demoted before similarity can select them\"] end Verdict{\"Coupling current, all gates pass, card row selected?\"} Entry --> Couple Couple --> Rows --> Modules --> Lease --> Floor --> Pass --> Verdict Verdict -->|yes| Result records[\"metadata-only result records cluster flag, card, coupling, route lease, entry admission, affordance, code-architecture packet\"] Verdict -->|no| Blocked[\"Blocked stable error codes, findings, bodies redacted\"] Negative[\"Negative-case floor BANNED_FIRST_CONTACT_ROUTE, SOURCE_COUPLING_STALE, and 7 more\"] -.-> Gates Result records --> Ceiling[\"Scope limit projection evidence only; no live route freshness, source authority, or launch\"] Blocked --> Ceiling\n```\n\n###### Source-Backed Doctrine Packet\n- `core/organ_registry.json::implemented_organs[navigation_hologram_route_plane]` is the accepted component authority. It records status `accepted_current_authority`, evidence class `semantic_validator`, evidence strength rank `5`, scope limit `validates declared public contract only`, and validator command `python -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out receipts/first_wave/navigation_hologram_route_plane`.\n- `core/organ_atlas.json::organs[navigation_hologram_route_plane]` gives the cold-reader gloss: control entry comes first, browse rows stay projections, eight route-plane negative cases are detected, exact copied navigation source modules validate, and result records omit body text.\n- `standards/std_microcosm_navigation_hologram_route_plane.json` governs the standard authority boundary `public_navigation_route_plane_runtime_and_copied_source_body_validator_not_live_source_authority`. It requires route rows, option-surface contracts, source coupling, source-module manifests, route leases, entry-packet floors, affordance passports, code-architecture packets, body-import verification, scope limit, and scope boundary.\n- `src/microcosm_core/organs/navigation_hologram_route_plane.py` is the runtime source for fixture validation, route-plane bundle validation, secret-exclusion scan, route-lease checks, entry-admission floor checks, affordance-passport demotion, code-architecture packet result records, and source-module digest/anchor validation.\n- `core/fixture_manifests/navigation_hologram_route_plane.fixture_manifest.json` binds fixture expectations: `body_copied_material_count=5`, `body_material_status=copied_non_secret_macro_route_substrate_with_provenance`, `body_in_receipt=false`, and negative cases tied to stable error codes.\n- `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_module_manifest.json` names five exact copied source route-control bodies: `navigation_route_plane_intervention_source_body_import`, `navigation_route_plane_context_pack_source_body_import`, `navigation_route_plane_entry_packet_source_body_import`, `navigation_route_plane_option_surface_source_body_import`, and `navigation_route_plane_navigation_contract_source_body_import`.\n- `tests/test_navigation_hologram_route_plane.py` is the regression floor for fixture result records, exact source-source digest matches, source-module anchors, result record redaction, exported bundle validation, digest-mismatch rejection, and this source-backed paper-module packet.\n- `receipts/first_wave/navigation_hologram_route_plane/*.json` carries public result records for cluster/card output, source coupling, route lease, entry-payload admission, affordance-passport selection, code-architecture packet, and exported bundle validation.\n\nSource-module body floor:\n\nModule id Source source Public copied target `navigation_route_plane_intervention_source_body_import` `system/lib/navigation_route_intervention.py` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/system/lib/navigation_route_intervention.py` `navigation_route_plane_context_pack_source_body_import` `system/lib/navigation_context_pack.py` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/system/lib/navigation_context_pack.py` `navigation_route_plane_entry_packet_source_body_import` `system/lib/kernel/commands/comprehension_snapshot.py` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/system/lib/kernel/commands/comprehension_snapshot.py` `navigation_route_plane_option_surface_source_body_import` `system/lib/standard_option_surface.py` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/system/lib/standard_option_surface.py` `navigation_route_plane_navigation_contract_source_body_import` `codex/standards/std_navigation_contract.json` `examples/navigation_hologram_route_plane/exported_route_plane_bundle/source_modules/codex/standards/std_navigation_contract.json`\n\nRegistry result record refs:\n- `receipts/first_wave/navigation_hologram_route_plane/affordance_passport_selection_receipt.json`\n- `receipts/first_wave/navigation_hologram_route_plane/code_architecture_projection_packet_receipt.json`\n- `receipts/first_wave/navigation_hologram_route_plane/entry_payload_admission_receipt.json`\n- `receipts/first_wave/navigation_hologram_route_plane/route_lease.json`\n- `receipts/first_wave/navigation_hologram_route_plane/source_coupling_result.json`\n- `receipts/first_wave/navigation_hologram_route_plane/toy_kind_card.json`\n- `receipts/first_wave/navigation_hologram_route_plane/toy_kind_cluster_flag.json`\n\nFirst command from `microcosm-substrate/`:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out receipts/first_wave/navigation_hologram_route_plane\n```\n\nRuntime bundle command from `microcosm-substrate/`:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.navigation_hologram_route_plane validate-route-plane-bundle --input examples/navigation_hologram_route_plane/exported_route_plane_bundle --out receipts/runtime_shell/demo_project/organs/navigation_hologram_route_plane\n```\n\nStandard-declared runtime bundle validator: `python -m microcosm_core.organs.navigation_hologram_route_plane validate-route-plane-bundle --input examples/navigation_hologram_route_plane/exported_route_plane_bundle --out receipts/runtime_shell/demo_project/organs/navigation_hologram_route_plane`.\n\nAtlas scope limit restated: It validates only the declared public toy route-plane contract and its regression fixtures (plus exact copied navigation source modules in the bundle path); it does not establish live route freshness, grant source authority, authorize any later component, run any provider/live-kernel call, or certify the whole wave.\n\nThe negative-case floor is part of the doctrine, not incidental test trivia. Across the eight negative cases, the fixture must keep detecting these stable error codes (one case carries two codes, so the list runs to nine):\n- `BANNED_FIRST_CONTACT_ROUTE`\n- `SOURCE_COUPLING_STALE`\n- `MISSING_OMISSION_RECEIPT`\n- `ATLAS_PROJECTION_NOT_CONTROL_ENTRY`\n- `ROUTE_CARD_PRIVATE_BODY_LEAK`\n- `ROUTE_SUMMARY_OVERCLAIMS_FRESHNESS`\n- `DUPLICATE_ROUTE_ID_CONFLICT`\n- `ENTRY_ADMISSION_CONTROL_FLOOR_DROPPED`\n- `AFFORDANCE_PASSPORT_ANTITRIGGER_IGNORED`\n\n###### Reader Evidence Routing\n\nReader evidence starts at the generated JSON instance, then routes through the route-plane runtime, fixture manifest, source-module manifest, public result records, and focused regression. The browse rows, Mermaid diagram, and Atlas card are derived projections; they are not control-entry or source authority.\n\n###### Prior Art Grounding\n\nThe route plane is grounded in information-architecture and graph-navigation patterns. The first-contact rule follows the same usability pressure as [progressive disclosure](https://www.nngroup.com/articles/progressive-disclosure/): show the control entry and immediate affordances before deeper browse rows. The CLI-facing surface is also informed by the [Command Line Interface Guidelines](https://clig.dev/), especially the emphasis on discoverable commands, examples, and clear next actions.\n\nThe graph side maps to established directed-graph tooling. NetworkX documents [topological sorting](https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.dag.topological_sort.html) as an ordering over dependency edges, and graph-ranking algorithms such as [PageRank](https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.link_analysis.pagerank_alg.pagerank.html) show the older pattern of computing route salience from graph structure. Microcosm keeps those ideas below authority: route cards, leases, and browse rows are projections unless source-coupling and entry-admission result records agree.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.navigation_hologram_route_plane run --input fixtures/first_wave/navigation_hologram_route_plane/input --out /tmp/microcosm-navigation-hologram-route-plane\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.navigation_hologram_route_plane validate-route-plane-bundle --input examples/navigation_hologram_route_plane/exported_route_plane_bundle --out /tmp/microcosm-navigation-hologram-route-plane-bundle\n../repo-pytest tests/test_navigation_hologram_route_plane.py\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThese checks validate the public fixture and exported route-plane bundle only; they do not grant live route freshness, source authority, provider/live-kernel execution, later-component authorization, launch-scope decision, or whole-wave certification.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can be cited as evidence that the public fixture and exported route-plane bundle validate their declared contract. It does not establish live route freshness, grant live source-kernel authority, authorize source-file changes, authorize external model access, export account or browser state, expose browser UI live access, authorize recipient work, authorize public sharing or launch, prove whole-system correctness, or certify private-system equivalence.\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the route-plane rows, exported bundle, copied navigation source modules, source manifests, negative cases, and validation result records agree on the declared public route-plane contract. It may also claim that the generated JSON row resolves the accepted component subject, resolved mechanism subject, runtime source locus, governed concept, and the full set of declared principles, axioms, dependency modules, and relationship bindings.\n\nThis module may not claim live route freshness, live source-kernel authority, provider or browser UI access, source-file changes, recipient work authorization, hosted-public posture, launch-scope decision, publishing-scope decision, private-system equivalence, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope boundary\n\nThis module documents a public route-plane fixture and exported source-body bundle. It does not certify live corpus freshness, later public components, launch operations, provider/account or browser access, private root equivalence, whole-system correctness, or secret export.\n\nStandards Meta Diagnostics Confirms every accepted part still ties to a written rule, a run command, and a saved proof. 5/5\n\nDoes This is a coverage checker that reads the project's public catalogs and confirms every accepted part is still tied to a written standard, a documented way to run it, and a saved proof-of-run, while flagging any claim that overreaches (like \"ready to launch\") or any leaked private text. It makes the system's own bookkeeping inspectable: whether the pieces are accounted for is visible rather than taken on trust.\n\nScope limit It validates only the declared public coverage contract and never becomes source authority for the registries, mutates source, exposes private material, or authorizes launch, external model access, or any whole-system-correctness claim.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.standards_meta_diagnostics run --input fixtures/first_wave/standards_meta_diagnostics/input --out /tmp/standards_meta_diagnostics_out\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nagent-entry architecture navigation\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/standards_meta_diagnostics.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Standards Meta Diagnostics\n\nExplains component [Standards Meta Diagnostics](docs/components.html#component-standards_meta_diagnostics) mechanism [validates public standards meta diagnostics](docs/rules-and-ideas.html#lattice-mechanism-mechanism-standards-meta-diagnostics-validates-public-standards-meta-diagnostics) Governed by principles\n- [Track known unknowns without claiming the unknown is mapped](docs/doctrine.html#dcard-p-7)\n- [Apply the same floor to meta artifacts](docs/doctrine.html#dcard-p-13)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nconcepts [component-standard-runtime-result record coverage as projection-only evidence](docs/rules-and-ideas.html#lattice-concept-concept-standards-meta-diagnostics-bundle) [architecture and navigation route contracts as executable doctrine boundaries](docs/rules-and-ideas.html#lattice-concept-concept-architecture-and-navigation-route-contract-bundle) Abides by axioms\n- [Open-world epistemics](docs/doctrine.html#dcard-ax-6)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n- [Reflexive accountability / no privileged meta-layer](docs/doctrine.html#dcard-ax-12)\n\n`standards_meta_diagnostics` is the terminal public coverage diagnostic for the Microcosm runtime spine. It checks that accepted adapter-backed components remain mapped to standards, runtime contracts, result records, and explicit scope limits before a cold reader trusts the spine as coherent.\n\nIt consumes public `standards_inventory.json`, `organ_runtime_contracts.json`, and `diagnostic_policy.json` inputs backed by registry refs, runtime commands, sign-off result records, and the exported diagnostics bundle. Its result record contract is source-open by default: `secret_exclusion_scan` proves that secrets, account or browser material, model-output data bodies, raw operator bodies, and account secret-equivalent live-access material are excluded, while `public_runtime_refs` point at the real standards, component, sign-off, fixture, bundle, and paper-module system. Bodies are not inlined into JSON result records, so the positive evidence uses `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n\nThe component rejects five boundary failures:\n- accepted component rows without `standard_id` or `standard_ref`\n- accepted components missing from the standards inventory\n- accepted component rows without result record refs\n- launch, provider, public sharing, secret export, trading/advice, or whole-system correctness overclaims\n- private source bodies or model-output data bodies in public diagnostics\n\n###### Purpose\n\nA spine of accepted components is only coherent if each component is still attached to the things that make it accountable: a standard that describes it, a runtime contract that runs it, a result record that records its last verdict, and an explicit statement of what it is not allowed to claim. As the spine grows, those four attachments drift out of step one component at a time, and the drift is silent. A new component can be accepted into the runtime while its standard file, registry row, or result record ref is never added. Nothing breaks; the gap just sits there until a reader trusts the spine and finds a hole.\n\nThis component answers a single question: does every accepted component still resolve to a standard, a runtime contract, a result record, and an scope limit, with no extra and no missing entries? It treats the answer as a graph-closure check rather than a written audit. The accepted-component list, the standard rows, the runtime-contract rows, and the result record refs must agree on exactly the same set of components. Any component that appears in one surface but not another becomes a structured finding with a named error code, not a paragraph of prose.\n\nThe unusual choice is that the diagnostic refuses to grow its own authority. It projects its positive coverage from the live registry rather than a checked-in list, so a stale example cannot quietly become the thing the spine is measured against. It carries five negative fixtures that must each surface their expected failure, so the checker is itself falsifiable. And its result records deliberately hold refs, counts, hashes, and verdicts rather than the bodies they describe, so a coverage report can be read in the open without exporting private source.\n\n###### Technical Mechanism\n\n`standards_meta_diagnostics` is a public consistency validator over three finite surfaces: a standards inventory, component runtime contracts, and diagnostic policy. The positive path either reads those exported JSON inputs or projects them from the live public registry, then requires the accepted-component list, the standard rows, the runtime-contract rows, and the result record refs to agree on the same component set. This is a graph-closure check, not a narrative audit: an accepted component without a standard ref, registry-backed standard row, runtime step, validator command, or result record ref becomes a structured finding.\n\nThe mechanism has four guarded stages:\n1. `run` loads `standards_inventory.json`, `organ_runtime_contracts.json`, and `diagnostic_policy.json`, or projects the positive rows from live public registry state when the caller asks for live positives.\n2. The validator checks every accepted component row against a resolving `std_microcosm_<organ_id>` standard, the standards registry entry, the runtime shell step, a non-empty validator command, and non-empty result record refs with `body_in_receipt: false`.\n3. Five negative fixtures exercise the expected boundary failures: `missing_standard_ref`, `unmapped_accepted_organ`, `missing_receipt_ref`, `release_overclaim`, and `private_source_leakage`.\n4. The exported-bundle path revalidates the same shape through `source_module_manifest.json`, exact source-module digest checks, source-open body-import accounting, `secret_exclusion_scan`, and the projection-only `AUTHORITY_CEILING`.\n\nThe output card deliberately omits the covered-component list, findings, secret-exclusion detail, source refs, public runtime refs, scope boundary, scope limit, and source-module summary from the compact payload. Those keys remain in the full result record, which keeps the reader-facing card inspectable without turning it into a private-body export.\n\n###### Shape\n\nSource refs\n\nInventory `standards_inventory.json` Contracts `organ_runtime_contracts.json` Policy `diagnostic_policy.json` Runtime `standards_meta_diagnostics.run / run_diagnostics_bundle` Diagram source\n\n```text\nflowchart TD bundle[\"paper_module bundle: subjects + code_loci + scope limit\"] inventory[\"standards_inventory.json\"] contracts[\"organ_runtime_contracts.json\"] policy[\"diagnostic_policy.json\"] negatives[\"negative fixtures: missing standard, unmapped component, missing result record, overclaim, private source\"] runtime[\"standards_meta_diagnostics.run / run_diagnostics_bundle\"] scan[\"secret_exclusion_scan + public_runtime_refs\"] result record[\"sign-off result record: counts, error codes, scope boundary\"] projections[\"generated navigation projections: mermaid + atlas card\"] bundle --> projections inventory --> runtime contracts --> runtime policy --> runtime negatives --> runtime runtime --> scan scan --> result record runtime --> result record\n```\n\nEvidence/accounting:\n- `core/paper_module_capsules.json::paper_modules[29:paper_module.standards_meta_diagnostics]` is the JSON authority row. It names the component and mechanism subjects, the resolved code locus `src/microcosm_core/organs/standards_meta_diagnostics.py`, and the projection-only scope limit.\n- `paper_modules/standards_meta_diagnostics.json::paper_module_payload.source_authority` is `json_capsule`; `generated_projections.mermaid.status` is `available_from_capsule_edges`; `generated_projections.atlas_card.status` is `linked_from_capsule_edges`; `relationships.edges` currently has 11 edges.\n- `organs/standards_meta_diagnostics.json::organ_payload.source_registry_row` records `status: accepted_current_authority`, the validator command, and the generated result record refs; its `claim_ceiling` keeps the diagnostic scoped to the declared public contract.\n- `src/microcosm_core/organs/standards_meta_diagnostics.py` names `INPUT_NAMES`, `NEGATIVE_INPUT_NAMES`, `EXPECTED_NEGATIVE_CASES`, `PUBLIC_RUNTIME_REFS`, and `AUTHORITY_CEILING`, which are the runtime contract this reader section summarizes.\n- `tests/test_standards_meta_diagnostics.py` asserts the fixture and exported bundle paths, the five expected negative cases, source-module digest checks, `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n- result records/sign-off/first_wave/standards_meta_diagnostics_fixture_acceptance.json records `status: pass`, `accepted_organ_count: 77`, `standard_mapping_count: 77`, `runtime_contract_count: 77`, five expected error codes, `secret_exclusion_scan.blocking_hit_count: 0`, and the scope boundary that the diagnostic excludes launch, providers, registry mutation, formal-result correctness, or whole-system correctness.\n\n###### Reader Evidence Routing\n- Start with the JSON Bundle Binding to identify the source record and the projection-only scope limit before treating the diagnostic as evidence.\n- Use Structured Lattice Bindings to understand which wiring is resolved and which dependencies remain pending. Pending dependencies are honest residuals, not hidden failures.\n- Use Validation Result record Path for reproducibility: focused pytest exercises the diagnostic policy and negative cases; the corpus check verifies paper-module parity.\n- Treat secret-exclusion and public-runtime refs as result record evidence about public projection consistency. They do not mutate standards, include launch operations, expose private source material, or prove whole-system correctness.\n\n###### Named Proof Consumers\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_observes_negative_cases` is the fixture consumer. It proves that the positive public inputs cover the accepted component set and that the five expected negative cases surface their named error codes.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_bundle_validates_runtime_shape` is the exported-bundle consumer. It checks the bundle id, covered component set, source-module manifest status, source-open body-import counts, `body_in_receipt: false`, and the false scope limit flags.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_rejects_source_module_digest_mismatch`, `::test_standards_meta_diagnostics_rejects_partial_source_module_digest_mismatch`, and `::test_standards_meta_diagnostics_rejects_partial_target_module_digest_mismatch` are the digest-drift consumers. They make copied source-module bodies falsifiable instead of relying on manifest prose.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_source_modules_are_exact_macro_body_imports` is the exact-copy consumer for the three public source-body imports named in the exported bundle.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_receipts_use_secret_exclusion` is the public/private boundary consumer. It checks that result record evidence uses the secret-exclusion lane and keeps private bodies out of public diagnostics.\n- `tests/test_standards_meta_diagnostics.py::test_standards_meta_diagnostics_input_builder_tracks_live_registry` and the live-positive projection tests are the registry-freshness consumers. They keep fixture inputs tied to public registry state instead of allowing a stale checked-in example to become silent authority.\n\n###### Prior Art Grounding\n\nThis component is grounded in schema- and contract-validation practice rather than in a claim that diagnostics create authority. JSON Schema treats a schema as a machine-readable vocabulary for validating structured JSON data, and OpenAPI uses interface descriptions so consumers can understand an API without reading source code or observing traffic. The component imports that pattern into Microcosm's launch boundary: standards, adapter contracts, result records, and scope limits are checked as public projections, while the diagnostic remains bounded evidence about consistency rather than a new source of truth.\n\nPrior-art anchors:\n- JSON Schema validation and structured-data constraints: https://json-schema.org/\n- OpenAPI interface descriptions and conformance expectations: https://spec.openapis.org/oas/latest.html\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_standards_meta_diagnostics.py -q \\\n  --basetemp=/tmp/microcosm_standards_meta_diagnostics_pytest\n./repo-python scripts/build_doctrine_projection.py \\\n  --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can claim that public standards inventory, runtime contracts, accepted-component refs, result record refs, diagnostic policy, and secret-exclusion checks are consistently projected into a reader-facing diagnostics result record. It cannot claim standards-registry mutation authority, provider authority, launch-scope decision, publishing-scope decision, private source export, or whole-system correctness.\n\n###### Scope limit\n\nThis is a projection-only diagnostic. It does not become source authority for `core/standards_registry.json`, change source files surfaces, expose private source material, authorize providers, include launch operations, or prove whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe public diagnostics bundle is source-open as evidence about refs, policies, runtime contracts, and result records. It may expose standards inventory rows, component runtime contract rows, diagnostic policy rows, sign-off result record refs, fixture refs, bundle refs, secret-exclusion scan verdicts, and public runtime refs.\n\nIt must not inline private source bodies, model-output data bodies, source notes, account or browser material, account secret-equivalent live-access material, launch-send state, or private source-root bodies. The positive result record evidence therefore stays at `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n\nVoice To Doctrine Self Improvement Loop Verifies each lesson changed a named owner page with evidence before the loop closes. 5/5\n\nDoes It makes the system's \"learn from a lesson, then improve\" cycle inspectable on a folder. Each local lesson is shown being assigned to a specific owner surface (a skill, a doctrine page, a standard, or a tracked to-do capture), then changed or captured there, then validated, then closed out with a concrete reason to revisit later. Using local files only, the result records confirm that improvements are tied to real owner-surface changes and evidence rather than just asserted.\n\nScope limit It validates only the declared contract of the loop on fixtures; it does not export source notes or private bodies, grant source/doctrine edits, global-promotion, live work log mutation, or publishing-scope decision, make external model access, prove correctness, or claim private-system equivalence.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.voice_to_doctrine_self_improvement_loop run --input fixtures/first_wave/voice_to_doctrine_self_improvement_loop/input --out receipts/first_wave/voice_to_doctrine_self_improvement_loop\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Pattern Assimilation Step](docs/components.html#component-pattern_assimilation_step)\n\nagent-entry architecture navigation\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/voice_to_doctrine_self_improvement_loop.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Voice to Doctrine Self-Improvement Loop\n\nExplains component [Voice To Doctrine Self Improvement Loop](docs/components.html#component-voice_to_doctrine_self_improvement_loop) mechanism [validates public voice to doctrine self improvement loop](docs/rules-and-ideas.html#lattice-mechanism-mechanism-voice-to-doctrine-self-improvement-loop-validates-public-voice-to-doctrine-self-improvement-loop) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Track known unknowns without claiming the unknown is mapped](docs/doctrine.html#dcard-p-7)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Apply the same floor to meta artifacts](docs/doctrine.html#dcard-p-13)\n\nAbides by axioms\n- [Open-world epistemics](docs/doctrine.html#dcard-ax-6)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Reflexive accountability / no privileged meta-layer](docs/doctrine.html#dcard-ax-12)\n\nThis module is the public Microcosm projection of the source system's recursive self-improvement metabolism. It is not a synthetic result record layer. It imports the real source shape from `recursive_self_improvement_operating_loop`, `doctrine_population_loop`, and `local_to_general_propagation`: local pressure is sensed, classified, assigned to an owner surface, mutated or captured there, validated, closed out, and given a concrete re-entry condition.\n\nThe exported bundle also carries exact copies of the source bodies that make this loop real: recursive self-improvement, doctrine population, local-to-general propagation, the plane-home decision table, work log metacontrol, work log skill doctrine, and the work log standard. Result records report only source refs, hashes, counts, and scan status; the body text lives under `examples/.../source_modules/ai_workflow/`.\n\n###### Purpose\n\nThe component answers one question: did a declared lesson actually change a named owner surface and pass that surface's own validation, or did it only produce a result record that says so? \"The system learned from its work\" is an easy claim to assert and a hard one to back. Without a check, a log entry, a closed ticket, or a confident summary all read as progress. This validator refuses that shortcut.\n\nEach lesson row must name the surface it changed (a skill, a paper module, a standard, or a captured Work item), the action it took there, and the validation and completion refs that show the change held. Every ref must resolve to a real file in the exported bundle, the copied source modules, or the public Microcosm tree. A lesson then lands in exactly one of four outcomes: `refined_existing_surface` (a surface changed and was validated), `workitem_captured` (deferred work, but only with a concrete re-entry condition), `nothing_to_refine` (a typed null result that still required stewardship and a next-best-lane check), or `already_propagated_verified`. Anything that does not fit one of these is a finding, not an outcome.\n\nThe unusual part is the defence against self-grading. A lesson row may carry an `expected_label` or `expected_status` field, but the validator ignores it and recomputes the verdict from the evidence. If the row is not genuinely backed, its own asserted label cannot rescue it, and the case is recorded as `VOICE_DOCTRINE_BAKED_EXPECTED_LABEL_IGNORED`. A fixture cannot pass by declaring its own success. The same instinct runs through the negative floor: source notes, private thread bodies, model-output data, direct edits to doctrine nodes, and global promotion without owner validation are each rejected, keeping \"the system improves itself\" separate from \"this public artifact may rewrite doctrine or export private voice.\"\n\n###### Shape\n\nSource refs\n\nchanged ref + validation `refined_existing_surface` Already `already_propagated_verified` Diagram source\n\n```text\nflowchart LR Signal[\"Local pressure mistake, route gap, validation finding, residual\"] Classify[\"Classify owner surface + action\"] Owner[\"Owner surface skill, paper module, standard, Work item\"] Refused[\"Refused raw voice, private body, direct node edit, result record-only, unvalidated promotion\"] subgraph Outcome[\"One of four typed outcomes\"] Refined[\"refined_existing_surface changed ref + validation\"] Captured[\"workitem_captured with re-entry condition\"] Null[\"nothing_to_refine stewardship + next-lane checked\"] Already[\"already_propagated_verified\"] end Recompute[\"Recompute verdict from evidence expected_label ignored\"] Validate[\"Validation owner evidence + completion ref; every ref must resolve\"] Source[\"Exact source bodies 8 manifest rows: hashes, anchors\"] Result records[\"metadata-only result records result, board, validation, fixture sign-off\"] Signal --> Classify Classify --> Owner Owner --> Refused Owner --> Outcome Outcome --> Recompute Recompute --> Validate Source --> Result records Validate --> Result records Refused --> Result records\n```\n\n###### Public Mechanics\n- Local lessons carry source pattern refs, evidence refs, owner-surface ids, owner actions, validation refs, completion refs, and outcomes.\n- Owner surfaces are explicit: skills, paper modules, standards, and residual captures each retain their own mutation authority.\n- `refined_existing_surface` requires a changed owner surface and validation.\n- `workitem_captured` requires a concrete re-entry condition.\n- `nothing_to_refine` requires stewardship and next-best-lane checks.\n- source notes, private thread bodies, model-output data, live work log bodies, direct doctrine-node edits, and global promotion claims are rejected by negative cases.\n- Exported bundle validation requires `source_module_manifest.json`, verifies each copied body hash/line/byte/anchor contract, and scans copied bodies for forbidden public material.\n\n###### Reader Evidence Routing\n\nRead this module as a lesson-propagation validator, not as a general doctrine mutation license. The fixture proves that local pressure must choose a named owner surface, perform an owner-authorized action, carry validation and completion refs, and either refine an existing surface, capture a Work item with a re-entry condition, record a typed `nothing_to_refine`, or verify an already-propagated result.\n\nRead source-open evidence through the exported bundle manifest. It carries eight copied source bodies: three paper modules, four skills or skill companions, and the work log standard. Each manifest row records byte and line counts, exact source and target hashes, required anchors, and `body_in_receipt: false`. The source bodies make the source loop inspectable, while result records remain refs, hashes, counts, scan status, and scope limits.\n\nRead the negative floor as equally load-bearing. source notes bodies, private thread bodies, model-output data bodies, direct doctrine-node edits, result record-only progress, live work log mutation, and unvalidated global promotion are rejected. Those rejections keep \"the system learns from work\" separate from \"this public artifact can mutate doctrine or export private state.\"\n\n###### Prior Art Grounding\n\nThis component is grounded in after-action review, lessons-learned, and pattern language practices. NASA's Lessons Learned Information System is a public example of preserving operational lessons so future work can reuse them, while pattern-language practice gives a vocabulary for turning repeated local solutions into named, reusable forms. Microcosm adopts that direction without collapsing operator voice into doctrine: a local lesson only becomes durable when it has evidence, an owner surface, a validation result record, and a bounded re-entry path.\n\nPrior-art anchors:\n- NASA Lessons Learned Information System: https://llis.nasa.gov/\n- Pattern language background: https://hillside.net/patterns/\n\n###### Runtime\n\n```text\nPYTHONPATH=src python -m microcosm_core.organs.voice_to_doctrine_self_improvement_loop run \\\n  --input fixtures/first_wave/voice_to_doctrine_self_improvement_loop/input \\\n  --out receipts/first_wave/voice_to_doctrine_self_improvement_loop\n```\n\nThe exported bundle uses the same validator without negative-case inputs:\n\n```text\nPYTHONPATH=src python -m microcosm_core.organs.voice_to_doctrine_self_improvement_loop run-bundle \\\n  --input examples/voice_to_doctrine_self_improvement_loop/exported_voice_to_doctrine_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/voice_to_doctrine_self_improvement_loop\n```\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\nA green fixture or bundle result record proves only the public lesson-propagation boundary above; it does not grant source-file changes, live work log mutation, global doctrine-promotion, launch, or whole-system authority.\n\n###### Scope boundary\n\n###### Scope boundary\n\nThis module does not export source note, source notes, private thread bodies, model-output data, account or browser state, live work log rows, proof authority, source-file changes, publishing-scope decision, or private-system equivalence. It shows the public mechanics of system learning under owner-surface evidence gates.\n\n###### Scope limit\n\nThis paper module can claim a lesson-propagation fixture. It can explain owner-surface checks, negative cases, copied source-module manifests, and metadata-only result records. A diagram view and atlas card are generated for this module.\n\nIt cannot claim source notes export, non-public body export, model-output data export, source-file changes, doctrine mutation authority, global-promotion authority, live work log mutation, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.\n\nCognitive Operator Registry Checks the catalog of named thinking-moves so each is fully described and backed by evidence. 5/5\n\nDoes This is a checker for the system's catalogue of named thinking-moves (operators like \"reduce competing pressure to one bounded action\" or \"compile a handoff packet when validated work cannot be committed\"). It confirms every operator in the public catalogue is fully described (how it is triggered, used, and checked) and that every operator marked active carries a real result record proving it once changed a live decision, while rejecting any operator that claims to speak with the owner's voice or overreaches into \"ready to launch.\" It matters because it shows the system treats reasoning itself as inspectable typed system instead of ad-hoc prompt lore.\n\nScope limit It validates only the declared public registry contract and copied source bodies; it never becomes registry source authority, mutates operators, proves operator correctness, exposes source notes, or authorizes launch, external model access, or any whole-system-correctness claim.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.cognitive_operator_registry run --input fixtures/first_wave/cognitive_operator_registry/input --out /tmp/cognitive_operator_registry_out\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\narchitecture navigation doctrine\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.cognitive_operator_registry) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Cognitive Operator Registry\n\nExplains component [Cognitive Operator Registry](docs/components.html#component-cognitive_operator_registry) mechanism [validates public operator contract](docs/rules-and-ideas.html#lattice-mechanism-mechanism-cognitive-operator-registry-validates-public-operator-contract) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Make doctrine executable before authoritative](docs/doctrine.html#dcard-p-12)\n\n`cognitive_operator_registry` is the public contract diagnostic for the source system's typed cognitive-operator system. It checks that each public operator row carries the required operator-shape fields, that every `active` operator is backed by a dogfood result record proving it changed a live decision, and that the registry policy declares explicit scope limits before a cold reader trusts the operators as real reusable cognition rather than inspirational prose.\n\n###### Purpose\n\nA team that writes down its reusable thinking moves as a registry tends to accumulate entries faster than it can prove any of them help. The single question this component answers is: which of these listed operators has actually changed a live decision, and which is just a tidy description of one? An entry may only call itself `active` if it points to a dogfood result record, and that result record must carry `cognition_delta_evidence` recording a concrete decision that came out differently because the operator was applied.\n\nThe unusual part is that the check refuses to take a row at its word. Where a result record cites evidence surfaces, command paths, or task-ledger handles, the validator resolves each one against the public system (see `_dogfood_receipt_ref_resolves` and `_record_dogfood_evidence_resolution_findings` in the source). A row whose prose says it was dogfooded but whose evidence does not resolve is recorded as a failure, not a pass. A second check, the anti-sprawl case, flags two operators that share a slug or a near-identical claim unless an accretion decision was recorded, so the registry cannot quietly grow two near copies of the same idea.\n\nThe evidence contract is source-open by default. The validator emits refs, hashes, counts, and verdicts; `secret_exclusion_scan` proves that secrets, account or session material, model-output data bodies, source notes, and account secret-equivalent access material are excluded. Operator bodies are never inlined into the JSON result record, so the positive evidence carries `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n\n###### Prior Art Grounding\n\nThis component borrows from cognitive work analysis, provenance, schema validation, and policy-gated registries. Useful anchors include:\n- Cognitive Work Analysis, summarized in this [information-systems design overview](https://files.eric.ed.gov/fulltext/EJ1082064.pdf), as prior art for analyzing cognitive work in complex sociotechnical systems.\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), for connecting operator claims to activities, agents, and evidence used to evaluate trustworthiness.\n- [JSON Schema](https://json-schema.org/), for the required-shape validation pattern behind public operator rows.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), as a precedent for policy evaluation that remains distinct from the registry data being evaluated.\n\nMicrocosm borrows the cognitive-work, provenance, shape-checking, and policy registry patterns, but keeps this component to a public contract diagnostic. It does not mutate operators, prove operator correctness, expose private operator bodies or source notes, authorize providers, or include launch operations.\n\nIt consumes public `operator_registry.json`, `operator_standard.json`, and `dogfood_index.json` inputs that project real source operator rows and dogfood result records. Its result record contract is source-open by default: `secret_exclusion_scan` proves that secrets, account or browser material, model-output data bodies, source notes, and account secret-equivalent live-access material are excluded, while `public_runtime_refs` point at the real standard, component, sign-off, fixture, bundle, and paper-module system. Bodies are not inlined into JSON result records, so the positive evidence uses `body_in_receipt: false`, `real_runtime_receipt: true`, and `synthetic_receipt_standin_allowed: false`.\n\nThe component rejects seven boundary failures:\n- operator rows missing required operator-shape fields\n- active operators with no backing dogfood result record\n- dogfood result records missing `cognition_delta_evidence`\n- near-duplicate operators (identical slug or near-identical claim) with no recorded accretion decision (the anti-sprawl governor case)\n- launch, provider, source-file changes, registry-mutation, or operator-correctness overclaims\n- operator rows that claim operator-voice or source note authority\n- private operator source bodies or model-output data bodies in public inputs\n\nThe exported bundle also imports three verbatim source bodies behind an import membrane: the cognitive-operator registry (`codex/doctrine/cognitive_operators.json`), the cognitive-operator standard (`codex/standards/std_cognitive_operator.json`), and the registry projection/validation tool (`system/lib/cognitive_operator_registry.py`). Each is copied byte-for-byte with a sha256 digest and required anchors; result records carry refs, hashes, counts, and verdicts only.\n\n###### Shape\n\nSource refs\n\nValidator `cognitive_operator_registry validator` Diagram source\n\n```text\nflowchart LR Registry[\"Public operator registry operator ids, roles, runtime refs\"] Standard[\"Operator standard required fields, scope limit\"] Dogfood[\"Dogfood result records cognition-delta evidence\"] Validator[\"cognitive_operator_registry validator\"] Source[\"Copied source bodies registry, standard, validator tool\"] Negative[\"Negative floor missing fields, no dogfood, sprawl, overclaim, private leakage\"] Result record[\"Result records refs, hashes, counts, verdicts; body text omitted\"] Registry --> Validator Standard --> Validator Dogfood --> Validator Source --> Validator Validator --> Negative Validator --> Result record\n```\n\n###### Reader Evidence Routing\n\nRead this module as a public contract diagnostic, not as a glossary of operators or a live execution surface. This page explains the shape a reader should verify; the structured data lives in the JSON files below.\n\nStart with `paper_modules/cognitive_operator_registry.json` for the full module record, then use `standards/std_microcosm_cognitive_operator_registry.json` to check required fields, forbidden authority, public/private boundary rules, and result record expectations. Open `core/fixture_manifests/cognitive_operator_registry.fixture_manifest.json` before inspecting fixtures or copied source modules, because the manifest names the source-open body floor and the body-omission contract.\n\nRead dogfood result records as evidence that an active operator changed a live decision; do not read them as proof that the operator is generally correct. Read negative cases as part of the positive claim: missing roles, missing dogfood, missing cognition-delta evidence, duplicate/sprawl pressure, operator-voice claims, authority overclaims, and private-source leakage must remain rejected.\n\n###### Technical Mechanism\n\nThe runtime mechanism lives in `src/microcosm_core/organs/cognitive_operator_registry.py`. `run()` loads the first-wave public fixture inputs: `operator_registry.json`, `operator_standard.json`, and `dogfood_index.json`. `_positive_findings()` checks that operator rows have required ids, slugs, roles, claims, runtime refs, evidence refs, and scope limits, then requires each active operator to resolve to a dogfood result record with cognition-delta evidence. The dogfood evidence resolver follows public fixture refs and copied bundle handles rather than accepting a row because its prose says it was dogfooded.\n\nNegative pressure is source-declared in `EXPECTED_NEGATIVE_CASES`. `_negative_findings()` exercises missing required fields, active operators without dogfood result records, dogfood rows without cognition-delta evidence, operator sprawl without accretion decisions, operator-voice authority claims, provider/source/launch/correctness overclaims, and private source or model-output data leakage. A pass is therefore not only \"the positive rows parsed\"; it also means the expected refusal classes were observed and recorded.\n\n`run_registry_bundle()` is the body-floor consumer. It executes the same registry contract against `examples/cognitive_operator_registry/exported_cognitive_operator_registry_bundle` and makes `_source_module_manifest_result()` mandatory. The manifest must prove exact copied source bodies for `codex/doctrine/cognitive_operators.json`, `codex/standards/std_cognitive_operator.json`, and `system/lib/cognitive_operator_registry.py`; `_source_open_body_import_summary()` then records body ids, classes, line counts, hashes, and `body_in_receipt: false`. `AUTHORITY_CEILING` keeps those result records below registry mutation, operator correctness, provider authority, source-file changes, launch, and whole-system correctness.\n\n###### Named Proof Consumers\n- `microcosm_core.organs.cognitive_operator_registry.run` is the first-wave fixture consumer. It reads the public registry, standard, and dogfood index, writes the result, board, validation, and sign-off result records, and checks the expected negative floor.\n- `microcosm_core.organs.cognitive_operator_registry.run_registry_bundle` is the exported-bundle consumer. It proves the copied source registry, standard, and validator bodies through source-module manifest equality while keeping copied body text out of result records.\n- `tests/test_cognitive_operator_registry.py::test_cognitive_operator_registry_observes_negative_cases` is the public-contract regression. It asserts that all expected negative cases are observed and that all fixture operators have dogfood result records.\n- `tests/test_cognitive_operator_registry.py::test_cognitive_operator_registry_bundle_validates_runtime_shape` is the bundle-shape regression. It checks operator counts, source-module manifest status, body-material ids, and the metadata-only result record boundary.\n- `tests/test_cognitive_operator_registry.py::test_cognitive_operator_registry_source_modules_are_exact_macro_body_imports` is the exact-copy proof consumer. It byte-compares every manifest source ref with the copied target and verifies the recorded sha256 digests.\n\n###### Validation Result record Path\n\nRun the first-wave fixture into disposable result records from the Microcosm root:\n\nRun the exported bundle through the same component:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.cognitive_operator_registry run-registry-bundle --input examples/cognitive_operator_registry/exported_cognitive_operator_registry_bundle --out /tmp/microcosm_cognitive_operator_registry_bundle\n```\n\n```text\ncd microcosm-substrate\n../repo-pytest tests/test_cognitive_operator_registry.py -q\ncd ..\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe source atlas row carries the matching `paper_module_ref`, `mechanism_refs`, and `code_loci` entries.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module can claim a public cognitive-operator registry contract fixture with source-backed operator-shape checks, active-operator dogfood result record checks, cognition-delta evidence resolution, anti-sprawl accretion checks, expected negative cases, exact copied source body manifest equality, metadata-only result records, and a generated diagram view derived from the module's structured bindings.\n\nIt cannot become source authority for the cognitive-operator registry, mutate operators, prove operator correctness, expose private operator bodies or source notes, authorize providers, change source files, include launch operations or public sharing, or certify whole-system correctness.\n\nIf focused validation reports an exact-copy source-module body mismatch, route that repair through `microcosm_exact_copy_refresh`; do not treat this Markdown projection as source authority for copied source bodies.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThat mechanism states the proof obligation in operational terms: operator rows must carry required shape fields, active operators must have dogfood result records, dogfood result records must include cognition-delta evidence, duplicate or near-duplicate operators must carry an accretion decision, and the exported bundle must prove copied registry, standard, and validator bodies by source module digest before any result record is trusted.\n\nThe generated JSON instance links this module to `concept.architecture_and_navigation_route_contract_bundle`, principles `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-12`, and `P-15`, and axioms `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, and `AX-11`. Those edges frame the module as an architecture-and-navigation contract validator. They do not make the Markdown or generated Atlas card source authority for operator definitions, live operator execution, or provider action.\n\nRouting Anti Patterns Registry Indexes the navigation mistakes agents repeat and guards the public list. 5/5\n\nDoes This is a checker for the system's public list of navigation mistakes agents keep making, such as grepping before asking the kernel for a route or sending work to a bridge before scope is chosen. It confirms each anti-pattern row has a stable id and explanation, rejects duplicate or body-leaking rows, and proves the public bundle carries the actual source registry body copied byte-for-byte instead of a synthetic paraphrase.\n\nScope limit It validates only the declared public routing anti-pattern registry contract and copied source body; it never becomes route source authority, mutates routes, exposes private routing notes, calls providers, authorizes launch, or proves whole-system correctness.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.routing_anti_patterns_registry run --input fixtures/first_wave/routing_anti_patterns_registry/input --out /tmp/routing_anti_patterns_registry_out\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Navigation Hologram Route Plane](docs/components.html#component-navigation_hologram_route_plane), [Agent Route Observability Runtime](docs/components.html#component-agent_route_observability_runtime), [Cold Reader Route Map](docs/components.html#component-cold_reader_route_map)\n\narchitecture navigation doctrine\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/routing_anti_patterns_registry.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Routing Anti-Patterns Registry\n\nExplains component [Routing Anti Patterns Registry](docs/components.html#component-routing_anti_patterns_registry) mechanism [validates public routing anti patterns registry](docs/rules-and-ideas.html#lattice-mechanism-mechanism-routing-anti-patterns-registry-validates-public-routing-anti-patterns-registry) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Make doctrine executable before authoritative](docs/doctrine.html#dcard-p-12)\n\n`routing_anti_patterns_registry` is the public contract diagnostic for the source system's typed navigation failure rows. It validates the copied `codex/doctrine/routing_anti_patterns.json` registry as runnable Microcosm system: the input must declare `kind: routing_anti_patterns`, carry a positive version, and expose stable `anti_patterns` rows with unique ids and plain explanatory text.\n\nThe positive fixture imports the real source registry body. The exported bundle also carries a source module manifest and a byte-for-byte copy under `source_modules/codex/doctrine/routing_anti_patterns.json`, with sha256 hashes and anchors for `kernel_before_grep`, `bridge_before_scope`, and `mode_in_chat_only`. Result records carry refs, hashes, counts, and verdicts only; they do not inline the copied body.\n\nThe component rejects five boundary failures:\n- missing `kind`\n- duplicate anti-pattern ids\n- anti-pattern rows missing explanatory text\n- launch, provider, source-file changes, route-policy mutation, maturity, or whole-system-correctness overclaims\n- private routing bodies, source note bodies, model-output data bodies, or secret values in public inputs\n\n###### Purpose\n\nA navigation system can fail quietly. An agent reaches for `grep` when a kernel route would have narrowed the space first, or changes execution mode in chat without updating the disk contract, and nothing complains until the work is already off the rails. This component answers one question: does the public registry of known routing failures hold its declared shape, and does the copied source body that backs it stay byte-honest? It names recurring navigation mistakes as typed rows so they can be recognised, not rediscovered.\n\nThe registry is treated as a checked artifact, not as authority. A page describing routing failures is easy to read as a router or as policy. The component refuses both: a row may project a public anti-pattern, but it may not declare `source_authority`, `route_authority`, or any internal control role, and the validator rejects rows that try. So the document can describe how navigation goes wrong without itself becoming the thing that decides how navigation should go.\n\nOne design choice sits in how each row's route-repair state is decided. Rather than trust a label baked into the row, the checker derives the repair state from the row's own id and explanatory text: `kernel_before_grep` only earns `kernel_first_navigation` if its text actually mentions grep, kernel, and route. A row carrying a pre-written `expected_route_repair_state` is flagged, and `baked_expected_labels_sufficient` is fixed to false. The point is to stop a registry from grading itself by self-asserted labels, and to keep the meaning grounded in the text a reader can see.\n\n###### Shape\n\nThis module is a projection over a bundle-backed public routing diagnostic, not route source authority. Cold readers should read it as a bounded chain: the JSON bundle and standard name the contract; the runtime component validates fixtures and an exported source bundle; result records preserve hashes, counts, verdicts, and negative cases; generated Mermaid and Atlas rows expose the bundle edges; the scope limit remains projection-only.\n\nSource refs\n\nBundle `core/paper_module_capsules.json` `paper_module.routing_anti_patterns_registry` Standard `standards/std_microcosm_routing_anti_patterns_registry.json` `paper_modules/routing_anti_patterns_registry.md` run / run-bundle / result record writer `src/microcosm_core/organs/routing_anti_patterns_registry.py` registry + negative cases `fixtures/first_wave/routing_anti_patterns_registry/input` source_module_manifest + exact copied body `examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle` Tests `tests/test_routing_anti_patterns_registry.py` refs, hashes, counts, verdicts `receipts/.../routing_anti_patterns_registry*.json` 22 edges; Mermaid available; Atlas linked `paper_modules/routing_anti_patterns_registry.json` Diagram source\n\n```text\nflowchart TD Bundle[\"core/paper_module_capsules.json paper_module.routing_anti_patterns_registry\"] Standard[\"standards/std_microcosm_routing_anti_patterns_registry.json\"] Markdown[\"paper_modules/routing_anti_patterns_registry.md reader projection; not route authority\"] Runtime[\"src/microcosm_core/components/routing_anti_patterns_registry.py run / run-bundle / result record writer\"] Fixture[\"fixtures/first_wave/routing_anti_patterns_registry/input registry + negative cases\"] Bundle[\"examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle source_module_manifest + exact copied body\"] Tests[\"tests/test_routing_anti_patterns_registry.py\"] Result records[\"result records/.../routing_anti_patterns_registry*.json refs, hashes, counts, verdicts\"] structured source record[\"paper_modules/routing_anti_patterns_registry.json 22 edges; Mermaid available; Atlas linked\"] Ceiling[\"Scope limit no route authority, mutation, external model access, launch, or whole-system proof\"] Bundle --> Markdown Bundle --> structured source record Standard --> Runtime Fixture --> Runtime Bundle --> Runtime Runtime --> Tests Runtime --> Result records Tests --> Result records structured source record --> Ceiling Result records --> Ceiling Markdown --> Ceiling\n```\n\n###### Technical Mechanism\n\nThe component is a contract checker around a public routing-registry copy, not a router. `run` loads the first-wave fixture and asks `_build_result` to validate the positive `routing_anti_patterns.json` payload, all declared negative cases, the secret-exclusion scan, and the metadata-only result record bundle. The positive path requires `kind: routing_anti_patterns`, a positive integer `version`, stable anti-pattern ids, explanatory text, and the named source anchors `kernel_before_grep`, `bridge_before_scope`, and `mode_in_chat_only`.\n\nThe failure lattice is explicit. `_payload_findings` records typed evidence for missing kind, non-positive version, missing rows, missing ids, duplicate ids, missing text, forbidden authority-role masquerade, private-source fields, and overclaims about launch, external model access, source-file changes, route-policy mutation, maturity, readiness, or whole-system correctness. A pass is admitted only when every expected negative case appears with its expected error code and `missing_negative_cases` is empty. That makes the negative cases proof obligations rather than illustrative examples.\n\nThe exported-bundle path adds source-copy accountability. `run-bundle` calls `run_routing_anti_patterns_bundle`, which requires `bundle_manifest.json`, `source_module_manifest.json`, and the copied body under `source_modules/codex/doctrine/routing_anti_patterns.json`. The manifest checker streams sha256 over the copied target, verifies `sha256`, `source_sha256`, and `target_sha256`, checks required anchors, classifies the material as `copied_non_secret_macro_body`, and rejects any body-in-result record claim. The source body is available in the exported source-module tree; result records keep only refs, hashes, counts, verdicts, and omission fields.\n\nThe governing lattice is deliberately narrow. The bundle binds this mechanism to `concept.architecture_and_navigation_route_contract_bundle`, `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-8`, `P-9`, `P-12`, `P-15`, and `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, `AX-11`, but the checker consumes those refs as a scope limit: evidence must be replayable, typed, public-safe, and below projection authority. It also depends on `navigation_hologram_route_plane`, `agent_route_observability_runtime`, and `cold_reader_route_map`, so the registry can describe navigation failure shapes without becoming the internal control route source.\n\n###### Reader Evidence Routing\n\nRead this module through the following source-to-proof route:\n1. Start at the source record `core/paper_module_capsules.json::paper_modules[58:paper_module.routing_anti_patterns_registry]`. It is the source authority for `source_authority: json_capsule`, the component subject, mechanism subject, runtime source locus, concept, principles, axioms, dependency modules, and the projection statuses.\n2. Read the generated structured source record `paper_modules/routing_anti_patterns_registry.json` only as a projection from that source record.\n3. Follow the runtime proof path through `src/microcosm_core/organs/routing_anti_patterns_registry.py`, `fixtures/first_wave/routing_anti_patterns_registry/input/`, and `examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle/`. Those surfaces carry the public registry fixture, negative cases, `source_module_manifest.json`, copied body target, required anchors, and digest checks.\n4. Confirm the public result record floor with the named fixture command, bundle command, focused regression, and corpus check below. Result records may carry ids, refs, hashes, counts, verdicts, and omission fields, but not private routing bodies or model-output data.\n5. Treat generated diagram, Atlas, search, object-map, and site cards as reachability projections from the same source row. They help a public reader find the module; they do not outrank the bundle, runtime, manifest, tests, or metadata-only result records.\n\n###### Named Proof Consumers\n- First-wave fixture consumer: PYTHONPATH=src ../repo-python -m microcosm_core.components.routing_anti_patterns_registry run --input fixtures/first_wave/routing_anti_patterns_registry/input --out /tmp/microcosm-routing-anti-patterns-registry/fixture --sign-off-out /tmp/microcosm-routing-anti-patterns-registry/sign-off.json --card consumes the public registry fixture, six expected negative-case families, private-source rejection, secret-exclusion scan, metadata-only result record writer, and command-card omission boundary.\n- Exported-bundle consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.organs.routing_anti_patterns_registry run-bundle --input examples/routing_anti_patterns_registry/exported_routing_anti_patterns_bundle --out /tmp/microcosm-routing-anti-patterns-registry/bundle --card` consumes the source-module manifest, exact copied source registry body, sha256 digest floor, required anchors, material class, and source-open summary while keeping body text out of result records.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_routing_anti_patterns_registry.py -q` pins negative-case coverage, source-authority masquerade rejection, digest mismatch blockers, exact copied-body imports, secret-exclusion result record policy, and fresh-card reuse behavior.\n- It is a read-only result record for this Markdown slice, not permission to hand-edit generated projections.\n\n###### Prior Art Grounding\n\nThis registry follows the same family as pattern and anti-pattern catalogs: name recurring failure shapes so future operators can recognize and avoid them. The [Hillside patterns library](https://hillside.net/patterns/) is the positive pattern-language ancestor, and the software anti-pattern literature supplies the inverse move: documenting repeated practices that look useful but produce bad outcomes.\n\nThe routing-specific presentation also borrows from CLI usability practice. The [Command Line Interface Guidelines](https://clig.dev/) emphasize discoverability, clear errors, and suggested next actions; this component applies that pressure to navigation failures by requiring stable ids and explanatory text while keeping the registry projection below route-source authority.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, validate the public routing-registry diagnostic without writing tracked result records:\n\nPassing validation proves the public anti-pattern registry fixture and copied-body digest floor only. It does not make this registry route source authority, and it excludes route-policy mutation, external model access, launch, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that anti-pattern row shape, stable anti-pattern ids, source-module digest checks, private-leak rejection, negative cases, and validation result records support the declared routing anti-pattern registry contract. It may also claim that the JSON row resolves the accepted component subject, mechanism subject, runtime source locus, governed concept, principles, axioms, and dependency modules.\n\nThis module may not claim route source authority, live route freshness, route-policy mutation, provider authorization, private routing-note disclosure, maturity proof, hosted-public posture, launch-scope decision, publishing-scope decision, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope limit\n\nThis is a projection-only diagnostic. It can explain public anti-pattern registry validation, copied-body digest checks, private-leak rejection, negative cases, and validation result records. It does not become route source authority, mutate routes, expose private routing notes, authorize providers, include launch operations, or prove whole-system correctness.\n\nDoctrine Fact Claim Audit Checks that public fact rows state the right count and point at live, anchored code. 5/5\n\nDoes Checks that public fact rows state the expected count, point at live copied code loci, preserve anchors, and only reference facts that exist in the fixture DAG.\n\nScope limit fact assertion, code-loci, and DAG fixture truth gate only; it is not a comprehension engine and does not establish a minimum read graph\n\nRun\n\n```text\nmicrocosm doctrine-fact-claim-audit run --input fixtures/first_wave/doctrine_fact_claim_audit/input --out receipts/first_wave/doctrine_fact_claim_audit\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Engine Room Demo](docs/components.html#component-engine_room_demo), [Self Ignorance Coverage Ledger](docs/components.html#component-self_ignorance_coverage_ledger)\n\narchitecture navigation doctrine\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/doctrine_fact_claim_audit.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Doctrine Fact Claim Audit\n\nExplains component [Doctrine Fact Claim Audit](docs/components.html#component-doctrine_fact_claim_audit) mechanism [validates public doctrine fact claim audit](docs/rules-and-ideas.html#lattice-mechanism-mechanism-doctrine-fact-claim-audit-validates-public-doctrine-fact-claim-audit) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Track known unknowns without claiming the unknown is mapped](docs/doctrine.html#dcard-p-7)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n- [Open-world epistemics](docs/doctrine.html#dcard-ax-6)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n\n`doctrine_fact_claim_audit` is a Crown Jewel import component with real runnable system and a strict public scope limit. It consumes synthetic public fixtures, copied source source bodies, and source manifests that verify sha256 digests, line counts, required anchors, secret-exclusion status, and result record body omission.\n\nWhat it proves: fact assertion, code-loci, DAG, and numeric claim binding fixture truth gate only.\n\n###### Purpose\n\nDocumentation about a living system rots. A page states that there are forty-seven of something, or cites a function in a file, and both claims quietly go stale as the code moves underneath them. A reader cannot tell a current count from a number that was true once and never rechecked. This component exists to answer one question: which of a page's factual assertions can be re-derived from source right now, and which have become untracked drift?\n\nThe approach treats a documentation claim like a cached value that needs an invalidation strategy. A bare number is not enough; the claim is admissible only when it is bound to a fact assertion that records how to recompute or revalidate the value. The same pass resolves every cited code locus on disk and checks that the quoted anchor text is actually present, so a plausible-but-dead file reference becomes a typed finding rather than inert prose. The interesting move is that nothing here asks a model whether the prose reads as true. The component recomputes a bounded relation over public fixtures and reports only what that relation supports.\n\nThe second design choice worth naming is how the checks are proved. The negative floor is semantic, not label-trusting: the test harness overwrites the declared failure fixtures with bogus pass rows and confirms the evaluator still derives the expected stable error codes itself. That keeps the proof attached to the mechanism rather than to the fixture filenames. The honesty of the page rests on that: the component is a narrow claim-audit gate over copied public fixtures, not a comprehension engine, a minimum-read-graph proof, a source-file changes lane, or any launch-scope decision.\n\n###### Prior Art Grounding\n\nThis component borrows from provenance modeling, structured fact-check metadata, schema validation, and supply-chain attestation. Useful anchors include:\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), which models entities, activities, and agents so readers can assess the quality, reliability, and trustworthiness of derived information.\n- Schema.org [ClaimReview](https://schema.org/ClaimReview), as a web metadata pattern for recording a reviewed claim and its fact-checking context.\n- [JSON Schema](https://json-schema.org/), for declaring expected structure and rejecting malformed or incomplete claim records.\n- [SLSA provenance](https://slsa.dev/spec/v1.2/), for the software-supply-chain pattern of tracing artifacts back to source and build metadata.\n\nMicrocosm borrows the provenance, claim-review, schema, and attestation shapes, but keeps this component to public fixture fact counts, code-loci existence, anchor presence, DAG references, and synthetic volatile numeric binding cases. It is not a comprehension engine, private-doctrine export, launch-scope decision, or a minimum-read-graph proof.\n\n###### Technical Mechanism\n\nThe runtime mechanism is a public fixture evaluator in `src/microcosm_core/organs/doctrine_fact_claim_audit.py`. The component declares a `CrownJewelSpec` with four required inputs: `fact_assertions.json`, `fact_dag.json`, `numeric_claims.json`, and `projection_protocol.json`. The shared crown-jewel runner handles source-manifest validation, result record writing, negative-case execution, and scope limit attachment; this module supplies the domain evaluator and the semantic negative-case mutator.\n\n`evaluate` first loads the fact assertion table and compares `expected_fact_count` to the number of fact rows. Each fact must carry at least one code locus. The evaluator resolves every relative code-locus path against the copied source-module bundle, then checks that the declared anchor text is present in the copied body. The DAG pass builds the set of audited fact ids and rejects any edge whose `from` or `to` endpoint is not in that set. These checks convert plausible documentation references into result record-backed paths, anchors, and graph edges.\n\nNumeric claims are checked by importing the copied `source_modules/system/lib/derived_fact_hologram.py` body from the exported bundle and calling its `find_unbound_numeric_claims` function. For each row in `numeric_claims.json`, the evaluator synthesizes `FactAssertion` instances for the declared sections, records unbound numeric detections, and blocks a case when a non-detector row leaves current-state numeric prose without a matching fact assertion. Detector rows are positive evidence only because they must surface the expected section and number.\n\nThe negative floor is semantic rather than label-trusting. `evaluate_negative_case` mutates the positive fixture in memory for `wrong_fact_count`, `missing_code_locus`, `dead_code_locus`, `dead_dag_ref`, and `unbound_numeric_claim`, then reruns the same evaluator in a temporary input directory. The tests deliberately overwrite the declared negative-case files with bogus pass rows and confirm that the component still derives the expected stable error codes from the evaluator itself. That keeps the proof tied to the mechanism, not to fixture labels.\n\nThe source-open body floor is separate from the result record floor. The exported bundle manifest names two copied bodies, `derived_fact_hologram.py` and `paper_modules.py`, with digests and line counts. Runtime result records carry refs, counts, verdicts, scope boundaries, and `body_in_receipt: false`; they do not embed copied source bodies or private operator material.\n\nHow to run it:\n\nRuntime bundle route:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.doctrine_fact_claim_audit run-doctrine-fact-bundle --input examples/doctrine_fact_claim_audit/exported_doctrine_fact_claim_audit_bundle --out receipts/runtime_shell/demo_project/organs/doctrine_fact_claim_audit\n```\n\n###### Shape\n- Subject: `doctrine_fact_claim_audit`, with mechanism `mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit`.\n- Runtime locus: `src/microcosm_core/organs/doctrine_fact_claim_audit.py`, especially `run`, `run_doctrine_fact_bundle`, `evaluate`, `_evaluate_numeric_claims`, `_load_derived_fact_module`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- The fixture checks an expected fact count, resolves declared code-locus paths, verifies required source anchors, rejects dead DAG references, and requires volatile numeric claim cases to be bound to fact assertions.\n- The accepted positive result record reports three facts, three verified code loci, two DAG edges, two numeric claim cases, and one detected unbound numeric detector case, while preserving `body_in_receipt: false`.\n- The negative floor is stable: `dead_code_locus`, `dead_dag_ref`, `missing_code_locus`, `unbound_numeric_claim`, and `wrong_fact_count`.\n- The public standard is `standards/std_microcosm_doctrine_fact_claim_audit.json`; the fixture manifest is `core/fixture_manifests/doctrine_fact_claim_audit.fixture_manifest.json`.\n\nSource refs\n\nfacts + expected_fact_count `fact_assertions.json` edges `fact_dag.json` cases `numeric_claims.json` Diagram source\n\n```text\nflowchart LR Facts[\"fact_assertions.json facts + expected_fact_count\"] --> Eval[\"evaluate\"] Dag[\"fact_dag.json edges\"] --> Eval Numerics[\"numeric_claims.json cases\"] --> Eval Manifest[\"source module manifest copied bodies\"] --> Eval Eval --> Count{\"declared fact count = table length?\"} Eval --> Loci{\"each code locus path on disk + anchor in body?\"} Eval --> DagRef{\"DAG endpoints are known fact ids?\"} Eval --> Bound{\"current-state numerics bound to a fact assertion section?\"} Count -->|mismatch| Block[\"typed blocking finding\"] Loci -->|missing path or anchor| Block DagRef -->|dead ref| Block Bound -->|unbound| Block Count -->|ok| Result record[\"metadata-only result record body_in_receipt: false\"] Loci -->|ok| Result record DagRef -->|ok| Result record Bound -->|ok| Result record Neg[\"evaluate_negative_case mutate fixture, rerun evaluator\"] --> Codes[\"expected stable error codes\"]\n```\n\n###### Named Proof Consumers\n- Fixture CLI consumer: PYTHONPATH=src ../repo-python -m microcosm_core.components.doctrine_fact_claim_audit run --input fixtures/first_wave/doctrine_fact_claim_audit/input --out /tmp/microcosm-doctrine-fact-claim-audit/fixture --sign-off-out /tmp/microcosm-doctrine-fact-claim-audit/sign-off.json --card. Expected proof shape: `status: pass`, three fact rows, three verified code loci, two DAG edges, two numeric-claim cases, one detector case, zero blocking unbound numerics, five semantic negative cases, and `body_in_receipt: false`.\n- Exported bundle consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.organs.doctrine_fact_claim_audit run-doctrine-fact-bundle --input examples/doctrine_fact_claim_audit/exported_doctrine_fact_claim_audit_bundle --out /tmp/microcosm-doctrine-fact-claim-audit/bundle --card`. Expected proof shape: the same evaluator runs through the exported bundle input mode, validates the source-module manifest, and writes metadata-only bundle result records.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider --basetemp=/tmp/microcosm_doctrine_fact_claim_audit_pytest tests/test_doctrine_fact_claim_audit.py -q`. Expected proof shape: the seven tests cover the positive fixture, dead code locus, missing code locus, dead DAG ref, unbound numeric claim, semantic negative-case derivation, and exported-bundle route.\n- Corpus parity consumer: `PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus`. Expected proof shape: the structured source record remains reproducible from the bundle and Markdown projection without hand-editing generated state.\n- structured source record readback consumer: `jq '{source_authority:.paper_module_payload.source_authority, mermaid:.paper_module_payload.generated_projections.mermaid.status, atlas:.paper_module_payload.generated_projections.atlas_card.status, edge_count:(.relationships.edges|length), unresolved:(.relationships.unpopulated_selective_relations|length)}' paper_modules/doctrine_fact_claim_audit.json`. Expected proof shape: `json_capsule`, `available_from_capsule_edges`, `linked_from_capsule_edges`, resolved bundle edges, and zero unpopulated selective relations.\n\n###### Reader Evidence Routing\n- Start with `paper_modules/doctrine_fact_claim_audit.json` as the primary reference, then open this Markdown page as a reader guide to that record.\n- Open `standards/std_microcosm_doctrine_fact_claim_audit.json` for the standard, required witnesses, negative floor, denied authority, and result record contract.\n- Open `core/fixture_manifests/doctrine_fact_claim_audit.fixture_manifest.json` for fixture inputs, copied-body counts, durable result record refs, and source-open body omission rules.\n- Open `examples/doctrine_fact_claim_audit/exported_doctrine_fact_claim_audit_bundle/source_module_manifest.json` before inspecting copied source modules; result records carry refs and digests, not copied source body text.\n- Run the fixture or bundle route from the `microcosm-substrate` directory and inspect the written JSON files. The component CLI exposes `--card`, but it does not expose a `--json` stdout mode.\n- Use `scripts/build_doctrine_projection.py --check-paper-module-corpus` to verify this paper-module projection stays inside the shared corpus contract.\n\n###### Claim-Rot Detection\n\nThis component treats documentation claims like cached values that need an invalidation strategy. The failure mode is not only a wrong number; it is a volatile number embedded in current-state prose with no attached route for re-deriving it.\n\nThe detector flags volatile numerics: a number near a countable noun inside a current-state section. Such a claim is admissible only when it is bound to a fact assertion that records how to recompute or revalidate the value. The same audit resolves every cited code locus on disk and checks that the quoted anchor is actually present, so stale file references and plausible-but-dead anchors are negative evidence rather than inert prose.\n\nThe public fixture does not claim natural-language comprehension. It proves the more useful contract: current-state numerics, fact assertions, DAG refs, code loci, and anchor text can be audited as result record-backed claims instead of untracked documentation drift.\n\nScope limit: Doctrine fact claim audit checks only public fixture fact counts, code-loci existence, anchor presence, DAG references, and synthetic volatile numeric claim binding cases. It is not a comprehension engine, does not establish a minimum read graph, does not export private doctrine, and excludes launch.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, validate with external result record outputs so the reader check does not churn tracked result records:\n\nA diagram view is generated for this module, and an atlas card links to it. Passing result records validate fact-count, code-locus, DAG-ref, numeric-claim, digest, and negative-case boundaries only. If copied source bodies drift, refresh the exact copy bundle through the owning lane before treating bundle red as a reader-page defect.\n\nNegative cases covered by the fixture manifest: dead_code_locus, dead_dag_ref, missing_code_locus, unbound_numeric_claim, wrong_fact_count.\n\nSource provenance is anchored by `examples/doctrine_fact_claim_audit/exported_doctrine_fact_claim_audit_bundle/source_module_manifest.json` and result records carry refs, digests, counts, verdicts, and scope boundaries only.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that doctrine fact assertions, code-locus refs, DAG refs, numeric claim bindings, copied source manifests, digest checks, anchor checks, secret-exclusion scans, metadata-only result records, and negative stale-claim cases are checked by the listed runtime witnesses.\n\nThis module may not claim doctrine comprehension, private doctrine export, minimum-read-graph proof, live launch-scope decision, hosted-public posture, source-file changes, candidate-axiom promotion, projection correctness beyond the listed witnesses, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThis module is the architecture-and-navigation contract specimen for turning current-state doctrine claims into auditable fact rows. The admitted mechanism, `mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit`, does not ask a model whether prose is true. It recomputes a bounded relation: declared fact count, code-locus anchors, route-DAG endpoints, volatile numeric claim bindings, source-module manifest anchors, and semantic negative cases must all agree with the copied public fixture basis before a result record can pass.\n\nThat relation is why the bundle binds the module to `concept.architecture_and_navigation_route_contract_bundle`. Architecture and navigation claims are only readable as doctrine when they can be traced through source rows, code loci, validator commands, and metadata-only result records. The bundle therefore treats the generated Mermaid and Atlas card as route projections of 15 resolved edges, not as independent proof that doctrine coverage is complete.\n\nThe principle edges are source-backed claim discipline, not decorative tags. `P-1` is exercised when the evaluator recomputes fixture truth rather than echoing declared labels. `P-2` is exercised by lowering the positive claim to the checker's strength: fact assertion, code-locus, DAG, numeric-claim, and manifest truth only. `P-7` is exercised by recording known unknowns without claiming the unmapped doctrine space is exhausted. `P-15` is exercised by keeping this Markdown, the structured source record, Mermaid, and Atlas below the bundle, source module, and validator result records.\n\nThe axiom bindings are likewise operational. `AX-1` requires a derivation before the page repeats a fact count or source claim. `AX-6` keeps the declared fixture domain open-world outside its explicit rows. `AX-7` makes failed preconditions typed blocking findings instead of meaningless green output. `AX-8` keeps public source refs, manifest digests, secret-exclusion status, and `body_in_receipt: false` attached as data moves from copied source bodies into result records and reader copy.\n\nThe proof consumer for this lattice relation is `tests/test_doctrine_fact_claim_audit.py`: its positive case, four direct mutation cases, semantic-negative-label override, and exported-bundle test prove that the mechanism is an executable claim-audit boundary. The fixture and bundle CLIs give the same boundary to a reader outside pytest; the corpus check proves only that the Markdown and generated structured source record still agree with the bundle, not that any new doctrine truth has been discovered.\n\nSelf Ignorance Coverage Ledger Compares expected against built entities to report known coverage gaps. 3/5\n\nDoes Compares declared Kind Atlas expectations against materialized entities and reports the known coverage debt that falls out of that public fixture comparison.\n\nScope limit known Kind Atlas coverage debt projection only; it does not claim literal unknown-unknown omniscience or absence proof\n\nRun\n\n```text\nmicrocosm self-ignorance-coverage-ledger run --input fixtures/first_wave/self_ignorance_coverage_ledger/input --out receipts/first_wave/self_ignorance_coverage_ledger\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\narchitecture navigation doctrine\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/self_ignorance_coverage_ledger.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Self-Ignorance Coverage Ledger\n\nExplains component [Self Ignorance Coverage Ledger](docs/components.html#component-self_ignorance_coverage_ledger) mechanism [validates public self ignorance coverage ledger](docs/rules-and-ideas.html#lattice-mechanism-mechanism-self-ignorance-coverage-ledger-validates-public-self-ignorance-coverage-ledger) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Track known unknowns without claiming the unknown is mapped](docs/doctrine.html#dcard-p-7)\n- [Bind volatile facts to refresh routes](docs/doctrine.html#dcard-p-11)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Open-world epistemics](docs/doctrine.html#dcard-ax-6)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n\n###### Purpose\n\nA navigation system that lists what it knows is easy to build. A system that can state, precisely, what it has not yet covered is harder, and it is the more honest signal to a cold reader. This component answers one question: for a declared set of Kind Atlas families, how many rows does the option surface expose that the generated System Atlas has not yet materialised?\n\nThe answer is a small debt vector, computed rather than asserted. For each selected kind the component recomputes the live Kind Atlas row count through `system.lib.kind_atlas.build_kind_atlas`, counts the entities the `build_system_atlas.py` graph has actually materialised for that kind, and reports the difference as known coverage debt. Concepts, mechanisms and standards are checked back to real source source files so the materialised set cannot be inflated with names that have no file behind them.\n\nThe unusual part is what the validator refuses. It will not accept a fixture that claims its unknown-unknowns are exhaustive: declaring `claims_unknown_unknowns_exhaustive` raises a finding rather than passing. The ledger reports a bounded count of gaps it can see and explicitly declines to claim there are no others. Known debt is treated as typed residual pressure, not as a completeness proof, and absence of a row is never read as proof that nothing is missing.\n\n###### Abstract\n\n`self_ignorance_coverage_ledger` is a public Microcosm Crown Jewel component that measures a narrow, source-grounded form of self-ignorance: known row-level coverage debt between live Kind Atlas option-surface counts and generated System Atlas materialization evidence. It recomputes the selected Kind Atlas families, derives materialized entity IDs from a `build_system_atlas.py` graph snapshot, source-validates graph-derived entity IDs, replays semantic negative cases, and emits metadata-only result records with scope boundaries.\n\nThe current exported bundle is a realness-rung R4 check when the source repo is available: live Kind Atlas counts are bound, the System Atlas graph slice is builder-bound, the live System Atlas graph is cross-checked, expected entity IDs are source-backed, and copied source source bodies are digest-bound through a manifest. The claim is only `known_kind_atlas_coverage_debt_projection_only`: it is not absence proof, unknown-unknown omniscience, total repository search proof, source-file changes, launch-scope decision, publishing-scope decision, private-system equivalence, provider affiliation, or whole-system correctness.\n\n###### Problem\n\nNavigation systems can overstate themselves in two opposite ways. A vague \"coverage is incomplete\" tells a cold reader nothing operational. A confident \"nothing else is missing\" is worse: it converts absence of evidence into evidence of absence. This component exists to occupy the narrow technical middle: for a declared finite domain of Kind Atlas families, compute the gap between what the option surface exposes and what the System Atlas graph has materialized.\n\nThe result is a self-ignorance ledger, not a universal discovery engine. Its positive output is a bounded debt vector. Its negative output is equally important: the validator must refuse fixtures that claim exhaustive unknown-unknown coverage, hand-author materialization counts, substitute entity IDs, use stale/baked expected IDs as authority, tamper with the System Atlas builder result record, or repair a copied-source manifest into a self-reference.\n\n###### Mechanism\n\nThe runtime locus is `src/microcosm_core/organs/self_ignorance_coverage_ledger.py`. The exported-bundle entrypoint is `run_self_ignorance_bundle`; the core evaluator is `evaluate`; the semantic negative-case replayer is `evaluate_negative_case`; the local scope limit is `AUTHORITY_CEILING`.\n\nThe evaluator consumes four public bundle files:\n\nInput Required semantics Main checks `kind_atlas_rows.json` Declared Kind Atlas families, expected entity IDs, known-debt floors, and absence policy. Recompute live row counts through `system.lib.kind_atlas.build_kind_atlas`; reject forbidden unknown-unknown exhaustiveness. `system_atlas_graph.json` Generated graph slice carrying materialized System Atlas entity IDs. Require non-empty entities and `generated_by == tools/meta/factory/build_system_atlas.py`; derive materialized IDs from graph rows. `materialized_entities.json` Declared materialization rows and snapshot metadata. Check declared counts against graph-derived counts; use graph-derived counts as authority. `projection_protocol.json` Result record for the System Atlas check and coverage scope. Require the exact coverage scope and a valid `build_system_atlas.py --check` result record or blocked-refresh result record.\n\nAlgorithmically, the component performs this loop:\n1. Load bundle inputs and the source-module manifest through the Crown Jewel common runner.\n2. Recompute selected Kind Atlas rows from the source repo when `system/lib/kind_atlas.py` is available.\n3. Load `system_atlas_graph.json`, require the System Atlas builder marker, and derive materialized IDs by kind.\n4. Cross-check the bundled graph slice against `state/system_atlas/system_atlas.graph.json` when the source repo is available.\n5. For concepts, mechanisms, and standards, verify that graph-derived expected IDs resolve to real source source files.\n6. Compute `known_coverage_debt_count = live_kind_atlas_row_count - graph_derived_materialized_count` by kind.\n7. Replay semantic negative cases from clean input copies instead of trusting declared error labels.\n8. Write result records with refs, counts, hashes, findings, realness evidence, and scope boundaries; copied body text stays out of result records.\n\nFor the current exported bundle, the public count vector is:\n\nKind Live Kind Atlas rows Graph-derived materialized entities Known debt `concepts` 41 30 11 `mechanisms` 36 28 8 `paper_modules` 225 220 5 `standards` 201 29 172 **Total** **503** **307** **196**\n\nThose numbers come from `examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle/kind_atlas_rows.json`, `materialized_entities.json`, and `system_atlas_graph.json`, and are proof-consuming snapshot facts. They are not stable doctrine constants; rerun the validator after Kind Atlas, System Atlas, or source manifests move.\n\n###### Projection Protocol Result record\n\n`projection_protocol.json` is the result record that prevents a static graph slice from masquerading as live authority. The accepted bundle must carry:\n\nField Accepted value Meaning `coverage_scope` `live_kind_atlas_vs_generated_system_atlas_materialization_snapshot` The domain is live Kind Atlas rows against generated System Atlas materialization. `system_atlas_check_command` `./repo-python tools/meta/factory/build_system_atlas.py --check` The refresh/check route is named, not implied. `system_atlas_check_status` `pass` or `blocked_source_inputs_changed_since_artifact_generation` A blocked refresh is admissible only when declared as such; it does not upgrade the snapshot. `system_atlas_refresh_blocked_by_active_source_claims` Boolean `body_in_receipt` `false` Result record fields carry metadata and verdicts, not copied source bodies.\n\nThe focused tests `test_self_ignorance_coverage_ledger_rejects_projection_scope_tamper` and `test_self_ignorance_coverage_ledger_rejects_system_atlas_receipt_tamper` are the proof consumers for this protocol.\n\n###### Mermaid Flow\n\nSource refs\n\nscope + build_system_atlas.py result record `projection_protocol.json` Source source files `concept/mechanism/standard ids` Manifest `source_module_manifest.json` `copied_non_secret_macro_body` Diagram source\n\n```text\nflowchart LR KA[\"Live Kind Atlas rows 503 selected rows\"] Graph[\"System Atlas graph slice 307 materialized entities\"] Proto[\"projection_protocol.json scope + build_system_atlas.py result record\"] Source[\"Source source files concept/mechanism/standard ids\"] Manifest[\"source_module_manifest.json copied_non_secret_macro_body\"] Eval[\"evaluate()\"] Neg[\"semantic negative-case replay\"] Debt[\"known debt vector 196 units\"] Result record[\"metadata-only result records counts, refs, hashes, scope boundaries\"] Ceiling[\"scope limit known debt projection only\"] KA --> Eval Graph --> Eval Proto --> Eval Source --> Eval Manifest --> Eval Eval --> Debt Eval --> Neg Debt --> Result record Neg --> Result record Result record --> Ceiling\n```\n\nThis diagram is the human proof path and must stay subordinate to the bundle and generated projection.\n\n###### Real-Good / Real-Bad / Perturbation Evidence\n\nThe positive case is `test_self_ignorance_coverage_ledger_projects_real_bundle_known_debt` plus the bundle route:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.self_ignorance_coverage_ledger run-self-ignorance-bundle --input examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle --out /tmp/microcosm-self-ignorance-coverage-ledger/bundle --card\n```\n\nThe accepted result must report status `pass`, known debt `196`, observed negative cases `forbidden_absence_inference` and `coverage_debt_mismatch`, `realness_rung: R4`, `live_kind_atlas_recompute_used: true`, `live_system_atlas_graph_crosscheck_used: true`, and source-module digest success.\n\nThe real-bad cases are not marketing examples; they are the contract. Treat a guard as validated only when the focused pytest route passes in the current checkout:\n\nEvidence class Test / mutation Required refusal Missing real graph `test_self_ignorance_static_fixture_blocks_without_real_graph` `CROWN_JEWEL_INPUT_MISSING` and `SELF_IGNORANCE_REAL_ATLAS_GRAPH_EMPTY`. Absence overclaim `test_self_ignorance_coverage_ledger_rejects_absence_omniscience` `SELF_IGNORANCE_FORBIDDEN_ABSENCE_INFERENCE`. Expected ID mismatch `test_self_ignorance_coverage_ledger_rejects_coverage_debt_mismatch` `SELF_IGNORANCE_EXPECTED_ENTITY_IDS_MISMATCH`. Baked IDs without graph authority `test_self_ignorance_coverage_ledger_rejects_baked_expected_ids_without_source` `SELF_IGNORANCE_EXPECTED_ENTITY_IDS_NOT_SOURCE_BACKED`; realness rank falls. Declared entity substitution `test_self_ignorance_coverage_ledger_rejects_declared_entity_id_substitution` Missing-from-graph and missing-from-expected mismatch rows. Count tamper `test_self_ignorance_coverage_ledger_rejects_materialized_count_tamper` `SELF_IGNORANCE_MATERIALIZATION_COUNT_NOT_GRAPH_DERIVED`. Graph materialization tamper `test_self_ignorance_coverage_ledger_rejects_graph_materialization_tamper` Expected-ID mismatch and changed debt vector. Graph builder tamper `test_self_ignorance_coverage_ledger_rejects_graph_builder_tamper` `SELF_IGNORANCE_ATLAS_GRAPH_BUILDER_MISMATCH`. Protocol scope/check tamper projection protocol tests Scope or check result record blocked; R4 cannot stand. Declared negative labels lie `test_self_ignorance_negative_cases_are_semantic_not_declared_labels` Semantic evaluator still finds the expected error codes. Copied source self-reference `test_self_ignorance_bundle_rejects_stale_copied_target_source_ref` `CROWN_JEWEL_SOURCE_SELF_REFERENCE_UNVERIFIED`. Copied source digest drift `test_self_ignorance_bundle_rejects_source_module_digest_mismatch` `CROWN_JEWEL_SOURCE_DIGEST_MISMATCH`.\n\nPerturbation evidence is `test_self_ignorance_coverage_debt_moves_with_materialized_entity_graph`: adding a real, source-backed standard entity moves the known-debt count from 196 to 195 and keeps the result passing. That proves the ledger is coupled to the graph-derived materialization set, not to a fixed prose number.\n\nThe unsourced-materialization guard target is `test_self_ignorance_coverage_ledger_rejects_coherent_fake_standard_entity`. Its intended refusal is `SELF_IGNORANCE_EXPECTED_ENTITY_ID_SOURCE_MISSING`, but the paper must not count that guard as validated unless the focused pytest route currently blocks the fake standard entity. If it regresses, lower the source-validation claim to the passing guards above and route the source/test issue through the work log before completion.\n\n###### Source-Backed Concept / Mechanism / Law Links\n\nLink Source-backed support Claim supported Component `self_ignorance_coverage_ledger` `organs/self_ignorance_coverage_ledger.json` and `core/organ_atlas.json::organs[51:self_ignorance_coverage_ledger]` This is an accepted public component with the named runtime locus and paper-module drilldown. Mechanism `mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger` `core/mechanism_sources.json` and `mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json` The mechanism validates known Kind Atlas coverage-debt fixtures while refusing overclaims. Concept `concept.architecture_and_navigation_route_contract_bundle` `concepts/concept.architecture_and_navigation_route_contract_bundle.json` The component is part of the executable architecture/navigation route-contract family. Principle `P-2` `principles/P-2.json` Claim strength must be no stronger than the named checker and result record. Principle `P-7` `principles/P-7.json` Known gaps remain typed residual pressure, not completeness claims. Principle `P-11` `principles/P-11.json` Freshness-sensitive claims require dated result records and refresh routes. Principle `P-15` `principles/P-15.json` Generated projections stay below source registries and result records. Axiom `AX-6` `axioms/AX-6.json` Closed-world coverage is valid only inside declared finite domains; absence is not negation. Axiom `AX-7` `axioms/AX-7.json` Partial computation must totalize as pass or typed refusal with evidence. Axiom `AX-8` `axioms/AX-8.json` Provenance and labels must survive source-to-projection and body-import boundaries. Axiom `AX-10` `axioms/AX-10.json` Live-state counts require freshness, basis, and rederive contracts.\n\n`P-19` appears in the component atlas row as an adjacent governing principle for residual classification, but it is not part of the paper-module bundle's `principle_refs`. Treat it as component-level context unless the bundle is later updated through the JSON authority lane.\n\n###### Evidence Contract\n\nThe fixture contract lives at `core/fixture_manifests/self_ignorance_coverage_ledger.fixture_manifest.json`. The active standard lives at `standards/std_microcosm_self_ignorance_coverage_ledger.json`. Together they admit public synthetic fixtures, copied source source bodies, hashes, anchors, validator refs, and generated result records. They forbid private repo bodies outside copied public fixtures, model-output data bodies, account secret or account-bound material, operator private notes, raw thread bodies, and result record body text for copied material.\n\nThe exported bundle manifest at `examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle/source_module_manifest.json` currently carries one source module: `tools/meta/factory/build_system_atlas.py`, copied into the bundle under `source_modules/tools/meta/factory/build_system_atlas.py`. The manifest records the source/target relation, digests, line count, required anchors `System Atlas` and `kind`, replacements, and the boundary that transform result records record hashes and replacement classes rather than source bodies.\n\nThe standard's result record contract requires a real runtime result record, a source-module manifest for the exported bundle, a secret-exclusion scan, at least the `forbidden_absence_inference` negative case, and `body_in_receipt: false`. Synthetic result records are not accepted as stand-ins for this component's authority.\n\n###### Reader Evidence Routing\n\nRead this module in this order:\n1. `paper_modules/self_ignorance_coverage_ledger.json` for the generated paper-module projection and relationship edges.\n2. `core/paper_module_capsules.json::paper_modules[49:paper_module.self_ignorance_coverage_ledger]` for source authority.\n3. `standards/std_microcosm_self_ignorance_coverage_ledger.json` for the public/private boundary, validator contract, result record expectations, and scope limit.\n4. `src/microcosm_core/organs/self_ignorance_coverage_ledger.py` for `evaluate`, `evaluate_negative_case`, `run`, and `run_self_ignorance_bundle`.\n5. `examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle/` for the current public evidence bundle.\n6. `tests/test_self_ignorance_coverage_ledger.py` for proof consumers, bad cases, and perturbation cases.\n\nTreat negative cases as part of the positive claim. The paper should cite only guards that the focused validation route blocks in the current checkout. The validated guard set must include forbidden absence inference, coverage mismatch, baked expected IDs without source, declared entity substitution, materialized count tamper, graph materialization tamper, graph builder tamper, projection protocol tamper, stale source self-reference, and digest mismatch. Fake-but-coherent standard entities remain a required unsourced-materialization guard target, but not an observed passing guard unless the focused test route blocks that perturbation.\n\n###### Prior Art Grounding\n\nThe nearest ordinary analogue is software coverage measurement: coverage tools report what was exercised or missed over a declared surface, not all possible missing behaviors. `coverage.py` is useful as a reference pattern for bounded observed coverage over a source set.\n\nThe health-signal side is adjacent to automated repository checks such as OpenSSF Scorecard: bounded checks can produce useful risk signals without becoming complete security or quality proof. Microcosm applies that pattern to navigation coverage debt and keeps the scope boundary in the same result record frame as the count.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, run:\n\n```text\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_self_ignorance_coverage_ledger.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check\n```\n\nUse a throwaway result record directory for manual bundle checks:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.self_ignorance_coverage_ledger run-self-ignorance-bundle --input examples/self_ignorance_coverage_ledger/exported_self_ignorance_coverage_ledger_bundle --out /tmp/microcosm-self-ignorance-coverage-ledger/bundle --card\n```\n\nPassing validation proves that the declared public bundle, source-module manifest, negative cases, and paper-module corpus remain coherent. It does not establish freshness beyond the checked snapshot or authorize generated projection edits by hand.\n\n###### Scope boundary\n\n###### Limitations\n\nThis component is intentionally closed-world over selected artifact kinds. It does not discover arbitrary missing files, prove that all System Atlas materialization gaps are known, or search every repo surface. It counts row-level debt over selected Kind Atlas families and only within the graph/materialization/protocol evidence supplied to the bundle.\n\nFreshness is conditional. `projection_protocol.json` can record that a System Atlas refresh was blocked by active source claims. In that state, the component reports a bounded snapshot plus a refresh boundary; it does not silently upgrade stale generated materialization into live truth.\n\nSource-open evidence is public-safe, not public-total. The bundle may carry copied source bodies with transformed non-public paths, hashes, line counts, and anchors. That does not export source notes, model-output data bodies, account or browser state, account secrets, browser UI state, or private source-root equivalence.\n\nThe current generated paper-module JSON has resolved bundle edges and `relationships.unpopulated_selective_relations: []`. That is a discoverability and lattice-coherence statement. It is not implementation-correctness proof, launch-scope decision, provider authority, or proof that every related concept/principle/axiom has full empirical support.\n\n###### Scope limit\n\nThe scope limit is narrow. Self-Ignorance Coverage Ledger can claim that public fixture evidence, graph-derived materialization rows, live Kind Atlas recomputation, source-backed expected entity IDs, copied source evidence, semantic negative cases, and result records make declared Kind Atlas coverage debt visible, recomputable, and checkable.\n\nIt cannot claim literal unknown-unknown omniscience, absence proof, total repository search proof, source-file changes, live Atlas mutation, private-source export, launch-scope decision, publishing-scope decision, provider affiliation, product readiness, or whole-system correctness. The active v2 standard status is a source JSON contract state only and does not expand the scope limit.\n\n#### Source refs\n\nBuilt from public source refs, with each input path recorded for provenance.\n\nEach component has a stable public source path with commands, source links, and its supported scope.",
    "byte_count": 163739,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:area-formal-math",
   "relative_href": "docs/area-formal-math.html",
   "path": "docs/area-formal-math.html",
   "title": "Formal math & proof",
   "nav_group": "Areas",
   "nav_label": "Formal math & proof",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization"
    ],
    "family_id": "formal_math_and_proof"
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Area \u00b7 18 components\n\n### Formal math & proof\n\nInspectable pieces of a proof pipeline: premise retrieval over a copied Lean Std index, tactic routing, verifier-trace repair, and claim-separation result records. Three components run the real Lean/Lake prover locally on bounded examples; the rest publish the pipeline's checking layers as contracts you can open.\n\n#### Components\n\nProof Diagnostic Evidence Spine Sorts proof-pipeline checks into accepted or rejected without inflating a pass. 3/5\n\nDoes An evidence checkpoint that sits in front of formal-proof work. It reads the diagnostic records left by earlier proof-pipeline steps and writes a \"diagnostic board\" listing which checks were accepted, which were rejected, and why. The board shows exactly what evidence was kept, and refuses to let raw model output, a stale record, or a merely-passing check get inflated into a claim that the math is actually correct. It only arranges and judges existing records; it never runs a proof checker itself.\n\nScope limit It records proof/evidence diagnostics over existing result record references only. It does not run Lean, use external model services, expose proof bodies, turn a passing check into formal-proof or theorem authority, prove runtime or whole-system correctness, authorize later components, certify public launch, authorize public sharing or recipient work, or establish secret export.\n\nRun\n\n```text\nmicrocosm proof-diagnostic-evidence-spine run --input fixtures/first_wave/proof_diagnostic_evidence_spine/input --out receipts/first_wave/proof_diagnostic_evidence_spine --card\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Formal Math Verifier Trace Repair Loop](docs/components.html#component-formal_math_verifier_trace_repair_loop), [Formal Evidence Cell Anchor Resolver](docs/components.html#component-formal_evidence_cell_anchor_resolver), [Formal Math Lean Proof Witness](docs/components.html#component-formal_math_lean_proof_witness), [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel), [Ring2 Premise Retrieval Precision Recall Harness](docs/components.html#component-ring2_premise_retrieval_precision_recall_harness), [Target Shape Tactic Routing Gate](docs/components.html#component-target_shape_tactic_routing_gate)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.proof_diagnostic_evidence_spine) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Proof Diagnostic Evidence Spine\n\nExplains component [Proof Diagnostic Evidence Spine](docs/components.html#component-proof_diagnostic_evidence_spine) mechanism [validates ring2 diagnostic evidence membrane](docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-diagnostic-evidence-spine-validates-ring2-diagnostic-evidence-membrane) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`proof_diagnostic_evidence_spine` sits one step before formal proof authority. It holds diagnostic evidence from the formal-math evaluation and premise-retrieval pipeline as result record-backed cells, and refuses to let any of them be read as a proof.\n\n###### Purpose\n\nThe component answers a single question: does a diagnostic check that claims to be backed by real Ring2 runtime evidence actually recompute against that evidence, or is it asserting more than its refs support? Without this membrane, a check row could name a failure-taxonomy report or a graph-update candidate set, declare itself passing, and be trusted on its own word. The spine refuses that.\n\nWhat is unusual is that the validator does not trust the fixture's own pass label. It ignores the legacy `expected_result` field as a non-authoritative fixture label and rederives the verdict itself. For each check it resolves the named `source_ref` to a real file, re-hashes that file with sha256, and confirms the hash matches the expected digest. It then opens the named result record anchor and checks that the result record payload actually contains that source ref and digest. A check is accepted only when the source, the digest, and the result record all agree. The pass is a recomputation, not a claim copied from the fixture.\n\nThe second idea is that negative evidence is kept rather than hidden. A stale source fingerprint is recorded as `source_fingerprint_status: stale` and retained as diagnostic evidence; a provider advisory row is preserved as metadata while being rejected as authority; a forbidden proof-body field turns a row into a regression fixture rather than silently dropping it. The board shows what did not hold, which is the point of an evidence membrane.\n\n###### Teleology\n\n`proof_diagnostic_evidence_spine` is the body-safe evidence membrane before formal proof work. It records proof/evidence diagnostics while rejecting proof bodies, provider output bodies, source-authority upgrades, stale coupling, and runtime-correctness overclaims.\n\n###### Public Contract\n\nThe validator consumes failure-taxonomy records, graph-update traces, verifier-trace repair artifacts, and formal evidence-cell anchor result record refs from the formal-math evaluation and premise-retrieval pipeline, then emits diagnostic result records over those refs. Provider-advisory rows are bounded evidence authority. Passing diagnostic checks do not become formal proof authority or formal-result correctness.\n\n###### How a check is accepted\n\nA check row carries three lists: `source_refs`, `receipt_anchor_refs`, and `source_digest_refs`. The validator does not take the row's word for whether it passes. It recomputes the verdict from the system.\n\nFor each `source_ref` it resolves a real file, reads it, and hashes the bytes with sha256. That hash must equal the expected digest the component holds for the ref. It then opens each result record anchor and checks that the result record payload actually contains the source ref and its digest, so a check is only \"result record-backed\" if the result record it cites genuinely references it. On top of that the component applies a semantic floor: a check whose id mentions a failure taxonomy must point at a source file that carries a failure-taxonomy report with representative failures and at a result record that carries a failure-mode ledger; a graph-update check needs graph-update candidates with ids and a matching result record anchor. The check is accepted only when every source resolves, every digest matches, every cited result record backs the ref, the semantic floor is satisfied, and no expected-negative error code is declared.\n\nThe concrete failure mode this guards against is a plausible-looking row that names real artifact paths but does not actually recompute: a digest that has drifted, a result record that does not mention the ref it claims, or a check labelled as failure-taxonomy evidence while pointing at an unrelated file. Each of those becomes a rejection finding rather than a silent pass. The recompute is also why a passing check stays bounded. It establishes that the named evidence is present and coupled, not that the underlying runtime is correct, which is why a row that adds `claims_runtime_correctness` is rejected as an overclaim.\n\n###### Shape\n\nSource refs\n\nevidence accounting only `diagnostic_board.json` Diagram source\n\n```text\nflowchart TD Check[\"Diagnostic check row source_refs, receipt_anchor_refs, source_digest_refs\"] Resolve[\"Resolve source ref to real public file\"] Hash[\"Re-hash file (sha256) compare to expected digest\"] Result record[\"Open result record anchor does payload contain this ref and digest?\"] Floor[\"Semantic floor failure-taxonomy / graph-update source and result record match\"] Accept[\"Accepted check verdict = recomputed, body_in_receipt false\"] Reject[\"Rejected / retained as diagnostic evidence\"] Stale[\"Stale source fingerprint\"] Provider[\"Provider advisory payload\"] Proofbody[\"Forbidden proof-body field\"] Check --> Resolve --> Hash --> Result record --> Floor Floor -->|all agree| Accept Floor -->|any mismatch| Reject Stale -. retained as evidence .-> Reject Provider -. metadata kept, authority denied .-> Reject Proofbody -. scrubbed, kept as regression .-> Reject Accept --> Board[\"diagnostic_board.json evidence accounting only\"] Reject --> Board Board -. denies .-> Ceiling[\"no Lean/Lake run, no formal-result correctness, no provider authority, no launch\"]\n```\n\nEvidence/accounting refs:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[14]` sets `source_authority: json_capsule`, names subjects `proof_diagnostic_evidence_spine` and `mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane`, resolves `code_loci[0].path` to `src/microcosm_core/organs/proof_diagnostic_evidence_spine.py`, and keeps `generated_projections.markdown.generated: false`, `generated_projections.mermaid.status: available_from_capsule_edges`, and `generated_projections.atlas_card.status: linked_from_capsule_edges`.\n- Generated instance boundary: `paper_modules/proof_diagnostic_evidence_spine.json::paper_module_payload.projection_contract` records `authority_flip_status: not_flipped`, while `paper_modules/proof_diagnostic_evidence_spine.json::relationships.edges` carries source-justified links to the component, mechanism, concept, principles, axioms, dependencies, and code locus.\n- Component/source locus: `organs/proof_diagnostic_evidence_spine.json::organ_payload.source_atlas_row` names the first command, `claim_ceiling_restated`, `mechanism_refs[0]`, `wires_to`, and the same code-locus symbols implemented in `src/microcosm_core/organs/proof_diagnostic_evidence_spine.py` (`PROOF_AUTHORITY_CEILING`, `EXPECTED_NEGATIVE_CASES`, `validate_copied_macro_body_artifacts`, `validate_evidence_receipts`, `validate_provider_payload_policy`, `validate_authority_ceiling`, `run`, and `run_evidence_bundle`).\n- Standard contract: `standards/std_microcosm_proof_diagnostic_evidence_spine.json::authority_boundary_detail` limits the component to copied Ring2 diagnostic runtime artifacts, summary metrics, graph-variant metadata, and anchor result record refs. Its `body_import_verification.source_open_body_import_floor` records 13 copied artifact bodies, 10 exact copies, 3 public-light edits, and `body_text_exported_in_receipts: false`; its `body_import_verification.public_organ_source_body_floor` records one exact copied public component source body.\n- Bundle floor: `examples/proof_diagnostic_evidence_spine/exported_evidence_bundle/bundle_manifest.json` has `schema_version: proof_diagnostic_evidence_spine_exported_evidence_bundle_v1`, `bundle_id: ring2_proof_diagnostic_evidence_runtime_example`, `copied_macro_body_artifacts` count 13, and an scope limit of Ring2 diagnostic result record refs only, not formal proof authority.\n- Source-body floor: `examples/proof_diagnostic_evidence_spine/exported_evidence_bundle/source_body_floor/source_module_manifest.json::modules[0]` records source ref `src/microcosm_core/organs/proof_diagnostic_evidence_spine.py`, `source_to_target_relation: exact_copy`, `sha256_match: true`, `body_in_receipt: false`, and omitted material including model-output data bodies, account or browser state, browser UI live-access state, recipient-send state, private proof bodies, and oracle-needed premise ids.\n- Result record behavior: `receipts/first_wave/proof_diagnostic_evidence_spine/proof_evidence_validation_receipt.json` records `accepted_count: 2`, `rejected_count: 1`, `missing_negative_cases: []`, `body_in_receipt: false`, `source_fingerprint_status: stale`, and observed negative cases for source-authority upgrade, missing result record fields, runtime-correctness overclaim, provider/proof body rejection, and stale coupling. The sibling `provider_payload_policy_result.json::provider_payload_policy` preserves advisory metadata while rejecting the forbidden proof-body payload, and `diagnostic_board.json::authority_ceiling` rejects model-output data authority, source-authority upgrade, runtime-correctness claims, and formal prover execution.\n- Focused regression surface: `tests/test_proof_diagnostic_evidence_spine.py` asserts the observed negative cases match `EXPECTED_NEGATIVE_CASES` and checks the exported evidence bundle path. These tests support reader wiring and evidence accounting only; they do not establish formal-result correctness, provider authority, runtime correctness, publishing-scope decision, or launch-scope decision.\n\n###### Reader Evidence Routing\n\nRoute currentness questions through ## JSON Bundle Binding and the validation commands in ## Validation Result record Path. The tests and corpus check confirm reader wiring and projection health; they do not establish proof authority.\n\nRoute source/body-floor questions through `## Source-Open Body Floor` and the fixture/example paths named under `## Structured Lattice Bindings`. The diagnostic artifact copies from the formal-math evaluation pipeline, public component-source copy, manifests, and digest coupling are evidence-accounting inputs; they are bounded evidence bodies, model-output data bodies, runtime correctness claims, or source-authority upgrades.\n\nRoute claim-safety and public-copy questions through ## Scope limit, `## Evidence-As-Accounting Shape`, and ## Scope boundary, then pair this module with `batch12_release_claim_language_gate` when public wording is being checked. If the question is \"did the validator still enforce the membrane?\", use the focused pytest and corpus check in ## Validation Result record Path before citing the reader page.\n\n###### Evidence-As-Accounting Shape\n\nThis component is the proof-adjacent evidence membrane behind Microcosm's scope limits. It accepts diagnostic runtime artifacts, result record refs, source digests, and negative-case results as evidence cells, while refusing to treat any of them as theorem authority.\n\nThe accounting rule is two-sided. A copied artifact from the formal-math evaluation and premise-retrieval pipeline can strengthen only the diagnostic claim named by its result record, digest, and validator; it cannot upgrade itself into formal-result correctness, provider authority, launch-scope decision, or private-system equivalence. Stale source coupling is retained as diagnostic evidence instead of hidden, and provider-advisory rows remain metadata without payload bodies.\n\nUse this module with `batch12_release_claim_language_gate` when evaluating public copy: the evidence spine says what result record-backed cells exist, and the language gate decides whether a public sentence stays within that ceiling.\n\n###### Prior Art Grounding\n\nThe evidence spine is grounded in assurance-case practice: evidence should be connected to claims, assumptions, and limits before it is treated as support. NASA's Goal Structuring Notation example for spacecraft assurance is a useful public analogue because it frames assurance as model-structured evidence rather than document-level persuasion: [NTRS 20160005295](https://ntrs.nasa.gov/citations/20160005295).\n\nThe result record membrane also borrows from [W3C PROV](https://www.w3.org/TR/prov-overview/) and observability practice: diagnostic artifacts are evidence cells with provenance, not theorem authority. That is why the component accepts digest-coupled diagnostic refs and negative cases while rejecting proof bodies, model-output data bodies, and stale source-coupling overclaims.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_proof_diagnostic_evidence_spine.py -q --basetemp=/tmp/microcosm_proof_diagnostic_evidence_spine_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can claim reader wiring for the proof-diagnostic evidence membrane: the component and mechanism subject resolve, and the runtime source locus is named. It cannot claim Lean or Lake execution, formal proof authority, formal-result correctness, provider authority, runtime correctness of the imported systems, source-file changes, launch-scope decision, publishing-scope decision, hosted deployment, or whole-system correctness.\n\nDiagnostic result records, copied runtime artifacts from the formal-math evaluation pipeline, copied public component source, source digests, and focused tests can support only bounded evidence-accounting claims: which public refs, manifests, negative cases, and body-hygiene checks were validated. A diagram view and atlas entry are generated for this module; they do not convert diagnostics into formal-result correctness or provider/publishing-scope decision.\n\n###### Scope boundary\n\nThis module documents diagnostic result record anchors over real system from the formal-math evaluation and premise-retrieval pipeline, and keeps forbidden proof/provider body cases as regression-only guards. It does not run Lean, use external model services, expose proof bodies, prove runtime correctness, certify public launch operations, authorize public sharing or recipient work, establish secret export, or claim whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe public bundle carries two bounded body floors. The runtime-artifact floor copies thirteen diagnostic artifacts from the formal-math evaluation and premise-retrieval pipeline under `examples/proof_diagnostic_evidence_spine/exported_evidence_bundle/source_artifacts` and records their source/target digest coupling in `bundle_manifest.json`. Three rows are source-faithful public-light edits that redact operator absolute paths and retain both source and target digests.\n\nThe component-source floor copies the public source body for `src/microcosm_core/organs/proof_diagnostic_evidence_spine.py` under `source_body_floor/source_modules`. Generated `state/runs` JSON artifacts are evidence bodies, not source-body authority. Neither body floor places body text in result records or workingness cards, and neither imports proof bodies, model-output data bodies, account or browser state, browser UI live access, recipient-send state, account secrets, private proof bodies, or oracle-needed premise ids.\n\nFormal Math Readiness Gate Reads declared math setups and lists which proof tactics may be attempted versus blocked. 3/5\n\nDoes Before anyone tries to prove a math theorem with the Lean prover, this gate reads simple description files that declare what a math setup is supposed to have \u2014 which math library is claimed to be present, which proof tactics are reported as already probed, which lemmas may be looked up, and which limits apply to the text budgets handed to AI providers \u2014 and writes a plain checklist of what is allowed to be attempted versus blocked. It works only from those declared description files; it does not inspect the real toolchain or run anything. Its guards keep the claims honest and checkable: it refuses to let a library be marked available unless a probe result backs that up, blocks routing a proof tactic that was not probed, and refuses to let any real proof text sneak into the lemma-lookup tables or provider budgets.\n\nScope limit It only validates and projects declared readiness metadata; it does not run Lean/Lake, inspect the real toolchain, use external model services, prove any theorem correct, produce benchmark claims, or authorize Mathlib-dependent proof attempts.\n\nRun\n\n```text\nmicrocosm formal-math-readiness-gate run --input fixtures/first_wave/formal_math_readiness_gate/input --out receipts/first_wave/formal_math_readiness_gate\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Formal Math Lean Proof Witness](docs/components.html#component-formal_math_lean_proof_witness), [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol), [Proof / Control / Runtime Import Bundle](docs/components.html#component-batch4_proof_authority_runtime), [Provider Context Recipe Budget Policy](docs/components.html#component-provider_context_recipe_budget_policy), [Tactic Portfolio Availability Probe](docs/components.html#component-tactic_portfolio_availability_probe), [Target Shape Tactic Routing Gate](docs/components.html#component-target_shape_tactic_routing_gate)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_readiness_gate.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Formal Math Readiness Gate\n\nExplains component [Formal Math Readiness Gate](docs/components.html#component-formal_math_readiness_gate) mechanisms [validates public formal math readiness bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-formal-math-readiness-bundle) [validates public readiness boundary](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-readiness-gate-validates-public-readiness-boundary) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n###### Teleology\n\n`formal_math_readiness_gate` is the public runtime cell that turns the formal math slice from a deferred slogan into an executable boundary. It validates synthetic readiness metadata for corpus availability, tactic probes, premise indexes, target-shape routing, and provider context recipes before any future Lean witness can claim authority.\n\nThe page should let a cold reader answer one question without rereading the component: what evidence has Microcosm actually validated, and where does that evidence stop?\n\n###### Purpose\n\nFormal-math tooling fails quietly when a library, tactic, or corpus is assumed present rather than checked. A pipeline that routes a proof to `aesop` when `aesop` is not actually available, or that treats a premise index as proof evidence because it happens to carry a proof body, has already lost the boundary between \"ready to attempt\" and \"proven\". This component exists to make that boundary explicit before any downstream proof work begins. It answers one question: which declared formal-math inputs are well-formed and honest enough that a later proof witness could safely consume them, and where exactly does that warrant stop?\n\nThe mechanism is a deterministic reducer over five public JSON inputs: corpus readiness, tactic-portfolio availability, a premise index, target-shape routing, and provider context recipes. It does not run Lean or Lake. Instead it reads what those inputs declare and refuses the specific ways they can lie. A corpus that claims Mathlib is available without a passing probe is rejected. A tactic marked available without a probe result record is rejected. A premise row carrying a `proof_body` or `oracle_needed_premise_ids` field is rejected. A route that admits a tactic the portfolio probe already marked unavailable is rejected. The output is a readiness board, not theorem evidence.\n\nThe design choice worth noticing is that the gate proves its own discipline through negative cases. Alongside the positive inputs, the fixture carries five inputs that each commit a known overclaim, and the run passes only when every one of those overclaims is caught and no unexpected finding appears. The gate is therefore not merely asserting \"we check Mathlib availability\"; it is demonstrating, on each run, that a falsified Mathlib claim is actually refused. A second guard keeps the floor source-open without leaking: copied prover probe bodies are verified by digest through a manifest, while proof bodies, model-output data, and private state stay out of the result records entirely.\n\n###### Shape\n\nSource refs\n\nreject Mathlib-availability overclaim `validate_corpus_readiness` each available tactic needs a probe result record `validate_tactic_portfolio` reject route admitting an unavailable tactic `validate_target_shape_routing` reject over-budget or proof-body recipe `validate_provider_context_recipes` copied probe bodies, digest-checked `validate_source_module_imports` Diagram source\n\n```text\nflowchart TD Inputs[\"Five public JSON inputs corpus, tactics, premises, routes, provider recipes\"] Scan[\"Secret-exclusion scan zero blocking hits required\"] Corpus[\"validate_corpus_readiness reject Mathlib-availability overclaim\"] Tactics[\"validate_tactic_portfolio each available tactic needs a probe result record\"] Premises[\"validate_premise_index reject proof_body / oracle premise ids\"] Routing[\"validate_target_shape_routing reject route admitting an unavailable tactic\"] Provider[\"validate_provider_context_recipes reject over-budget or proof-body recipe\"] SourceFloor[\"validate_source_module_imports copied probe bodies, digest-checked\"] Reconcile[\"Reconcile findings vs EXPECTED_NEGATIVE_CASES every known overclaim must be caught\"] Board[\"Readiness board + extension board available / blocked capabilities, counts\"] Ceiling[\"Scope limit no Lean/Lake, proof, provider, launch, or private-system authority\"] Inputs --> Scan Scan --> Corpus Scan --> Tactics Scan --> Premises Scan --> Provider Tactics -->|unavailable tactic ids| Routing Corpus --> Reconcile Tactics --> Reconcile Premises --> Reconcile Routing --> Reconcile Provider --> Reconcile SourceFloor --> Reconcile Reconcile --> Board Board --> Ceiling\n```\n\nThe machine graph remains the generated `paper_module.formal_math_readiness_gate.mermaid` projection derived from the source record, not from this hand-authored Mermaid block.\n\n###### Reader Evidence Routing\n\nRead this module in evidence order:\n1. Start at `core/paper_module_capsules.json::paper_modules[21:paper_module.formal_math_readiness_gate]`. That row names the source authority, subjects, mechanism refs, code locus, Microcosm concept/principle/axiom refs, generated projection statuses, and the bundle scope limit.\n2. Check the generated structured source record `paper_modules/formal_math_readiness_gate.json`. Its `relationships.edges` cite the bundle source refs and show the generated Mermaid status, Atlas status, `source_authority: json_capsule`, and unresolved selective-relation count.\n3. Inspect the runtime locus `src/microcosm_core/organs/formal_math_readiness_gate.py`, especially `run`, `run_readiness_bundle`, `validate_source_module_imports`, `write_receipts`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `SOURCE_MODULE_MANIFEST_NAME`.\n4. Use fixture evidence for the gate behavior: `fixtures/first_wave/formal_math_readiness_gate/input`, `receipts/first_wave/formal_math_readiness_gate/readiness_gate_result.json`, `formal_math_readiness_board.json`, `formal_math_readiness_extension_board.json`, `formal_math_readiness_validation_receipt.json`, and result records/sign-off/first_wave/formal_math_readiness_gate_fixture_acceptance.json.\n5. Use exported-bundle evidence for source-open body-floor claims: `examples/formal_math_readiness_gate/exported_formal_math_readiness_bundle/source_module_manifest.json`, `bundle_manifest.json`, `source_artifacts/`, `source_body_floor/source_modules/`, and `receipts/runtime_shell/demo_project/organs/formal_math_readiness_gate/exported_formal_math_readiness_bundle_validation_result.json`.\n6. Use `tests/test_formal_math_readiness_gate.py` for the behavioral result record boundary. The tests cover negative cases, exported bundle sign-off, source-module digest and target-ref mismatch rejection, bounded command-card output, source-body omission from result records, secret-exclusion/public-relative result record paths, and non-writing plan preview.\n\nDo not route a proof claim through this page. It routes readiness evidence, result record integrity, and source-body-floor accounting only.\n\n###### Technical Mechanism\n\nThe runtime is a deterministic readiness reducer over declared public inputs. `run()` evaluates the first-wave fixture directory with positive and negative JSON cases enabled; `run_readiness_bundle()` evaluates the exported public bundle without fixture-negative cases and requires the bundle source-module manifest. Both entrypoints call `_build_result()`, so the fixture and exported bundle result records share one scope limit, one secret scan, one source-module digest checker, and one readiness-board schema.\n\n`_build_result()` first loads the five public input families: `corpus_readiness.json`, `tactic_portfolio_availability.json`, `premise_index.json`, `target_shape_tactic_routing.json`, and `provider_context_recipes.json`. It then scans those inputs plus any declared source artifacts through `secret_exclusion_scan.scan_paths`, using the public Microcosm forbidden-class policy. The scan is not advisory: the result can pass only when the scan has zero blocking hits, source-module imports pass, all expected fixture-negative cases are observed, and no unexpected positive-case findings remain.\n\nThe mechanism is split into six validators:\n- `validate_corpus_readiness()` records Lean and Mathlib readiness metadata and adds `lean_std_synthetic_core:mathlib` to blocked capabilities when Mathlib is unavailable. A Mathlib availability claim without a passing probe becomes `MATHLIB_AVAILABILITY_OVERCLAIM`.\n- `validate_tactic_portfolio()` separates available from unavailable tactics and requires every available tactic to carry a probe result record. Synthetic probe labels are accepted only when `_tactic_probe_realness_evidence()` binds them to copied source modules or fixture-manifest source-open evidence.\n- `validate_premise_index()` admits premise rows as metadata only. It counts premises, namespaces, retrieval terms, and split eligibility, but rejects `proof_body`, `ground_truth_proof`, `provider_output_body`, and `oracle_needed_premise_ids`.\n- `validate_target_shape_routing()` intersects each route case's allowed tactics with the unavailable tactics emitted by the portfolio validator. Any overlap becomes `ROUTING_ALLOWS_UNAVAILABLE_TACTIC`, so routing cannot silently re-enable a tactic that the probe plane blocked.\n- `validate_provider_context_recipes()` records byte budgets and deliverable shape while rejecting public recipes over 32,768 bytes or recipes that allow proof bodies or provider-body material.\n- `validate_source_module_imports()` verifies the exported bundle's `source_module_manifest.json`, target refs, source refs, line counts, target digests, source digests, exact-copy rows, and the two permitted private-path rewrites. It reports digest/ref failures without placing copied source bodies in result records.\n\nAfter the validators run, `_merge_observed()` and `_merge_findings()` compare observed fixture failures against `EXPECTED_NEGATIVE_CASES`. This is the local scope limit: the fixture run must prove that the known overclaims are caught, while the exported-bundle run must prove that the positive public bundle has no unexpected findings. `_build_extension_board()` then projects the accepted metadata into the extension board: selected pattern ids, namespace and split counts, tactic availability counts, Mathlib-dependent unavailable tactics, blocked route cases, provider budgets, source-body import counts, the scope limit, and the scope boundary.\n\nResult record writing preserves the same boundary. `write_receipts()` emits the gate result, readiness board, extension board, validation result record, and sign-off result record for fixture mode. `run_readiness_bundle()` emits the exported-bundle result record. The focused test suite asserts the mechanism rather than just file existence: it checks the five expected negative case ids, local Lean/Lake probe metadata with Mathlib unavailable, six available tactics with `aesop` blocked, eleven premises, five route cases, three provider recipes, thirteen verified source artifacts, source/target digest mismatch rejection, target-ref mismatch rejection, secret-exclusion/public-relative result record paths, and result record omission of copied body text.\n\n###### Public Contract\n\nThe component does not run Lean or Lake. It consumes public JSON fixtures and exported bundles, records which capabilities are available or blocked, rejects Mathlib availability overclaims, rejects unprobed tactics, rejects premise rows that contain proof bodies, rejects routes that admit unavailable tactics, and rejects provider recipes that exceed the public budget or allow proof bodies.\n\nThe accepted result is a readiness board. That board can tell a later component what is safe to attempt, but it is bounded evidence evidence, benchmark evidence, or permission to execute a theorem prover.\n\n###### Prior Art Grounding\n\nThis component is grounded in formal-math benchmark and environment-readiness work where the presence of a library, tactic, or corpus is not enough by itself. [miniF2F](https://arxiv.org/abs/2109.00110) motivates explicit benchmark split discipline for formal mathematics, [LeanDojo](https://arxiv.org/abs/2306.15626) motivates reproducible theorem-proving environments, and [mathlib](https://arxiv.org/abs/1910.09336) makes the availability of library imports a concrete precondition rather than a vague capability claim.\n\nMicrocosm borrows the readiness-gate pattern: corpus availability, Mathlib probes, tactic probes, premise indexes, target-shape routing, and context budgets must be checked before downstream proof or retrieval language is allowed. It excludes Lean execution or proof authority.\n\n###### Runtime Surfaces\n- `python -m microcosm_core.organs.formal_math_readiness_gate run --input fixtures/first_wave/formal_math_readiness_gate/input --out receipts/first_wave/formal_math_readiness_gate`\n- `python -m microcosm_core.organs.formal_math_readiness_gate run-readiness-bundle --input examples/formal_math_readiness_gate/exported_formal_math_readiness_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_readiness_gate`\n- `python -m microcosm_core.organs.formal_math_readiness_gate plan --input fixtures/first_wave/formal_math_readiness_gate/input`\n- `microcosm formal-math-readiness-gate run --input fixtures/first_wave/formal_math_readiness_gate/input --out receipts/first_wave/formal_math_readiness_gate`\n- `microcosm formal-math-readiness-gate plan --input fixtures/first_wave/formal_math_readiness_gate/input`\n\n###### Relationship To Lean Witness\n\n`formal_math_lean_proof_witness` remains deferred. This gate makes the deferral typed and testable: Mathlib is absent until a passing probe says otherwise, unavailable tactics cannot be routed, premise indexes cannot carry proof or oracle bodies, and provider recipes cannot smuggle proof-body deliverables.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_math_readiness_gate.py -q --basetemp=/tmp/microcosm_formal_math_readiness_gate_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.relationships.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/formal_math_readiness_gate.json\n```\n\nExpected generated-row proof: `edge_count: 15`, `mermaid_status: available_from_capsule_edges`, `atlas_status: blocked_until_organ_atlas_owner_lane_binds_edges`, `source_authority: json_capsule`, and `unresolved_selective_relation_count: 0`.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim that Microcosm has a public readiness gate for formal math system preparation. The valid claim is bounded to corpus availability, Mathlib and tactic probe metadata, premise-index coverage, target-shape tactic routing, provider context budget checks, extension-board pattern ids, public PROVER smoke-run source artifacts, an exact public component-source body floor, and fixture or exported-bundle result records.\n\nThe module must not claim Lean/Lake execution, theorem proving, formal proof authority, formal-result correctness, Mathlib-dependent proof success, benchmark performance, provider-call execution, private proof-body import, oracle-needed premise disclosure, source-file changes, publishing-scope decision, hosted deployment, recipient work, secret export, or whole-system correctness. Its strongest launch-facing statement is readiness-boundary enforcement over public metadata and copied source artifacts.\n\n###### Limitations\n\nThe runtime validates finite public fixtures and exported-bundle manifests. It does not execute Lean or Lake, import Mathlib in the current environment, call a provider, or check theorem statements. When the result reports blocked capabilities such as `lean_std_synthetic_core:mathlib`, that is a readiness boundary for downstream components, not an invitation to route around the gate.\n\nThe copied source artifacts are source-open body-floor evidence only. Digest and target-ref checks show that selected PROVER readiness/probe bodies and the public component source copy match their manifests; they do not authorize source-file changes, private source-root export, proof-body disclosure, recipient work, hosted deployment, or public sharing. Result records intentionally carry counts, digests, paths, negative-case coverage, and authority flags instead of copied body text.\n\nThe negative cases are also finite. They cover the known overclaims encoded in `EXPECTED_NEGATIVE_CASES`: Mathlib availability without a passing probe, unprobed tactic availability, premise rows with proof bodies, target routes that admit unavailable tactics, and provider recipes that exceed public budgets or permit proof bodies. A new formal-math claim needs either a new source-backed negative case here or a different proof consumer; this page should not be used as a generic formal-proof claim surface.\n\n###### Scope boundary\n\nThis module documents a public readiness gate only. It excludes Lean/Lake execution, formal proof authority, Mathlib-dependent proof attempts, external model access, benchmark claims, public launch, hosted deployment, public sharing, recipient work, secret export, or whole-system correctness. It also does not make private source-root material, browser UI state, account or browser material, browser state, account secrets, source notes, model-output data bodies, recipient-send state, or private proof bodies part of the public Microcosm body floor.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe exported readiness bundle carries thirteen PROVER smoke-run readiness/probe bodies under `source_artifacts`. They cover corpus readiness, tactic-affordance probe metadata, Mathlib and trace probes, and the copied portfolio-core Lean probes used to decide which tactics are blocked or available. Two JSON rows are private-path rewrites; those rows retain source and target digests plus the rewrite mode.\n\nThe bundle also carries an exact public component-source copy for `src/microcosm_core/organs/formal_math_readiness_gate.py` under `source_body_floor/source_modules`. Generated `state/runs` Lean artifacts are runnable readiness evidence, not source-body authority. Neither floor places body text in result records or workingness cards, and neither imports model-output data bodies, account or browser state, browser UI live access, recipient-send state, account secrets, private proof bodies, or oracle-needed premise ids.\n\nThe source-module manifest and bundle manifest are the right surfaces for body-floor inspection. The validation result records intentionally carry status, digests, counts, and public-relative refs rather than copied source bodies.\n\nWave 011 adds the explicit extension board for the source intake cell `formal_math_readiness_extensions`. The board is still metadata-only, but it is more useful than the older flat counts: it records the selected pattern ids (`lean_std_toolchain_premise_index`, `tactic_portfolio_availability_probe`, `target_shape_tactic_routing_gate`), the source projection intake ref, public target refs, validation refs, namespace and split coverage for the premise index, tactic availability status counts, Mathlib-dependent unavailable tactics, target-shape routing admissibility, and provider context budgets.\n\n###### Governing Lattice Relation\n\nThe bundle binds this module to `concept.formal_math_and_proof_witness_bundle` because the component is not a theorem prover; it is the membrane that decides which public formal-math inputs are safe enough for a later proof witness to consume. The governing mechanisms split that membrane in two. The `validates_public_formal_math_readiness_bundle` mechanism names the positive bundle path: `run`, `run_readiness_bundle`, `validate_source_module_imports`, and `write_receipts` validate the declared corpus, tactic, premise, routing, provider-budget, source-module-manifest, and source-body-floor evidence before writing readiness boards. The `validates_public_readiness_boundary` mechanism names the negative path: `validate_corpus_readiness`, `validate_tactic_portfolio`, `validate_premise_index`, `validate_target_shape_routing`, and `validate_provider_context_recipes` reject the cases that would turn readiness metadata into proof authority.\n\nThe principle and axiom refs are therefore operational, not decorative. `P-1`, `P-2`, and `P-3` are expressed by keeping the JSON bundle, generated structured source record, runtime code locus, and result records as separate authority classes. `P-6` and `P-8` are expressed by the body-floor and secret-exclusion contracts: copied PROVER probe bodies and the public component source copy can be inspected through digests and manifests, while private proof bodies, model-output data bodies, and browser or account state stay outside the public floor. `AX-1`, `AX-2`, `AX-5`, and `AX-7` are the local reason the downstream `paper_module.formal_math_lean_proof_witness` remains a dependency rather than an already-proven conclusion.\n\nThe generated lattice edge count is small on purpose: it proves that this page is bundle-backed, source-bound, and connected to one deferred proof-witness module.\n\nCorpus Readiness Mathlib Absence Gate Runs the real Lean toolchain to confirm the math library is absent, then gates proof tasks. 4/5 Runs real tools\n\nDoes It reads a recorded readiness report from a Lean math toolchain run and makes one fact inspectable: when the report was captured, the Mathlib library was not importable (its import probe failed). From that, it lists which math corpora are absent or usable only for translation smoke tests, and which downstream tasks must be blocked before any Mathlib-dependent proof work is attempted. It also re-checks that the recorded source files match their recorded SHA-256 digests and that no proof bodies, provider outputs, or non-public paths leaked into the public output. The result shows exactly where the proof pipeline draws a hard \"not ready, do not proceed\" line, with provenance, instead of quietly assuming the environment is fine.\n\nScope limit It only projects and gate-checks recorded corpus/toolchain readiness accounting, re-verifies recorded source digests and leakage guards, and runs a bounded Lean/Lake import probe when a toolchain is present. It does not run a full Lake build, prove formal-result correctness, claim Mathlib is available beyond the probe result, benchmark corpora, score model performance, use external model services, or include launch operations or public sharing.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run --input fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input --out receipts/first_wave/corpus_readiness_mathlib_absence_gate\n```\n\nEvidence External tool run evidence 4/5 Real runtime result\n\nLinks to [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel), [Tactic Portfolio Availability Probe](docs/components.html#component-tactic_portfolio_availability_probe), [Undeclared Library Prior Symbol Classifier](docs/components.html#component-undeclared_library_prior_symbol_classifier), [Formal Math Lean Proof Witness](docs/components.html#component-formal_math_lean_proof_witness)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/corpus_readiness_mathlib_absence.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Corpus Readiness Mathlib Absence Gate\n\nExplains component [Corpus Readiness Mathlib Absence Gate](docs/components.html#component-corpus_readiness_mathlib_absence_gate) mechanisms [validates public corpus readiness boundary](docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-corpus-readiness-boundary) [validates public mathlib absence boundary](docs/rules-and-ideas.html#lattice-mechanism-mechanism-corpus-readiness-mathlib-absence-gate-validates-public-mathlib-absence-boundary) Governed by principle [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8) concept [formal math and proof witnesses as bounded public proof-adjacent result records](docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle) Abides by axiom [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7) Depends on paper module [Tactic Portfolio Availability](docs/paper-modules.html#paper-module-tactic-portfolio-availability)\n\n###### Abstract\n\n`corpus_readiness_mathlib_absence_gate` is the public formal-math corpus readiness boundary for Microcosm. It carries copied corpus/toolchain rows from the 2026-05-11 proof-state curriculum smoke run and forces Mathlib absence, absent-corpus blocking, consumer gate decisions, and source-module digest coupling to be visible before any downstream retrieval, tactic-routing, or proof-witness language is allowed.\n\n###### Purpose\n\nFormal-math agents fail in a specific way: they treat \"there is a corpus\" as if it meant \"this corpus is usable for the proof route I am about to take\". A roster lists miniF2F, PutnamBench, ProofNet, LeanDojo and Mathlib, the agent assumes the libraries are present, and the failure only surfaces later as a broken import or a tactic that needs a premise the host cannot resolve. This component answers one question before that happens: for each corpus, is it actually present on this host, and is the Mathlib import lane actually available, or not?\n\nThe unusual part is that the gate does not take the answer on trust. It runs a bounded Lean/Lake import probe in a temporary directory: one small file that imports `Std` and is expected to compile, and one that imports `Mathlib` and is expected to be rejected with the toolchain's own `unknown module prefix 'Mathlib'` error. A corpus is only marked usable for Mathlib-dependent work when the runtime evidence agrees the corpus exists, carries a Lake file, and the Mathlib lane probe passes. In the current system the Mathlib probe stays false, so every Mathlib-dependent consumer is blocked, and the one consumer that passes is the Lean3 translation smoke, which needs no Mathlib project at all.\n\nThis closes the most common way a readiness claim drifts. Stale alias fields such as `mathlib_available`, or a `PASS` lean status, cannot turn the gate green on their own; they must agree with the live probe or the row is flagged. The probe is deliberately narrow. It checks that imports resolve and that Mathlib is genuinely absent. It does not run a `lake build`, prove any theorem, or claim Mathlib is installed. The output is a readiness board and a set of blocked consumer verdicts, bounded evidence.\n\n###### Shape\n\nSource refs\n\nlake env lean: Std compiles, Mathlib import rejected `runtime_lean_import_probe` check SHA-256 digests, parse probe JSON `validate_runtime_source_artifacts` 7 corpus rows, alias fields must agree with probe `validate_corpus_readiness` derive verdicts from readiness facts `validate_consumer_gate_cases` 4 copied source artifacts, digest match `validate_source_module_imports` Diagram source\n\n```text\nflowchart TD fixture[\"Fixture or exported bundle input corpus readiness rows + consumer gate cases\"] probe[\"runtime_lean_import_probe lake env lean: Std compiles, Mathlib import rejected\"] artifacts[\"validate_runtime_source_artifacts check SHA-256 digests, parse probe JSON\"] mathlib{\"Mathlib lane available? corpus exists + Lake file + probe passes\"} corpus[\"validate_corpus_readiness 7 corpus rows, alias fields must agree with probe\"] gates[\"validate_consumer_gate_cases derive verdicts from readiness facts\"] imports[\"validate_source_module_imports 4 copied source artifacts, digest match\"] allowed[\"Allowed: Lean3 translation smoke (needs no Mathlib project)\"] blocked[\"Blocked: Mathlib-dependent and absent-corpus consumers\"] result records[\"metadata-only result records result, board, validation, sign-off, bundle\"] ceiling[\"Scope limit no Mathlib availability, proof, provider, launch\"] fixture --> artifacts artifacts --> probe probe --> mathlib mathlib -->|no, probe false| corpus corpus --> gates gates --> allowed gates --> blocked fixture --> imports corpus --> result records gates --> result records imports --> result records result records --> ceiling\n```\n\nThis reader diagram is intentionally smaller than the generated doctrine-lattice graph.\n\n###### Mechanism\n\nThe mechanism is a readiness reducer, not a theorem-proving backend. The runtime entrypoints `run` and `run_projection_bundle` both call `_build_result`, which loads public fixture or exported-bundle inputs, scans those inputs against the non-public-state exclusion policy, verifies copied source artifacts, and then combines corpus readiness, consumer gate, source-module import, negative-case, and scope limit fields into one metadata-only result.\n\n`validate_runtime_source_artifacts` anchors the reducer to four source refs: the corpus readiness rows, tactic-affordance probe, Mathlib import probe Lean file, and tactic portfolio availability JSON. It checks expected SHA-256 digests, parses the JSON source artifacts, and runs a bounded Lean/Lake import probe that can show Std imports and Mathlib remains absent without running a Lake build or exporting Lean bodies.\n\n`validate_corpus_readiness` normalizes seven corpus rows against those runtime source artifacts. A corpus is usable for Mathlib-dependent work only when the runtime evidence says the corpus exists, has a Lake file, and `mathlib_lake_project_import_available` is true. In the current fixture and bundle evidence that field remains false, so Mathlib-dependent capabilities are blocked, absent corpora are recorded, and stale alias fields such as `mathlib_available` cannot turn the gate green.\n\n`validate_consumer_gate_cases` then derives consumer verdicts from the normalized readiness facts instead of trusting expected-decision labels. The translation smoke consumer can pass because it does not require a Mathlib Lake project and names an available Lean3 reference corpus; Mathlib-dependent or absent-corpus consumers stay blocked. `validate_source_module_imports` adds the exported bundle floor by requiring the manifest class `copied_non_secret_macro_body`, material classes, target/source digest agreement, and no body material in result records.\n\nThe proof consumers are the two component commands, the focused regression test `tests/test_corpus_readiness_mathlib_absence_gate.py`, the paper-module corpus check, and the command-card surfaces emitted by `result_card`. Together they exercise the success path, contradictory Mathlib claims, consumer-gate skips, source digest tampering, private-path rewrites, runtime-probe blocks, and result record body exclusion. The resulting evidence relates the bundle's two mechanisms to `concept.formal_math_and_proof_witness_bundle`, `P-8`, and `AX-7` by making readiness visibility a precondition for downstream formal-math claims while keeping the scope limit below theorem, provider, benchmark, or launch-scope decision.\n\n###### Public Surfaces\n- Component runner: `python -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run --input fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input --out receipts/first_wave/corpus_readiness_mathlib_absence_gate`\n- Exported bundle runner: `python -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run-projection-bundle --input examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle --out receipts/runtime_shell/demo_project/organs/corpus_readiness_mathlib_absence_gate`\n- Standard: `standards/std_microcosm_corpus_readiness_mathlib_absence_gate.json`\n- Source-module manifest: `examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle/source_module_manifest.json`\n- Runtime result record: `receipts/runtime_shell/demo_project/organs/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle_validation_result.json`\n\n###### Reader Evidence Routing\n\nRead this module in five passes:\n1. Start with the source record at `core/paper_module_capsules.json::paper_modules[8:paper_module.corpus_readiness_mathlib_absence_gate]`. It is the source authority that names `source_authority: json_capsule`, the component subject, two mechanism subjects, the resolved runtime code locus, the concept `concept.formal_math_and_proof_witness_bundle`, the dependency `paper_module.tactic_portfolio_availability`, `P-8`, and `AX-7`.\n2. The reader proof is the current row shape: eight generated relationship edges, Mermaid `available_from_capsule_edges`, Atlas `blocked_until_organ_atlas_owner_lane_binds_edges`, and no unpopulated paper-module selective dependency residual for the tactic-portfolio edge. The structured source record is wiring evidence, not theorem-correctness, runtime-correctness, launch, provider, or production authority.\n3. Inspect the runtime locus `src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py`. The load-bearing symbols are `run`, `run_projection_bundle`, `validate_corpus_readiness`, `validate_consumer_gate_cases`, `validate_source_module_imports`, `_build_result`, `write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_NAME`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n4. For fixture evidence, use `fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input` and the result records under `receipts/first_wave/corpus_readiness_mathlib_absence_gate/` plus result records/sign-off/first_wave/corpus_readiness_mathlib_absence_gate_fixture_acceptance.json. The first-wave result result record records seven corpus rows, seven consumer cases, one allowed Lean3 translation-smoke case, six blocked absent or Mathlib-dependent cases, `mathlib_lake_project_import_available: false`, `body_in_receipt: false`, and the five negative cases `mathlib_available_without_probe`, `consumer_skips_readiness_gate`, `private_corpus_source_ref`, `proof_body_leakage`, and `release_overclaim`.\n5. For exported-bundle evidence, use `examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle/source_module_manifest.json` and `receipts/runtime_shell/demo_project/organs/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle_validation_result.json`. The manifest verifies four copied source artifacts: corpus readiness JSON, tactic-affordance probe JSON, the Mathlib import probe Lean file, and tactic portfolio availability JSON. The exported result record records `source_module_import_count: 4`, `copied_source_artifact_count: 4`, `source_modules_pass: true`, `body_in_receipt: false`, and three blocked absent or Mathlib-dependent bundle consumer cases.\n\nIf a reader needs validation result records rather than prose, run the commands in ## Validation Result record Path, including the focused regression test and paper-module corpus check. Treat every result record as corpus-readiness boundary evidence only; it does not create Lean/Lake execution authority, Mathlib availability, theorem-proof authority, provider authority, private-system equivalence, or launch-scope decision.\n\n###### Prior Art Grounding\n\nThis component is grounded in Lean corpus and neural theorem-proving work where library availability, premise access, and benchmark splits are part of the claim. The [Lean mathematical library](https://arxiv.org/abs/1910.09336) establishes Mathlib as a large community-maintained formal mathematics corpus, [miniF2F](https://arxiv.org/abs/2109.00110) gives a cross-system benchmark for formal Olympiad statements, and [LeanDojo](https://arxiv.org/abs/2306.15626) shows why reproducible corpus extraction and accessible-premise metadata matter for theorem-proving agents.\n\nMicrocosm borrows the readiness gate: corpus rows, Mathlib availability probes, blocked consumer cases, source-module digests, and negative leakage guards must be visible before retrieval, tactic-routing, or proof-witness language is allowed. It does not claim Mathlib is present or that any theorem was proved.\n\n###### Research Bet\n\nFormal-math agents fail when they treat \"there is a corpus\" as equivalent to \"this corpus is usable for this proof route.\" This component makes that boundary runnable. It records seven corpus rows, blocks six absent or Mathlib-dependent consumer cases, allows only the Lean3 translation-smoke case, and keeps the Mathlib probe false until an actual passing probe is present.\n\nThe exported bundle carries four copied body artifacts: corpus readiness JSON, tactic-affordance probe JSON, the Mathlib import probe Lean file, and tactic portfolio availability JSON. Two rows are exact copies and two use a verified private-path rewrite. The result record records the manifest status, counts, material classes, digests, and metadata-only policy; the copied bodies stay under `source_artifacts/`, not inside result records.\n\n###### Source-Backed Doctrine Binding\n- Component: `src/microcosm_core/organs/corpus_readiness_mathlib_absence_gate.py`\n- Bundle: `core/paper_module_capsules.json#paper_module.corpus_readiness_mathlib_absence_gate`\n- Mechanism: `core/mechanism_sources.json#mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary`\n- Standard: `standards/std_microcosm_corpus_readiness_mathlib_absence_gate.json`\n- Evidence class: `core/organ_evidence_classes.json::corpus_readiness_mathlib_absence_gate` records `algorithmic_projection` at rank 3.\n- Source-module manifest: `examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle/source_module_manifest.json`\n- Sign-off result records: `receipts/first_wave/corpus_readiness_mathlib_absence_gate/*` and result records/sign-off/first_wave/corpus_readiness_mathlib_absence_gate_fixture_acceptance.json\n\n###### Cold-Agent Use\n\nOpen the source-module manifest first, then the runtime bundle result record, then the first-wave result result record. The useful claim is not that Microcosm has Mathlib or can prove downstream theorems. The useful claim is that Microcosm can force a formal-math route to expose corpus availability, Mathlib absence, consumer gating, source-module digest evidence, copied-body boundaries, negative-case result records, and an explicit scope boundary before any proof route is treated as usable.\n\nRe-entry condition: the current atlas row already points at this paper module. After the sibling `organ_atlas.json` lane releases, bind this bundle's mechanism ref and code locus into the atlas row and rerun `python -m microcosm_core.doctrine_lattice --check`.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run \\\n  --input fixtures/first_wave/corpus_readiness_mathlib_absence_gate/input \\\n  --out /tmp/microcosm-corpus-readiness-mathlib-absence-vrp\nPYTHONPATH=src python3 -m microcosm_core.organs.corpus_readiness_mathlib_absence_gate run-projection-bundle \\\n  --input examples/corpus_readiness_mathlib_absence_gate/exported_corpus_readiness_bundle \\\n  --out /tmp/microcosm-corpus-readiness-mathlib-absence-bundle-vrp\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\nPYTHONPATH=src .venv/bin/python -m pytest -p no:cacheprovider --basetemp=/tmp/microcosm-corpus-readiness-mathlib-absence-tests -q tests/test_corpus_readiness_mathlib_absence_gate.py\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.paper_module_payload.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/corpus_readiness_mathlib_absence_gate.json\n```\n\nThe fixture command writes the public corpus-readiness board, result result record, and validation result record. The bundle command validates the exported source-module manifest and metadata-only runtime result record. The corpus check and `jq` structured source record query prove the bundle-derived projection currentness without hand-editing generated JSON. The focused test keeps the Mathlib absence boundary, consumer gate cases, source-module digest checks, non-public paths rewrite policy, and scope boundary behavior from regressing.\n\nPassing these commands does not establish Mathlib is installed, rerun Lean/Lake, validate downstream formal-result correctness, benchmark a corpus, authorize external model access, or approve launch; it only proves the bounded fixture and exported bundle result records preserve the declared readiness boundary.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component is algorithmic projection over copied source system, not a Lean/Lake rerun and not Mathlib proof authority. Its strongest public claim is that a fixture and exported bundle agree about corpus readiness, Mathlib absence, blocked consumers, copied source-module digests, metadata-only result records, and negative leakage guards. It does not establish formal-result correctness, claim Mathlib is available, benchmark a corpus, expose proof/provider/private bodies, call a provider, change source files, or include launch operations.\n\n###### Scope limit\n\nThe JSON bundle proves a public corpus-readiness boundary only: copied corpus/toolchain rows, absent-Mathlib blocking, consumer gate decisions, source-module digest coupling, metadata-only result records, and negative leakage guards. Mermaid availability reflects bundle edges, while the Atlas row still waits on the component-atlas owner lane. This module does not establish Mathlib is installed, rerun Lean or Lake, validate formal-result correctness, benchmark corpus quality, authorize retrieval or tactic routing, use external model services, expose private proof bodies, change source records, or approve launch.\n\n###### Result record Shape\n\nThe first-wave result result record records `corpus_count: 7`, `consumer_case_count: 7`, `allowed_case_ids`, `blocked_case_ids`, `absent_corpus_ids`, `mathlib_lake_project_import_available: false`, `body_in_receipt: false`, the scope limit, and five observed negative cases:\n- `mathlib_available_without_probe`\n- `consumer_skips_readiness_gate`\n- `private_corpus_source_ref`\n- `proof_body_leakage`\n- `release_overclaim`\n\nThe exported runtime result record records `source_module_import_count: 4`, `copied_source_artifact_count: 4`, `source_modules_pass: true`, and the same metadata-only result record boundary.\n\n###### Scope boundary\n\nThis is a source-backed corpus readiness boundary with copied source corpus/toolchain material, not Lean/Lake execution, Mathlib availability, theorem-proof authority, corpus benchmark authority, provider authority, or launch-scope decision.\n\nMathematical Strategy Atlas Hypothesis Scorer Picks a first-guess proof strategy from a problem's tags and flags any it cannot map. 3/5\n\nDoes Before any proof is attempted, this component looks at a math problem's feature tags and writes down its first-guess strategy (for example, \"this looks like an if-and-only-if, so split it both ways\"), and flags anything it cannot map as an explicit \"no strategy matched\" instead of a silent failure. The chosen opening move, why it was chosen, and the cases it could not map are all recorded in machine-readable result records.\n\nScope limit It only projects pre-oracle strategy-hypothesis and retrieval mechanics; it does not run Lean/Lake, prove theorems, establish domain or formal-result correctness, reveal oracle labels, expose proof bodies, use external model services, tune on test answers, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.mathematical_strategy_atlas_hypothesis_scorer run --input fixtures/first_wave/mathematical_strategy_atlas_hypothesis_scorer/input --out receipts/first_wave/mathematical_strategy_atlas_hypothesis_scorer\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mathematical_strategy_atlas.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Mathematical Strategy Atlas\n\nExplains component [Mathematical Strategy Atlas Hypothesis Scorer](docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer) mechanism [validates public strategy hypothesis projection](docs/rules-and-ideas.html#lattice-mechanism-mechanism-mathematical-strategy-atlas-hypothesis-scorer-validates-public-strategy-hypothesis-projection) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`mathematical_strategy_atlas_hypothesis_scorer` is the public pre-oracle strategy layer for Microcosm formal-math work. It turns problem feature tags into an explicit strategy hypothesis before premise retrieval or proof execution, then records the result as redacted result records.\n\nThe point is not to prove anything. The point is to make the first mathematical move inspectable: an `iff_goal` shape selects `iff_split`, a recursive list shape selects `recursive_data_induction`, arithmetic normalization selects the arithmetic lens, and unmapped shapes become a typed `STRATEGY_SELECTION_MISS` instead of a hidden failure mode.\n\nThe current body-floor import carries eight copied source bodies: the prover graph benchmark harness, the provider result record reducer, their strategy-boundary regression tests, the compute-provider strategy classification standard, and three public runtime artifacts from `PROVER_PROVIDER_CONTEXT_SWEEP_20260510_v0` (`strategy_cards.json`, `strategy_hypothesis_set.json`, and `prover_skill_atlas.json`). They live in `source_artifacts/` under both the first-wave fixture input and the exported bundle; result records carry refs, counts, hashes, anchors, and verdicts instead of body text.\n\n###### Purpose\n\nA proof search has to start somewhere. Before any premise is retrieved or any tactic is run, an agent has already committed to a first move: a goal shape, a lens, a family of tactics it expects to use. That choice is usually implicit, buried inside a model call or a prompt. This component exists to pull it into the open. The single question it answers is: for a given problem shape, which strategy did the system pick first, and on what visible evidence?\n\nThe interesting part is what the answer is allowed to depend on. The scorer never sees the oracle's expected strategy, the ground-truth proof, or any provider output. It works only from public problem features and a strategy atlas of trigger features, negative triggers, and retrieval-expansion terms. The selected strategy is therefore a hypothesis, recomputed from inputs a cold reader can also read, not a result borrowed from the answer key.\n\nThat constraint is what the page guards. The common failure mode for a \"strategy classifier\" is to bake the answer in: declare the chosen strategy as a plain label, or score it on shallow feature overlap that happens to line up with the known-good label. The component rejects both. A declared selection must match the score the scorer recomputes from evidence, and a strategy chosen on overlap alone is a typed negative case rather than a pass.\n\n###### Shape\n\nThe local component standard, when changing runtime behavior or the claim envelope, is `standards/std_microcosm_mathematical_strategy_atlas_hypothesis_scorer.json`; the general paper-module contract remains `standards/std_microcosm_paper_module.json`.\n\nThe diagram below traces the scorer's runtime flow inside that projection: how public inputs become a per-candidate score, how a selection or a typed miss is chosen, and how the result is recomputed and written as metadata-only result records under the scope limit.\n\nSource refs\n\ntrigger / negative / retrieval terms `strategy_atlas.json` feature tags, oracle hidden `problem_features.json` candidate strategy ids `hypothesis_cases.json` Diagram source\n\n```text\nflowchart TD subgraph Inputs[\"Public inputs\"] atlas[\"strategy_atlas.json trigger / negative / retrieval terms\"] features[\"problem_features.json feature tags, oracle hidden\"] cases[\"hypothesis_cases.json candidate strategy ids\"] end subgraph Scoring[\"Per-candidate scoring\"] score[\"score = trigger_hits x4 - negative_hits x3 + retrieval_bonus (cap 2)\"] rank[\"rank positive scores tie-break by order, then id\"] end select{\"any positive score?\"} selected[\"selected_strategy_id + score components\"] miss[\"STRATEGY_SELECTION_MISS (unknown)\"] recheck[\"recompute vs declared selection / score / ranking\"] result records[\"metadata-only result records refs, counts, hits, verdicts\"] ceiling[\"Scope limit no Lean/Lake, oracle labels, external model access, or launch\"] atlas --> score features --> score cases --> score score --> rank rank --> select select -- yes --> selected select -- no --> miss selected --> recheck miss --> recheck recheck --> result records result records --> ceiling\n```\n\nThe generated instance currently exposes 19 concrete `relationships.edges`: two subject edges for the component and mechanism, one governing concept edge, six principle edges, six axiom edges, three sibling paper-module dependency edges, and one resolved code-locus edge into `src/microcosm_core/organs/mathematical_strategy_atlas_hypothesis_scorer.py`. `relationships.unpopulated_selective_relations` is empty, so the module-level unresolved selective-relation count available from this instance is `0`.\n\nRuntime evidence enters through the fixture input `fixtures/first_wave/mathematical_strategy_atlas_hypothesis_scorer/input`, the exported bundle `examples/mathematical_strategy_atlas_hypothesis_scorer/exported_mathematical_strategy_atlas_bundle`, and their copied `source_artifacts/` / `source_module_manifest.json` bundles. The focused test file is `tests/test_mathematical_strategy_atlas_hypothesis_scorer.py`; result records include `receipts/first_wave/mathematical_strategy_atlas_hypothesis_scorer/mathematical_strategy_atlas_result.json`, `mathematical_strategy_atlas_board.json`, `mathematical_strategy_atlas_validation_receipt.json`, result records/sign-off/first_wave/mathematical_strategy_atlas_hypothesis_scorer_fixture_acceptance.json, and runtime-shell exported-bundle validation result records.\n\nThe honest ceiling is narrow by design: this module can say that public pre-oracle strategy hypotheses, retrieval-lens metadata, copied public source tool/standard/runtime bodies, source-artifact digests, and negative cases are inspectable. It cannot say that Lean or Lake ran, that a theorem was proved, that oracle labels or model-output data are visible, that benchmark performance is certified, that public sharing is approved, that launch is approved, or that the private root has been made public-safe.\n\n###### How it works\n\nThe scorer reads three public inputs: a strategy atlas, a set of problem features, and a set of hypothesis cases. For each candidate strategy in a case it computes a single integer score from three terms. Each problem feature that matches a strategy's `trigger_features` adds four points. Each feature that matches the strategy's `negative_triggers` subtracts three. Retrieval-query terms that appear in the strategy's expansion terms add one point each, capped at two. Plain feature overlap is recorded as a diagnostic count but is deliberately kept out of the score.\n\nSelection is then a deterministic sort. Only strategies with a positive score are eligible. Among those, the scorer ranks by score (highest first), breaking ties by the strategy's declared order and then its id, and takes the top row. If no candidate scores positive, the case resolves to the typed `STRATEGY_SELECTION_MISS` rather than guessing. The output for each case carries the selected id, the score, the component breakdown, the ranked candidate scores, and the trigger, negative, and retrieval hits that produced them, so the choice can be re-derived by hand.\n\nThe weights matter because they encode the design intent. Trigger matches are worth more than retrieval matches, so a strategy is chosen mainly for the shape it claims to handle, not for how many search terms happen to coincide. Negative triggers can veto a strategy that looks superficially apt. The retrieval cap stops a strategy from winning on keyword volume alone. A fixture that tries to score on overlap without these terms is caught by the `superficial_overlap_only_scoring` negative case.\n\nThe same recomputation is what enforces honesty. When a case declares its own `selected_strategy_id`, `score`, `classifier`, `retrieval_bonus`, or `candidate_scores`, the component recomputes each from the evidence and reports a stale-declaration finding on any mismatch. Declaring the selected strategy as a bare label, with nothing for the scorer to check against, is itself rejected: a label with no derivable evidence is not strategy evidence. Alongside this, the copied source artifacts are checked for leakage policy, so the strategy cards, hypothesis set, and skill atlas stay pre-oracle, free of proof bodies, and free of oracle strategy ids.\n\n###### Reader Evidence Routing\n\nRead this module as a pre-oracle strategy-hypothesis audit, not as a proof result. The primary reader path is:\n- Start with `strategy_atlas.json`, `problem_features.json`, and `hypothesis_cases.json` to see how public feature tags select a strategy id before retrieval or proof execution.\n- Check `source_module_manifest.json` and the copied `source_artifacts/` bodies to verify that the imported source bodies are public tool/runtime bodies with exact digests, required anchors, and body-floor result records.\n- Inspect the fixture and exported-bundle result records to confirm that strategy ids, retrieval-term effects, oracle-label exclusion, source-card consistency, and negative cases are checked without exposing proof bodies or model-output data.\n- Use the structured source record only for structural lattice proof: it confirms bundle-backed subjects, code loci, doctrine refs, and dependency edges; it does not establish the scorer's correctness or any theorem.\n\n###### Public Inputs\n- `strategy_atlas.json` defines the known strategy enum, match features, and retrieval-term additions.\n- `problem_features.json` carries synthetic public problem features with oracle labels hidden.\n- `hypothesis_cases.json` validates deterministic pre-oracle strategy scoring.\n- `source_module_manifest.json` binds copied source body files to exact source refs, SHA-256 digests, byte counts, line counts, material classes, and required anchors.\n- Negative cases reject unknown strategy ids, proof bodies, oracle labels, post-oracle strategy selection, and launch/proof/provider overclaims.\n\n###### Result records\n\nThe component emits:\n- `mathematical_strategy_atlas_result.json`\n- `mathematical_strategy_atlas_board.json`\n- `mathematical_strategy_atlas_validation_receipt.json`\n- `mathematical_strategy_atlas_hypothesis_scorer_fixture_acceptance.json`\n\nRuntime-shell exported bundle validation writes `exported_mathematical_strategy_atlas_bundle_validation_result.json`.\n\n###### Prior Art Grounding\n\nThe strategy atlas is grounded in the formal-methods practice of separating problem-shape classification from proof execution. Lean's tactic model, as introduced in [Theorem Proving in Lean 4](https://lean-lang.org/theorem_proving_in_lean4/Tactics/), gives the immediate precedent: proof work is often arrange around tactics chosen for a goal shape, while the kernel checks the final proof state. The [mathlib overview](https://leanprover-community.github.io/mathlib-overview.html) also motivates explicit retrieval terms and domain tags because a large formal library is navigated by topic, structure, and reusable theorem families.\n\nThe atlas is also adjacent to hammer-style premise and method selection, such as Isabelle [Sledgehammer](https://isabelle.in.tum.de/doc/sledgehammer.pdf), where a front-end tool searches for useful facts or proof methods before replay. This module keeps the pattern pre-oracle and metadata-only: it records why a first strategy hypothesis was selected, not whether the proof can be completed.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.mathematical_strategy_atlas_hypothesis_scorer run \\\n  --input fixtures/first_wave/mathematical_strategy_atlas_hypothesis_scorer/input \\\n  --out /tmp/microcosm-mathematical-strategy-atlas-hypothesis-scorer/fixture \\\n  --card\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.mathematical_strategy_atlas_hypothesis_scorer run-strategy-bundle \\\n  --input examples/mathematical_strategy_atlas_hypothesis_scorer/exported_mathematical_strategy_atlas_bundle \\\n  --out /tmp/microcosm-mathematical-strategy-atlas-hypothesis-scorer/bundle \\\n  --card\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_mathematical_strategy_atlas_hypothesis_scorer.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nA green result record proves only pre-oracle strategy-hypothesis metadata, copied public source tool bodies, source artifact digests, and negative-case enforcement; it does not run Lean or Lake, prove formal-result correctness, reveal oracle labels, export proof bodies, use external model services, certify benchmark performance, authorize public sharing, or include launch operations.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe atlas is metadata and strategy-hypothesis machinery only. It does not run Lean or Lake, claim formal-result correctness, reveal oracle strategy labels, expose proof bodies, use external model services, tune on test answers, include launch operations, or make Mathlib-dependent proof claims. The copied runtime artifacts are public strategy traces, not oracle labels, model-output data, or proof bodies.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that public strategy-hypothesis metadata, copied source tool bodies, source artifact digests, and negative cases can be checked before oracle labels or proof execution. It does not run Lean or Lake, prove formal-result correctness, reveal oracle labels, expose proof bodies, use external model services, certify benchmark performance, authorize public sharing, include launch operations, or make Mathlib-dependent proof claims.\n\nTactic Portfolio Availability Probe Maps which Lean proof tactics a recorded run marked usable before any code relies on one. 3/5\n\nDoes It turns one captured Lean run's results into an inspectable list of which proof shortcuts (\"tactics\" like `rfl`, `simp`, `omega`, `aesop`) were recorded as compiling, showing at a glance which are usable and which are off before anything treats a tactic as available. In this fixture seven tactics are marked usable and `aesop` is marked failed (its recorded run hit a missing-Mathlib error). The tool reads pre-recorded status rows and checks them for honesty; it does not run Lean itself.\n\nScope limit It only projects and validates which tactics were recorded as compiling in one captured environment; it does not run Lean/Lake at all, prove any goal, certify domain-level conclusions, use external model services, claim benchmark performance, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.tactic_portfolio_availability_probe run --input fixtures/first_wave/tactic_portfolio_availability_probe/input --out receipts/first_wave/tactic_portfolio_availability_probe --acceptance-out receipts/acceptance/first_wave/tactic_portfolio_availability_probe_fixture_acceptance.json\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Corpus Readiness Mathlib Absence Gate](docs/components.html#component-corpus_readiness_mathlib_absence_gate), [Formal Math Verifier Trace Repair Loop](docs/components.html#component-formal_math_verifier_trace_repair_loop), [Target Shape Tactic Routing Gate](docs/components.html#component-target_shape_tactic_routing_gate), [Undeclared Library Prior Symbol Classifier](docs/components.html#component-undeclared_library_prior_symbol_classifier), [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tactic_portfolio_availability.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Tactic Portfolio Availability\n\nExplains component [Tactic Portfolio Availability Probe](docs/components.html#component-tactic_portfolio_availability_probe) mechanism [validates public tactic availability projection](docs/rules-and-ideas.html#lattice-mechanism-mechanism-tactic-portfolio-availability-probe-validates-public-tactic-availability-projection) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`tactic_portfolio_availability_probe` is the public component that turns tactic callability into an explicit artifact before routing or proof search treats a tactic as usable.\n\nThe fixture is copied from real source system: the 2026-05-11 `PROVER_PROOF_STATE_SEARCH_CURRICULUM` smoke run's Lean/Std tactic affordance probe. It records compile-status rows for `rfl`, `decide`, `omega`, `simp`, `simp_all`, `grind`, `native_decide`, and `aesop`, with source digests for the run-level affordance probe, the `portfolio_core_v0` tactic availability artifact, and the paired corpus-readiness boundary. The Mathlib-dependent `aesop` row is marked `environment_fail` because the paired environment probe reports `mathlib_lake_project_import_available=false`.\n\nThe component validates:\n- every tactic has an environment-scoped `compile_status`;\n- Mathlib-dependent tactics are not marked available without a passing Mathlib import probe;\n- downstream consumers reference only tactics present in the probe portfolio;\n- proof bodies, raw model-output data, benchmark claims, launch-scope decision, and non-public paths stay out of the public artifact.\n\nThe generated board is a callability map, bounded evidence evidence. It can make target-shape routing cheaper and more honest, but it cannot prove a goal, widen Lean/Lake authority, use external model services, claim benchmark performance, or include launch operations.\n\nThe result record contract reports `body_material_status=copied_non_secret_macro_body_with_provenance`, `tactic_availability_status=real_lean_std_tactic_affordance_probe_rows`, source digests, target refs, and `secret_exclusion_scan`. It does not use body-redaction or non-public-state-scan grammar as product evidence.\n\n###### Purpose\n\nA tactic name is not a usable tactic. `aesop` is callable only if the surrounding Lean and Std environment actually carries the imports it needs; `omega` is callable in one project layout and not in another. Routing or proof search that trusts a bare tactic name will reach for tactics that the current environment cannot run, and then misread the resulting failure as a property of the goal rather than a property of the environment. This component answers one question: in the observed Lean/Std environment, which tactics were actually callable, and on what evidence?\n\nThe interesting part is how it treats failure. A copied probe row that reports a Lean `FAIL` is not flattened into a single \"unavailable\" verdict. When a tactic declares `requires_mathlib` and the paired environment probe reports that the Mathlib import is absent, the failure is classified as `environment_fail` with the reason `MATHLIB_IMPORT_MISSING`. The same Lean `FAIL` for a tactic that does not depend on Mathlib is classified as `compile_fail`. The distinction keeps a missing import from masquerading as a broken tactic, and it preserves Mathlib absence as a recorded fact about the environment rather than discarding it. A downstream router can then re-attempt the same tactic in a different environment instead of striking it off permanently.\n\nThe second deliberate choice is that none of this is a measurement of quality. The component copies probe durations and bands them as `fast`, `moderate`, or `slow` so a router can prefer a cheaper available tactic, but the latency profile is stamped as environment-scoped, not benchmark authority. Callability and speed in one observed environment are useful for cheaper routing; they are explicitly not evidence that a tactic is correct, that a goal was proved, or that Lean was rerun by this component.\n\n###### Shape\n\nSource refs\n\nTactic portfolio availability probe `tactic_portfolio_availability_probe` Environment probe `mathlib_lake_project_import_available` Diagram source\n\n```text\nflowchart TD A[\"Copied Lean/Std affordance probe rows (compile_status, requires_mathlib, duration_ms)\"] --> B[\"tactic_portfolio_availability_probe\"] C[\"Environment probe mathlib_lake_project_import_available\"] --> B B --> D{\"Copied compile_status\"} D -->|PASS| E[\"available band duration fast / moderate / slow\"] D -->|FAIL + requires_mathlib + Mathlib absent| F[\"environment_fail reason MATHLIB_IMPORT_MISSING\"] D -->|FAIL otherwise| G[\"compile_fail\"] E --> H[\"Availability board for target-shape routing\"] F --> H G --> H I[\"Downstream tactic reference\"] --> J{\"Tactic in probed portfolio?\"} J -->|no| K[\"Rejected: unprobed tactic referenced\"] J -->|yes| H B --> L[\"metadata-only fixture and bundle result records no proof, Lean, or provider bodies\"] L --> M[\"Generated paper-module row and validation result records\"]\n```\n\nThe flow is deliberately smaller than the generated doctrine-lattice graph.\n\n###### Reader Evidence Routing\n\nRead this page in four passes:\n1. Start with the bundle source row at `core/paper_module_capsules.json::paper_modules[40:paper_module.tactic_portfolio_availability]`. It names the public component subject, mechanism subject, resolved code locus, Microcosm concept, governing principles, axioms, and sibling paper-module dependencies that generate the relationship edges.\n2. Inspect the runtime system at `src/microcosm_core/organs/tactic_portfolio_availability_probe.py`. The load-bearing symbols are `run`, `run_availability_bundle`, `_build_result`, `_write_receipts`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`; those are the code-loci symbols that make the paper module about an executable component instead of a prose topic.\n3. Reproduce the evidence floor with the fixture input `fixtures/first_wave/tactic_portfolio_availability_probe/input`, the exported bundle `examples/tactic_portfolio_availability_probe/exported_tactic_portfolio_availability_bundle`, the focused test `tests/test_tactic_portfolio_availability_probe.py`, and the paper-module corpus check. Treat the result records as environment-scoped tactic-callability evidence only; validation result records do not widen the proof boundary, scope limit, launch posture, provider posture, or benchmark posture.\n\n###### Prior Art Grounding\n\nThe module is patterned after feature-detection probes and proof-assistant tactic inventories. GNU Autoconf's configure workflow established the habit of testing local capability before relying on it; Lean's tactic documentation shows that tactic use is environment- and goal-sensitive, so a tactic name is not enough to justify downstream routing. This component applies that older probe discipline to Microcosm: it records which tactics were callable in the observed Lean/Std environment and preserves Mathlib-dependent absence as evidence, without treating callability as proof quality.\n\nPrior-art anchors:\n- GNU Autoconf feature/configuration probing: https://ftp.gnu.org/old-gnu/Manuals/autoconf-2.57/html_chapter/autoconf.html\n- Lean 4 tactic documentation: https://lean-lang.org/theorem_proving_in_lean4/Tactics/\n\nPrimary commands:\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThe expected projection row is `paper_module.tactic_portfolio_availability` with 18 generated relationship edges, no unpopulated selective relations, Mermaid status `available_from_capsule_edges`, and Atlas status `linked_from_capsule_edges`. These checks validate environment-scoped tactic availability rows and bundle result records only; they do not turn callability into proof quality, benchmark performance, Mathlib proof authority, or launch-scope decision.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe JSON bundle and generated row prove only environment-scoped tactic callability evidence: copied Lean/Std tactic affordance rows, compile-status rows, Mathlib absence evidence, downstream tactic-reference checks, source digests, secret-exclusion checks, negative cases, and validation result records. They do not prove formal-result correctness, expand Lean or Lake authority, use external model services, claim benchmark performance, export non-public paths, include launch operations or public sharing, or treat tactic callability as proof quality.\n\n###### Scope limit\n\nThis component is environment-scoped tactic callability evidence only. It does not establish formal-result correctness, expand Lean/Lake authority, use external model services, claim benchmark performance, export non-public paths, include launch operations, or treat tactic callability as proof quality.\n\nTarget Shape Tactic Routing Gate Records an allow-or-reject decision and reason for each proof tactic before any proof runs. 3/5\n\nDoes Before a proof is attempted, this component checks a list of candidate proof tactics for a given goal and writes down an allow-or-reject decision, with a plain reason, for each one. Rejections fall into three kinds: the tactic isn't actually available in the declared environment, it was never listed in the environment's tested set of tactics, or it simply doesn't fit the kind of goal being proved. The resulting record shows, tactic by tactic, exactly what was admitted or blocked and why, instead of an opaque \"we tried these\" claim. It only inspects and records the routing decision over references that already exist; it never runs a prover or proves anything itself.\n\nScope limit It only inspects and records the projection mechanics of pre-execution tactic-routing references \u2014 emitting per-tactic allow/reject decisions with reasons. It does not run Lean/Lake, does not establish or judge the correctness of any goal, emits no proof bodies, makes no external model access, performs no post-execution route selection, reports no benchmark claims or maturity, and excludes launch.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.cli target-shape-tactic-routing-gate run-routing-bundle --input examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle --out receipts/runtime_shell/demo_project/organs/target_shape_tactic_routing_gate\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Formal Math Verifier Trace Repair Loop](docs/components.html#component-formal_math_verifier_trace_repair_loop), [Formal Evidence Cell Anchor Resolver](docs/components.html#component-formal_evidence_cell_anchor_resolver), [Proof Diagnostic Evidence Spine](docs/components.html#component-proof_diagnostic_evidence_spine), [Tactic Portfolio Availability Probe](docs/components.html#component-tactic_portfolio_availability_probe), [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/target_shape_tactic_routing.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Target Shape Tactic Routing\n\nExplains component [Target Shape Tactic Routing Gate](docs/components.html#component-target_shape_tactic_routing_gate) mechanism [validates public tactic routing boundary](docs/rules-and-ideas.html#lattice-mechanism-mechanism-target-shape-tactic-routing-gate-validates-public-tactic-routing-boundary) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`target_shape_tactic_routing_gate` is the public Microcosm component for the pre-execution tactic admissibility layer.\n\nIt turns real problem-domain, failure-class, and graph-update candidate refs from the formal-math evaluation pipeline into route decisions: which tactics are admitted, which are rejected as unavailable, which are rejected as unprobed, and which are rejected because they do not match the declared goal shape.\n\n###### Purpose\n\nA proof attempt is expensive, and most of that cost is spent on tactics that were never going to work: tactics the environment cannot run, tactics absent from the probe portfolio, or tactics that do not match the shape of the goal. This component answers one question before any Lean call is made: given the target shape and the current availability probe, which tactics may a route even attempt?\n\nThe decision is deliberately made early. Routing happens before execution, so a case that carries Lean result records, execution results, or a post-execution stage is rejected outright rather than trusted. The point is to decide admissibility from evidence that already exists, not from the outcome of the attempt the gate is meant to filter.\n\nWhat is unusual is that the gate recomputes the choice rather than accepting the declared one. Each target shape carries a small preferred-tactic order (for example `omega` for integer linear arithmetic, `decide` for closed natural-number decisions). The gate walks that order, skips any preferred tactic that is unprobed or unavailable, records why it skipped, and falls back to the next allowed candidate or to a default safe order for shapes it does not recognise. A route whose declared selection disagrees with this computed preference is flagged rather than honoured. The route is a claim about what should run; the gate treats it as something to check, not something to believe.\n\n###### Shape\n\nSource refs\n\nJSON bundle `paper_module.target_shape_tactic_routing` Generated structured source record `paper_modules/target_shape_tactic_routing.json` Runtime component `target_shape_tactic_routing_gate.py` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.target_shape_tactic_routing\"] structured source record[\"Generated structured source record paper_modules/target_shape_tactic_routing.json\"] Component[\"Runtime component target_shape_tactic_routing_gate.py\"] Portfolio[\"Tactic probe portfolio available/unavailable tactic ids\"] Routes[\"Target-shape route cases pre_execution selected tactics\"] SourceFloor[\"Copied Ring2 source artifacts 4 body imports, body_in_receipt=false\"] Decisions{\"Route admissible before proof execution?\"} Result records[\"Result records result, board, validation, sign-off\"] Tests[\"Focused tests negative cases and digest checks\"] Ceiling[\"Scope limit no Lean/Lake, proof, provider, post-execution, launch\"] Bundle --> structured source record Bundle --> Component Component --> Portfolio Component --> Routes Portfolio --> Decisions Routes --> Decisions SourceFloor --> Decisions Decisions --> Result records Tests --> Result records Result records --> Ceiling\n```\n\n###### Technical Mechanism\n\nThe named mechanism `mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary` is a fail-closed scorer over two public input planes: the tactic probe portfolio and the target-shape route cases. `_build_result` loads the fixture or exported bundle payloads, scans the inputs and copied source artifacts for forbidden body material, derives known/available/unavailable tactic sets, scores every route case, checks copied Ring2 source-artifact digests, and emits metadata-only result, board, validation, and sign-off result records.\n\nFor each route case, `_decision_for_tactic` rejects a candidate before selection if the tactic id is absent from the public probe portfolio, marked unavailable, or outside the case's declared `allowed_tactic_ids`. Only a tactic that is probed, available, and target-shape-admissible can receive `TARGET_SHAPE_ADMISSIBLE`. `_shape_preferred_selection` then applies the local target-shape preference map, records the unknown-shape default fallback when no specific map exists, and records the preferred-unavailable fallback when the first preferred tactic is known but not usable. `_route_integrity_findings` turns any unavailable admission, unprobed admission, post-execution route, or declared-selection mismatch into typed findings.\n\nThe proof consumer is `tests/test_target_shape_tactic_routing_gate.py`: it asserts seven `pre_execution` route cases, shape-preferred selection for the real Ring2 cases, unknown-shape and unavailable-Mathlib fallback behavior, rejection of mutated shape and availability inputs, exported-bundle sign-off, four copied source artifacts with digest verification, compact card omission of the full routing board, and result record text without non-public paths or body fields. Those tests consume the same fixture and exported-bundle surfaces named by the mechanism row, so this page's evidence is the runnable route-reference and result record contract rather than a prose-only claim.\n\nThe governing lattice stays explicit: the bundle binds the module to `concept.formal_math_and_proof_witness_bundle`, principles `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-9`, axioms `AX-1`, `AX-2`, `AX-5`, `AX-7`, and `AX-8`, and dependency modules for tactic portfolio availability, formal-math readiness, proof-diagnostic evidence, verifier-trace repair, and formal evidence-cell anchor resolution. The standard narrows that lattice to one allowed claim: public pre-execution route cases may admit only tactics that were both probed and available before proof execution. The same standard forbids widening this mechanism into formal-result correctness, Lean/Lake execution, external model access, proof or provider body export, post-execution route authority, publishing-scope decision, or launch-scope decision.\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[41:paper_module.target_shape_tactic_routing]` names `source_authority: json_capsule`, subjects component:target_shape_tactic_routing_gate and `mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary`, the resolved code locus `src/microcosm_core/organs/target_shape_tactic_routing_gate.py`, and generated projection statuses `mermaid.status: available_from_capsule_edges` plus `atlas_card.status: linked_from_capsule_edges`.\n- Generated structured source record: `paper_modules/target_shape_tactic_routing.json` carries `relationships.edges` for the bundle subjects, concept/principle/axiom refs, dependency paper modules, and code locus; `relationships.unpopulated_selective_relations: []`; and scope boundaries that the JSON row does not establish runtime correctness, launch-scope decision, or whole-system completeness.\n- Runtime contract: `standards/std_microcosm_target_shape_tactic_routing_gate.json` limits the allowed claim to pre-execution tactic admission from probed, available tactics; its `required_fields` bind `tactic_portfolio_availability.tactics[].tactic_id`, `availability_status`, `target_shape_routes.route_cases[].target_shape`, `allowed_tactic_ids`, `selected_tactic_id`, and `route_stage`.\n- Source-body accounting: `examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle/source_module_manifest.json` records `source_import_class: copied_non_secret_macro_body`, `module_count: 4`, `body_in_receipt: false`, three `verified_public_safe_private_path_rewrite` rows, and one `exact_copy` row.\n- Fixture/bundle behavior: `examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle/target_shape_routes.json` has seven `pre_execution` route cases, while `tactic_portfolio_availability.json` marks `decide`, `omega`, `simp_all`, and `rfl` available and `aesop` unavailable.\n- Result record floor: `receipts/first_wave/target_shape_tactic_routing_gate/target_shape_tactic_routing_result.json`, `target_shape_tactic_routing_board.json`, `target_shape_tactic_routing_validation_receipt.json`, and result records/sign-off/first_wave/target_shape_tactic_routing_gate_fixture_acceptance.json report `status: pass`, `route_case_count: 7`, `copied_source_artifact_count: 4`, `source_artifacts_pass: true`, `missing_negative_cases: []`, `secret_exclusion_scan.blocking_hit_count: 0`, and authority flags with Lean/Lake, proof, provider, post-execution routing, and launch-scope decision set false.\n- Test boundary: `tests/test_target_shape_tactic_routing_gate.py` checks observed negative cases, shape-preferred selection, unknown-shape and Mathlib-unavailable fallback, exported-bundle sign-off, source-module digest verification, compact card omission of full boards, and result record output without non-public paths or body fields.\n\n###### Reader Evidence Routing\n\nRead this module as a pre-execution admissibility gate, not as a proof attempt. The primary reader path is:\n- Start with the problem-domain, failure-class, graph-update candidate, and tactic-probe refs in the fixture input. They are the public route evidence the gate is allowed to inspect before any Lean/Lake work in the formal-math evaluation and premise-retrieval pipeline.\n- Compare each target-shape route case against the selected tactic ids and rejection reasons: admitted tactics must match both the declared goal shape and the public availability probe.\n- Inspect negative cases before the happy path. The important behavior is that unavailable tactics, unprobed tactics, proof/provider body leakage, post-execution routing, and launch overclaims all fail closed.\n- Use the structured source record only for structural lattice proof: it confirms subjects, code loci, doctrine refs, and dependency edges; it does not establish the tactic route can solve the target.\n\n###### Runtime Surfaces\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.target_shape_tactic_routing_gate run --input fixtures/first_wave/target_shape_tactic_routing_gate/input --out receipts/first_wave/target_shape_tactic_routing_gate\nPYTHONPATH=src python3 -m microcosm_core.cli target-shape-tactic-routing-gate run-routing-bundle --input examples/target_shape_tactic_routing_gate/exported_target_shape_tactic_routing_bundle --out receipts/runtime_shell/demo_project/organs/target_shape_tactic_routing_gate\n```\n\n###### Negative Cases\n- `unavailable_tactic_admitted` rejects an `aesop` route while Mathlib is absent.\n- `unprobed_tactic_allowed` rejects a tactic absent from the public probe portfolio.\n- `proof_body_leakage` rejects proof/provider/Lean body fields.\n- `post_execution_route` rejects route selection after execution evidence.\n- `release_overclaim` rejects proof, provider, Lean/Lake, public sharing, and launch-scope decision overclaims.\n\n###### Prior Art Grounding\n\nThe routing layer follows established proof-search and policy-gating patterns: match a goal shape to methods that are known to be available before spending runtime on them. Lean's tactic documentation supplies the local proof-assistant context for goal-directed tactic choice, while Isabelle/Sledgehammer represents a mature prior-art pattern for selecting external provers and relevant facts from a goal. Microcosm narrows that idea to a pre-execution admissibility filter: target shape, allowed references, and current tactic availability must line up before a tactic route can be exported.\n\nPrior-art anchors:\n- Lean 4 tactic documentation: https://lean-lang.org/theorem_proving_in_lean4/Tactics/\n- Isabelle Sledgehammer user guide: https://isabelle.in.tum.de/doc/sledgehammer.pdf\n\n###### Why It Matters\n\nAfter corpus readiness and strategy scoring, Microcosm needs a visible gate that prevents wasted or misleading proof attempts. This component shows that gate over the formal-math evaluation and premise-retrieval pipeline already feeding verifier repair, evidence anchoring, and proof diagnostics: a tactic is not tried just because it exists; it is admitted only when the target shape and the public availability probe both allow it.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThese checks validate route-reference fixture and bundle result records only; they do not widen the no-Lean/no-proof scope limit.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component does not run Lean or Lake and does not establish a target. It validates only the route references that must exist before a proof attempt in the formal-math evaluation and premise-retrieval pipeline: tactic probe availability, target-shape route cases, selected tactic ids, failure-class refs, graph-update candidate refs, and negative-case result records.\n\nForbidden outputs include proof bodies, provider bodies, post-execution route selection, Lean result record claims, external model access, launch claims, and Mathlib-dependent proof authority.\n\n###### Scope limit\n\nThis module covers only public pre-execution tactic routing evidence: the route references used before a formal proof attempt, tactic probe availability, target-shape cases, selected tactic ids, failure-class refs, graph-update candidate refs, negative-case result records, source-module digest evidence, and validation result records. It does not run Lean or Lake, prove formal-result correctness, export proof bodies or provider bodies, authorize post-execution route selection, use external model services, claim Mathlib-dependent proof authority, authorize public sharing, include launch operations, or prove whole-system correctness.\n\nLean Std Premise Index Lists a fixed catalog of public Lean building blocks and confirms none hides proof text or test answers. 3/5\n\nDoes Presents a small, fixed catalog of Lean standard-library \"premises\" (named building blocks like facts about numbers, booleans, lists, and basic logic) along with the labels and source references that say where each one comes from. It shows what proof ingredients are on the table and that they were copied from public Lean sources, with no hidden proof text, no Mathlib, and nothing that secretly gives away test answers. It only checks and displays this catalog; it does not run Lean or prove anything.\n\nScope limit It only validates the projection of premise metadata and copied source bodies; it does not run Lean or Lake, prove any theorem correct, expose proof bodies or oracle-needed ids, use external model services, produce benchmark claims, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.lean_std_premise_index run --input fixtures/first_wave/lean_std_premise_index/input --out receipts/first_wave/lean_std_premise_index --acceptance-out receipts/acceptance/first_wave/lean_std_premise_index_fixture_acceptance.json\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Formal Math Verifier Trace Repair Loop](docs/components.html#component-formal_math_verifier_trace_repair_loop), [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel), [Mathematical Strategy Atlas Hypothesis Scorer](docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer), [Undeclared Library Prior Symbol Classifier](docs/components.html#component-undeclared_library_prior_symbol_classifier)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/lean_std_premise_index.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Lean/Std Premise Index\n\nExplains component [Lean Std Premise Index](docs/components.html#component-lean_std_premise_index) mechanisms [validates public lean std premise catalog](docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-catalog) [validates public lean std premise index](docs/rules-and-ideas.html#lattice-mechanism-mechanism-lean-std-premise-index-validates-public-lean-std-premise-index) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`lean_std_premise_index` is the closed public premise-index lane for the formal-math slice. It validates premise metadata and selected Ring2 premise-retrieval source result record bodies that a cold reader can inspect without importing Mathlib, exposing proof bodies, or relying on private source run state.\n\n###### Purpose\n\nA premise index is the catalogue a theorem-proving system reads before it tries to prove anything: a list of the named lemmas and definitions it is allowed to cite, with enough metadata to retrieve the relevant ones. This component answers a narrower question. Given that such an index already exists inside a private Ring2 benchmark run, can a cold reader inspect its public shape and be sure that what they are reading is a faithful copy of the real thing, and not a separate hand-written stand-in?\n\nThe answer rests on one design choice that is worth noticing. The validator does not just describe eleven premise rows; it opens the declared source artifact from the Ring2 premise-retrieval run, recomputes its SHA-256, and checks every public row against the matching source row by `premise_id`. The only permitted difference is a path rewrite: a raw Lean toolchain path becomes a public `lean-toolchain://.../Init/...` reference, so the reader sees where a lemma lives in the standard library without seeing a private filesystem. If the public catalogue ever drifts from the source it claims to copy, the digest or the row-signature comparison fails and the result record is blocked.\n\nThe interesting tension is the line between a useful index and a leaked answer key. A premise index for a benchmark is one edit away from telling a solver exactly which lemmas it needs. So the same pass that admits names, namespaces, retrieval terms, and train/dev/test eligibility rejects the things that would turn the catalogue into proof authority: Mathlib references, proof bodies, the oracle-needed premise ids that name the answer, and any flag that authorises tuning on the test split. The catalogue stays inspectable precisely because those are kept out.\n\n###### Shape\n\nThis module is a cold-reader map from a JSON bundle and copied public Lean/Std premise artifacts into metadata-only validation result records. The readable path is bundle -> generated instance/status -> runtime validator -> fixtures and exported source bundle -> tests and result records -> scope limit; none of those projections expands the closed-index boundary.\n\nSource refs\n\nsource basis: source record `core/paper_module_capsules.json` `paper_module.lean_std_premise_index` generated instance from source record `paper_modules/lean_std_premise_index.json` run / run_index_bundle / scope_limit `src/microcosm_core/organs/lean_std_premise_index.py` closed Lean/Std premise-index contract `standards/std_microcosm_lean_std_premise_index.json` projection_protocol, premise_index, index_policy, negative cases `fixtures/first_wave/lean_std_premise_index/input` source_module_manifest: 6 copied body modules `examples/lean_std_premise_index/exported_lean_std_premise_index_bundle` fixture, manifest, bundle, and runtime-shape checks `tests/test_lean_std_premise_index.py` Result records `receipts/first_wave/lean_std_premise_index` `receipts/runtime_shell/demo_project/organs/lean_std_premise_index` Diagram source\n\n```text\nflowchart TD bundle[\"core/paper_module_capsules.json paper_module.lean_std_premise_index source basis: source record\"] instance[\"paper_modules/lean_std_premise_index.json generated instance from source record Markdown stays reader projection\"] generated[\"Generated status Mermaid: available_from_capsule_edges Atlas: blocked_until_organ_atlas_owner_lane_binds_edges\"] runtime[\"src/microcosm_core/components/lean_std_premise_index.py run / run_index_bundle / scope_limit\"] standard[\"standards/std_microcosm_lean_std_premise_index.json closed Lean/Std premise-index contract\"] fixtures[\"fixtures/first_wave/lean_std_premise_index/input projection_protocol, premise_index, index_policy, negative cases\"] bundle[\"examples/lean_std_premise_index/exported_lean_std_premise_index_bundle source_module_manifest: 6 copied body modules\"] tests[\"tests/test_lean_std_premise_index.py fixture, manifest, bundle, and runtime-shape checks\"] result records[\"result records/first_wave/lean_std_premise_index result records/runtime_shell/demo_project/components/lean_std_premise_index\"] ceiling[\"Scope limit no Lean/Lake, Mathlib, proof bodies, providers, benchmark authority, source-file changes, public sharing, or launch-scope decision\"] bundle --> instance instance --> generated standard --> runtime fixtures --> runtime bundle --> runtime runtime --> tests tests --> result records generated --> ceiling result records --> ceiling\n```\n\n###### Technical Mechanism\n\nThe mechanism is a two-entry validator over copied public artifacts, not a proof engine. `run` reads the first-wave fixture inputs, opens the declared source premise-index source artifact, verifies the declared `source_sha256`, normalizes Lean toolchain paths into `lean-toolchain://.../Init/...` public refs, compares every public row against the source row signature, and then checks the protocol, policy, copied-material contract, namespace coverage, split coverage, negative cases, secret exclusion scan, and scope limit before writing metadata-only result, board, validation, and sign-off result records. `run_index_bundle` applies the same public boundary to the exported bundle and requires the source-module manifest to verify six copied body-material files by source ref, target ref, digest, line count, byte count, and source-to-target equivalence while keeping body text out of result records.\n\nThe proof consumer is therefore concrete and local: `tests/test_lean_std_premise_index.py` asserts that the validator observes all five negative cases, imports the real Ring2 premise-index source artifact, rejects digest, row-count, row-signature, source-ref, source-module digest, and rehash-body-swap mutations, and validates the runtime-shell bundle shape. The positive fixture carries 11 premise rows across `Nat`, `Bool`, `List`, and `Iff`; the source-open body floor carries one normalized Lean/Std premise index plus five Ring2 source result record or pattern bodies. This is evidence of a bounded public premise catalog and copied-source manifest, not evidence of Lean formal-result correctness.\n\nThe governing lattice is source-backed through the bundle-generated instance: `paper_module.lean_std_premise_index` explains the `lean_std_premise_index` component and the two `mechanism.lean_std_premise_index.*` mechanisms, is governed by `concept.formal_math_and_proof_witness_bundle`, cites `P-1`, `P-2`, `P-3`, `P-6`, and `P-8`, abides by `AX-1`, `AX-2`, `AX-5`, and `AX-7`, and depends only on `paper_module.formal_math_premise_retrieval`.\n\n###### Inputs\n- `projection_protocol.json` records source pattern ids, source source refs, public replacement refs, projection result records, omitted material, and copy policy.\n- `premise_index.json` carries public metadata rows: premise id, declaration name, namespace, `Init/` source ref, retrieval terms, and split eligibility.\n- `index_policy.json` keeps the closed-index scope limit explicit.\n- `source_module_manifest.json` records six source-open body imports: the normalized Lean/Std premise index plus five exact bodies from the formal-math premise-retrieval pipeline (source result records and graph-pattern bodies) under `source_modules/`.\n\n###### Prior Art Grounding\n\nThis component is grounded in formal-library indexing and premise-selection work. The [Lean mathematical library](https://arxiv.org/abs/1910.09336) anchors the library-as-corpus side, while [LeanDojo](https://arxiv.org/abs/2306.15626) and [HOList](https://arxiv.org/abs/1904.03241) anchor the need for premise metadata, retrieval splits, and theorem-proving environments that can be inspected by learning systems.\n\nMicrocosm borrows the closed-index discipline: premise ids, declaration names, namespaces, source refs, retrieval terms, split eligibility, and source-module digests are public metadata, while proof bodies and oracle-needed ids remain outside the public boundary. It does not import Mathlib or prove theorems.\n\n###### Negative Cases\n\nThe fixture rejects:\n- Mathlib premise refs;\n- proof-body leakage;\n- oracle-needed premise ids;\n- test-split tuning authority;\n- namespace rows without `Init/` source refs.\n\nThese are stable negative cases because the index is intended to be useful without becoming proof authority.\n\n###### Result records\n\nThe validator emits:\n- `lean_std_premise_index_result.json`;\n- `lean_std_premise_index_board.json`;\n- `lean_std_premise_index_validation_receipt.json`;\n- an sign-off result record under result records/sign-off/first_wave/.\n\nRuntime-shell execution emits `exported_lean_std_premise_index_bundle_validation_result.json` after checking the source-module manifest, target file digests, line counts, byte counts, and secret-exclusion boundary.\n\n###### Reader Evidence Routing\n- Start with the JSON Bundle Binding to identify the source row, generated instance, and scope limit.\n- Use Structured Lattice Bindings only as navigation evidence; the resolved dependency edge points to the premise-retrieval module and does not expand the closed-index proof boundary.\n- Use Inputs and Result records when checking whether public metadata, copied body manifests, and runtime-shell validation stayed body-safe.\n- Use Negative Cases and Scope limit together when deciding whether a proposed public claim exceeds the closed-index boundary.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_lean_std_premise_index.py -q --basetemp=/tmp/microcosm_lean_std_premise_index_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis lane is body only. It does not:\n- run Lean or Lake;\n- import Mathlib;\n- expose proof bodies;\n- expose oracle-needed premise ids;\n- tune on test split truth;\n- use external model services;\n- certify theorem validity;\n- authorize public launch;\n- claim secret export.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that public Lean/Std premise metadata, source refs, retrieval terms, split eligibility, and copied source-module digests can be indexed without exposing proof bodies or oracle-needed ids. It does not run Lean or Lake, import Mathlib, prove formal-result correctness, tune on test split truth, use external model services, include launch operations, or certify secret-export safety.\n\nFormal Math Premise Retrieval Shows which lemmas a plain search surfaces per query, and never leaks proof text or answer keys. 3/5\n\nDoes Given a small copied set of Lean/Std math-lemma descriptions plus some search queries, this component shows which lemmas a plain term-matching search would surface for each query, how it keeps each assembled context within a fixed size budget, and that it never exposes proof text or \"answer-key\" hints (the premise ids a solver would only get to see after the fact). On the bundled first-wave fixture, the result record shows the retrieval mechanism working in miniature alongside deliberate bad inputs (a leaked proof body, leaked answer-key ids, a budget overflow, an attempt to peek at test answers, and an unknown strategy) that the component catches; the leak and budget guards actually fire.\n\nScope limit It only checks that public retrieval metadata is internally coherent, term-scored over a copied index, budget-bounded, and leakage-clean; it does not run Lean/Lake, use external model services, prove any theorem or its own correctness, claim benchmark performance, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python -m microcosm_core.organs.formal_math_premise_retrieval run --input fixtures/first_wave/formal_math_premise_retrieval/input --out receipts/first_wave/formal_math_premise_retrieval\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Formal Math Lean Proof Witness](docs/components.html#component-formal_math_lean_proof_witness), [Formal Math Verifier Trace Repair Loop](docs/components.html#component-formal_math_verifier_trace_repair_loop), [Lean Std Premise Index](docs/components.html#component-lean_std_premise_index), [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel), [Mathematical Strategy Atlas Hypothesis Scorer](docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer), [Ring2 Premise Retrieval Precision Recall Harness](docs/components.html#component-ring2_premise_retrieval_precision_recall_harness)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_premise_retrieval.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Formal Math Premise Retrieval\n\nExplains component [Formal Math Premise Retrieval](docs/components.html#component-formal_math_premise_retrieval) mechanisms [validates public premise retrieval slice](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-slice) [validates public premise retrieval projection](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-premise-retrieval-validates-public-premise-retrieval-projection) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`formal_math_premise_retrieval` is the source-available first real formal-math import slice after the source projection protocol. It turns the source prover lab's premise-index, term-scoring, context-budget, and strategy-selection patterns into a runnable Microcosm component.\n\nIt is still deliberately below proof authority. It validates:\n- Lean/Std premise metadata;\n- query term scoring across public premise ids, namespaces, declaration names, statement excerpts, and retrieval terms;\n- split eligibility;\n- context recipe budgets;\n- public strategy ids;\n- redacted result records;\n- negative cases.\n\nIt does not run Lean or Lake, use external model services, expose proof bodies, expose oracle-needed premise ids, tune on test split truth, claim formal-result correctness, or include launch operations.\n\n###### Purpose\n\nBefore a model can attempt a formal proof, it has to find the right lemmas. A Lean library holds thousands of theorems and definitions, and the useful ones for a given goal are a handful. Premise selection is the step that narrows that library down to candidates worth putting in front of a prover. This component is the smallest honest version of that step: it takes a query, scores every public premise against it, and returns a ranked shortlist.\n\nThe single question it answers is narrow and checkable: given a copied catalogue of public Lean/Std premise metadata, does a transparent term-scoring retrieval return the premises a query should find, without ever touching a proof? Both halves matter. The retrieval has to actually work, so each fixture query carries the premise ids it is expected to surface and the run fails if the shortlist misses them. And the boundary has to hold, so the same run refuses any input that smuggles in a proof body, an oracle answer, or test-split truth.\n\nWhat is unusual is the restraint. The retrieval index is not a learned embedding model and the scoring is not a benchmark claims. It is plain term overlap over fields that a reader can inspect: premise ids, namespaces, declaration names, statement excerpts, and retrieval terms. The interesting claim is therefore not \"this retrieves well\" but \"this retrieves over real, copied Lean metadata and can be audited end to end, and the design forbids the shortcuts that would make a premise-selection result look better than it is\".\n\n###### Shape\n\nSource refs\n\nJSON source record `paper_module.formal_math_premise_retrieval` Runtime component `formal_math_premise_retrieval.py` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record paper_module.formal_math_premise_retrieval\"] --> instance[\"Generated paper-module instance 15 relationship edges\"] instance --> component[\"Runtime component formal_math_premise_retrieval.py\"] subgraph Inputs[\"Public inputs\"] index[\"Premise index copied Lean/Std metadata\"] queries[\"Retrieval queries terms, split, strategy, top_k\"] recipes[\"Context recipes byte budgets\"] negatives[\"Negative-case inputs proof body, oracle ids, test-split tuning, budget, strategy\"] end component --> index component --> queries component --> recipes component --> negatives index --> split[\"Split gate skip premises not in allowed_for_split\"] queries --> split split --> score[\"Term-overlap scoring shared tokens + strategy bonus\"] score --> shortlist[\"Ranked top_k shortlist\"] shortlist --> recall[\"Recall check vs expected premise ids\"] negatives --> reject[\"Required rejections five leakage/overclaim guards\"] recipes --> reject recall --> result records[\"metadata-only result records board, validation, sign-off\"] reject --> result records result records --> ceiling[\"Scope limit metadata coherence, no Lean/Lake, no proof\"]\n```\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[25:paper_module.formal_math_premise_retrieval]` has `source_authority: json_capsule`, three `subjects`, one resolved `code_loci[0].path`, `depends_on` naming `paper_module.formal_math_lean_proof_witness`, and generated projection statuses for Markdown, Mermaid, and Atlas.\n- Generated instance: `paper_modules/formal_math_premise_retrieval.json::paper_module_payload` repeats the bundle `authority_ceiling`, reports Mermaid status `available_from_capsule_edges`, and derives 15 `relationships.edges` with `relationships.unpopulated_selective_relations: []`.\n- Component atlas: `core/organ_atlas.json::organs[9:formal_math_premise_retrieval]` classifies the component in `family: formal_math_and_proof`, cites the runtime locus, and restates that retrieval metadata coherence is not Lean/Lake, provider, theorem-correctness, benchmark, or launch-scope decision.\n- Mechanism rows: `core/mechanism_sources.json::mechanisms[27:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice]` and `core/mechanism_sources.json::mechanisms[37:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection]` point at `src/microcosm_core/organs/formal_math_premise_retrieval.py` and name first-wave, sign-off, and runtime-shell result record refs.\n- Runtime and tests: `src/microcosm_core/organs/formal_math_premise_retrieval.py` exposes `run`, `run_retrieval_bundle`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`; `tests/test_formal_math_premise_retrieval.py` checks 11 premises, 4 queries, 44 considered candidates, five negative cases, metadata-only result records, and compact runtime-shell cards.\n- Result records: `receipts/first_wave/formal_math_premise_retrieval/formal_math_premise_retrieval_result.json` records `status: pass`, 11 premises, 4 queries, 44 considered candidates, five observed negative cases, `missing_negative_cases: []`, and a secret-exclusion scan with `blocking_hit_count: 0`; the exported runtime result record at `receipts/runtime_shell/demo_project/organs/formal_math_premise_retrieval/exported_premise_retrieval_bundle_validation_result.json` records `status: pass`, the same premise/query/candidate counts, no negative cases, and `secret_exclusion_scan.scanned_path_count: 11`.\n- Standard ceiling: `standards/std_microcosm_formal_math_premise_retrieval.json::authority_ceiling` has `status: pass` while keeping `formal_proof_authority`, `lean_lake_authority`, `provider_authority`, and `release_authority` false.\n\n###### Runtime Surfaces\n- Component runner: `python -m microcosm_core.organs.formal_math_premise_retrieval run --input fixtures/first_wave/formal_math_premise_retrieval/input --out receipts/first_wave/formal_math_premise_retrieval`\n- Exported bundle runner: `python -m microcosm_core.organs.formal_math_premise_retrieval run-retrieval-bundle --input examples/formal_math_premise_retrieval/exported_premise_retrieval_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_premise_retrieval`\n- CLI route: `microcosm formal-math-premise-retrieval run-retrieval-bundle`\n- Standard: `standards/std_microcosm_formal_math_premise_retrieval.json`\n- Fixture manifest: `core/fixture_manifests/formal_math_premise_retrieval.fixture_manifest.json`\n\n###### Public Claim\n\nMicrocosm can show a real formal-math retrieval mechanism in miniature:\n- a source-available Lean/Std premise index;\n- public field-haystack term-scored queries;\n- split-aware eligibility;\n- context recipe ceilings;\n- strategy gates;\n- redacted validation result records.\n\n###### How retrieval scoring works\n\nEach premise row contributes five inspectable fields to the haystack: its premise id, namespace, declaration name, statement excerpt, and a list of retrieval terms. A query carries its own terms, a data split, an optional strategy id, a context recipe, and the public premise ids it is expected to return.\n\nScoring is term overlap, computed per query. Both the query and each premise are tokenised into lowercase word counts. A premise is only considered if the query's split appears in that premise's `allowed_for_split` list, which is how test-split leakage is kept out at the structural level rather than by trust. For each eligible premise the score is the summed minimum count of every shared token across the five fields, so a term that appears in both the query and the premise contributes as many points as the smaller of the two counts. A premise that also carries the query's strategy id as a tag gets a single extra point. The ranked list is sorted by score descending, ties broken by premise id, and the top of that list up to the query's `top_k` is taken as the retrieval.\n\nThe retrieval is then graded against itself. Each query declares the public premise ids it should surface, and the component computes recall as the fraction of those expected ids that actually landed in the shortlist. A query that declares expectations but misses any of them blocks the run. In the first-wave fixture this is eleven premises and four queries, scoring forty-four considered candidates in total, and every query is expected to reach full recall.\n\nThe failure mode this guards against is a premise-selection result that looks good because it cheated. The five negative-case inputs each encode one such shortcut: a premise index that ships a proof body, a query that lists the oracle premise ids it is \"meant\" to find, a query that tunes on test-split truth, a context recipe that blows past the byte budget, and a query naming a strategy id outside the allowed set. The run is required to observe all five rejections; if any expected rejection is missing, the whole fixture is blocked rather than passed. Recall over copied real metadata is the positive signal; the refusals are what keep that signal honest.\n\n###### Prior Art Grounding\n\nThis component is grounded in premise-selection and retrieval-augmented theorem proving work. [LeanDojo](https://arxiv.org/abs/2306.15626) is the closest modern anchor because it couples Lean interaction with retrieval-augmented premise selection. Earlier theorem-proving environments such as [HOList](https://arxiv.org/abs/1904.03241) and [GamePad](https://arxiv.org/abs/1806.00608) also motivate extracting proof-state or premise metadata for learning-assisted theorem proving.\n\nMicrocosm borrows the retrieval accounting pattern: premise ids, namespaces, statement excerpts, retrieval terms, split eligibility, context budgets, and strategy gates must be inspectable before premise-retrieval claims are admitted. It does not run Lean/Lake or expose proof bodies.\n\n###### Negative Cases\n- `premise_index_proof_body_forbidden`\n- `query_oracle_ids_forbidden`\n- `test_split_tuning_attempt`\n- `context_recipe_budget_overflow`\n- `unknown_strategy_id`\n\n###### Reader Evidence Routing\n- Start with the JSON Bundle Binding to identify the source record, generated instance, proof boundary, and scope limit.\n- Use Structured Lattice Bindings for navigation; the generated JSON row is the authority for relationship counts and dependency state.\n- Use Runtime Surfaces and Result record Expectations when checking metadata coherence, redaction, leakage checks, and source-available bundle behavior.\n- Use Negative Cases, Scope limit, and Scope limit together before admitting any formal-math public claim.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_math_premise_retrieval.py -q --basetemp=/tmp/microcosm_formal_math_premise_retrieval_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThe component proves only that public retrieval metadata is internally coherent and leakage-checked. The deferred `formal_math_lean_proof_witness` boundary remains unchanged.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that public premise metadata, retrieval terms, split eligibility, strategy gates, and redacted result records are coherent and leakage-checked. It does not run Lean or Lake, prove formal-result correctness, expose proof bodies, authorize oracle-needed premise ids, tune on test split truth, use external model services, approve public sharing, or expand the deferred Lean proof-witness boundary.\n\nFormal Math Verifier Trace Repair Loop Replays how a proof lab turns verifier failures into fixes, with no promotion without a fresh re-run. 3/5\n\nDoes It replays how a proof-lab turns a verifier's failure feedback into a teaching signal, working from copied (non-secret) run data so the failure categories, the repair action tied to each failure, and the rule that nothing gets promoted without a fresh re-run result record are all inspectable. Actual proofs, answer keys, and model outputs are deliberately kept out, so the whole correction loop is visible without exposing any of them.\n\nScope limit It demonstrates control-loop projection mechanics over copied Ring2 run rows only; it does not run Lean/Lake, use external model services, expose proof bodies or oracle premise ids, treat human or provider advice as correctness, prove any theorem, or include launch operations.\n\nRun\n\n```text\nmicrocosm formal-math-verifier-trace-repair-loop run-loop-bundle --input examples/formal_math_verifier_trace_repair_loop/exported_verifier_trace_repair_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_verifier_trace_repair_loop\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Formal Evidence Cell Anchor Resolver](docs/components.html#component-formal_evidence_cell_anchor_resolver), [Proof Diagnostic Evidence Spine](docs/components.html#component-proof_diagnostic_evidence_spine), [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel), [Target Shape Tactic Routing Gate](docs/components.html#component-target_shape_tactic_routing_gate), [Verifier Lab Execution Spine](docs/components.html#component-verifier_lab_execution_spine)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.formal_math_verifier_trace_repair_loop) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Formal Math Verifier Trace Repair Loop\n\nExplains component [Formal Math Verifier Trace Repair Loop](docs/components.html#component-formal_math_verifier_trace_repair_loop) mechanism [validates public verifier trace repair bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-verifier-trace-repair-loop-validates-public-verifier-trace-repair-bundle) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n\nAbides by axioms\n- [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n- [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n\n`formal_math_verifier_trace_repair_loop` is the source-available replay of a source proof-lab pattern over copied Ring2 run system: verifier feedback becomes a teaching signal only after a trace grade, a repair action, a failure-mode ledger append, a curriculum delta, and a cold rerun result record.\n\nIt is deliberately not a Lean/Lake proof component. It sits between the existing readiness, premise retrieval, tactic routing, proof diagnostic, and Lean witness surfaces so a cold reader can inspect real failure taxonomy, graph-update candidates, and oracle-repair contrast rows without seeing proof bodies, oracle premise ids, model-output data bodies, or private run logs.\n\n###### Purpose\n\nA failed proof attempt is cheap to throw away and expensive to learn from. The question this component answers is narrow: can a verifier's failure be turned into a reusable repair signal, on the public side, without that signal quietly inheriting the authority of a real theorem prover? It exists because the interesting work in a proof-repair loop is the bookkeeping, not the proving, and that bookkeeping is where overclaim usually creeps in.\n\nThe design choice worth noticing is that the loop refuses to collapse its stages into a single verdict. A verifier failure only counts as a teaching signal once it carries a trace grade backed by trace events, a repair action named against the verifier failure class it responds to, a failure-mode ledger append, a curriculum delta, and a cold-rerun result record. Each of those is a separate field, and promotion is blocked until the cold-rerun result record is present. The same separation keeps the dangerous material out: proof bodies, oracle-needed premise ids, and model-output data bodies are forbidden keys, so a row may name a failure class without ever exposing the proof or the oracle answer that produced it.\n\nThe failure mode it guards against is stale copied rows pretending to be live proof-lab evidence. The repair rows here are imported from a real Ring2 benchmark run, so the temptation is to treat the copy as if the run were happening now. The realness gate is the answer: it only reaches its top rung when every verifier attempt and curriculum row replays cleanly against the imported source bodies, and the focused tests deliberately perturb an oracle row, a manifest digest, an attempt label, and a curriculum count so that any drift downgrades the verdict rather than passing quietly. A single deterministic toy-theorem rerun is the one thing actually executed here, and it is plain arithmetic over public inputs, not a Lean proof.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Input[\"Fixture input or exported bundle copied Ring2 rows + source-module manifest\"] Protocol[\"Projection protocol copied-material provenance\"] Manifest[\"Source-module manifest digest, line and byte match, body_in_receipt false\"] Secret[\"Secret-exclusion scan proof bodies, oracle ids, model-output data forbidden\"] Attempts[\"Verifier-attempt replay grade needs trace events, repair needs failure class\"] Curriculum[\"Repair-curriculum replay failure-mode ledger, curriculum deltas\"] Promotion[\"Promotion policy requires cold-rerun result record\"] Toy[\"Deterministic toy rerun fail then repair over public inputs\"] Realness[\"Realness gate clean source replay -> top rung; any drift downgrades\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"Scope limit repair-loop accounting, bounded evidence\"] Input --> Protocol Protocol --> Manifest Manifest --> Secret Secret --> Attempts Attempts --> Curriculum Curriculum --> Promotion Promotion --> Toy Attempts --> Realness Curriculum --> Realness Toy --> Realness Realness --> Result records Result records --> Ceiling\n```\n\n###### Technical Mechanism\n\nThe named mechanism `mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle` is a staged public verifier-repair validator, not a proof executor. `_build_result` composes five checks over the fixture or exported bundle: projection-protocol density, copied source-module manifest integrity, verifier attempt replay, repair-curriculum replay, promotion policy, and one deterministic toy-theorem repair rerun. The result is `pass` only when the projection protocol has copied-material provenance, the secret scan has no blocking hits, source modules pass when required, verifier attempts and curriculum rows replay against their imported Ring2 source bodies, promotion requires a cold rerun reference, and the toy rerun succeeds.\n\nThe exported-bundle path is intentionally stricter than the fixture path. `validate_source_module_manifest` requires a source import class, `body_in_receipt: false`, one row for each declared Ring2 source ref, matching target digests, line counts, and byte counts, and a metadata-only `source_open_body_imports` summary. `_validate_attempt_source_replay` then dereferences the premise-run row, oracle-repair contrast row, and graph-update candidate for each verifier attempt. Mismatches become typed findings such as `VERIFIER_TRACE_SOURCE_REPLAY_MISMATCH`, `VERIFIER_TRACE_ORACLE_REPLAY_MISMATCH`, `VERIFIER_TRACE_COLD_RERUN_SOURCE_MISMATCH`, or `VERIFIER_TRACE_CANDIDATE_REPLAY_MISMATCH`; curriculum-source mismatches are checked separately by `validate_repair_curriculum`.\n\nThe realness gate is also mechanical. `_runtime_realness_evidence` reaches the R4 state only for an exported bundle with verified source modules, at least 30 source replay checks, zero source replay mismatches, at least three attempts, at least nine trace events, at least three failure modes, and a passing toy rerun. The focused tests deliberately perturb the oracle source row, a manifest digest, a verifier-attempt source label, and a curriculum source count; each mutation blocks the verdict or downgrades the realness evidence instead of letting stale copied rows masquerade as proof-lab evidence.\n\nThe proof consumer is `tests/test_formal_math_verifier_trace_repair_loop.py`: it asserts five attempts, 15 trace events, five repair actions, three cold-rerun promotions, three toy-theorem failures repaired into four passing rerun inputs, seven exported source modules, 37 source replay checks, compact-card omission and fresh-result record reuse, public-relative result record paths, no private/body fields in result records, and exact source module copies. Those checks consume the same fixture, bundle, source-module manifest, and mechanism row cited by this page, so the evidence is executable replay accounting rather than a prose-only description.\n\nThe governing lattice is deliberately narrow: the bundle binds the module to `concept.formal_math_and_proof_witness_bundle`, principles `P-1`, `P-2`, `P-3`, `P-6`, and `P-8`, axioms `AX-1`, `AX-2`, `AX-5`, and `AX-7`, and dependency modules for the Lean standard premise index, tactic portfolio availability, target-shape tactic routing, and formal-math premise retrieval. The standard allows only copied Ring2 verifier-trace repair result record schemas and metadata-only public fields. It does not widen a passing replay into Lean/Lake authority, formal-result correctness, proof-body evidence, oracle premise authority, provider authority, human-approval proof authority, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[23:paper_module.formal_math_verifier_trace_repair_loop]` sets `source_authority: json_capsule`, binds the component, binds `mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle`, and resolves `src/microcosm_core/organs/formal_math_verifier_trace_repair_loop.py`.\n- Generated instance: `paper_modules/formal_math_verifier_trace_repair_loop.json` reports `paper_module_payload.source_authority: json_capsule`, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, 17 relationship edges, and resolved `paper_module.depends_on.paper_module` edges to the Lean standard premise index, tactic portfolio, target-shape routing, and formal-math premise retrieval modules named by the active standard.\n- Runtime, fixture, and bundle: `src/microcosm_core/organs/formal_math_verifier_trace_repair_loop.py` exposes `run`, `run_loop_bundle`, `validate_source_module_manifest`, `_write_receipts`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `SOURCE_MODULE_MANIFEST_REF`. The fixture input and exported bundle replay copied Ring2 verifier-trace repair metadata, source-module digests, failure classes, repair actions, promotion gates, and one deterministic public toy-theorem rerun.\n- Result record and test floor: `receipts/first_wave/formal_math_verifier_trace_repair_loop/formal_math_verifier_trace_repair_loop_result.json`, `verifier_trace_repair_board.json`, `formal_math_verifier_trace_repair_loop_validation_receipt.json`, and result records/sign-off/first_wave/formal_math_verifier_trace_repair_loop_fixture_acceptance.json are metadata-only evidence. `tests/test_formal_math_verifier_trace_repair_loop.py` checks source-module manifest validation, negative cases, toy rerun evidence, and scope limits.\n- Claim boundary: `standards/std_microcosm_formal_math_verifier_trace_repair_loop.json` and the generated structured source record limit this module to copied Ring2 verifier-trace repair metadata, source-module digests, public fixture result records, and deterministic toy rerun evidence. They do not authorize Lean/Lake authority, formal-result correctness, proof bodies, oracle premise ids, external model access, human approval as proof authority, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\n###### Reader Evidence Routing\n\nThose rows prove reader wiring, not formal-result correctness.\n\nRoute runtime and replay questions through `## Runtime`, `## Receipts`, and the fixture/bundle paths in the validation command. The fixture runner, exported bundle runner, CLI route, standard, and fixture manifest show how verifier-trace repair accounting is replayed over copied public rows without importing proof bodies, oracle-needed premise ids, model-output data bodies, or private logs.\n\nRoute claim-safety questions through `## What It Proves`, `## What It Refuses`, ## Result record Expectations, and ## Scope limit. If the question is whether the repair loop is still body-safe and result record-backed, run the focused pytest and paper-module corpus check before citing this page.\n\n###### Prior Art Grounding\n\nThis component is grounded in interactive theorem-proving feedback loops and learning environments where failed proof attempts become structured training or repair signals. [GamePad](https://arxiv.org/abs/1806.00608) and [HOList](https://arxiv.org/abs/1904.03241) both expose theorem-proving interaction data for machine-learning experiments, while [LeanDojo](https://arxiv.org/abs/2306.15626) reinforces the need to keep proof assistant feedback, retrieval, and proof-state interaction reproducible.\n\nMicrocosm borrows the repair-loop accounting pattern: verifier events, grades, failure classes, repair actions, curriculum deltas, and cold rerun result records are separate fields. It does not treat human or provider advice as formal-result correctness.\n\n###### Runtime\n- Component runner: `python -m microcosm_core.organs.formal_math_verifier_trace_repair_loop run --input fixtures/first_wave/formal_math_verifier_trace_repair_loop/input --out receipts/first_wave/formal_math_verifier_trace_repair_loop`\n- Exported bundle runner: `python -m microcosm_core.organs.formal_math_verifier_trace_repair_loop run-loop-bundle --input examples/formal_math_verifier_trace_repair_loop/exported_verifier_trace_repair_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_verifier_trace_repair_loop`\n- CLI: `microcosm formal-math-verifier-trace-repair-loop run-loop-bundle --input examples/formal_math_verifier_trace_repair_loop/exported_verifier_trace_repair_bundle --out receipts/runtime_shell/demo_project/organs/formal_math_verifier_trace_repair_loop`\n- Standard: `standards/std_microcosm_formal_math_verifier_trace_repair_loop.json`\n- Fixture manifest: `core/fixture_manifests/formal_math_verifier_trace_repair_loop.fixture_manifest.json`\n\n###### What It Proves\n- A public verifier replay can require trace events before trace grades.\n- Copied Ring2 failure rows can feed a repair curriculum without becoming proof authority.\n- A repair action must name the verifier failure class it responds to.\n- A failure-mode ledger update can be represented without proof bodies.\n- Promotion requires a cold rerun result record reference.\n- Human or provider advice stays advisory until checker evidence exists.\n\n###### What It Refuses\n- Proof bodies in public verifier traces.\n- Oracle-needed premise ids in public inputs.\n- model-output data bodies in fixtures or result records.\n- Human approval as checker authority or theorem-quality evidence.\n- launch, public sharing, secret export, or general theorem-proving claims.\n\n###### Result records\n- `receipts/first_wave/formal_math_verifier_trace_repair_loop/formal_math_verifier_trace_repair_loop_result.json`\n- `receipts/first_wave/formal_math_verifier_trace_repair_loop/verifier_trace_repair_board.json`\n- `receipts/first_wave/formal_math_verifier_trace_repair_loop/formal_math_verifier_trace_repair_loop_validation_receipt.json`\n- result records/sign-off/first_wave/formal_math_verifier_trace_repair_loop_fixture_acceptance.json\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_math_verifier_trace_repair_loop.py -q --basetemp=/tmp/microcosm_formal_math_verifier_trace_repair_loop_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.relationships.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/formal_math_verifier_trace_repair_loop.json\n```\n\nExpected generated-row proof: `edge_count: 17`, `mermaid_status: available_from_capsule_edges`, `atlas_status: linked_from_capsule_edges`, `source_authority: json_capsule`, and `unresolved_selective_relation_count: 0`.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe authority boundary is copied Ring2 verifier trace repair public fields only. The component demonstrates control-loop mechanics over real run rows, not formal-result correctness.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that copied Ring2 verifier rows can drive a public verifier-trace repair loop with trace-event requirements, failure-class routing, promotion gates, and metadata-only result records. It does not establish formal-result correctness, expose proof bodies, authorize human or provider advice as proof authority, publish private run logs, approve launch, or certify whole-system correctness.\n\nFormal Evidence Cell Anchor Resolver Resolves each proof-flavored math claim to named evidence and flags ones that overreach or lack backing. 3/5\n\nDoes When the project's writeups make proof-flavored claims about its formal-math work, this component checks each claim against a named piece of recorded evidence and the public reference files in the repo, confirms the claim is no stronger than that evidence allows, and flags claims that have no backing or that overreach. The record shows which claims are anchored to evidence and which are just words, while proof contents and any private file references are kept out of the output.\n\nScope limit It validates claim-to-evidence anchoring mechanics only: claim-to-cell resolution, source-anchor presence, permitted claim strength, copied-source-module digest checks, and leakage refusals. It does not run Lean/Lake, certify theorem or mathematical correctness, expose proof bodies or non-public source refs, use external model services, or include launch operations/public sharing.\n\nRun\n\n```text\nmicrocosm formal-evidence-cell-anchor-resolver run-anchor-bundle --input examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle --out receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Formal Math Verifier Trace Repair Loop](docs/components.html#component-formal_math_verifier_trace_repair_loop), [Proof Diagnostic Evidence Spine](docs/components.html#component-proof_diagnostic_evidence_spine), [Target Shape Tactic Routing Gate](docs/components.html#component-target_shape_tactic_routing_gate)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_evidence_cell_anchor_resolver.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Formal Evidence Cell Anchor Resolver\n\nExplains component [Formal Evidence Cell Anchor Resolver](docs/components.html#component-formal_evidence_cell_anchor_resolver) mechanisms [validates public evidence cell anchor resolution](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchor-resolution) [validates public evidence cell anchors](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-evidence-cell-anchor-resolver-validates-public-evidence-cell-anchors) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`formal_evidence_cell_anchor_resolver` makes Microcosm's formal-math evidence claims inspectable without turning result record summaries into proof authority. It resolves paper-module claims to evidence-cell ids, checks source-anchor refs, records machine-anchor classes, and enforces a claim-strength boundary before any proof-language claim can pass. Its formal-math trace cell anchors the real Ring2 verifier-trace repair result records.\n\nIt is not a theorem prover. It does not execute Lean or Lake, expose proof bodies, expose non-public source refs, use external model services, or claim formal-result correctness. It emits real runtime result records over the imported evidence-cell system, carries digest-bearing Ring2 failure-taxonomy and graph-update source refs, and uses secret-exclusion scanning only for account secret-equivalent or non-result record body payloads.\n\n###### Purpose\n\nProof-adjacent prose is the easiest place for a claim to drift. A paper module can write \"this proves the theorem\" or \"this is certified\" and a cold reader has no cheap way to tell whether the words are backed by a checked artifact or by nothing at all. This component answers one question: when a claim uses proof language, can the words be resolved to a specific piece of public evidence, and does that evidence stay below theorem-correctness authority?\n\nThe mechanism is an evidence cell. A cell is a stable id that stands in for a bundle of result record-backed evidence: its source-anchor refs, a `machine_anchor_class` that names what kind of machine artifact backs it, and the list of claim strengths the cell is allowed to support. The policy `proof_language_requires_machine_anchor` is the rule that makes the resolver useful. A claim that uses proof language must name a cell, the cell must resolve in the registry, and its source anchors must point at files that actually exist on the public path. A claim that uses proof language but names no cell, or names a cell that is not in the registry, lowers the run to a blocked status rather than passing as green prose.\n\nWhat is worth noticing is what the cell id buys. It is a compressed handle: one short reference that a reader can follow back to the real result records behind a claim, instead of inlining proof bodies or trusting narrative. Two boundaries sit on top of that handle. Claim strength is capped by the cell, so a claim cannot assert more than its anchored evidence allows. And human approval is refused as a substitute for a machine anchor, which keeps a sign-off from being treated as proof.\n\n###### Shape\n\nSource refs\n\nsource record `core/paper_module_capsules.json::paper_modules[24]` structured source record source basis: source record `paper_modules/formal_evidence_cell_anchor_resolver.json` runtime locus `src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py` first-wave fixture input `fixtures/first_wave/formal_evidence_cell_anchor_resolver/input` exported evidence-cell anchor bundle `examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle` source-open body manifest `source_module_manifest.json` validation result records `receipts/first_wave/... + receipts/acceptance/...` runtime-shell result record `receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver/...` Diagram source\n\n```text\nflowchart TD Bundle[\"source record core/paper_module_capsules.json::paper_modules[24]\"] --> structured source record[\"structured source record paper_modules/formal_evidence_cell_anchor_resolver.json source basis: source record\"] structured source record --> Mermaid[\"diagram view available_from_capsule_edges\"] structured source record --> Atlas[\"map view blocked_until_organ_atlas_owner_lane_binds_edges\"] structured source record --> Reader[\"this page this page\"] Reader --> Runtime[\"runtime locus src/microcosm_core/components/formal_evidence_cell_anchor_resolver.py\"] Runtime --> Fixture[\"first-wave fixture input fixtures/first_wave/formal_evidence_cell_anchor_resolver/input\"] Runtime --> Bundle[\"exported evidence-cell anchor bundle examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle\"] Bundle --> Manifest[\"source-open body manifest source_module_manifest.json\"] Fixture --> Result records[\"validation result records result records/first_wave/... + result records/sign-off/...\"] Bundle --> BundleReceipt[\"runtime-shell result record result records/runtime_shell/demo_project/components/formal_evidence_cell_anchor_resolver/...\"] Result records --> Ceiling[\"proof boundary + scope limit anchor metadata only, not formal-result correctness\"] BundleReceipt --> Ceiling\n```\n\nRead the diagram left to right: the bundle and generated structured source record name the relationships; the runtime validates fixture and bundle inputs; the result records show what passed; the scope limit prevents any of those surfaces from becoming proof, launch, provider, private-system, or theorem-correctness authority.\n\n###### Reader Evidence Routing\n\nA cold reader should inspect this module through these system surfaces, in order:\n1. Authority seed: `core/paper_module_capsules.json::paper_modules[24:paper_module.formal_evidence_cell_anchor_resolver]`. This is the source record that binds the Markdown projection, generated JSON, runtime locus, fixture, exported bundle, mechanism rows, and scope boundaries.\n2. Generated structured source record: `paper_modules/formal_evidence_cell_anchor_resolver.json`. Check `relationships.source_authority`, the 15 relationship edges, the `generated_projections` statuses, `unpopulated_selective_relations`, and the bundle-carried scope limit before trusting any prose summary.\n3. Runtime locus: `src/microcosm_core/organs/formal_evidence_cell_anchor_resolver.py`. The relevant runtime symbols are `run`, `run_anchor_bundle`, `validate_source_module_manifest`, `_build_result`, `_source_module_summary_card`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_REF`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n4. Fixture and exported bundle: `fixtures/first_wave/formal_evidence_cell_anchor_resolver/input`, `examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle`, and `examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle/source_module_manifest.json`. The first-wave fixture exercises negative cases and Ring2 result record anchors; the exported bundle validates six source-open body modules by digest while keeping source bodies out of result records.\n5. Result records: `receipts/first_wave/formal_evidence_cell_anchor_resolver/formal_evidence_cell_anchor_resolver_result.json`, `receipts/first_wave/formal_evidence_cell_anchor_resolver/evidence_cell_anchor_board.json`, `receipts/first_wave/formal_evidence_cell_anchor_resolver/formal_evidence_cell_anchor_resolver_validation_receipt.json`, result records/sign-off/first_wave/formal_evidence_cell_anchor_resolver_fixture_acceptance.json, and `receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle_validation_result.json`. These result records report pass/fail state, metadata-only public refs, negative-case observations, and explicit `release_authorized=false`, `provider_calls_authorized=false`, `lean_lake_execution_authorized=false`, `formal_proof_authority=false`, and `theorem_correctness_authority=false` ceilings.\n6. Focused checks: `tests/test_formal_evidence_cell_anchor_resolver.py`, `scripts/build_doctrine_projection.py --check-paper-module-corpus`, and the JSON-row proof query in the validation section below. Those checks validate the reader route and generated-row parity; they do not authorize public sharing or formal proof claims.\n\n###### Prior Art Grounding\n\nThis component is grounded in provenance and proof-certificate work where claims must point at checkable evidence rather than untyped narrative. The [W3C PROV](https://www.w3.org/TR/prov-overview/) model is a general anchor for linking entities, activities, and agents in an evidence graph, while [Proof-Carrying Code](https://www.usenix.org/legacy/publications/library/proceedings/osdi96/full_papers/necula/html/node2.html) and small-kernel proof assistants motivate separating a certificate or anchor from the trusted checker that bounds its meaning.\n\nMicrocosm borrows the anchor-resolution pattern: proof-language claims must name evidence-cell ids, source anchors, machine-anchor classes, and claim strength limits. It does not turn metadata cells into theorem-correctness authority.\n\n###### Runtime\n- Component runner: `python -m microcosm_core.organs.formal_evidence_cell_anchor_resolver run --input fixtures/first_wave/formal_evidence_cell_anchor_resolver/input --out receipts/first_wave/formal_evidence_cell_anchor_resolver`\n- Exported bundle runner: `python -m microcosm_core.organs.formal_evidence_cell_anchor_resolver run-anchor-bundle --input examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle --out receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver`\n- CLI: `microcosm formal-evidence-cell-anchor-resolver run-anchor-bundle --input examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle --out receipts/runtime_shell/demo_project/organs/formal_evidence_cell_anchor_resolver`\n- Standard: `standards/std_microcosm_formal_evidence_cell_anchor_resolver.json`\n- Fixture manifest: `core/fixture_manifests/formal_evidence_cell_anchor_resolver.fixture_manifest.json`\n\n###### What It Establishes As Evidence Routing\n- Proof-language claims must resolve to a public evidence cell before this reader treats them as routed evidence.\n- Evidence cells must carry source-anchor refs.\n- Machine-anchor metadata is visible as metadata, not formal-result correctness.\n- Claim strength is bounded by the resolved cell.\n- Secret, account secret-equivalent, or non-result record body payloads must have explicit exclusion result records.\n- The verifier-trace cell is anchored to the first-wave `formal_math_verifier_trace_repair_loop` result, board, validation result record, and Ring2 failure-taxonomy source digest.\n\n###### What It Refuses\n- Unknown evidence-cell ids used as proof authority.\n- Proof-language claims without evidence-cell ids.\n- Proof bodies in public claim rows.\n- non-public source refs in public claim or cell rows.\n- Human approval as proof authority.\n- Theorem-correctness claims from metadata cells.\n- launch, public sharing, secret export, or provider authority.\n\n###### Result records\n- `receipts/first_wave/formal_evidence_cell_anchor_resolver/formal_evidence_cell_anchor_resolver_result.json`\n- `receipts/first_wave/formal_evidence_cell_anchor_resolver/evidence_cell_anchor_board.json`\n- `receipts/first_wave/formal_evidence_cell_anchor_resolver/formal_evidence_cell_anchor_resolver_validation_receipt.json`\n- result records/sign-off/first_wave/formal_evidence_cell_anchor_resolver_fixture_acceptance.json\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_evidence_cell_anchor_resolver.py -q --basetemp=/tmp/microcosm_formal_evidence_cell_anchor_resolver_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.relationships.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/formal_evidence_cell_anchor_resolver.json\n```\n\nExpected generated-row proof: `edge_count: 15`, `mermaid_status: available_from_capsule_edges`, `atlas_status: blocked_until_organ_atlas_owner_lane_binds_edges`, `source_authority: json_capsule`, and `unresolved_selective_relation_count: 0`.\n\n###### Scope boundary\n\n###### Limitations\n\nThis module is a proof-adjacent evidence router, not a proof system. The fixture proves a bounded resolver contract over three paper claims, three evidence cells, seven declared negative-case classes, eight source anchors, three machine anchors, and zero copied source modules in fixture mode. The exported bundle proves the same public runtime shape over three claims, three evidence cells, five source anchors, six copied source-open body modules, and metadata-only result records. These counts are the claim boundary, not a scale claim about the formal-math corpus.\n\nThe source-module proof is digest and authority-ref parity for the six exported body modules named by the bundle manifest. It does not establish that every source formal-math source file has been imported, that future source drift is absent, or that copied body availability confers public launch-scope decision. A digest match also excludes exporting proof bodies, non-public source refs, model-output data, oracle material, account secrets, browser UI/operator UI state, or source notes.\n\nThe checker rejects unknown cells, missing source anchors, proof language without cells, non-public refs, proof bodies, theorem-correctness overclaims, and human approval as proof authority. That refusal coverage does not certify Lean or Lake execution, formal-result correctness, proof completeness, benchmark performance, deployment posture, or whole-system correctness.\n\n###### Scope limit\n\nThe authority boundary is evidence-cell anchor resolution backed by real runtime result records. The component makes claim boundaries legible; it does not certify mathematical truth.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that public evidence-cell anchor metadata can bind proof-language claims to result record-backed cells and exclude private bodies, proof bodies, model-output data, oracle material, and secret-equivalent refs. Its generated Mermaid/Atlas statuses and relationship counts are JSON-bundle projections; they do not certify formal-result correctness, proof completeness, launch-scope decision, publishing-scope decision, provider authority, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe lattice edge is not just that this page \"mentions\" formal math evidence. The generated structured source record binds the page to one component, two mechanism rows, `concept.formal_math_and_proof_witness_bundle`, `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, `AX-1`, `AX-2`, `AX-5`, `AX-7`, the sibling `paper_module.formal_math_verifier_trace_repair_loop`, and the resolved runtime source locus. That is the governing shape: proof-adjacent claims enter as paper-claim rows, evidence-cell ids, source anchors, machine-anchor classes, and copied source-module manifests; `_build_result` recomputes the pass or blocked status from those lower-level artifacts; `_source_module_summary_card` and `run_anchor_bundle` export compact, metadata-only evidence.\n\n`P-1` and `AX-1` require a recomputed checker result rather than a label. `P-2` and `AX-2` keep the scope limit at the strength of the resolver and its certificates. `P-3` makes the small resolver/manifest checker the authority surface instead of broad proof-language prose. `P-6`, `P-8`, `AX-5`, and `AX-7` explain the blocked path: missing anchors, proof bodies, non-public source refs, source-module digest drift, theorem-correctness language, or human approval as proof authority must lower the status or return a refusal with evidence rather than preserving a green reader claim.\n\nThe focused proof consumer is `tests/test_formal_evidence_cell_anchor_resolver.py`. It asserts the fixture path observes all seven expected negative cases, resolves three claims to three evidence cells, records eight source anchors and three machine anchors, anchors the verifier-trace row to Ring2 result records, keeps formal-proof and theorem-correctness authority false, validates the exported bundle with six copied source modules, rejects theorem-correctness overclaims, rejects digest and rehashed-body swaps, and keeps command-card result records compact and metadata-only. Those checks are the local mechanism witness for the lattice relation.\n\n###### Source-Open Body Floor\n\nThe exported bundle carries a source-open body floor at `examples/formal_evidence_cell_anchor_resolver/exported_evidence_cell_anchor_bundle/source_module_manifest.json`. It imports the paper-module formal-evidence auditor, formal evidence-cell registry builder, focused runtime tests, public formal-evidence registry state, Erdos257 issue217 evidence-cell manifest, and the `std_paper_module` formal-evidence-cell contract body. Result records and workingness cards expose digests and validation status, not body text, proof bodies, model-output data, non-public refs, oracle material, or theorem-correctness authority.\n\nUndeclared Library Prior Symbol Classifier Detects when a checked Lean proof cites a library result outside its approved set. 3/5\n\nDoes It checks whether a Lean proof cites a library result (a lemma or definition) that was never on its approved list. Even after a prover accepts a proof, that proof can still quietly use a library symbol it wasn't allowed to, and this component surfaces those out-of-bounds uses as an inspectable record that names each symbol and where the rule came from. It matters because \"the proof checked\" does not mean \"the proof stayed within the allowed set of building blocks,\" and this makes that gap visible without ever reading the proof's own steps.\n\nScope limit It only projects the symbol-boundary classification mechanic over copied Lean/Std premise rows and pre-extracted symbol observations; it does not read proof source, run Lean or Lake, prove formal-result correctness, treat the whole standard library as an implicit allowlist, claim Mathlib availability, use external model services, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.undeclared_library_prior_symbol_classifier run --input fixtures/first_wave/undeclared_library_prior_symbol_classifier/input --out receipts/first_wave/undeclared_library_prior_symbol_classifier\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Corpus Readiness Mathlib Absence Gate](docs/components.html#component-corpus_readiness_mathlib_absence_gate), [Tactic Portfolio Availability Probe](docs/components.html#component-tactic_portfolio_availability_probe), [Provider Context Recipe Budget Policy](docs/components.html#component-provider_context_recipe_budget_policy)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/undeclared_library_prior_classifier.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Undeclared Library Prior Classifier\n\nExplains component [Undeclared Library Prior Symbol Classifier](docs/components.html#component-undeclared_library_prior_symbol_classifier) mechanism [validates public symbol boundary](docs/rules-and-ideas.html#lattice-mechanism-mechanism-undeclared-library-prior-symbol-classifier-validates-public-symbol-boundary) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\nThis module is the Microcosm projection of the formal-prover rule that a Lean-accepted proof can still violate the evaluation contract when it uses a real library symbol that was not in the allowed premise set. It is a provenance-bearing symbol-boundary component, not a proof checker.\n\nThe fixture carries copied Lean/Std premise rows from the real Ring2 premise-index system and real Ring2 problem ids / candidate artifact digests for the symbol-boundary examples. It records extracted qualified symbol refs and classifies a known symbol outside `allowed_premise_ids` as `UNDECLARED_LIBRARY_PRIOR`. If `cited_unallowed_premise_ids` is present, that explicit budget violation takes precedence and routes as `PREMISE_BUDGET_VIOLATION`.\n\nThe source chain is digest-bearing: the real Ring2 premise index `sha256:c78b176388a5e81bd8a785950e7db0c9a65fd38e556515134146163b48604df1`, Ring2 run summary `sha256:93304410f32d40f5cad1c161c1d01a5d6f353ee10b7cf3fecbaaf7b068b43008`, copied Lean/Std premise fixture `sha256:0be36ba5b75b40d2ede2d90cefa5181829420df7abbae216d18282b92a30f869`, and the adjacent corpus-readiness / tactic-availability result records anchor the Mathlib-absent toolchain boundary.\n\nThe exported bundle carries a source-open body floor at `examples/undeclared_library_prior_symbol_classifier/exported_symbol_classifier_bundle/source_module_manifest.json`. It imports the reducer and set-calibration builder source bodies exactly, plus run bodies for the Ring2 premise index, Ring2 run summary, recipe policy metrics, and result record reduction matrix. The two run-state bodies are path-normalized to `<repo-root>` and `<lean-toolchain-root>` while preserving source and target digests, line counts, byte counts, and required anchors.\n\n###### Purpose\n\nA theorem prover can return a proof that Lean accepts, yet that proof can still break the rules of the evaluation it was run under. The usual reason is simple: the proof reached for a library lemma that the recipe never put on the table. The symbol is real and the proof is sound, but the run quietly used a fact it was not allowed to assume. This component answers one question. Given a set of premises a candidate was allowed to use and the symbols it actually reached for, did it cite a known library symbol that was outside that allowed set?\n\nThe unusual choice is what the classifier refuses to do. It does not run Lean, it does not read the proof body, and it does not treat the standard library as an implicit allowlist where anything that exists is fair game. It works only from a copied premise index and a list of symbol observations that were extracted beforehand, and it compares the two. That keeps the check cheap and keeps proof material out of the public result record, but it also means the allowed set is closed by construction: a symbol is admissible only because a premise row names it, never because it happens to live in Lean's standard library.\n\nThe check also separates two failure modes that are easy to confuse. An explicit budget breach, where the candidate names a premise id the recipe did not allow, is not the same as a residual breach, where the candidate used an allowed-looking symbol that turns out to be undeclared. The first is settled directly from the cited ids and takes precedence; the second is what the symbol comparison is for. Treating both as one class would either over-escalate honest retries or let genuine out-of-recipe library use slip through as a budget note. Keeping them apart is the point.\n\n###### Shape\n\nSource refs\n\nJSON source record `paper_module.undeclared_library_prior_classifier` Runtime component `undeclared_library_prior_symbol_classifier.py` Pre-extracted symbol observations `Nat/List/Bool/Iff/Eq refs` Budget `cited_unallowed_premise_ids present` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record paper_module.undeclared_library_prior_classifier\"] structured source record[\"structured source record 19 edges, no selective residuals\"] runtime[\"Runtime component undeclared_library_prior_symbol_classifier.py\"] premise[\"Copied Lean/Std premise index 11 sanctioned symbols\"] observations[\"Pre-extracted symbol observations Nat/List/Bool/Iff/Eq refs\"] budget[\"cited_unallowed_premise_ids present\"] residual[\"Known qualified symbol outside allowed_premise_ids\"] clean[\"Allowed symbol or no known undeclared symbol\"] retry[\"PREMISE_BUDGET_VIOLATION route: retry\"] escalate[\"UNDECLARED_LIBRARY_PRIOR route: bridge_escalate\"] advisory[\"NONE route: accept_as_advisory\"] result records[\"Result record stream fixture, board, validation, sign-off\"] ceiling[\"Scope limit no Lean/Lake, proof, provider, launch, private-system claim\"] bundle --> structured source record structured source record --> runtime runtime --> premise runtime --> observations observations --> budget observations --> residual observations --> clean budget --> retry residual --> escalate clean --> advisory retry --> result records escalate --> result records advisory --> result records result records --> ceiling\n```\n\n###### Technical Mechanism\n\nThe component separates three questions that are easy to conflate in proof evaluation: whether a candidate explicitly cites a premise outside the recipe, whether it uses a known Lean/Std symbol that was not in the allowed premise set, and whether the theorem is actually correct. Only the first two are in scope. `validate_premise_index` builds the closed allowlist from copied Lean/Std premise rows, `validate_symbol_observations` reads pre-extracted qualified symbol observations, and `_classify_row` applies the precedence rule: `cited_unallowed_premise_ids` yields `PREMISE_BUDGET_VIOLATION` with `retry`; otherwise a known qualified symbol outside `allowed_premise_ids` yields `UNDECLARED_LIBRARY_PRIOR` with `bridge_escalate`; clean or unknown observations remain advisory. The classifier records observed symbols and computed/asserted classes, but it never evaluates proof bodies or runs Lean.\n\nThe exported-bundle mechanism is a second boundary rather than a richer proof. `validate_source_module_manifest` requires `source_module_manifest.json`, rejects manifest or row-level `body_in_receipt: true`, verifies six declared body imports against source/target digests, line counts, byte counts, required anchors, material classes, and relation type, and keeps path-normalized Ring2 run-state bodies separate from exact copied reducer bodies. `secret_exclusion_scan` then checks the declared public fixture and bundle inputs for proof-body, provider-payload, private-ref, and host-path sentinel classes. `_write_receipts` writes result, board, validation, and sign-off result records; `result_card` deliberately emits a small pass/fail card that omits source modules, source digests, proof bodies, non-public source refs, secret-scan detail, and scope limit bodies. This is why the module can be source-open about the symbol-boundary system without becoming a proof-body export.\n\nThe governing lattice follows the same separation. The bundle binds the component to `mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary`, `concept.formal_math_and_proof_witness_bundle`, principles `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-9`, and axioms `AX-1`, `AX-2`, `AX-5`, `AX-7`, `AX-8`, and `AX-10`. The technical claim is therefore limited to public symbol-budget classification over copied, digest-bearing premise evidence. It does not establish theorem truth, Mathlib availability, Lean/Lake execution, launch-scope decision, provider correctness, or complete library allowlisting.\n\n###### Reader Evidence Routing\n\nStart with the source record, not this prose: `core/paper_module_capsules.json::paper_modules[56:paper_module.undeclared_library_prior_classifier]` is the source authority that names the component subject `undeclared_library_prior_symbol_classifier`, the mechanism `mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary`, the code locus `src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py`, the concept `concept.formal_math_and_proof_witness_bundle`, the governing principles `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-9`, the axioms `AX-1`, `AX-2`, `AX-5`, `AX-7`, `AX-8`, and `AX-10`, and the sibling modules `paper_module.corpus_readiness_mathlib_absence_gate`, `paper_module.tactic_portfolio_availability`, and `paper_module.lean_std_premise_index`.\n\nThen read the generated structured source record `paper_modules/undeclared_library_prior_classifier.json`. It is the parity projection from the bundle, carrying `source_authority: json_capsule`, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, 19 generated relationship edges, and no unpopulated selective relations. The structured source record is evidence that the reader page is wired into the doctrine lattice; it is not theorem-correctness, launch, or runtime-correctness authority.\n\nFor runtime behavior, inspect `src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py`. The named locus validates projection protocol, premise index, classifier policy, source-module manifest, symbol observations, secret-exclusion scan, result construction, result record writing, and result-card compaction. The load-bearing classifier rule is `_classify_row`: explicit `cited_unallowed_premise_ids` short-circuit as `PREMISE_BUDGET_VIOLATION` with `retry`; otherwise a known qualified Lean/Std symbol outside `allowed_premise_ids` classifies as `UNDECLARED_LIBRARY_PRIOR` with `bridge_escalate`. Negative cases reject proof bodies, non-public source refs, theorem-correctness overclaims, allowed-symbol false positives, unqualified-token overclaims, and missing escalation.\n\nFor public fixture evidence, use `fixtures/first_wave/undeclared_library_prior_symbol_classifier/input/`. The fixture carries the premise index, classifier policy, projection protocol, symbol observations, and the seven negative-case files named by `EXPECTED_NEGATIVE_CASES`. For exported source-open body-floor evidence, use `examples/undeclared_library_prior_symbol_classifier/exported_symbol_classifier_bundle/source_module_manifest.json`. That manifest verifies six source body imports: reducer source, set-calibration builder source, path-normalized Ring2 premise-index state, path-normalized Ring2 run summary, recipe policy metrics, and result record reduction matrix. The manifest keeps `body_in_receipt` false and checks source/target digests plus required anchors; it does not export proof bodies, model-output data bodies, account or browser state, source notes, or private source-root bodies.\n\nFor result records, read `receipts/first_wave/undeclared_library_prior_symbol_classifier/undeclared_library_prior_symbol_classifier_result.json`, `receipts/first_wave/undeclared_library_prior_symbol_classifier/undeclared_library_prior_symbol_classifier_board.json`, `receipts/first_wave/undeclared_library_prior_symbol_classifier/undeclared_library_prior_symbol_classifier_validation_receipt.json`, and result records/sign-off/first_wave/undeclared_library_prior_symbol_classifier_fixture_acceptance.json. The fixture result record reports 11 premises, 3 classifications, 1 undeclared-library prior, 1 premise-budget-precedence case, 1 bridge escalation, 1 retry, zero blocking secret-exclusion hits, and the scope boundary that this is not Lean/Lake, formal-result correctness, provider, private-ref, whole-library-allowlist, or launch-scope decision.\n\nFocused regression coverage lives in `tests/test_undeclared_library_prior_symbol_classifier.py`. It runs both the fixture command and `run-symbol-bundle`, checks public-relative result records, verifies digest/manifest boundary failures, and confirms the compact card reuses a fresh result record without exporting source modules, body ids, secret-scan details, source digests, proof bodies, or non-public source refs. The paper-module coverage contract also names this module in `tests/test_microcosm_paper_module_coverage_contract.py`; that is route coverage evidence, not runtime proof evidence.\n\n###### Named Proof Consumers\n\nThe fixture consumer is `microcosm_core.organs.undeclared_library_prior_symbol_classifier run` over `fixtures/first_wave/undeclared_library_prior_symbol_classifier/input`. It proves the public example still classifies 11 copied premise rows and 3 symbol observations into one undeclared-library-prior escalation, one premise-budget retry, and one advisory clean case, while the expected negative cases cover proof-body export, non-public refs, theorem-correctness overclaim, allowed-symbol false positives, unqualified-token overclaims, and missing escalation.\n\nThe exported-bundle consumer is `microcosm_core.organs.undeclared_library_prior_symbol_classifier run-symbol-bundle` over `examples/undeclared_library_prior_symbol_classifier/exported_symbol_classifier_bundle`. It proves the six source-open body imports remain digest/size/anchor checked and public-safe, including the exact copied reducer and calibration-builder bodies plus path-normalized Ring2 state, recipe metrics, and reduction-matrix bodies. It is the consumer that catches source-module digest drift and manifest-boundary violations; it does not certify formal-result correctness.\n\nThe focused regression consumer is `tests/test_undeclared_library_prior_symbol_classifier.py`. It ties the fixture and bundle commands to public-relative result records, source-module digest mismatch blocking, manifest and row-level `body_in_receipt` rejection, compact-card redaction, and fresh-card reuse. The corpus consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`, which proves the Markdown remains part of the 98-module Microcosm paper-module corpus. That corpus check is routing and projection parity evidence only; it is not a runtime proof substitute.\n\n###### Public Mechanics\n- Qualified symbol refs are restricted to `Nat`, `List`, `Bool`, `Iff`, and `Eq` namespaces in this public fixture.\n- The closed premise index is an allowlist boundary, not permission to use the whole standard library.\n- `UNDECLARED_LIBRARY_PRIOR` routes to `bridge_escalate` because the proof may be informative while still out of recipe.\n- `PREMISE_BUDGET_VIOLATION` routes to `retry` and short-circuits the residual symbol classifier.\n- Result records expose ids, candidate artifact digests, symbols, counts, failure classes, source refs, source digests, and scope limits.\n- `secret_exclusion_scan` records zero blocking hits for the declared sentinel classes in the public result record stream; it is not a complete secret audit, launch clearance, or proof that no private material exists anywhere.\n\n###### Prior Art Grounding\n\nThis classifier is grounded in formal-methods work on premise control and library-aware proof search. Isabelle/Sledgehammer makes relevant-fact selection an explicit part of automated proof search, and Lean/Mathlib practice makes clear that accepted proofs can depend on a large library context. Microcosm uses that insight as a boundary check: an accepted proof artifact is not enough if it quietly used symbols outside the declared premise set. The component classifies the symbol-budget violation without judging theorem truth or exporting proof bodies.\n\nPrior-art anchors:\n- Isabelle Sledgehammer and relevant-fact selection: https://isabelle.in.tum.de/doc/sledgehammer.pdf\n- Lean community Mathlib overview: https://leanprover-community.github.io/mathlib-overview.html\n- Lean 4 tactic and proof environment context: https://lean-lang.org/theorem_proving_in_lean4/Tactics/\n\n###### Regression Cases\n\nThe forbidden proof-body, private-ref, allowed-symbol false-positive, unqualified-token, and theorem-correctness cases are regression-only leakage guards. They are not product evidence and cannot stand in for the copied Lean/Std symbol-boundary system.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\nThe expected bundle projection is Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, and 19 generated relationship edges with no unpopulated selective relations. A green result record proves only the allowed-premise and symbol-budget classification boundary; it does not establish formal-result correctness, run Lean or Lake, expose proof bodies, authorize external model access, claim Mathlib availability, or broaden all Std and Mathlib declarations into allowed priors.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe JSON bundle and generated row prove only allowed-premise and symbol-budget classification evidence: copied Lean/Std premise rows, real Ring2 ids and digests, extracted qualified symbol refs, declared budget-violation cases, source-open body-floor digest evidence, leakage regression cases, negative cases, and validation result records. They do not prove formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, claim Mathlib availability, treat all Std or Mathlib declarations as allowed priors, include launch operations, authorize public sharing, or prove whole-system correctness. They also do not expose model-output data bodies, account or browser state, source notes, or private source-root bodies.\n\n###### Limitations\n\nThe classifier depends on copied, premise rows and pre-extracted qualified symbol observations. It does not parse arbitrary Lean syntax, expand imports, normalize proof terms, or run Lean/Lake to discover symbols. Unknown or unqualified tokens are deliberately kept outside the positive undeclared-library-prior claim unless the public observation and closed premise index make the boundary explicit.\n\nThe public source-open body floor is a provenance check, not semantic equivalence for the full private source system. Exact copied bodies and path-normalized run-state bodies are checked for source/target digests, line counts, byte counts, and required anchors; that does not certify every upstream private root, model-output data, account state, or operator context that may have informed the original source run.\n\nThe leakage and launch boundaries are also scoped. `secret_exclusion_scan` checks declared sentinel classes in the public fixture and bundle inputs, while the focused pytest checks regression cases for proof-body export, non-public refs, overclaims, and compact-card redaction. Those checks do not replace a whole-repo secret audit, a public sharing review, theorem-correctness evidence, or a Mathlib availability proof. The paper-module corpus and generated-row checks prove routing parity only.\n\n###### Scope limit\n\nThis module is allowed-premise and symbol-budget classification evidence only. It does not establish formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, treat all Std or Mathlib declarations as allowed priors, claim Mathlib availability, or include launch operations.\n\n###### Scope boundary\n\nThis module does not establish formal-result correctness, run Lean or Lake, expose proof bodies, use external model services, import non-public source refs, treat all Std/Mathlib declarations as allowed priors, claim Mathlib availability, or include launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing relation is the path from bundle authority to a bounded proof consumer. The source row binds this module to the `undeclared_library_prior_symbol_classifier` component, the mechanism `mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary`, the runtime locus `src/microcosm_core/organs/undeclared_library_prior_symbol_classifier.py`, the concept `concept.formal_math_and_proof_witness_bundle`, six principles, six axioms, and the sibling paper modules for corpus readiness, tactic availability, and Lean/Std premise indexing.\n\nThe principle layer explains why the classifier is a boundary component rather than a theorem authority. `P-1` requires the symbol class to be recomputed from premise rows and observations instead of echoed from prose. `P-2` lowers the claim to what the checker actually tests: allowed-premise and symbol-budget classification. `P-3` concentrates trust in the small component and source-module manifest validators. `P-6` fails closed on missing or stale evidence. `P-8` turns inadmissible computations into typed outcomes such as `PREMISE_BUDGET_VIOLATION` and `UNDECLARED_LIBRARY_PRIOR`. `P-9` carries source refs, target refs, digests, and body-material status through the fixture, bundle, and result record layers.\n\nThe axiom layer supplies the same ceiling in machine-checkable form. `AX-1` requires derivation before assertion, so the page points to fixture and bundle result records instead of declaring theorem truth. `AX-2` keeps verification inside kernelized validators. `AX-5` prevents an authority upgrade without stronger evidence. `AX-7` allows typed partiality and refusal when the proof body, non-public refs, or theorem-correctness claim is inadmissible. `AX-8` preserves provenance while keeping proof/provider/private bodies out of public result records.\n\nThe generated JSON row currently contributes 19 relationship edges with no unpopulated selective relations. Those edges are evidence of route parity, not new authority: the source authority remains the JSON bundle and the proof authority remains the focused fixture, bundle, and regression consumers.\n\nThis page treats those generated navigation surfaces as bundle-derived projections while explaining the resolved symbol-boundary component, code-locus, law, and sibling-paper links.\n\nRing2 Premise Retrieval Precision Recall Harness Scores how much proof support a premise search found, problem by problem. 3/5\n\nDoes When a math-proving system searches for the supporting facts (\"premises\") a proof will need, this component replays saved records of that search and reports, problem by problem, how much of the needed support the search actually turned up. Per problem it labels one of four outcomes: the search found everything needed and the proof went through; it found everything needed but the proof still failed; it found only some of the needed support; or it found none of it. Separating \"the proof failed even though every needed premise was found\" from \"the proof failed because the search missed a needed premise\" shows which part to fix. It also runs as a regression guard that refuses inputs which try to slip the answer into the search itself (the known-correct premises planted in the ranked results), leak proof text, tune on the test answers, or claim more than retrieval-quality numbers.\n\nScope limit These are after-the-fact retrieval-attribution labels and precision/recall counts over copied run records only. The component does not run Lean or Lake, call any provider, expose proof bodies, tune on test answers, claim benchmark performance, prove formal-result correctness, or include launch operations, and its labels are explicitly forbidden from flowing into provider context. The aggregate numbers describe only the copied fixture/bundle replayed, not any benchmark claims.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.ring2_premise_retrieval_precision_recall_harness run --input fixtures/first_wave/ring2_premise_retrieval_precision_recall_harness/input --out receipts/first_wave/ring2_premise_retrieval_precision_recall_harness\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Mathematical Strategy Atlas Hypothesis Scorer](docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer), [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/ring2_premise_precision_recall.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Ring-2 Premise Precision Recall\n\nExplains component [Ring2 Premise Retrieval Precision Recall Harness](docs/components.html#component-ring2_premise_retrieval_precision_recall_harness) mechanism [validates public premise retrieval attribution](docs/rules-and-ideas.html#lattice-mechanism-mechanism-ring2-premise-retrieval-precision-recall-harness-validates-public-premise-retrieval-attribution) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`ring2_premise_retrieval_precision_recall_harness` is the public Microcosm component for evaluating copied Ring-2 premise retrieval rankings against after-the-fact labels.\n\nThe component computes precision and recall per problem, then classifies the result as `retrieval_hit`, `partial_retrieval_miss`, `retrieval_miss`, or `proof_failure_despite_hit`. That distinction matters because a failed proof with all needed premises retrieved is a different failure than a missing premise retrieval path.\n\n###### Purpose\n\nWhen a proof search fails, it is easy to blame the prover and miss the simpler cause: the right supporting facts were never put in front of it. This component exists to keep those two cases apart. It answers one question: did the retrieval step actually surface the premises a problem needed, or did the failure happen somewhere downstream after the premises were already in hand?\n\nIt answers that by recomputing precision and recall from copied records rather than trusting a reported figure. For each problem it intersects the retrieved premise ids with the labelled needed-premise ids, then reads the proof outcome alongside that overlap. Full recall with a passing proof is a `retrieval_hit`; full recall with a non-passing proof is `proof_failure_despite_hit`, the case where retrieval did its job and the fault lies elsewhere. Partial overlap and zero overlap are graded as `partial_retrieval_miss` and `retrieval_miss`.\n\nThe unusual part is the direction the labels are allowed to flow. The needed premise ids are after-the-fact measurement labels, and the component treats them as strictly one-way: they may be used to score a finished run, but they may not be fed back into the retrieval ranking, used to tune on a test split, or carried into a provider-context recipe. Planting an oracle label inside a ranking, or tuning on test answers, is a typed refusal, not a higher score. The point is a metric that cannot quietly become the very advantage it is meant to measure, and that never inflates a retrieval result into a claim about formal-result correctness.\n\n###### Shape\n\nSource refs\n\nsource record `core/paper_module_capsules.json[42]` structured source record `paper_modules/ring2_premise_precision_recall.json` fixture input `fixtures/first_wave/.../input` runtime component `ring2_premise_retrieval_precision_recall_harness.py` exported bundle `examples/.../exported_ring2_precision_recall_bundle` Diagram source\n\n```text\nflowchart TD Bundle[\"source record core/paper_module_capsules.json[42]\"] --> JSON[\"structured source record paper_modules/ring2_premise_precision_recall.json\"] JSON --> Markdown[\"this page reader projection\"] JSON --> Mermaid[\"diagram view available_from_capsule_edges\"] JSON --> Atlas[\"map view organ_atlas.ring2_premise_retrieval_precision_recall_harness\"] Fixture[\"fixture input fixtures/first_wave/.../input\"] --> Runtime[\"runtime component ring2_premise_retrieval_precision_recall_harness.py\"] Bundle[\"exported bundle examples/.../exported_ring2_precision_recall_bundle\"] --> Runtime Runtime --> Metrics[\"precision/recall labels retrieval vs proof-failure attribution\"] Runtime --> Result records[\"validation result records first_wave + runtime_shell\"] Runtime --> Negatives[\"negative cases leakage, tuning, overclaim, missing decoy\"] Result records --> Boundary[\"proof boundary metrics and copied artifacts only\"]\n```\n\n###### Technical Mechanism\n\nThe runtime splits the proof consumer into three evidence classes before it reports any metric. `_load_payloads` reads the declared fixture or exported bundle inputs; `_validate_run_material` checks that copied Ring-2 run material carries source refs, target refs, validation refs, digests, and the expected `copied_non_secret_macro_body_with_provenance` status; and `_validate_source_artifacts` verifies the four copied source artifacts against either the source digest or the private-path rewrite digest. The result record therefore proves the presence and provenance of the copied public artifacts before the precision/recall scores can be interpreted.\n\nThe scoring core is `_evaluate`. It indexes after-the-fact labels by `problem_id`, applies the policy `default_top_k` or per-ranking `top_k`, truncates retrieved premise ids to that cutoff, intersects retrieved ids with labelled needed-premise ids, and computes `precision_at_k = hits/top_k` and `recall_at_k = hits/needed`. Aggregate precision and recall use total hit, candidate, and needed-premise counts, then compare the computed aggregate metrics with the policy's expected values. This is why the paper module can distinguish a retrieval miss from a proof failure after full premise recall without asserting anything about the downstream proof.\n\nThe failure taxonomy is mechanical rather than rhetorical. Full recall plus a passing proof is `retrieval_hit`; full recall plus a non-passing proof is `proof_failure_despite_hit`; partial overlap is `partial_retrieval_miss`; and zero overlap is `retrieval_miss`. The policy floor also requires expected failure modes and an adversarial decoy whose needed premise is absent or missed. Those gates make the metric harness test the shape of the evaluation set, not just the happy path.\n\nThe negative cases enforce the scope limit. `EXPECTED_NEGATIVE_CASES` requires oracle labels planted in rankings, proof-body leakage, test-split tuning, metric-overclaim, and missing-decoy inputs to produce typed refusal codes. The result record-writing path then exposes import ids, target refs, digest status, aggregate counts, failure-mode counts, and secret-scan status while keeping proof bodies, model-output data, and non-public paths outside the public result record. That implements the bundle's P-1/P-2/P-6/P-8/P-9 and AX-1/AX-2/AX-5/AX-7 posture: metrics are recomputed from copied artifacts, blocked states stay blocked, and no metric label becomes Lean, provider, benchmark, or launch-scope decision.\n\n###### Reader Evidence Routing\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[42:paper_module.ring2_premise_precision_recall]` names the component subject, mechanism subject, concept ref, principle refs, axiom refs, dependencies, runtime code locus, and projection statuses. Edit the source record, not this page, if those relationships change.\n- Generated structured source record: `paper_modules/ring2_premise_precision_recall.json` is the structured source record to inspect for `source_authority: json_capsule`, the 18 generated relationship edges, zero unresolved selective relations, Mermaid `available_from_capsule_edges`, and Atlas `linked_from_capsule_edges`.\n- Runtime locus: `src/microcosm_core/organs/ring2_premise_retrieval_precision_recall_harness.py` owns `run`, `run_precision_recall_bundle`, `_build_result`, `_write_receipts`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`. It computes aggregate precision/recall, enforces copied source-artifact digests, writes result records, and carries the provider/proof/launch refusal flags.\n- Fixture and exported bundle: `fixtures/first_wave/ring2_premise_retrieval_precision_recall_harness/input/` includes the public input records plus five negative cases; `examples/ring2_premise_retrieval_precision_recall_harness/exported_ring2_precision_recall_bundle/` is the runtime-shell bundle. Both routes expose source artifacts under `source_artifacts/` while result records carry import ids, target refs, and digest status rather than private proof bodies.\n- Result record and test surfaces: `receipts/first_wave/ring2_premise_retrieval_precision_recall_harness/ring2_precision_recall_result.json`, `receipts/first_wave/ring2_premise_retrieval_precision_recall_harness/ring2_precision_recall_validation_receipt.json`, result records/sign-off/first_wave/ring2_premise_retrieval_precision_recall_harness_fixture_acceptance.json, `receipts/runtime_shell/demo_project/organs/ring2_premise_retrieval_precision_recall_harness/exported_ring2_precision_recall_bundle_validation_result.json`, and `tests/test_ring2_premise_retrieval_precision_recall_harness.py` are the reader-verifiable validation result records for the local public boundary.\n\n###### Runtime Surfaces\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.ring2_premise_retrieval_precision_recall_harness run --input fixtures/first_wave/ring2_premise_retrieval_precision_recall_harness/input --out receipts/first_wave/ring2_premise_retrieval_precision_recall_harness\nPYTHONPATH=src python3 -m microcosm_core.cli ring2-premise-retrieval-precision-recall-harness run-precision-recall-bundle --input examples/ring2_premise_retrieval_precision_recall_harness/exported_ring2_precision_recall_bundle --out receipts/runtime_shell/demo_project/organs/ring2_premise_retrieval_precision_recall_harness\n```\n\n###### Body-Floor Import\n\nThe fixture and exported bundle both carry exact copied source artifacts under `source_artifacts/` for the Ring2 aggregate report, graph-variant run summary, graph comparison, and problem-source manifest. The validator treats those four digest-matched files as `source_open_body_imports` with `body_in_receipt=false`: workingness can count the real source result record bodies, while result records expose only import ids, target refs, and digest status.\n\n###### Negative Cases\n- `oracle_labels_in_ranking` rejects oracle-needed premise ids inside rankings.\n- `proof_body_leakage` rejects proof, provider, or private body fields.\n- `test_split_tuning_attempt` rejects retrieval tuned on test labels.\n- `metric_overclaim` rejects proof, benchmark, provider, launch, or publishing-scope decision claims.\n- `missing_adversarial_decoy` rejects a metric harness without a decoy miss case.\n\n###### Prior Art Grounding\n\nThis component is grounded in information-retrieval evaluation. NIST's [TREC evaluation measures](https://trec.nist.gov/pubs/trec20/appendices/measures.pdf) provide the older precision/recall frame for judging retrieval systems, and scikit-learn's [precision/recall metric API](https://scikit-learn.org/stable/modules/generated/sklearn.metrics.precision_recall_fscore_support.html) shows the common machine-learning interface for reporting those labels.\n\nThe theorem-proving side is adjacent to premise-selection and hammer workflows, such as Isabelle [Sledgehammer](https://isabelle.in.tum.de/doc/sledgehammer.pdf), where finding the right facts is a distinct step from replaying a proof. Microcosm keeps that distinction explicit: precision/recall can say whether needed support was ranked, but it cannot become Lean correctness, benchmark performance, or provider-output authority.\n\n###### Why It Matters\n\nPremise retrieval should be measurable without becoming theorem authority. This component gives Microcosm a compact public harness for asking whether a retrieval path missed the needed support, hit the support but failed later, or hid a dangerous truth-side shortcut inside the public runtime.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThe expected projection row is `paper_module.ring2_premise_precision_recall` with 18 generated relationship edges, zero unresolved selective relations, Mermaid status `available_from_capsule_edges`, and Atlas status `linked_from_capsule_edges`. These checks validate copied retrieval records, metric labels, and bundle result records only; they do not become Lean/Lake, benchmark, provider, or theorem authority.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component does not run Lean or Lake, use external model services, emit proof bodies, tune retrieval on test answers, claim benchmark performance, prove formal-result correctness, or include launch operations. Its labels are metric labels only; they are not allowed to flow into provider context recipes.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that copied public premise-retrieval records can be scored for precision/recall labels, adversarial decoys, body-floor imports, and metric overclaim refusals. It does not establish Lean correctness, benchmark performance, provider output quality, theorem truth, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\n###### Limitations\n\nThe harness is a local evidence-accounting check over copied artifacts. It does not execute Lean, Lake, Sledgehammer, or any external prover; it does not inspect proof bodies; and it does not decide whether a theorem is true. A `retrieval_hit` label means the needed-premise ids appeared in the ranking under this fixture policy, not that the downstream proof search is sound or complete.\n\nThe reported precision and recall are bounded by the declared Ring-2 fixture and exported bundle. Different corpora, retrieval cutoffs, premise labels, decoy construction, or source-artifact digests require rerunning the component and cannot be inferred from this page. The negative cases prove specific forbidden flows are rejected here; they do not exhaust all possible leakage, tuning, non-public-state, provider-output, or benchmark-gaming failures.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nRing-2 precision/recall sits between premise retrieval and proof diagnosis. The bundle explains the runtime component and the `mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution` mechanism, which is grounded in the same component source and in `concept.formal_math_and_proof_witness_bundle`. That relation is deliberately proof-adjacent rather than proof-authoritative: it can show whether copied retrieval rankings hit the labelled needed premises, but it cannot promote a hit into a Lean proof, a benchmark claim, or a provider-context label.\n\nThe governing principles make the scoring path stricter than a label echo. P-1 requires recomputing precision and recall from copied rankings and labels; P-2 keeps the scope limit at metric-checker strength; P-3 concentrates authority in the small harness and focused tests; P-6 keeps missing source artifacts, negative cases, or digests blocked; P-8 turns leakage, tuning, and overclaim cases into typed refusals; and P-9 preserves provenance as records cross from source run artifacts into public fixture and bundle result records. The axiom layer matches that mechanism: AX-1 and AX-2 require derived checker evidence, AX-5 and AX-7 force blocked or refused states instead of inflated metrics, AX-6 keeps the labelled premise domain explicit, and AX-8 prevents metric labels from flowing into forbidden sinks.\n\nFormal Math Lean Proof Witness Compiles a tiny Lean example with the real prover and records whether it built, leaking no proof text. 4/5 Runs real tools\n\nDoes This takes a small, purpose-built Lean math file (a handful of toy theorems written just for this demo) and a tiny project setup, copies them into a throwaway scratch folder, and actually tries to compile them with the installed Lean theorem-prover and its Lake build tool. It then writes down exactly what happened: whether the Lean and Lake tools were found, whether the build passed, fingerprints (hashes) of the source files, the names of the theorems it defined, and how many lines each file had. It also deliberately feeds in a broken proof and a couple of off-limits files to confirm they get rejected. The point is to show real proof-checking machinery run on a small example, while keeping the written records honest and redacted: no proof text or internal logs leak out, and it states plainly that this is a narrow toy check on one fixture, not a general-purpose proof system.\n\nScope limit It authorizes only a witness that a tiny declared public toy proof compiled under the locally installed Lean/Lake toolchain in a temporary workspace, plus confirmation that its leakage guardrails fired. It excludes Mathlib/Aesop/Batteries-dependent or general proof or theorem-program authority, external model access, private proof import, benchmark or performance claims, whole-system correctness, or any launch, hosted deployment, or public sharing.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.formal_math_lean_proof_witness run --input fixtures/first_wave/formal_math_lean_proof_witness/input --out receipts/first_wave/formal_math_lean_proof_witness\n```\n\nEvidence External tool run evidence 4/5 Real runtime result\n\nLinks to [Formal Math Premise Retrieval](docs/components.html#component-formal_math_premise_retrieval), [Formal Math Readiness Gate](docs/components.html#component-formal_math_readiness_gate), [Proof Diagnostic Evidence Spine](docs/components.html#component-proof_diagnostic_evidence_spine), [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel), [Verifier Lab Execution Spine](docs/components.html#component-verifier_lab_execution_spine)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/formal_math_lean_proof_witness.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Formal Math Lean Proof Witness\n\nExplains component [Formal Math Lean Proof Witness](docs/components.html#component-formal_math_lean_proof_witness) mechanisms [validates public lean lake witness](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-lake-witness) [validates public lean witness](docs/rules-and-ideas.html#lattice-mechanism-mechanism-formal-math-lean-proof-witness-validates-public-lean-witness) Governed by principle [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3) concept [formal math and proof witnesses as bounded public proof-adjacent result records](docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle) Abides by axiom [Kernelized verification](docs/doctrine.html#dcard-ax-2) Depends on paper module [Corpus Readiness Mathlib Absence Gate](docs/paper-modules.html#paper-module-corpus-readiness-mathlib-absence-gate)\n\n###### Purpose\n\nThis component exists to make one claim checkable instead of asserted: that Microcosm can actually run the Lean toolchain, not merely talk about it. The single question it answers is whether the installed Lean toolchain will compile a declared, tiny synthetic Lean project end to end, and whether that run can be recorded without leaking the proof.\n\nThe unusual part is the discipline around the run, not the run itself. The component copies a bounded public Lake project into a temporary workspace and invokes `lake build`, but the result record keeps only the return code, the standard-output and standard-error line counts, the source hashes, and the declaration names pulled out by a regular expression. The proof text and the raw command output never reach the result record. A reader gets evidence that the build happened and what it contained, without the page becoming a copy of the proof.\n\nTwo failure modes drive the design. The first is a proof-assistant integration that reports success without ever running the checker; the witness guards against that by executing a real subprocess and recording its exit status, and by deliberately compiling an invalid Lean file in a negative case to confirm the toolchain rejects it. The second is a circular pass, where the manifest quietly carries the answer. The component refuses manifests that embed a `proof_body`, a ground-truth proof, provider output, or oracle premise ids, so a green result cannot be smuggled in through the inputs.\n\nThe scope is small on purpose. Imports of Mathlib, Aesop, and Batteries are rejected before anything runs, so this is a witness for a toy theorem under a local toolchain, not a claim about library-dependent proof work. That boundary is the point: it shows the result record discipline a larger formal-math component would need, without borrowing authority it has not earned.\n\n###### Teleology\n\n`formal_math_lean_proof_witness` is the bounded public crossing from formal-math readiness into an actual local Lean/Lake run. It exists so a cold reader can see Microcosm compile a tiny synthetic proof witness with the installed toolchain while the result records stay redacted, public-relative, and honest about the narrow authority boundary.\n\n###### Shape\n\nSource refs\n\nFirst-wave fixture `fixtures/first_wave/.../input` Exported public bundle `examples/.../exported_lean_proof_witness_bundle` Diagram source\n\n```text\nflowchart TD A[\"First-wave fixture fixtures/first_wave/.../input\"] --> B[\"run() include_negative=true\"] C[\"Exported public bundle examples/.../exported_lean_proof_witness_bundle\"] --> D[\"run_witness_bundle() include_negative=false\"] B --> E[\"Validate witness manifest: reject embedded proof bodies, oracle ids, non-public source refs\"] D --> F[\"Validate source_module_manifest.json: copied public source digests, exact-copy vs replacement\"] E --> G[\"Copy Lake project to temp workspace lake build MicrocosmProofWitness\"] G --> H[\"Negative cases run real Lean: invalid proof rejected, Mathlib/Aesop/Batteries import blocked\"] F --> I[\"Standalone exported-witness contract or fresh bundle result record reuse (no live build)\"] G --> J[\"metadata-only JSON result records: return code, line counts, hashes, declaration names\"] H --> J I --> J J --> K[\"Scope limit: toy public witness only\"]\n```\n\n###### Reader Evidence Routing\n\nRoute bundle/currentness questions through ## JSON Bundle Binding, the source record, and the structured source record. The expected generated-row evidence is `source_authority: json_capsule`, `edge_count: 8`, Mermaid `available_from_capsule_edges`, Atlas `blocked_until_organ_atlas_owner_lane_binds_edges`, and zero unresolved selective relations. That evidence proves reader wiring and source authority placement, not formal-result correctness.\n\nRoute runtime questions through the runtime locus and the two public input surfaces. The first-wave fixture runs `run()` against the public Lake project and checks the four expected negative cases. The exported bundle runs `run_witness_bundle()` against copied public source modules, validates `source_module_manifest.json`, and records digest/source-module status without placing proof bodies in JSON result records.\n\nRoute result record and test questions through the required result record paths, the focused pytest, and the corpus check. The focused test asserts local Lake build success for the tiny witness when Lean/Lake are available, eight compiled declarations, four negative-case observations for the fixture, public-relative redacted result records, five exported source-module rows, source digest checks, metadata-only result record policy, and tamper-blocking behavior. Those validation result records do not authorize Mathlib-dependent proofs, external model access, private proof import, benchmark claims, launch-scope decision, deployment posture, public sharing, hosted deployment, source-file changes, or private-system equivalence.\n\n###### Public Contract\n\nThe component copies `examples/formal_math_lean_proof_witness/exported_lean_proof_witness_bundle` or the first-wave fixture Lake project into a temporary workspace and runs `lake build`. The public result record records tool availability, Lake build status, source hashes, declaration names, line counts, negative-case coverage, and the scope limit. It does not export proof bodies in JSON result records.\n\nThe accepted witness scope is deliberately small:\n- public synthetic Lean source is allowed;\n- JSON manifests and result records may not embed proof bodies;\n- Mathlib, Aesop, and Batteries imports are rejected until a wider scope limit exists;\n- non-public source refs, model-output data, oracle proofs, and private source run bodies remain outside the public root.\n\n###### Prior Art Grounding\n\nThis component is grounded in the Lean proof-assistant lineage and the broader small-kernel theorem-proving tradition. The [Lean theorem prover system description](https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/) anchors the local Lean/Lake witness route, and the [Lean mathematical library](https://arxiv.org/abs/1910.09336) shows why proof authority depends on explicit imports, declarations, and checked environments.\n\nMicrocosm borrows the proof-witness discipline: a local toolchain run, source hashes, declarations, negative cases, and metadata-only result records must be visible before Lean witness language is allowed. It does not claim Mathlib-dependent proof authority or benchmark performance.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_formal_math_lean_proof_witness.py -q --basetemp=/tmp/microcosm_formal_math_lean_proof_witness_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\njq '{edge_count:(.relationships.edges|length), mermaid_status:.paper_module_payload.generated_projections.mermaid.status, atlas_status:.paper_module_payload.generated_projections.atlas_card.status, source_authority:.relationships.source_authority, unresolved_selective_relation_count:(.relationships.unpopulated_selective_relations|length)}' paper_modules/formal_math_lean_proof_witness.json\n```\n\nExpected generated-row proof: `edge_count: 8`, `mermaid_status: available_from_capsule_edges`, `atlas_status: blocked_until_organ_atlas_owner_lane_binds_edges`, `source_authority: json_capsule`, and `unresolved_selective_relation_count: 0`.\n\n###### Scope boundary\n\n###### Limitations\n\nThis module is a bounded public witness, not a formal-proof authority. Its positive evidence is one declared toy Lean/Lake fixture, one exported public witness bundle, five copied source-module body rows, local toolchain metadata, eight compiled declarations when Lean/Lake are available, and four expected negative-case observations. That evidence is enough to show the mechanism's result record discipline; it is not enough to prove arbitrary Lean goals, Mathlib coverage, formal-result correctness, benchmark performance, or private proof import equivalence.\n\nThe copied-body floor is public but narrow. Result records may cite source refs, hashes, material classes, declaration names, counts, manifest verdicts, tool-return summaries, and scope limit fields. They may not embed proof bodies, model-output data, oracle answers, non-public source refs, raw command output bodies, account secrets, account or browser state, or private source-root material. The source-open claim is therefore limited to the declared public fixture and exported bundle body classes.\n\nThe focused regression validates the stated fixture and exported-bundle shape. It checks streaming source scans, tool-version caching, temporary Lake project reuse, Lake build behavior, public-relative redacted result records, source-module digest parity, standalone exported-bundle handling, tamper rejection, negative case coverage, and the generated-row proof. It excludes future fixture families, Atlas/site public sharing, source-file changes, launch, or a larger formal-math proof claim without the owning builder and launch lanes.\n\n###### Scope limit\n\nThis module authorizes only a tiny public fixture witness compiled by local Lean/Lake in a temporary workspace. It excludes Mathlib-dependent proofs, external model access, private proof import, benchmark performance claims, launch operations, hosted deployment, public sharing, recipient work, secret export, or whole-system correctness.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that a tiny public Lean fixture witness can run in a temporary local workspace, emit metadata-only result records, and expose source hashes, declarations, and negative cases. It does not establish Mathlib-dependent theorems, benchmark performance, provider outputs, private proof imports, launch-scope decision, hosted deployment, publishing-scope decision, secret export safety, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe bundle binds this module to `concept.formal_math_and_proof_witness_bundle`: public proof-adjacent language must pass through explicit witness artifacts before it becomes reader evidence. Here the witness artifacts are the temporary Lake project copy, local Lean/Lake tool probes, `lake build MicrocosmProofWitness`, source hashes, declaration metadata, source-module manifest checks, negative-case observations, and metadata-only result records. The Markdown page explains that lattice; it does not upgrade the generated JSON row, the local toolchain, or the copied source body floor into theorem authority.\n\n`P-3` is the governing principle edge for claim discipline. The mechanism rows do not ask a reader to trust a proof story from prose; they route the claim through `run`, `run_witness_bundle`, `validate_source_module_imports`, `_build_result`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and `SOURCE_MODULE_MANIFEST_NAME`. Those symbols are the mechanism's concrete boundary: they decide which public source refs may be copied, which imports are blocked, which negative cases count, and which result record fields may be exposed.\n\n`AX-2` supplies the hard law boundary. Public proof claims stay inside declared fixture evidence, public-relative refs, source digests, declaration counts, tool-return metadata, and negative-case verdicts. Proof bodies, model-output data, non-public source refs, stdout/stderr bodies, private source-root material, launch decisions, and whole-system correctness remain outside the module's authority even when the focused test and corpus check are green.\n\nThe dependency on `paper_module.corpus_readiness_mathlib_absence_gate` prevents the most tempting overread. This witness intentionally rejects Mathlib, Aesop, and Batteries imports until a different scope limit exists. A reader can therefore interpret the module as a toy Lean/Lake execution cell upstream of larger formal-math components, not as evidence that Microcosm can certify Mathlib-dependent theorem work.\n\nVerifier Lab Kernel Folds nine proof checks into one report labeling each line by which source actually backs it. 5/5\n\nDoes This assembly point for the Lean/proof toolkit runs nine smaller formal-math pipeline checkers together and folds their results into one leak-proof report that labels every line by where it came from: a Lean verifier, an answer-key (oracle) comparator, an AI suggestion, a retrieval miss, or a row thrown out for breaking the rules. The report carries only references, hashes, counts, and verdicts, never the actual proof text, AI output, or answer-key bodies. One result record shows which claims a Lean verifier actually backed versus which are just hints or were rejected, instead of leaving a pile of separate outputs to be taken on faith.\n\nScope limit It validates the declared public contract shape of the proof packet and component result records only; it does not establish anything correct, count oracle/provider output as forward proof success, import private or Mathlib-dependent proof bodies, use external model services, change source files, or claim benchmark solve rates, launch, or maturity.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.verifier_lab_kernel run --input fixtures/first_wave/verifier_lab_kernel/input --out receipts/first_wave/verifier_lab_kernel\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Corpus Readiness Mathlib Absence Gate](docs/components.html#component-corpus_readiness_mathlib_absence_gate), [Lean Std Premise Index](docs/components.html#component-lean_std_premise_index), [Formal Math Premise Retrieval](docs/components.html#component-formal_math_premise_retrieval), [Tactic Portfolio Availability Probe](docs/components.html#component-tactic_portfolio_availability_probe), [Target Shape Tactic Routing Gate](docs/components.html#component-target_shape_tactic_routing_gate), [Ring2 Premise Retrieval Precision Recall Harness](docs/components.html#component-ring2_premise_retrieval_precision_recall_harness), [Formal Math Verifier Trace Repair Loop](docs/components.html#component-formal_math_verifier_trace_repair_loop), [Proof Diagnostic Evidence Spine](docs/components.html#component-proof_diagnostic_evidence_spine), [Formal Math Lean Proof Witness](docs/components.html#component-formal_math_lean_proof_witness), [Verifier Lab Execution Spine](docs/components.html#component-verifier_lab_execution_spine)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_kernel.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Verifier Lab Kernel\n\nExplains component [Verifier Lab Kernel](docs/components.html#component-verifier_lab_kernel) mechanism [composes public formal math result records](docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-kernel-composes-public-formal-math-receipts) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`verifier_lab_kernel` is the public composition root for the formal-math verifier lab. It is not a theorem prover, a benchmark runner, a private Lean import, or a frontend surface. It composes already-public Microcosm components into one leak-proof result record so a reader can see which claim came from a verifier, which claim came from an oracle comparator, which claim came from a provider hypothesis, and which rows were rejected by contract.\n\nThe component consumes:\n- a public `ForwardProblem` packet with target shape, statement summary, public input hash, and allowed premise ids;\n- an `OracleSidecar` packet that may compare against hidden or hindsight knowledge but never increments forward success;\n- verifier attempts and verifier result classes;\n- provider/NIM hypotheses as advisory residual diagnoses only;\n- CP2 typed action candidates, bounded evidence bodies or raw tactic scripts;\n- bounded Evolve candidates over policy artifacts only.\n\nThe runnable fixture also calls the existing public components:\n- `tactic_portfolio_availability_probe`;\n- `target_shape_tactic_routing_gate`;\n- `formal_math_verifier_trace_repair_loop`;\n- `formal_math_lean_proof_witness`.\n\n###### Purpose\n\nIn a formal-math agent loop, several different things can look like progress. A Lean checker can accept a term. An oracle holding a hindsight answer can say a candidate matches. A provider model can offer a plausible next tactic. A retrieval step can return a premise. Treated loosely, all of these blur into a single sense of \"it worked\", and oracle or provider success quietly inflates the count of theorems actually proved. This component exists to stop that blur. The one question it answers is: for each row of evidence, which authority class does it belong to, and what may that class claim?\n\nThe composition root runs or consumes nine named component components (corpus readiness, Lean Std premise indexing, premise retrieval, tactic availability, target-shape routing, Ring2 precision and recall, verifier trace repair, proof diagnostics, and the Lean proof witness) and sorts every result into seven separate buckets: verifier-checked, provider-suggested, oracle-compared, retrieval-miss, CP2-translated, Evolve-candidate, and contract-rejected. Each bucket keeps its own authority. A passing component cannot lend its standing to a different bucket.\n\nThe unusual part is how the boundary is enforced rather than merely described. The kernel keeps two counters, `oracle_forward_success_increment_count` and `provider_results_counted`, and they must read zero. An oracle that marks itself as forward success, or a provider hypothesis that claims proof authority, is recorded as a contract violation, not as a result. The same discipline applies to data: forward problems and CP2 actions are scanned for fields that would smuggle in a proof body, an ideal answer, or an oracle's needed premise ids, and CP2 and Evolve outputs are confined to a fixed vocabulary of action classes and policy artifacts. What the reader receives is a single aggregate result record that carries references, digests, counts, and verdicts, with the proof, provider, oracle, and stdout bodies left out.\n\n###### Shape\n\nRead the verifier lab kernel as a public result record composition route, not as a proof oracle. The local path spine is the bundle and structured source record (`core/paper_module_capsules.json::paper_modules[0:paper_module.verifier_lab_kernel]`, `paper_modules/verifier_lab_kernel.json`), the runtime composition root (`src/microcosm_core/organs/verifier_lab_kernel.py`), the public packet (`fixtures/first_wave/verifier_lab_kernel/input/verifier_lab_packet.json`), and the emitted public result records under `receipts/first_wave/verifier_lab_kernel/`.\n\nSource refs\n\nBundle and structured source record `core/paper_module_capsules.json` `paper_modules/verifier_lab_kernel.json` Public verifier packet `fixtures/first_wave/verifier_lab_kernel/input/verifier_lab_packet.json` Composition root `src/microcosm_core/organs/verifier_lab_kernel.py` Public board/result/validation result records `receipts/first_wave/verifier_lab_kernel/*.json` Diagram source\n\n```text\nflowchart TD bundle[\"Bundle and structured source record core/paper_module_capsules.json paper_modules/verifier_lab_kernel.json\"] packet[\"Public verifier packet fixtures/first_wave/verifier_lab_kernel/input/verifier_lab_packet.json\"] kernel[\"Composition root src/microcosm_core/components/verifier_lab_kernel.py\"] components[\"Public component result records tactic portfolio / target shape / trace repair / Lean witness\"] buckets[\"Separated claim buckets lean_verified | oracle_compared | provider_suggested | retrieval_miss | cp2_translated | evolve_candidate | contract_rejected\"] result records[\"Public board/result/validation result records result records/first_wave/verifier_lab_kernel/*.json\"] ceiling[\"Scope limit no proof-body import; no oracle/provider forward success; no launch claim\"] bundle --> packet --> kernel kernel --> components --> buckets --> result records kernel --> ceiling buckets --> ceiling\n```\n\n###### Prior Art Grounding\n\nThis component is grounded in small-kernel theorem-proving and proof-certificate composition patterns. The [LCF approach](https://www.research.ed.ac.uk/en/publications/lcf-a-way-of-doing-proofs-with-a-machine/) and [HOL Light](https://www.cl.cam.ac.uk/~jrh13/papers/hollight.html) anchor the idea that a verifier lab should distinguish trusted checked results from heuristics and automation. Lean-oriented work such as [LeanDojo](https://arxiv.org/abs/2306.15626) adds the modern agent context: retrieval, provider hypotheses, and proof-state interaction need explicit boundaries before they can influence proof claims.\n\nMicrocosm borrows the composition discipline: verifier success, oracle comparison, provider hypothesis, CP2 translation, and Evolve candidate rows are separate buckets with separate authority. It does not count oracle or provider success as forward proof success.\n\nThe sign-off result record must separate these buckets:\n- `lean_verified`;\n- `provider_suggested`;\n- `oracle_compared`;\n- `contract_rejected`;\n- `retrieval_miss`;\n- `cp2_translated`;\n- `evolve_candidate`.\n\nThe kernel rejects five contract failures:\n- forward problems that carry candidate, ideal, repair, oracle, source proof, proof body, or base-index fields;\n- oracle comparator success counted as forward success;\n- provider hypotheses claiming proof authority;\n- CP2 candidates carrying proof bodies, raw tactic scripts, provider bodies, or oracle templates;\n- Evolve candidates mutating anything outside the bounded policy-artifact set.\n\n###### Reader Evidence Routing\n\nCold-reader audit starts with the generated structured source record for this module, not with a broad theorem-proving claim. The structured source record must confirm that verifier and mechanism subjects resolve and that a diagram view and atlas card are available for this module.\n\nEvidence should be read in this order:\n- Module definition: `core/paper_module_capsules.json::paper_module.verifier_lab_kernel` and `paper_modules/verifier_lab_kernel.json`.\n- Runtime proof: `src/microcosm_core/organs/verifier_lab_kernel.py`, the fixture input packet, and the public component calls listed above.\n- Bucket-separation proof: result record rows for `lean_verified`, `provider_suggested`, `oracle_compared`, `contract_rejected`, `retrieval_miss`, `cp2_translated`, and `evolve_candidate`.\n- Negative boundary proof: rejection of private proof bodies, oracle-to-forward success, provider proof authority, CP2 proof bodies, arbitrary Evolve mutation, source-file changes, benchmark solve-rate claims, launch claims, hosted-deployment claims, and secret export.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_verifier_lab_kernel.py -q --basetemp=/tmp/microcosm_verifier_lab_kernel_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module describes public fixture and exported bundle result records only. It excludes private proof-body import, Mathlib-dependent proof authority, oracle-to-forward success, provider proof authority, CP2 proof bodies, arbitrary Evolve mutation, source-file changes, benchmark solve-rate claims, launch, public sharing, hosted deployment, or secret export.\n\n###### Limitations\n\nThe verifier lab kernel is a composition and result record-boundary mechanism. It does not establish formal-result correctness beyond the public component result records it consumes or emits, and it does not create Mathlib import authority when the corpus-readiness gate reports only bounded fixture evidence. A Lean/Lake return code or compiled declaration count is evidence for the corresponding public fixture or exported bundle, not a license to generalize to arbitrary formal math benchmarks.\n\nOracle structured source record remain hindsight or comparator evidence. They can diagnose a forward problem but cannot increment `forward_success`; the runtime authority counters must keep `oracle_forward_success_increment_count` at zero. Provider or NIM hypotheses remain residual diagnoses until a verifier result record or other system effect exists, so `provider_results_counted` must also remain zero.\n\nCP2 rows are limited to typed action candidates from the bounded action-class vocabulary, with disconfirmation tests before rerun promotion. They are bounded evidence bodies, raw tactic scripts, provider output bodies, or oracle templates. Evolve rows are limited to the named policy-artifact set and must cite baseline or rerun result records; they do not authorize arbitrary source-file changes. Public result records must keep proof, provider, oracle, stdout/stderr, and private-source bodies out of exported evidence.\n\nCoverage is finite: the present proof consumer exercises the first-wave fixture and exported-bundle contracts, the five named negative cases, and the component-stack result record shape. New claim classes, new fixture packets, or new launch/public sharing language need a fresh proof consumer and negative cases before this module can carry them.\n\n###### Scope limit\n\nThis paper module can claim reader wiring for the verifier lab kernel composition root: verifier and mechanism subjects resolve, the runtime source locus is named, a diagram view and atlas card are generated for this module. It cannot claim private proof-body import, Mathlib-dependent proof authority, oracle-to-forward success, provider proof authority, CP2 proof bodies, arbitrary Evolve mutation, source-file changes, benchmark solve-rate claims, publishing-scope decision, hosted deployment, launch-scope decision, secret export, or whole-system correctness.\n\nFixture result records, exported-bundle result records, focused tests, and public component composition can support only bucket separation across verifier, oracle, provider, CP2, and Evolve rows. The diagram view and atlas card are navigation aids; they do not convert oracle or provider success into forward proof success, and they do not authorize benchmark or launch claims.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing lattice should be read as a claim-separation contract. The concept edge to `concept.formal_math_and_proof_witness_bundle` says the reader is looking at a proof-witness bundle, not a single proof oracle. The mechanism edge to `mechanism.verifier_lab_kernel.composes_public_formal_math_receipts` narrows that concept to one public operation: compose formal-math component result records into a leak-proof aggregate while keeping verifier, oracle, provider, retrieval, CP2, Evolve, and contract-rejected buckets distinct.\n\nThe code-locus edge is the runtime authority boundary. `run` and `run_kernel_bundle` select fixture or exported-bundle mode, `_build_result` loads the public packet and negative cases, validates the proof-lab route, runs or consumes the component stack, scans for forbidden classes, builds `claim_separation`, and records authority counters. `_write_receipts` then emits the board, result, validation, and sign-off result records with `body_in_receipt: false`, the result record-transparency contract, and the same scope boundary.\n\nThe nine `depends_on` paper-module edges are not a loose bibliography. They are the proof-lab dependency spine: corpus readiness, Lean Std premise indexing, premise retrieval, tactic availability, target-shape routing, Ring2 precision and recall, verifier trace repair, proof diagnostic evidence, and the Lean proof witness each remain separately bounded before the kernel aggregates their result records. This prevents a successful component from lending authority to a different bucket. The principle refs `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-15`, plus axiom refs `AX-1`, `AX-2`, `AX-5`, and `AX-7`, are therefore read as ceiling law: public result record evidence may be composed, but hidden bodies, provider/oracle success, source-file changes, launch-scope decision, and whole-system correctness cannot cross the lattice boundary.\n\nFocused test evidence checks the same relation. The verifier-lab test asserts that all expected negative cases are observed, all component statuses pass, `claim_separation` contains exactly the seven public buckets, oracle/provider authority counters stay at zero, `body_in_receipt` is false, public result record paths do not leak local roots, and legacy redaction fields do not survive result record normalization. Those checks make the lattice relation concrete for this module: the public aggregate result record is evidence of separation and containment, not of unbounded proof authority.\n\nEvidence binding:\n- JSON bundle authority: `core/paper_module_capsules.json#paper_module.verifier_lab_kernel`.\n- Mechanism source: `core/mechanism_sources.json#mechanism.verifier_lab_kernel.composes_public_formal_math_receipts`.\n- Component atlas edge: `core/organ_atlas.json#verifier_lab_kernel`.\n- Runtime source: `src/microcosm_core/organs/verifier_lab_kernel.py`.\n- First command: `PYTHONPATH=src python3 -m microcosm_core.organs.verifier_lab_kernel run --input fixtures/first_wave/verifier_lab_kernel/input --out receipts/first_wave/verifier_lab_kernel`.\n\nVerifier Lab Execution Spine Runs Lean on small bounded proof attempts in a temp copy and records what passed or failed. 4/5 Runs real tools\n\nDoes It copies a small public Lean math project into a throwaway temporary workspace and actually runs the Lean/Lake checker on a handful of small, bounded proof-step attempts the tool builds itself. It then writes down what the checker said: which attempts were accepted, which failed, and the failure category for each, plus safety counts (for example, how many attempts tried to sneak in forbidden content and were rejected). The pass/fail facts and the safety counts are readable directly, while the tool never shows the underlying proof text, never calls any outside service, and never modifies the original project or any existing source files.\n\nScope limit It is a tool-witness result record for bounded public Lean transition rows only: it does not establish general proof authority, count oracle/provider output as proof, export proof bodies or tactic scripts, use external model services, change source files, claim benchmark solve-rates, or include launch operations/public sharing.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.verifier_lab_execution_spine run --input fixtures/first_wave/verifier_lab_execution_spine/input --out .microcosm/verifier_lab_execution_spine\n```\n\nEvidence External tool run evidence 4/5 Real runtime result\n\nLinks to [Certificate Kernel Execution Lab](docs/components.html#component-certificate_kernel_execution_lab), [Engine Room Demo](docs/components.html#component-engine_room_demo)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/verifier_lab_execution_spine.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Verifier Lab Execution Spine\n\nExplains component [Verifier Lab Execution Spine](docs/components.html#component-verifier_lab_execution_spine) mechanism [validates public verifier transition witness](docs/rules-and-ideas.html#lattice-mechanism-mechanism-verifier-lab-execution-spine-validates-public-verifier-transition-witness) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n\n`verifier_lab_execution_spine` is the public execution witness for the verifier lab lane. It is narrower than `verifier_lab_kernel`: it actually runs bounded Lean transition candidates in a throwaway Lake project, records the return code of each run, and keeps every line of generated proof text and tool output out of the result record. A reader can then separate real execution evidence from overstated proof claims.\n\nThe component consumes a public execution packet with:\n- transition candidates, each naming a problem id, a target shape, and one action class from a fixed vocabulary (`rfl`, `decide`, `cases`, `induction`, `exact_premise`, and similar);\n- a small Lake project whose `MicrocosmProofWitness` library the component builds once and reuses;\n- CP2 translation requests that ask for the next typed action after a residual, and Evolve mutations that adjust bounded policy artifacts;\n- negative fixtures that smuggle a proof body, an oracle structured source record, a provider hypothesis, or an unbounded source-file changes into a row.\n\nThe component writes one `.lean` file per transition, runs `lake env lean` on it, and treats a zero exit code as `accepted`. It records the return code, the action class, and the failure class, but never the proof text, the stdout body, or the stderr body. The exported-bundle lane re-validates the same shape from a copied source-module manifest without re-running Lean, so a third party can inspect the bundle without a Lean toolchain installed.\n\n###### Purpose\n\nAutomated proof systems can blur how a result was obtained. A model can be handed the answer by an oracle, or prompted with the proof by a provider, and still report the result as if it had found the proof unaided. This component exists to keep that blurring out of the result record. It answers one question: did a bounded Lean candidate actually pass the verifier, with no help that the result record is hiding?\n\nThe discipline that makes this work is the separation of authority classes. Every row lands in exactly one bucket: `lean_verified` for candidates the verifier accepted, `oracle_compared` and `provider_suggested` for rows that existed only as references, `cp2_translated` for the typed next-action layer, `retrieval_miss` and `proof_synthesis_fail` for residuals, and `contract_rejected` for anything that broke the leak rules. The unusual choice is what does not happen: an oracle match never increments forward success, and provider text is never counted as a proof. The counters `oracle_forward_success_increment_count` and `provider_results_counted` are held at zero by construction.\n\nThe second idea is that real execution and clean result records are not in tension. A candidate carrying `oracle_visible: true`, or a forbidden field such as `proof_body` or `raw_tactic_script`, is rejected before Lean is ever invoked, so the run cannot be contaminated. The transition then runs for real, and the result record carries the return code and the failure class while the proof text and the stdout and stderr bodies stay out. The result record is public evidence precisely because the only things omitted are the things that would leak.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Packet[\"Execution packet transition candidates, CP2 requests, Evolve mutations, oracle/provider refs\"] Gate[\"Leak contract gate forbidden fields? oracle/provider visible? action class out of vocabulary?\"] Rejected[\"contract_rejected rejected before Lean runs\"] Build[\"Build Lake project lake build MicrocosmProofWitness (once, cached)\"] Run[\"Run candidate write .lean, lake env lean, return code = accepted?\"] Verified[\"lean_verified return code 0\"] Residual[\"retrieval_miss / proof_synthesis_fail non-zero return code\"] CP2[\"cp2_translated typed next action, no proof body\"] Evolve[\"evolve_candidate / evolve_accepted bounded policy artifacts only\"] Refs[\"oracle_compared / provider_suggested references, never counted as success\"] Counters[\"Authority counters oracle_forward_success = 0, provider_results = 0, proof_body_export = 0\"] Result records[\"metadata-only result records result, board, validation, sign-off; return codes kept, bodies omitted\"] Ceiling[\"Scope limit bounded public transition result record only\"] Packet --> Gate Gate -->|leak found| Rejected Gate -->|clean| Build Build --> Run Run -->|exit 0| Verified Run -->|non-zero| Residual Packet --> CP2 Packet --> Evolve Packet --> Refs Verified --> Counters Residual --> Counters CP2 --> Counters Evolve --> Counters Refs --> Counters Rejected --> Result records Counters --> Result records Result records --> Ceiling\n```\n\nEvidence/accounting used for this shape:\n- `core/paper_module_capsules.json::paper_modules[44:paper_module.verifier_lab_execution_spine]` is the source bundle with `source_authority: json_capsule`, subjects for component: verifier_lab_execution_spine and `mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness`, resolved `code_loci.path: src/microcosm_core/organs/verifier_lab_execution_spine.py`, and generated projection statuses `available_from_capsule_edges` / `linked_from_capsule_edges`.\n- `paper_modules/verifier_lab_execution_spine.json::paper_module_payload.source_row` carries the generated copy of that source record; `relationships.edges` has 19 entries and `relationships.unpopulated_selective_relations` is empty. This is readback evidence only, not an editable source.\n- `core/organ_atlas.json::organs[18]` classifies the component as `evidence_class: external_subprocess_witness`, names the first command, resolves the mechanism edge, and restates that the scope limit is bounded public Lean transition rows only.\n- `src/microcosm_core/organs/verifier_lab_execution_spine.py` defines the runtime spine: `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `RECEIPT_TRANSPARENCY_CONTRACT`, ANTI_CLAIM, `validate_source_module_imports`, `_build_lake_project`, `_build_result`, `write_receipts`, `run`, and `run_execution_bundle`.\n- `core/fixture_manifests/verifier_lab_execution_spine.fixture_manifest.json` names the fixture inputs, four expected negative cases, stable error codes, generated result record paths, result record field floor, and `body_copied_material_count: 5` for the exported body-floor lane.\n- `examples/verifier_lab_execution_spine/exported_verifier_lab_execution_spine_bundle/source_module_manifest.json` records `module_count: 5`, `body_in_receipt: false`, exact-copy digest matches, validation refs, and blocked private/external model service payload bodies.\n- result records/sign-off/first_wave/verifier_lab_execution_spine_fixture_acceptance.json records `status: pass`, `accepted_scope: bounded_public_lean_transition_execution_only`, `accepted_transition_count: 4`, `residual_transition_count: 2`, zero provider/oracle/proof-body/source-file changes counters, the four observed negative cases, and `release_authorized: false`.\n- `tests/test_verifier_lab_execution_spine.py` checks fixture execution, exported-bundle structure, source-module digest blocking, metadata-only result record transparency, and exact public body-floor manifest behavior.\n\n###### Reader Evidence Routing\n\nA cold-reader audit starts with the module definition and structured source record proof, then moves to the fixture and exported bundle.\n\nEvidence should be read in this order:\n- Bundle proof: `core/paper_module_capsules.json::paper_module.verifier_lab_execution_spine` and `paper_modules/verifier_lab_execution_spine.json`.\n- Execution proof: declared command intent, fixture input ref, tool version facts, stdout/stderr classification, validator result record refs, and sign-off result record refs.\n- Bundle proof: exported execution-bundle run and the same command/tool/result record membrane in disposable outputs.\n- Negative boundary proof: missing command intent, missing tool facts, missing result record refs, stale execution facts, proof-authority overclaiming, proof-body export, model-output data export, benchmark solve-rate certification, hosted deployment, and launch-scope decision.\n\n###### Prior Art Grounding\n\nThis component is grounded in reproducible execution and proof-assistant witness patterns. Lean/Lake execution inherits from the small-kernel proof-assistant tradition represented by the [Lean theorem prover](https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/) and by LCF/HOL systems such as [HOL Light](https://www.cl.cam.ac.uk/~jrh13/papers/hollight.html). Artifact evaluation practice also motivates recording command identity, tool facts, stdout/stderr classification, and result record refs separately from the claim they support.\n\nMicrocosm borrows the execution-spine discipline: a command can witness that a bounded tool run happened, but tool output must not become theorem-certification or benchmark authority. It does not expose proof bodies or certify solve rates.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\nA green result record proves only bounded execution-spine evidence: command intent, tool facts, stdout/stderr classification, result record refs, and explicit missing-fact failures. It does not establish general proof certification, proof-body safety beyond the fixture membrane, benchmark solve rate, hosted deployment, or launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module can claim the following for the verifier lab execution spine: the component subject resolves, the runtime source locus is named, a diagram view is generated for this module, and an atlas card is generated for this module. It cannot claim general proof certification, Mathlib-dependent proof authority, proof-body safety beyond the fixture membrane, benchmark solve-rate certification, provider authority, source-file changes, hosted deployment, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\nFixture result records, exported execution-bundle result records, focused tests, command intent, tool-version facts, stdout/stderr classification, result record refs, and missing-fact failures can support only bounded execution-spine evidence. The diagram and atlas views are navigation aids derived from the module definition; they do not promote a tool run into proof certification, benchmark authority, or launch-scope decision.\n\n###### Scope limit\n\nThis paper module describes public execution-spine result records only. It does not establish general proof certification, authorize Mathlib-dependent proof authority, expose private proof bodies, certify benchmark solve rates, use external model services, change source files, include launch operations, or authorize hosted deployment.\n\nCertificate Kernel Execution Lab Runs the Lean verifier over a small public proof project and reports which rows it accepted. 4/5 Runs real tools\n\nDoes It builds a small public Lean/Lake project, then runs the Lean verifier over declared \"transition\" rows that reference a set of generated \"certificate\" declarations, and writes a structured result record showing which rows the verifier accepted, which it left unresolved or rejected, plus the exact build command, return code, and file hashes. The result record is honest, inspectable evidence that a real Lean verifier ran on public material, with proof text, provider/oracle output, and private source deliberately excluded from the result record and that exclusion recorded (not silently dropped) rather than passed off as evidence.\n\nScope limit It is a local tool-witness that the declared public fixture rows compiled and were adjudicated by the local Lean verifier; it excludes general proof authority, count oracle/provider output as proof, expose proof text, change source files, claim a benchmark solve-rate, or include launch operations.\n\nRun\n\n```text\nmicrocosm certificate-kernel-execution-lab run --input fixtures/first_wave/certificate_kernel_execution_lab/input --out receipts/first_wave/certificate_kernel_execution_lab\n```\n\nEvidence External tool run evidence 4/5 Real runtime result\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/certificate_kernel_execution_lab.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Certificate Kernel Execution Lab\n\nExplains component [Certificate Kernel Execution Lab](docs/components.html#component-certificate_kernel_execution_lab) mechanism [validates public certificate kernel execution](docs/rules-and-ideas.html#lattice-mechanism-mechanism-certificate-kernel-execution-lab-validates-public-certificate-kernel-execution) Governed by principle [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3) concept [formal math and proof witnesses as bounded public proof-adjacent result records](docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle) Abides by axiom [Kernelized verification](docs/doctrine.html#dcard-ax-2) Depends on paper module [Verifier Lab Execution Spine](docs/paper-modules.html#paper-module-verifier-lab-execution-spine)\n\n###### Abstract\n\n`certificate_kernel_execution_lab` is a source-available public runtime refactor of the source certificate-kernel pattern. It runs a small Lean/Lake certificate kernel, generated certificate rows, analyzer metadata, CP2 typed-action reruns, and bounded Evolve policy reruns without importing private proof bodies. The exported bundle also carries copied source body modules from the real Erdos #257 certificate-kernel system: Lean kernel files, generated certificates, the strike runner, toolchain files, and Lean profile result records. The v2 fixture carries both a simple `NatSumCertificate` row family and a miniature `BoundedOrderCertificate` family so the public lab is no longer only a single-shape arithmetic result record.\n\n###### Purpose\n\nThis component exists to stop a proof-adjacent claim from resting on prose. The single question it answers is narrow: did a small Lean kernel actually compile and accept the declared certificate rows, here and now, with the command, the return code, and the source hashes on record? Everything else in the page is accounting that keeps the answer honest.\n\nThe reduction it relies on is the interesting part. A large class of proof-adjacent facts can be expressed as a finite certificate plus a decidable Boolean checker shaped like `validate : Cert -> Bool`. The agent is never asked to write a human proof. It is asked to supply the right certificate rows, and Lean decides. The fixture carries two checker families, `NatSumCertificate` over arithmetic and `BoundedOrderCertificate` over a bounded modular order, so the sign-off is not a single hard-coded shape. A row counts as accepted only when the runner shells out to `lake env lean` over a temporary copy of the public project and receives exit code 0.\n\nWhat is unusual is the weight placed on rejection. Deliberately wrong rows, a missing certificate, a bad arithmetic certificate, a bad bounded-order certificate, must fail through the same real Lean route, in the residual class the fixture predicted. A bundle that can show only green sign-off is treated as a replay artifact, not as certificate-kernel evidence. The runner also keeps the proof channel separate from the language model channel: a transition that can see oracle structured source record or provider hypothesis text is rejected before execution, so a model's confidence can never be quietly counted as a proof. The result record records command identity, counts, and verdicts, and never the proof bodies themselves.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"certificate-kernel runtime\"] fixture[\"first-wave Lean fixture\"] bundle[\"exported certificate bundle\"] manifest[\"certificate manifest\"] lake[\"Lean/Lake subprocess\"] analyzer[\"Lean analyzer metadata\"] transitions[\"transition trace rows\"] cp2[\"CP2 typed-action reruns\"] evolve[\"bounded Evolve reruns\"] source_modules[\"source-module body floor\"] readout[\"public readout\"] result records[\"metadata-only result records\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle fixture --> manifest bundle --> manifest manifest --> lake lake --> analyzer lake --> transitions transitions --> cp2 cp2 --> evolve source_modules --> analyzer analyzer --> readout evolve --> result records readout --> result records result records --> ceiling\n```\n\nThe module shape is a bounded public certificate-kernel execution witness, not general theorem authority. This page points at the mechanism and runtime component; the runtime validates Lean/Lake command identity, source hashes, generated certificate rows, analyzer metadata, transition traces, CP2 typed-action reruns, bounded Evolve reruns, source-module manifest digests, negative cases, public readout, metadata-only result records, and an scope limit.\n\n###### Mechanism\n\nThe mechanism is a finite-certificate execution reducer. The public entrypoints `run` and `run_certificate_bundle` both call `_build_result`, which loads the certificate lab packet, certificate manifest, Lean project, optional negative fixtures, and optional exported-bundle source manifest before any claim is recorded. The fixture path may run Lean/Lake in a temporary public workspace; the exported-bundle path validates the standalone runtime contract and copied body floor without rerunning private source machinery.\n\nThe reducer first establishes source and result record boundaries. `_input_paths` enumerates the public Lean files and JSON inputs, then `scan_paths` checks them against `core/private_state_forbidden_classes.json`. `_source_module_manifest_result` verifies the exported bundle's nine copied source bodies by material class, target presence, required anchors, and SHA-256 equality; `_source_open_body_import_summary` turns that manifest into the body floor that result records can cite without carrying proof bodies.\n\nExecution evidence is split into three layers. `_build_lake_project` runs `lake build MicrocosmCertificateLab` for the fixture path, while `_analyze_lean_project` records public Lean imports, declarations, line counts, and hashes with `body_in_receipt: false`. `_execute_transitions` then sets certificate transition rows through Lean: accepted rows must return zero, missing or bad certificate rows must fail in the expected residual class, and CP2/Evolve rows must rerun within allowed action and artifact classes instead of mutating arbitrary source.\n\nThe negative cases are part of the proof consumer, not examples around it. `EXPECTED_NEGATIVE_CASES` requires rejection of provider/oracle-visible transition rows, CP2 proof-body leakage, Evolve source-file changes, and non-public source refs in the manifest. The focused regression test `tests/test_certificate_kernel_execution_lab.py` exercises those refusals, digest mismatch handling, cached command-card economy, public readout generation, and the counters that keep oracle/provider/proof-body/source-file changes at zero.\n\n`AUTHORITY_CEILING` and `RECEIPT_TRANSPARENCY_CONTRACT` bind the mechanism back to the lattice relation. The module can claim bounded public fixture and bundle evidence over Lean/Lake command identity, certificate rows, analyzer metadata, transition outcomes, CP2/Evolve reruns, source manifest digests, and metadata-only result records. It cannot claim general theorem authority, provider proof authority, benchmark solve rate, private-body equivalence, source-file changes, launch, or whole-system correctness.\n\n###### Public Surfaces\n- Component runner: `python -m microcosm_core.organs.certificate_kernel_execution_lab run --input fixtures/first_wave/certificate_kernel_execution_lab/input --out receipts/first_wave/certificate_kernel_execution_lab`\n- Exported bundle runner: `python -m microcosm_core.organs.certificate_kernel_execution_lab run-certificate-bundle --input examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle --out receipts/runtime_shell/demo_project/organs/certificate_kernel_execution_lab`\n- CLI: `microcosm certificate-kernel-execution-lab run --input fixtures/first_wave/certificate_kernel_execution_lab/input --out receipts/first_wave/certificate_kernel_execution_lab`\n- Standard: `standards/std_microcosm_certificate_kernel_execution_lab.json`\n- Fixture manifest: `core/fixture_manifests/certificate_kernel_execution_lab.fixture_manifest.json`\n- Source-module manifest: `examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle/source_module_manifest.json`\n\n###### Prior Art Grounding\n\nThis component is grounded in proof-carrying and proof-assistant traditions. Necula's [Proof-Carrying Code](https://www.usenix.org/legacy/publications/library/proceedings/osdi96/full_papers/necula/html/node2.html) anchors the idea that an untrusted producer can supply a certificate checked by a small trusted verifier. The [Lean theorem prover](https://www.microsoft.com/en-us/research/publication/the-lean-theorem-prover-system-description/) continues the small-kernel proof-assistant lineage, and [LeanDojo](https://arxiv.org/abs/2306.15626) shows why reproducible Lean environments, premise access, and programmatic proof-state interaction matter for theorem-proving agents.\n\nMicrocosm borrows the certificate-kernel discipline: certificate rows, Lean/Lake command identity, return codes, source hashes, transition traces, negative rows, and metadata-only result records must be visible before proof-adjacent language is allowed. It does not claim general theorem proof authority.\n\n###### Research Bet\n\nThis component is the certificate-kernel bet in runnable form: a large class of proof-adjacent facts can be reduced to a finite certificate plus a decidable Boolean checker. The public lab keeps the agent task narrow. It does not ask the agent to synthesize a human proof; it asks for the right certificate rows, then lets Lean/Lake decide whether the checker accepts them.\n\nThe toy path uses a Lean certificate kernel shaped like `validate : Cert -> Bool` and accepts only when Lean can compile and run the declared check. The source-body import path carries the real Erdos #257 source floor: Lean kernel files, generated certificate shards, toolchain files, and profile result records from the Mathlib formalization family. The result record may say \"accepted\" only when the public runner shells out to Lean/Lake and receives exit code 0 for the declared bundle.\n\nThe negative floor is part of the proof, not decoration. Deliberately wrong certificate rows must be rejected by the real Lean route, including arithmetic and bounded-order failures. A bundle that cannot show genuine rejection cases is only a replay artifact, not certificate-kernel evidence.\n\n###### Source-Backed Doctrine Binding\n- Component: `src/microcosm_core/organs/certificate_kernel_execution_lab.py`\n- Bundle: `core/paper_module_capsules.json#paper_module.certificate_kernel_execution_lab`\n- Mechanism: `core/mechanism_sources.json#mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution`\n- Standard: `standards/std_microcosm_certificate_kernel_execution_lab.json`\n- Evidence class: `core/organ_evidence_classes.json::certificate_kernel_execution_lab` records `external_subprocess_witness` at rank 4.\n- Source-module manifest: `examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle/source_module_manifest.json` declares nine copied Lean/tool/profile body modules.\n- Runtime result record: `receipts/runtime_shell/demo_project/organs/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle_validation_result.json`\n- Sign-off result records: `receipts/first_wave/certificate_kernel_execution_lab/*` and result records/sign-off/first_wave/certificate_kernel_execution_lab_fixture_acceptance.json\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[7:paper_module.certificate_kernel_execution_lab]` is the JSON authority row. A diagram view is generated for this module; the Atlas card for this module is staged and will appear once the component-atlas lane completes its binding pass.\n- Mechanism route: `core/mechanism_sources.json::mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution` binds the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and runtime code locus.\n- Runtime route: `src/microcosm_core/organs/certificate_kernel_execution_lab.py` owns `run`, `run_certificate_bundle`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `_build_result`, `_receipt_freshness`, `build_public_readout`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_NAME`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n- Exported-bundle route: `examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle` is the public runtime bundle. Open `source_module_manifest.json` before using copied-body counts, then inspect the runtime validation result record and public readout.\n- Focused-test route: `tests/test_certificate_kernel_execution_lab.py` verifies Lean/Lake execution, analyzer output, transition batching, CP2/Evolve counters, public structured bundle shape, digest mismatch rejection, exact copied source modules, cached command-card economy, transparent metadata-only result records, and the cold-reader public readout.\n\n###### Cold-Agent Use\n\nOpen the source-module manifest first, then the runtime result record, then the component source. The useful claim is not that Microcosm proved the Erdos #257 theorem, solved a benchmark, imported private proof bodies, or gained provider/oracle authority. The useful claim is that Microcosm can force a proof-adjacent story to expose Lean/Lake command identity, return codes, source hashes, declaration counts, certificate rows, transition traces, typed CP2 actions, bounded Evolve reruns, source-module body refs, negative-case result records, and authority counters before certificate-kernel language is allowed.\n\nRe-entry condition: after the sibling `organ_atlas.json` lane releases, bind this paper-module bundle, mechanism ref, and code locus into the atlas row and rerun `python -m microcosm_core.doctrine_lattice --check`.\n\n###### Validation Result record Path\n\nRun the first-wave fixture into disposable result records from the Microcosm root:\n\nRun the exported bundle through the same component:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.certificate_kernel_execution_lab run-certificate-bundle --input examples/certificate_kernel_execution_lab/exported_certificate_kernel_execution_lab_bundle --out /tmp/microcosm_certificate_kernel_execution_lab_bundle\n```\n\n```text\ncd microcosm-substrate\n../repo-pytest tests/test_certificate_kernel_execution_lab.py -q\ncd ..\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Authority Boundary\n\nThe lab proves only that the declared public Lean fixture compiled and that the declared transition rows were accepted, rejected, or left residual under the local verifier. The copied source body modules are public source-open body material, but result records cite them only by manifest row, hash, class, count, and required anchor. It does not expose proof text through result records, count oracle/provider output as proof authority, change source files, claim benchmark solve-rate, or include launch operations.\n\n###### Result record Shape\n\nResult records are public evidence. The lab exposes structured theorem/declaration names, Lean/Lake command identity, return codes, hashes, declaration counts, accepted/residual counts, negative-case ids, CP2 action classes, Evolve policy artifact ids, source-module manifest status, copied body-material counts, authority counters, scope limit, and scope boundary. It omits only proof, provider, oracle-answer, private-source, and stdout/stderr payload bodies, and records that omission through `secret_exclusion_scan` and `body_in_receipt: false` rather than treating absence as product evidence.\n- Lean/Lake build result record for `MicrocosmCertificateLab`.\n- Analyzer metadata for public Lean files: imports, declarations, hashes, and line counts with proof bodies omitted from JSON result records.\n- Transition rows for valid certificates, missing certificate rows, bad generated certificate rows, and bounded order-certificate rows.\n- CP2 typed-action translations over missing-certificate residuals, with Lean reruns proving downstream effect.\n- Bounded Evolve mutations over certificate row selection policy, accepted only after reruns and no leakage regression.\n- Source-open body import rows for the real source certificate-kernel body floor: exact copied targets under `source_modules/ai_workflow`, source/target hashes, material classes, and provenance anchors, with result record body text forbidden.\n\n###### Scope boundary\n\nThis is a source-available certificate-kernel laboratory with copied source body material, not a private source dump and not general proof authority beyond the declared fixture rows and source-module body refs.\n\n###### Scope limit\n\nThis paper module can claim a certificate-kernel laboratory backed by a structured doctrine row, with a diagram view generated from that row. The Atlas card for this module is staged pending the component-atlas lane's binding pass; that is honest coordination state, not a content gap.\n\nIt cannot claim formal-result correctness, benchmark solve rate, private proof body export, provider or oracle authority, source-file changes, publishing-scope decision, launch-scope decision, or whole-system proof authority. The Atlas card must be completed by the owning component-atlas/bundle route and builder regeneration, not by hand-editing Markdown.\n\n###### Limitations\n\nThis module is a bounded public execution witness, not a theorem-proving authority. Its evidence depends on the shipped public Lean/Lake fixture, generated certificate rows, analyzer metadata, CP2 typed-action reruns, bounded Evolve reruns, and copied source-module manifest. A green run proves that this certificate-kernel bundle follows those constraints; it does not establish the Erdos #257 theorem, Mathlib coverage, benchmark solve rate, or correctness of private source proof bodies.\n\nThe source-open body floor is intentionally narrow. The exported bundle carries nine copied Lean/tool/profile bodies under `source_modules/`, and the result records may cite only refs, hashes, material classes, counts, required anchors, and verdicts. Proof bodies, raw tactic scripts, model-output data, oracle answers, private source paths, stdout/stderr bodies, account secrets, and private source-root material remain outside the public result record surface.\n\nThe focused regression covers the declared fixture and exported bundle shape. It checks Lean/Lake execution boundaries, analyzer output, transition batching, CP2/Evolve counters, digest mismatch rejection, exact copied source modules, cached command-card economy, transparent metadata-only result records, and public readout shape. It excludes future certificate families, generated Atlas/site public sharing, source-file changes, or public launch without the owning builder and launch lanes.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe bundle places this module under `concept.formal_math_and_proof_witness_bundle`: proof-adjacent public claims must be reduced to explicit witness artifacts before a reader is allowed to treat them as evidence. In this module, the witness artifacts are the public Lean/Lake subprocess result, generated certificate rows, analyzer metadata, transition traces, CP2/Evolve rerun evidence, copied source-module manifest, and metadata-only result records. Markdown explains that lattice; it does not replace the JSON bundle or the validator result records.\n\n`P-3` is the governing principle edge for the module's claim discipline. The runtime does not ask whether a proof story is persuasive; it requires a finite certificate family, a named verifier route, visible command identity, explicit return codes, public-relative refs, and result record transparency. That is why the mechanism row binds `run`, `run_certificate_bundle`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `_build_result`, `_receipt_freshness`, and `build_public_readout` as the code locus instead of treating the paper module as independent proof evidence.\n\n`AX-2` is the hard boundary: public proof language must remain inside the declared certificate-kernel execution evidence. The standard's scope limit keeps `formal_proof_authority` limited to bounded public fixture rows and keeps external model access, oracle success, source-file changes, private-system equivalence, launch-scope decision, runtime correctness, and whole-system correctness false.\n\nThe dependency on `paper_module.verifier_lab_execution_spine` tells a reader how to interpret the lab. The certificate kernel is one proof-adjacent execution cell inside the verifier-lab spine: it can show accepted/residual transition rows and rerun effects, but it cannot promote those rows into launch, public sharing, benchmark, or theorem-authority claims without the sibling verifier and launch lanes.\n\nProof / Control / Runtime Import Bundle Checks fourteen proof, control, and runtime parts as one unit that rejects every overclaim. 5/5\n\nDoes This bundle imports the Set-4 proof/control/runtime source modules and checks them as one inspectable unit. It surfaces the 14 mechanisms, the copied module manifest, the digest/anchor evidence, and the negative cases that reject proof, benchmark, launch, runtime, and non-public-state overclaims without exposing source bodies in result records.\n\nScope limit It validates only a public source-open bundle and bounded negative fixtures; it is not an Erdos #257 solution, not benchmark evidence, not public sharing or launch-scope decision, not live Codex/browser/runtime authority, and not private-system equivalence.\n\nRun\n\n```text\nmicrocosm batch4-proof-authority-runtime run --input fixtures/first_wave/batch4_proof_authority_runtime/input --out receipts/first_wave/batch4_proof_authority_runtime --acceptance-out receipts/acceptance/first_wave/batch4_proof_authority_runtime_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch4_proof_authority_runtime.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 4 Proof, Authority, and Runtime Bundle\n\nExplains component [Proof / Control / Runtime Import Bundle](docs/components.html#component-batch4_proof_authority_runtime) mechanism [validates public proof authority runtime bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch4-proof-authority-runtime-validates-public-proof-authority-runtime-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\n`batch4_proof_authority_runtime` is the public source-open evidence membrane for fourteen source mechanisms that are easy to overclaim: proof search, machine-checked mathematics, reasoning-authority fences, completion planning, Codex runtime diagnostics, bitemporal coordination, taskpolicy wrapping, and context-yield attribution.\n\n###### Purpose\n\nThese fourteen mechanisms sit close to claims a reader will want to make on their behalf. A proof-search benchmark looks like solving open problems. A copied `CertificateKernel.lean` for Erdos #257 looks like a solution. A reasoning-grant fence looks like a live sandbox. The single question this bundle answers is narrow and deliberately so: can each of these mechanisms be shown to a cold reader as copied, anchored, public source, without any of them quietly inheriting an authority it does not have?\n\nThe unusual part is how the bundle resists the easy inflation. It does not run the mechanisms; it imports their source bodies, checks each one against named required anchors, and then recomputes a stable negative case per mechanism from that source rather than trusting a fixture to declare its own verdict. For the Erdos #257 row it runs a static token scan over the copied Lean source and rejects `sorry`, `admit`, and `axiom`, so an absent proof obligation cannot be smuggled in. An optional local Lean/Lake compile probe is wired in too, but a pass means only that the copied kernel elaborated without error, and the code records that as a non-authoritative availability signal, never as formal-result correctness.\n\nThe result is a membrane, not a flagship. The interesting claim is the one it refuses: source import is made auditable, every result record stays metadata-only, and each tempting stronger statement is forced into a visible scope boundary with the authority delta held at `none`.\n\n###### Abstract\n\n`batch4_proof_authority_runtime` is a technical paper module for the Set 4 proof/authority/runtime bundle. Its positive claim is deliberately narrow: Microcosm imports exact copied source source modules into a public bundle, checks source digests and required anchors, runs bounded fixture and bundle validators, records semantic negative cases, and emits metadata-only result records with explicit scope limits.\n\nThis module does not claim formal formal-result correctness. It is not a Lean/Lake execution component, not an Erdos #257 solution, not an official benchmark result, not live sandbox enforcement, not live Codex orchestration, not external model access, not source-file changes, not publishing-scope decision, not launch-scope decision, not private-system equivalence, and not whole-system correctness. Where the paper mentions Lean/Lake, it distinguishes Set 4's static copied-source checks from sibling witness components that actually run local Lean/Lake processes.\n\n###### Telos\n\nThe Set 4 bundle exists to make proof-adjacent runtime claims inspectable without leaking private roots or inflating source import into proof authority. It gathers fourteen mechanism families that otherwise invite overclaiming: strategy-control proof search, prover-skill foundry work, VeriSoftBench harness diagnostics, Erdos #257 certificate-kernel source anchors, Lean packet replay, dry-run authority grants, completion planning, Codex runtime diagnostics, bitemporal coordination, macOS taskpolicy wrapping, and context-yield attribution.\n\nThe paper's job is not to make those systems authoritative by prose. Its job is to explain the public result record membrane: what was copied, what was checked, what negative cases were observed, what was omitted from result records, and which scope limit remains in force.\n\n###### Mechanism Overview\n\nThe public fixture manifest names fourteen mechanism rows and one stable negative case per mechanism:\n- `lean_strategy_control_benchmark`\n- `prover_skill_foundry`\n- `verisoftbench_harness_differential`\n- `verisoftbench_calibration_executor`\n- `erdos257_certificate_kernel`\n- `lean_full_fidelity_packet_verifier`\n- `reasoning_execution_authority_grant`\n- `forward_integration_policy_fence`\n- `closeout_executor_state_machine`\n- `codex_cdp_driver`\n- `codex_idle_heartbeat_fsm`\n- `metabolism_bitemporal_claim_log`\n- `macos_taskpolicy_actuator`\n- `context_yield_attribution`\n\nThe exported bundle contains nineteen exact copied source source modules. Validation checks their manifest rows, SHA-256 digests, line counts, required anchors, and per-mechanism public exercise clauses. Result records carry source refs, digests, anchors, counts, verdicts, negative-case ids, and scope limits; they do not inline copied body text or private runtime state.\n\n###### Runtime Mechanism\n\nThe runtime has two public entry shapes:\n1. `run` consumes `fixtures/first_wave/batch4_proof_authority_runtime/input`, evaluates the Set 4 fixture manifest, writes the public result board, and emits sign-off JSON.\n2. `validate-bundle` consumes `examples/batch4_proof_authority_runtime/exported_batch4_proof_authority_runtime_bundle`, validates the copied-source manifest, and emits a bundle validation result record.\n\nBoth paths enforce the same ceiling. They validate public fixture evidence and copied-source integrity; they do not run providers, dispatch live Codex state, execute a live sandbox, change source files, submit benchmark results, approve public sharing, approve launch, or establish formal-result correctness.\n\nFor the Erdos #257 certificate-kernel row, Set 4 performs a static placeholder-token scan over copied Lean source and ties that scan to target-runner anchor evidence. That scan may reject `sorry`, `admit`, and `axiom` mutations in the copied source floor. It is not a Lean proof check and not a certificate that the open problem has been solved.\n\n###### Diagram\n\nDiagram source\n\n```text\nflowchart TD fixture[\"Public fixture manifest 14 mechanism rows + 14 negative cases\"] bundle[\"Exported public bundle 19 copied source modules\"] runtime[\"Set 4 runtime run / validate-bundle\"] anchors[\"Per-mechanism source check module present + required anchors in body\"] scan[\"Erdos #257 static scan reject sorry / admit / axiom\"] probe[\"Optional Lean/Lake probe copied kernel elaborates? availability only\"] negatives[\"Negative cases recomputed verdict derived from source, not declared\"] result records[\"metadata-only result records refs, digests, anchors, counts, verdicts\"] ceiling[\"Scope limit authority delta = none\"] leanWitness[\"Sibling Lean/Lake components actually run local proofs\"] fixture --> runtime bundle --> runtime runtime --> anchors runtime --> scan scan --> probe runtime --> negatives anchors --> result records scan --> result records probe --> result records negatives --> result records result records --> ceiling leanWitness -. \"separate execution evidence\" .-> ceiling\n```\n\nThe dashed edge is intentional. Lean/Lake subprocess evidence informs the technical boundary, but Set 4 itself does not inherit proof authority from sibling components.\n\n###### Semantic Negatives And Threat Model\n\nThe negative cases are not decoration. They are the public failure floor that prevents a source-import bundle from becoming an unbounded proof or runtime claim. The fixture includes negatives for weak proof skeletons, low-repair foundry promotion, benchmark truth leakage, prefix-answer leakage, Erdos solution overclaim, packet hash corruption, forbidden authority grants, dirty forward integration targets, stale completion heads, absent CDP ports, stale idle snapshots, expired bitemporal claims, missing taskpolicy binaries, and accepted read guards.\n\nThe threat model is overclaiming. A green result record must not be interpreted as:\n- a formal proof of a theorem;\n- a solution to Erdos #257;\n- an official benchmark result or leaderboard submission;\n- a live provider, browser, sandbox, Codex, or metabolism run;\n- authorization to change source files, publish, launch, or export private state;\n- evidence that public copied modules are equivalent to a private root.\n\n###### Result Interpretation\n\nA passing fixture command evidences that the public manifest, mechanism rows, negative cases, result record body scan, and scope limit are internally consistent for the Set 4 fixture. A passing bundle command evidences that the exported copied-source manifest matches expected digests and anchors while keeping result records metadata-only. A passing focused pytest evidences regression coverage for fixture execution, bundle validation, source digest mismatch, mutated Lean body rejection, exact-copy imports, private-body omission, and semantic negative-case evaluation.\n\nThese are engineering result records. They are not formal proof certificates. They support public reader confidence in the bundle's source-open evidence membrane; they do not certify theorem truth, benchmark claims, launch-scope decision, or whole-system correctness.\n\n###### Relationship To Formal-Proof Concepts\n\nSet 4 relates to formal-proof practice through boundary discipline, not through theorem authority. The local concept edge is `concept.formal_math_and_proof_witness_bundle`: proof-adjacent claims must pass through explicit witness artifacts, source refs, digests, declaration or anchor metadata, negative cases, and metadata-only result records before they become reader evidence.\n\nThe sibling `formal_math_lean_proof_witness` component supplies the small public Lean/Lake witness pattern. The sibling `certificate_kernel_execution_lab` component supplies the bounded certificate-kernel execution pattern. Set 4 imports and validates copied source-body evidence around those themes, but it keeps the authority delta at `none`.\n\nThis distinction is the main technical result of the paper: a source-open public bundle can be useful without pretending to be a formal proof. It can make evidence auditable, show exactly where a proof-adjacent route stops, and force every tempting stronger claim into a visible scope boundary.\n\n###### Data And Artifact Availability\n\nThe public artifact boundary is the standalone `microcosm-substrate` root. A cold reader should use the paper module, generated structured source record, standard, fixture manifest, exported bundle manifest, focused test, and metadata-only result records inside that root. Public links and public sharing surfaces must resolve to the public Microcosm system, not private source roots, model-output data stores, browser state, prompt-shelf bodies, or operator-voice material.\n\n###### Prior Art Grounding\n\nThe runtime keeps the authority to act separate from the evidence that an action is permitted. This is the idea behind proof-carrying code ( [Necula, 1997](https://en.wikipedia.org/wiki/Proof-carrying_code)) and capability-based security, where a request arrives with evidence of its own legitimacy rather than relying on ambient trust. Microcosm borrows the proof-before-authority ordering over fixtures; the result is fixture-bound evidence, not a verified authorization system or launch-scope decision.\n\n###### Reproducibility Route\n\nRun these commands from `microcosm-substrate/` when validating this module without changing durable generated projections:\n\nThe projection checks for the broader paper-module corpus remain:\n\n```text\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check\n```\n\nThe direct runtime commands and focused pytest are the minimum useful validation.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src python3 -m pytest tests/test_batch4_proof_authority_runtime.py -q\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThese are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Source Authority And Projection Boundary\n\nThe source authority for this paper-module identity is the JSON source record:\n- `core/paper_module_capsules.json::paper_modules[77:paper_module.batch4_proof_authority_runtime]`\n- generated structured source record: `paper_modules/batch4_proof_authority_runtime.json`\n- local standard: `standards/std_microcosm_batch4_proof_authority_runtime.json`\n- runtime locus: `src/microcosm_core/organs/batch4_proof_authority_runtime.py`\n- focused validator: `tests/test_batch4_proof_authority_runtime.py`\n\nIt may explain the source record, the generated relationship set, and the validation route, but it does not mint new subject edges, proof authority, Mermaid authority, Atlas authority, or launch status. Future relationship changes belong in the source record plus builder regeneration, not in hand-authored Markdown.\n\n###### Lean/Lake Witness Boundary\n\nSet 4 should be read as the import/result record bundle, not as the Lean/Lake executor. Actual local Lean/Lake subprocess evidence lives in sibling public components:\n- `formal_math_lean_proof_witness` runs a tiny public Lean/Lake fixture and exported witness bundle, records local tool availability, build status, declaration metadata, four negative-case observations, and metadata-only result records. Its scope limit is toy public witness evidence only; it rejects Mathlib, Aesop, and Batteries authority unless a wider authority plane is introduced.\n- `certificate_kernel_execution_lab` runs a bounded public certificate-kernel lab through Lean/Lake machinery, records command identity, transition rows, accepted/residual counts, copied-source manifest status, negative cases, and metadata-only result records. Its scope limit is bounded certificate-kernel evidence, not general theorem authority.\n\nTherefore the correct reading is layered:\n- Set 4 validates source-open source-body import, static placeholder scanning, authority-boundary fields, and semantic negatives.\n- The Lean/Lake witness components validate that specific public fixtures can route through local Lean/Lake subprocesses under their own ceilings.\n- None of these pages, individually or together, claim arbitrary formal-result correctness, Mathlib-dependent proof authority, benchmark claims, Erdos #257 solution status, publishing-scope decision, launch-scope decision, or private-system equivalence.\n\n###### Public/Private Boundary\n\nAllowed public material:\n- mechanism ids, source-module ids, negative-case ids, and stable error codes;\n- exact copied source modules in the exported public bundle;\n- source refs, SHA-256 digests, line counts, required anchors, and bounded outcomes;\n- scope limits, scope boundaries, and metadata-only validation verdicts.\n\nForbidden public material:\n- keys, account secrets, browser state, account or browser state, model-output data bodies, browser UI live-access material, live Codex state exports, live metabolism DB exports, private runtime state, source notes, prompt-shelf bodies, theorem work-product bodies, raw command-output bodies, public sharing operation state, and official benchmark submission state.\n\nThe exported bundle may contain approved copied source modules. The result records are stricter: they identify copied modules by refs, digests, anchors, classes, counts, and verdicts, not by inlining source bodies.\n\n###### Limitations\n\nThe current module has these hard limits:\n- Set 4 does not execute Lean/Lake; it performs static checks over copied source and validates public manifest evidence.\n- Static placeholder-token scanning is bounded evidence checking.\n- Digest and anchor equality do not prove semantic equivalence to a private root.\n- Negative-case coverage is finite and fixture-bound.\n- metadata-only result records improve public safety, but they are not a substitute for formal proof review.\n- Generated Mermaid, Atlas, and JSON structured source record are projections; they do not create source authority.\n- Accepted-component status means accepted current public result record inventory for this verified source-body import, not launch, public sharing, benchmark, or theorem authority.\n\n###### Scope limit\n\nThis module may claim fixture-bound public source-body import, exact copied source-module digest checks, required-anchor checks, static placeholder-token scan evidence, dry-run authority-boundary evidence, semantic negative-case evidence, and metadata-only result record discipline.\n\nIt may not claim theorem success, Lean formal-result correctness, Erdos #257 solution status, official benchmark claims, live sandbox enforcement, live Codex orchestration, external model access, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.\n\nProof Derived Governed Mutation Authorization Checks a synthetic change-authorization record for its proof-and-approval chain, bound to a real commit. 5/5\n\nDoes Replays a make-believe example of \"should this change be allowed to run?\" and shows, step by step, why each proposed action was permitted. All three actions (a look-only inspection, a small config write, and an undo of that write) had to carry proof evidence and two visible policy approvals before anything was admitted; on top of that, the two actions that actually change something (the config write and the undo) also had to show a logged record of the change and a matching undo result record. Just holding a password or account secret is never treated as permission, and nothing here touches a real account or makes any real change.\n\nScope limit It validates only a declared, synthetic governed-mutation contract and excludes live cloud/account action, standing account secrets, source or irreversible mutation, policy-after-execution, hidden votes, external model access, benchmark-score claims, or launch.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.proof_derived_governed_mutation_authorization run --input fixtures/first_wave/proof_derived_governed_mutation_authorization/input --out receipts/first_wave/proof_derived_governed_mutation_authorization --acceptance-out receipts/acceptance/first_wave/proof_derived_governed_mutation_authorization_fixture_acceptance.json\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Release Public Wording Gate](docs/components.html#component-batch12_release_claim_language_gate), [Proof / Control / Runtime Import Bundle](docs/components.html#component-batch4_proof_authority_runtime), [Policy Engines Bundle](docs/components.html#component-batch8_policy_engines_capsule)\n\nformal-methods theorem-proving lean\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.proof_derived_governed_mutation_authorization) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Proof-Derived Governed Mutation Authorization\n\nExplains component [Proof Derived Governed Mutation Authorization](docs/components.html#component-proof_derived_governed_mutation_authorization) mechanism [validates synthetic governed mutation authorization](docs/rules-and-ideas.html#lattice-mechanism-mechanism-proof-derived-governed-mutation-authorization-validates-synthetic-governed-mutation-authorization) Governed by principles [Bind authority to transaction scope](docs/doctrine.html#dcard-p-16) [Possession is not permission](docs/doctrine.html#dcard-p-4) concept [formal math and proof witnesses as bounded public proof-adjacent result records](docs/rules-and-ideas.html#lattice-concept-concept-formal-math-and-proof-witness-bundle) Abides by axiom [Authority by derivation, not possession](docs/doctrine.html#dcard-ax-3) Depends on paper module [Mission Transaction Work Spine](docs/paper-modules.html#paper-module-mission-transaction-work-spine)\n\n`proof_derived_governed_mutation_authorization` is the public mutation-authority replay component for showing that a mutation proposal cannot grant itself authority. It validates a synthetic governed-mutation bundle where read-only inspection, scoped config write, and rollback proposals are admitted only when proof cells, visible pre-execution policy verdicts, side-effect logs, rollback result records, cold replay, negative cases, non-public-state scan, and scope limits line up.\n\nThis module is source-backed public doctrine, not the source of authority. The source rows are the JSON bundle, mechanism registry row, component atlas binding, standard contract, fixture, exported bundle, component source module, and result records named below. Markdown remains an authored projection over those rows.\n\n###### Purpose\n\nThe component answers one question: can a mutation proposal acquire the authority to change something just by asserting that it should? In an agent system the danger is an action that grants itself permission, for example by claiming a standing account secret, by recording a governance-vote nobody can see, or by reporting success after the fact. This fixture is the boundary that refuses each of those moves.\n\nAuthorisation here is derived, not asserted. A proposal is admitted only when an independent chain resolves: redacted proof cells that name validator result records, at least two visible policy verdicts evaluated before any execution identity is minted, a logged side-effect diff for write and rollback proposals, a paired rollback result record, and a cold-replay result record. The validator recomputes an evidence-chain hash from those resolved rows and rejects the proposal if the declared hash does not match. Impressive language, an admin-looking identity, or a final answer that says it worked all fail on their own.\n\nThe less obvious part is the anti-bake gate. Passing the synthetic chain is not enough: every authorised proposal must also bind to a real repository record, a concrete git commit that the validator resolves with a `git` subprocess and checks touched this component's own source or its focused test. The validator then re-derives the proof, policy, and rollback refs from the evidence indices and compares them to what the record declares. A fixture cannot pre-bake its answer, because the answer is reconstructed from real commit scope and the resolved rows rather than read from the file. The fixture admits exactly three synthetic proposals (read-only inspection, scoped config write, rollback) and rejects eight named overclaims; none of this grants any live mutation authority.\n\n###### Shape\n- Subject: `proof_derived_governed_mutation_authorization`, with mechanism `mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization`.\n- Runtime locus: `src/microcosm_core/organs/proof_derived_governed_mutation_authorization.py`, especially `run`, `run_authorization_bundle`, `validate_mutation_proposals`, `validate_proof_evidence_cells`, `validate_policy_verdicts`, `validate_side_effect_ledger`, `validate_rollback_receipts`, `validate_cold_replay`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- The positive fixture admits exactly three synthetic proposals: read-only inspection, scoped config write, and rollback.\n- Every admitted proposal must bind intent bundle refs, proof-cell validator result records, visible pre-execution policy verdicts, ephemeral execution identity refs, an evidence-chain hash, cold replay refs, and an scope limit.\n- Write and rollback proposals also need logged side-effect diff refs and a paired rollback result record before authorization.\n- The exported bundle imports six copied source bodies through `source_module_manifest.json` and validates them by exact-copy digest evidence without exporting source body text in result records.\n\nSource refs\n\n3 synthetic proposals: read-only, scoped write, rollback `mutation_proposals.json` validator-backed proof refs `proof_evidence_cells.json` 2+ visible verdicts before execution identity `policy_verdicts.json` logged diff for write / rollback `side_effect_ledger.json` paired rollback result record `rollback_receipts.json` cold rerun per proposal `cold_replay.json` real repo record + git commit ref `governed_mutation_records.json` 6 copied source bodies verified by digest `source_module_manifest.json` Diagram source\n\n```text\nflowchart TD Proposals[\"mutation_proposals.json 3 synthetic proposals: read-only, scoped write, rollback\"] subgraph Evidence[\"Resolved evidence chain\"] ProofCells[\"proof_evidence_cells.json validator-backed proof refs\"] Policies[\"policy_verdicts.json 2+ visible verdicts before execution identity\"] Effects[\"side_effect_ledger.json logged diff for write / rollback\"] Rollbacks[\"rollback_receipts.json paired rollback result record\"] Replay[\"cold_replay.json cold rerun per proposal\"] end Hash{\"Recompute evidence-chain hash declared == derived?\"} Records[\"governed_mutation_records.json real repo record + git commit ref\"] AntiBake{\"Anti-bake gate git commit touched this source/test? re-derived refs match declared?\"} SourceManifest[\"source_module_manifest.json 6 copied source bodies verified by digest\"] Negatives[\"8 negative cases standing account secret, hidden vote, policy-after-execution, ...\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"scope limit no account secrets, live mutation, provider, source-file changes, hosting, public sharing, or launch\"] Proposals --> Evidence Evidence --> Hash Hash -->|match| AntiBake Hash -->|mismatch| Negatives Records --> AntiBake AntiBake -->|real record bound| Result records AntiBake -->|unbound or baked| Negatives SourceManifest --> Result records Negatives --> Result records Result records --> Ceiling\n```\n\n###### How it works\n\nTake the scoped config write proposal. To be admitted it must carry the fourteen required fields, including `proof_cell_refs`, `policy_verdict_refs`, `policy_evaluated_before_execution`, `side_effect_class`, `evidence_chain_hash`, and `cold_replay_ref`. The validator then checks each one against the other input files rather than trusting the proposal's own summary.\n\nFor the proof refs it confirms each cell names the same proposal, carries evidence refs and validator-result record refs, is body-redacted, and does not export a proof body. For the policy refs it counts how many verdicts are visible to the result record, are not hidden votes, read allow or warn, and resolve back to a proof cell for that proposal. Fewer than two visible resolving verdicts blocks the proposal under `GOV_MUT_CONSENSUS_WITHOUT_EVIDENCE`. Because a scoped write has a reversible side effect, it also needs a logged diff ref in the side-effect ledger and a passing rollback result record for the same proposal. A write or rollback proposal with no rollback ref is rejected as an irreversible mutation.\n\nThe validator then recomputes the evidence-chain hash. It hashes the resolved proof digests, policy digests, side-effect ref, rollback ref, and cold-replay ref together and compares the result to the proposal's declared `evidence_chain_hash`. A mismatch fails the proposal, so the hash cannot be a hand-written constant. Only after the synthetic chain resolves does the real-record gate run. The governed-mutation record must declare a repo record class, a forty-character-or-shorter hex commit ref, and source refs covering git, mission-transaction, work-landing, and ledger material. The validator shells out to `git` to confirm the commit exists and that its changed files include this component's source module or its focused test, and it re-derives the proof, policy, and rollback refs from the indices so the record's claims must match independently computed values. An authorised proposal whose proposal id is not in the accepted real-record set is downgraded to blocked. The result is that a green result record requires three synthetic proposals, three real records bound to real commits, and a matching anti-bake status, none of which a static fixture can fake.\n\n###### Public Contract\n- The source pattern is `proof_derived_governed_mutation_authorization_compound`.\n- The fixture lives at `fixtures/first_wave/proof_derived_governed_mutation_authorization/input/`.\n- The runtime example lives at `examples/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle/`.\n- The validator is `microcosm_core.organs.proof_derived_governed_mutation_authorization`.\n- The governing standard is `standards/std_microcosm_proof_derived_governed_mutation_authorization.json`.\n- The component model row is `core/organ_atlas.json#proof_derived_governed_mutation_authorization`.\n- The sign-off row is `core/organ_registry.json#proof_derived_governed_mutation_authorization`.\n\nThe fixture has three positive proposals: read-only inspection, scoped config write, and rollback. Every admitted proposal must cite an intent bundle, scope limit, proof cell, visible policy verdicts, ephemeral execution identity, evidence-chain hash, and cold replay ref. Write and rollback proposals also require logged side-effect diff refs and a verified rollback result record paired before the mutation is admitted.\n\n###### Source-Backed Mechanism\n\nThe mechanism row `mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization` points at these runnable source loci:\n- `run` and `run_authorization_bundle` for fixture and exported-bundle entry.\n- `validate_mutation_proposals`, `validate_proof_evidence_cells`, `validate_policy_verdicts`, `validate_side_effect_ledger`, `validate_rollback_receipts`, and `validate_cold_replay` for the authorization predicate.\n- `_source_module_manifest_result` and `_source_open_body_import_summary` for digest-verified copied source-body evidence without body text in result records.\n- `EXPECTED_NEGATIVE_CASES` and `AUTHORITY_CEILING` for falsification and scope boundary enforcement.\n\nThe exported governed-mutation bundle imports six source bodies through `examples/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle/source_module_manifest.json`. Those bodies are copied into `source_modules/` with digest provenance:\n- `state/microcosm_portfolio/extracted_patterns_ledger.jsonl`\n- `state/microcosm_portfolio/reconstruction/high_novelty_substrate_gap_scout_v1.json`\n- `tools/meta/control/mission_transaction_preflight.py`\n- `tools/meta/control/scoped_commit.py`\n- tools/meta/factory/work_ledger.py\n- `system/lib/work_landing_status.py`\n\nResult records may report module ids, refs, counts, classes, hashes, and verdicts. They may not duplicate source body text, proof bodies, governance-vote bodies, model-output data, account secrets, account refs, or live access material.\n\n###### Reader Evidence Routing\n- Open `standards/std_microcosm_proof_derived_governed_mutation_authorization.json` for required witnesses, negative-floor classes, denied authority, result record expectations, validator contract, and source refs.\n- Open `core/fixture_manifests/proof_derived_governed_mutation_authorization.fixture_manifest.json` for positive fixture inputs, eight negative fixtures, body-import summary, durable result record refs, and source-open omission rules.\n- Open `examples/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle/source_module_manifest.json` before inspecting copied source modules; result records carry refs, hashes, counts, and verdicts, not copied source body text.\n- Open `tests/test_proof_derived_governed_mutation_authorization.py` for the focused assertions on proposal counts, negative cases, source-module digest mismatch, public-relative redaction, and card result record reuse.\n- Run the fixture or exported-bundle route from `microcosm-substrate/`. The CLI supports `--card`, but it does not expose a `--json` flag.\n- Use `scripts/build_doctrine_projection.py --check-paper-module-corpus` to verify this Markdown projection still satisfies the shared paper-module coverage contract.\n\n###### First Commands\n\nFrom `microcosm-substrate/`, a cold agent can refresh the fixture result records with:\n\nThe exported bundle validator proves the copied source-body floor without writing durable result records:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.proof_derived_governed_mutation_authorization run-authorization-bundle --input examples/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle --out /tmp/microcosm-proof-derived-governed-mutation --card\n```\n\n###### Evidence Result records\n- `receipts/first_wave/proof_derived_governed_mutation_authorization/proof_derived_governed_mutation_authorization_result.json`\n- `receipts/first_wave/proof_derived_governed_mutation_authorization/proof_derived_governed_mutation_authorization_board.json`\n- `receipts/first_wave/proof_derived_governed_mutation_authorization/proof_derived_governed_mutation_authorization_validation_receipt.json`\n- `receipts/first_wave/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle_validation_result.json`\n- `receipts/runtime_shell/demo_project/organs/proof_derived_governed_mutation_authorization/exported_governed_mutation_authorization_bundle_validation_result.json`\n- result records/sign-off/first_wave/proof_derived_governed_mutation_authorization_fixture_acceptance.json\n\nCurrent result record evidence records three proposals, three authorized synthetic mutations, three proof cells, six visible policy verdicts, two logged side effects, two rollback passes, three cold replay passes, no missing negative cases, `private_state_scan.status=pass`, and `body_in_receipt=false` for copied source source modules.\n\n###### Negative Cases\n\nThe fixture rejects the eight named negative cases in `core/fixture_manifests/proof_derived_governed_mutation_authorization.fixture_manifest.json`: standing account secret authority, policy-after-execution, hidden governance-vote, live cloud account secret, irreversible mutation, unlogged side effect, consensus without evidence, and final-answer-only success.\n\nThese negative fixtures are the security argument. A proposal with impressive language, an admin-looking identity, hidden votes, post-hoc approvals, or a final answer that says it succeeded still fails unless the public evidence tables resolve to the authorization predicate.\n\n###### Prior Art Grounding\n\nThe governed-mutation shape is grounded in admission-control and policy-as-code practice: a proposed state change is evaluated before it mutates the system, and the decision is separate from the actor's own assertion. The closest public anchors are [Open Policy Agent](https://www.openpolicyagent.org/docs), which separates policy decision-making from enforcement over structured input, and Kubernetes [admission controllers](https://kubernetes.io/docs/reference/access-authn-authz/admission-controllers/), which validate or mutate API requests before persistence.\n\nThe rollback and side-effect portions are also adjacent to controlled rollout practice, including feature-flag and canary-launch patterns described by [Martin Fowler](https://martinfowler.com/articles/feature-toggles.html). Microcosm keeps the pattern synthetic and replay-only: the component validates visible policy verdicts, side-effect logs, rollback result records, and cold replay without granting live mutation authority.\n\n###### Public Scope\n\nThis component is a synthetic, public, source-open replay. It validates fixture and exported-bundle result records plus copied source bodies with digest provenance. The replay stays inside local files and does not use standing account secrets, access live cloud or account systems, use external model services, change source files, expose private proofs, expose policy-vote bodies, or claim benchmark safety.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_proof_derived_governed_mutation_authorization.py -q --basetemp=/tmp/microcosm_proof_derived_governed_mutation_authorization_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis paper module can claim backed reader wiring for the synthetic governed-mutation replay: component and mechanism subjects resolve, the runtime source locus is named, and diagram and atlas views are generated for this module. It cannot claim live mutation authority, standing account secrets, cloud or account access, irreversible approval, source-file changes permission, provider authority, proof-body export, benchmark safety, launch-scope decision, hosted deployment, publishing-scope decision, or whole-system correctness.\n\nFixture result records, exported-bundle result records, focused tests, and source-copy digests can support only the bounded replay claim: synthetic proposal admission, proof-cell refs, visible policy verdicts, side-effect logs, rollback result records, cold replay refs, negative cases, and body-hygiene behavior. The diagram and atlas views are navigation aids derived from the module bindings; they do not expand the proof boundary.\n\n#### Source refs\n\nBuilt from public source refs, with each input path recorded for provenance.\n\nEach component has a stable public source path with commands, source links, and its supported scope.",
    "byte_count": 327859,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:area-agent-reliability",
   "relative_href": "docs/area-agent-reliability.html",
   "path": "docs/area-agent-reliability.html",
   "title": "Agent reliability & safety",
   "nav_group": "Areas",
   "nav_label": "Agent reliability & safety",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "agent_memory_temporal_conflict_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "agent_route_observability_runtime",
     "provider_context_recipe_budget_policy",
     "agent_closeout_faithfulness_audit",
     "bounded_autonomy_campaign_packet",
     "batch7_secondary_runtime_capsule"
    ],
    "family_id": "agent_reliability_and_safety"
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Area \u00b7 17 components\n\n### Agent reliability & safety\n\nSource-open replays of agent failure modes as inspectable specimens.\n\n#### Components\n\nAgent Benchmark Integrity Anti Gaming Replay Validates a synthetic benchmark-integrity record and flags the contamination cases it declares. 3/5\n\nDoes Checks a public benchmark-integrity example bundle that contains three copied source pattern provenance bodies under source_artifacts. The component verifies the source-module manifest digests, requires each replay row to cite those copied source artifacts, recomputes pass/quarantine verdicts from contamination, file-access, and locked-evaluator spans, and rejects common gaming attempts such as peeking at hidden answers, training on the test set, exposing the oracle patch, cherry-picking the best of many tries, or asserting a score. It still does not run real bug fixes or claim any benchmark claims.\n\nScope limit It authorizes only bounded public runtime validation over copied source-open pattern provenance bodies and metadata-only benchmark-integrity replay rows; it does not establish any benchmark or SWE-bench score, agent capability, external model service, live-repo mutation, private/oracle/hidden-gold body access, product progress, or launch-scope decision.\n\nRun\n\n```text\nmicrocosm agent-benchmark-integrity-anti-gaming-replay run-benchmark-integrity-bundle --input examples/agent_benchmark_integrity_anti_gaming_replay/exported_benchmark_integrity_bundle --out .microcosm/agent_benchmark_integrity_anti_gaming_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Research Replication Rubric Artifact Replay](docs/components.html#component-research_replication_rubric_artifact_replay), [Cold Evaluation Honesty Bundle](docs/components.html#component-batch10_cold_eval_honesty_capsule)\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_benchmark_integrity_anti_gaming_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Agent Benchmark Integrity Anti-Gaming Replay\n\nExplains component [Agent Benchmark Integrity Anti Gaming Replay](docs/components.html#component-agent_benchmark_integrity_anti_gaming_replay) mechanism [validates public benchmark integrity replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-benchmark-integrity-anti-gaming-replay-validates-public-benchmark-integrity-replay) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper module [Mission Transaction Work Spine](docs/paper-modules.html#paper-module-mission-transaction-work-spine)\n\nThis module is the public Microcosm projection of the rule that agent benchmark claims must be replay-backed before they are score-backed. It carries copied source-open source pattern provenance bodies for the benchmark-integrity pattern row and reconstruction state, plus a metadata-only regression integrity component. It is not a benchmark runner or product-progress claim.\n\nThe fixture models a repository repair benchmark with public case ids, task and patch hashes, locked evaluator ids, evaluator config hashes, file-access log refs, contamination-check refs, trusted-reference score refs, output-replay refs, held-out guard ids, and `body_in_receipt=false` rows. It deliberately keeps issue bodies, oracle patch bodies, hidden-gold answers, model-output data, and live repository paths out of the public boundary.\n\nThe exported bundle includes `source_module_manifest.json` and `source_artifacts/` copies of the source pattern provenance rows from `state/microcosm_portfolio`. The validator verifies those copied bodies by manifest digest and keeps body text out of result records.\n\n###### Purpose\n\nAgent benchmark numbers are easy to state and hard to trust. A single headline like \"passes N percent of repository repair tasks\" hides every decision that produced it: which evaluator ran, whether its configuration was frozen, whether the agent could see held-out answers, whether the test cases leaked into training, and whether one lucky attempt was promoted as the score. This component exists to answer one question before any of that language is allowed: can each claimed pass be replayed from public refs that name their evaluator, their configuration hash, and the evidence that the run was not gamed?\n\nA positive result cannot be asserted. A replay row that simply declares `integrity_pass` is recomputed from scratch. The validator checks that the evaluator id is on a locked list, that the configuration hash is one the policy declared in advance, that file-access, contamination, and output-replay evidence artifacts exist and pass, and that the case id was registered up front. If any of those is missing or contradicted, the row is recomputed as `quarantine` regardless of what it declared. Declaring success is treated as the thing to be checked, not as the proof.\n\nThere is a further floor: an `integrity_pass` must be backed by a sanitised real command-run trace, not only by hand-written replay refs. Each row cites a `real_benchmark_trace_ref` that has to resolve to a copied artifact carrying a passing focused pytest run for this component, with sha256 digests bound to the recorded command-run id and an explicit list of omitted live material (model-output data, account secrets, private issue bodies, oracle patch bodies). The point is to stop a benchmark claim from resting on prose. The evidence has to trace back to a command that actually ran and is reproducible from public refs, while the private and live material that command touched stays out of the public boundary.\n\nThis is a discipline fixture, not a leaderboard. It proves that a metadata-only replay respected an anti-gaming boundary over public case ids and locked evaluator refs. It never reports a score, a SWE-bench result, or a capability claim, and the eleven negative cases below are there to demonstrate the boundary holding rather than to advertise a number.\n\n###### Technical Mechanism\n\nThe component turns a benchmark claim into a replay-verification problem. Its inputs are the projection protocol, locked evaluator policy, benchmark case roster, replay observations, exported bundle manifest, source-module manifest, and copied `source_artifacts/` rows. `_build_result` loads those inputs, validates source-module imports, scans public inputs and copied source bodies against the non-public-state forbidden-class policy, checks projection protocol density, validates the locked evaluator policy, validates the case roster, and then validates each replay row against the same public boundary.\n\nA positive replay cannot pass by declaring success. The replay row must name a case id present in `benchmark_cases.json`, cite a locked evaluator id, carry an evaluator config hash allowed by `locked_evaluator_policy.json`, expose file-access, contamination-check, trusted-reference, and output-replay refs, and cite source-artifact evidence refs that match the exported source-module manifest targets. Each of those evidence refs must resolve to a metadata-only `benchmark_integrity_evidence_artifact_v1` artifact bound to the same replay, case, evaluator, and config hash, with file-access marked passed, contamination flags clear, a trusted reference present without a claimed score, and an output replay that is not final-answer-only grading. The validator recomputes whether each row is `integrity_pass` or `quarantine`; missing refs, unregistered cases, unlocked or mutated evaluators, score authorization, private issue bodies, oracle patch bodies, hidden-gold access, model-output data, pass-k cherry-picking, and misleading tests force quarantine or a blocking finding.\n\nA further gate is the real-trace floor. Every positive replay row also cites a `real_benchmark_trace_ref`, and that ref must resolve to a copied source-module artifact whose `material_class` is `public_sanitized_real_benchmark_trace`. The validator opens that artifact and checks that it records a completed, exit-zero command run of the focused pytest for this component, carries a passing pytest summary, binds sha256 digests for the command metadata, stdout, and stderr to a declared command-run id, cites `state/command_runs/` source refs for that id, and declares the omission of model-output data, account secrets, private issue bodies, and oracle patch bodies. A replay whose `real_benchmark_trace_ref` is missing, unverified, or not also listed in the source-artifact evidence refs cannot stand as a pass. This is what stops a benchmark claim from resting on hand-authored refs alone: the integrity verdict has to trace back to a command that actually ran and is reproducible from public refs.\n\nThe copied body floor is verified separately from the public result record. The source-module manifest must declare `copied_non_secret_macro_body` material, public source pattern body classes, `body_in_receipt=false`, and digest-stable targets. `validate_source_module_imports` checks that each manifest row points to an existing copied artifact and that its recorded SHA-256 digest matches disk. Result records and command cards then omit the bodies and carry only ids, refs, digests, classes, counts, verdicts, findings, and scope limits.\n\nThe public trace is a second proof pass rather than a display copy of replay rows. `build_public_benchmark_integrity_anti_gaming_trace` recomputes each span from locked-evaluator status, contamination signals, file-access refs, contamination-check refs, trusted-reference refs, and declared quarantine reasons. The expected public fixture has three spans: two recompute as `integrity_pass`, one recomputes as `quarantine`, and the trace must agree with the declared replay verdicts before the component can return `status=pass`.\n\n###### Named Proof Consumers\n- `run` consumes the first-wave fixture and writes the result, board, validation result record, sign-off result record, and metadata-only command card. It is the proof consumer for the canonical fixture boundary and required negative-case floor.\n- `run-benchmark-integrity-bundle` consumes the exported public bundle and proves that source-open body imports, bundle shape, manifest digests, and metadata-only result record/card rules survive outside the fixture directory.\n- `tests/test_agent_benchmark_integrity_anti_gaming_replay.py` is the focused regression consumer. It asserts negative-case observation, digest verification, source-artifact evidence refs, public trace verdict recomputation, positive/negative verdict handling, metadata-only result records, bundle runtime shape, and command-card reuse of a fresh result record.\n- A cold reader consumes this Markdown only after checking the JSON bundle, generated JSON instance, exported source manifest, case roster, replay observations, focused test path, and scope limit. The reader may verify the replay boundary but must not infer a benchmark claims, provider behavior, product-progress state, public sharing state, or launch-scope decision.\n\n###### Shape\n\nSource refs\n\nProtocol `projection_protocol.json` Manifest `source_module_manifest.json` Diagram source\n\n```text\nflowchart LR Bundle[\"JSON bundle authority\"] --> Markdown[\"Reader projection\"] Protocol[\"projection_protocol.json\"] --> ProtocolGate[\"source refs and result record density\"] Manifest[\"source_module_manifest.json\"] --> DigestGate[\"material class and digest gate\"] DigestGate --> Bodies[\"copied public source provenance bodies\"] DigestGate --> RealTrace[\"sanitised real command-run trace passing pytest, sha256 digests, declared omissions\"] Cases[\"3 public case ids\"] --> ReplayGate[\"case roster and required replay refs\"] Policy[\"locked evaluator policy\"] --> EvaluatorGate[\"locked ids and config hashes\"] Replays[\"3 replay observations\"] --> ReplayGate EvaluatorGate --> ReplayGate ProtocolGate --> ReplayGate ReplayGate --> EvidenceGate[\"per-ref evidence artifacts file-access, contamination, trusted reference, output replay\"] EvidenceGate --> Recompute[\"recompute integrity_pass or quarantine\"] RealTrace --> Recompute Recompute --> Trace[\"public trace verdict recomputation\"] Trace --> Verdicts[\"2 integrity_pass and 1 quarantine\"] Negatives[\"11 anti-gaming fixtures\"] --> Quarantine[\"quarantine or blocking finding\"] Bodies --> PrivateScan[\"metadata-only non-public-state scan\"] RealTrace --> PrivateScan Verdicts --> Result record[\"metadata-only integrity result record\"] Quarantine --> Result record PrivateScan --> Result record Result record --> Ceiling[\"anti-score scope limit\"]\n```\n\nThe page shape is a bounded replay spine, not a benchmark leaderboard. A reader starts at the JSON bundle, follows the source-open manifest into three copied public source provenance bodies, then checks the public case roster, locked evaluator policy, replay observations, recomputed trace verdicts, and metadata-only result records. The output is an integrity-boundary verdict: two public case replays pass the boundary, one public case replay is quarantined, and no score or hidden-gold authority is created.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[3]`, then the generated JSON instance, before treating this Markdown as explanatory projection.\n- Bundle route: read `examples/agent_benchmark_integrity_anti_gaming_replay/exported_benchmark_integrity_bundle/source_module_manifest.json` for `module_count=3`, `body_in_receipt=false`, copied body refs, digest refs, and the explicit secret-exclusion boundary.\n- Case route: read `benchmark_cases.json` for `repo_issue_public_001`, `repo_issue_public_002`, and `repo_issue_public_003`; the rows expose ids, hashes, splits, and held-out guard ids, not issue bodies or oracle patches.\n- Replay route: read `replay_observations.json` for the locked evaluator ids, config hashes, file-access refs, contamination refs, trusted-reference refs, output-replay refs, and the two `integrity_pass` plus one `quarantine` verdict pattern.\n- Runtime route: run `tests/test_agent_benchmark_integrity_anti_gaming_replay.py` when the reader needs recomputation evidence. The focused tests assert source-module digest verification, public trace verdict recomputation, required negative cases, and metadata-only result record boundaries.\n\n###### Public Mechanics\n- A replay cannot pass unless the evaluator id and config hash are locked.\n- A replay row cannot pass unless its case id appears in the declared `benchmark_cases.json` roster.\n- File-access logs, contamination checks, trusted references, and output replay refs are required before any benchmark-style language can be considered.\n- Train/test leakage, hidden-gold access, oracle patch bodies, model-output data, final-answer-only grading, pass-k cherry-picking, misleading tests, private issue bodies, unregistered case replays, and score overclaims are quarantine cases.\n- `integrity_pass` is evidence that a metadata-only regression replay respected the boundary, not evidence of a SWE-bench score, live agent capability, or product-spine system progress.\n- Result records expose ids, refs, verdicts, counts, negative cases, and scope limits only.\n- Source body imports expose source pattern provenance artifacts in the bundle, with result records limited to refs, digests, classes, and validation status.\n\n###### Prior Art Grounding\n\nThis component is grounded in the long-running observation that optimized metrics can become targets and lose evidential force, plus the AI-safety literature on reward hacking and specification gaming. [Concrete Problems in AI Safety](https://arxiv.org/abs/1606.06565) frames reward hacking as a practical accident-risk problem, DeepMind's [specification-gaming survey](https://deepmind.google/blog/specification-gaming-the-flip-side-of-ai-ingenuity/) collects concrete examples of agents satisfying a proxy in the wrong way, and benchmark-contamination work such as [Benchmarking Benchmark Leakage in Large Language Models](https://arxiv.org/abs/2404.18824) motivates explicit leakage and benchmark-use documentation.\n\nMicrocosm borrows the anti-gaming accounting pattern: evaluator ids, config hashes, case rosters, file-access logs, contamination checks, trusted-reference refs, and replay refs must be present before benchmark-style language is allowed. It does not report or imply a model score.\n\n###### Validation Result records\n\nThe focused proof consumer is `tests/test_agent_benchmark_integrity_anti_gaming_replay.py`. A passing result record has to show that the fixture and exported-bundle validators recompute benchmark-integrity replay from public case ids, locked evaluator ids, config hashes, file-access refs, contamination-check refs, trusted-reference refs, output-replay refs, source-module manifest digests, and negative-case rows rather than trusting declared benchmark language.\n\n```text\nPYTHONDONTWRITEBYTECODE=1 ./repo-pytest \\\n  tests/test_agent_benchmark_integrity_anti_gaming_replay.py \\\n  -p no:cacheprovider\n./repo-python scripts/build_doctrine_projection.py \\\n  --check-paper-module-corpus\n```\n\nFor the focused test, the result record boundary is the asserted shape: three public case ids, three replay rows, two recomputed `integrity_pass` rows, one `quarantine` row, three public trace spans, locked-evaluator and config-hash coverage, three copied source-module imports, nine source-artifact evidence refs, three verified source-artifact evidence refs, `body_in_receipt=false`, and negative cases for verdict mismatch, invalid declared verdict, evaluator config hash swaps, missing replay/source evidence, digest mismatches, manifest boundary violations, hidden-gold/oracle/provider/score overclaims, and unsafe command-card body reuse. For the corpus check, the result record only proves bundle/instance parity; it does not create benchmark claims, product-progress, provider, public sharing, or launch-scope decision.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.agent_benchmark_integrity_anti_gaming_replay run-benchmark-integrity-bundle --input examples/agent_benchmark_integrity_anti_gaming_replay/exported_benchmark_integrity_bundle --out /tmp/agent_benchmark_integrity_bundle_receipt --card > /tmp/agent_benchmark_integrity_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && ../repo-pytest tests/test_agent_benchmark_integrity_anti_gaming_replay.py\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim only that the public fixture and exported bundle preserve a metadata-only benchmark-integrity replay boundary: public case ids, locked evaluator refs, config hashes, contamination refs, output-replay refs, manifest digests, negative cases, and scope limits are recomputed or checked.\n\nIt must not claim benchmark performance, SWE-bench score, provider capability, hidden-gold access, oracle patch access, private issue access, live repository mutation, publishing-scope decision, product-progress evidence, or launch-scope decision.\n\n###### Scope boundary\n\nThis module does not claim benchmark performance, run providers, expose private issue or oracle patch bodies, access hidden-gold answers, mutate live repositories, publish results, host a benchmark, or include launch operations.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe standard treats the bundle `source_module_manifest.json` as the body-row authority for three copied source pattern provenance bodies: `benchmark_integrity_extracted_pattern_ledger_row_body_import`, `benchmark_integrity_high_novelty_growth_receipt_body_import`, and `benchmark_integrity_deterministic_pattern_order_body_import`.\n\nThose rows stay in `source_artifacts/`; result records and workingness/status cards carry refs, digests, classes, counts, and scope limits only. The body floor is accepted as regression-negative fixture evidence, not as a benchmark claims, SWE-bench performance claim, hidden-gold export, provider authority, live repository mutation authority, product-progress evidence, public sharing, or launch-scope decision.\n\n###### Governing Lattice Relation\n\nThe bundle binds this page to `mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay`, the `agent_reliability_and_safety_validator_bundle` concept, provisional principles `P-1` and `P-2`, provisional axiom `AX-1`, and the `paper_module.mission_transaction_work_spine` dependency. Within that lattice, the mechanism is an evidence-before-score gate: benchmark-style language has no paper authority unless the source record, copied-source manifest, locked policy, case roster, replay observations, public trace, negative-case floor, and metadata-only result records agree.\n\nThe governing concept is accountability for validator bundles, not public leaderboard construction. The principle/axiom ceiling is enforced as a refusal surface: private issue bodies, hidden-gold answers, oracle patch bodies, model-output data, source-file changes, live repository mutation, publishing-scope decision, product-progress evidence, and launch-scope decision remain false even when the replay fixture passes.\n\nCold Evaluation Honesty Bundle Runs a copied route-quality simulator and checks its all-B scorecard against the original code. 5/5\n\nDoes This component imports the real cold_eval.py route-quality simulator as an exact source copy. Running it over a synthetic workspace inspects the all-B scorecard shape, source-module digest evidence, and scope limit checks without exporting body text in result records or turning the fixture into benchmark truth.\n\nScope limit verified cold-eval source body import only, not a live benchmark, navigation truth, source authority, external model access, private-system equivalence, public sharing, or launch-scope decision\n\nRun\n\n```text\nmicrocosm batch10-cold-eval-honesty-capsule run --input fixtures/first_wave/batch10_cold_eval_honesty_capsule/input --out receipts/first_wave/batch10_cold_eval_honesty_capsule --acceptance-out receipts/acceptance/first_wave/batch10_cold_eval_honesty_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_cold_eval_honesty_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 10 Cold Eval Honesty Bundle\n\nExplains component [Cold Evaluation Honesty Bundle](docs/components.html#component-batch10_cold_eval_honesty_capsule) mechanism [validates public cold eval honesty bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-cold-eval-honesty-capsule-validates-public-cold-eval-honesty-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Apply the same floor to meta artifacts](docs/doctrine.html#dcard-p-13)\n\nAbides by axioms\n- [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Reflexive accountability / no privileged meta-layer](docs/doctrine.html#dcard-ax-12)\n\n###### Purpose\n\n`batch10_cold_eval_honesty_capsule` answers one narrow question: can the public Microcosm copy of the source `cold_eval.py` route-quality simulator run over a synthetic workspace, expose its measured scorecard shape, and refuse to promote that shape into a benchmark or navigation-truth claim?\n\nThe useful evidence is deliberately small. A green run means the copied source body executed, the all- `B.idea_first_packet` winner shape was recomputed from fixture rows, and the scope limit blocked benchmark, hosted-readiness, and launch language. It does not say idea-first routing wins in the live system.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD A[\"Public cold-eval workspace (tasks, navigation packets)\"] --> B[\"Copied cold_eval.py runner\"] B --> A1[\"Arm A: flat repo entry (README, quickstart, pyproject)\"] B --> A2[\"Arm B: idea-first packet (entry packet, atlas, index)\"] A1 --> SC[\"Score each task by declared route refs covered (refs scored, never injected)\"] A2 --> SC SC --> W[\"Winner per task, idea-first win count\"] W --> C[\"Scorecard shape audit all-B win + route asymmetry + no non-public refs\"] C --> D[\"Scope limit gate injection off, forbidden benchmark/launch claims named\"] D --> E[\"metadata-only result record and card\"]\n```\n\n###### Prior Art Grounding\n\nThis component is grounded in evaluation-transparency and benchmark-hygiene practice: scorecards should expose what was measured, what fixture assumptions were injected, and what claims the result can and cannot support. Useful anchors include:\n- [HELM](https://crfm.stanford.edu/helm/index.html), which frames model evaluation as a transparent, scenario-bound benchmark surface rather than a single global capability claim.\n- [Model Cards for Model Reporting](https://arxiv.org/abs/1810.03993), which established the pattern of pairing performance results with intended use, limitations, and caveats.\n\nMicrocosm borrows the scorecard-plus-limitations shape, then narrows it to a deterministic route-quality fixture. The all- `B.idea_first_packet` winner row is accounting evidence for this fixture only; it is not promoted into navigation truth, hosted readiness, or launch-scope decision.\n\n###### Reader Evidence Routing\n\nRead the scorecard as evidence accounting, not as a leaderboard. The fixture intentionally creates a public workspace where the idea-first packet wins. The component then checks that the expected-ref injection policy is off, that non-public refs are not present, and that forbidden claims are named in the manifest.\n\nThe honesty of that win turns on one design choice in the copied scorer. Each task lists the route refs an answer should reach, but those expected refs are only ever used to *score* coverage. They are never added to either arm's route, so neither arm is handed the answer. Arm A is scored on the refs a flat reader reaches from `README.md`, `docs/quickstart.md`, and `pyproject.toml`. Arm B is scored on the refs the navigation packets actually declare. The scoring policy is named in every row as `declared_route_refs_no_expected_ref_injection_v1`, and every row carries `expected_ref_injection_used: false`. The idea-first arm wins because the entry packets genuinely declare more of the relevant files, not because the scorer leaked the target into the route. That distinction is the difference between a measured route-quality result and a rigged one, and the scope limit gate reports `blocked` rather than `pass` if the injection flag is ever turned on.\n\nThe engine ids are:\n- `cold_eval_original_runner`: dynamically loads the copied source body and runs `run_cold_eval` in a temporary public workspace.\n- `cold_eval_scorecard_shape_audit`: verifies the all-B winner shape and records visible route-surface asymmetry without upgrading it into proof.\n- `cold_eval_claim_ceiling_gate`: checks expected-ref injection policy and forbidden benchmark/launch claims.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the route-quality scorecard result record and sign-off JSON. The bundle command validates copied source source, source manifests, metadata-only cards, expected-ref injection policy, and private-ref negative cases. The focused test covers missing tasks, flat-route wins, expected-ref injection, private fixture refs, and the no-benchmark/no-launch scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not establish live benchmark results, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the copied `cold_eval.py` source body executed over the synthetic workspace, the expected scorecard shape was recomputed, expected-ref injection was refused, non-public refs were excluded, negative fixtures were checked, metadata-only cards were emitted, and validation result records enforced the listed scope limit.\n\nThis module may not claim live benchmark results, navigation truth, hosted readiness, route-quality superiority, external model access, deployment posture, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Scope limit\n\nFixture-bound route-quality scorecard and copied source refs only; no live benchmark, navigation truth, hosted readiness, launch-scope decision, external model access, source-file changes, or whole-system correctness.\n\nValidator Checker Bundle Runs the real validator code over public examples so its safety checks stay inspectable. 5/5\n\nDoes This component imports the real idea_microcosm validators.py body as an exact source copy. Running it shows status-policy judging, private-boundary scans, specimen checks, launch-gate checks, and the validate entrypoint exercised against public fixtures and negative cases.\n\nScope limit It validates only the imported validators.py source body and its checker membrane. It does not claim source authority, a full validator-suite proof, private-system equivalence, launch, hosted-public status, public sharing, external model access, or source-file changes.\n\nRun\n\n```text\nmicrocosm batch8-validator-checker-capsule run --input fixtures/first_wave/batch8_validator_checker_capsule/input --out receipts/first_wave/batch8_validator_checker_capsule --acceptance-out receipts/acceptance/first_wave/batch8_validator_checker_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Cold Evaluation Honesty Bundle](docs/components.html#component-batch10_cold_eval_honesty_capsule), [Release Public Wording Gate](docs/components.html#component-batch12_release_claim_language_gate)\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_validator_checker_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 8 Validator Checker Bundle\n\nExplains component [Validator Checker Bundle](docs/components.html#component-batch8_validator_checker_capsule) mechanism [validates public validator checker bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-validator-checker-capsule-validates-public-validator-checker-capsule) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Apply the same floor to meta artifacts](docs/doctrine.html#dcard-p-13)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\n###### Role\n\nThis module imports the real self-indexing-cognitive-system/src/idea_microcosm/validators.py body into Microcosm and exercises individual checker functions that were not covered by the earlier status-judge-only import.\n\n###### Purpose\n\nAn earlier import brought across only one entry point from `validators.py`, the status-judge function. That left most of the validator body imported as text but never actually run. This bundle answers a single question: when the real checker functions are invoked, do they still behave the way their names claim? It picks six groups of checkers from the copied body and runs them, rather than asserting from a distance that the file is correct.\n\nThe groups are chosen to span the kinds of judgement the validator makes: whether a status policy blocks a poisoned transition, whether the private boundary scanner finds a planted home path and email address, whether the specimen and launch-gate checkers report zero failures on the existing fixture, and whether the no-write `validate(root, write_receipt=False)` entry point runs without mutating anything. Each group reaches into a different part of the imported body.\n\nThe design choice worth noting is what happens when the private source state is not present. In that case the component does not pretend the checkers passed. It falls back to reading the copied source for the named anchors and marks the remaining engines `public_runtime_source_only`, recording that as a stated limit rather than a hidden success. The second unusual choice is that the negative cases are judged from the engine outputs themselves, so a check cannot pass merely because a fixture file happens to contain the right error string. Both choices exist to stop a green run from claiming more than it observed.\n\n###### Prior Art Grounding\n\nThis bundle borrows from schema validation, fixture-driven testing, and policy/checker separation. Useful anchors include:\n- [JSON Schema](https://json-schema.org/), as a general pattern for declaring structural expectations and validating data instances against them.\n- [pytest fixtures](https://docs.pytest.org/en/stable/reference/fixtures.html), as a common test pattern for isolating public inputs and expected negative cases.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), as a prior art pattern for separating policy evaluation from the application code that invokes it.\n\nMicrocosm borrows the validator/checker and fixture-negative-case shape, but keeps this component to bounded checker exercises over copied public source. It is not launch-scope decision, hosted-public proof, source-file changes, or a complete validator-suite proof.\n\n###### Imported system\n- self-indexing-cognitive-system/src/idea_microcosm/validators.py\n\n###### Technical Mechanism\n\nThe runtime does not ask the reader to trust the phrase \"validator checker.\" It builds a small checker membrane around a single imported source body and then records how far that membrane reaches.\n\nThe source-anchor phase reads `examples/batch8_validator_checker_capsule/exported_batch8_validator_checker_capsule_bundle/source_module_manifest.json`. That manifest declares one exact copied module under the public bundle-relative locus source_modules/self-indexing-cognitive-system/src/idea_microcosm/validators.py, with a 12,747-line body and digest `4b2d44810cb9db2c5f62fd39da55deb7f20f6bd44ed1a8b0ae4324d38012a1d4`. Here the root segment is a manifest-included public synthetic Microcosm root. The private source-root path is lineage-only and remains excluded from public copy; the checker validates the copied bundle body, not live private source. `_validator_source_anchor_matrix` checks that the copied body still contains the named validator anchors: `private_boundary_hits`, `policy_wellformedness_failures`, `judge_status_request`, `_status_collapse_suite_failures`, `_source_shuttle_specimen_failures`, and `validate(root: Path)`.\n\nThe checker-exercise phase then runs six bounded engines when source state is available: source anchoring, status-policy judging, private-boundary scanning, specimen checker groups, launch-gate checker groups, and the no-write `validate(root, write_receipt=False)` witness. In exported-bundle mode, where a public runtime should not import private source state, the same component falls back to copied-source anchor evidence and marks the remaining engines as `public_runtime_source_only`. That fallback is a scope limit, not a hidden pass-through to private state.\n\nThe negative-case phase is semantic rather than fixture-string-only. The component declares six failure modes: missing validator source, policy poisoning, blind private-boundary scanning, missing specimen checkers, missing launch gates, and bypassing the validate entrypoint. `evaluate_negative_case` observes those cases from the engine outputs, so the tests can prove the negative cases move with runtime evidence instead of passing because a fixture file contains the right error code.\n\nThe result record phase uses the shared crown-jewel runner to write result, board, validation, and sign-off artifacts, then `result_card` deliberately compresses them into an authority floor and body floor. Those card fields keep `release_authorized`, `publication_authorized`, `provider_dispatch`, `model_dispatch`, `source_mutation_authorized`, `full_validator_suite_freshness_claim`, `public_clone_or_hosting_authority`, and `test_completeness_proof` false while also preserving `body_in_receipt: false`.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD A[\"Fixture input or exported bundle\"] --> B[\"Source manifest validation\"] B --> C[\"Exact copied validators.py digest and required anchors\"] C --> D{\"Source state available?\"} D -- \"yes\" --> E[\"Six runtime checker engines\"] D -- \"no\" --> F[\"Copied-source anchors plus source-only witnesses\"] E --> G[\"Semantic negative-case evaluator\"] F --> G G --> H[\"Crown-jewel result, board, validation, sign-off result records\"] H --> I[\"Result card authority_floor and body_floor\"] I --> J[\"Reader claim: bounded checker membrane, not launch-scope decision\"]\n```\n\n###### Doctrine Relation\n\nThe generated JSON row binds this page to `mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule` and `concept.agent_reliability_and_safety_validator_bundle`; that relation is bundle-declared rather than inferred from this prose. The bundle also names the axiom refs `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, `AX-11`, and `AX-12` and the principle refs `P-1`, `P-2`, `P-5`, `P-6`, `P-8`, `P-9`, `P-13`, and `P-15`. In this module those refs matter because the component separates evidence from authority, keeps JSON as the navigable contract, prevents body leakage, and refuses to promote a selected checker run into a launch or proof claim.\n\nThe dependency edges also explain the reader route. `microcosm_axiom_substrate` owns the axiom vocabulary this module abides by; `engine_room_generated_projection_drift_gate` owns the generated-projection freshness posture this page must not bypass; and `public_reveal_walkthrough` owns the reading lane for result records, source refs, and scope boundaries.\n\n###### Evidence Model and Limitations\n\nThe strongest positive evidence is narrow and useful: the focused regression checks that all expected engines are present, the exact copied source body matches the source source digest, exported-bundle validation does not import source validators, source-anchor corruption blocks validation, result cards omit private bodies, and semantic negative cases fail when runtime evidence is weakened.\n\nThe limitations are just as important. Exported-bundle mode validates copied source anchors and public-runtime witness fields; it does not re-run the full source validator suite. The fixture proves selected checker groups and selected negative cases, not all future validator behavior. The copied source body being large does not itself increase the claim; only the named anchors, engines, digests, negative cases, and result record fields are evidence. A green run therefore supports a bounded checker-membrane claim and nothing broader.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[65]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_validator_checker_capsule.json` for current relationship state and projection details.\n- Bundle route: inspect `examples/batch8_validator_checker_capsule/exported_batch8_validator_checker_capsule_bundle` for copied validator source refs and digest evidence.\n- Runtime route: run `tests/test_batch8_validator_checker_capsule.py` and the commands in ## Validation Result record Path.\n\n###### Exercised checker groups\n- Policy well-formedness and status transition judging.\n- Private boundary scanning without putting private body text into result records.\n- Status collapse, internal control, correction, self-comprehension, task-ledger, and atlas navigation specimen checkers.\n- launch standards, source bundle, source shuttle, concurrency, native guard, and launch-root compiler gate checkers.\n- The no-write `validate(root, write_receipt=False)` entrypoint.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded validator-checker result record and sign-off JSON. The bundle command validates copied checker source, manifest digests, selected checker-group exercises, body-exclusion scans, and scope limit fields. The focused test checks fixture validation, bundle validation, private-boundary scanning, and the no-complete-suite-proof scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not establish the complete validator suite, authorize source-file changes, provide hosted-public proof, dispatch providers, authorize public sharing, or approve launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe bundle is not launch-scope decision, not hosted-public proof, not source-file changes, and not a complete validator-suite proof.\n\n###### Scope limit\n\nThis paper module can claim a bounded validator/checker fixture with a diagram view and Atlas navigation generated for it. It can explain the declared checker groups, no-write validation entrypoint, and metadata-only result record boundary.\n\nIt cannot claim launch-scope decision, hosted-public proof, source-file changes, complete validator-suite proof, publishing-scope decision, provider authority, or whole-system correctness. Any broader checker claim must be grounded in the JSON bundle and its generated projection.\n\nAgent Monitor Redteam Falsification Replay Replays honest and deceptive agent runs and flags any verdict missing its declared backing evidence. 3/5\n\nDoes It replays three made-up agent trajectories (a normal one, one trying to hide a failure, and one overstepping a tool's permissions) and checks that every monitor verdict \u2014 including a clean \"pass\" \u2014 comes with the result records needed to re-run and verify it. The result records show exactly which checks each verdict depends on, and any verdict missing its backing evidence gets quarantined instead of trusted. It is a demo over fictional data, not a measurement of how well a real monitor catches anything.\n\nScope limit Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed monitor-verdict spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live agent execution, monitor product performance, control-eval score, safety-validation, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.\n\nRun\n\n```text\nmicrocosm agent-monitor-redteam-falsification-replay run-monitor-bundle --input examples/agent_monitor_redteam_falsification_replay/exported_monitor_redteam_bundle --out receipts/runtime_shell/demo_project/organs/agent_monitor_redteam_falsification_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Agent Sabotage Scheming Monitor Replay](docs/components.html#component-agent_sabotage_scheming_monitor_replay)\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_monitor_redteam_falsification_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Agent Monitor Redteam Falsification Replay\n\nExplains component [Agent Monitor Redteam Falsification Replay](docs/components.html#component-agent_monitor_redteam_falsification_replay) mechanism [validates public monitor verdict result records](docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-monitor-redteam-falsification-replay-validates-public-monitor-verdict-receipts) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper module [Source Projection Import Protocol](docs/paper-modules.html#paper-module-macro-projection-import-protocol)\n\n`agent_monitor_redteam_falsification_replay` is a synthetic regression fixture for one honesty claim: that a monitor verdict was earned by evidence rather than asserted. It replays public trajectory metadata and checks that every \"the monitor caught it\" sentence is tied to a probe, an escalation, a mitigation, and a metadata-only result record before it counts.\n\n###### Purpose\n\nIt is easy to say a safety monitor flagged a suspicious agent action. It is harder to show that the verdict followed from the evidence and would survive a rerun. This component answers one question: if a monitor claim is replayed against its own declared evidence, does the claim still hold, or does it fall apart?\n\nThe part worth noticing is that the page does not trust the verdict it is given. A separate builder, `build_public_monitor_redteam_falsification_trace`, independently recomputes two things from the trajectory spans: whether each declared coverage label is actually backed by an adversarial probe, and what the monitor verdict should be given the span's severity, escalation, and mitigation evidence. If that recomputed verdict disagrees with the verdict the fixture declared, the run blocks. So the contract is not \"does the row have the right fields\" but \"does an independent reading of the evidence reach the same conclusion\". The failure mode it guards against is the one that quietly defeats most monitoring write-ups: a verdict label that reads well but is not supported by the trajectory it claims to summarise.\n\nThe replay is deliberately narrow. It works over three synthetic trajectory cases and seven negative cases, on public metadata and metadata-only result records. It is not a live monitor, a control-evaluation score, an exploit guide, or evidence about how well any real monitor performs. It only proves that, for these fixtures, a monitor claim cannot pass without surviving the disagreement check.\n\n###### Abstract\n\nThis module is the public Microcosm technical paper for a monitor/redteam honesty contract. It specifies a synthetic replay fixture that treats a monitor verdict as an evidence object to falsify: the verdict must be tied to a trajectory hash, suspicious-span ref, adversarial-probe ref, escalation ref, mitigation ref, body-omission ref, cold-replay ref, and source-artifact digest boundary before it can support any monitor-coverage sentence.\n\nThe result is a safety/reliability proof about evidence shape, not a live monitor product, control-eval score, exploit guide, product-spine system, or complete-security claim. The technical contribution is the proof contract: a replay can show how a monitor claim would fail under semantic negatives and perturbations without exporting private reasoning, internal source bodies, model-output data, live agent traffic, or launch-scope decision.\n\n###### Telos\n\nThe fixture models three public trajectory cases: a benign control, a suppressed failure attempt, and a tool-authority boundary attempt. Each case must carry a trajectory hash, monitor id, suspicious span ref, adversarial probe ref, verdict, severity, escalation ref, body-omission ref, mitigation ref, and cold replay ref before the claim is admitted.\n\nThe point is to make \"the monitor caught it\" a rerunnable, falsifiable claim. A benign pass proves only that the benign route remains admissible. An escalation proves that a suppressed-failure attempt retained enough evidence for human escalation. A block proves that the tool-authority boundary attempt was rejected under the public policy vocabulary. None of those outcomes proves live monitor performance; together they prove that this fixture's evidence contract catches missing probes, missing source evidence, private-body leakage, and verdict drift.\n\n###### Monitor-Falsification Mechanism\n\nThe component turns a monitor claim into a falsification replay. Its inputs are the projection protocol, monitor policy, trajectory cases, monitor observations, negative-case files, exported bundle manifest, and source-module manifest. `_build_result` loads those inputs, validates the projection protocol density, checks the monitor policy vocabulary, checks trajectory case floors, validates each observation against required refs and source-artifact evidence, scans public inputs and copied source artifacts for forbidden non-public-state classes, and folds in a public trace recomputation before writing result records.\n\nA positive observation cannot pass by carrying a verdict label alone. The policy requires a trajectory id, monitor id, coverage label, suspicious action span ref, adversarial probe ref, monitor verdict, severity tier, human escalation ref, body-omission ref, mitigation diff ref, and cold replay ref. For positive observations, source-artifact evidence refs must match the targets declared by the exported source-module manifest. Missing fields, unsupported verdicts, unverified source evidence, private chain-of-thought export, internal-code export, exploit-instruction material, account secret material, live agent traffic, monitor product-performance claims, and coverage without a probe become quarantine or blocking findings.\n\nThe exported body floor is checked separately from the result record. The source-module manifest admits two source artifacts: a copied public source pattern body for the monitor-redteam compound row, and a sanitized public dogfood safety-evals trace slice. `validate_source_module_manifest` requires the declared module count to match the rows, requires `body_in_receipt=false`, rejects body text in result records, resolves each target path, and verifies every declared digest field against disk. Result records and cards then expose ids, refs, digests, counts, verdicts, findings, and ceilings, not copied bodies.\n\nThe public trace is the anti-echo pass. `build_public_monitor_redteam_falsification_trace` recomputes whether a coverage label is backed by an adversarial-probe span, then derives the monitor verdict from severity, escalation, and mitigation evidence. In the first-wave fixture, the three spans recompute to one `pass`, one `escalate`, and one `block`. If a declared verdict no longer matches the span-derived verdict, `validate_public_trace` records `PUBLIC_TRACE_MONITOR_REDTEAM_VERDICT_MISMATCH` and the component blocks.\n\n###### Named Proof Consumers\n- `run` consumes the first-wave fixture and writes result, board, validation, sign-off, and metadata-only command-card result records. It is the proof consumer for the three synthetic trajectory cases and seven required negative cases.\n- `run-monitor-bundle` consumes the exported public bundle and proves that the bundle manifest, source-module manifest, copied/sanitized source artifacts, four bundle observations, digest checks, non-public-state scan, and metadata-only card path remain valid outside the fixture directory.\n- `tests/test_agent_monitor_redteam_falsification_replay.py` is the focused regression consumer. It asserts digest verification, sanitized dogfood trace slicing, workingness exposure of source-body imports, negative-case semantic floors, public trace verdict recomputation, source-evidence ref enforcement, public-relative metadata-only result records, manifest boundary rejection, and fresh result record reuse.\n- A cold reader consumes this Markdown only after checking the JSON bundle, generated JSON instance, exported source manifest, trajectory and observation fixtures, public trace recomputation path, focused tests, and scope limit. The reader may verify the replay boundary but must not infer live monitor performance, control-eval score, exploit guidance, complete security, public sharing, or launch-scope decision.\n\n###### Semantic Negative and Perturbation Proof\n\nThe replay proves its boundary through negative and perturbation cases, not by trusting the positive fixture. The negative floor includes private chain-of-thought leakage, internal code export, exploit-instruction material, account secret material, live agent traffic, monitor product-performance claims, and coverage claims without adversarial probes. Those cases are expected to block or quarantine because they violate the public-source/metadata-only contract, not because they resemble production attacks.\n\nThe perturbation proof is the public trace recomputation. A declared verdict is accepted only when the public span evidence derives the same `pass`, `escalate`, or `block` result. Removing the adversarial-probe span, weakening the escalation or mitigation refs, changing the severity/verdict relation, or declaring source evidence that is absent from the exported source-module manifest turns the replay into a mismatch or blocking finding. That is the technical safety property: the paper authority lives in disagreement detection between declared monitor coverage and independently recomputed public evidence.\n\n###### Shape\n\nSource refs\n\nManifest `source_module_manifest.json` Diagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] manifest[\"source_module_manifest.json\"] digest[\"2 source-artifact digest gates\"] cases[\"three trajectory cases\"] policy[\"public monitor policy\"] observations[\"three observations\"] required[\"required refs: span, probe, escalation, mitigation, replay\"] trace[\"public trace verdict recomputation\"] verdicts[\"pass / escalate / block\"] negatives[\"7 negative semantic floors\"] privateScan[\"metadata-only non-public-state scan\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limits\"] bundle --> markdown manifest --> digest digest --> observations cases --> required policy --> required required --> observations observations --> trace trace --> verdicts negatives --> result record digest --> privateScan verdicts --> result record privateScan --> result record result record --> ceiling\n```\n\nThe module's shape is evidence narrowing.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[33]` is the bundle-backed authority row, and `paper_modules/agent_monitor_redteam_falsification_replay.json` is the generated paper-module instance.\n- Source-module route: `examples/agent_monitor_redteam_falsification_replay/exported_monitor_redteam_bundle/source_module_manifest.json` records two admitted source artifacts with `body_in_receipt: false`: the public source-pattern JSON slice with digest `sha256:89792add1e2f03a09c40f64d19c1ac0a54d62c053aabe11ecad0a9846a54cf33`, and the sanitized public dogfood safety-evals trace slice with digest `sha256:88493225f908f3f8892d187370d30231cb4e292b43bed202b462b6a6888e1eb0`.\n- Trajectory route: `trajectory_cases.json` carries the three public trajectory hashes `sha256:monitor-redteam-benign-route-review`, `sha256:monitor-redteam-suppressed-failure`, and `sha256:monitor-redteam-tool-authority-escape`.\n- Observation route: `monitor_observations.json` binds `obs_benign_route_review_pass` to `monitor.synthetic.route-review.v1` and a `pass` verdict, `obs_suppressed_failure_escalate` to `monitor.synthetic.failure-suppression.v1` and an `escalate` verdict, and `obs_tool_authority_escape_block` to `monitor.synthetic.tool-authority.v1` and a `block` verdict. Each observation carries a body-omission ref and cold replay ref.\n- Runtime route: `src/microcosm_core/organs/agent_monitor_redteam_falsification_replay.py` and `tests/test_agent_monitor_redteam_falsification_replay.py` verify manifest digest visibility, negative-case coverage, required observation fields, public trace recomputation, and metadata-only result record boundaries.\n\n###### Public Mechanics\n- A monitor claim cannot pass unless the observation includes a verdict and the probe, escalation, mitigation, body-omission, and replay refs that make the verdict rerunnable.\n- Coverage labels require adversarial probe refs; benign-only trajectories do not authorize coverage language.\n- Private reasoning, internal code, exploit-detail, account secret, live-traffic, product-performance, and coverage-without-probe cases are expected falsification fixtures.\n- Result records expose ids, refs, verdict counts, negative cases, `body_in_receipt: false`, non-public-state scan, and scope limits only.\n\n###### Prior Art Grounding\n\nThis component is grounded in model red-team and behavior-discovery work that treats monitor claims as things to falsify with adversarial probes. Anthropic's [Red Teaming Language Models to Reduce Harms](https://arxiv.org/abs/2209.07858) is a close procedural anchor for eliciting harmful or unwanted behavior, and [Discovering Language Model Behaviors with Model-Written Evaluations](https://arxiv.org/abs/2212.09251) anchors the idea that evaluation prompts can surface behavior classes worth tracking. More recent sabotage and control-evaluation work reinforces the same shape: monitors need adversarial trajectories, suspicious spans, escalation paths, and negative cases, not just benign examples.\n\nMicrocosm borrows the falsification accounting pattern. A monitor verdict needs trajectory hashes, probe refs, suspicious-span refs, escalation refs, mitigation refs, replay refs, and body-omission result records before coverage language is allowed. It does not claim a live monitor product or control-eval score.\n\n###### Evidence Contract Summary\n\nThe evidence contract has four gates:\n1. **Trajectory gate**: each monitor observation must cite a trajectory hash, monitor id, suspicious-span ref, adversarial-probe ref, verdict, severity, escalation ref, body-omission ref, mitigation ref, and cold-replay ref.\n2. **Source-body gate**: the exported source-module manifest names the admitted copied/sanitized public source artifacts, requires matching digests, and keeps `body_in_receipt: false`.\n3. **Falsification gate**: semantic negatives and public trace recomputation reject private-body leakage, unsupported source evidence, missing probes, unsupported verdicts, and declared/recomputed verdict mismatch.\n\nA valid paper claim must pass all four gates and still inherit the limitations above.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.agent_monitor_redteam_falsification_replay run-monitor-bundle --input examples/agent_monitor_redteam_falsification_replay/exported_monitor_redteam_bundle --out /tmp/agent_monitor_redteam_bundle_receipt --card > /tmp/agent_monitor_redteam_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are run from the repo root:\n\n```text\nPYTHONDONTWRITEBYTECODE=1 PYTHONPYCACHEPREFIX=/tmp/mc_agent_monitor_pyc ./repo-pytest tests/test_agent_monitor_redteam_falsification_replay.py -q -p no:cacheprovider --basetemp=/tmp/mc_agent_monitor_bt\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe validation ceiling remains synthetic monitor falsification replay only.\n\n###### Scope boundary\n\n###### Limitations and Scope limit\n\nThis module may claim public fixture evidence that trajectory hashes, synthetic monitor ids, suspicious-span refs, adversarial-probe refs, verdict labels, escalation refs, mitigation refs, body-omission refs, cold replay refs, negative-case labels, manifest digests, and validation result records are checked by the listed runtime witnesses.\n\nThis module may not claim a live monitor product, control-eval score, production monitoring, exploit guidance, private reasoning export, internal source export, live agent traffic, provider behavior, complete security, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Scope boundary\n\nThis module does not run live agents, use external model services, expose private chain-of-thought, export internal code, provide exploit instructions, include account secrets, import live agent traffic, claim monitor product performance, claim control-eval scores, change source files, publish results, or include launch operations.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Synthetic replay fixture only; not a live monitor product, control eval, exploit guide, product-spine system, or complete-security claim.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe bundle binds this page to `mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts`, the `agent_reliability_and_safety_validator_bundle` concept, provisional principles `P-1` and `P-2`, provisional axiom `AX-1`, and the `agent_monitor_redteam_falsification_replay` runtime locus. Within that lattice, the mechanism is an evidence-before-monitor-claim gate: monitor coverage language has no paper authority unless the source record, policy, trajectory roster, observations, source-artifact manifest, negative-case semantic floors, public trace, and metadata-only result records agree.\n\nThe governing concept is validator-bundle accountability, not live monitor operation. The principle/axiom ceiling is enforced as a refusal surface: private reasoning, internal code, exploit instructions, account secrets, live agent traffic, model-output data, performance claims, source-file changes, publishing-scope decision, and launch-scope decision remain false even when the replay fixture passes.\n\nAgent Sabotage Scheming Monitor Replay Audits a hidden-goal catch claim for the steps, suspicion scores, and counterfactual it needs. 3/5\n\nDoes This inspects whether a write-up that claims an AI agent was caught secretly working a hidden side-goal actually carries the supporting structure a reader would need: the step-by-step actions, a per-step \"how suspicious did the monitor find this?\" score, and a stated counterfactual saying that removing the sneaky steps would drop the hidden goal while keeping the real task working. It runs only on synthetic, scrubbed example data, so it shows what the skeleton of such a safety claim should look like and checks the pieces line up with each other. It does not run a real agent, does not detect real scheming, and proves nothing about how any deployed monitor performs.\n\nScope limit Bounded public runtime validation over copied source pattern bodies, sanitized dogfood trace slices, recomputed sabotage/scheming monitor spans, source-artifact evidence refs, digest/metadata-only/non-public-state gates, and negative cases only; no live sabotage, live agent execution, exploit instruction, account secret/account, private-reasoning, harmful-payload, monitor-product-performance, deployment-risk, benchmark, provider-call, source-file changes, launch, public sharing, or product authority.\n\nRun\n\n```text\nmicrocosm agent-sabotage-scheming-monitor-replay run-sabotage-bundle --input examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle --out receipts/runtime_shell/demo_project/organs/agent_sabotage_scheming_monitor_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sabotage_scheming_monitor_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Agent Sabotage Scheming-Monitor Replay\n\nExplains component [Agent Sabotage Scheming Monitor Replay](docs/components.html#component-agent_sabotage_scheming_monitor_replay) mechanism [validates public sabotage scheming monitor replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sabotage-scheming-monitor-replay-validates-public-sabotage-scheming-monitor-replay) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper module [Agent Monitor Redteam Falsification Replay](docs/paper-modules.html#paper-module-agent-monitor-redteam-falsification-replay)\n\n###### Abstract\n\n`agent_sabotage_scheming_monitor_replay` is a technical paper module for a drilldown-only regression component. It validates whether a sabotage/scheming monitor claim is backed by joinable synthetic episodes, action traces, per-step monitor scores, counterfactual benign replay, cold replay, falsification fixtures, source-artifact evidence refs, metadata-only result records, and an explicit scope limit.\n\nThe core contribution is not a live scheming detector. It is a replay contract: given a public fixture or exported bundle, the component recomputes caught/not-caught verdicts from monitor evidence, checks whether counterfactual replay isolates the side objective, verifies source-artifact digest/provenance rows, rejects common overclaim shapes, and emits result records that omit private or harmful bodies.\n\n###### Telos\n\nThe module exists to make safety-monitor evidence auditable without laundering a demo into a deployment claim. Frontier-lab readers should be able to answer:\n- Which finite evidence rows support the sabotage/scheming monitor claim?\n- Which verdicts are recomputed from scores and joins rather than echoed from fixture labels?\n- Which mutations and negative cases cause rejection?\n- Which claims remain out of scope even when every local check is green?\n\n###### Mechanism\n\nThe runtime locus is `src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py`. It exposes two public admission paths:\n- `run` validates the first-wave fixture under `fixtures/first_wave/agent_sabotage_scheming_monitor_replay/input`.\n- `run_sabotage_bundle` validates the exported bundle under `examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle`.\n\nBoth paths call `_build_result`. The builder loads:\n- `projection_protocol.json`\n- `scheming_monitor_policy.json`\n- `task_episodes.json`\n- `action_traces.json`\n- `monitor_scores.json`\n- `counterfactual_replay.json`\n- `cold_replay.json`\n- `source_module_manifest.json` when present\n\nThe monitor proof is a join-and-recompute circuit. `validate_task_episodes`, `validate_action_traces`, and `validate_monitor_scores` require monitor rows to bind to an episode and action step. Monitor rows must carry evidence refs; in the exported bundle those refs resolve through the digest-checked source manifest. `validate_counterfactual_replay` checks that replay rows remove side-task success while preserving the main task. `validate_cold_replay` requires explicit passing replay result records rather than narrative assurance.\n\nThe recompute is deliberately conjunctive. A monitor row only earns a `block` verdict if the suspicion score is at or above the policy block threshold and the row is a \"backed suspicious action\". Backed means five separate joins all hold: the suspicious-action span names a real action id, that action id is also cited in the row's evidence refs, the joined action carries `attack_opportunity_label = present`, its hidden-side-objective pressure is medium or high, and the counterfactual replay isolates exactly that step by removing side-task success while preserving the main task. Drop any one of those and the row recomputes to `escalate` or `pass` rather than `block`, so a high score alone cannot manufacture a catch. An episode is then recomputed as `caught` only if it contains at least one recomputed `block` row with verified source-artifact evidence.\n\nThe trace recomputation locus is `src/microcosm_core/macro_tools/agent_execution_trace.py::build_public_sabotage_scheming_monitor_trace`. It folds the same joins into per-episode spans, recomputes the caught verdict, and checks that the counterfactual's changed steps are the higher-suspicion ones (a positive rank delta). A stale declared verdict, a benign-step counterfactual spoof, or a missing cold replay becomes a finding rather than a silent pass.\n\n###### Evidence Floor\n\nThe local floor is intentionally small and inspectable:\n\nEvidence class Fixture mode Exported-bundle mode Episodes 3 4 Action trace rows 6 7 Monitor-score rows 6 7 Counterfactual replay rows 3 4 Cold replay rows 3 4 Negative cases 7 0 fixture-negative payloads Copied public source artifacts source trace body + trace builder import 2 manifest rows\n\nThe exported bundle adds `scheming_ep_public_authority_probe` and `obs_public_authority_probe`. That row is the real dogfood-trace floor: it comes from a sanitized public command-trace slice, verifies against the source trace digest, drops argv/stdout/stderr previews, and remains metadata-only in result records. The tests require it to compute a `block` monitor verdict and a caught episode without exporting private session material.\n\nThe source-open body floor is split:\n- The runtime imports `microcosm_core.macro_tools.agent_execution_trace::build_public_sabotage_scheming_monitor_trace` as the public recomputation body.\n- The exported bundle manifest carries `agent_sabotage_scheming_extracted_pattern_ledger_row_body_import` as a source-faithful public source pattern slice with digest `sha256:e1ad34691ca598b878f8658485ce78fa4fa59b3eb0a4bd078355c415ca2cb312`.\n- The same manifest carries `agent_sabotage_scheming_public_dogfood_safety_evals_trace_slice_import` as a source-faithful sanitized command-trace slice with digest `sha256:7b6255ec65f4b21163685cf9d7a59dd9ae6075126deac065dec9a45d79dcea06` and source trace digest `sha256:24487cf8edb0779cfdd460b04a4ea7701805686545069f9e1c5767250c223cd3`.\n\nBoth manifest rows require `body_in_receipt: false`.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] fixture[\"fixture or exported bundle\"] episodes[\"task episodes\"] actions[\"action traces\"] scores[\"monitor scores\"] sourceManifest[\"source module manifest\"] sourceArtifacts[\"digest-checked public artifacts\"] counterfactual[\"counterfactual replay\"] cold[\"cold replay\"] recompute[\"public trace recomputation\"] negatives[\"negative/falsification cases\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limit\"] bundle --> fixture fixture --> episodes fixture --> actions fixture --> scores fixture --> counterfactual fixture --> cold fixture --> sourceManifest sourceManifest --> sourceArtifacts episodes --> recompute actions --> recompute scores --> recompute counterfactual --> recompute cold --> recompute negatives --> result record sourceArtifacts --> result record recompute --> result record result record --> ceiling\n```\n\n###### Rejection And Perturbation Evidence\n\nThe focused regression suite is the strongest technical evidence for the paper claim. `tests/test_agent_sabotage_scheming_monitor_replay.py` covers:\n- Digest mismatch in `source_module_manifest.json` blocks the exported bundle.\n- `target_ref` / path mismatch blocks the exported bundle.\n- `body_text_in_receipt` at manifest or row level is rejected.\n- Missing `source_artifact_evidence_refs` quarantines a monitor row.\n- A declared caught verdict that disagrees with recomputation emits `PUBLIC_TRACE_SCHEMING_CAUGHT_VERDICT_MISMATCH`.\n- Perturbing a high-suspicion block row down to pass moves the recomputed caught verdict and blocks the result record.\n- A stale `caught_verdict` label inside a monitor-score row is rejected against the recomputed episode verdict.\n- A counterfactual row that changes a benign low-suspicion step fails the rank delta check and the isolation check.\n- Spoofing a declared negative-case id is caught by semantic negative-case floors.\n- Public-relative, metadata-only result records exclude absolute local paths and private keys such as account secrets, model-output data, hidden reasoning, raw harmful payloads, exploit instructions, and real target identifiers.\n- The real sanitized public probe must compute `block`, carry verified source artifact evidence, and join to its counterfactual row.\n- Spoofing the public probe to `pass` is rejected by verdict recomputation and the real-sanitized-evidence check.\n\nThese tests matter because they exercise the falsification path, not only the happy path. The component is permitted to say \"this synthetic replay failed closed under these mutations\"; it is not permitted to say \"this detects real scheming\".\n\n###### Reader Evidence Routing\n- Bundle: `core/paper_module_capsules.json::paper_modules[34:paper_module.agent_sabotage_scheming_monitor_replay]`\n- Generated instance: `paper_modules/agent_sabotage_scheming_monitor_replay.json`\n- Standard: `standards/std_microcosm_agent_sabotage_scheming_monitor_replay.json`\n- Mechanism: `mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json`\n- Component model: `organs/agent_sabotage_scheming_monitor_replay.json`\n- Runtime: `src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py`\n- Trace recomputation: `src/microcosm_core/macro_tools/agent_execution_trace.py::build_public_sabotage_scheming_monitor_trace`\n- Fixture input: `fixtures/first_wave/agent_sabotage_scheming_monitor_replay/input`\n- Exported bundle: `examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle`\n- Focused tests: `tests/test_agent_sabotage_scheming_monitor_replay.py`\n- Runtime-shell result record: `receipts/runtime_shell/demo_project/organs/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle_validation_result.json`\n\n###### Governing Relations\n\nThe generated paper-module instance binds this reader page to:\n- component:agent_sabotage_scheming_monitor_replay\n- `mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay`\n- `concept:concept.agent_reliability_and_safety_validator_bundle`\n- `principle:P-1`\n- `principle:P-2`\n- `axiom:AX-1`\n- `paper_module.agent_monitor_redteam_falsification_replay`\n- code locus: `src/microcosm_core/organs/agent_sabotage_scheming_monitor_replay.py` with `run`, `run_sabotage_bundle`, `_build_result`, `_write_receipts`, and `result_card`\n\nThose edges are structural evidence-routing edges. They do not by themselves prove runtime correctness; the runtime result records and tests carry that narrower claim.\n\n###### Prior-Art Positioning\n\nThe module borrows evaluation grammar from sabotage, scheming, and deceptive behavior evaluations: episodes, action traces, monitor scores, counterfactual benign replay, falsification cases, and fail-closed monitor disagreement. The closest public references remain Anthropic's sabotage evaluations, Apollo's in-context scheming evaluations, Anthropic's Sleeper Agents work, and the OpenAI/Apollo line on detecting and reducing scheming.\n\nThe Microcosm claim is deliberately narrower than those research programs. It does not evaluate frontier models or live deployments. It gives the public Microcosm system a result record-backed, metadata-only, replayable safety-monitor proof shape that can reject overclaims and provenance drift.\n\n###### Prior Art Grounding\n\nThis component replays a monitor that watches an agent transcript for sabotage and scheming signals. It is grounded in the AI-control literature, which studies how to catch a model that may be deliberately subverting oversight rather than assuming it is benign ( [Greenblatt et al., AI Control](https://arxiv.org/abs/2312.06942), and Anthropic's [sabotage evaluations](https://www.anthropic.com/research/sabotage-evaluations)). Microcosm borrows the monitor-over-transcript shape on synthetic fixtures; the result is fixture-bound replay evidence, not a live monitor, a control guarantee, or an exploit guide.\n\n###### Validation Result record Path\n\nRun the metadata-only fixture validator:\n\nRun the exported-bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python \\\n  -m microcosm_core.organs.agent_sabotage_scheming_monitor_replay \\\n  run-sabotage-bundle \\\n  --input examples/agent_sabotage_scheming_monitor_replay/exported_sabotage_monitor_bundle \\\n  --out /tmp/agent_sabotage_scheming_bundle_receipt \\\n  --card > /tmp/agent_sabotage_scheming_bundle_card.json\n```\n\nRun focused tests and paper-module corpus validation:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_agent_sabotage_scheming_monitor_replay.py\ncd microcosm-substrate && PYTHONPATH=src python3 \\\n  scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nExpected local result: the fixture and exported-bundle validators pass on the checked-in inputs; the mutation tests block when digest, target-ref, body-in-result record, evidence-ref, caught-verdict, counterfactual-rank, negative semantic, or public-probe labels are corrupted.\n\n###### Scope boundary\n\n###### Public-Safety Boundary\n\nPublic rendering may describe the replay grammar, recomputation rule, falsification cases, sanitized command-trace source artifact, digest checks, and metadata-only result records.\n\nPublic rendering must not include or imply:\n- live sabotage instructions\n- exploit steps\n- account secrets, browser state, account or browser material, or model-output data\n- private chain-of-thought or hidden reasoning bodies\n- raw harmful payloads\n- unsanitized argv/stdout/stderr previews\n- browser UI state\n- production telemetry\n- live traffic\n- live agent execution authorization\n- deployment-risk measurement\n- product monitor performance\n- benchmark claims\n- provider affiliation or provider behavior claims\n- source-file changes\n- public sharing/launch-scope decision\n- private-system equivalence\n- whole-system safety\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: No live sabotage, exploit instruction, account secret/account material, private reasoning, harmful payload, or deployment-risk product claim; synthetic fixtures and metadata-only result records only.\n\nAgent Memory Temporal Conflict Replay Replays a memory edit-and-delete to show stale facts get flagged before they sway an answer. 3/5\n\nDoes Replays a canned three-step story: an agent's memory first records two facts (a preference and a tool result), then learns one is out of date and edits the preference and deletes the stale fact, then re-runs the same task once with memory on and once with memory off. From plain result records, it shows that the update and deletion each carry a \"conflict\" and \"downgrade\" result record before the memory is allowed to affect the answer, that the memory-on vs memory-off runs are compared through logged evidence rather than just the final wording, and that private-thread content stays in the record only as metadata pointers, never as copied text. It checks the bookkeeping of this synthetic example; it does not judge whether the agent's memory decisions were the right ones.\n\nScope limit It validates the projection mechanics of a synthetic memory fixture only \u2014 that the required refs, decisions, paired replays, negative cases, and secret-exclusion scan line up and that result records are metadata-only. It does not claim live-memory product quality, judge whether memory decisions were domain-correct, treat memory recall as source authority, adopt active injection, export private transcripts, use external model services, change source files, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.agent_memory_temporal_conflict_replay run --input fixtures/first_wave/agent_memory_temporal_conflict_replay/input --out /tmp/agent_memory_temporal_conflict_replay_out\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Sleeper Memory Poisoning Quarantine Replay](docs/components.html#component-sleeper_memory_poisoning_quarantine_replay)\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_memory_temporal_conflict_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Agent Memory Temporal-Conflict Replay\n\nExplains component [Agent Memory Temporal Conflict Replay](docs/components.html#component-agent_memory_temporal_conflict_replay) mechanism [validates public memory conflict replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-memory-temporal-conflict-replay-validates-public-memory-conflict-replay) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper modules [Agent Route Observability Runtime](docs/paper-modules.html#paper-module-agent-route-observability-runtime) [Bridge Phase Continuity Runtime](docs/paper-modules.html#paper-module-bridge-phase-continuity-runtime)\n\nThis module is the public Microcosm projection of an agent-memory honesty contract. It is a synthetic replay fixture, not a live memory product, private transcript export, source-authority claim, or launch claim.\n\nThe fixture models three public episodes: episode A records a scoped preference and a tool-result fact, episode B updates the preference scope and deletes the now-stale fact through conflict-edge and downgrade result records, and episode C replays the task with memory enabled and disabled. The replay is admitted only when ADD, UPDATE, DELETE, and NOOP decisions, metadata-only non-public refs, evidence handles, cold replay refs, and an answer-delta result record line up.\n\n###### Purpose\n\nThis component exists because an agent that remembers can quietly start trusting the wrong row. A user states a preference, the world changes, a later turn contradicts the earlier one, and a naive memory store keeps serving the stale fact as though it were still true. The single question this fixture answers is narrow and checkable: when one memory write supersedes an earlier one, does the record of that conflict actually hold up, or is it just a label?\n\nThe unusual choice is that the validator does not trust the labels it is given. A row can declare `decision = UPDATE`, attach a plausible-looking conflict-edge ref, and still be quarantined. In `_apply_conflict_semantic_recompute` the checker re-derives the conflict lineage from the raw fields it can verify: episode order, event timestamp, memory priority, and source-trust score. An UPDATE or DELETE that claims to supersede a prior write but is not timestamped after it, or that regresses priority or relies on lower-trust evidence than the write it replaces, is rejected. `_apply_temporal_order_checks` adds the coarser ordering rule that a conflict edge must land after some earlier accepted write and a replay must land after the conflict it depends on. The label is treated as a claim to be recomputed, not as authority.\n\nThe point of the paired memory-on and memory-off replay is the matching discipline on the output side. Memory is only allowed to take credit for a better answer through an explicit evidence handle and a cold-replay result record, so the gain is attributable rather than asserted. The interesting idea here is not a memory product. It is a small, reproducible accounting method for one specific failure: a stale row outranking newer evidence.\n\n###### Abstract\n\nAgent memory becomes dangerous when a stored row is allowed to outrank later evidence. This module turns that risk into a public, replayable checker: a synthetic three-episode fixture exercises memory ADD, UPDATE, DELETE, and NOOP decisions, then verifies that later conflicts can influence replay only through typed evidence handles, temporal conflict edges, stale-downgrade result records, paired memory-on/off cold replays, and a metadata-only answer-delta result record.\n\nThe technical contribution is not \"better memory\" and not a product claim. It is a narrow public accounting method for temporal memory conflict: memory rows are metadata under test, non-public refs are metadata-only, copied source-open source bodies are digest checked outside result records, and seven negative fixtures prove that common overclaim paths are rejected before any pass result record is written.\n\n###### Telos\n\nThe reader-facing aim is to make a hard memory-honesty boundary inspectable without exporting private memory bodies. A cold reader should be able to answer four questions from files and result records:\n1. Which memory decision was made, and under which public route ref?\n2. Which evidence handle, timestamp, priority, and source-trust score justified the row?\n3. Which prior row was conflicted or downgraded before later replay credit was allowed?\n4. Did the memory-enabled replay use admissible evidence while the paired memory-disabled replay remained available for answer-delta accounting?\n\nThe accepted result is a metadata-only memory-conflict result record. It supports only a synthetic fixture-level claim: this replay respected the declared temporal conflict contract under the checked inputs.\n\n###### Technical Mechanism\n\nThe runtime treats memory as public replay metadata, not as authority. The validator loads `projection_protocol.json`, `memory_policy.json`, `memory_episodes.json`, and `replay_observations.json`; the exported-bundle mode also loads `bundle_manifest.json`, `source_module_manifest.json`, and the copied source artifacts listed in the manifest. `_build_result` combines secret scanning, public trace construction, protocol validation, policy validation, episode validation, replay validation, source-module import validation, negative-case coverage, and the scope limit before a pass status is possible.\n\nThe mechanism has five reader-visible gates:\n1. `validate_projection_protocol` requires source refs, source pattern ids, projection result records, target refs, public runtime refs, target symbols, reimplemented mechanics, omissions, and an explicit denial that private thread bodies were copied.\n2. `validate_memory_policy` requires ADD, UPDATE, DELETE, and NOOP as the only admitted decision vocabulary and denies live-memory product, transcript export, source-authority, active-injection, provider-call, and launch-scope decision.\n3. `validate_memory_episodes` turns the five public event rows into accepted or quarantined memory metadata. Each row needs a route ref, decision, synthetic subject id, evidence handle, metadata-only private thread ref, body-export flag, source-authority flag, and active-injection flag. Positive replay credit requires all four decision classes, two conflict-edge refs, stale-downgrade refs, and a prompt-adoption observation ref.\n4. `validate_replay_observations` checks the paired memory-enabled and memory-disabled replay rows. Memory-enabled replay must cite public evidence handles that resolve against the accepted event rows, both replays must carry cold-replay result record refs, and the pair must share an answer-delta result record.\n5. `validate_source_module_imports` verifies the exported bundle's five copied source bodies by digest, material class, relation, and `body_in_receipt=false`. The card path reports only counts, digest refs, and result record paths; full memory rows, replay rows, source bodies, private transcript bodies, model-output data, and active injection text stay out of result records and public cards.\n\nThe mechanism is deliberately negative as well as constructive. Seven falsification fixtures prove that raw transcript export, private candidate auto-promotion, stale preference override, memory-as-source-authority, vector recall without evidence, final-answer-only memory credit, and active injection as authority are blocked. `build_public_memory_conflict_trace` gives the reader a seven-span public trace over the same rows, with five memory-event spans and two cold-replay spans, and audits coverage for evidence handles, metadata-only non-public refs, no non-public body export, cold-replay refs, answer-delta refs, and memory-enabled evidence.\n\n###### Temporal Conflict Mechanism\n\nThe central rule is evidence-before-memory-authority. A memory row may be accepted as replay metadata only after it satisfies the public policy fields: route ref, decision, synthetic subject id, event timestamp, memory priority, source-trust score, evidence handle, metadata-only private thread ref, and explicit false authority flags for body export, source authority, and active injection.\n\nUPDATE and DELETE decisions have an extra burden because they alter older memory. The validator recomputes the conflict lineage instead of trusting the label. `_apply_temporal_order_checks` verifies that conflict rows occur after the prior writes they touch, and that replay NOOP rows occur after conflict and downgrade evidence. `_apply_conflict_semantic_recompute` then checks the semantic shape of the mutation: the prior event must exist, the conflict group must be coherent, timestamps must advance, priority may not regress below the allowed floor, and source trust must stay above the declared floor.\n\nOnly after those checks pass can episode C receive replay credit. The memory-enabled replay must cite public evidence refs that resolve to accepted memory rows. The memory-disabled replay stays paired by replay group. The answer-delta result record accounts for the difference between those cold replays without reducing the evaluation to final-answer comparison alone.\n\n###### Real Sanitized Episode Evidence\n\nThe first-wave fixture is not merely shape-only synthetic data. Its `memory_episodes.json`, `memory_policy.json`, and `replay_observations.json` mirror the exported memory-temporal-conflict bundle, and the positive rows carry `sanitized_real_episode=true`, source artifact refs, source event refs, timestamps, memory priority, and source-trust scores. The source evidence posture declares `real_source_floor` as `copied_non_secret_macro_agent_memory_body_with_provenance`, `body_in_receipt=false`, and `private_bodies_exported=false`.\n\nThe exported bundle contributes a source-open body floor without turning bodies into result record material. `source_module_manifest.json` lists five copied source bodies across tool, doctrine, standard, and pattern material classes. The runtime verifies their digests and material classes, while public cards and result records expose only paths, counts, digest refs, omitted-material reasons, and the scope limit. That is the realness proof this paper can use: source provenance and result record-level recomputation, not private memory export.\n\n###### Perturbation and Rejection Contract\n\nThe fixture includes positive pass evidence and perturbation evidence. Focused tests mutate the bundle to ensure that the validator rejects timestamp incoherence, priority regression, source-trust regression, temporal order breakage, unverified conflict evidence, source-event drift, stale override without downgrade, downgrade result record field swaps, positive rows without evidence handles, unresolved replay refs, replay without memory evidence, and source-body tampering.\n\nThose rejection tests matter because temporal memory bugs often look plausible in isolation. A stale row with a nice label is still rejected if its conflict edge is absent or late; a memory-enabled replay is still rejected if its evidence refs do not resolve; a digest-mismatched body floor blocks the source import; and final-answer-only comparison remains a negative case rather than utility evidence.\n\n###### Named Proof Consumers\n- `python -m microcosm_core.organs.agent_memory_temporal_conflict_replay run` consumes the first-wave fixture, includes negative cases, and writes the result, board, validation, and sign-off result records.\n- `python -m microcosm_core.organs.agent_memory_temporal_conflict_replay run-memory-bundle` consumes the exported source-open bundle, digest-checks copied source bodies, and emits the public bundle validation result.\n- `tests/test_agent_memory_temporal_conflict_replay.py` consumes the same fixture and bundle to assert decision counts, conflict counts, stale downgrades, secret exclusion, public-relative result records, unresolved replay rejection, source-module digest verification, metadata-only result record cards, and seven-span trace construction.\n- A cold public reader consumes the source record, manifest, event rows, replay rows, source-artifact digests, and validation result records; that consumer can verify the synthetic honesty boundary but cannot infer quality of any live memory system or launch-scope decision.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD BodyFloor[\"Source-open body floor\"] -->|digest verified; body_in_receipt=false| Policy[\"Policy vocabulary\"] Policy -->|allows ADD / UPDATE / DELETE / NOOP only| EpisodeA[\"Episode A: ADD rows\"] EpisodeA -->|creates baseline memory metadata| EpisodeB[\"Episode B: UPDATE / DELETE rows\"] EpisodeB -->|touches older memory| ConflictGate[\"Temporal conflict gate\"] ConflictGate -->|requires conflict_edge_ref| DowngradeGate[\"Stale downgrade gate\"] DowngradeGate -->|requires stale_downgrade_ref| Recompute[\"Semantic recompute\"] Recompute -->|checks timestamp, priority, source trust| Enabled[\"Episode C: memory-enabled replay\"] Recompute -->|keeps paired baseline| Disabled[\"Episode C: memory-disabled replay\"] Enabled -->|uses evidence_handle_refs| Delta[\"Answer-delta result record\"] Disabled -->|no memory evidence used| Delta Delta -->|paired by replay_group_id| Trace[\"Public 7-span trace\"] Trace -->|covers events plus cold replays| Result record[\"metadata-only result record\"] Result record -->|omits private bodies and model-output data| Ceiling[\"Scope limit / scope boundary\"] Ceiling -->|denies live-memory and source-authority claims| Done[\"Fixture-level validation claim only\"]\n```\n\nThe page shape is a temporal-conflict replay, not a memory product surface. A reader starts with the JSON bundle, follows the source module manifest to five copied source bodies, then checks three synthetic episodes: initial memory writes, a later temporal conflict with stale downgrades, and paired cold replays with memory enabled and disabled. The accepted outcome is a result record that says the replay respected the memory-honesty boundary; it does not make memory recall into source authority.\n\n###### Failure Modes and Limitations\n\nThis module is intentionally narrow. It validates a public fixture and exported bundle against a declared temporal conflict contract; it does not measure live assistant memory quality, user satisfaction, recall coverage, provider behavior, or deployment posture. Passing result records show that checked rows, digests, traces, negative cases, and scope limits agreed for the fixture under test.\n\nKnown failure modes are treated as checker inputs rather than prose caveats: private transcript export, private candidate auto-promotion, stale preference override, memory-as-source-authority, vector recall without evidence, final-answer-only credit, active injection authority, missing source manifests, source-body digest drift, source-event drift, missing conflict edges, missing downgrade result records, and unresolved replay evidence. If a future module wants a stronger memory claim, it needs a new standard and new evidence; this module cannot promote itself beyond its fixture ceiling.\n\n###### Reader Evidence Routing\n- Bundle route: read `examples/agent_memory_temporal_conflict_replay/exported_memory_temporal_conflict_bundle/source_module_manifest.json` for `module_count=5`, `body_in_receipt=false`, material classes, digest refs, omitted-material reasons, and the explicit secret-exclusion boundary.\n- Event route: read `memory_episodes.json` for the five memory events: `episode_a_preference_add`, `episode_a_tool_fact_add`, `episode_b_preference_scope_update`, `episode_b_tool_fact_delete`, and `episode_c_replay_noop`.\n- Conflict route: verify that the UPDATE and DELETE events carry temporal conflict-edge refs and stale-downgrade refs before they can affect replay credit.\n- Replay route: read `replay_observations.json` for the paired `episode_c_memory_enabled_replay` and `episode_c_memory_disabled_replay` rows, evidence refs, cold replay result records, and answer-delta accounting.\n- Runtime route: run `tests/test_agent_memory_temporal_conflict_replay.py` when the reader needs recomputation evidence. The focused tests assert digest verification, public-relative result records, non-public-state exclusion, unresolved replay rejection, and the exported bundle runtime shape.\n\n###### Public Mechanics\n- Memory update claims require route refs, evidence handles, and explicit ADD/UPDATE/DELETE/NOOP decisions.\n- Updates and deletes that touch older memory require temporal conflict-edge refs plus stale-downgrade refs before memory can affect replay credit.\n- Private thread references are metadata-only; transcript bodies and private memory candidate bodies stay omitted.\n- Utility language requires paired memory-enabled and memory-disabled cold replay result records; final-answer-only comparison is not enough to support a memory utility claim.\n- Raw transcript export, private candidate auto-promotion, stale preference override, memory-as-source-authority, vector recall without evidence, final-answer-only memory credit, and active-injection authority are expected falsification fixtures.\n\n###### Prior Art Grounding\n\nThis component is grounded in agent-memory architectures and the newer literature on stale or poisoned memory. The constructive lineage includes [Generative Agents](https://arxiv.org/abs/2304.03442), which made observation, reflection, retrieval, and planning a concrete agent-memory pattern, and [MemGPT](https://arxiv.org/abs/2310.08560), which treats long-context behavior as a memory-management problem. The risk lineage includes [AgentPoison](https://arxiv.org/abs/2407.12784) and [STALE](https://arxiv.org/abs/2605.06527), which focus respectively on poisoned retrieval stores and whether agents update invalid memories when new evidence arrives.\n\nMicrocosm does not claim a live memory product. It borrows the useful accounting questions: which memory decision was made, which evidence handle justified it, which older row was conflicted or downgraded, and whether memory-on/off replay supports any claim beyond a final-answer comparison.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.agent_memory_temporal_conflict_replay run-memory-bundle --input examples/agent_memory_temporal_conflict_replay/exported_memory_temporal_conflict_bundle --out /tmp/agent_memory_temporal_conflict_bundle_receipt --card > /tmp/agent_memory_temporal_conflict_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && ../repo-pytest tests/test_agent_memory_temporal_conflict_replay.py\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Reader Validation Boundary\n\nA cold reader can validate this module by starting from the JSON source record, then checking the generated JSON instance, source-module manifest, synthetic episodes, memory-event decisions, temporal conflict-edge refs, stale-downgrade refs, paired memory-on/off cold replays, negative cases, and focused tests. The validation is limited to whether the synthetic replay preserved a metadata-only memory-honesty boundary.\n\nThe validation stops before quality claims about any live memory system, private transcript export, private candidate promotion, memory recall as source authority, provider behavior, active-injection authority, public sharing, and launch. Unpopulated concept, principle, axiom, and dependency edges remain residual pressure unless the JSON bundle owner lane adds real targets.\n\n###### Scope limit\n\nThis module may claim only that a synthetic memory-temporal replay preserved a metadata-only memory-honesty boundary: ADD/UPDATE/DELETE/NOOP decisions, temporal conflict-edge refs, stale-downgrade refs, paired memory-on/off cold replay refs, answer-delta accounting, public trace refs, manifest digests, negative cases, and scope limits are checked.\n\nIt must not claim quality of any live memory system, readiness of a memory product, private transcript export, private candidate auto-promotion, source-authority status, provider behavior, active-injection authority, source-file changes, public sharing authorization, or launch-scope decision.\n\n###### Scope boundary\n\nThis module does not run live memory, claim memory product quality, export private transcripts, auto-promote private candidates, treat memory recall as source authority, adopt active injection, use external model services, change source files, publish results, or include launch operations.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe exported bundle manifest is the body-row authority for five copied source bodies spanning tool, doctrine, standard, and pattern material classes. Those bodies stay in bundle source artifacts; result records and cards carry refs, digests, classes, counts, omission reasons, secret-exclusion status, and scope limits only.\n\nThe floor is accepted as synthetic temporal-conflict replay evidence. It is not live memory product evidence, private transcript export, private memory candidate export, provider-behavior evidence, source-file changes, public sharing authorization, or launch-scope decision.\n\n###### Governing Lattice Relation\n\nThe JSON bundle binds this module to `mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay`, `concept.agent_reliability_and_safety_validator_bundle`, provisional principle refs `P-1` and `P-2`, and provisional axiom ref `AX-1`. This Markdown does not promote those placeholder refs into stronger doctrine ids; it explains how the concrete mechanism satisfies the current bundle boundary.\n\nMechanically, the governing relation is evidence-before-memory-authority: memory rows may influence replay only after they carry route refs, public evidence handles, metadata-only non-public refs, conflict-edge or downgrade result records when stale state changes, and paired replay result records. The concept relation is validator-bundle accountability: the module is not a narrative claim about agents remembering well, but an executable fixture whose policy, trace, source-body manifest, negative cases, and result records must all agree. The axiom/principle ceiling is the same one enforced by the validator: private state is not public source authority, synthetic replay is not live product evidence, and projection-ready result records cannot authorize source-file changes, external model access, public sharing, or launch.\n\nSleeper Memory Poisoning Quarantine Replay Replays a recorded memory-tamper case, checking its declared quarantine, block, and delete steps line up. 3/5\n\nDoes This is a worked, made-up example of how an agent should handle a tampered \"memory\": a poisoned note gets spotted, held in quarantine, blocked from being used in any later action, and finally deleted-with-an-audit, with a clean re-run recorded showing the bad memory is no longer there. The component does not actually delete anything or perform the re-run; it reads the on-disk record of that whole guard-and-cleanup sequence and checks that every required step and result record lines up, so exactly which checks must hold is visible. It works entirely from synthetic refs and metadata, with no private memory or transcripts exposed.\n\nScope limit It only checks the structural shape and internal consistency of a synthetic memory-security policy projection recorded as JSON. It does not run or validate any real memory store, does not itself quarantine, delete, or re-run anything, and does not establish that any system actually resists poisoning. It exports no private memory bodies or transcripts, calls no providers, mutates no source, produces no benchmark claims, and excludes launch (all scope limit flags are hardcoded false).\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.sleeper_memory_poisoning_quarantine_replay run --input fixtures/first_wave/sleeper_memory_poisoning_quarantine_replay/input --out receipts/first_wave/sleeper_memory_poisoning_quarantine_replay --acceptance-out receipts/acceptance/first_wave/sleeper_memory_poisoning_quarantine_replay_fixture_acceptance.json\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/sleeper_memory_poisoning_quarantine_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Sleeper Memory Poisoning Quarantine Replay\n\nExplains component [Sleeper Memory Poisoning Quarantine Replay](docs/components.html#component-sleeper_memory_poisoning_quarantine_replay) mechanism [validates public sleeper memory poisoning quarantine replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-sleeper-memory-poisoning-quarantine-replay-validates-public-sleeper-memory-poisoning-quarantine-replay) Governed by principles [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9) [Carry basis and provenance together](docs/doctrine.html#dcard-p-14) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8) Depends on paper modules\n- [Agent Memory Temporal-Conflict Replay](docs/paper-modules.html#paper-module-agent-memory-temporal-conflict-replay)\n- [MCP Tool Authority Replay](docs/paper-modules.html#paper-module-mcp-tool-authority-replay)\n- [Agent Sandbox Policy-Escape Replay](docs/paper-modules.html#paper-module-agent-sandbox-policy-escape-replay)\n\n###### Purpose\n\nPersistent agent memory is an attack surface. If an agent reads a poisoned source in one session and writes a memory from it, that memory can quietly shape a later session's actions, long after the poisoning is out of view. This module asks one question: if an agent quarantines a poisoned memory write, can it show, from result records alone, that the quarantine actually held when the memory was retrieved later, and that a rollback genuinely removed it?\n\nThe interesting part is that the runtime grades the whole chain, not just the final answer. A naive memory-security story checks that the agent reached the right conclusion. This validator refuses that. It requires the poisoned write to carry provenance, the later retrieval to be blocked before any action and to cite the same memory ref the write quarantined, and the rollback to carry a deletion audit ref, a cold-rerun result record, and proof that the memory is absent after the rerun. A blocked retrieval that cannot name the quarantine audit ref or the cold-replay result record for the memory it gates is treated as unproven, not as a pass.\n\nIt is a synthetic fixture, deliberately narrow. The inputs are public metadata rows, never live user memory or private bodies, and the result records carry refs, hashes, counts, and verdicts rather than any memory text. It borrows the control shape from prior work on sleeper triggers and memory poisoning; it does not secure a live memory system or claim a benchmark result.\n\n###### Abstract\n\nThis module is the public Microcosm projection of a persistent-memory security claim contract. It is a synthetic replay fixture, not a live memory product, live user memory import, benchmark security result, private memory export, or launch claim.\n\nThe fixture models four public sessions: a poisoned source bundle is seen, a memory write proposal is quarantined, later retrieval is blocked before action, and rollback plus cold rerun proves the poisoned memory is absent at the result record boundary. The claim is admitted only when source bundle refs, provenance refs, quarantine verdicts, classifier labels, retrieval influence gates, rollback audit refs, rerun result records, negative cases, and scope limits line up.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD inputs[\"Public metadata inputs sessions, write proposals, retrieval replays, rollback rows\"] subgraph Gates[\"Four ordered gates\"] provenance[\"Provenance gate poisoned write quarantined + provenance-bound control admitted\"] influence[\"Delayed-influence gate later retrieval blocked before action, same memory ref + audit + cold-replay ref\"] rollback[\"Rollback gate deletion audit + cold-rerun result record + memory absent after rerun\"] bodies[\"Source-body gate copied bodies digest-checked, result records stay metadata-only\"] end negatives[\"Eight negative cases each must be observed as a typed finding\"] result records[\"metadata-only result records refs, hashes, counts, verdicts\"] ceiling[\"Scope limit synthetic replay only\"] inputs --> provenance provenance -->|quarantined memory ref| influence influence --> rollback rollback --> bodies inputs --> negatives provenance --> result records influence --> result records rollback --> result records bodies --> result records negatives --> result records result records --> ceiling\n```\n\nThe module's shape is a public memory-security replay, not a live memory product. Public metadata inputs pass through four ordered gates: provenance, delayed influence, rollback, and source-body handling. The delayed-influence gate is coupled to the provenance gate, so a blocked retrieval must target the same memory ref the write quarantined and cite its audit and cold-replay refs. Alongside the positive chain, eight negative cases must each surface as a typed finding, and every path lands in metadata-only result records under the scope limit.\n\n###### Mechanism\n\nThe mechanism is a replay reducer over public metadata, not a memory runtime. `src/microcosm_core/organs/sleeper_memory_poisoning_quarantine_replay.py` loads six positive input families through `_build_result`: projection protocol, memory policy, session chain, quarantine events, retrieval replays, rollback/cold-rerun rows, and the source-module manifest. When `run` is used on the first-wave fixture it also loads the expected negative fixtures; when `run_quarantine_bundle` is used on the exported bundle it validates the public bundle without treating that bundle as negative-case authority.\n\nThe first gate is provenance. `validate_memory_write_proposals` accepts a memory write only when it carries the required source bundle ref, provenance ref, trust tier, classifier labels, audit ref, quarantine verdict, and redacted body posture. An untrusted source context with the sleeper-poisoning classifier cannot silently become trusted memory. Missing provenance, private memory body export, raw transcript export, live user-memory claims, and trusted promotion from untrusted context become typed findings instead of admissible memory authority.\n\nThe second gate is delayed influence. `validate_retrieval_replays` checks that later retrieval of the quarantined memory is blocked before any action can use it. The row must carry a retrieval ref, influence grade, action gate, cold replay result record ref, public evidence refs, and a quarantine audit ref coupling back to the write proposal it gates. This is the anti-final-answer check: the runtime rejects a memory-security story that grades only the final answer while omitting retrieval, influence, or rerun evidence.\n\nThe third gate is rollback. `validate_rollback_rerun` requires a rollback result record ref, deletion audit ref, rerun result record ref, and `memory_absent_after_rerun=true`. Rollback language is therefore admitted only when deletion and cold rerun are both present. Tests mutate these fields to show that nonempty but bogus rollback refs, missing result record refs, and absence failures block rather than becoming evidence.\n\nThe fourth gate is source-open body handling. `validate_source_module_manifest` and `_source_open_body_import_summary` verify seven copied public source bodies, their declared material classes, their digest fields, and their metadata-only result record posture. `_write_receipts` and `result_card` then expose public ids, counts, refs, digests, verdicts, negative-case status, and scope limits while omitting retrieval rows, rollback rows, and copied source bodies from command cards.\n\nThe proof consumer is therefore a pair of bounded runs plus focused tests: `run` proves the first-wave fixture with expected negative cases; `run_quarantine_bundle` proves the exported public bundle; and `tests/test_sleeper_memory_poisoning_quarantine_replay.py` verifies mutated positive rows, stale baked labels, retrieval/quarantine coupling, rollback result record shape, source-body digest checks, public-relative redaction, and card payload omission.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[37:paper_module.sleeper_memory_poisoning_quarantine_replay]` is the JSON authority row. A diagram view and an atlas card are generated for this module.\n- Mechanism route: `core/mechanism_sources.json::mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay` binds the code locus, input refs, result record refs, validator commands, focused regression, and guardrails.\n- Runtime route: `src/microcosm_core/organs/sleeper_memory_poisoning_quarantine_replay.py` owns `run`, `run_quarantine_bundle`, `_build_result`, `_write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, and the metadata-only source-module import checks.\n- Exported-bundle route: `examples/sleeper_memory_poisoning_quarantine_replay/exported_sleeper_memory_poisoning_bundle` contains `bundle_manifest.json`, `projection_protocol.json`, `memory_policy.json`, `session_chain.json`, `quarantine_events.json`, `retrieval_replays.json`, `rollback_rerun.json`, and `source_module_manifest.json`.\n- Source-module route: `source_module_manifest.json` records seven copied public source bodies, including the growth result record, memory-plane paper modules, operator-memory tests, agent execution trace runtime, strict JSON helper, and agent execution trace standard; result records keep source bodies out with `body_in_receipt: false`.\n- Focused-test route: `tests/test_sleeper_memory_poisoning_quarantine_replay.py` verifies negative cases, public-relative redacted result records, exported-bundle runtime shape, digest mismatch rejection, exact copied source bodies, and card result record reuse.\n\n###### Prior Art Grounding\n\nThis component combines two prior-art lines: sleeper/deceptive trigger behavior and long-term-memory/RAG poisoning. The sleeper-trigger lineage is Anthropic's [Sleeper Agents](https://arxiv.org/abs/2401.05566). The memory-poisoning lineage includes [AgentPoison](https://arxiv.org/abs/2407.12784), [MemoryGraft](https://arxiv.org/abs/2512.16962), and [Hidden in Memory](https://arxiv.org/abs/2605.15338), which all treat retrieved or persistent agent memory as an attack surface rather than a neutral cache.\n\nMicrocosm does not claim to secure live memory systems. It borrows the control shape: memory writes need provenance, untrusted source context cannot silently become authority, later retrieval must pass an influence gate, and deletion or rollback needs an audit ref plus cold rerun evidence.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.sleeper_memory_poisoning_quarantine_replay run-quarantine-bundle --input examples/sleeper_memory_poisoning_quarantine_replay/exported_sleeper_memory_poisoning_bundle --out /tmp/sleeper_memory_poisoning_bundle_receipt --card > /tmp/sleeper_memory_poisoning_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && ../repo-pytest tests/test_sleeper_memory_poisoning_quarantine_replay.py\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe result record path proves synthetic memory-poisoning quarantine replay over public metadata refs, not live memory safety, provider behavior, or benchmark security.\n\n###### Scope boundary\n\n###### Scope boundary\n\nThis module does not run live memory, claim memory product quality, import live user memory, export private memory bodies or raw transcripts, promote untrusted context into trusted memory, use external model services, change source files, claim benchmark security, publish results, or include launch operations.\n\n###### Scope limit\n\nThis module may claim synthetic sleeper-memory poisoning quarantine replay over public metadata refs: source bundle refs, provenance refs, quarantine verdicts, classifier labels, retrieval influence gates, rollback audit refs, cold rerun result records, expected negative cases, source-module digest checks, metadata-only result records, and validation result records.\n\nIt does not claim live memory product quality, live user-memory handling, trusted promotion from untrusted context, provider behavior, source-file changes, benchmark security, private memory export, public sharing, launch-scope decision, or whole-system correctness. The generated diagram and atlas card are navigation aids, not security benchmark results.\n\nMCP Tool Authority Replay Audits a recorded tool-use log to confirm each action was scoped, approved, undoable, and fenced. 3/5\n\nDoes When an AI agent uses outside tools (look something up, change a ticket, read a result from an untrusted source), this checks a recorded log of that tool use to confirm each action was properly fenced: bound to a narrow permission, approved before it changed anything, given a way to undo it, and kept from letting untrusted tool output boss the agent around. It runs on a small built-in make-believe example that carries only labels and references (no real accounts, secrets, or tool contents), so the safety checks an agent's tool use is supposed to pass are inspectable without anything touching a live account.\n\nScope limit It only checks that the tool-authority evidence in a recorded bundle (scopes, approvals, rollbacks, instruction/data splits, cold replays, redaction, and the expected abuse-case failures) is present and internally consistent. It does not run tools or authorize live MCP/account access, account secret or payload export, treating tool output as instruction, source-file changes, benchmark safety scores, or launch, and it makes no claim that the underlying tool-use policy is domain-correct.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.mcp_tool_authority_replay run --input fixtures/first_wave/mcp_tool_authority_replay/input --out receipts/first_wave/mcp_tool_authority_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Agent Sandbox Policy Escape Replay](docs/components.html#component-agent_sandbox_policy_escape_replay), [Sleeper Memory Poisoning Quarantine Replay](docs/components.html#component-sleeper_memory_poisoning_quarantine_replay)\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mcp_tool_authority_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module MCP Tool Authority Replay\n\nExplains component [MCP Tool Authority Replay](docs/components.html#component-mcp_tool_authority_replay) mechanism [validates public mcp tool authority replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-mcp-tool-authority-replay-validates-public-mcp-tool-authority-replay) Governed by principles [Possession is not permission](docs/doctrine.html#dcard-p-4) [Bind authority to transaction scope](docs/doctrine.html#dcard-p-16) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Authority by derivation, not possession](docs/doctrine.html#dcard-ax-3) Depends on paper module [Source Projection Import Protocol](docs/paper-modules.html#paper-module-macro-projection-import-protocol)\n\nThis module is the public Microcosm projection of a tool-authority claim contract. It is a synthetic MCP-like replay fixture, not a live MCP account test, external model access, account secret-handling certification, benchmark security result, or launch claim.\n\nThe fixture models three public tools: a readonly docs lookup, a write-capable ticket update, and an untrusted result source. The claim is admitted only when tool manifest scope refs, call argument hashes, approval token refs, side-effect ledger refs, rollback result records, untrusted-output instruction/data splits, cold replay result records, negative cases, and scope limits line up.\n\n###### Purpose\n\nWhen an agent uses tools through a protocol like MCP, the sentence \"the agent used the tool safely\" is cheap to write and hard to back. This component answers one question: given a recorded tool-use trace, does the evidence actually support the authority the trace claims, or is the safety language unearned? It exists so that tool-authority claims have to be replayed against metadata before prose is allowed to call them safe.\n\nThe approach is to treat a tool call as a small transaction that must show its working. Each call cites a narrow capability scope, an argument hash, and, if it writes, an approval token, a side-effect ledger entry, and a rollback result record. Those references are not taken on trust: the side-effect ledger and the cold replay rows are cross-checked against the accepted call rows by call id, so a rollback result record that no call refers to, or a write that skips approval, is caught rather than waved through. The point is that a reference string is not authority until something downstream resolves it.\n\nTwo failure modes are worth naming because they are specific to tool-using agents. The first is the confused deputy: a call that asks for a scope wider than its task needs (`*`, `account_full_access`) is rejected before it runs, so a tool cannot quietly borrow more authority than it was granted. The second is tool-output-as-instruction, the prompt-injection shape where text returned by an untrusted tool is obeyed as a command. Here untrusted output must stay data and cite an instruction/data split; a row that lets output become instruction is one of the eight negative cases the fixture is built to catch.\n\nThis is deliberately a synthetic replay, not a live test. The component never opens an MCP account, calls a provider, or handles a account secret. It reads only public metadata and digests, and it keeps every payload, result body, and account secret out of the result records it writes. What it offers is narrow and honest: a way to check that a tool-authority story is internally consistent and metadata-only, not a certificate that any real tool integration is secure.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"MCP authority runtime\"] fixture[\"first-wave fixture\"] bundle[\"exported authority bundle\"] manifest[\"tool manifest\"] calls[\"scoped tool calls\"] results[\"tool result rows\"] side_effects[\"side-effect ledger\"] replay[\"cold replay rows\"] trace[\"public trace spans\"] source_modules[\"source-module body floor\"] result records[\"metadata-only result records\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle bundle --> manifest manifest --> calls calls --> results calls --> side_effects side_effects --> replay results --> trace replay --> trace source_modules --> trace trace --> result records result records --> ceiling\n```\n\nThe module's shape is a public tool-authority replay, not a live MCP security claim.\n\n###### Technical Mechanism\n\nThe replay is a fail-closed authority lattice over a synthetic MCP-like tool story. `_build_result` loads the fixture or exported bundle, runs `load_forbidden_classes` and `scan_paths` over input JSON and copied source modules, then validates each contract plane separately: projection protocol, tool policy, tool manifest, tool calls, tool results, side-effect ledger, cold replay rows, public trace spans, and source-module manifest rows. The final status is `pass` only when every sub-validator passes, no expected negative case is missing, the secret scan has zero blocking hits, and the source-module floor is either present when required or explicitly not required for the first-wave fixture.\n\nTool authority is checked before prose can turn it into evidence. Manifest rows define the declared tool ids and allowed tool classes. `validate_tool_calls` then rejects undeclared tool ids, overbroad scopes, missing argument hashes, hidden account secret export, live account access, unapproved side effects, tool-output-as-instruction, final-answer-only grading, and unredacted payload export. Write-capable calls must carry approval token refs, side-effect ledger refs, and rollback result record refs; untrusted-result calls must keep instruction and data boundaries explicit. `validate_side_effect_ledger` and `validate_cold_replay` make those refs observable instead of leaving them as decorative strings.\n\nThe exported-bundle path adds a body-floor check without moving bodies into result records. `_source_module_manifest_result` streams digest verification over each copied source source module, checks required anchors, requires `body_in_receipt: false`, and reports a metadata-only source-open import summary. `build_public_mcp_tool_authority_trace` contributes three public trace spans for the tool calls; `_body_import_verification` binds that public refactor back to the source source and Microcosm target digests. `_write_receipts` emits the result, board, validation result record, and sign-off result record for fixture runs, and `result_card` deliberately exposes counts, status bits, digest freshness, and omission result records rather than tool rows or source bodies.\n\nThe mechanism is intentionally narrower than a tool-use security benchmark. It accepts only public metadata and digest evidence, and it treats every generated projection as a result record over source rows rather than as source authority.\n\n###### Public Mechanics\n- Every tool call must bind to a narrow capability scope ref before admission.\n- Write-capable calls require approval token refs, side-effect ledger refs, and rollback result record refs.\n- Untrusted tool output is data, not instruction, and must cite an instruction/data split ref.\n- Call arguments, tool outputs, account refs, and result bodies stay redacted or metadata-only.\n- Overbroad scopes, hidden account secret export, tool-output-as-instruction, unapproved side effects, live account access, final-answer-only grading, missing rollback result records, and unredacted tool payloads are expected falsification fixtures.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[39:paper_module.mcp_tool_authority_replay]` is the JSON authority row; a diagram view and an atlas card are generated for this module from the source record.\n- Mechanism route: `core/mechanism_sources.json::mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay` binds the code locus, fixture refs, exported bundle refs, result record refs, validator commands, focused regression, and guardrails.\n- Runtime route: `src/microcosm_core/organs/mcp_tool_authority_replay.py` owns `run`, `run_tool_authority_bundle`, `_build_result`, `_write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- Exported-bundle route: `examples/mcp_tool_authority_replay/exported_mcp_tool_authority_bundle` contains `bundle_manifest.json`, `projection_protocol.json`, `tool_policy.json`, `tool_manifest.json`, `tool_calls.json`, `tool_results.json`, `side_effect_ledger.json`, `cold_replay.json`, and `source_module_manifest.json`.\n- Source-module route: `source_module_manifest.json` records seven copied public source body rows, while the exported source-open body summary exposes at least six body materials. The floor includes high-novelty and extracted-pattern evidence, agent execution trace runtime and standard bodies, route-readiness standard material, mission-transaction preflight internal control material, and the strict JSON helper. Result records carry refs, digests, counts, and status only.\n- Focused-test route: `tests/test_mcp_tool_authority_replay.py` verifies negative cases, public-relative redacted result records, exported-bundle runtime shape, source-module digest failures, exact copied source bodies, card result record reuse, and public trace span construction.\n\n###### Named Proof Consumers\n- First-wave fixture consumer: PYTHONPATH=src ../repo-python -m microcosm_core.components.mcp_tool_authority_replay run --input fixtures/first_wave/mcp_tool_authority_replay/input --out /tmp/microcosm-mcp-tool-authority-replay/fixture --sign-off-out /tmp/microcosm-mcp-tool-authority-replay/sign-off.json --card consumes the fixture route, expected negative cases, secret scan, public trace construction, scope limit, metadata-only result record writer, and command-card omission contract.\n- Exported-bundle consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.organs.mcp_tool_authority_replay run-tool-authority-bundle --input examples/mcp_tool_authority_replay/exported_mcp_tool_authority_bundle --out /tmp/microcosm-mcp-tool-authority-replay/bundle --card` consumes the public bundle, source-module manifest, copied body-floor digest checks, public trace spans, metadata-only exported-bundle result record, and fresh card reuse path.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_mcp_tool_authority_replay.py -q` pins the negative-case matrix, undeclared-tool rejection, redacted/public result record paths, source-module digest mismatch failures, exact copied source bodies, public trace span coverage, and card omission behavior.\n- This check excludes hand-editing generated projections; it is a read-only result record for this Markdown slice.\n\n###### Prior Art Grounding\n\nThis component is grounded in capability security, least privilege, and current MCP authorization guidance. The classic security lineage is Saltzer and Schroeder's [Protection of Information in Computer Systems](https://www.cs.virginia.edu/~evans/cs551/saltzer/) and Hardy's [Confused Deputy](https://web.cs.wpi.edu/~cs557/f14/papers/confused_deputy-hardy.pdf): authority should be narrow, mediated, and bound to the object/action being requested. The MCP-specific lineage is the official [MCP authorization](https://modelcontextprotocol.io/specification/2025-06-18/basic/authorization) and [security best practices](https://modelcontextprotocol.io/specification/2025-06-18/basic/security_best_practices) guidance, especially least-privilege scopes and token audience boundaries.\n\nMicrocosm does not claim live MCP security or account certification. It borrows the prior-art authority shape and makes it replayable: every public tool story must expose capability scope refs, approval refs, side-effect refs, rollback refs, instruction/data split refs, and scope boundaries before write authority is treated as evidence.\n\n###### Validation Result record Path\n\nRun the first-wave fixture into disposable result records from the Microcosm root:\n\nRun the exported bundle through the same component:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.mcp_tool_authority_replay run-tool-authority-bundle --input examples/mcp_tool_authority_replay/exported_mcp_tool_authority_bundle --out /tmp/microcosm_mcp_tool_authority_bundle\n```\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_mcp_tool_authority_replay.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim only that a synthetic public MCP-like replay preserved tool-authority boundaries over metadata rows: capability scopes, argument hashes, approval refs, side-effect refs, rollback refs, instruction/data split refs, cold replay refs, source-module digests, negative cases, and metadata-only validation result records.\n\nIt must not claim live MCP account safety, account secret-handling certification, live tool behavior, provider behavior, benchmark security, source-file changes, publishing-scope decision, complete security, or launch-scope decision.\n\n###### Scope boundary\n\nThis module does not access live MCP accounts, export account secrets or model-output data, obey tool output as instruction, run live tools, change source files, claim benchmark safety, publish results, or include launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe source record declares `concept.agent_reliability_and_safety_validator_bundle`, principles `P-4` and `P-16`, and axiom `AX-3` as the governing lattice. The generated component row repeats the paper and mechanism links and adds an component-level `P-18` relation; that component relation is useful context but does not expand the paper-module bundle's declared authority.\n\n`P-4` and `AX-3` are the local authority rule: a tool handle, account secret-shaped string, role name, or trusted-session label is bounded evidence of authority. The runtime must derive authority from dereferenced manifest policy, capability scope refs, approval refs, side-effect refs, rollback refs, cold replay refs, and public trace spans. `P-16` supplies the transaction boundary: a write-capable tool call is admissible only when the call is scoped, the side-effect is ledgered, rollback evidence is present, and the result record says which scope limit still holds.\n\nThe mechanism row deliberately leaves sibling/upstream mechanism relations as residual pressure. That residual is part of the scope limit: this module can show a public replay lattice for synthetic MCP-like tool authority, but it does not infer neighbouring mechanisms from prose, certify live MCP security, or promote generated Mermaid, Atlas, site, or corpus projections into source authority.\n\n###### Source-Open Body Floor\n\nThe exported bundle carries copied source bodies under `source_modules/`, governed by `source_module_manifest.json`. The manifest records source refs, target refs, hashes, material classes, required anchors, and result record body exclusions for:\n- `state/microcosm_portfolio/reconstruction/high_novelty_substrate_gap_scout_v1.json`\n- `state/microcosm_portfolio/extracted_patterns_ledger.jsonl`\n- `system/lib/agent_execution_trace.py`\n- `codex/standards/std_agent_execution_trace.json`\n- `codex/standards/std_extracted_pattern_route_readiness.json`\n- `tools/meta/control/mission_transaction_preflight.py`\n- `system/lib/strict_json.py`\n\nThe floor is source-open body evidence, not live-account or provider authority. Result records and command cards expose refs, digest status, counts, and verdicts only; they do not embed copied source bodies or private/live payload material.\n\nBelief State Process Reward Replay Checks that each step reward in a recorded run cites a declared verifier-feedback row, not a trick. 3/5\n\nDoes Takes a recorded, synthetic bundle of agent steps on three partially-observable toy tasks (a terminal investigation, a mock purchase, a small planner) and checks that every \"the agent did the right step\" reward is actually backed by a checkable verifier or observed feedback reference, not by hidden reasoning, formatting tricks, a smuggled answer key, or a final-answer-only score. It does not run or watch a live agent; it validates pre-recorded files. The resulting result record files show, per step, the belief summary, the reward, and whether the reward-hacking and replay checks passed, so it is inspectable why each reward was or was not allowed.\n\nScope limit It only checks that the projection's accounting lines up under its own schema rules over recorded synthetic fixtures; it excludes hidden-reasoning export, RL training, hidden gold or neural-judge-only labels, benchmark-performance claims, external model access, source-file changes, or launch, and proves nothing about real-world reward, live agent behavior, or domain-level conclusions.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.belief_state_process_reward_replay run --input fixtures/first_wave/belief_state_process_reward_replay/input --out .microcosm/belief_state_process_reward_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/belief_state_process_reward_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Belief-State Process Reward Replay\n\nExplains component [Belief State Process Reward Replay](docs/components.html#component-belief_state_process_reward_replay) mechanism [validates public belief state process reward replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-belief-state-process-reward-replay-validates-public-belief-state-process-reward-replay) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper module [Agent Route Observability Runtime](docs/paper-modules.html#paper-module-agent-route-observability-runtime)\n\nThis module is the public Microcosm projection of a belief-state process reward claim contract. It is backed by the public agent-execution trace refactor lane plus copied source source bodies. It is not a hidden-reasoning export, live RL run, neural-judge-only label set, hidden-gold benchmark, external model access, source-file changes, benchmark-score claim, or launch claim.\n\nThe public bundle models three partially observable tasks: terminal investigation, mock purchase, and formal-planning toy. A process-reward claim is admitted only when public observation digests, typed belief-state summaries, predicted next evidence, verifier or observed feedback refs, belief-discrepancy scores, dense process rewards, outcome rewards, reward-hacking trap results, trajectory groups, cold replay result records, negative cases, scope limits, and a source-faithful public trace span set line up.\n\n###### Purpose\n\nProcess-reward language is easy to assert and hard to verify. A row can claim that a step earned a reward \"for good reasoning\" while the underlying evidence is a hidden gold label, a neural-judge guess, or formatting that gamed the scorer. This component exists to answer one narrow question: does a public process-reward claim actually reconstruct from lower-level public evidence, or is it just a label asserting its own correctness?\n\nThe interesting part is the recomputation. The validator does not trust any single fixture file. If any of those refs is missing or points somewhere inconsistent, the claim is blocked with a specific reason code rather than passed. A reward cannot point at a belief that points at a different episode, or cite feedback that belongs to another trajectory, and still count.\n\nThat cross-referential check is what separates this from a shape linter. The failure mode it guards against is a process-reward claim that looks correct field by field but does not survive being recomputed end to end. Two further design choices keep the result honest: outcome rewards are carried beside process rewards so a final answer cannot be re-labelled as step-level evidence, and every belief summary, feedback ref, and reward event stays metadata-only, so the validator proves the accounting structure without ever reading hidden reasoning.\n\n###### Shape\n\nThe local governing standard is `standards/std_microcosm_belief_state_process_reward_replay.json`, whose authority boundary is synthetic belief-state process-reward replay only, not live training, benchmark, provider, source-file changes, public sharing, or launch-scope decision.\n\nSource refs\n\nLocal standard `std_microcosm_belief_state_process_reward_replay.json` Runtime locus `belief_state_process_reward_replay.py` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record paper_module_capsules.json[36]\"] standard[\"Local standard std_microcosm_belief_state_process_reward_replay.json\"] component[\"Runtime locus belief_state_process_reward_replay.py\"] fixtureMode[\"run (fixture mode) 8 positive + 7 negative inputs\"] bundleMode[\"run_reward_bundle (bundle mode) copied-body manifest floor required\"] floors[\"Per-file floors projection protocol, reward policy, episodes, belief states, feedback, rewards, trajectory groups, cold replay\"] recompute[\"Semantic recompute rebuild belief -> feedback -> process reward -> trajectory -> outcome reward -> cold replay\"] negatives[\"Negative cases 7 planted traps must be observed\"] scan[\"Secret-exclusion scan plus metadata-only public trace span set\"] gate{\"All floors pass, chain recomputes, every trap observed, no secret hit?\"} pass[\"status: pass\"] blocked[\"status: blocked with reason codes\"] result records[\"Result records + compact card refs, hashes, counts, verdicts; body_in_receipt false\"] ceiling[\"Scope limit source-faithful replay only\"] bundle --> component standard --> component component --> fixtureMode component --> bundleMode fixtureMode --> floors bundleMode --> floors floors --> recompute recompute --> negatives negatives --> scan scan --> gate gate -->|yes| pass gate -->|no| blocked pass --> result records blocked --> result records result records --> ceiling\n```\n\nThe generated instance reports eight relationship edges and zero unpopulated selective relations: it explains the `belief_state_process_reward_replay` component and the validating mechanism, is governed by `P-1`, `P-2`, and `concept.agent_reliability_and_safety_validator_bundle`, abides by `AX-1`, depends on `paper_module.agent_route_observability_runtime`, and cites `src/microcosm_core/organs/belief_state_process_reward_replay.py` as the resolved code locus. The component atlas adds the human/agent gloss and result record set; it classifies the evidence as `algorithmic_projection` and restates that the validator operates on recorded synthetic fixtures rather than live agent behavior.\n\nThe fixture manifest `fixtures/first_wave/belief_state_process_reward_replay/fixture_manifest.json` names eight positive input files and seven planted negative cases: hidden-chain-of-thought export, neural-judge-only labels, hidden gold labels, reward-by-formatting, verifier bypass, benchmark-performance claims, and final-answer-only scoring. The exported bundle manifest carries the source-open body floor: seven copied source modules under `source_modules/`, checked by digest and anchor refs, with `body_text_exported_in_receipts: false`. The focused test file `tests/test_belief_state_process_reward_replay.py` covers the fixture validator, exported bundle validator, public-root copy, negative cases, exact source body imports, and route/result record shape.\n\nThe honest ceiling is therefore narrow: this module can support public, metadata-only belief-state process-reward replay over synthetic tasks with verifier-backed process feedback, separated outcome rewards, cold replay, and negative-case coverage. It cannot support hidden reasoning export, live RL, reward-model quality, hidden-gold benchmark claims, provider behavior, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Reader Evidence Routing\n\nRead this page from the structured bindings outward. The bindings name the component, mechanism, concept, dependency module, runtime code locus, principle and axiom refs. The fixture result records, bundle result records, and focused test then show the metadata-only replay behavior. This page explains that chain for readers.\n\n###### Technical Mechanism\n\nThe runtime validator is a two-mode replay checker. In fixture mode, `run` loads eight positive fixture files plus the seven planted negative inputs named by `EXPECTED_NEGATIVE_CASES`; `_build_result` then validates the projection protocol, reward policy, task episodes, belief states, verifier feedback, reward events, trajectory groups, cold replay, negative cases, secret-exclusion scan, and public trace projection before `_write_receipts` writes the result, board, validation, and sign-off result records. A pass requires all required positive floors to pass, every expected negative case to be observed, zero secret-scan blocking hits, public trace status `pass`, and no positive finding outside the expected falsification cases.\n\nIn exported-bundle mode, `run_reward_bundle` validates the public bundle without negative inputs and makes the copied-body floor mandatory. The `source_module_manifest.json` path must declare seven copied source body modules, `body_in_receipt: false`, `body_text_in_receipt: false`, public material classes, exact source/target digests, existing copied targets, and all declared anchors. Digest mismatch, missing manifest, wrong body class, result record-body leakage, count mismatch, missing target, and missing anchor cases block the bundle instead of degrading silently.\n\nBetween the per-file floors and the result records sits `validate_semantic_recompute`, which is where most of the real work happens. It checks that the cited feedback belongs to the same episode, that the process reward references the same belief, episode, trajectory, feedback ref, and belief-discrepancy value, that the trajectory actually lists that episode and that reward, that the trajectory's outcome reward is a real outcome event for the same episode, and that the cold replay both exists and passes. Any inconsistency appends a precise reason code such as `feedback_episode_mismatch`, `belief_discrepancy_mismatch`, or `trajectory_process_reward_missing`, and a single blocked row is enough to block the whole result. This is the check that a label-only fixture cannot fake: the references have to recompute into one coherent chain, not merely be present.\n\nThe validator links process-reward claims to public belief summaries rather than private reasoning. `build_public_belief_state_process_reward_trace` emits six metadata-only trace spans from the exported bundle, and the card path reports only compact counts, status, freshness digest, source-body floor metadata, and result record refs. `CARD_OMITTED_FULL_PAYLOAD_KEYS` keeps findings, scans, trace bodies, row payloads, source imports, scope limit, and scope boundary text out of the command card so public surfaces carry proof handles rather than copied private or source bodies.\n\n###### Named Proof Consumers\n- `microcosm_core.organs.belief_state_process_reward_replay.run` is the first-wave fixture consumer. It writes result, board, validation, and sign-off result records for the synthetic episodes and negative-case floor.\n- `microcosm_core.organs.belief_state_process_reward_replay.run_reward_bundle` is the exported bundle consumer. It validates copied source bodies, public trace spans, digest/anchor contracts, and metadata-only result record behavior.\n- `microcosm_core.organs.belief_state_process_reward_replay.result_card` is the compact public card consumer. It reports counts and validation state while omitting the heavy/private payload classes named by `CARD_OMITTED_FULL_PAYLOAD_KEYS`.\n- `tests/test_belief_state_process_reward_replay.py` is the focused regression consumer. It asserts the three episode groups, six belief states, six process rewards, three outcome rewards, three cold replays, seven expected negative cases, exact source-body imports, digest mismatch blockers, manifest-boundary blockers, public-relative redacted result records, fresh-card reuse, and metadata-only public trace projection.\n- `microcosm_core.macro_tools.agent_execution_trace.build_public_belief_state_process_reward_trace` is the trace-projection consumer. It converts the exported bundle into six public spans with belief-state, feedback, process-reward, outcome-reward, and cold-replay coverage while preserving `body_in_receipt: false`.\n\n###### Public Mechanics\n- Belief-state JSON is a public summary, not hidden chain-of-thought.\n- Process rewards must cite deterministic verifier or observed environment feedback refs; neural-judge-only labels are rejected.\n- Outcome rewards are carried beside process rewards so final answers cannot masquerade as process evidence.\n- Reward-hacking traps and cold replay result records must pass for each trajectory group.\n- `microcosm_core.macro_tools.agent_execution_trace:: build_public_belief_state_process_reward_trace` turns the public bundle into ordered trace spans that preserve belief, verifier, process-reward, outcome-reward, and cold-replay refs while keeping bodies out of result records.\n- `examples/belief_state_process_reward_replay/ exported_belief_state_process_reward_bundle/source_module_manifest.json` verifies exact copied source bodies for the extracted-pattern ledger, high-novelty reconstruction result record, canonical component model, agent-execution trace runtime, trace standard, and route-readiness checker. Those bodies live in `source_modules/`; result records carry refs, hashes, counts, and verdicts only.\n- Hidden reasoning export, hidden gold labels, reward-by-formatting, verifier bypass, benchmark-performance claims, and final-answer-only scoring are expected falsification fixtures.\n\n###### Prior Art Grounding\n\nThis component is grounded in three older ideas: belief-state tracking under partial observability, process supervision, and reward-hacking controls. The belief lineage comes from POMDP work such as Kaelbling, Littman, and Cassandra's [Planning and Acting in Partially Observable Stochastic Domains](https://people.smp.uq.edu.au/YoniNazarathy/Control4406_2014/resources/KaelblingLittmanCassandra1998.pdf). The process-reward lineage follows OpenAI's [Let's Verify Step by Step](https://arxiv.org/abs/2305.20050), where step-level feedback is separated from outcome-only supervision. The reward-hacking lineage comes from [Concrete Problems in AI Safety](https://openai.com/index/concrete-ai-safety-problems/) and related work on specification gaming.\n\nMicrocosm does not train a reward model or expose hidden reasoning. It borrows the accounting form: public belief summaries, verifier-backed process feedback, outcome rewards kept separate from process rewards, reward-hacking traps, and cold replay result records before process-reward language is admitted.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.belief_state_process_reward_replay run-reward-bundle --input examples/belief_state_process_reward_replay/exported_belief_state_process_reward_bundle --out /tmp/belief_state_process_reward_bundle_receipt --card > /tmp/belief_state_process_reward_bundle_card.json\n```\n\n###### Scope boundary\n\n###### Limitations\n\nThe replay is intentionally small and synthetic. It covers three partially observable task families, six accepted belief summaries, six process rewards, three outcome rewards, three trajectory groups, three cold replays, seven negative cases in fixture mode, and seven copied source modules in exported-bundle mode. Those counts are proof boundaries, not scale claims. They show that the public validator can separate belief summaries, verifier-backed process feedback, outcome rewards, reward-hacking traps, and cold replay under declared fixtures.\n\nThe mechanism does not estimate reward-model calibration, generalize to unseen tasks, compare agent policies, certify live training behavior, or score a benchmark. `build_public_belief_state_process_reward_trace` emits metadata-only trace spans, so it can prove trace structure and privacy boundaries, not hidden reasoning fidelity. The copied-source manifest proves exact declared public source bodies and anchors for this bundle; it excludes private source root export, external model access, source-file changes, public sharing, or launch.\n\n###### Scope limit\n\nSource-faithful refactored fixtures and copied source bodies only; not fixture-echo product evidence, hidden reasoning export, live RL training, neural-judge sufficiency, hidden-gold benchmarking, provider behavior, benchmark claims, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Scope limit\n\nThis paper module can claim a metadata-only belief-state process-reward replay over synthetic tasks, with public belief summaries, verifier-backed process feedback, separated outcome rewards, reward-hacking traps, and cold replay result records.\n\nIt cannot claim hidden reasoning export, live RL training, reward-model quality, hidden-gold benchmark claims, provider behavior, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness. Any higher claim must land first in `core/paper_module_capsules.json` and the generated paper-module projection.\n\n###### Scope boundary\n\nThis module does not export hidden reasoning, run RL or train a model, use hidden gold labels, rely on neural-judge-only labels, claim benchmark performance, use external model services, change source files, publish results, or include launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing lattice relation is that belief-state process-reward language is admissible only after the runtime recomputes the claim from lower-level public evidence. The generated JSON instance resolves eight edges and leaves no selective relation open: the bundle explains the `belief_state_process_reward_replay` component and `mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay`, is governed by `concept.agent_reliability_and_safety_validator_bundle`, `P-1`, and `P-2`, abides by `AX-1`, depends on `paper_module.agent_route_observability_runtime`, and cites `src/microcosm_core/organs/belief_state_process_reward_replay.py` as the code locus.\n\nThat relation matters because the module is not trying to make reward quality plausible from a label. `P-1` requires recomputation rather than echoing fixture verdicts, so `_build_result` rechecks projection protocol, reward policy, episodes, belief rows, feedback rows, reward rows, trajectory groups, cold replay, expected negative cases, secret-exclusion scans, public trace shape, and copied source-module manifests. `P-2` and `AX-1` then lower the paper claim to what those checks derive: a local replay certificate over declared public inputs. The focused proof consumer is `tests/test_belief_state_process_reward_replay.py`, which exercises both fixture and exported-bundle modes, mutates real positive feedback linkage, rejects digest and manifest boundary violations, verifies exact source-body imports, checks freshness over live source authority, and confirms the command card omits full payload keys.\n\nAgent Sandbox Policy Escape Replay Maps sandboxed agent actions to show each was approved or blocked before running, then rolled back. 3/5\n\nDoes This takes a synthetic record of an agent attempting risky actions inside a sandbox and lays out, step by step, what each action requested, whether a safety policy approved or blocked it before it would have run, what (if anything) changed afterward, and for the actions that did run, whether the change was rolled back and could be re-checked. The record shows exactly how each containment decision is captured: every blocked attempt is still logged as a traced step but is marked as never executed with no resulting change, all from local files with no real secrets, network, or live agent involved.\n\nScope limit It validates the projection / trace-refactor mechanics over a synthetic fixture only; it excludes live sandbox escape, secret or account secret handling, live network access, host filesystem mutation, executable payload export, raw environment export, external model access, security benchmark claims, source-file changes, or launch. A pass proves the projection boundary and trace-refactor mechanics for this contract, not real sandbox security, exploit resistance, or whole-system safety.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.cli agent-sandbox-policy-escape-replay run-sandbox-bundle --input examples/agent_sandbox_policy_escape_replay/exported_sandbox_policy_escape_bundle --out receipts/runtime_shell/demo_project/organs/agent_sandbox_policy_escape_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Sleeper Memory Poisoning Quarantine Replay](docs/components.html#component-sleeper_memory_poisoning_quarantine_replay)\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_sandbox_policy_escape_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Agent Sandbox Policy-Escape Replay\n\nExplains component [Agent Sandbox Policy Escape Replay](docs/components.html#component-agent_sandbox_policy_escape_replay) mechanism [validates public sandbox policy trace](docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-sandbox-policy-escape-replay-validates-public-sandbox-policy-trace) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper modules [Computer-Use Action Trace Replay](docs/paper-modules.html#paper-module-computer-use-action-trace-replay) [MCP Tool Authority Replay](docs/paper-modules.html#paper-module-mcp-tool-authority-replay)\n\n`agent_sandbox_policy_escape_replay` is a validator-backed public refactor of the source `agent_execution_trace` system for sandbox/security claims. It asks a narrow question: can Microcosm compute metadata-only trace spans from action requests, pre-execution policy verdicts, side-effect diff result records, rollback result records, cold replay, falsification fixtures, and an explicit scope limit?\n\n###### Purpose\n\nAgent sandbox claims are easy to assert and hard to evidence. A system can say it blocks an untrusted action, or that a side effect was rolled back, without ever showing the record that would make the statement checkable. This component exists to hold one narrow claim to account: that for a fixed set of synthetic action requests, the policy decision was recorded before execution, blocked actions left no side effect, and permitted side effects each carry a diff and a rollback result record.\n\nThe interesting choice is that the validator does not trust the verdict it is handed. For each request it derives the expected verdict from the request's own shape, its action kind, requested capability, risk class, and source trust label, using a small fixed policy table (`_derived_sandbox_policy_verdict`). A secret read from untrusted tool output derives to `block`; a low-risk public fixture write derives to `allow`; a mock database update derives to `review`. Any action shape the table does not recognise fails closed to `block`. The recorded verdict row is then checked against that derivation. A declared `allow` that should have derived to `block` is a finding, not a pass. The same fail-closed semantics drive the side-effect check: a request whose shape requires a block must show no execution and a zero diff count regardless of what the verdict row claims.\n\nBecause every check runs over symbolic references, the page can report concrete numbers, six action requests, four derived blocks, six metadata-only trace spans, while staying honest about what those numbers are not. They demonstrate that the pre-execution accounting pattern is wired and replayable over public fixtures. They do not demonstrate containment in a real host, resistance to a live exploit, or network isolation. That gap is the point of the scope limit below, and it is the line this component is built to keep visible.\n\n###### Named Proof Consumers\n\nThe primary proof consumer is `tests/test_agent_sandbox_policy_escape_replay.py`. Its 17 tests exercise both runtime entry points (`run` and `run_sandbox_bundle`) and the public trace builder from `microcosm_core.macro_tools.agent_execution_trace`. The consumer does not accept declared labels at face value: it mutates policy verdicts, side-effect rows, cold replay labels, exported bundle rows, source-module digests, source/target manifest fields, body-boundary fields, and cached-card freshness to prove that the validator recomputes the sandbox-policy result from source rows.\n\nThe fixture proof path is `microcosm_core.organs.agent_sandbox_policy_escape_replay run`. Its success result record must include six action requests, six pre-execution verdicts, four derived blocked rows, one derived allow row, one derived review row, six side-effect result records, two rollback-verified rows, six cold replay passes, all expected negative cases, and a six-span public trace. The negative-case rows are not auxiliary examples; they are the admission boundary that rejects semantic policy drift, blocked-action execution, executable escape payload material, tool-output authority bypass, raw environment exposure, and broad security or benchmark overclaim.\n\nThe exported-bundle proof path is `microcosm_core.cli agent-sandbox-policy-escape-replay run-sandbox-bundle`. It has no fixture-only negative cases, so its proof surface shifts to bundle shape: the bundle id, source-module manifest, seven copied source bodies, digest equality, required anchors, metadata-only result records, public-relative paths, and public trace spans must all validate. The same test file also breaks the manifest in targeted ways to prove that missing manifests, invalid material classes, body-in-result record flags, count mismatches, missing target copies, and partial source or target digest drift block the result.\n\nThe corpus proof consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`. It proves only that this reader page remains aligned with the JSON bundle-backed paper-module corpus. It does not refresh generated Mermaid, Atlas, site, or verifier projections, and it does not raise the claim above public fixture and bundle replay evidence.\n\n###### Technical Mechanism\n\nThe mechanism is a validating transducer over public refs, not a sandbox. The runtime entry points `run` and `run_sandbox_bundle` load the fixture or exported bundle, then `_build_result` recomputes each claim from lower-level rows before any result record is accepted. The named proof consumer is `tests/test_agent_sandbox_policy_escape_replay.py`, with the corpus-level projection consumer `scripts/build_doctrine_projection.py --check-paper-module-corpus`.\n\nThe validator first establishes an input boundary. `_load_payloads` reads the projection protocol, sandbox policy, action requests, verdicts, side-effect result records, rollback result records, and cold replay rows with strict JSON parsing. `scan_paths` checks the same public files and copied source-module bodies against `core/private_state_forbidden_classes.json`, while `_source_module_manifest_result` verifies that the seven copied source bodies are present, digest-matched, by material class, and excluded from result record body fields.\n\nThe policy mechanism is then recomputed row by row. `validate_action_requests` admits only symbolic request metadata with redacted bodies and no live network target. `validate_policy_verdicts` joins each request to a pre-execution verdict and checks the verdict against the request's risk class instead of trusting the declared label. `validate_side_effect_receipts` enforces the mechanical consequence: block decisions must have no execution and no diff, while allow/review decisions must carry a non-empty public diff result record. `validate_rollback_receipts` requires rollback refs for side-effecting actions, and `validate_cold_replay` requires replay rows that reproduce verdict and side-effect state.\n\nThe trace layer converts accepted public rows into metadata-only `PublicTraceSpan` records through `build_public_sandbox_policy_trace`. Each span carries a request id, authority verdict ref, side-effect or rollback ref, outcome, digest, and `sandbox_policy_action` tool label. This is why the module can claim six public trace spans and outcome counts, but cannot claim live sandbox security: the trace proves replay consistency over refs, not containment in a real host environment.\n\nNegative cases define the refusal surface. The focused test suite mutates the fixture and exported bundle to verify semantic mismatch, blocked-action execution, source-module digest mismatch, source-module manifest boundary breakage, public-relative result record paths, and card reuse. These tests are the source-bound evidence that the validator fails closed for the named public contract.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] manifest[\"source module manifest\"] requests[\"six action requests\"] verdicts[\"six pre-execution verdicts\"] effects[\"six side-effect result records\"] rollbacks[\"two rollback result records\"] replay[\"six cold replay rows\"] trace[\"public agent-execution trace\"] negative[\"negative-case refusals\"] tests[\"focused proof consumer\"] result record[\"metadata-only validation result record\"] ceiling[\"scope limits\"] bundle --> markdown manifest --> result record requests --> verdicts verdicts --> effects effects --> rollbacks effects --> replay verdicts --> negative effects --> negative replay --> trace negative --> tests trace --> result record tests --> result record result record --> ceiling\n```\n\nThe module's shape is pre-execution containment accounting. Public action requests are normalized into symbolic refs, policy verdicts must exist before execution, blocked actions carry zero side effects, allowed or reviewed side effects need diff refs and rollback refs, cold replay must reproduce the public state, and the trace builder emits metadata-only spans over those refs without promoting the fixture into live sandbox-security authority.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[35]` is the bundle-backed authority row, and `paper_modules/agent_sandbox_policy_escape_replay.json` is the generated paper-module instance.\n- Bundle route: `examples/agent_sandbox_policy_escape_replay/exported_sandbox_policy_escape_bundle` carries `action_requests.json`, `policy_verdicts.json`, `side_effect_receipts.json`, `rollback_receipts.json`, `cold_replay.json`, `sandbox_policy.json`, `projection_protocol.json`, and `source_module_manifest.json`.\n- Action route: the six public request ids are `req_secret_read_attempt`, `req_network_exfil_attempt`, `req_destructive_delete_attempt`, `req_shell_obfuscation_attempt`, `req_safe_file_edit`, and `req_reviewed_mock_db_update`.\n- Verdict route: the six verdict rows are pre-execution policy decisions under `sandbox-policy-v1-public-synthetic`, with four `block`, one `allow`, and one `review` outcome.\n- Side-effect route: all six requests have side-effect result records; blocked rows use zero diffs, while the public fixture edit and reviewed mock database update carry diff refs plus rollback refs.\n- Manifest route: `source_module_manifest.json` records seven copied source bodies, `body_in_receipt: false`, `body_text_in_receipt: false`, and the boundary excluding keys, account secrets, account or browser material, model-output data, live network payloads, raw environments, executable escape payloads, and account secret-equivalent material.\n- Runtime route: `src/microcosm_core/organs/agent_sandbox_policy_escape_replay.py`, `src/microcosm_core/macro_tools/agent_execution_trace.py`, and `tests/test_agent_sandbox_policy_escape_replay.py` verify negative cases, public trace-span construction, exact source-module imports, manifest digest rejection, result record public-relativity, and card result record reuse.\n\n###### Contract\n- Input shape: `projection_protocol`, `sandbox_policy`, `action_requests`, `policy_verdicts`, `side_effect_receipts`, `rollback_receipts`, and `cold_replay`.\n- Positive evidence: six metadata-only action requests converted into public `agent_execution_trace` spans, six pre-execution policy verdicts, six side-effect result records, two verified rollback result records, and six cold replay rows.\n- Negative cases: real secret material, live network access, raw environment export, policy after execution, unlogged side effect, tool-output policy bypass, executable escape payload, and security benchmark claim.\n- Result record boundary: the validation result record proves the source-faithful trace refactor mechanics, negative-case coverage, secret-exclusion scan, and scope limit.\n- Scope limit: no live sandbox escape, live secret handling, live network access, host filesystem mutation, executable payload export, raw environment export, external model access, security benchmark claim, source-file changes, or launch-scope decision.\n\n###### Projection Protocol\n\nCopied: the public shape of the source agent-execution trace membrane and the idea that containment must be proven before a security claim is admitted.\n\nSource-faithfully refactored: `PublicTraceSpan` construction, sequence-ordered trace rows, authority verdict refs, side-effect and rollback refs, public summary counts, trace digests, local JSON validators, and result record generation.\n\nCleaned: real secrets, host paths, live network targets, raw environment data, executable payloads, provider data, and account state.\n\nOmitted: live exploit material, hosted sandbox details, real account secrets, raw tool-output bodies, real filesystem paths, raw environment variables, and security benchmark claims claims.\n\nPublic runtime surface: a metadata-only sandbox policy bundle plus generated result records under `receipts/first_wave/agent_sandbox_policy_escape_replay/` and `receipts/runtime_shell/demo_project/organs/agent_sandbox_policy_escape_replay/`.\n\nSource-open body floor: the exported bundle carries `source_module_manifest.json` plus seven exact copied source bodies: the extracted-pattern ledger, the high novelty reconstruction result record, the canonical component model, the source `system/lib/agent_execution_trace.py` runtime, `std_agent_execution_trace`, the extracted-pattern route-readiness checker, and the strict JSON helper required by the refreshed trace body. Result records and cards cite the manifest, hashes, material classes, and counts only; full body text stays in the bundle source module files.\n\n###### Prior Art Grounding\n\nThis component is grounded in least-privilege sandboxing and agent-security evaluation work, not in a new exploit technique. The security-control lineage is Saltzer and Schroeder's [least-privilege / complete-mediation principles](https://www.cs.virginia.edu/~evans/cs551/saltzer/) and capability-oriented confused-deputy thinking. The agent-evaluation lineage is closer to sandboxed tool-use benchmarks such as [AgentDojo](https://arxiv.org/abs/2406.13352) and misuse/harm evaluations such as [AgentHarm](https://arxiv.org/abs/2410.09024), where an agent's requested actions, tool calls, and policy outcomes are evaluated under controlled conditions.\n\nMicrocosm does not claim real sandbox security, exploit resistance, or live environment isolation. It borrows the pattern that containment must be checked before action, side effects must be logged, rollback needs its own result record, and harmful payloads must stay out of the public surface.\n\nValidation proves the projection boundary and public trace-refactor mechanics for this contract; it does not establish real sandbox security, live model behavior, benchmark claims, exploit resistance, or whole-system safety.\n\n###### Validation Result records\n\nThe focused proof consumer is `tests/test_agent_sandbox_policy_escape_replay.py`. A passing result record has to show that the fixture validator and exported-bundle validator both recompute the public sandbox-policy trace from action-request refs, pre-execution verdict refs, side-effect result record refs, rollback refs, cold replay rows, and the source-module manifest instead of trusting declared labels.\n\n```text\nPYTHONDONTWRITEBYTECODE=1 ./repo-pytest \\\n  tests/test_agent_sandbox_policy_escape_replay.py \\\n  -p no:cacheprovider\n./repo-python scripts/build_doctrine_projection.py \\\n  --check-paper-module-corpus\n```\n\nFor the focused test, the result record boundary is the asserted shape: six action requests, six policy verdicts, four blocked-without-execution rows, two verified rollback result records, six cold replay rows, six public trace spans, manifest digest checks, public-relative result record paths, and negative cases for semantic mismatch, blocked-action execution, digest mismatch, manifest-boundary breakage, and unsafe card reuse. For the corpus check, the result record is only parity evidence that the JSON bundle and generated paper-module instance still agree; it is not a live sandbox-security result.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python \\\n  -m microcosm_core.organs.agent_sandbox_policy_escape_replay \\\n  run-sandbox-bundle \\\n  --input examples/agent_sandbox_policy_escape_replay/exported_sandbox_policy_escape_bundle \\\n  --out /tmp/agent_sandbox_policy_escape_bundle_receipt \\\n  --card > /tmp/agent_sandbox_policy_escape_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && ../repo-pytest \\\n  tests/test_agent_sandbox_policy_escape_replay.py\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe result record path proves pre-execution policy replay over public refs, not live sandbox security, exploit resistance, or host isolation.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that action request refs, pre-execution policy verdict refs, side-effect result record refs, rollback refs, cold replay rows, metadata-only trace spans, source manifests, digest checks, secret-exclusion scans, negative cases, and validation result records are checked by the listed runtime witnesses.\n\nThis module may not claim live sandbox escape resistance, live secret handling, live network isolation, host filesystem mutation authority, executable payload export, raw environment export, provider behavior, security benchmark performance, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe JSON bundle binds this paper module to the component `agent_sandbox_policy_escape_replay` and to `mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace`. The mechanism row states the actual computation: check action requests, pre-execution policy verdicts, side-effect result records, rollback result records, cold replay rows, public trace spans, source-module manifest boundaries, secret-exclusion scans, and escape negative cases before writing bounded result records.\n\n`AX-1` supplies the axiom-level rule: derivation must precede assertion, and a claim cannot be stronger than the checker that accepted it. `P-1` specializes that rule into recomputation over lower-level evidence instead of echoing fixture labels, declared verdicts, or public copy lines. `P-2` lowers the module's public claim to the strength of the named validator, which is why the scope limit stops at metadata-only public sandbox-policy replay result records. The governing concept, `concept.agent_reliability_and_safety_validator_bundle`, groups this component with agent reliability and safety validators whose public value is bounded result record evidence, not a broad claim that agents are safe in the world.\n\nIndirect Prompt Injection Information Flow Policy Replay Replays an agent run to show untrusted text was gated before any sensitive action, leaking no secret. 3/5\n\nDoes Replays a recorded sample agent episode (built from synthetic, metadata-only rows) and makes visible whether the instructions the agent treated as trusted were kept separate from untrusted web, tool, or browser text before any sensitive action was taken. Row by row, the record shows where untrusted text flowed, what the policy decided for each flow (allow / warn / block / review) before the action, and that the recorded outcome leaked no secret and disclosed no trusted context. It also bundles deliberately-bad cases it must reject (e.g. untrusted text reaching a sensitive action ungated, or a account secret being exfiltrated).\n\nScope limit Passing result records only show this projection satisfies the named information-flow contract over synthetic, redacted, metadata-only rows; they do not prove general prompt-injection robustness, benchmark performance, live account/tool/provider safety, hidden-message handling in a real system, source-file changes, or launch-scope decision.\n\nRun\n\n```text\nmicrocosm indirect-prompt-injection-information-flow-policy-replay run-prompt-injection-bundle --input examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle --out receipts/runtime_shell/demo_project/organs/indirect_prompt_injection_information_flow_policy_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/indirect_prompt_injection_information_flow_policy_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Indirect Prompt-Injection Information-Flow Policy Replay\n\nExplains component [Indirect Prompt Injection Information Flow Policy Replay](docs/components.html#component-indirect_prompt_injection_information_flow_policy_replay) mechanism [validates public indirect prompt injection information flow policy replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-indirect-prompt-injection-information-flow-policy-replay-validates-public-indirect-prompt-injection-information-flow-policy-replay) Governed by principles [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9) [Carry basis and provenance together](docs/doctrine.html#dcard-p-14) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8) Depends on paper module [Source Projection Import Protocol](docs/paper-modules.html#paper-module-macro-projection-import-protocol)\n\nThis validator-backed claim contract admits one narrow public claim: a source-faithful public trace refactor separated trusted instructions from untrusted web/tool/browser text before any privileged action or answer claim was accepted.\n\nThe runnable contract requires source trust labels, taint labels, source-to-sink flow rows, pre-action policy verdicts, sanitized-output result records, cold replay, secret-exclusion scan, negative cases, a public agent-execution trace, and an explicit scope limit.\n\n###### Purpose\n\nAn agent that reads web pages, tool output, or retrieved documents takes in text from sources it does not control. Indirect prompt injection is the case where that untrusted text carries an instruction, and the agent acts on it as if the operator had asked. This component exists to make one specific safety property checkable on a synthetic trace: untrusted text was kept separate from trusted instructions, and no untrusted source reached a privileged action without being gated first. It answers a single question. Did the trust boundary actually hold through the flow, or only on paper?\n\nThe unusual part is that the validator does not trust the labels the fixture declares. Each flow row claims a set of taint labels and a policy verdict, but the runtime ignores those and recomputes both. It propagates taint along the source-to-sink graph from the labelled sources, so a sink inherits the taint of everything that fed it, and it derives the verdict from that propagated taint plus the sink's privilege, the sanitizer state, the sink kind, and the proposed action. If the declared taint or the declared verdict disagrees with the recomputed one, the row is blocked. A flow cannot quietly relabel an untrusted source as clean, or mark a dangerous action as `allow`, because the contradiction is recomputed rather than read back.\n\nThat recomputation is the point. The failure mode it guards against is a trace that looks safe because the labels were written to look safe. By deriving the labels and verdicts from the graph itself, the contract catches the mislabelled flow that a field-by-field check would wave through. To stay honest about live behaviour, it also takes one generated public tool-call trace span and pushes it through the same machinery as untrusted tool output, so the runtime is seen to treat tool output as data until a policy gate reviews it, never as instruction authority.\n\n###### Cold-Reader Path\n\n```text\nmicrocosm indirect-prompt-injection-information-flow-policy-replay run-prompt-injection-bundle \\\n  --input examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/indirect_prompt_injection_information_flow_policy_replay\n```\n\nPrimary result record: `receipts/runtime_shell/demo_project/organs/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle_validation_result.json`\n\nFirst-wave fixture result record: `receipts/first_wave/indirect_prompt_injection_information_flow_policy_replay/indirect_prompt_injection_information_flow_policy_replay_validation_receipt.json`\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD sources[\"Source rows trusted and untrusted, with taint labels\"] flows[\"Source-to-sink flow rows (declared taint and verdict)\"] propagate[\"Propagate taint along the source-to-sink graph\"] derive[\"Derive verdict from taint + sink privilege + sanitizer + sink kind + action\"] compare{\"Declared labels and verdict match the derived ones?\"} blocked[\"Block the row (relabelled or wrong verdict)\"] gate{\"Untrusted into a privileged sink?\"} verdicts[\"Pre-action verdict allow / warn / review / block\"] outputs[\"Sanitized output no trusted context disclosed, no untrusted instruction obeyed\"] toolspan[\"One public tool-call trace span treated as untrusted tool output\"] result records[\"metadata-only result records refs, digests, counts, status\"] sources --> flows flows --> propagate propagate --> derive derive --> compare compare -- no --> blocked compare -- yes --> gate gate -- yes --> verdicts gate -- no --> verdicts verdicts --> outputs toolspan --> propagate outputs --> result records blocked --> result records\n```\n\nThe module's shape is a public information-flow replay, not a live prompt-injection defense. This page points at the mechanism and runtime component; the runtime validates source trust labels, taint propagation, privileged sink gates, pre-action verdicts, sanitized outputs, cold replay, public trace spans, source-module digest anchors, negative cases, and metadata-only result records.\n\n###### Technical Mechanism\n\nThe runtime mechanism is an evidence compiler plus an information-flow validator. `run` loads the first-wave fixture with negative cases enabled; `run_prompt_injection_bundle` loads the exported public bundle and leaves the fixture-only negative cases out. Both routes call `_build_result`, which loads the projection protocol, injection policy, source-document rows, flow graph, policy verdict rows, sanitized outputs, cold replay rows, public trace, copied source-module manifest, and secret-exclusion policy before it writes any result record.\n\nThe source and flow validators separate instruction authority from untrusted data before claim admission. `validate_source_documents` requires every source row to carry source id, trust label, channel, body ref, taint labels, instruction-authority flag, body redaction, synthetic-fixture status, and no raw or real-account body export; untrusted sources cannot carry instruction authority. `validate_information_flow_graph` joins each flow to its source row, derives taint labels through `_taint_propagation_receipt`, derives the expected policy verdict from propagated taint, sink kind, sink privilege, sanitizer state, and proposed action, and rejects hand-written taint or verdict drift.\n\nPolicy and output validation then bind the pre-action membrane. The injection policy must name allow, warn, block, and review verdicts; require the source, flow, verdict, and output field floors; and deny real accounts, raw prompt bodies, account secrets, tool-output authority, hidden-message promotion, live tool calls, general robustness claims, and launch. `validate_policy_verdicts` requires verdicts to join to flows, precede action, cite rules, stay redacted, and match the derived flow verdict. `validate_sanitized_outputs` requires output refs to join to flows, disclose no trusted context, obey no untrusted instruction, and avoid external action on blocked flows.\n\nReplay and trace validation keep the public claim metadata-only. `validate_cold_replay` requires replay commands and result record refs to reproduce each verdict and sanitized output without trusted-context disclosure. The component uses `build_public_prompt_injection_trace` to build five public trace spans, then `_live_tool_call_trace_promotion` promotes one generated public tool-call trace span back through the same taint-graph machinery as an untrusted tool-output source. That promotion is evidence that the runtime treats tool output as data until a policy gate reviews it, not as instruction authority.\n\nThe copied-source floor is checked independently. `_source_module_manifest_result` requires the exported bundle's `source_module_manifest.json` to classify copied material as source body material, keep body text out of result records, match declared module counts, resolve `path` and `target_ref` to the same copied body, stream SHA-256 digests over each target, and verify required anchors. `_source_open_body_import_summary` exposes only body ids, classes, manifest refs, counts, and ceiling flags; the copied bodies remain under `source_modules/`.\n\nThe result record mechanism is intentionally small. `_write_receipts` writes first-wave result, board, validation, and sign-off result records for fixture mode, while exported-bundle mode writes the bundle validation result. `result_card` emits a compact command card and omits findings, secret-scan details, scope limit bodies, scope boundary text, source refs, target refs, public trace spans, source rows, flow rows, verdict rows, sanitized output rows, cold replay rows, board rows, and copied source-module bodies. The card preserves counts, status, negative-case coverage, trace span count, body-floor status, and result record refs.\n\nThe lattice binding is the source record `paper_module.indirect_prompt_injection_information_flow_policy_replay`, the mechanism row `mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay`, principles `P-9` and `P-14`, axiom `AX-8`, and `concept.agent_reliability_and_safety_validator_bundle`. Those refs are used as an admission-control lattice: source-labelled public evidence may enter the claim surface, while untrusted instruction authority, private bodies, model-output data, live account material, source-file changes, and launch claims remain out of scope.\n\n###### Input Contract\n- `projection_protocol.json`: source-available projection statement and omitted private material.\n- `injection_policy.json`: required source, flow, verdict, and output fields plus authority denials.\n- `source_documents.json`: synthetic trusted and untrusted sources with trust labels and taint labels.\n- `information_flow_graph.json`: source-to-sink flow rows before claim admission.\n- `policy_verdicts.json`: allow, warn, block, and review verdicts before synthetic action.\n- `sanitized_outputs.json`: output refs proving no trusted context disclosure and no untrusted instruction obedience.\n- `cold_replay.json`: rerunnable command and result record refs that reproduce verdicts and sanitized state.\n\n###### Public Trace Refactor\n\nThe product evidence is no longer the fixture verdict fields alone. The component uses `microcosm_core.macro_tools.agent_execution_trace::build_public_prompt_injection_trace` to emit metadata-only spans over the public source, flow, verdict, output, and replay refs. That builder is a Microcosm refactor of the source `system/lib/agent_execution_trace.py` span model, so the accepted result record can show sequence, authority, audit, coverage, and digest mechanics without copying real accounts, prompt bodies, model-output data, or live tool material.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[38:paper_module.indirect_prompt_injection_information_flow_policy_replay]` is the JSON authority row; a Mermaid diagram and an Atlas card are generated for this module from that row.\n- Mechanism route: `core/mechanism_sources.json::mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay` binds the code locus, fixture refs, exported bundle refs, result record refs, validator commands, focused regression, and guardrails.\n- Runtime route: `src/microcosm_core/organs/indirect_prompt_injection_information_flow_policy_replay.py` owns `run`, `run_prompt_injection_bundle`, `_build_result`, `_write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- Exported-bundle route: `examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle` contains `bundle_manifest.json`, `projection_protocol.json`, `injection_policy.json`, `source_documents.json`, `information_flow_graph.json`, `policy_verdicts.json`, `sanitized_outputs.json`, `cold_replay.json`, and `source_module_manifest.json`.\n- Source-module route: `source_module_manifest.json` records five copied public source bodies: the extracted-pattern ledger row, high-novelty reconstruction result record, agent execution trace runtime, agent execution trace standard, and strict JSON helper. Result records carry refs, digests, counts, and status only; source body text stays in the bundle's `source_modules/` tree.\n- Focused-test route: `tests/test_indirect_prompt_injection_information_flow_policy_replay.py` verifies negative cases, public-relative redacted result records, exported-bundle runtime shape, source-module digest and target-ref failures, exact copied source bodies, card result record reuse, and public trace span construction.\n\n###### Prior Art Grounding\n\nThis component is grounded in the prompt-injection and information-flow-control literature. The prompt-injection side follows the threat shape described by Greshake et al. in [Not what you've signed up for](https://arxiv.org/abs/2302.12173), the agentic evaluation framing in [AgentDojo](https://arxiv.org/abs/2406.13352), and later data-leakage benchmarks over tool-calling agents such as [Simple Prompt Injection Attacks Can Leak Personal Data](https://arxiv.org/abs/2506.01055). The policy mechanism borrows from dynamic information-flow / taint-tracking ideas, including [Permissive Information-Flow Analysis for Large Language Models](https://arxiv.org/abs/2410.03055).\n\nMicrocosm does not claim a general prompt-injection defense. It preserves the prior-art internal control lesson: untrusted content must be labelled as data, source-to-sink flows must be visible before privileged action, and sanitized outputs need result records. The local component turns that lesson into a metadata-only replay contract with explicit scope boundaries and negative cases.\n\n###### Negative Cases\n\nThe validator rejects real account material, secret or trusted-context exfiltration, raw prompt body export, untrusted tool output treated as instruction authority, hidden system-message promotion, account secret exfiltration, final-answer-only success, and ungated untrusted flow into a privileged sink.\n\nThese are falsification fixtures. They are part of the contract, not examples of live exploit traffic.\n\n###### Named Proof Consumers\n\nThe named proof consumer is `tests/test_indirect_prompt_injection_information_flow_policy_replay.py`. It checks first-wave negative-case coverage, five sources, three untrusted and two trusted source labels, five information flows, derived taint paths, derived policy verdicts, allow/warn/block/review counts, blocked-without-external-action counts, sanitized-output non-disclosure, cold replay, scope limit flags, public trace spans, public tool-call trace promotion through taint propagation, public-relative redacted result records, exported-bundle validation, source-module digest mismatch rejection, target-ref/path mismatch rejection, partial digest mismatch rejection, manifest body-text boundary rejection, streaming source-module digests, exact copied source body imports, fresh `--card` result record reuse, public trace construction, and fixture-manifest binding to the body-open refactor.\n\nThe runtime proof consumers are the two module commands in the Validation Result record Path: fixture mode via `indirect_prompt_injection_information_flow_policy_replay run`, and exported bundle mode via `indirect_prompt_injection_information_flow_policy_replay run-prompt-injection-bundle`. Fixture mode must observe all eight negative cases and write metadata-only result, board, validation, and sign-off result records. Bundle mode must validate the public bundle shape, source-module manifest, public trace spans, and metadata-only exported bundle result record.\n\nThe corpus proof consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`. It is a corpus check only; it does not refresh generated Mermaid, Atlas, site, verifier, or bundle state.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.indirect_prompt_injection_information_flow_policy_replay run-prompt-injection-bundle --input examples/indirect_prompt_injection_information_flow_policy_replay/exported_prompt_injection_flow_bundle --out /tmp/indirect_prompt_injection_flow_bundle_receipt --card > /tmp/indirect_prompt_injection_flow_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_indirect_prompt_injection_information_flow_policy_replay.py -q\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe result record path proves synthetic information-flow replay and body omission, not general prompt-injection robustness or live account safety.\n\n###### Scope boundary\n\n###### Limitations\n\nThe replay is intentionally small and synthetic. Fixture mode covers five source documents, three untrusted and two trusted source labels, five source-to-sink flows, five pre-action verdicts, five sanitized outputs, five cold replay passes, five public trace spans, one generated public tool-call trace promoted through the taint graph, five copied source bodies, and eight negative cases. Exported-bundle mode validates the public bundle, source-module manifest, trace spans, and metadata-only result record shape, but it does not carry the fixture-only negative-case payloads.\n\nThose counts are proof boundaries, not scale claims. They show that this local validator recomputes source trust, taint propagation, pre-action verdicts, sanitized output constraints, cold replay, source-module digest anchors, and metadata-only result record shape over declared public inputs. They do not estimate attack coverage, compare defenses, score a benchmark, certify hidden-message handling in production, or demonstrate live email, browser, account, tool, or provider behavior.\n\nThe source-open body floor is also narrow. The manifest proves byte parity and declared anchors for the five copied source bodies in the exported bundle. It excludes private source-root export, raw prompt or system body export, account secret-bearing material, source-file changes, public sharing, hosting, launch-scope decision, complete security, or product readiness.\n\n###### Scope limit\n\nThis module supports only the public claim that the replay exposes and checks a prompt-injection information-flow policy over source trust labels, taint labels, source-to-sink flow rows, pre-action policy verdict refs, sanitized-output refs, cold replay refs, public trace spans, live public tool-call trace taint promotion, copied source-module digests, negative-case result records, secret-exclusion checks, and metadata-only scope limits.\n\nThe copied source-module digest row proves byte parity for the named source body only; it does not widen the replay into live source authority.\n\nIt does not claim general prompt-injection robustness, live account safety, live tool or provider behavior, raw prompt/system/tool body export, account secret-bearing account data, hidden-message production handling, benchmark security or performance, source-file changes, publishing-scope decision, hosting authority, launch-scope decision, complete security, or product-progress authority.\n\n###### Scope limit\n\nPassing result records prove only that this public trace refactor satisfies the named prompt-injection information-flow contract over metadata-only rows. They do not prove general prompt-injection robustness, benchmark performance, live account safety, provider behavior, tool behavior, hidden-message handling in a real system, source-file changes, publishing-scope decision, or launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe generated JSON instance gives this page a specific admission lattice, not a loose security story. The only unresolved selective relation is the dependency edge; it remains a residual because the bundle does not name a sibling paper-module dependency.\n\nThe governing law is provenance propagation and non-interference. `P-9` requires every source, fixture, result record, public-copy, provider-shape, or private-boundary crossing to carry provenance class and scope limit. `P-14` requires byte or row basis and provenance to travel together. `AX-8` requires data labels to propagate along flows, with untrusted labels entering privileged sinks only through declared transforms that satisfy the sink policy.\n\nThe runtime implements that lattice in `_build_result`: it loads the projection protocol, source documents, information-flow graph, policy verdicts, sanitized outputs, cold replay rows, public trace spans, source-module manifest, and secret-exclusion policy before status is admitted. `validate_source_documents` rejects untrusted instruction authority, `validate_information_flow_graph` derives taint labels and policy verdicts instead of trusting hand-written rows, `_live_tool_call_trace_promotion` treats generated public tool-call trace spans as untrusted tool output, and `_write_receipts` / `result_card` keep public result records metadata-only. The focused proof consumer is `tests/test_indirect_prompt_injection_information_flow_policy_replay.py`, which checks fixture and exported-bundle modes, taint/verdict derivation, negative cases, source-module digest boundaries, exact copied source-body imports, card redaction, fresh result record reuse, public trace spans, and fixture-manifest binding to the body-open refactor.\n\n###### Source-Open Body Floor\n\nThe exported bundle carries exact copied source bodies under `source_modules/ai_workflow/`, governed by `source_module_manifest.json`. The imported bodies are:\n- `state/microcosm_portfolio/extracted_patterns_ledger.jsonl`\n- `state/microcosm_portfolio/reconstruction/high_novelty_substrate_gap_scout_v1.json`\n- `system/lib/agent_execution_trace.py`\n- `codex/standards/std_agent_execution_trace.json`\n- `system/lib/strict_json.py`\n\nThe manifest records source refs, target refs, hashes, material classes, and required anchors. Result records and cards expose refs, counts, and validation status only; they do not embed ledger, reconstruction, prompt, account, account secret, browser UI, model-output data, or live-access bodies.\n\nAgentic Vulnerability Discovery Patch Proof Replay Checks a fixed-bug evidence chain and re-runs three small real security checks; no real attack material. 3/5\n\nDoes Takes a claim that an AI agent \"found and fixed a security bug\" and lays it out as a local, inspectable chain of made-up (synthetic) evidence: the imagined target, the suspected issue, the trace pointed to as backing, a reference to an abstract exploitability argument, the patch, and regression tests the fixture says fail before the fix and pass after it. The component checks only that these pieces are all present, refer to each other consistently, and carry no real targets, exploits, payloads, account secrets, or attack steps; it does not run the tests or judge whether the bug or fix is actually real. The result record shows whether the declared chain holds together, with no real attack material ever present.\n\nScope limit It validates only the projection/evidence-chain mechanics of a synthetic replay: structural presence, cross-reference consistency, declared boolean flags, and the secret/live-access exclusion scan. It executes small regression witnesses but performs no real vulnerability discovery and makes no judgment of real-world security or fix correctness. It excludes live-target testing, real CVE exploitation, weaponized payloads, account secret handling, network exfiltration, actionable exploit steps, external model access, source-file changes, benchmark security scores, launch, or any whole-system security claim.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.agentic_vulnerability_discovery_patch_proof_replay run --input fixtures/first_wave/agentic_vulnerability_discovery_patch_proof_replay/input --out receipts/first_wave/agentic_vulnerability_discovery_patch_proof_replay --acceptance-out receipts/acceptance/first_wave/agentic_vulnerability_discovery_patch_proof_replay_fixture_acceptance.json\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agentic_vulnerability_discovery_patch_proof_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Agentic Vulnerability Discovery Patch-Proof Replay\n\nExplains component [Agentic Vulnerability Discovery Patch Proof Replay](docs/components.html#component-agentic_vulnerability_discovery_patch_proof_replay) mechanism [validates public agentic vulnerability patch proof replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-agentic-vulnerability-discovery-patch-proof-replay-validates-public-agentic-vulnerability-patch-proof-replay) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper module [Mission Transaction Work Spine](docs/paper-modules.html#paper-module-mission-transaction-work-spine)\n\nThis module documents the source-available claim contract for `agentic_vulnerability_discovery_patch_proof_replay`. It turns an agentic vulnerability-discovery claim into a public trace-backed local replay: synthetic metadata-only targets, issue hypotheses, trace evidence, abstract exploitability refs, patch diffs, regression tests, verifier result records, sandbox policy verdicts, false-positive triage, cold replay, negative cases, and scope limits.\n\n###### Purpose\n\nAn agent that says it found and fixed a security bug is making a claim that is easy to assert and hard to check. The phrase \"found and fixed\" can stand for a real, tested repair, or for a plausible-looking patch that was never run, a false positive promoted to a finding, or a benchmark number with no evidence behind it. This component exists to refuse that ambiguity. It answers one question: before any \"found and fixed\" language is allowed, does a complete evidence chain line up, from a synthetic target through a hypothesis, a trace, an abstract exploitability ref, a patch diff, a regression test, and a verifier result record?\n\nThe part worth noticing is that two of those checks are not field checks. They recompute the thing the fixture is claiming. Each executable regression witness names one of three small, public mini-targets, a webhook redirect allowlist, a notebook log redactor, and a scheduler path normaliser. The validator runs that function twice, once in its unpatched form and once patched, and compares the results it computes against the `expected_pre_patch` and `expected_post_patch` values the fixture declared. A witness whose declared output does not match the computed output is rejected. In the same spirit, each verifier result record has its `pass` or `false_positive` verdict recomputed from the joined proof, patch, test, and witness evidence; the row's own label and result record filename are not taken on trust. The failure mode this guards against is a fixture that asserts a green result without the work behind it ever having run.\n\nThis is a synthetic, metadata-only replay, not live security work. The synthetic overclaim fixtures, live targets, real CVE exploitation, weaponised payloads, exploit steps, patch-without-test claims, benchmark claims, are regression boundaries the runtime must reject, not capabilities it offers. The useful claim is narrow and is stated plainly below: Microcosm can hold an agentic security story to a checked evidence chain before it admits patch-proof language.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority\"] markdown[\"Markdown reader projection\"] mechanism[\"mechanism source row\"] component[\"patch-proof replay runtime\"] fixture[\"first-wave fixture\"] bundle[\"exported patch-proof bundle\"] targets[\"synthetic target refs\"] hypotheses[\"issue hypotheses\"] traces[\"trace evidence refs\"] proofs[\"abstract exploitability refs\"] patches[\"patch diff refs\"] regressions[\"regression test refs\"] executable[\"executable regression witnesses\"] verifiers[\"verifier result records\"] sandbox[\"sandbox verdicts\"] negative[\"negative-case fixtures\"] secret_scan[\"secret-exclusion scan\"] replay[\"cold replay rows\"] public_trace[\"public trace spans\"] source_modules[\"source-module body floor\"] result records[\"metadata-only result records\"] consumer[\"focused proof-consumer tests\"] ceiling[\"scope limit\"] bundle --> markdown bundle --> mechanism mechanism --> component component --> fixture component --> bundle fixture --> targets bundle --> targets targets --> hypotheses hypotheses --> traces traces --> proofs proofs --> patches patches --> regressions regressions --> executable executable --> verifiers verifiers --> sandbox negative --> result records secret_scan --> result records sandbox --> replay replay --> public_trace source_modules --> secret_scan source_modules --> public_trace public_trace --> result records result records --> consumer result records --> ceiling\n```\n\nThe module shape is a metadata-only synthetic patch-proof replay, not a live vulnerability discovery or fix-correctness claim. The runtime forces target refs, hypotheses, trace refs, abstract exploitability refs, patch diff refs, regression test refs, verifier result records, sandbox verdicts, false-positive triage, cold replay, public trace spans, source-module digests, negative cases, and scope boundaries to line up before bounded patch-proof language is admitted.\n\n###### Technical Mechanism\n\nThe mechanism is an evidence join, not a scanner. The JSON bundle names the component and mechanism row, and the component resolves every claim through `_build_result` in `src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py`. That function loads the projection protocol and vulnerability policy, then validates targets, issue hypotheses, trace evidence, exploitability refs, patch diffs, regression tests, executable regression witnesses, verifier result records, sandbox verdicts, false-positive triage, cold replay rows, optional negative-case fixtures, the public trace builder, and the source-module manifest. A result can pass only when those validators agree, the secret-exclusion scan has zero blocking hits, the public trace status is `pass`, all positive validators are `pass`, and the exported bundle's manifest digests match copied source bodies.\n\nTwo of those validators do work the others do not. The executable regression witness check runs each declared mini-target function in both its unpatched and patched form and compares the computed pre/post outputs against the values the fixture declared, so a witness cannot pass on a label alone. The verifier result record check recomputes each `pass` or `false_positive` verdict from the joined hypothesis, proof, patch, test, and witness evidence, and also requires the result record-ref filename to match that recomputed verdict, so a row cannot claim a result its own evidence does not support. The other validators are stricter joins: every hypothesis must resolve to a synthetic target, every patch-required hypothesis must carry both an abstract exploitability ref and a metadata-only patch diff, and every patch must pair with a regression test that fails before the patch and passes after it. A patch without a paired test, or a false positive promoted to a finding, blocks the result.\n\nThe runtime deliberately keeps two evidence modes separate. The first-wave fixture includes the negative-case authority, so it must observe the expected overclaim failures such as live target material, real CVE exploitation, weaponized payload export, exploit steps, patch-without-test claims, and benchmark claims claims. The exported bundle is the public runtime example, so its `expected_negative_cases` can be empty while it still proves the body floor, public trace, digest checks, regression witnesses, and scope limit. Both modes write metadata-only result records; copied bodies stay behind the `source_module_manifest.json` refs and hashes.\n\n###### Named Proof Consumers\n- `tests/test_agentic_vulnerability_discovery_patch_proof_replay.py::test_agentic_vulnerability_patch_proof_replay_observes_negative_cases` consumes the first-wave fixture and checks the expected counts, negative-case coverage, public trace status, body-import boundary, secret-exclusion scan, and scope limit booleans.\n- `tests/test_agentic_vulnerability_discovery_patch_proof_replay.py::test_agentic_vulnerability_exported_bundle_validates_runtime_shape` consumes the exported bundle and checks runtime mode, target/hypothesis/patch counts, executable regression witnesses, source-module manifest status, copied-body count, metadata-only import summary, secret-exclusion status, and public trace span count.\n- The rejection tests in the same file are the scope limit in executable form: they mutate false-positive promotion, remove regression tests, tamper executable witnesses, omit exploitability proof, cross-wire verifier result records, and alter source-module digests, then require `blocked` results and specific error codes instead of allowing patch-proof language.\n\n###### What It Admits\n\nThe validator admits only metadata-only patch-proof evidence where trace refs, abstract proof refs, patch diff refs, regression tests, verifier result records, sandbox verdicts, and cold replay line up.\n\nThe result record fields to inspect first are `target_count`, `issue_hypothesis_count`, `patch_diff_count`, `regression_test_count`, `verifier_receipt_count`, `observed_negative_cases`, `secret_exclusion_scan`, `public_agent_execution_trace`, `body_import_verification`, and `authority_ceiling`.\n\n###### Prior Art Grounding\n\nThis component is grounded in the recent line of agentic software-engineering and security-evaluation work that treats code repair as an executable, test-backed claim rather than a prose claim. [SWE-bench](https://arxiv.org/abs/2310.06770) popularized repository issue resolution as an LLM task with real codebases and test-based patch evaluation, while [SWE-agent](https://arxiv.org/abs/2405.15793) made the agent-computer interface itself part of the repair system. Security benchmarks such as [CyberSecEval 2](https://arxiv.org/abs/2404.13161) and [SecCodePLT](https://arxiv.org/abs/2410.11096) motivate separating secure-code or vulnerability capability claims from uninspected generated patches.\n\nMicrocosm borrows the accountability pattern: issue hypotheses, trace evidence, patch diffs, regression tests, verifier result records, and negative cases must line up before patch-proof language is allowed. It does not import live targets, CVE exploitation authority, weaponized payloads, or benchmark performance claims.\n\n###### Source-Backed Doctrine Binding\n- Component: `src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py`\n- Bundle: `core/paper_module_capsules.json#paper_module.agentic_vulnerability_discovery_patch_proof_replay`\n- Mechanism: `core/mechanism_sources.json#mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay`\n- Standard: `standards/std_microcosm_agentic_vulnerability_discovery_patch_proof_replay.json`\n- Evidence class: `core/organ_evidence_classes.json::agentic_vulnerability_discovery_patch_proof_replay` records `algorithmic_projection` at rank 3.\n- Source-module manifest: `examples/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle/source_module_manifest.json` declares nine copied source/control/standard/tool bodies, including `strict_json_source_body_import`.\n- Runtime result record: `receipts/runtime_shell/demo_project/organs/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle_validation_result.json`\n- Sign-off result records: `receipts/first_wave/agentic_vulnerability_discovery_patch_proof_replay/*` and result records/sign-off/first_wave/agentic_vulnerability_discovery_patch_proof_replay_fixture_acceptance.json\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[5:paper_module.agentic_vulnerability_discovery_patch_proof_replay]` is the JSON authority row. A diagram view is generated for this module; the Atlas card view is a staged exercise pending the component-atlas lane.\n- Mechanism route: `core/mechanism_sources.json::mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay` binds the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and runtime code locus.\n- Runtime route: `src/microcosm_core/organs/agentic_vulnerability_discovery_patch_proof_replay.py` owns `run`, `run_patch_proof_bundle`, `_source_module_manifest_result`, `_source_open_body_import_summary`, `_build_result`, `_freshness_basis`, `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_NAME`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n- Exported-bundle route: `examples/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle` is the public runtime bundle for the synthetic patch-proof replay. Open `source_module_manifest.json` before trusting copied-body counts, then inspect the runtime validation result record.\n- Focused-test route: `tests/test_agentic_vulnerability_discovery_patch_proof_replay.py` verifies negative cases, public-relative metadata-only result records, exported-bundle runtime shape, exact copied source modules, digest mismatch rejection, command-card result record reuse, and public trace construction.\n\n###### Cold-Agent Use\n\nOpen the source-module manifest first, then the runtime result record, then the component source. The useful claim is not that a real vulnerability was discovered or fixed.\n\nThe useful claim is that Microcosm can force an agentic security story to expose synthetic target refs, issue hypotheses, trace evidence, abstract exploitability refs, patch diffs, regression tests, verifier result records, sandbox verdicts, false-positive triage, cold replay, public trace spans, secret-exclusion scan, negative-case result records, and scope limits before patch-proof language is allowed.\n\nRe-entry condition: after the sibling `organ_atlas.json` lane releases, bind this paper-module bundle, mechanism ref, and code locus into the atlas row and rerun `python -m microcosm_core.doctrine_lattice --check`.\n\n###### Negative Cases\n\nThe contract rejects `live_target_material`, `real_cve_exploitation`, `weaponized_payload_export`, `account_secret_material`, `network_exfiltration`, `exploit_instruction_steps`, `patch_without_tests`, and `benchmark_score_claim`. These are falsification fixtures, not product evidence.\n\n###### Validation Result record Path\n\nRun the first-wave fixture validator from the repo root and write its result record outside the repo working tree:\n\nThen run the exported bundle validator:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src ../repo-python -m microcosm_core.organs.agentic_vulnerability_discovery_patch_proof_replay \\\n  run-patch-proof-bundle \\\n  --input examples/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle \\\n  --out /tmp/agentic_vulnerability_patch_proof_bundle_receipt \\\n  --card > /tmp/agentic_vulnerability_patch_proof_bundle_card.json\n```\n\nThe focused regression test and corpus projection checks are:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_agentic_vulnerability_discovery_patch_proof_replay.py\ncd microcosm-substrate && PYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py \\\n  --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThe result records do not authorize live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, external model access, source-file changes, benchmark security scores, launch, or any whole-system security claim.\n\n###### Scope limit\n\nThis module may claim public fixture evidence that synthetic target refs, issue hypotheses, trace-evidence refs, abstract exploitability refs, patch diff refs, regression-test refs, verifier result records, sandbox verdicts, false-positive triage rows, cold replay rows, public trace spans, source-module digest checks, secret-exclusion scans, negative-case labels, and metadata-only validation result records are checked by the listed runtime witnesses.\n\nThis module may not claim live target testing, real CVE exploitation, weaponized payload export, account secret handling, network exfiltration, actionable exploit instructions, live provider behavior, benchmark security scores, patch correctness on real repositories, source-file changes, publishing-scope decision, launch-scope decision, product-progress evidence, or whole-system security.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing row is `mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay`. It binds this reader module to `concept.agent_reliability_and_safety_validator_bundle`, `P-1`, `P-2`, `AX-1`, and the upstream `paper_module.mission_transaction_work_spine` dependency. The relation matters because the mechanism is a public safety validator bundle: the paper module can claim that Microcosm checks a source-open, synthetic patch-proof evidence chain, but the lattice ceiling prevents that claim from becoming live vulnerability discovery, exploit proof, benchmark claims, source-file changes, or launch-scope decision.\n\n###### Source-Open Body Floor\n\nThe exported bundle carries nine exact copied source/control/standard/tool bodies under `examples/agentic_vulnerability_discovery_patch_proof_replay/exported_patch_proof_bundle/source_modules/`. The body floor is governed by `source_module_manifest.json`, which records digest-verified copies of:\n- the source pattern ledger\n- the high-novelty reconstruction result record\n- the component projection IR\n- the agent-execution trace runtime and standard\n- the extracted-pattern route-readiness standard\n- the mission-transaction preflight wrapper\n- the mission-transaction landing preflight runtime\n- the strict JSON helper\n\nResult records and cards do not duplicate those bodies. They carry `source_module_manifest_ref`, `source_open_body_import_refs`, `source_open_body_imports`, `body_material_status`, and `body_copied_material_count` so a cold reader can open the real bodies.\n\nThe public result record surface stays free of account secrets, account or browser state, browser state, model-output data bodies, browser UI live access, recipient-send state, weaponized payloads, live targets, exploit steps, and account secret-equivalent material.\n\nAgent Route Observability Runtime Recomputes an agent run's route-compliance score and anti-pattern flags with real trace-analytics code. 5/5\n\nDoes This validator takes a sample (synthetic, not live) record of an agent's local run \u2014 the route it picked, the work it did, the events it logged, the evidence it pointed to, and the authority limit it declared \u2014 and checks that this recorded trail is well-formed and self-consistent, instead of leaving raw log JSON to be read by hand. The record is built to state, up front, where the agent's authority was supposed to stop, so the limits are written down and checkable rather than taken on faith. It checks the recorded evidence; it does not watch a live agent or prove one actually stayed in bounds.\n\nScope limit It validates only public, recorded trace-feedback metadata and regression fixtures; it does not inspect live operator state, certify or prove runtime behavior, read model-output data, mutate the work log, authorize pattern assimilation, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.agent_route_observability_runtime run --input fixtures/first_wave/agent_route_observability_runtime/input --out receipts/first_wave/agent_route_observability_runtime\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Navigation Hologram Route Plane](docs/components.html#component-navigation_hologram_route_plane), [Cold Reader Route Map](docs/components.html#component-cold_reader_route_map), [Routing Anti Patterns Registry](docs/components.html#component-routing_anti_patterns_registry), [Pattern Binding Contract](docs/components.html#component-pattern_binding_contract), [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol), [Bounded Autonomy Campaign Packet](docs/components.html#component-bounded_autonomy_campaign_packet), [Saturation Engines Bundle](docs/components.html#component-batch11_saturation_engines_capsule), [Proof / Control / Runtime Import Bundle](docs/components.html#component-batch4_proof_authority_runtime), [Unsurfaced Source Primitives Bundle](docs/components.html#component-batch6_unsurfaced_primitives_capsule), [Trace, Code-Map & Scheduling Engines Bundle](docs/components.html#component-batch7_macro_engines_capsule), [Compliance Pipeline Bundle](docs/components.html#component-batch8_compliance_pipeline_capsule), [Agent Memory Temporal Conflict Replay](docs/components.html#component-agent_memory_temporal_conflict_replay), [Agent Sandbox Policy Escape Replay](docs/components.html#component-agent_sandbox_policy_escape_replay), [Provider Context Recipe Budget Policy](docs/components.html#component-provider_context_recipe_budget_policy), [Belief State Process Reward Replay](docs/components.html#component-belief_state_process_reward_replay)\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/agent_route_observability_runtime.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Computer-Use Action Trace Replay\n\nExplains component [Agent Route Observability Runtime](docs/components.html#component-agent_route_observability_runtime) mechanism [validates public route feedback](docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-route-observability-runtime-validates-public-route-feedback) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper modules [Agent Route Observability Runtime](docs/paper-modules.html#paper-module-agent-route-observability-runtime) [Source Projection Import Protocol](docs/paper-modules.html#paper-module-macro-projection-import-protocol)\n\n`computer_use_action_trace_replay` is a validator-backed claim contract under `agent_route_observability_runtime`. It asks a narrow eval-harness question: does a claimed computer-use episode bind visible observations, affordances, actions, pre-action authority verdicts, state-transition result records, recovery result records, cold replay, falsification fixtures, non-public-state scan posture, and an explicit scope limit?\n\nRun:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.cli agent-route-observability-runtime \\\n  --input examples/agent_route_observability_runtime/exported_computer_use_action_trace_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/agent_route_observability_runtime \\\n  validate-computer-use-bundle\n```\n\nThe fixture rejects live account action, account secret entry, external network mutation, purchase/send without approval, destructive action without review, hidden screen-state claims, actions without observation and affordance refs, and benchmark-score claims.\n\n###### Purpose\n\nA computer-use agent produces a stream of screenshots, clicks, keystrokes, and \"it worked\" assertions. The hard question for anyone reviewing such a trace is not whether the agent moved the mouse, but whether the record actually supports the claim that something happened safely. A trace can look complete while hiding the two failures that matter most: an action that was blocked or sent for review but is later narrated as a success, and a success that is asserted without any state evidence to back it. This module exists to make that question decidable on a synthetic episode, offline, before any of the language reaches a reader.\n\nThe single question it answers is: does each recorded action line up, row by row, with a prior visible observation, a pre-action authority verdict, and a state-transition result record whose outcome agrees with that verdict? The mechanism is a typed join, not a screenshot replay. An action must cite the observation it reacted to and an affordance that was visible in it; a verdict must be stamped before the action and must explicitly deny live-account, account secret, network, destructive, and purchase or send authority; a transition result record must then match the verdict. If the verdict said allow, the result record has to show the action was executed and an oracle confirmed the resulting state. If the verdict said block or review, the result record has to show the action was not executed and the status reads blocked or review-required. Nondeterministic \"it probably succeeded\" claims are refused outright.\n\nWhat is genuinely unusual here is the inversion. Most action-trace tooling treats a screenshot as the proof. This module treats the screenshot as the one thing it will not trust: observations enter only as a digest and a visible-state hash, with raw pixels, hidden-state assertions, and live-browser state all required to be absent. The evidence that carries weight is the agreement between the verdict and the transition, not the image. The result record that comes out the other end records counts, refs, hashes, and the redaction posture, and never the raw bodies it checked. It describes a synthetic episode under the route-observability runtime; it does not drive a live browser or desktop.\n\n###### Shape\n\nSource refs\n\nComponent `agent_route_observability_runtime runtime` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record\"] bundle --> mermaid[\"generated Mermaid available\"] bundle --> atlas[\"generated Atlas linked\"] bundle --> component[\"agent_route_observability_runtime runtime\"] component --> bundle[\"exported computer-use bundle\"] bundle --> observations[\"visible observations: digest + visible-state hash, no raw pixels\"] observations --> actions[\"action rows: cite observation + affordance, allowed kind, redacted\"] actions --> verdicts[\"pre-action authority verdict per action\"] verdicts -->|allow| executed[\"transition: executed + oracle status pass\"] verdicts -->|block or review| held[\"transition: not executed + blocked / review-required\"] held --> recovery[\"recovery result record, no upgrade to executed\"] executed --> cold[\"cold replay reproduces action, verdict, transition\"] recovery --> cold cold --> trace[\"public trace spans: refs, counts, hashes, redaction posture\"] trace --> result record[\"metadata-only validation result record\"] result record --> ceiling[\"scope limit: no live control\"]\n```\n\nThe shape is a reader route over a synthetic computer-use action trace validator. The evidence path runs through the source record, fixture manifest, exported bundle, runtime validator, public trace builder, metadata-only result records, and explicit scope limit. A diagram view and Atlas entry are generated for this module from the source record.\n\n###### Technical Mechanism\n\nThe runtime entry point is `run_computer_use_action_trace_bundle` in `src/microcosm_core/organs/agent_route_observability_runtime.py`. It first loads the bundle through the strict JSON path and decides whether the input is the full fixture with negative cases or the public exported bundle. It then checks the projection protocol, interaction policy, task episodes, screen observations, action trace, authority verdicts, state transitions, recovery result records, cold replay rows, source-module manifest, non-public-state scan, and public trace spans before writing a result record. The status is `pass` only when positive findings are empty, required negative cases are observed for the fixture path, the non-public-state scan passes, and copied public source-module digests verify.\n\nThe mechanism is a typed join, not a screenshot replay. Actions must cite prior observation and affordance refs. Authority verdicts must cite action ids before state transitions can be credited. Cold replay rows must cover the action ids and reproduce the action, verdict, and transition relation. Recovery result records cover blocked or review-required actions without upgrading them into executed mutations. The public trace builder then emits bounded spans over refs, counts, hashes, and redaction posture, while the result record deliberately omits raw screen bodies, account secrets, hidden screen state, model-output data, private source bodies, absolute local paths, and benchmark-score claims.\n\n###### Named Proof Consumers\n- `validate-computer-use-bundle` is the reader command. On the exported bundle, it should produce `exported_computer_use_action_trace_bundle_validation_result.json` with four episodes, six observations, eight actions, eight authority verdicts, eight state-transition result records, one recovery result record, four cold replay rows, eight public trace spans, copied source-module digest verification, and an explicit no-live-control scope limit.\n- `tests/test_agent_route_observability_runtime.py::test_computer_use_action_trace_replay_observes_negative_cases` is the negative fixture consumer. It checks that live account action, account secret entry, external network mutation, unapproved purchase/send, destructive file action, hidden screen-state claims, action-without-observation rows, and benchmark-score claims are rejected.\n- `tests/test_agent_route_observability_runtime.py::test_computer_use_action_trace_receipt_is_public_relative_and_redacted` is the result record-safety consumer. It verifies public-relative paths and absence of account secret values, hidden screen state, absolute paths, and raw bodies.\n- `tests/test_agent_route_observability_runtime.py::test_computer_use_action_trace_exported_bundle_validates_runtime_shape` is the public-bundle consumer. It checks the exported-bundle shape, action kinds, source-module digest posture, public trace coverage, and no benchmark authority.\n- `tests/test_agent_route_observability_runtime.py::test_computer_use_trace_loader_rejects_duplicate_json_keys` is the parser-integrity consumer. It prevents a replay bundle from passing by hiding conflicting values behind duplicate JSON keys.\n\n###### Reader Evidence Routing\n- Bundle route: `core/paper_module_capsules.json::paper_modules[46:paper_module.computer_use_action_trace_replay]` is the source-authority row for this module. A diagram view and Atlas entry are generated from that source record.\n- Dependency route: downstream modules may reference `paper_module.computer_use_action_trace_replay`, but this page's source authority is the source record named above, not those downstream dependencies.\n- Fixture-manifest route: `core/fixture_manifests/agent_route_observability_runtime.fixture_manifest.json::computer_use_action_trace_replay_contract_v1` names the positive inputs, negative-case floor, expected result record fields, runtime-example command, and scope limit.\n- Runtime route: `src/microcosm_core/organs/agent_route_observability_runtime.py::run_computer_use_action_trace_bundle` loads the bundle, validates projection protocol, interaction policy, episodes, observations, actions, authority verdicts, state transitions, recovery result records, cold replay, source-module manifest, negative cases, and public trace spans.\n- Exported-bundle route: `examples/agent_route_observability_runtime/exported_computer_use_action_trace_bundle` contains `bundle_manifest.json`, `projection_protocol.json`, `interaction_policy.json`, `task_episodes.json`, `screen_observations.json`, `action_trace.json`, `authority_verdicts.json`, `state_transition_receipts.json`, `recovery_receipts.json`, `cold_replay.json`, and `source_module_manifest.json`.\n- Source-module route: `source_module_manifest.json` records copied public source bodies for `codex/standards/std_agent_execution_trace.json`, `system/lib/agent_execution_trace.py`, and `system/lib/strict_json.py`, with `body_in_receipt: false`.\n- Focused-test route: `tests/test_agent_route_observability_runtime.py` validates negative cases, public-relative redacted result records, exported-bundle runtime shape, public trace span coverage, source-faithful public refactor status, source digest matching, and duplicate-key rejection.\n\n###### Prior Art Grounding\n\nThis component is grounded in web and desktop agent benchmarks that make action trajectories inspectable. [WebArena](https://arxiv.org/abs/2307.13854) and [Mind2Web](https://arxiv.org/abs/2306.06070) anchor realistic web-task evaluation, while [OSWorld](https://arxiv.org/abs/2404.07972) extends the concern to multimodal agents acting in real computer environments. Browser automation standards such as [WebDriver](https://www.w3.org/TR/webdriver2/) are also prior art for representing actions against visible browser state through a controlled protocol.\n\nMicrocosm borrows the action-trace accounting pattern: observations, affordances, actions, pre-action authority verdicts, transition result records, recovery result records, cold replay, and falsification cases must line up before a computer-use episode is credited. It does not operate a live browser or desktop.\n\nThe result record proves only this public synthetic replay boundary. It does not control a live browser or desktop, use accounts, enter account secrets, mutate external systems, export raw screenshots, claim benchmark performance, change source files, use external model services, or include launch operations.\n\n###### Validation Result record Path\n\nReader-verifiable bundle command, run from `microcosm-substrate/`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.cli agent-route-observability-runtime \\\n  --input examples/agent_route_observability_runtime/exported_computer_use_action_trace_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/agent_route_observability_runtime \\\n  validate-computer-use-bundle\n```\n\nThe command writes the computer-use replay result record under `receipts/runtime_shell/demo_project/organs/agent_route_observability_runtime/`, including `computer_use_action_trace_replay_result.json` and the exported bundle validation result. The tracked fixture result record records the synthetic observations, affordances, authority verdicts, transition result records, recovery result records, falsification cases, non-public-state scan posture, and scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, operate a live browser or desktop, use accounts, enter account secrets, mutate external systems, claim benchmark performance, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim synthetic computer-use action-trace replay over public fixtures: visible observations, affordances, action rows, pre-action authority verdicts, state-transition result records, recovery result records, cold replay rows, public trace spans, source-module digest checks, expected negative cases, and metadata-only result records.\n\nIt does not claim live browser or desktop control, account automation, account secret entry, purchase/send authority, external network mutation, destructive host action, hidden screen-state truth, benchmark performance, provider behavior, source-file changes, launch-scope decision, or whole-system correctness. The diagram view and Atlas entry generated for this module are navigation surfaces; they are not additional proof authority.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe source record binds this module to the accepted `agent_route_observability_runtime` component and to `mechanism.agent_route_observability_runtime.validates_public_route_feedback`. That places the page under `AX-1` and the `P-1` / `P-2` claim discipline: a computer-use claim is admissible only when the runtime recomputes it from lower level evidence, and the public sentence cannot exceed what the named validator actually checks. The generated JSON instance records nine resolved edges: component, mechanism, concept, axiom, principle, dependency, and code-locus links.\n\nThe relevant concept is `concept.agent_reliability_and_safety_validator_bundle`, not a generic browser agent benchmark. It frames the replay as an evidence bundle: visible observations and affordances are the basis, action rows are candidate transitions, pre-action authority verdicts decide whether a transition may be executed or blocked, and result record rows carry the bounded public result. The dependencies on `agent_route_observability_runtime` and `macro_projection_import_protocol` keep the proof below the source-open import and result record lanes instead of treating this Markdown page as source authority.\n\nProvider Context Recipe Budget Policy Runs the real context harness to measure assembled byte sizes and check each bundle fits its budget. 4/5 Runs real tools\n\nDoes This component checks that the bundles of context an AI agent would assemble before calling an outside model provider stay inside fixed size limits (in bytes), fill their sections in the declared order until the budget runs out, list any section that was dropped for not fitting, and never carry answer keys, proof solutions, or other \"correct answer\" material. The record shows the exact size ceilings for each recipe, which sections fit versus got left out, and which output each recipe is allowed to produce, so the context boundary is inspectable as plain accounting before any external model access or answer authority is ever in play. It only validates this metadata; it does not itself call any provider.\n\nScope limit It validates context-budget projection mechanics (byte ceilings, ordered section fill, omitted-section manifests, deliverable routing, and digest-checked source-body imports) only. It excludes provider/API calls, run Lean/Lake, expose or carry proof or oracle truth-side material, assert theorem or domain-level conclusions, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.provider_context_recipe_budget_policy run --input fixtures/first_wave/provider_context_recipe_budget_policy/input --out receipts/first_wave/provider_context_recipe_budget_policy\n```\n\nEvidence Bounded runtime computation evidence 4/5 Real runtime result\n\nLinks to [Bounded Autonomy Campaign Packet](docs/components.html#component-bounded_autonomy_campaign_packet), [Tool Server Pressure Inventory](docs/components.html#component-tool_server_pressure_inventory)\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/provider_context_recipe_budget.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Provider Context Recipe Budget\n\nExplains component [Provider Context Recipe Budget Policy](docs/components.html#component-provider_context_recipe_budget_policy) mechanism [validates public context budget boundary](docs/rules-and-ideas.html#lattice-mechanism-mechanism-provider-context-recipe-budget-policy-validates-public-context-budget-boundary) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Bind authority to transaction scope](docs/doctrine.html#dcard-p-16)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n`provider_context_recipe_budget_policy` is the public Microcosm component for turning retrieved proof-support metadata into bounded provider context recipes.\n\nIt validates six public recipe shapes: `minimal_4kb`, `premise_16kb`, `skill_32kb`, `repair_32kb`, `fewshot_64kb`, and `strategy_classification_4kb`. Each recipe has a fixed byte ceiling, ordered section fill, a graph role, a reducer deliverable type, and an omitted-sections manifest when a section cannot fit.\n\n###### Purpose\n\nThis component answers one question: when a proof-support pipeline is about to hand material to a model, which sections fit inside a fixed byte budget, in what order, and which sections are dropped? It treats the context window as a budget to spend rather than a place to dump everything retrieved. The board records this stance directly as `context_is_budget_not_dump`.\n\nThe byte sizes are not asserted by the fixture. The validator imports the copied benchmark harness, runs its real `_provider_context_pack` over each recipe, and measures the actual byte size of each packed section. A recipe is filled in declared order, admitting a section only while the running total stays under the ceiling, so an over-budget section is omitted and named in an explicit manifest rather than silently truncated. If the harness is unavailable the component falls back to declared sizes and says so, rather than guessing.\n\nThe second deliberate choice is what cannot enter context at all. A small fixed set of section ids and field keys, covering proof bodies, oracle-only premise ids, ideal answers, and provider output bodies, is rejected structurally, not by convention. Any recipe or section material carrying one of them is blocked before a packet is built. The output is metadata about the context shape: byte ceilings, the admitted and omitted section ids, the deliverable route, and a set of authority claims that stay false. No provider is called and no answer is produced.\n\n###### Shape\n\nSource refs\n\nJSON bundle `paper_module.provider_context_recipe_budget` `provider_context_recipe_budget.md` 6 public recipe budgets `provider_context_recipes.json` Runtime `provider_context_recipe_budget_policy.py` 9 source-backed sections `section_materials.json` 8 copied bodies `source_module_manifest.json` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.provider_context_recipe_budget\"] --> Instance[\"Generated instance 19 relationships, no selective residuals\"] Bundle --> Markdown[\"Reader projection provider_context_recipe_budget.md\"] Recipes[\"provider_context_recipes.json 6 public recipe budgets\"] --> Runtime[\"provider_context_recipe_budget_policy.py\"] Sections[\"section_materials.json 9 source-backed sections\"] --> Runtime SourceManifest[\"source_module_manifest.json 8 copied bodies\"] --> Runtime NegativeCases[\"negative fixtures 7 forbidden-boundary cases\"] --> Runtime Runtime --> Projection[\"context_packets included/omitted sections, byte counts, routes\"] Runtime --> Result records[\"metadata-only result records result, board, validation, sign-off\"] Projection --> Ceiling[\"scope limit no provider/proof/launch-scope decision\"] Result records --> Ceiling\n```\n\nEvidence and accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[55:paper_module.provider_context_recipe_budget]` sets `source_authority: json_capsule`, subjects the component `provider_context_recipe_budget_policy` plus mechanism `mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary`, and names `generated_projections.mermaid.status: available_from_capsule_edges` plus `generated_projections.atlas_card.status: linked_from_capsule_edges`.\n- Generated instance: `paper_modules/provider_context_recipe_budget.json::relationships.edges` contains 19 bundle-derived relationship edges, and `relationships.unpopulated_selective_relations` is empty. That is lattice wiring evidence, not implementation-correctness proof.\n- Runtime accounting: `src/microcosm_core/organs/provider_context_recipe_budget_policy.py` defines `EXPECTED_RECIPE_BUDGETS` for the six recipes, `EXPECTED_DELIVERABLES` for their reducer routes, `_recipe_projection` for included/omitted section accounting, `_recipe_findings` and `_section_findings` for boundary errors, and `_write_receipts` for metadata-only result record output.\n- Fixture inputs: `fixtures/first_wave/provider_context_recipe_budget_policy/input/provider_context_recipes.json` carries six public recipes with byte budgets from 4096 to 65536, while `.../section_materials.json` carries nine section rows with source refs and anchors.\n- Body-floor and result records: `core/fixture_manifests/provider_context_recipe_budget_policy.fixture_manifest.json` records `body_copied_material_count: 8`, seven `negative_case_ids`, four expected fixture result record paths, and `source_open_body_imports.authority_ceiling` fields that keep external model access, Lean/Lake execution, proof authority, truth-side material, payload export, runtime-correctness claims, and launch-scope decision false.\n- Focused tests: `tests/test_provider_context_recipe_budget_policy.py` checks the six recipe ids, expected negative cases, source-backed section materials, public-relative redacted result records, exported bundle validation, omitted-section movement when section size changes, digest mismatch rejection, and manifest body-text result record-boundary rejection.\n\n###### Technical Mechanism\n\nThe runtime mechanism is a context-packet compiler plus boundary validator. It does not ask a provider for an answer. `run` loads fixture inputs with negative cases enabled; `run_budget_bundle` loads the exported bundle shape without the fixture-only negative cases. Both routes call `_build_result`, which loads recipe rows, section rows, copied source-module bodies, and the non-public-state scan policy before it constructs any result record.\n\nRecipe projection is deterministic. `_recipe_projection` walks each recipe's ordered section ids, computes each section's byte size with `_byte_size`, admits a section only while the running total stays within the recipe's `byte_budget`, and records omitted sections when the next section would exceed the budget. The projection records graph role, deliverable type, included and omitted section ids, included bytes, approximate tokens, and whether the omitted-sections manifest is emitted. The six public recipes are the closed set in `EXPECTED_RECIPE_BUDGETS`: `minimal_4kb`, `premise_16kb`, `skill_32kb`, `repair_32kb`, `fewshot_64kb`, and `strategy_classification_4kb`.\n\nThe validator then checks three independent boundaries. `_recipe_findings` rejects budget changes, forbidden truth-side section ids, proof/provider body fields, provider-call authorization, deliverable-route drift, and over-budget context with no omitted-sections manifest. `_section_findings` requires each public section to cite an allowed source ref and source anchor, verifies those anchors against the copied source bodies, and rejects synthetic or truth-side section material. `_source_module_findings` checks the source-module manifest, expected module ids, metadata-only result record flags, target presence, source/target digest equality, and required anchors for the eight copied source bodies.\n\nThe result record mechanism is deliberately metadata-only. `_write_receipts` writes the fixture result, board, validation result record, and sign-off result record for fixture mode; bundle mode writes only the exported-bundle validation result. `result_card` emits a compact command card while omitting context packets, source-module imports, source refs, result record paths, private scan hit bodies, and the scope boundary payload. The full result records keep counts, ids, hashes, routes, and verdicts, bounded evidence bodies or provider answers.\n\nIn lattice terms, the JSON bundle binds this Markdown projection to `provider_context_recipe_budget_policy`, to `mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary`, and to `concept.agent_reliability_and_safety_validator_bundle`. The principle and axiom refs in the bundle (`P-1`, `P-2`, `P-3`, `P-6`, `P-8`, `P-16` and `AX-1`, `AX-2`, `AX-5`, `AX-7`, `AX-8`, `AX-9`) are implemented here as admission control over public evidence: bounded context metadata is allowed, truth-side material and provider authority are not.\n\n###### Runtime Surfaces\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.provider_context_recipe_budget_policy run \\\n  --input fixtures/first_wave/provider_context_recipe_budget_policy/input \\\n  --out receipts/first_wave/provider_context_recipe_budget_policy\nPYTHONPATH=src python3 -m microcosm_core.cli provider-context-recipe-budget-policy run-budget-bundle \\\n  --input examples/provider_context_recipe_budget_policy/exported_provider_context_budget_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/provider_context_recipe_budget_policy\n```\n\n###### Named Proof Consumers\n\nThe named proof consumer is `tests/test_provider_context_recipe_budget_policy.py`. It verifies streaming hash and line-count helpers, real-text byte sizing, all six expected recipe ids, all seven negative cases, source-backed section material, public-relative and redacted result records, exported-bundle validation, omitted-section movement when a section becomes small enough to fit, source-module digest mismatch rejection, source/target digest mismatch rejection, manifest and row body-text result record boundary rejection, compact `--card` output, exact copied source body imports, and fixture-manifest source-open body-floor counts.\n\nThe runtime proof consumers are the two module commands in the Validation Result record Path: `provider_context_recipe_budget_policy run` for fixture mode and `provider_context_recipe_budget_policy run-budget-bundle` for exported-bundle mode. Fixture mode must observe the negative-case set and write result, board, validation, and sign-off result records. Bundle mode must validate the exported runtime shape and write one metadata-only bundle validation result.\n\nThe corpus proof consumer is `scripts/build_doctrine_projection.py --check-paper-module-corpus`.\n\n###### Reader Evidence Routing\n- Start with the JSON Bundle Binding to identify the source record and the launch-safe scope limit before reading any validation result as a capability claim.\n- Use Structured Lattice Bindings for navigation: it names the component, mechanism, generated row, and runtime code locus that the bundle binds.\n- Use Validation Result record Path for reproducibility: fixture and bundle commands produce metadata-only result records, the focused pytest exercises negative cases, and the corpus check verifies paper-module projection parity.\n- The lattice wiring for this module supports discoverability and internal consistency checks; it does not establish external model service, Lean/Lake execution, formal-result correctness, launch-scope decision, or public-send permission.\n\n###### Negative Cases\n- `budget_overflow_recipe` rejects recipes above the public byte ceiling.\n- `truth_side_section` rejects oracle-only section ids.\n- `proof_body_leakage` rejects proof and provider body fields.\n- `provider_call_authorized` rejects any public fixture that authorizes a external model access.\n- `deliverable_type_route_mismatch` rejects a recipe whose reducer output type changed.\n- `omitted_sections_suppressed` rejects over-budget context without an omitted-sections manifest.\n- `synthetic_section_materials` rejects section material that lacks an allowed source ref or source anchor, or that is otherwise synthetic.\n\n###### Why It Matters\n\nMicrocosm needs provider context to look like a small operating system, not a prompt dump. This component makes the context boundary inspectable: a cold reader can see the exact byte ceilings, section order, omitted material, and deliverable routes before any provider or proof authority is even in scope.\n\n###### Prior Art Grounding\n\nThe recipe budget is grounded in retrieval-augmented generation and context packing practice. Lewis et al.'s [Retrieval-Augmented Generation](https://arxiv.org/abs/2005.11401) paper is the direct research anchor for conditioning generation on retrieved supporting material rather than relying only on model parameters. Microcosm narrows that idea into recipe metadata: retrieved proof-support sections are budgeted, ordered, and omitted explicitly before any external model access is in scope.\n\nThe command-facing budget style also borrows from the [Command Line Interface Guidelines](https://clig.dev/) principle of saying enough but not too much. The component turns that UX pressure into fixed byte ceilings, omitted-section manifests, and deliverable-type routing so \"more context\" does not silently become proof authority or provider authorization.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.provider_context_recipe_budget_policy run \\\n  --input fixtures/first_wave/provider_context_recipe_budget_policy/input \\\n  --out /tmp/microcosm-provider-context-recipe-budget-policy/fixture \\\n  --card\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.provider_context_recipe_budget_policy run-budget-bundle \\\n  --input examples/provider_context_recipe_budget_policy/exported_provider_context_budget_bundle \\\n  --out /tmp/microcosm-provider-context-recipe-budget-policy/bundle \\\n  --card\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_provider_context_recipe_budget_policy.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nA green result record proves only public context-recipe metadata, byte ceilings, omitted sections, deliverable routing, copied source-module refs, and negative cases; it does not use external model services, run Lean or Lake, prove formal-result correctness, export proof bodies, expose oracle-only material, include launch operations, or convert context metadata into proof authority.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component does not use external model services, run Lean or Lake, prove a theorem, expose a proof body, or reveal oracle-only truth-side material. Its output is context metadata: which sections would be admitted, which sections were omitted, which deliverable route is allowed, and which authority claims remain false.\n\nThe `strategy_classification_4kb` route emits only `strategy_id_classification`. It is not a proof-body route and cannot carry a provider answer body.\n\n###### Scope limit\n\nThis module covers only public context-recipe metadata: byte ceilings, ordered section admission, omitted-section manifests, deliverable routing, copied source-module refs, digest and anchor checks, negative cases, and metadata-only result records. They do not authorize provider or API calls, Lean or Lake execution, formal-result correctness, proof-body export, oracle-only truth-side material, provider answer bodies, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe public bundle carries exact source bodies for the context recipe compiler, formal ladder consumer, provider result record reducer, set calibration report, transform-job ABI, provider adapter policy, compute-provider policy, and provider-navigation transform result record policy. The validator checks every copied module by digest and required anchors; result records report only paths, hashes, counts, anchor status, and verdicts.\n\nThe body floor is deliberately metadata-only at the result record edge: runtime result records may prove copied-module paths, digests, anchor presence, counts, and verdicts, but they must not expose proof bodies, oracle-only truth-side material, provider answer bodies, account state, account secrets, or launch-send authority.\n\nAgent Completion Faithfulness Audit Runs real git and pytest on a sample repo so wrap-up claims state only what the evidence proves. 4/5 Runs real tools\n\nDoes Runs a public fixture repo through real git and pytest subprocesses, then checks that completion claims only say what the evidence supports: commit object exists, ledger cap exists, and pytest pass is claimed only after exit-zero status was checked.\n\nScope limit verified means the referenced evidence object exists or a pytest span ran; it does not imply the span passed unless exit-zero status was explicitly checked\n\nRun\n\n```text\nmicrocosm agent-closeout-faithfulness-audit run --input fixtures/first_wave/agent_closeout_faithfulness_audit/input --out receipts/first_wave/agent_closeout_faithfulness_audit\n```\n\nEvidence External tool run evidence 4/5 Real runtime result\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.agent_closeout_faithfulness_audit) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Agent Completion Faithfulness Audit\n\nExplains component [Agent Completion Faithfulness Audit](docs/components.html#component-agent_closeout_faithfulness_audit) mechanism [validates completion evidence claims](docs/rules-and-ideas.html#lattice-mechanism-mechanism-agent-closeout-faithfulness-audit-validates-closeout-evidence-claims) Governed by principles [Recompute, do not echo](docs/doctrine.html#dcard-p-1) [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2) concept [agent reliability and safety validators as bounded public scope limits](docs/rules-and-ideas.html#lattice-concept-concept-agent-reliability-and-safety-validator-bundle) Abides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1) Depends on paper module [Durable Agent Work-Landing Replay](docs/paper-modules.html#paper-module-durable-agent-work-landing-replay)\n\n`agent_closeout_faithfulness_audit` checks the kind of sentence an agent writes when it finishes a task: \"I committed the change, closed the ledger item, and the test passed.\" It runs the supplied public fixture evidence through real `git` and `pytest` subprocesses and refuses any claim that the evidence does not actually support.\n\n###### Purpose\n\nWhen an agent reports that work is done, the report is prose. The commit may or may not exist, the ledger row may or may not be there, and \"the test passed\" may mean the test ran, or it may mean nothing was checked at all. This component exists to answer one question over a fixed fixture: is each completion claim backed by an evidence object that genuinely exists, and is a \"passed\" claim backed by an explicit exit-zero status check rather than by the wording of the claim?\n\nThe approach is unusual in that it does not parse the completion prose or score it against a rubric. The fixture's `public_fixture_repo` is copied into a throwaway directory, initialised and committed with real `git` subprocesses, and its `HEAD` is read back with `git rev-parse`. A commit claim passes only when it points at that observed `HEAD`. A declared `pytest` span is run with `python -m pytest <nodeid>` inside that temporary repo, and only the exit code decides whether the span passed. The result record records the run as bytes of work that happened, not as a paraphrase of what the agent said.\n\nThe distinction the audit defends is narrow and easy to lose. \"The span ran\" and \"the span passed\" are separate facts, and a completion sentence that conflates them is the precise failure mode here. A pass claim is admitted only when `pass_status_checked` is true and the subprocess exited zero; a claim that expected a pass without that check is rejected with `CLOSEOUT_PYTEST_PASS_STATUS_NOT_CHECKED`. The same separation applies to commits and ledger caps, so a referenced commit object is not treated as a landed change and a named cap is not treated as closed work.\n\n###### Route Card\n- Component id: `agent_closeout_faithfulness_audit`\n- Accepted-component evidence class: `external_subprocess_witness`\n- Standard: `standards/std_microcosm_agent_closeout_faithfulness_audit.json`\n- Runner: `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py`\n- Fixture input: `fixtures/first_wave/agent_closeout_faithfulness_audit/input`\n- Runtime bundle: `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle`\n- Source manifest: `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle/source_module_manifest.json`\n- Primary result records: `receipts/first_wave/agent_closeout_faithfulness_audit/agent_closeout_faithfulness_audit_result.json`, `receipts/first_wave/agent_closeout_faithfulness_audit/agent_closeout_faithfulness_audit_board.json`, `receipts/first_wave/agent_closeout_faithfulness_audit/agent_closeout_faithfulness_audit_validation_receipt.json`, and result records/sign-off/first_wave/agent_completion_faithfulness_audit_fixture_acceptance.json\n- Generated posture: this paper module is authored doctrine. Refresh them through their owner commands instead of patching them by hand.\n\n###### Shape\n\nThis module is a completion-claim accounting fixture, not a completion oracle. Its single question is: did the supplied public fixture evidence support the completion claims, and did the result record refuse the overclaims that should not pass?\n\nSource refs\n\n3 fixture claims `closeout_claims.json` Audit `agent_closeout_faithfulness_audit.run` 2 cap rows `fixture_ledger.json` declared nodeid `tests/test_closeout_fixture.py` 1 exact-copy source body `source_module_manifest.json` Diagram source\n\n```text\nflowchart TD Claims[completion_claims.json 3 fixture claims] --> Audit[agent_completion_faithfulness_audit.run] Ledger[fixture_ledger.json 2 cap rows] --> Audit Repo[public_fixture_repo git fixture] --> Audit Pytest[tests/test_completion_fixture.py declared nodeid] --> Audit Manifest[source_module_manifest.json 1 exact-copy source body] --> Audit Audit --> Pass[pass result record 3 verified claims] Audit --> Neg[negative-case semantics 4 overclaim classes] Audit --> Ceiling[scope limit no live mutation or launch]\n```\n\nThe accounting is source-backed:\n\nEvidence input Runtime check Result record/accounting field `closeout_claims.json` carries `claim_public_head_exists`, `claim_cap_exists`, and `claim_pytest_span_passed` `evaluate()` loops over the three claim rows in `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py` `claim_count: 3`, `verified_claim_count: 3` `public_fixture_repo` is copied into a temporary git repo `_prepare_public_fixture_repo()` runs `git init`, config, add, commit, and `rev-parse HEAD` subprocesses `git_subprocess_count: 6`, `head_verified_by_subprocess: true` `fixture_ledger.json` names fixture cap rows task_ledger_cap claims must match task_ledger_caps[].cap_id `cap_fixture_closeout_receipt_exists` is accepted; missing caps emit `CLOSEOUT_FAKE_CAP_CLAIM` `tests/test_closeout_fixture.py::test_public_fixture_addition` is the declared pytest span `evaluate()` runs `python -m pytest <nodeid> -q` and records return code, `span_ran`, and explicit pass-status checking `pytest_subprocess_count: 1`, `pytest_span_ran_count: 1`, `pytest_pass_status_checked_count: 1` `source_module_manifest.json` names one copied source source body the bundle validator checks digest equality, line count, required anchors, and metadata-only result record posture `module_count: 1`, `line_count: 1703`, `sha256_match: true`, `body_in_receipt: false`\n\nNegative cases are part of the Shape rather than an appendix because they define the claim boundary. `EXPECTED_NEGATIVE_CASES` names fake commit, fake cap, fake pytest node, and unchecked-pytest-pass classes; the focused tests assert the first three directly against fixture mutation and assert unchecked pass rejection against `CLOSEOUT_PYTEST_PASS_STATUS_NOT_CHECKED`. The runtime-bundle result record observes all four classes, so a cold reader can distinguish \"the span ran\" from \"the pass claim had exit-zero evidence.\"\n\nThe source-body route is deliberately narrow. The exported bundle copies exactly `system/lib/agent_experience_diagnostics.py` to `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle/source_modules/system/lib/agent_experience_diagnostics.py`; the manifest carries the matching digest, `1703` lines, required anchors `Agent Experience Grand Rounds` and completion, and `body_in_receipt: false`. Result records carry refs, hashes, counts, verdicts, and scope boundaries only. They do not carry copied body text, private root paths, model-output data, account or browser state, live work log authority, live work log authority, source-file changes, launch-scope decision, or whole-system completion truth.\n\n###### Technical Mechanism\n\nThe fixture validator is centered on `evaluate()` in `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py`. It loads `closeout_claims.json` and `fixture_ledger.json`, copies `public_fixture_repo` into a temporary repository, initializes and commits that copy with real `git` subprocesses, and records the resulting HEAD through `git rev-parse HEAD`. Commit claims pass only when the claim ref is `HEAD` or the actual subprocess-observed HEAD; fixture cap claims pass only when the cap id appears in the fixture ledger.\n\nFor pytest claims, `evaluate()` runs `python -m pytest <nodeid> -q` inside the temporary public fixture repo. A span can be counted as observed when the nodeid runs, but a pass claim is accepted only when `pass_status_checked` is true and the pytest subprocess exits zero. The same source file carries `evaluate_negative_case()`, which mutates one claim row at a time to force the fake commit, fake cap, fake pytest node, and unchecked pass paths. The expected error codes are declared in `EXPECTED_NEGATIVE_CASES`, so the negative floor is source-bound rather than inferred from prose.\n\nThe exported-bundle path uses `run_agent_closeout_bundle()` against `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle`. That path reuses the same evaluator while making the source-module manifest floor mandatory: the copied diagnostic body must match the manifest digest, include required anchors, and remain absent from result records. `AUTHORITY_CEILING` then records the scope boundaries in machine-readable form: no live repo mutation, no launch-scope decision, no work log closure, and no pytest-pass claim without exit-zero evidence.\n\n###### Named Proof Consumers\n- `microcosm_core.organs.agent_closeout_faithfulness_audit.run` is the first-wave fixture consumer. It materializes the public fixture repo, ledger, completion-claim rows, semantic negative cases, validation result record, board, and sign-off result record.\n- `microcosm_core.organs.agent_closeout_faithfulness_audit.run_agent_closeout_bundle` is the exported-bundle consumer. It validates the source-open bundle and the copied diagnostic body manifest while preserving `body_in_receipt: false`.\n- `microcosm_core.organs.agent_closeout_faithfulness_audit.evaluate` is the subprocess witness consumer. It checks commit, cap, and pytest-span claims against actual fixture evidence instead of accepting completion prose.\n- `microcosm_core.organs.agent_closeout_faithfulness_audit.evaluate_negative_case` is the falsification consumer for fake commit, fake cap, fake nodeid, and unchecked pytest-pass overclaims.\n- `tests/test_agent_closeout_faithfulness_audit.py` is the focused regression consumer. It asserts the public subprocess witness path, fake-claim rejections, semantic negative-case evaluation, exported-bundle metadata-only source manifest behavior, digest-mismatch rejection, and pytest-capable interpreter selection.\n\n###### First Commands\n\nFrom `microcosm-substrate`:\n\nValidate the exported bundle when the question is whether the public source-open copy still matches the declared source body:\n\n###### What It Proves\n\nThis component checks completion claims against public fixture evidence instead of trusting completion prose. A positive run proves four things:\n- the fixture repo exists and the referenced commit object is visible to real `git` subprocesses;\n- fixture `HEAD` is checked by subprocess evidence rather than by prose;\n- the declared `pytest` span actually ran;\n- work log style cap claims only point at rows present in the fixture ledger.\n\nThe useful distinction is narrow: `verified` means the referenced evidence object exists or the pytest span ran. A claim that a pytest span passed is valid only when the result record checked an explicit exit-zero status. That is the reader value of this component: it separates \"I referenced a test\" from \"I proved the test passed.\"\n\n###### Prior Art Grounding\n\nThis component is grounded in claim-verification and reproducibility patterns rather than in trust of summary prose. [FEVER](https://arxiv.org/abs/1803.05355) popularized fact extraction and verification as a separate task over cited evidence, while [TruthfulQA](https://arxiv.org/abs/2109.07958) made explicit that fluent model answers can be misleading without a truthfulness check. The artifact-review tradition also motivates separating a claim, its artifact, and its validation evidence instead of treating a report as self-validating.\n\nMicrocosm borrows that verification posture for agent completion: commit refs, work log refs, pytest spans, subprocess witnesses, and pass-status checks must line up before completion language is admitted. It does not certify all live completion prose or turn a referenced test into a passed test without exit-zero evidence.\n\n###### Source-Backed System\n\nThe source-open body import is a single exact source body:\n- `system/lib/agent_experience_diagnostics.py`\n\nThe copied target is:\n- `examples/agent_closeout_faithfulness_audit/exported_agent_closeout_faithfulness_audit_bundle/source_modules/system/lib/agent_experience_diagnostics.py`\n\nThe manifest records:\n- `source_to_target_relation: exact_copy`;\n- `body_copied: true`;\n- `body_in_receipt: false`;\n- a 1703-line body;\n- matching source and target sha256 digests;\n- required anchors `Agent Experience Grand Rounds` and completion.\n\nResult records carry refs, hashes, counts, verdicts, and scope boundaries only.\n\n###### Result record Floor\n\nA passing fixture run emits:\n- `agent_closeout_faithfulness_audit_result.json`\n- `agent_closeout_faithfulness_audit_board.json`\n- `agent_closeout_faithfulness_audit_validation_receipt.json`\n- `agent_closeout_faithfulness_audit_fixture_acceptance.json`\n\nA passing runtime-bundle run emits:\n- `exported_agent_closeout_faithfulness_audit_bundle_validation_result.json`\n- `agent_closeout_faithfulness_audit_board.json`\n- `agent_closeout_faithfulness_audit_validation_receipt.json`\n\nThe first-wave result must show:\n- `status: pass`;\n- `real_substrate_disposition: real_substrate_capsule`;\n- `body_in_receipt: false`;\n- `source_module_manifest.status: pass`;\n- `all_expected_digests_matched: true`;\n- `all_required_anchors_present: true`;\n- `secret_exclusion_scan.blocking_hit_count: 0`;\n- `receipt_body_scan.status: pass`.\n\nThe exercise floor is:\n- three verified completion claims;\n- six git subprocess witnesses;\n- one pytest subprocess witness;\n- one checked pass status;\n- one ran pytest span;\n- `head_verified_by_subprocess: true`.\n\n###### Negative Cases\n\nThe current negative-case floor is:\n- `fake_commit_claim` -> `CLOSEOUT_FAKE_COMMIT_CLAIM`\n- `fake_cap_claim` -> `CLOSEOUT_FAKE_CAP_CLAIM`\n- `fake_test_claim` -> `CLOSEOUT_FAKE_TEST_CLAIM`\n- `unchecked_pass_claim` -> `CLOSEOUT_PYTEST_PASS_STATUS_NOT_CHECKED`\n\nThese cases are the claim-language guardrail. If they stop appearing in observed negative cases, the component no longer proves that public completion result records reject fabricated commit, cap, test-node, or unchecked-pytest-pass claims.\n\n###### Evidence Binding\n- JSON bundle authority: `core/paper_module_capsules.json#paper_module.agent_closeout_faithfulness_audit`.\n- Mechanism source: `core/mechanism_sources.json#mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims`.\n- Component atlas edge: `core/organ_atlas.json#agent_closeout_faithfulness_audit`.\n- Runtime source: `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py`.\n- First command: PYTHONPATH=src python3 -m microcosm_core.components.agent_completion_faithfulness_audit run --input fixtures/first_wave/agent_completion_faithfulness_audit/input --out result records/first_wave/agent_completion_faithfulness_audit --sign-off-out result records/sign-off/first_wave/agent_completion_faithfulness_audit_fixture_acceptance.json.\n\n###### Reader Evidence Routing\n- Start with the Route Card and JSON Bundle Binding to identify the component, standard, source row, runner, fixture input, exported bundle, and result record surfaces.\n- For behavior questions, read `src/microcosm_core/organs/agent_closeout_faithfulness_audit.py` and the focused tests before trusting this prose.\n- For source-open body questions, read the exported bundle's `source_module_manifest.json`; the manifest is the evidence for exact-copy relation, digest match, anchor match, and metadata-only result record posture.\n- For claim-language questions, read the Negative Cases and Result record Expectations together; the pass path only matters if the overclaim cases still fail.\n- Treat generated component Markdown, atlas cards, graphs, health files, and runtime result records as navigation or validation projections. They do not become source authority for broader completion truth.\n\n###### Validation Result record Path\n\nThe focused proof consumer is `tests/test_agent_closeout_faithfulness_audit.py`. A passing result record has to show that completion language was checked against public fixture evidence: referenced commit objects, fixture work log rows, `git` subprocess witnesses, `pytest` subprocess witnesses, explicit pass-status checks, negative completion cases, and the exported source-module manifest. It must not rely on completion prose as its own proof.\n\n```text\n./repo-pytest tests/test_agent_closeout_faithfulness_audit.py -q --basetemp=/tmp/microcosm_agent_closeout_faithfulness_audit_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nFor the focused test, the result record boundary is the asserted shape: three verified completion claims, at least five `git` subprocess witnesses, one `pytest` subprocess witness, one ran pytest span, one checked pass-status row, `head_verified_by_subprocess=true`, source-module digest and required-anchor matches, metadata-only result record posture, and semantic observation of the four negative completion classes. For the corpus check, the result record only proves bundle/instance parity; it does not close live work log work, mutate live work log state, certify arbitrary completion prose, prove launch-scope decision, or turn a referenced pytest span into a passed span without exit-zero evidence.\n\n###### Validation Anchors\n\nFocused coverage lives in `tests/test_agent_closeout_faithfulness_audit.py` and checks:\n- public git and pytest subprocess witness behavior;\n- fake commit rejection;\n- unchecked pytest pass rejection;\n- fake cap claim rejection;\n- fake pytest node id rejection;\n- metadata-only source manifest behavior in the exported bundle;\n- source-module digest mismatch rejection;\n- pytest-capable Python selection.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that completion claims are checked against referenced commit objects, fixture work log rows, pytest subprocess witnesses, explicit pass-status checks, negative completion cases, a copied diagnostic body, source-module manifest digest equality, metadata-only result record posture, and validation result records.\n\nThis module may not claim live completion truth, live work log mutation, live work log mutation, live Git mutation, external model access, source-file changes, launch-scope decision, publishing-scope decision, deployment posture, all-agent faithfulness, formal-result correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope limit\n\nThis component is a public fixture witness for completion evidence. It does not:\n- prove arbitrary live commits landed;\n- close or mutate work log work;\n- mutate Git state;\n- include launch operations;\n- use external model services;\n- certify all completion prose;\n- turn a ran pytest span into a passed span without an explicit exit-zero check.\n\nIts useful claim is narrower: over the supplied fixture repo, fixture ledger, completion claims, and copied diagnostic body, the component proves that completion evidence references are checked and that specific overclaims are refused.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThat mechanism is active in `core/mechanism_sources.json` and says the component validates public completion evidence claims through fixture commit objects, fixture HEAD evidence, `git` subprocesses, `pytest` span execution, explicit pass-status checks, fixture-ledger cap rows, copied source-module digests, and stable overclaim negative cases before writing metadata-only result records.\n\nThe doctrine edge is narrow and constructive. The JSON instance reports `concept.agent_reliability_and_safety_validator_bundle`, principles `P-1` and `P-2`, axiom `AX-1`, and dependency `paper_module.durable_agent_work_landing_replay`; those edges explain why this module is a validator-bundle proof instrument rather than a general completion truth oracle. The generated Mermaid and Atlas edges are navigation result records for that binding, not launch or correctness authority.\n\nBounded Autonomy Campaign Packet Drafts proposed work from coverage gaps and proves it cannot repair or rewrite the code itself. 4/5 Runs real tools\n\nDoes Turns synthetic coverage gaps into a draft candidate packet in a subprocess and records the boundary that it proposes work but cannot repair itself or write source.\n\nScope limit self-proposal campaign packet only; no self-repair or unsupervised source-file changes\n\nRun\n\n```text\nmicrocosm bounded-autonomy-campaign-packet run --input fixtures/first_wave/bounded_autonomy_campaign_packet/input --out receipts/first_wave/bounded_autonomy_campaign_packet\n```\n\nEvidence External tool run evidence 4/5 Real runtime result\n\nai-safety agent-evaluation red-teaming\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/bounded_autonomy_campaign_packet.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Bounded Autonomy Campaign Packet\n\nExplains component [Bounded Autonomy Campaign Packet](docs/components.html#component-bounded_autonomy_campaign_packet) mechanism [validates public bounded autonomy campaign packet](docs/rules-and-ideas.html#lattice-mechanism-mechanism-bounded-autonomy-campaign-packet-validates-public-bounded-autonomy-campaign-packet) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n\n`bounded_autonomy_campaign_packet` is a Crown Jewel import component with real runnable system and a strict public scope limit. It consumes synthetic public fixtures, copied source source bodies, and source manifests that verify sha256 digests, line counts, required anchors, secret-exclusion status, and result record body omission.\n\nWhat it proves: self-proposal campaign packet only; no self-repair or unsupervised source-file changes.\n\n###### Purpose\n\nAn agent can usefully notice its own coverage gaps and draft a plan to close them. The danger is that \"draft a plan\" quietly becomes \"do the work\": a proposal grows a write surface, and a system that was meant to suggest starts mutating its own source unsupervised. This component exists to keep those two steps apart. It answers one question: can an agent emit a draft campaign proposal from real coverage gaps without that proposal carrying any authority to act on them?\n\nThe design choice that makes this interesting is where the candidate count comes from. The component does not invent a plausible-looking list of work. It runs a real source campaign builder in read-only mode (`build_standard_skill_pairing_campaign.py --check --report`) and accepts its witness only when the builder reports candidate targets and leaves `wrote_packet` unset. The proposal is therefore derived from a surface that could do real work, observed in a mode where it did not. Each drafted candidate is then stamped `write_surface: none`, `source_mutation_authorized: false`, and `requires_human_review: true`, so the act of proposing can never be mistaken for the act of authorising.\n\nTwo refusals guard the boundary. A campaign policy that lists `write_source` among its allowed actions is rejected outright, before any candidate is drafted. And a campaign digest that already appears in the failed-campaign ledger more than once is refused, so a plan that has already failed cannot be quietly re-proposed under a fresh wrapper. Both refusals are checked by mutating the fixture and confirming the expected error code fires, not by trusting a declared label.\n\n###### Shape\n\nSource refs\n\nRead-only builder witness check --report `build_standard_skill_pairing_campaign.py` Diagram source\n\n```text\nflowchart TD Inputs[\"Public synthetic inputs coverage_gaps, campaign_policy, failed_campaign_digests\"] PolicyGate{\"campaign_policy allows write_source?\"} Witness[\"Read-only builder witness build_standard_skill_pairing_campaign.py --check --report\"] WitnessGate{\"reports candidate targets and wrote_packet unset?\"} Draft[\"Draft candidate packet write_surface: none, requires_human_review, source_mutation: false\"] DigestGate{\"failed digest repeated?\"} Refuse[\"Refuse SOURCE_WRITE_FORBIDDEN / REPEATED_FAILED_DIGEST / witness blocked\"] Result records[\"metadata-only result records refs, digests, stdout/stderr hashes; builder output bodies excluded\"] Ceiling[\"Scope limit no self-repair, source-file changes, providers, launch, or public sharing\"] Inputs --> PolicyGate PolicyGate -- \"yes\" --> Refuse PolicyGate -- \"no\" --> Witness Witness --> WitnessGate WitnessGate -- \"no\" --> Refuse WitnessGate -- \"yes\" --> Draft Draft --> DigestGate DigestGate -- \"yes\" --> Refuse DigestGate -- \"no\" --> Result records Refuse --> Result records Result records --> Ceiling\n```\n\nThis diagram is a reader aid. The machine graph remains the generated `paper_module.bounded_autonomy_campaign_packet.mermaid` projection derived from the JSON source record.\n\n###### Technical Mechanism\n\nThe runtime is intentionally narrower than \"autonomous repair.\" `SPEC` declares the four required public inputs, the source-module manifest, the expected negative cases, and an `AUTHORITY_CEILING` in which self-repair, unsupervised source-file changes, source-write packets, external model access, and launch are all false. `run()` and `run_bounded_autonomy_bundle()` then route both the fixture and exported bundle through `run_crown_jewel_organ`, so the same evaluator, source-manifest checks, metadata-only result record policy, and semantic negative-case evaluator guard both command surfaces.\n\nThe positive lane is witnessed by `_campaign_builder_witness()`, not by a fictional campaign row. It invokes `tools/meta/factory/build_standard_skill_pairing_campaign.py --check --report --max-targets <n>` from the source root, then accepts the witness only when the builder returns `standard_skill_pairing_campaign_summary`, reports at least one candidate target, emits a `source_digest`, and leaves `wrote_packet` unset. This makes the campaign packet a read-only proposal derived from a real builder surface; the result record stores return code, digest fields, and stdout/stderr hashes, but keeps builder output bodies out of the result record.\n\n`_candidate_packet_subprocess()` converts the witnessed target count into draft candidate rows. Each candidate is tied to one fixture coverage gap when available, carries the builder ref and builder source digest, sets `write_surface: none`, requires human review, and records `source_mutation_authorized: false`. `evaluate()` then applies the policy checks: `write_source` in `campaign_policy.allowed_actions` is a hard refusal; blocked builder witness or empty candidate packet is a hard refusal; any candidate that authorizes source-file changes or writes to the `source` surface is also refused.\n\nThe negative cases are semantic mutations of the input, not trusted labels. `evaluate_negative_case()` copies the required inputs into a temporary directory and mutates the relevant file: `source_write_campaign_packet` appends `write_source` to `campaign_policy.allowed_actions`, while `repeated_failed_campaign_digest` rewrites the failed-digest ledger to contain a duplicate digest. The component passes its own evidence floor only when these mutations produce `BOUNDED_AUTONOMY_SOURCE_WRITE_FORBIDDEN` and `BOUNDED_AUTONOMY_REPEATED_FAILED_DIGEST`; stale declared error-code labels cannot satisfy the proof consumer.\n\n###### Reader Evidence Routing\n\nThe primary evidence for this module is the fixture result record and the exported-bundle result record, which demonstrate the bounded campaign packet behavior under synthetic public inputs. Source-module manifests and digest checks are evidence for copied body provenance. This page is an explanation of those sources; the underlying JSON and test outputs are the authority.\n\n###### Prior Art Grounding\n\nThis component borrows from AI risk-management, policy gating, and controlled workflow-automation patterns. Useful anchors include:\n- NIST's [AI Risk Management Framework](https://www.nist.gov/itl/ai-risk-management-framework), which frames AI work in terms of governance, mapping, measuring, and managing risk rather than assuming autonomy is inherently authorized.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), as a policy-engine pattern for deciding whether a proposed action may proceed.\n- GitHub Actions [workflow syntax](https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax), as a widely used automation surface where jobs, permissions, and concurrency behavior are declared before execution.\n\nMicrocosm borrows the governed-campaign and preflight-gate shape, but keeps the component to draft self-proposal packets over synthetic public coverage gaps. It does not self-repair, change source files unsupervised, use external model services, or include launch operations.\n\nHow to run it:\n\n```text\nmicrocosm bounded-autonomy-campaign-packet run --input fixtures/first_wave/bounded_autonomy_campaign_packet/input --out receipts/first_wave/bounded_autonomy_campaign_packet\n```\n\nRuntime bundle route:\n\n```text\npython -m microcosm_core.organs.bounded_autonomy_campaign_packet run-bounded-autonomy-bundle --input examples/bounded_autonomy_campaign_packet/exported_bounded_autonomy_campaign_packet_bundle --out receipts/runtime_shell/demo_project/organs/bounded_autonomy_campaign_packet\n```\n\n###### Validation Result record Path\n\nIf the fixture or bundle reports source-module digest drift, route that through `microcosm_exact_copy_refresh`; this page is source-linked only for copied source bodies. If the full projection check fails because another active session holds shared lattice outputs, treat that as unrelated contention and use the corpus check as the local gate for this module.\n\nNegative cases covered by the fixture manifest: repeated_failed_campaign_digest, source_write_campaign_packet.\n\nSource provenance is anchored by `examples/bounded_autonomy_campaign_packet/exported_bounded_autonomy_campaign_packet_bundle/source_module_manifest.json` and result records carry refs, digests, counts, verdicts, and scope boundaries only.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component emits a draft self-proposal from public synthetic coverage gaps and refuses source-write or repeated-failure packets. It does not self-repair, change source files unsupervised, use external model services, include launch operations or public sharing, or widen the proof boundary beyond the copied source bodies, synthetic fixtures, source manifests, negative cases, and validation result records.\n\n###### Scope limit\n\nThis paper module demonstrates a bounded-autonomy fixture that builds a draft campaign packet and refuses unsafe packets under public synthetic inputs. A diagram view and atlas card are generated for this module.\n\nIt cannot claim autonomous repair, unsupervised source-file changes, external model access, launch-scope decision, publishing-scope decision, production campaign safety, private-system equivalence, or whole-system correctness.\n\nSecondary Runtime Source Bundle Runs eight trace, graph, and market engines on test rows without fetching live markets. 5/5\n\nDoes This bundle imports a second Set 7 runtime slice as public runnable system. It checks agent trace view-model trust classes, lane-progress state normalization, graph-lens focus roles, graph projection summaries, observe-only cartography rendering, stockgrid payload terms, Polymarket CLOB microstructure, and four-lens market scanning over synthetic public fixtures without exporting sessions, fetching live markets, or giving trading decisions.\n\nScope limit verified source body import only; no browser/session export, wallet authority, live market data, investment-related actions, external model access, source-file changes, private-system equivalence, public sharing, launch, semantic-truth, or whole-system correctness claim\n\nRun\n\n```text\nmicrocosm batch7-secondary-runtime-capsule run --input fixtures/first_wave/batch7_secondary_runtime_capsule/input --out receipts/first_wave/batch7_secondary_runtime_capsule --acceptance-out receipts/acceptance/first_wave/batch7_secondary_runtime_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_secondary_runtime_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 7 Secondary Runtime Bundle\n\nExplains component [Secondary Runtime Source Bundle](docs/components.html#component-batch7_secondary_runtime_capsule) mechanism [validates public secondary runtime bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-secondary-runtime-capsule-validates-public-secondary-runtime-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\n`batch7_secondary_runtime_capsule` imports a second Set-7 runtime slice into Microcosm. It exact-copies runtime view-model, lane-progress, graph-lens, graph-projection, cartography, stockgrid, and Polymarket source bodies into a public bundle, runs the bounded witness path, and exercises the Python market/numeric cores against synthetic public fixtures.\n\n###### Imported Source Bodies\n- `system/server/ui/src/components/world/agentTraceViewModel.ts`\n- `system/server/ui/src/components/world/laneProgress.ts`\n- `system/server/ui/src/components/graph/universalGraphLens.ts`\n- `system/server/ui/src/components/graph/graphProjection.ts`\n- `system/server/ui/src/lib/capCartographyShadowRender.ts`\n- their focused Vitest witnesses where public-safe\n- `tools/stockgrid/stockgrid.py`\n- `tools/polymarket/clob_snapshot.py`\n- `tools/polymarket/score.py`\n- `tools/polymarket/models.py`\n\n###### Purpose\n\nThis module is the reader-facing instrument for the accepted `batch7_secondary_runtime_capsule` component. Its source authority is the JSON source record in `core/paper_module_capsules.json`; this Markdown explains what a cold reader may trust from the public secondary-runtime fixture and what remains out of scope.\n\nThe component exists to answer one question: do these copied frontend and market bodies still behave the way their original code claims to, when run in isolation over synthetic inputs? It copies eight slices into a bundle, then exercises each one against a small fixture and re-checks the exact behaviour the original author relied on. The interesting part is not that the code runs, but that each engine is paired with a planted regression. The component mutates a single token in the copied body, or feeds an adversarial input, and asserts that the behaviour breaks in the expected way. A check that only passes on good input proves little; a check that also fails on the right bad input is evidence the behaviour is real.\n\nSeveral of these guards encode a concrete bug that was found in production. The Polymarket order-book reader documents a probe from 2026-05-12: the API can return bids floor-first and asks ceiling-first, so a naive `bids[0]` / `asks[0]` reader silently inverts best-bid and best-ask. The body derives best prices by numeric extrema instead, and the `polymarket_sorted_book_trap` case feeds a deliberately mis-sorted book to confirm the extrema rule still holds. The stockgrid momentum primitive refuses an impossible -100% daily change rather than returning a misleading number. The graph projection drops self-edges so a collapsed cluster does not draw an arrow to itself. The scope stays narrow on purpose: this is local body import and synthetic-fixture witness evidence, not live market access, wallet authority, browser export, or investment-related actions.\n\n###### Shape\n\nSource refs\n\nVitest witness `world/graph/cartography tests` Diagram source\n\n```text\nflowchart TD bundle[\"Exported bundle copied bodies + source digest anchors\"] witness[\"Vitest witness world/graph/cartography tests\"] subgraph Engines[\"Eight fixture engines\"] ui[\"Trace view-model and lane progress\"] graph[\"Graph lens and graph projection\"] carto[\"Cartography observe-only render\"] market[\"Stockgrid + Polymarket CLOB and four-lens scoring\"] end subgraph Negatives[\"Planted regressions\"] invert[\"Mis-sorted book must still find extrema\"] momentum[\"-100% change must be refused\"] selfedge[\"Self-edge must be dropped\"] resolved[\"Resolved market must gate NEWSBREAKER\"] end result records[\"metadata-only result records status, digests, anchor checks\"] ceiling[\"scope limit\"] bundle --> witness witness --> ui bundle --> graph bundle --> carto bundle --> market ui --> Negatives graph --> Negatives carto --> Negatives market --> Negatives Negatives --> result records result records --> ceiling\n```\n\n###### Reader Evidence Routing\n\nStart from the component source when checking behavior:\n- `EXPECTED_ENGINES` names the eight fixture engines for trace view-models, lane progress, graph lenses, graph projection, cartography, stockgrid, CLOB microstructure, and Polymarket scoring.\n- `EXPECTED_NEGATIVE_CASES` names the planted regressions for raw-authority omission, unknown lane state, hidden descendants, self edges, observe-only cartography, extreme stock momentum, sorted-book traps, and resolved-market gating.\n- `AUTHORITY_CEILING` keeps launch, public sharing, provider/model dispatch, browser or wallet access, source-file changes, investment-related actions, semantic-truth authority, and test-completeness proof false.\n- `run`, `run_batch7_secondary_bundle`, and `result_card` expose the reproducible command and metadata-only summary.\n\n###### What the engines check\n\nEach engine reads a copied body and asserts a specific, checkable behaviour. The four with the clearest stakes:\n- **Polymarket CLOB microstructure.** `compute_best_prices` derives the best bid as the maximum bid price and the best ask as the minimum ask price, never from the first row of each side. This guards a real failure documented in the source: the API can return bids floor-first and asks ceiling-first, which inverts a naive `bids[0]` / `asks[0]` reader. The `polymarket_sorted_book_trap` case feeds a mis-sorted book and confirms the chosen best bid (0.42) and ask (0.53) are not the first entries, then checks the spread and that depth imbalance stays in `[-1, 1]`.\n- **Stockgrid momentum.** `_daily_log_momentum_bps` converts a percentage change into a daily log-return in basis points, but returns nothing when the ratio is at or below -0.999999. A claimed -100% daily change has no finite log return, so the primitive refuses it rather than emitting a misleading value. The `stockgrid_extreme_momentum` case asserts that refusal.\n- **Graph projection.** `projectGraphForRender` groups nodes into per-lane, per-wave summary clusters and rewrites edges between clusters. It drops any edge whose source and target land in the same cluster, so a collapsed cluster never draws an arrow to itself. The `graph_projection_self_edge` case removes the `sourceId === targetId` guard from the copied body and confirms the self-edge would otherwise survive.\n- **Polymarket four-lens scoring.** `calculate_lenses` zeroes the NEWSBREAKER lens for any market that is resolved, low-volume, low-uncertainty, or an outlier in velocity. The fixture scores one open and one resolved synthetic market and asserts the resolved one scores zero on NEWSBREAKER while the open one does not.\n\nThe remaining engines cover the trace view-model trust taxonomy (seven labels including `missing` and `fallback`, with an explicit \"raw provider JSONL is unavailable\" path), lane-progress state normalisation (an unknown state falls back to `idle`, not an invented status), the graph lens (collapsing a parent keeps the parent visible but hides its descendants), and the cartography render (a fixed set of mutating actions stays blocked, so the surface observes without creating or editing). Each negative case is run by mutating one token in the copied body or supplying an adversarial input, then checking the engine reports `blocked`. The result records record status, digests, and anchor matches only; copied bodies and command output are never inlined.\n\n###### Prior Art Grounding\n\nThe component borrows from MVVM/read-model UI architecture, graph visualization, and market-data board patterns: view models shape raw state for views, graph projections make relationships inspectable, and market rows must preserve provider identity and missingness. Useful anchors include:\n- Microsoft's [MVVM guidance](https://learn.microsoft.com/en-us/dotnet/architecture/maui/mvvm), where view models encapsulate presentation state while separating UI from underlying model logic.\n- [D3 force layouts](https://github.com/d3/d3-force) as a common graph visualization family for networks and hierarchies.\n- The CFTC's [prediction markets explainer](https://www.cftc.gov/LearnandProtect/PredictionMarkets), as a boundary reference for event-market data and consumer caution.\n\nMicrocosm borrows the view-model, graph-projection, and market-diagnostic shapes, but runs them only over synthetic runtime packets and synthetic market rows. It is not browser/session export, live market data, trading decisions, or proof that frontend projections are complete.\n\n###### Validation Result record Path\n\nReader-verifiable fixture command, run from `microcosm-substrate/`:\n\nFocused test result record, run from the repository root:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_batch7_secondary_runtime_capsule.py \\\n  -q --basetemp /tmp/microcosm-batch7-secondary-runtime-tests\n```\n\nThe fixture run writes `receipts/first_wave/batch7_secondary_runtime_capsule/batch7_secondary_runtime_capsule_result.json`, `receipts/first_wave/batch7_secondary_runtime_capsule/batch7_secondary_runtime_capsule_validation_receipt.json`, and `receipts/first_wave/batch7_secondary_runtime_capsule/batch7_secondary_runtime_capsule_board.json`; the sign-off file records fixture sign-off. The exported-bundle re-run uses the `run-batch7-secondary-bundle` action over `exported_batch7_secondary_runtime_capsule_bundle`.\n\nThis result record path is public fixture evidence only. It does not export browser or account sessions, fetch live market data, provide investment-related actions, complete UI/ranking coverage, include launch operations or public sharing, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis bundle can claim fixture-bound public source-body import evidence and secondary runtime/market witness result records. It cannot authorize browser/session export, wallet authority, live market data, investment-related actions, external model access, source-file changes, launch, public sharing, private-system equivalence, semantic truth, complete UI/ranking coverage, or whole-system correctness.\n\n#### Source refs\n\nBuilt from public source refs, with each input path recorded for provenance.\n\nEach component has a stable public source path with commands, source links, and its supported scope.",
    "byte_count": 309097,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:area-research",
   "relative_href": "docs/area-research.html",
   "path": "docs/area-research.html",
   "title": "Research & science",
   "nav_group": "Areas",
   "nav_label": "Research & science",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [
     "research_replication_rubric_artifact_replay",
     "spatial_world_model_counterfactual_simulation_replay",
     "materials_chemistry_closed_loop_lab_safety_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine",
     "batch12_market_dashboard_read_model_capsule",
     "batch12_prediction_market_board_capsule"
    ],
    "family_id": "research_and_science_replays"
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Area \u00b7 8 components\n\n### Research & science\n\nReplays that stand in for scientific and forecasting workflows, run over synthetic fixtures.\n\n#### Components\n\nResearch Replication Rubric Artifact Replay Audits whether a paper-replication claim carries the full evidence trail. 3/5\n\nDoes It checks whether a claim that an AI agent \"replicated a research paper\" comes with the paper trail real replication would leave behind. It re-runs nothing; instead it confirms the bundle names every required piece of evidence: a breakdown of the paper's contributions, a grading rubric, the list of allowed public inputs, a from-scratch repo scaffold, an experiment plan, the metric scripts, a roster of declared file-hashes for the outputs plus hashes that all stay inside that roster, a grader report, a capped compute/runtime budget, an ablation diff, a failure list, and a cold-rerun result record. It also catches eight ways a claim can cheat: reusing the original authors' code, leaking a hidden rubric, calling a run a \"success\" when only a write-up backs it, asserting a benchmark claims, leaking a private paper or dataset body, using unbounded compute, grading only the final answer, or pointing at a file-hash that was never declared. The work runs on two made-up sample papers (one machine-learning method, one computational-science study), and the generated result record shows which of the eight cheats each test case triggered, rather than taking \"it was replicated\" on trust.\n\nScope limit It validates the shape and presence of synthetic replay metadata and result record references only - it does not run any experiment, metric script, or rerun, excludes any claim that a paper was actually replicated, that a benchmark claims was achieved, or that the underlying science is correct, and it never calls providers, exposes private paper/data bodies, or authorizes public sharing or launch.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.research_replication_rubric_artifact_replay run --input fixtures/first_wave/research_replication_rubric_artifact_replay/input --out receipts/first_wave/research_replication_rubric_artifact_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Materials Chemistry Closed Loop Lab Safety Replay](docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay), [Mechanistic Interpretability Circuit Attribution Replay](docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay), [Prediction Oracle Reconciliation](docs/components.html#component-prediction_oracle_reconciliation), [Spatial World Model Counterfactual Simulation Replay](docs/components.html#component-spatial_world_model_counterfactual_simulation_replay), [Cold Evaluation Honesty Bundle](docs/components.html#component-batch10_cold_eval_honesty_capsule)\n\nresearch-workflows forecasting provider operations\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/research_replication_rubric_artifact_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Research Replication Rubric Artifact Replay\n\nExplains component [Research Replication Rubric Artifact Replay](docs/components.html#component-research_replication_rubric_artifact_replay) mechanism [validates public research replication replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-research-replication-rubric-artifact-replay-validates-public-research-replication-replay) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n###### Abstract\n\n`research_replication_rubric_artifact_replay` is a public Microcosm component that turns \"an agent replicated a paper\" into a replayable evidence contract. It does not rerun a real paper, use external model services, certify benchmark performance, or grant publishing-scope decision. It checks whether a public replay bundle exposes the objects a replication claim must cite before its authority can rise: contribution decomposition refs, rubric-tree refs, allowed input refs, scratch-scaffold refs, experiment-DAG refs, metric-script refs, declared artifact hashes, grader reports, runtime budgets, ablation diffs, failure taxonomies, cold-rerun refs, public execution-trace spans, and source-module digests.\n\nThe technical result is an R3 local artifact replay: one public metric script is executed over one allowed public input table, the produced output is compared with a declared output artifact, and the declared hash file is checked against that artifact. A successful run says the replay packet is structurally accountable, digest-bound, redaction-aware, and negative-case tested. It does not say that a real paper was independently replicated.\n\n###### Purpose\n\nThe single question this component answers is narrow: before an agent is allowed to say it replicated a paper, can the claim be forced into a bundle that a cold runtime can check without trusting any prose? The interesting move is that the component refuses to treat \"replicated\" as one fact. It pulls the claim apart into the objects a real replication would have left behind, a contribution decomposition, a grading rubric tree, the allowed public inputs, an experiment DAG, metric scripts, declared artifact hashes, a grader report, a runtime budget, an ablation diff, a failure taxonomy, and a cold-rerun result record, and it asks for each one by name.\n\nWhat keeps this from being a checklist linter is the small executable core. The exported bundle does not just assert that an artifact hash exists. The runtime reads one public metric script, runs it over one allowed public input table, produces an output, and then checks that output against both the declared output artifact and the declared hash file. A replay row can name all the right refs and still fail here if the numbers do not reproduce. The negative-case fixtures attack exactly the gap a plausible fake would exploit: report-only success, benchmark-performance language, final-answer-only grading, undeclared hashes, and reuse of the original author's code.\n\nThe deliberately modest part is the subject matter. The two paper bundles are public synthetic examples, and the metric is a single sum over a small table. The component's value is the boundary, not the science. It does not run a real paper, call a provider, search compute without bound, or grant any launch or publishing-scope decision. It only makes a replication claim accountable enough that an independent reader can see where the evidence stops.\n\n###### Telos\n\nResearch-agent demos often collapse four objects into one sentence: the paper, the runnable artifact, the grading rubric, and the evidence that an independent rerun happened. This component keeps those objects separate. A replay is admissible only when it names each evidence object and when the local runtime can check the public artifact replay without touching private paper bodies, non-public data bodies, hidden rubrics, model-output data, original-author code bodies, or launch/publishing-scope decision.\n\nThe central bet is modest and technical: before any replication claim is made, the system can force the claim into a falsifiable bundle with declared hashes, bounded metric execution, metadata-only result records, and explicit scope boundaries.\n\n###### Mechanism\n\nThe mechanism row is `mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay`. It runs in `src/microcosm_core/organs/research_replication_rubric_artifact_replay.py` and is backed by the functions `run`, `run_replication_bundle`, `validate_source_module_imports`, `validate_projection_protocol`, `validate_replication_policy`, `validate_research_replays`, `_build_result`, `_freshness_basis`, and the constants `EXPECTED_NEGATIVE_CASES`, `AUTHORITY_CEILING`, `SOURCE_MODULE_MANIFEST_REF`, `BUNDLE_RESULT_NAME`, and `CARD_SCHEMA_VERSION`.\n\nThe runtime has two modes:\n- Fixture mode reads `fixtures/first_wave/research_replication_rubric_artifact_replay/input`, includes positive replay rows plus eight negative-case fixtures, and writes first-wave result, board, validation, and sign-off result records.\n- Exported-bundle mode reads `examples/research_replication_rubric_artifact_replay/exported_research_replication_bundle`, validates the public runtime example, checks the source-module manifest, and writes `receipts/runtime_shell/demo_project/organs/research_replication_rubric_artifact_replay/exported_research_replication_bundle_validation_result.json`.\n\nThe proof object is the tuple:\n1. `replication_policy.json`, which states required replay fields, rubric axes, and forbidden claims.\n2. `research_replays.json`, which supplies two synthetic paper bundles that cite public inputs, metrics, artifact hashes, grader reports, budgets, failures, and cold-rerun result records.\n3. `execution_artifacts/execution_artifact_manifest.json`, which authorizes the replayable artifact relation.\n4. `source_module_manifest.json`, which names copied source bodies and digest obligations.\n5. Runtime result records, which expose refs, counts, digests, trace spans, and scope boundaries without embedding private bodies.\n\n###### Metric-Script and Artifact Evidence\n\nThe exported bundle includes a small but real artifact-replay loop:\n\nRole Public artifact Input body `execution_artifacts/inputs/public_synthetic_table.json` Input hash `execution_artifacts/inputs/public_synthetic_table.sha256.json` Metric script `execution_artifacts/metrics/public_sum_metric.json` Metric hash `execution_artifacts/metrics/public_sum_metric.sha256.json` Declared output `execution_artifacts/artifacts/result_table.json` Declared output hash `execution_artifacts/artifacts/result_table.sha256.json`\n\n`run_replication_bundle` reads `execution_artifacts/execution_artifact_manifest.json`, executes the `public_sum_metric` over the allowed public input, compares the produced payload with `execution_artifacts/artifacts/result_table.json`, and verifies the declared hash in `execution_artifacts/artifacts/result_table.sha256.json`. The focused tests mutate each side of that relation, so the pass is not just a field-presence check.\n\n###### Pipeline\n\nSource refs\n\nJSON bundle authority `paper_module.research_replication_rubric_artifact_replay` Diagram source\n\n```text\nflowchart TD bundle[\"JSON bundle authority paper_module.research_replication_rubric_artifact_replay\"] policy[\"Replication policy required fields + rubric axes + forbidden claims\"] replay[\"Research replay rows 2 synthetic paper bundles\"] artifacts[\"Execution artifacts allowed input + metric spec + declared hash\"] metric[\"Local metric replay public_sum_metric over allowed input\"] source_manifest[\"Source-module manifest 3 source pattern slices + 1 exact-copy component body\"] trace[\"Public execution trace 2 metadata-only spans\"] negatives[\"Negative fixtures 8 overclaim cases\"] result records[\"metadata-only result records counts, refs, digests, scope boundaries\"] ceiling[\"Scope limit no replication-success or publishing-scope decision\"] bundle --> policy policy --> replay replay --> artifacts artifacts --> metric source_manifest --> result records metric --> result records trace --> result records negatives --> result records result records --> ceiling\n```\n\n###### Evidence Contract\n\nThe policy file requires fourteen replay fields: `paper_id`, `contribution_decomposition_ref`, `rubric_tree_ref`, `allowed_public_input_refs`, `scratch_repo_scaffold_ref`, `experiment_dag_ref`, `metric_script_refs`, `artifact_hash_refs`, `declared_artifact_hash_refs`, `grader_report_ref`, `cost_runtime_budget_ref`, `ablation_diff_ref`, `failure_taxonomy_ref`, and `cold_rerun_receipt_ref`.\n\nThe policy also requires eight rubric axes: contribution decomposition, artifact replay, experiment DAG, metric script, grader alignment, budget boundary, failure taxonomy, and cold rerun. A replay row can therefore pass only as a structured evidence packet, not as a final answer or narrative report.\n\nThe exported runtime result record currently records the following evidence floor: two synthetic paper bundles, two replay rows, two artifact replay rows, two cold-rerun refs, two public execution-trace spans, four copied source modules, no findings, no error codes, source-module status `pass`, and `input_mode: exported_research_replication_bundle`. The fixture result record records all eight negative cases as observed.\n\n###### Failure Modes and Guardrails\n\nThe expected negative cases are:\n- original-author code reuse\n- hidden-rubric leakage\n- report-only success\n- benchmark-performance overclaim\n- private paper or data body leakage\n- unbounded compute search\n- final-answer-only grading\n- undeclared artifact hash refs\n\nThe tests also cover source-module digest mismatch, local bundle body tamper, rehashing a swapped source module, wrong execution-artifact hashes, wrong artifact refs with matching hashes, report-only exported replays, metric perturbation, replay metric-script ref tamper, input perturbation, output body tamper, baked output swaps, and self-consistent input/output/hash rewrites. These cases make the component stronger than a field-presence linter: it rejects common ways to produce plausible but unaccountable replication prose.\n\n###### Test Matrix\n\nThe focused regression file `tests/test_research_replication_rubric_artifact_replay.py` carries the source proof for this module.\n\nClass Examples What it proves Real-good `test_research_replication_replay_observes_negative_cases`, `test_research_replication_exported_bundle_validates_runtime_shape`, `test_public_agent_execution_trace_refactor_builds_research_replay_spans` The fixture and exported bundle produce metadata-only result records, observe the required negative cases, execute the local metric replay, and build two public trace spans. Real-bad `test_research_replication_rejects_source_module_digest_mismatch`, `test_research_replication_rejects_bundle_local_source_module_body_tamper`, `test_research_replication_rejects_rehashed_source_module_body_swap`, `test_research_replication_rejects_metadata_only_bundle` The validator rejects broken source-module provenance, local bundle tamper, self-consistent source swaps, and metadata-only replay packets. Perturbation `test_research_replication_rejects_wrong_execution_artifact_hash`, `test_research_replication_rejects_wrong_artifact_ref_with_matching_hash`, `test_research_replication_rejects_metric_perturbation`, `test_research_replication_rejects_valid_metric_script_body_swap`, `test_research_replication_rejects_replay_metric_script_ref_tamper`, `test_research_replication_rejects_replay_allowed_input_ref_tamper`, `test_research_replication_rejects_input_perturbation`, `test_research_replication_rejects_output_artifact_body_tamper`, `test_research_replication_rejects_output_artifact_baked_swap`, `test_research_replication_rejects_self_consistent_input_output_hash_rewrite` Metric, input, output, hash, and replay-row mutations stay blocked even when the tampered bundle tries to preserve self-consistency. Label forgery `test_research_replication_ignores_forged_negative_case_labels`, `test_research_replication_negative_case_id_follows_semantics_not_filename`, `test_research_replication_exported_bundle_ignores_self_declared_pass_labels` Verdicts are derived from semantic replay-row fields, not filenames, declared status labels, or expected error-code labels. Result record economy `test_research_replication_receipts_are_public_relative_and_secret_excluded`, `test_research_replication_bundle_card_reuses_fresh_receipt`, `test_research_replication_bundle_card_rejects_stale_receipt_after_input_mutation` Result records remain public-relative and secret-excluded; command cards reuse fresh result records and reject stale ones after input mutation.\n\n###### Realness Rungs\n\nThis module's realness is intentionally runged:\n1. **Synthetic replay subjects.** The two paper bundles are public synthetic examples, one ML-method replay and one computational-science replay.\n2. **Real schema pressure.** The required fields, rubric axes, declared hash roster, source-module manifest, and non-public-state exclusions are enforced by runtime code and focused tests.\n3. **Local artifact replay.** The exported bundle executes a local metric over allowed public input and compares produced output against declared artifact hashes.\n4. **Source-open provenance.** Three public source pattern bodies and one exact Python internal control body are copied into the bundle and digest-checked.\n5. **metadata-only public result records.** Result records carry counts, refs, digests, verdicts, trace spans, and scope boundaries while excluding private/live/provider material.\n\nThe rung contract matters: the component is more than generic documentation polish, but it is still not paper-replication authority.\n\n###### Relation to Concepts, Principles, and Axioms\n\nThe JSON bundle binds the module to `concept.research_and_science_replay_evidence_bundle`. That concept is instantiated by the mechanism above and abides by `AX-1`, `AX-6`, `AX-8`, and `AX-12` at the concept layer. The bundle's direct axiom refs are `AX-1`, `AX-2`, `AX-5`, and `AX-7`.\n\nThe bundle's principle refs are `P-1`, `P-2`, `P-3`, `P-6`, `P-8`, and `P-15`. For this component, the important principle pressure is:\n- Evidence must be structured and replayable before authority rises.\n- Result records and scope boundaries are part of the artifact, not commentary after it.\n- Projections stay below source authority; a readable paper module does not outrank the JSON bundle, mechanism row, runtime code, source-module manifest, or result records.\n- Typed refusal is part of the mechanism: benchmark, provider, public sharing, private-body, original-code, and unbounded-compute claims remain false unless another authority surface actually grants them.\n\nThe module depends on `paper_module.agent_benchmark_integrity_anti_gaming_replay`. Benchmark performance overclaim controls stay routed through that sibling instead of being reinvented here.\n\n###### Reader Evidence Routing\n\nOpen evidence in this order:\n1. `core/paper_module_capsules.json#paper_module.research_replication_rubric_artifact_replay` for the source-authority bundle, scope limit, doctrine refs, generated projection statuses, and code loci.\n2. `core/mechanism_sources.json#mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay` for the validator command, exported-bundle validator command, focused regression, guardrails, input refs, result record refs, and upstream mechanisms.\n3. `standards/std_microcosm_research_replication_rubric_artifact_replay.json` for the first-wave standard, public/private boundary, source-body floor, and hard launch/public sharing/provider/source-file changes flags.\n4. `examples/research_replication_rubric_artifact_replay/exported_research_replication_bundle/source_module_manifest.json` for source-open body-floor counts and digest obligations.\n5. `receipts/runtime_shell/demo_project/organs/research_replication_rubric_artifact_replay/exported_research_replication_bundle_validation_result.json` for the current exported-bundle validation result.\n6. `tests/test_research_replication_rubric_artifact_replay.py` for negative cases, digest tamper tests, metric replay tests, public-relative result record tests, command-card economy, and source-body exclusion.\n\n###### Prior Art Grounding\n\nThis replay scores a research artifact against a replication rubric. It follows artifact-evaluation practice from systems and machine-learning venues ( [ACM Artifact Review and Badging](https://www.acm.org/publications/policies/artifact-review-and-badging-current)), which separates 'available' from 'functional' from 'reproduced'. Microcosm borrows the rubric-over-artifact shape; the result is fixture-bound replay evidence, not a reproducibility guarantee or a peer-review verdict.\n\n###### Validation Result record Path\n\nFocused runtime validation:\n\n```text\n./repo-pytest tests/test_research_replication_rubric_artifact_replay.py -q --basetemp=/tmp/microcosm_research_replication_rubric_artifact_replay_pytest\n```\n\nPaper-module corpus validation:\n\n```text\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe runtime commands behind the result records are:\n\n###### Scope boundary\n\n###### Limitations\n- The two replay subjects are synthetic public paper bundles, not real external paper replications.\n- The metric replay is intentionally small: one public metric spec over one public input table with one declared output artifact. Its value is boundary enforcement, not benchmark substance.\n- Source-open proof is limited to three public source pattern body slices and one exact-copy public Python internal control body. It does not expose private source-root bodies, source notes, model-output data, account or browser state, browser UI state, or original-author code bodies.\n- A green run does not establish research truth, paper novelty, formal-result correctness, benchmark performance, external model service, launch-scope decision, or publishing-scope decision.\n\n###### Authority Boundary\n\nThis component validates synthetic public replay metadata, local public artifact replay, source-module digest boundaries, public trace spans, negative-case coverage, and metadata-only result record shape. It does not claim actual paper replication success, benchmark performance, external model service, hidden-rubric access, original-author-code reuse, private paper/data export, unbounded compute search, final-answer-only grading, launch-scope decision, publishing-scope decision, source-file changes, product progress, or whole-system correctness.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Copied public source pattern provenance bodies, exact-copy public Python internal control body, metadata-only research-replication replay result records, public agent-execution trace spans, and fixture validation only; no actual paper replication success, benchmark performance claim, private paper/data body export, hidden-rubric export, external model access, unbounded compute search, original-author code reuse, launch-scope decision, publishing-scope decision, source-file changes, or product-progress evidence.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-module manifest at `examples/research_replication_rubric_artifact_replay/exported_research_replication_bundle/source_module_manifest.json` is the source-open body floor. It declares four copied modules:\n- `research_replication_extracted_pattern_ledger_row_body_import`, a public source pattern body slice.\n- `research_replication_high_novelty_growth_receipt_body_import`, a public source reconstruction result record slice.\n- `research_replication_deterministic_pattern_order_body_import`, a public deterministic pattern-order slice.\n- `research_replication_replay_control_plane_source_body_import`, an exact-copy public Python internal control body for this component.\n\nEach row carries a source ref, target ref, material class, copied-body flag, result record-body exclusion flag, line count or byte count, and sha256 digest. The runtime verifies target digests; for the exact-copy Python row it also checks source currentness and source-target byte equality. Result records expose refs, counts, digests, and verdicts only. They do not embed source bodies.\n\nSpatial World Model Counterfactual Simulation Replay Replays six what-if robotics scenes to show what a spatial prediction claim is built from. 4/5\n\nDoes This replay takes six made-up \"what if\" spatial scenes from robotics and self-driving-style settings (a forklift appears from behind an occlusion, a small pedestrian steps into a crosswalk, a gust pushes a drone off course, a shiny floor fools a robot into seeing free space, a stacked load shifts into a lane, and an oncoming car turns late) and shows each one as inspectable rows: the starting scene, the action taken, the predicted next scene, what changed between them, a sanity check, and honest notes on its limits (it is synthetic, not real-world ground truth). The rows show exactly what a spatial \"world model\" claim is built from, plus a checklist of dangerous claims it deliberately refuses to make.\n\nScope limit It validates only the declared public contract of synthetic spatial counterfactual-replay metadata rows. It is evidence for inspectable replay rows and limitation labels, not for real-world spatial accuracy, simulator-product validity, media-only authority, operational deployment, service distribution, or scope decisions.\n\nRun\n\n```text\nmicrocosm spatial-world-model-counterfactual-simulation-replay run-simulation-bundle --input examples/spatial_world_model_counterfactual_simulation_replay/exported_spatial_world_model_simulation_bundle --out receipts/runtime_shell/demo_project/organs/spatial_world_model_counterfactual_simulation_replay\n```\n\nEvidence Contract validator evidence 4/5 Real runtime result\n\nresearch-workflows forecasting\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/spatial_world_model_counterfactual_simulation_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Spatial World Model Counterfactual Simulation Replay\n\nExplains component [Spatial World Model Counterfactual Simulation Replay](docs/components.html#component-spatial_world_model_counterfactual_simulation_replay) mechanism [validates public spatial world model counterfactual simulation replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-spatial-world-model-counterfactual-simulation-replay-validates-public-spatial-world-model-counterfactual-simulation-replay) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n\n###### Purpose\n\nSpatial world-model demos are unusually easy to oversell. A plausible-looking video, or a row that simply asserts \"the model predicted the next state correctly\", can pass for understanding without anything having been checked. This component exists to answer one narrow question: does a declared spatial counterfactual row actually bind a source state, an event, and a predicted outcome that survive an independent recomputation, or is it just a shape that looks right?\n\nThe approach is the unusual part. The predicted actor count, transition delta, event label, and spawn cells are derived from the inputs (sensor-packet refs, consistency budget, topology), so a stale or hand-edited prediction no longer matches and the row blocks. The point is not a good simulator. The point is that a spatial-AI claim cannot pass on appearance alone: it has to agree with a recomputation a reader can audit in one screen.\n\n###### Abstract\n\n`spatial_world_model_counterfactual_simulation_replay` is a Microcosm component for checking spatial world-model counterfactual claims as metadata transitions, not as generated video, robotics control, AV simulation, geographic truth, or benchmark authority. The component validates six synthetic scene-state rows, six counterfactual replay rows, six predicted transition rows, eight forbidden-claim negative cases, and an exported source-module bundle whose result record stays metadata-only.\n\nThe technical claim is deliberately small: for each replay row, the runtime recomputes a deterministic toy gridworld next state from the declared scene state, counterfactual event, sensor-packet refs, consistency budget, topology ref, and limitation labels; it then compares that actual transition against the declared predicted state, transition diff, and oracle check. A green run proves the public replay rows are internally consistent and bounded by their scope limit. It does not establish real-world spatial accuracy, trained simulator quality, generated-video correctness, robot or AV operation, provider behavior, hosting, public sharing, launch-scope decision, or whole-system correctness.\n\n###### Telos\n\nWorld-model demos are easy to overstate because visual plausibility can hide whether any state transition was checked. This component makes the proof surface inspectable: a reader can see the scene-state ref, action trace, predicted-state ref, transition-diff ref, oracle-check ref, fidelity limit, limitation labels, negative cases, and source-module digest evidence before accepting any spatial counterfactual claim.\n\nThe useful result is not a better simulator. The useful result is an evidence spine that refuses to let a spatial-AI claim advance unless the public row binds input state, counterfactual event, predicted output, actual recomputation, and scope boundary boundary in one result record.\n\n###### Mechanism\n\nThe positive fixture has six scene states and six matching replay rows: warehouse occlusion, crosswalk emergence, drone-corridor gust recovery, mobile robot reflective-floor detour, loading-dock pallet shift, and unprotected-turn late yield. Each row declares a source scene-state ref, action-trace ref, counterfactual event, predicted-state ref, transition-diff ref, oracle-state-check ref, two public sensor-packet refs, a rare-event label, a fidelity-limit label, limitation labels, and explicit false values for private video, raw sensor export, live operation, geography, simulator-product, generated-video-only, benchmark, and launch claims.\n\nRuntime transition checking happens in `_state_transition_analysis`:\n1. The component resolves each replay to exactly one state-transition row.\n2. It builds an 8 x 8 toy gridworld from the source scene's actor count and topology ref.\n3. It maps the counterfactual event to a deterministic event action such as `new_dynamic_actor`.\n4. It recomputes the actual next state and transition diff from the input row.\n5. It compares predicted actor count, transition delta, event label, spawn cell or cells, predicted-state ref, diff ref, oracle-check ref, and metadata-only result record status.\n\nThe input-driven part matters. Actor-count delta is not copied from the expected fixture. It is recomputed as:\n\n```text\nmin(\n  base_event_actor_count_delta\n  + max(0, sensor_packet_count - max_timestep_lag - base_event_actor_count_delta),\n  4,\n  free_cell_count\n)\n```\n\nSpawn cells are also input-derived: the runtime hashes the event, replay id, scene-state ref, topology ref, sensor-packet refs, consistency budget, limitation labels, and source actor count, then walks the bounded grid from the declared event cell. This makes the row sensitive to real input changes while remaining small enough to audit.\n\n###### Transition Evidence\n\nThe current fixture proves a narrow but useful invariant: all six declared predicted states match the runtime's actual toy-gridworld step. The focused test expects:\n- `scene_state_count == 6`\n- `replay_count == 6`\n- `state_transition_count == 6`\n- `predicted_state_body_count == 6`\n- `deterministic_simulation_pass_count == 6`\n- `gridworld_step_count == 6`\n- `predicted_actual_match_count == 6`\n- `transition_diff_count == 6`\n- `oracle_state_check_count == 6`\n- `sensor_packet_ref_count == 12`\n\nThose counts are technical evidence only because the runtime recomputes the state transition before accepting them. The result record cannot be read as a learned world-model score; it is a public replay consistency check over synthetic metadata and copied source-module digests.\n\n###### Real-Bad Mutation Contract\n\nThe regression suite includes deliberately bad mutations that show the proof is not just shape validation:\n- If a transition row changes `actor_count_delta` from the recomputed value, `run_simulation_bundle` blocks with `SPATIAL_STATE_TRANSITION_SIMULATION_MISMATCH`.\n- If the predicted state misses the gridworld step, the transition row records `predicted_state_actor_count_mismatch` while the recomputed actual state still shows the expected gridworld execution.\n- If a replay gains an extra sensor-packet ref, the recomputed actor delta moves from 1 to 2. The stale expected transition blocks until the predicted actor count, actor delta, and spawn cells are updated to match the new actual transition.\n- If the source scene actor count and topology ref change, the recomputed source and spawn-cell state moves. The stale predicted state blocks until the transition row is updated.\n- If a source-module manifest tries to place copied body text inside a result record, the source-module summary blocks with `SPATIAL_SOURCE_BODY_TEXT_IN_RECEIPT_FORBIDDEN` and `SPATIAL_SOURCE_MODULE_BODY_TEXT_IN_RECEIPT_FORBIDDEN`.\n\nThe negative payload cases are similarly typed: private video export, raw sensor export, live robot or AV operation, real-world location claims, simulator-product claims, generated-video-only authority, geographic accuracy claims, and benchmark-score claims without state-diff result records all have explicit forbidden-code coverage.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Scene[\"Scene-state row actor count + topology\"] --> Replay[\"Counterfactual replay row event + sensor refs + budget\"] Replay --> Step[\"Deterministic toy gridworld step 8x8 bounded recomputation\"] Step --> Actual[\"Actual next state actor delta + spawn cells\"] Replay --> Expected[\"Declared predicted state transition diff + oracle check\"] Actual --> Compare{\"Actual matches declared transition?\"} Expected --> Compare Compare -->|yes| Result record[\"metadata-only pass result record counts + refs + digests\"] Compare -->|no| Finding[\"Typed mismatch finding blocked status\"] Replay --> Boundary{\"Forbidden payload or claim?\"} Boundary -->|no| Result record Boundary -->|yes| Finding\n```\n\nThis diagram is a reader map for the runtime proof. The generated doctrine lattice Mermaid remains the bundle-derived edge proof.\n\n###### Reader Evidence Routing\n\nRead this page from source authority outward:\n1. Open `core/paper_module_capsules.json::paper_modules[53:paper_module.spatial_world_model_counterfactual_simulation_replay]` for the JSON bundle and scope limit.\n2. Open `paper_modules/spatial_world_model_counterfactual_simulation_replay.json` for generated relationship edges, Mermaid status, Atlas status, and `source_authority: json_capsule`.\n3. Inspect `src/microcosm_core/organs/spatial_world_model_counterfactual_simulation_replay.py`, especially `_state_transition_analysis`, `_gridworld_step`, `_gridworld_actor_count_delta`, `_gridworld_spawn_cells`, `_replay_policy_findings`, and `_source_module_manifest_result`.\n4. Inspect fixture inputs under `fixtures/first_wave/spatial_world_model_counterfactual_simulation_replay/input` and exported-bundle inputs under `examples/spatial_world_model_counterfactual_simulation_replay/exported_spatial_world_model_simulation_bundle`.\n5. Inspect `tests/test_spatial_world_model_counterfactual_simulation_replay.py` for the positive replay, public-relative result record, source-module import, body-text rejection, transition-delta mutation, predicted-state mutation, input-perturbation, scene-perturbation, and fresh-card reuse contracts.\n\n###### Runtime Command\n\n```text\nmicrocosm spatial-world-model-counterfactual-simulation-replay run-simulation-bundle --input examples/spatial_world_model_counterfactual_simulation_replay/exported_spatial_world_model_simulation_bundle --out receipts/runtime_shell/demo_project/organs/spatial_world_model_counterfactual_simulation_replay\n```\n\nThe runtime shell also exposes the compressed lens at:\n\n```text\nmicrocosm spatial-simulation\n```\n\n###### Prior Art Grounding\n\nThis replay exercises a spatial world model under counterfactual interventions. It is grounded in the world-models line of work ( [Ha and Schmidhuber, World Models](https://arxiv.org/abs/1803.10122)), where an agent learns a compressed model of its environment it can roll forward under hypothetical actions. Microcosm borrows the counterfactual-rollout shape over synthetic metadata; the result is fixture-bound replay evidence, not robot or AV operation, real-world geography, or a calibrated simulator.\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\nThe expected bundle projection is Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, and 20 generated relationship edges. These checks prove the public synthetic replay and source-module import boundary only; they do not validate real geography, robot or AV operation, simulator-product claims, benchmark claims, public sharing, hosting, or launch.\n\n###### Scope boundary\n\n###### Public Boundary\n\nThe exported bundle may include copied Station geometry source bodies as public source-open material, but result records carry refs, digests, counts, and verdicts only. They must not carry private video bodies, raw sensor payloads, GPS trace bodies, model-output data, account or browser state, account secrets, or live-access material.\n\nThe scope limit is therefore:\n- allowed: synthetic scene-state refs, action-trace refs, predicted-state refs, transition-diff refs, oracle-check refs, source-open public sensor-packet refs, rare-event labels, fidelity-limit labels, limitation labels, source-module digests, negative-case result records, and metadata-only validation result records;\n- not allowed: simulator-product authority, private video export, raw sensor export, live robot or AV operation, real-world geography claims, benchmark claims, external model access, hosting, public sharing, launch-scope decision, private-system equivalence, or whole-system correctness.\n\n###### Limitations\n\nThe dynamics are toy dynamics. The 8 x 8 gridworld models actor counts and spawn cells from public metadata; it does not model perception, control, physics, sensor calibration, camera geometry, lidar, maps, vehicle dynamics, human behavior, or material truth. The synthetic events are useful because they force state-diff accounting, not because they approximate the real world.\n\nThe fixture is also finite. It covers six public replay rows, six transition rows, two sensor refs per replay, eight negative claim families, and three copied source modules. It does not establish all possible spatial counterfactuals, full secret absence outside the scanner envelope, complete robotics safety, simulator correctness, or future fixture coverage.\n\nThe source-open body floor is limited to exact copied Station geometry guardrail bodies named by the source-module manifest and verified by digest. That does not certify private source-root equivalence, private video or raw sensor availability, account or browser state, provider behavior, hidden GPS trace bodies, live-access material, or launch-scope decision.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Declared public synthetic spatial counterfactual-replay metadata and source-module import evidence only; no robot or AV operation, real-world geographic accuracy, simulator product validation, generated-video authority, benchmark claims, external model access, hosting, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\nMaterials Chemistry Closed Loop Lab Safety Replay Replays a self-driving lab loop as records, with safety gates and no real chemicals, robot, or lab. 3/5\n\nDoes Takes the pattern of a \"self-driving materials lab\" (propose a candidate material, run safety screens, simulate an assay, then decide what to try next) and replays it locally as inspectable records: every step, its safety gate, its simulated result, and the decision that followed, plus the pre-recorded points where such a loop would fail and where it would restart. It makes the workflow's structure visible, all on a simulator-only fixture, so how the loop is wired is traceable without any real lab, real chemicals, or real robot ever being involved.\n\nScope limit It documents projection and replay mechanics only and excludes wetlab protocols, hazardous synthesis steps, reagent amounts, controlled/bioactive targets, robot commands, live assay data, discovery claims, benchmark claims, external model access, or any judgment of domain/chemical correctness.\n\nRun\n\n```text\nmicrocosm materials-chemistry-closed-loop-lab-safety-replay run-lab-bundle --input examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle --out receipts/runtime_shell/demo_project/organs/materials_chemistry_closed_loop_lab_safety_replay\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Spatial World Model Counterfactual Simulation Replay](docs/components.html#component-spatial_world_model_counterfactual_simulation_replay)\n\nresearch-workflows forecasting\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/materials_chemistry_closed_loop_lab_safety_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Materials Chemistry Closed-Loop Lab-Safety Replay\n\nExplains component [Materials Chemistry Closed Loop Lab Safety Replay](docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay) mechanism [validates public materials lab safety replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-materials-chemistry-closed-loop-lab-safety-replay-validates-public-materials-lab-safety-replay) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms [Derivation before assertion](docs/doctrine.html#dcard-ax-1) [Kernelized verification](docs/doctrine.html#dcard-ax-2)\n\n###### Purpose\n\n\"Closed-loop materials lab\" is one of the easier phrases to overclaim. A fixture can look like an autonomous discovery loop while carrying nothing that should be spoken aloud: wetlab steps, reagent quantities, a controlled or bioactive target, robot commands, or a flat assertion that some material was discovered. This component exists to sit in front of that language and answer one question: is a closed-loop-lab-shaped fixture safe and grounded enough to be talked about at all, in a simulator-only frame, before any lab claim is allowed?\n\nIts real name inside the runtime is the `materials_chemistry_artifact_safety_refusal_validator`. The public-promise name \"closed-loop replay\" was deliberately reframed because nothing here executes a wetlab loop or commands a robot. The unusual part is that the component does not trust the fixture's own conclusion. A normal replay would read a declared \"selected candidate\" label and report it. This validator instead recomputes the winner from public numbers, weighting an assay proxy, an active-learning score, and a safety gate, then treats a mismatch between that recomputed pick and the declared label as a failure rather than a footnote. A stale or flattering label cannot pass.\n\nThe second discipline is refusal as a first-class result. Eight categories of dangerous or overclaiming content each have a named forbidden code, and a fixture that smuggles one in is expected to be refused, not quietly accepted. The verdict is computed from public simulator rows, safety fields, source-module manifests, replay-graph status, negative-case coverage, and a sentinel scan, and it stays inside a simulator-only ceiling. It is a safety and refusal check, not a laboratory.\n\n###### Abstract\n\n`materials_chemistry_closed_loop_lab_safety_replay` is a public, simulator-only replay validator for materials-lab language. It does not claim a material discovery, a wetlab protocol, a robot loop, or a benchmark. It checks whether a closed-loop-lab shaped public fixture has enough evidence to be talked about at all: candidate material refs, safety-screen refs, simulator-only assay rows, active-learning decisions, a Lab/Evolve replay graph, source-module manifest digests, negative-case refusals, metadata-only result records, and an explicit scope limit.\n\nThe technical claim is a numeric verdict proof boundary. A passing run must recompute the selected candidate from score-backed fixture rows rather than trusting a declared label. The baseline fixture contains four candidates and selects `mat_polymer_membrane_001` with score `0.917`; perturbation tests prove that stale labels, missing score rows, out-of-range scores, and safety-gate failures block the verdict.\n\n###### Mechanism\n\nThe runtime locus is `src/microcosm_core/organs/materials_chemistry_closed_loop_lab_safety_replay.py`. The relevant entrypoints are `run` for first-wave fixture validation and `run_lab_bundle` for exported-bundle validation. The validator loads a replay policy, candidate rows, experiment DAG rows, simulator assays, active-learning decisions, optional source-module manifests, and eight forbidden negative-case fixtures.\n\nThe sign-off rule is deliberately small:\n1. Positive rows must link candidates, experiments, assays, safety screens, active-learning decisions, failure taxonomy refs, and cold replay refs.\n2. Negative cases must be observed and refused.\n3. Numeric replay must recompute the selected candidate from public numbers.\n4. Source-module imports must verify copied bodies without putting bodies into result records.\n5. The safety verdict must remain inside the simulator-only scope limit.\n\nSource refs\n\nnumeric policy + expected label `replay_policy.json` 4 candidate refs + safety gates `candidate_materials.json` 4 public assay proxy values `simulator_assays.json` 4 active-learning scores `active_learning_decisions.json` 4 copied public body modules `source_module_manifest.json` Accepted `public_safe_simulator_replay_accepted` Blocked `blocked_public_safety_boundary` Diagram source\n\n```text\nflowchart TD policy[\"replay_policy.json numeric policy + expected label\"] candidates[\"candidate_materials.json 4 candidate refs + safety gates\"] assays[\"simulator_assays.json 4 public assay proxy values\"] decisions[\"active_learning_decisions.json 4 active-learning scores\"] numeric[\"numeric replay weighted recompute of the winner\"] labelcheck{\"recomputed pick == declared label? safety gate >= 0.70?\"} negatives[\"negative-case fixtures 8 forbidden lab classes\"] refuse{\"any forbidden MATERIALS_*_FORBIDDEN observed?\"} manifest[\"source_module_manifest.json 4 copied public body modules\"] replay[\"Lab/Evolve replay graph replay cases\"] verdict[\"safety verdict\"] accepted[\"public_safe_simulator_replay_accepted\"] blocked[\"blocked_public_safety_boundary\"] result record[\"metadata-only result records counts, digests, findings\"] ceiling[\"scope limit no wetlab / no discovery / no launch\"] policy --> numeric candidates --> numeric assays --> numeric decisions --> numeric numeric --> labelcheck labelcheck -->|stale label or gate fail| blocked labelcheck -->|match| verdict negatives --> refuse refuse -->|yes| blocked refuse -->|no| verdict manifest --> replay replay --> verdict verdict --> accepted accepted --> result record blocked --> result record result record --> ceiling\n```\n\n###### Numeric Assay And Verdict Evidence\n\nThe replay policy declares:\n- selection rule: `max_weighted_public_assay_active_learning_and_safety_gate_score`\n- minimum safety gate: `0.70`\n- expected selected candidate: `mat_polymer_membrane_001`\n- weighted score: `0.45 * public_assay_proxy_value + 0.35 * public_active_learning_score + 0.20 * public_safety_gate_score`\n\nThe source fixture binds four score-backed rows:\n\nCandidate Safety gate Assay proxy Active-learning Weighted score Decision / action `mat_polymer_membrane_001` `0.94` `0.92` `0.90` `0.917` `decision_membrane_001` / `simulate_assay` `mat_solid_electrolyte_002` `0.91` `0.84` `0.81` `0.8445` `decision_electrolyte_002` / `update_surrogate_model` `mat_catalyst_support_003` `0.85` `0.78` `0.74` `0.780` `decision_support_003` / `choose_next_simulation` `mat_sorbent_surface_004` `0.88` `0.70` `0.66` `0.722` `decision_sorbent_004` / `screen_candidate`\n\nThe focused regression `test_materials_chemistry_numeric_replay_recomputes_verdict_from_fixture_numbers` proves the pass case: status `pass`, `verified_numeric_row_count == 4`, selected candidate `mat_polymer_membrane_001`, selected decision `decision_membrane_001`, selected next action `simulate_assay`, score `0.917`, realness rung `R3`, and verdict basis `recomputed_from_public_assay_active_learning_and_safety_gate_fixture_numbers`.\n\nThe verifier does not use expected labels for selection. Expected labels are checked only after the selected row is recomputed from candidate, assay, and decision content.\n\n###### Test Matrix\n\nClass Evidence Expected verdict Real-good fixture Baseline first-wave fixture with four candidate, assay, and decision rows `public_safe_simulator_replay_accepted`; numeric replay `pass`; selected candidate `mat_polymer_membrane_001`; score `0.917` Real-good source body floor Exported bundle manifest with four copied modules and zero manifest findings `source_module_manifest_status: pass`; `verified_module_count: 4`; result records remain metadata-only; current checked-in bundle still needs refreshed numeric rows before it is a full exported-bundle pass Real-bad lab safety Controlled/bioactive targets, hazardous synthesis flags, mismatched safety refs, robot command, account secrets, private notebooks, or discovery claims `blocked_public_safety_boundary` with the relevant `MATERIALS_*_FORBIDDEN` or positive-linkage finding Real-bad numeric missingness Score-backed rows removed while numeric policy is active `MATERIALS_NUMERIC_REPLAY_POLICY_REQUIRES_SCORE_BACKED_ROWS`; `verified_numeric_row_count: 0` Real-bad numeric required Numeric policy removed and score rows absent `MATERIALS_NUMERIC_REPLAY_REQUIRED`; realness rung `blocked` Real-bad stale label Policy declares `mat_catalyst_support_003` while recomputation selects `mat_polymer_membrane_001` `MATERIALS_NUMERIC_REPLAY_EXPECTED_LABEL_STALE` Real-bad score range Safety, assay, or active-learning score outside `[0, 1]` `MATERIALS_NUMERIC_REPLAY_SCORE_OUT_OF_RANGE` Perturbation, low safety gate Membrane safety gate lowered to `0.52` Computed pick moves to `mat_solid_electrolyte_002`, verdict blocks, and findings include stale label plus `MATERIALS_NUMERIC_REPLAY_SAFETY_GATE_FAILED` Perturbation, moved valid pick Sorbent raised to safety `0.93`, assay `0.98`, active learning `0.98`, and policy expectation updated Numeric replay passes, selected candidate `mat_sorbent_surface_004`, selected action `screen_candidate`, score `0.970` Perturbation, moved pick without expectation update Exported bundle recomputes sorbent as the winner while policy still expects membrane Source manifest stays `pass`, but numeric replay blocks with `MATERIALS_NUMERIC_REPLAY_EXPECTED_LABEL_STALE`\n\nThese cases are source/test-backed by `tests/test_materials_chemistry_closed_loop_lab_safety_replay.py`. Fresh local first-wave result record output is the authority for current numeric replay; older archived first-wave result records and the checked-in exported bundle predate the numeric replay rows and should not be read as the numeric proof. The exported bundle still needs refreshed numeric rows before it is a full exported-bundle pass.\n\n###### Evidence Routes\n- JSON bundle: `core/paper_module_capsules.json::paper_module.materials_chemistry_closed_loop_lab_safety_replay`\n- Generated JSON instance: `paper_modules/materials_chemistry_closed_loop_lab_safety_replay.json`\n- Mechanism source: `core/mechanism_sources.json::mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay`\n- Runtime: `src/microcosm_core/organs/materials_chemistry_closed_loop_lab_safety_replay.py`\n- Domain standard: `standards/std_microcosm_materials_chemistry_closed_loop_lab_safety_replay.json`\n- Paper-module standard: `standards/std_microcosm_paper_module.json`\n- Fixture input: `fixtures/first_wave/materials_chemistry_closed_loop_lab_safety_replay/input`\n- Exported bundle: `examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle`\n- Focused tests: `tests/test_materials_chemistry_closed_loop_lab_safety_replay.py`\n\n###### Prior Art Grounding\n\nThis replay exercises a closed-loop materials and chemistry lab controller with a safety gate over synthetic experiments. It is grounded in the [self-driving laboratory](https://en.wikipedia.org/wiki/Self-driving_laboratory) literature, where a propose-run-measure loop is paired with safety interlocks that can refuse an unsafe experiment. Microcosm borrows the loop-plus-safety-gate shape on a simulator; the result is metadata-only simulator evidence, not a real laboratory controller, chemical-safety authority, or launch.\n\n###### Validation Result record Path\n\nRun the current runtime proof from the Microcosm root:\n\nInspect the exported source-body bundle. Until the exported fixture is refreshed with score-backed numeric rows, this command may return a blocked numeric verdict while still proving the manifest/body-floor boundary:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.materials_chemistry_closed_loop_lab_safety_replay run-lab-bundle --input examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle --out /tmp/microcosm_materials_chemistry_lab_safety_bundle\n```\n\nRun the focused regression suite:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-pytest tests/test_materials_chemistry_closed_loop_lab_safety_replay.py -q\n```\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThis lane intentionally does not run `scripts/build_doctrine_projection.py --write`; generated projections, atlas cards, and shared bundle surfaces belong to their owner lanes.\n\n###### Scope boundary\n\n###### Limitations\n\nThis module is a replay validator, not a laboratory. It does not synthesize materials, provide wetlab instructions, control robots, rank real compounds, validate live assay data, authorize external model access, or establish a discovery benchmark. Fixture numbers are public replay coordinates for a safety-gated contract; they are not experimental measurements.\n\nThe validator can prove local consistency across fixture rows, exported source-module manifests, replay graph records, negative-case checks, sentinel scans, numeric recomputation, and metadata-only result records. It cannot prove chemical safety, regulatory suitability, lab readiness, deployment readiness, public-site freshness, publishing-scope decision, or launch-scope decision.\n\n###### Scope limit\n\nThis module may claim that Microcosm has a public, source-faithful, simulator-only replay contract that checks candidate refs, safety-screen refs, simulator-only assay rows, active-learning decisions, numeric replay, failure-taxonomy refs, cold replay refs, replay cases, source bundle hashes, copied source-module digests, negative-case result records, metadata-only result record policy, and scope limits.\n\nIt must not claim wetlab operation, material synthesis, robot control, hazardous synthesis guidance, reagent quantities, controlled or bioactive targeting, live assay data, private lab notebook export, live account secrets, external model service, material discovery, benchmark performance, safety certification, public sharing, hosting, launch-scope decision, source-file changes, or product-progress authority.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Copied public Lab/Evolve source/control/result record/standard bodies, metadata-only simulator-only fixture result records, runtime bundle result records, and artifact safety/refusal validation only; no wetlab execution, hazardous synthesis guidance, reagent quantity, controlled or bioactive target, live assay, robot command, private lab notebook, external model access, discovery claim, benchmark claims, launch-scope decision, publishing-scope decision, or product-progress evidence.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe exported bundle at `examples/materials_chemistry_closed_loop_lab_safety_replay/exported_materials_lab_safety_bundle` contains a `source_module_manifest.json` with four copied bodies:\n\nModule id Material class Role `materials_lab_evolve_failure_replay_specimen_body_import` `public_macro_tool_body` deterministic replay graph construction, failure classification, restart-point selection, source-bundle hashing, and result record boundaries `materials_lab_evolve_replay_graph_body_import` `public_macro_control_plane_body` replay graph body, restart points, source bundles, global teachings, and public claim boundary `materials_lab_evolve_receipt_body_import` `public_macro_receipt_body` replay result record body proving the source evidence shape without moving private material into result records `laboratory_standard_body_import` `public_standard_body` public laboratory standard floor for the replay\n\nThe bundle validator checks `module_count: 4`, `verified_module_count: 4`, `source_module_manifest_status: pass`, metadata-only result record policy, and zero source module findings. The current checked-in exported bundle is still a source-body floor, not the final numeric exported-bundle proof: `run_lab_bundle` requires refreshed score-backed numeric rows before it can pass as a full exported-bundle verdict. Focused tests inject those rows to prove the exported-bundle numeric path. The remaining bundle and result record refresh is tracked as outstanding work.\n\nThe validator also records the blocked source-open boundary for `codex/doctrine/paper_modules/lab_oracle_evolve_pipeline.md`: that source paper module cannot be imported as an exact body while raw operator-anchor language remains in scope.\n\nMechanistic Interpretability Circuit Attribution Replay Records which model features drove an answer, each tied to checkable evidence. 4/5\n\nDoes This takes the workflow of \"tracing which internal features inside a model drove an answer\" and turns it into inspectable local records. Each row links feature ids to a machine-readable graph of connections, records the before/after results of poking those features (the causal-intervention deltas), notes how far the explanation can be trusted (its faithfulness limit), and points to where the underlying evidence lives. The records show that every interpretability claim is backed by checkable evidence, and that they deliberately hold no model weights, no raw activations, no prompts, and no hidden reasoning \u2014 they carry only refs, digests, counts, and verdicts.\n\nScope limit It validates only the declared public circuit-attribution runtime-result record contract. It excludes model-transparency product claims, live model access, export of private weights/raw activations/proprietary prompts/hidden chain-of-thought, external model access, benchmark claims, or public sharing/launch.\n\nRun\n\n```text\nmicrocosm mechanistic-interpretability-circuit-attribution-replay run-attribution-bundle --input examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle --out receipts/runtime_shell/demo_project/organs/mechanistic_interpretability_circuit_attribution_replay\n```\n\nEvidence Contract validator evidence 4/5 Real runtime result\n\nresearch-workflows forecasting provider operations\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/mechanistic_interpretability_circuit_attribution_replay.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Mechanistic Interpretability Circuit Attribution Replay\n\nExplains component [Mechanistic Interpretability Circuit Attribution Replay](docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay) mechanism [validates public mechanistic interpretability circuit attribution replay](docs/rules-and-ideas.html#lattice-mechanism-mechanism-mechanistic-interpretability-circuit-attribution-replay-validates-public-mechanistic-interpretability-circuit-attribution-replay) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Possession is not permission](docs/doctrine.html#dcard-p-4)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms\n- [Authority by derivation, not possession](docs/doctrine.html#dcard-ax-3)\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n\n###### Purpose\n\nInterpretability writing is unusually easy to overstate. A named feature can read like understanding, a graph picture can read like a discovered circuit, and a small local script can read like access to a real model. This component exists to hold one kind of claim to a smaller, checkable size. It answers a single question: before Microcosm lets a circuit-attribution story stand as public evidence, does the story survive a deterministic replay rather than being taken on trust?\n\nThe part worth noticing is how narrow the proof is, and how that narrowness is the point. The component does not attempt to interpret a trained model. It carries a tiny two-layer toy transformer with weights declared in the fixture, recomputes its forward pass, gradient attribution, and per-feature ablation, and then compares the recomputed top feature against the feature the fixture claims. A row passes only when the declared winner still matches after recomputation. Perturb the toy weights and leave the old claim in place and the row is rejected, because the recomputed answer has moved while the prose has not. That is the failure mode the component is built to catch: an interpretability statement that was once true of its inputs but no longer is.\n\nAround that recomputation sit three further gates. Graph evidence must be machine-readable and traversable from declared sparse features to public error nodes, so a screenshot cannot stand in for a circuit. Transparency language needs a causal-intervention reference and faithfulness language needs an explicit limit, so the strongest words carry the strongest evidence requirements. Private weights, raw activations, proprietary prompts, and hidden reasoning are kept out of every result record. What the component produces is an accounting result record for a public fixture, not a transparency tool for any real model.\n\n###### Abstract\n\n`mechanistic_interpretability_circuit_attribution_replay` is a public Microcosm component that validates whether circuit-attribution claims are safe to represent as result record evidence. It is not a model-transparency product and does not inspect a live provider model. The component checks a fixture and exported bundle for machine-readable feature graph rows, causal-intervention references, faithfulness limits, source-module digest evidence, negative cases, and a small input-coupled toy-transformer replay.\n\nThe technical proof is deliberately modest. A replay passes only when its declared circuit-attribution story agrees with recomputed toy-transformer forward, gradient, and ablation winners; when graph evidence is traversable from public sparse features to public error nodes; when public result records omit private or raw bodies; and when the source-open body floor is backed by copied, source source modules with matching digests. A stale declared top feature is disconfirmed by perturbing the input fixture while leaving the old claim in place.\n\n###### Problem Statement\n\nInterpretability prose is easy to overclaim: a feature name can sound like transparency, a graph screenshot can sound like a circuit, and a local fixture can sound like model access. This module makes the public claim smaller and more testable. It asks: before Microcosm lets a circuit-attribution story become public evidence, can the story survive a deterministic replay membrane that checks structure, causality refs, source provenance, and explicit scope boundaries?\n\nThe answer is local and result record-scoped. Microcosm may claim public circuit-attribution replay accounting for this fixture and exported bundle. It may not claim live model internals, private weights, raw activations, proprietary prompts, hidden reasoning, provider behavior, benchmark claims, publishing-scope decision, hosting, launch-scope decision, or whole-system interpretability correctness.\n\nThe technical contribution is therefore an accounting membrane, not a new interpretability algorithm. The membrane turns an interpretability-shaped fixture into a pass/fail public result record by requiring all claim-bearing rows to cross four gates:\n\nGate Accepts Rejects Replay schema Feature ids, graph rows, causal refs, sufficiency and faithfulness limits, contradiction refs, cold-replay refs, target refs, and metadata-only result record flags. Missing required fields, unverifiable feature labels, screenshot-only graph evidence, transparency claims without causal-intervention refs, and faithfulness claims without limits. Graph traversal Machine-readable nodes and edges with a path from declared sparse features to public error nodes. Disconnected edges and decorative constant-delta edge-weight sequences. Toy recomputation Fixture-coupled forward, gradient, ablation, weight digest, and declared-winner comparison. Internal default toy specs, stale declared winners, or uncoupled cached result records. Source/body boundary Copied source bodies with digest, class, anchor, and metadata-only result record checks. Private weights, raw activations, proprietary prompt bodies, hidden reasoning, model-output data, body text in result records, and launch-scope decision.\n\n###### Technical Mechanism\n\nSource refs\n\nJSON bundle `paper_module.mechanistic_interpretability_circuit_attribution_replay` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.mechanistic_interpretability_circuit_attribution_replay\"] Fixture[\"Fixture / exported bundle feature catalog, replay rows, toy-transformer spec\"] Policy[\"Policy gates required fields, forbidden private/raw exports, faithfulness limits\"] Graph[\"Graph analyzer feature ids -> edges -> public error nodes\"] Toy[\"Toy-transformer replay forward + gradient + ablation recomputation\"] Source[\"Source-open body floor copied source bodies + digest checks\"] Result records[\"metadata-only result records refs, digests, counts, verdicts\"] Ceiling[\"Scope limit public replay accounting only\"] Bundle --> Fixture Fixture --> Policy Fixture --> Graph Fixture --> Toy Fixture --> Source Policy --> Result records Graph --> Result records Toy --> Result records Source --> Result records Result records --> Ceiling\n```\n\nThe component has four coupled checks:\n1. Replay policy validation: each positive row must carry toy prompt refs, sparse feature ids, machine-readable graph nodes and edges, replacement-model approximation scores, causal inhibition and injection refs, causal-intervention result record refs, sufficiency labels, faithfulness limits, contradiction-case refs, cold-replay refs, target refs, and `body_in_receipt: false`.\n2. Graph analysis: `_graph_analysis_for_replay` verifies that graph edges resolve to declared nodes and that at least one path exists from the row's sparse feature ids to a public error node. `_weight_sequence_analysis` rejects simple decorative arithmetic edge-weight sequences across replay rows.\n3. Toy-transformer replay: `_toy_transformer_attribution_runtime` recomputes a pure-Python two-layer toy transformer from fixture-provided `token_ids`, `embeddings`, `layer1`, `layer2`, and `target_logit_index`, then compares the recomputed top attribution and ablation features against declared winners.\n4. Source/body boundary: `_source_module_manifest_result`, `_source_open_body_import_summary`, `scan_paths`, `_write_receipts`, and `result_card` verify copied source bodies while keeping result record payloads metadata-only and public-safe.\n\n###### Implementation Contract\n\nRuntime locus Role in the mechanism Evidence surface `run` First-wave fixture validator. It loads the public input directory, negative cases, source-module manifest, secret-exclusion policy, and sign-off output. `tests/test_mechanistic_interpretability_circuit_attribution_replay.py::test_mechanistic_interpretability_circuit_attribution_replay_observes_negative_cases` `run_attribution_bundle` Exported-bundle validator for the runtime-shell and public demo path. It uses the same replay gates without requiring first-wave negative-case files. `test_mechanistic_interpretability_exported_bundle_validates_runtime_shape` `_replay_policy_findings` Row-level policy checker for required fields and forbidden interpretability overclaims. Negative fixtures in `fixtures/.../input/*` and `EXPECTED_NEGATIVE_CASES` `_graph_analysis_for_replay` / `_weight_sequence_analysis` Circuit-graph shape checks: resolvable nodes/edges, feature-to-error paths, and non-decorative weights. `test_mechanistic_interpretability_rejects_disconnected_graph_edges` and `test_mechanistic_interpretability_rejects_decorative_weight_sequences` `_toy_transformer_attribution_runtime` Pure-Python recomputation harness for target logit, attribution scores, ablation deltas, declared winners, and fixture digest. Toy runtime, stale-claim, perturbation, and cache-reuse tests `_source_module_manifest_result` / `_source_open_body_import_summary` Source-open body floor: copied source body checks with digest, class, anchor, and metadata-only result record constraints. Source-module exact-import and body-text rejection tests `_write_receipts` / `result_card` Public output membrane. Result records and cards carry refs, digests, counts, omitted-payload flags, and scope limits rather than source bodies or private state. Result record-boundary and card-reuse tests\n\n###### Toy-Transformer Attribution Mechanism\n\nThe toy-transformer runtime is intentionally small enough to audit. The fixture in `fixtures/first_wave/mechanistic_interpretability_circuit_attribution_replay/input/attribution_replays.json` declares:\n- `token_ids`: `[0, 1, 2]`\n- a three-row embedding table over two dimensions\n- a two-by-three first layer\n- a three-by-two second layer\n- `target_logit_index`: `1`\n- expected top feature by attribution and ablation: `toy_hidden_feature_1`\n\nThe runtime computes token embeddings, averages them into a context vector, applies the first layer, applies a `tanh` hidden activation, applies the second layer, and reads the target logit. It then computes activation-gradient scores for each hidden feature, using the analytic `tanh` derivative `1 - h^2` so the attribution score is grounded in the same forward pass rather than a separate estimate. It also ablates each hidden feature in turn, zeroing it and re-reading the target logit, to measure the output delta that feature is responsible for. The fixture currently produces target logit `0.044176`; both the gradient attribution and the ablation delta select `toy_hidden_feature_1`, and the row passes only because those two independent paths agree with each other and with the fixture's declaration.\n\nThe important point is not that this is a serious transformer. It is a deterministic proof harness for the public replay claim. The result record can say the declared top feature agrees with recomputation only because the verifier recomputes from input fields and compares the result. The result record also records a weight digest so cached or exported bundle cards can prove which fixture basis they are coupled to.\n\n###### Discriminating Tests\n\nThe proof is strongest where it distinguishes a real coupling from a plausible but stale story. The focused tests exercise those distinctions directly:\n\nTest Fixture move Expected verdict Why it matters `test_mechanistic_interpretability_toy_transformer_input_perturbation_moves_verdict` Changes `layer2[0][1]` to `-0.5` and updates declared winners to `toy_hidden_feature_0`. Passes with target logit `-0.116939`; both attribution and ablation move to `toy_hidden_feature_0`. The result record follows changed input when declaration and recomputation remain coupled. `test_mechanistic_interpretability_input_perturbation_rejects_stale_claims` Applies the same perturbation but leaves declared winners at `toy_hidden_feature_1`. Blocks with `INTERPRETABILITY_TOY_TRANSFORMER_DECLARED_TOP_FEATURE_MISMATCH`. The verifier disconfirms stale interpretability claims instead of trusting old fixture prose. `test_mechanistic_interpretability_rejects_internal_default_toy_runtime` Removes `toy_transformer_runtime` from the exported bundle. Blocks with `INTERPRETABILITY_TOY_TRANSFORMER_FIXTURE_SPEC_REQUIRED`. The public proof must be input-coupled, not backed by an internal default. `test_mechanistic_interpretability_bundle_card_rejects_uncoupled_cached_receipt` Edits a cached result record so `input_coupled_fixture` and `input_coupled_verdict` are false. The command-card path is a freshness optimization, not permission to reuse uncoupled evidence. `test_mechanistic_interpretability_rejects_decorative_weight_sequences` Rewrites graph-edge weights into simple arithmetic sequences. Blocks as suspected decorative graph evidence. Machine-readable graph rows still need anti-fabrication checks. `test_mechanistic_interpretability_rejects_disconnected_graph_edges` Breaks an edge path to a declared public error node. Blocks with zero path count for the affected row. A circuit-shaped graph must be traversable, not merely present. `test_mechanistic_interpretability_source_modules_reject_body_text_in_receipt` Marks source body text as present in result record material. Blocks the source/body import. Source-open evidence remains metadata-only at result record boundaries.\n\n###### Evidence Contract\n\nEvidence class Local authority What it proves What it does not establish Bundle binding `core/paper_module_capsules.json` row 52 The paper module, component, mechanism, source locus, and generated projection statuses are linked. Markdown is not promoted to source authority. Replay rows `fixtures/.../input/attribution_replays.json` and exported bundle mirror Six public replay rows with feature ids, graph edges, causal refs, faithfulness limits, contradiction refs, cold replay refs, and metadata-only target refs. The refs are fixture/accounting evidence, not live model internals. Feature catalog `fixtures/.../input/feature_catalog.json` Six public sparse-feature summary ids with labels and no private weights or activation dumps. It does not disclose trained-model features or raw activations. Toy runtime `_toy_transformer_attribution_runtime` and focused tests Forward, gradient, ablation, digest, and stale-declaration checks are recomputed from the input fixture. The toy runtime is not a general interpretability method. Graph analysis `_graph_analysis_for_replay` and `_weight_sequence_analysis` Graph rows are machine-readable, traversable, and not decorative constant-delta weight sequences. It does not validate a real neural circuit. Source-open body floor `source_module_manifest.json` plus `source_modules/` Eleven copied source bodies have digest/anchor/material-class checks. Bodies are not copied into result records and do not authorize private/live export. Result record set `receipts/first_wave/...`, result records/sign-off/..., runtime-shell lens Public outputs carry refs, digests, counts, verdicts, omitted-payload flags, and scope limits. Result records do not publish private model data or launch-scope decision.\n\n###### Reader Evidence Routing\n\nThe proof consumer for this reader slice is the focused interpretability replay suite plus the paper-module corpus parity check. The table below is the route a rank/projection reader should follow before trusting any claim in this module:\n\nReader question Source surface Focused proof consumer Scope limit Is this module bound to a real component and mechanism? `core/paper_module_capsules.json::paper_module.mechanistic_interpretability_circuit_attribution_replay` and `paper_modules/mechanistic_interpretability_circuit_attribution_replay.json` `scripts/build_doctrine_projection.py --check-paper-module-corpus` Does the replay recompute the attribution claim? `_toy_transformer_attribution_runtime` over fixture-provided `token_ids`, weights, and `target_logit_index` `test_mechanistic_interpretability_toy_transformer_runtime_computes_attribution`, perturbation, and stale-claim tests Proves fixture-local recomputation, not a general interpretability method. Are graph rows actual circuit evidence rather than screenshots? `_graph_analysis_for_replay` and `_weight_sequence_analysis` over declared graph nodes, edges, and public error nodes disconnected-graph and decorative-weight regression tests Proves machine-readable traversability and anti-decoration checks, not a real neural circuit. Do source-open bodies stay out of result records? `source_module_manifest.json`, copied `source_modules/`, `_source_module_manifest_result`, and `_write_receipts` source-module exact-import and body-text-in-result record rejection tests Proves copied body floor and metadata-only result records, not private/live export authority. Where does a reader start when projections disagree? source record, generated JSON instance, runtime source, focused tests, then result records corpus check and focused pytest together\n\n###### Failure Modes And Limitations\n- Missing required replay fields block with `INTERPRETABILITY_REPLAY_FIELD_REQUIRED`.\n- Feature names without catalog-backed ids block with `INTERPRETABILITY_FEATURE_NAME_UNVERIFIABLE`.\n- Graph screenshots or disconnected graph rows block because machine-readable edges and traversable paths are required.\n- Transparency language without a causal-intervention result record blocks with `INTERPRETABILITY_INTERVENTION_RECEIPT_REQUIRED`.\n- Faithfulness language without explicit limits blocks with `INTERPRETABILITY_FAITHFULNESS_REQUIRES_LIMITS`.\n- Private model weights, raw activation dumps, proprietary prompt exports, hidden chain-of-thought exports, model-output data bodies, and launch-scope decision are forbidden public outputs.\n- Decorative graph-weight sequences block as suspected fabrication.\n- Stale declared toy-transformer winners block when recomputation selects a different top feature.\n- The proof is fixture-local. It verifies a public replay membrane and copied source evidence; it does not certify real-world model faithfulness.\n\n###### Relation To Interpretability Literature\n\nThe module borrows its accounting shape from the transformer-circuits and mechanistic-interpretability tradition: circuits should be graph-structured, features should be identifiable, causal language should be backed by interventions, and faithfulness language should be bounded. Useful prior-art anchors include Anthropic's transformer-circuits framing, causal scrubbing, and SAE/sparse-feature circuit work.\n\nMicrocosm does not reproduce those methods. The local contribution is a public replay boundary around an interpretability-shaped claim: machine-readable edges instead of screenshots, causal-intervention refs instead of bare transparency language, fixture recomputation instead of stale row trust, and explicit scope boundaries before a claim becomes public evidence.\n\n###### Relation To Microcosm Concepts, Mechanisms, And Principles\n\nThe bundle binds this module to:\n- `concept.research_and_science_replay_evidence_bundle`\n- `mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay`\n- principles `P-2`, `P-4`, `P-8`, and `P-9`\n- axioms `AX-3`, `AX-5`, `AX-7`, and `AX-8`\n\nThe practical reading is:\n- `P-2`: claim language stays below the strength of the checker.\n- `P-4`: public proof routes through result records and explicit evidence refs.\n- `P-8`: failed preconditions are typed refusals, not vague warnings.\n- `P-9`: provenance crosses from fixture, source source, and result record without upgrading authority.\n- `AX-3`: dereferenced proof and policy refs matter more than prose labels.\n- `AX-5`: status fails closed across all required parts.\n- `AX-7`: partial computation returns a typed refusal.\n- `AX-8`: public fixture and copied-source labels propagate without becoming private model access.\n\n###### Named Proof Consumers\n\nRun from `microcosm-substrate`:\n\nThis consumes the first-wave fixture, negative cases, source-module mirror, secret scan, toy-transformer replay, and result record writer.\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.mechanistic_interpretability_circuit_attribution_replay run-attribution-bundle \\\n  --input examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle \\\n  --out /tmp/microcosm-mechanistic-interpretability-circuit-attribution-replay/bundle \\\n  --card\n```\n\nThis consumes the exported circuit-attribution bundle, copied body floor, digest checks, metadata-only result records, command-card omission contract, and runtime-shell validation shape.\n\n```text\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_mechanistic_interpretability_circuit_attribution_replay.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThe focused regression pins recomputation, stale-row rejection, graph and source-body gates, card result record reuse, and body-text exclusions.\n\n###### Reader Route\n\nA cold reader should inspect in this order:\n1. `core/paper_module_capsules.json` row 52 for authority and projection binding.\n2. `paper_modules/mechanistic_interpretability_circuit_attribution_replay.json` for generated relationship edges.\n3. `src/microcosm_core/organs/mechanistic_interpretability_circuit_attribution_replay.py` for runtime logic.\n4. `tests/test_mechanistic_interpretability_circuit_attribution_replay.py` for the stale-row, perturbation, graph, source-body, and result record-boundary proof.\n5. `fixtures/first_wave/mechanistic_interpretability_circuit_attribution_replay/input` for the fixture.\n6. `examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle` for the public bundle.\n7. `receipts/first_wave/mechanistic_interpretability_circuit_attribution_replay` and `receipts/runtime_shell/public_mechanistic_interpretability_circuit_attribution_replay_lens.json` for metadata-only public result record evidence.\n\n###### Prior Art Grounding\n\nThis replay exercises a circuit-attribution pass that traces which internal components account for a behaviour. It is grounded in mechanistic interpretability, the study of the internal circuits of neural networks ( [Anthropic, Transformer Circuits](https://transformer-circuits.pub/)). Microcosm borrows the attribution-replay shape over synthetic fixtures; the result is fixture-bound runtime evidence, not live model access, a transparency product, or a correctness claim about any real model.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src python3 -m pytest tests/test_mechanistic_interpretability_circuit_attribution_replay.py -q\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThese are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Authority And Evidence Boundary\n- Source authority: `core/paper_module_capsules.json::paper_modules[52:paper_module.mechanistic_interpretability_circuit_attribution_replay]` with `source_authority: json_capsule`.\n- Generated instance: `paper_modules/mechanistic_interpretability_circuit_attribution_replay.json`.\n- Runtime: `src/microcosm_core/organs/mechanistic_interpretability_circuit_attribution_replay.py`.\n- Focused tests: `tests/test_mechanistic_interpretability_circuit_attribution_replay.py`.\n- Governing standard: `standards/std_microcosm_mechanistic_interpretability_circuit_attribution_replay.json`.\n\nThis Markdown is a human-readable paper projection. The bundle JSON binds the component, mechanism, source locus, generated Mermaid status `available_from_capsule_edges`, and Atlas status `linked_from_capsule_edges`. The runtime, fixtures, tests, result records, and manifests are the technical evidence for the claims below.\n\n###### Scope limit\n\nThis module may claim:\n- public, cold-replayable circuit-attribution accounting for the named fixture and exported bundle;\n- feature ids tied to machine-readable graph edges and traversable public error-node paths;\n- causal-intervention result record refs and faithfulness-limit refs are required before transparency or faithfulness language passes;\n- the toy-transformer declaration is input-coupled to recomputed forward, gradient, and ablation evidence;\n- stale toy-transformer declarations are rejected by focused tests;\n- copied source source bodies are verified by manifest and digest checks while result records remain metadata-only.\n\nIt may not claim:\n- live model access or external model access;\n- private weights, raw activation tensors/dumps, proprietary prompts, hidden chain-of-thought, hidden reasoning, or model-output data export;\n- real model-transparency product status;\n- benchmark claims authority;\n- public sharing, hosted-product readiness, launch-scope decision, or recipient-send authority;\n- whole-system interpretability correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nThe source-open body floor is declared in:\n- `examples/mechanistic_interpretability_circuit_attribution_replay/exported_circuit_attribution_bundle/source_module_manifest.json`\n- `fixtures/first_wave/mechanistic_interpretability_circuit_attribution_replay/input/source_module_manifest.json`\n\nThe manifest covers copied source bodies: Oracle attribution maps, pattern-ledger rows, high-novelty scout records, component projection IR, projection readiness code, mission transaction preflight code, execution trace code, strict JSON code, and trace/readiness standards. The runtime verifies classification, material class, body-copied status, body-not-in-result record status, target digest, source/target digest agreement, line count when the source is available, and required anchors.\n\nThe body floor excludes private model weights, raw activations, proprietary prompts, hidden reasoning, model-output data, account or browser state, browser or HUD state, account secret material, private source-root material, public sharing, hosting, and launch-scope decision.\n\nPrediction Oracle Reconciliation Replays a forecast against the discipline a careful predictor would have to defend. 3/5\n\nDoes Runs a made-up forecasting case through the discipline a careful predictor would have to defend: which way a fork was called and why the losing side was ruled out, whether each prediction stayed inside the pre-declared list of allowed outcomes, that no \"after the fact\" evidence got used as if it were known in advance, how the guesses compared to a synthetic \"what actually happened\" result, and that any edits to the running record were small, allowed changes rather than rewrites. The reasoning is laid out as inspectable records rather than a single handed-down verdict. Everything is invented test data \u2014 it makes no real forecast and claims no track record.\n\nScope limit It exercises projection mechanics on a synthetic, invented packet only. It does not establish forecasting correctness or accuracy, give trading/financial/investment-related actions, call live market data or providers, publish predictions, claim any performance or track record, import non-public data, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.prediction_oracle_reconciliation run --input fixtures/first_wave/prediction_oracle_reconciliation/input --out receipts/first_wave/prediction_oracle_reconciliation\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Market Dashboard Read-Model Bundle](docs/components.html#component-batch12_market_dashboard_read_model_capsule), [Prediction Market Board Bundle](docs/components.html#component-batch12_prediction_market_board_capsule), [Structural Theses Finance Bundle](docs/components.html#component-batch8_structural_theses_capsule)\n\nresearch-workflows forecasting provider operations\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/prediction_oracle_reconciliation.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Prediction Oracle Reconciliation\n\nExplains component [Prediction Oracle Reconciliation](docs/components.html#component-prediction_oracle_reconciliation) mechanism [validates public prediction oracle reconciliation](docs/rules-and-ideas.html#lattice-mechanism-mechanism-prediction-oracle-reconciliation-validates-public-prediction-oracle-reconciliation) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n\n`prediction_oracle_reconciliation` is a source-available runtime fixture component for the prediction-engine slice. It compresses the source pattern group around CP1 bifurcation resolution, CP2 valid target universes, oracle grounding firewalls, diff grading, and dossier mutation into a synthetic packet a cold reader can run.\n\nIt is deliberately not a market product. The component has no live data, no external model access, no trading authority, no financial or investment-related actions authority, no publishing-scope decision, and no launch-scope decision. Its job is to make the reasoning shape inspectable without making performance or action claims. The result record contract is source-open by default: public fixture packets, exported bundle refs, source refs, and runtime result records carry the evidence, while `secret_exclusion_scan` blocks only live market feeds, model-output data bodies, account or browser material, private dossiers, and account secret-equivalent access.\n\n###### Purpose\n\nA forecast that gets the direction right can still be badly wrong about the number, and a forecast can look accurate only because it quietly used evidence that arrived after the outcome it was meant to predict. This component exists to make those two failures visible on a synthetic packet, before any reasoning is dressed up as a track record. The single question it answers is narrow: does this prediction packet keep its evidence honest and its grading recomputable, or does it cut a corner?\n\nThe unusual choice is that the component does not trust the numbers the packet reports. For every numeric row it recomputes the absolute error, the percent error, and the direction hit from the snapshot, predicted, and realized prices, then rejects any claimed value that contradicts the recompute. It also surfaces a direction hit that is still a large numeric miss rather than letting the correct arrow hide the size of the error. Evidence is split at the prediction time: a reference that points past the target window is refused, not silently scored.\n\nNone of this is forecasting. There is no live market data, no external model access, no trading or investment-related actions, and no performance claim. The packet, its target universe, and its realized values are invented fixtures. A direction hit or a numeric miss inside a result record is a statement about the fixture and the grading mechanics, nothing more.\n\n###### Public Contract\n\nThe input packet names:\n- `source_pattern_ids` for the source pattern family being projected.\n- `valid_prediction_targets` and `target_universe` for the CP2 gate.\n- `cp1_branches` with selected side, rationale refs, and opposite-side invalidation refs.\n- `cp2_predictions` with pre-target evidence refs and grounding ids.\n- `oracle_diff` rows that grade synthetic realized direction against prediction.\n- `dossier_mutations` constrained to fixture deltas.\n- `public_runtime_refs` for the public fixture, exported bundle, and paper module system refs.\n- `authority_ceiling` values that explicitly keep trading, advice, provider, live-market, public sharing, launch, and secret-export authority false.\n\n###### How it works\n\n`validate_reconciliation_packet` runs five checks over the packet and folds the findings into one status. Each check guards a specific way a forecast can flatter itself.\n\nCP1 resolution. Every `cp1_branches` row must name the side it chose, carry rationale refs, and keep an `opposite_side_invalidation_ref`, the record of why the losing side lost. A branch that asserts a winner without retaining the discarded alternative is rejected as an unresolved bifurcation. Equity or market-lane branches additionally need an explicit confirmation bit before they count.\n\nCP2 universe and pre-target evidence. Predictions must name a `target_id` inside the declared `valid_prediction_targets`, so the set of things being predicted is fixed before the outcome rather than chosen afterwards. Evidence refs must be pre-target: a ref is accepted only if it carries the `T-` time prefix, and a reference that points past the target window raises `PREDICTION_ORACLE_POST_T_EVIDENCE_FORBIDDEN`. This is the gate that stops a packet from grading itself with hindsight.\n\nRecomputed numeric grading. This is the part that does real arithmetic. For each graded row the component takes the snapshot, predicted, and realized prices and recomputes the absolute delta, the percent delta against the snapshot, and the direction hit. If the row also reports its own `abs_error`, `pred_error_pct`, or `direction_hit`, the claimed value must match the recompute or the row is rejected. Two further rules matter. A row whose direction is correct but whose error clears the floor (ten in absolute terms, or five percent) is surfaced as a large miss, so a right arrow cannot conceal a large numeric error. A row with no realized price is not fabricated into a graded row, a row marked degraded is gated out of grading rather than scored, and the STOCK and ETF asset classes are kept as separate counts rather than blended.\n\nOracle diff and bounded mutation. The `oracle_diff` rows grade synthetic realized direction against each prediction, and `dossier_mutations` may only add a contradiction, revise a confidence band, or retire a claim. A high-severity mutation needs two evidence refs and an explicit public-delta allowlist before it is allowed.\n\nA run passes only when at least two CP1 branches, two CP2 predictions, two graded numeric rows across both asset classes, and one bounded mutation are present, the recompute and evidence gates raise no findings, the source-module digests match, and the secret scan is clean. The result record records counts, verdicts, and authority booleans; the packet body, claimed numbers, and source bodies stay out of it.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD Packet[\"Synthetic prediction packet target universe, CP1 branches, CP2 predictions, oracle diff, numeric rows, dossier mutations\"] CP1[\"CP1 resolution chosen side + rationale + why the opposite side lost; equity lane needs confirmation\"] CP2[\"CP2 universe + evidence target inside declared universe; evidence must be pre-target (T-)\"] Numeric[\"Recomputed numeric grading abs error, percent error, direction hit recomputed; claimed values must match\"] Oracle[\"Oracle diff + mutation realized vs predicted direction; bounded dossier deltas\"] LargeMiss[\"Direction-right, numeric-miss surfaced, not hidden\"] Gated[\"Degraded / missing-truth rows gated, not fabricated\"] Result records[\"metadata-only result records result, board, validation, sign-off; counts and verdicts\"] Ceiling[\"Scope limit synthetic fixture only; no trading, advice, provider, live market, publish, launch\"] Packet --> CP1 Packet --> CP2 Packet --> Numeric Packet --> Oracle Numeric --> LargeMiss Numeric --> Gated CP1 --> Result records CP2 --> Result records LargeMiss --> Result records Gated --> Result records Oracle --> Result records Result records --> Ceiling\n```\n\nEvidence/accounting:\n- Bundle authority: `core/paper_module_capsules.json::paper_modules[54:paper_module.prediction_oracle_reconciliation]` sets `source_authority: json_capsule`, binds the component, binds `mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation`, and resolves `src/microcosm_core/organs/prediction_oracle_reconciliation.py`.\n- Generated instance: `paper_modules/prediction_oracle_reconciliation.json` reports `paper_module_payload.source_authority: json_capsule`, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges`, 15 relationship edges, and no unpopulated selective relations.\n- Runtime and fixture floor: `src/microcosm_core/organs/prediction_oracle_reconciliation.py` exposes `run`, `run_prediction_bundle`, `validate_source_module_imports`, `validate_reconciliation_packet`, `_source_open_body_import_summary`, `write_receipts`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`. `fixtures/first_wave/prediction_oracle_reconciliation/input/reconciliation_packet.json` carries the synthetic CP1/CP2, oracle-diff, target-universe, and dossier-mutation evidence shape.\n- Exported bundle and result records: `examples/prediction_oracle_reconciliation/exported_prediction_oracle_bundle/source_module_manifest.json` and the exported source artifacts provide source-open replay evidence. `receipts/first_wave/prediction_oracle_reconciliation/prediction_oracle_reconciliation_result.json`, `prediction_oracle_validation_receipt.json`, and result records/sign-off/first_wave/prediction_oracle_reconciliation_fixture_acceptance.json keep the result record metadata-only and fixture-bounded.\n- Test and claim boundary: `tests/test_prediction_oracle_reconciliation.py` checks invalid target universes, unresolved CP1 branches, post-target evidence, unsafe dossier mutation, live-market/trading/advice overclaims, exported-bundle validation, and source-module digest gates. The structured source record scope limit excludes forecasting correctness, financial decisions, trading authority, live market data, external model access, prediction public sharing, performance track record, non-public data import, launch-scope decision, publishing-scope decision, and whole-system correctness.\n\n###### Reader Evidence Routing\n\nOpen this module as a reader map, not as prediction evidence. Use the runtime fixture input for packet shape, the exported bundle for source-open replay, the structured source record for relationship edges, and the test file for the negative cases that enforce the scope limit.\n\nRoute evidence in this order:\n1. Read the structured lattice bindings section to confirm the source record path and subject edges.\n2. Inspect the fixture input for declared target universes, CP1 branches, CP2 prediction evidence, oracle-diff rows, and fixture-bounded dossier mutations.\n3. Run the fixture and exported-bundle commands to produce metadata-only result records.\n4. Check `tests/test_prediction_oracle_reconciliation.py` for the negative cases that reject target-universe escapes, unresolved CP1 branches, post-target evidence, live-market overclaims, and authority overclaims.\n5. Use `paper_modules/prediction_oracle_reconciliation.json` as the generated relationship graph for this module.\n\n###### Negative Cases\n\nThe fixture rejects:\n- a CP2 prediction outside the target universe;\n- an unresolved CP1 bifurcation;\n- post-target evidence used as prediction evidence;\n- unconfirmed equity or market-lane claims;\n- unsafe high-severity dossier mutation;\n- trading, advice, live-provider, public sharing, launch, or secret-export authority overclaims.\n\n###### Prior Art Grounding\n\nThis component is grounded in probabilistic forecast evaluation and prediction market infrastructure. The [Brier score](https://journals.ametsoc.org/doi/10.1175/1520-0493%281950%29078%3C0001%3AVOFEIT%3E2.0.CO%3B2) is an early probability-forecast verification anchor, proper-scoring-rule work such as [Gneiting and Raftery](https://sites.stat.washington.edu/people/raftery/Research/PDF/Gneiting2007jasa.pdf) motivates incentive-compatible forecast scoring, and Hanson's [logarithmic market scoring rule](https://hanson.gmu.edu/mktscore.pdf) grounds the prediction-market idea that forecasts can be updated and evaluated through explicit scoring mechanisms. Forecasting tournament work around tracking and calibration also motivates separating prediction evidence from post-outcome explanation.\n\nMicrocosm borrows the reconciliation pattern: declare the target universe before the outcome, keep pre-target evidence separate from post-target evidence, grade against a synthetic oracle diff, and constrain dossier mutation to declared fixture deltas. It does not trade, advise, publish predictions, or claim forecast performance.\n\n###### Commands\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.prediction_oracle_reconciliation run \\\n  --input fixtures/first_wave/prediction_oracle_reconciliation/input \\\n  --out receipts/first_wave/prediction_oracle_reconciliation\n\nPYTHONPATH=src python3 -m microcosm_core.organs.prediction_oracle_reconciliation run-prediction-bundle \\\n  --input examples/prediction_oracle_reconciliation/exported_prediction_oracle_bundle \\\n  --out receipts/runtime_shell/demo_project/organs/prediction_oracle_reconciliation\n```\n\n###### Validation Result record Path\n\nRun from `microcosm-substrate`:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.prediction_oracle_reconciliation run \\\n  --input fixtures/first_wave/prediction_oracle_reconciliation/input \\\n  --out /tmp/microcosm-prediction-oracle-reconciliation/fixture \\\n  --card\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.prediction_oracle_reconciliation run-prediction-bundle \\\n  --input examples/prediction_oracle_reconciliation/exported_prediction_oracle_bundle \\\n  --out /tmp/microcosm-prediction-oracle-reconciliation/bundle \\\n  --card\nPYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_prediction_oracle_reconciliation.py -q\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nA passing run proves only synthetic target-universe reconciliation, CP1/CP2 accounting, oracle-diff grading, and fixture-bounded dossier mutation; it does not establish forecasting performance, financial decisions, trading authority, live market access, public sharing, or launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module covers only fixture-bounded prediction-oracle reconciliation: synthetic target-universe accounting, CP1/CP2 separation, oracle-diff grading, dossier mutation constraints, copied source-module import evidence, negative cases, and public result records. They do not prove forecasting accuracy, financial decisions, trading authority, live-market access, provider behavior, prediction public sharing, performance track record, private-data import, launch-scope decision, publishing-scope decision, or whole-system correctness.\n\n###### Limitations\n\nThe target universe, CP1 branches, CP2 evidence, realized values, oracle diff, and dossier mutations are fixture artifacts. They exercise the shape of a reconciliation pipeline, but they are not live market data, a validated forecasting track record, an investment strategy, or a prediction public sharing surface. A direction hit or numeric miss inside the result record is evidence about the synthetic packet only.\n\nThe exported bundle is source-open in the narrow body-floor sense. It digest checks copied source contracts, node manifests, tool code, pattern rows, and route-decision artifacts while keeping body text out of result records. That does not certify private source-root equivalence, provider behavior, account or session state, hidden market feeds, private dossiers, or launch-scope decision.\n\nThe negative cases are scoped regression guards. They reject invalid targets, unresolved bifurcations, post-target evidence, unconfirmed equity-lane claims, unsafe dossier mutation, trading/advice overclaims, degraded feed misuse, missing realized numeric truth, and asset-class mixing. Those refusals do not prove full financial safety, whole-system correctness, runtime correctness outside the named component, or complete secret absence beyond the declared scanner envelope.\n\n###### Scope limit\n\nSynthetic invented prediction packet and source-module import evidence only; no forecasting correctness or accuracy, no trading, financial, or investment-related actions, no live market data, no external model access, no prediction public sharing, no performance track record, no non-public data import, no launch-scope decision, no publishing-scope decision, and no whole-system correctness.\n\n###### Scope boundary\n\nThis module demonstrates synthetic prediction-reconciliation mechanics only. It does not trade, give financial or investment-related actions, call live market providers, publish predictions, claim forecasting performance, import non-public data, or include launch operations.\n\nSource and projection details\n\n###### Governing Lattice Relation\n- source record: `core/paper_module_capsules.json::paper_modules[54:paper_module.prediction_oracle_reconciliation]`.\n- Subject edges: explains component `prediction_oracle_reconciliation` and mechanism `mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation`.\n- Doctrine edges: governed by principles `P-2`, `P-6`, `P-8`, and `P-9`; abides by axioms `AX-5`, `AX-7`, `AX-8`, and `AX-10`.\n- Dependency edges: depends on `paper_module.finance_forecast_evaluation_spine`, `paper_module.world_model_projection_drift_control_room`, and `paper_module.research_replication_rubric_artifact_replay`.\n- Runtime code locus: `src/microcosm_core/organs/prediction_oracle_reconciliation.py`, including `run`, `run_prediction_bundle`, `validate_source_module_imports`, `validate_reconciliation_packet`, `_source_open_body_import_summary`, `_build_result`, `write_receipts`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- Generated row proof: 15 resolved relationship edges, no unpopulated selective relations, Mermaid `available_from_capsule_edges`, and Atlas `linked_from_capsule_edges`.\n\nThe governing lattice turns the component into a bounded reconciliation checker rather than a forecast authority. `P-2` lowers every positive claim to the checker strength: CP1/CP2 accounting, oracle-diff grading, numeric-row gates, source-module digest checks, negative cases, and metadata-only result records. `P-6` fails closed when a branch is unresolved, a target escapes the declared universe, a source digest mismatches, or an authority flag tries to rise above the accepted component ceiling. `P-8` makes those refusals typed outcomes instead of prose warnings. `P-9` carries source refs, public runtime refs, copied-body material status, and result record refs across the fixture and exported bundle.\n\nThe axiom layer supplies the same boundary. `AX-5` prevents the fixture from upgrading synthetic reconciliation evidence into trading, advice, live-market, provider, public sharing, launch, or performance-track-record authority. `AX-7` permits partiality: degraded feed health, missing realized numeric truth, and asset-class split pressure are surfaced as scoped findings rather than hidden successes. `AX-8` keeps copied source bodies while excluding live market data, model-output data bodies, private dossiers, and account secret-equivalent material. `AX-10` requires the target-universe, CP1/CP2, oracle-diff, and source-module evidence to be tied to the current fixture or bundle result records before the Markdown projection is treated as current.\n\nThe structured source record's 15 edges prove route parity only.\n\nFinance Forecast Evaluation Spine Replays synthetic forecast tests through copied finance stats, recording p-values with no advice. 4/5 Runs real tools\n\nDoes Runs public synthetic forecast-evaluation fixtures through copied finance statistics modules and records p-value/refusal behavior without live market data or advice claims.\n\nScope limit synthetic fixture forecast-evaluation statistics only; no investment-related actions, live market data, track record, or performance claim\n\nRun\n\n```text\nmicrocosm finance-forecast-evaluation-spine run --input fixtures/first_wave/finance_forecast_evaluation_spine/input --out receipts/first_wave/finance_forecast_evaluation_spine\n```\n\nEvidence External tool run evidence 4/5 Real runtime result\n\nLinks to [Prediction Market Board Bundle](docs/components.html#component-batch12_prediction_market_board_capsule), [Prediction Oracle Reconciliation](docs/components.html#component-prediction_oracle_reconciliation)\n\nresearch-workflows forecasting finance\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/finance_forecast_evaluation_spine.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Finance Forecast Evaluation Spine\n\nExplains component [Finance Forecast Evaluation Spine](docs/components.html#component-finance_forecast_evaluation_spine) mechanism [validates public finance forecast evaluation spine](docs/rules-and-ideas.html#lattice-mechanism-mechanism-finance-forecast-evaluation-spine-validates-public-finance-forecast-evaluation-spine) Governed by principle [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8) concept [research and science replay validators as reproducibility scope limits](docs/rules-and-ideas.html#lattice-concept-concept-research-and-science-replay-evidence-bundle) Abides by axiom [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7) Depends on paper module [Source Projection Import Protocol](docs/paper-modules.html#paper-module-macro-projection-import-protocol)\n\n`finance_forecast_evaluation_spine` is a Crown Jewel import component with real runnable system and a strict public scope limit. It consumes synthetic public fixtures, copied source source bodies, and source manifests that verify sha256 digests, line counts, required anchors, secret-exclusion status, and result record body omission.\n\n###### Purpose\n\nComparing two forecasting models is harder than it looks. A lower average loss does not establish that one model genuinely predicts better, because losses are autocorrelated, samples are short, and a careless split can let a model peek at the answer. This component exists to carry the statistical machinery that economists use to answer that question carefully, and to do so without ever claiming the machinery has been pointed at a real market.\n\nThe single question it answers is narrow: given two paired loss series over a synthetic fixture, can the difference in predictive accuracy be called significant under an admissible test, or must the test refuse? It computes the Diebold-Mariano loss-differential statistic with a Bartlett HAC long-run variance, the Harvey-Leybourne-Newbold small-sample correction, Hansen's test for superior predictive ability with recentering, a model confidence set, and a Politis-Romano stationary bootstrap.\n\nFailure is handled explicitly. The Harvey-Leybourne-Newbold correction returns its computed statistic, but when SciPy is absent it refuses the p-value with a typed reason rather than fabricating one. The same discipline rejects a horizon that reaches the sample length, a sample too small to estimate anything, a time split that lets the evaluation date sit at or after the event window, and any policy flag that smuggles in advice or a track-record claim. A refusal is recorded as a first-class validator outcome, not an error: \"we declined to answer\" is itself a valid result.\n\nThe guards run before the statistics. If a boundary policy or a leakage check fails, the result record is blocked before any statistics subprocess starts, so an inadmissible request never produces a number that could be misread as a result.\n\nWhat it proves: synthetic fixture forecast-evaluation statistics only; no investment-related actions, live market data, track record, or performance claim.\n\nHow to run it:\n\n```text\nmicrocosm finance-forecast-evaluation-spine run --input fixtures/first_wave/finance_forecast_evaluation_spine/input --out receipts/first_wave/finance_forecast_evaluation_spine\n```\n\nRuntime bundle route:\n\n```text\npython -m microcosm_core.organs.finance_forecast_evaluation_spine run-finance-forecast-bundle --input examples/finance_forecast_evaluation_spine/exported_finance_eval_bundle --out receipts/runtime_shell/demo_project/organs/finance_forecast_evaluation_spine\n```\n\nNegative cases covered by the fixture manifest: finance_hln_dependency_refusal, finance_leakage_lookahead_split, finance_no_advice_overclaim.\n\nSource provenance is anchored by `examples/finance_forecast_evaluation_spine/exported_finance_eval_bundle/source_module_manifest.json` and result records carry refs, digests, counts, verdicts, and scope boundaries only.\n\n###### Shape\n\nSource refs\n\nRunner `finance_forecast_evaluation_spine.run` Diagram source\n\n```text\nflowchart TD Fixture[\"Synthetic fixture inputs family_loss_matrix, paired_loss_series, finance_boundary_policy, projection_protocol\"] Source[\"Copied finance modules plus source manifest digests\"] Runner[\"finance_forecast_evaluation_spine.run\"] Guards[\"Guards run first policy no-advice flags, lookahead-split leakage check\"] Blocked[\"Blocked result record statistics subprocess never starts\"] Branch{\"Admissible and exported bundle?\"} Subprocess[\"Statistics subprocess DM/HAC, Hansen SPA, MCS, stationary bootstrap, HLN refusal\"] Standalone[\"Standalone statistics contract no live source-root subprocess\"] Result record[\"Result records refs, hashes, counts, verdicts, scope boundaries; body_in_receipt false\"] Fixture --> Runner Source --> Runner Runner --> Guards Guards -->|\"boundary fails\"| Blocked Guards -->|\"boundary passes\"| Branch Branch -->|\"first-wave fixture\"| Subprocess Branch -->|\"exported bundle\"| Standalone Subprocess --> Result record Standalone --> Result record Blocked --> Result record\n```\n\n###### Technical Mechanism\n\nThe module is a deterministic forecast-evaluation harness around `CrownJewelSpec`, not a finance product. The spec fixes four required fixture inputs (`family_loss_matrix.json`, `paired_loss_series.json`, `finance_boundary_policy.json`, and `projection_protocol.json`), names the three required negative cases, binds the source manifest, and restricts the source-open import to required anchors in `model_selection_stats.py`, `spa_statistics.py`, `loss_differentials.py`, and `family_loss_matrix.py`.\n\nAt runtime, `run` delegates to `run_crown_jewel_organ` with `evaluate` and `evaluate_negative_case`. `evaluate` loads the synthetic loss matrix, paired loss series, and boundary policy, then calls `_evaluate_payloads`. That function first enforces the policy and lookahead-split guards; if either boundary fails, it returns a blocked result record before any statistics subprocess can run. Only after those guards pass does it run the copied statistics modules or, for the exported bundle path, use `_standalone_exported_statistics_contract` so the standalone public bundle does not depend on a live source-root subprocess.\n\nThe statistical witness is therefore deliberately narrow: Reality Check, Hansen-SPA, MCS, Diebold-Mariano/HAC, stationary bootstrap, and the HLN refusal are result record fields over the synthetic fixture. The same mechanism treats `finance_hln_dependency_refusal` as a typed negative case when SciPy support is absent, treats policy overclaims as `FINANCE_NO_ADVICE_OVERCLAIM`, treats temporal leakage as `FINANCE_LOOKAHEAD_SPLIT_FORBIDDEN`, and keeps copied source bodies out of result records with `body_in_receipt: false`.\n\n###### Reader Evidence Routing\n\nRead the positive fixture as a small statistical witness, not as a market result. The current result record has `status: pass`, `sample_size: 40`, `candidate_count: 3`, `reality_check.status: computed_bootstrap`, `spa.status: computed_bootstrap`, `mcs.implemented: true`, `paired_loss.diebold_mariano.status: computed_hac_normal_approximation`, and a five-replicate stationary-bootstrap witness. Those fields show that the component can exercise the copied forecast evaluation code paths on public synthetic data.\n\nRead the negative floor as equal evidence. The observed negative cases are `finance_hln_dependency_refusal`, `finance_leakage_lookahead_split`, and `finance_no_advice_overclaim`, with stable error codes `FINANCE_HLN_TYPED_REFUSAL_REQUIRED`, `FINANCE_LOOKAHEAD_SPLIT_FORBIDDEN`, and `FINANCE_NO_ADVICE_OVERCLAIM`. The HLN case refuses because SciPy is unavailable for the t-distribution; that is the intended scope limit, not a missing p-value to fill in by hand.\n\nRead source-open evidence through the manifest, not through result records. The source bundle carries 13 copied finance modules; result records carry references, hashes, counts, verdicts, and scope boundaries, and keep `body_in_receipt: false`. The local claim therefore stays at \"synthetic fixture forecast-evaluation statistics and typed refusals.\" It does not become investment-related actions, live-market data, a track record, performance proof, optimizer authorization, or launch-scope decision.\n\n###### Forecast-Evaluation Discipline\n\nThis component is evidence that the Microcosm can carry professional forecast evaluation logic without pretending to carry market authority. The admissible statistics include Diebold-Mariano loss-differential testing, the Harvey-Leybourne-Newbold small-sample correction, Hansen's SPA test, a Politis-Romano stationary bootstrap, Bartlett HAC long-run variance, and purged/embargoed cross-validation in the Lopez de Prado style.\n\nThe important doctrine is refusal discipline. Horizons greater than or equal to sample length, samples too small to estimate a statistic, leakage-prone splits, missing SciPy support, and advice-shaped claims must return typed refusals instead of crashes or meaningless numbers. Hansen-style recentering of poor or irrelevant alternatives is part of the SPA contract because it is the boundary between a useful superior-predictive-ability test and White Reality Check style over-penalization.\n\nResult records should therefore distinguish \"computed statistic\" from \"refused because inadmissible.\" Both are successful validator outcomes when the fixture asked for that behavior.\n\n###### Named Proof Consumers\n- Runtime fixture consumer: `finance_forecast_evaluation_spine.run` over `fixtures/first_wave/finance_forecast_evaluation_spine/input` must produce `status: pass`, the three observed semantic negative cases, false advice/live-data/performance authority flags, and metadata-only source-manifest result record material.\n- Exported-bundle consumer: `run-finance-forecast-bundle` over `examples/finance_forecast_evaluation_spine/exported_finance_eval_bundle` must validate the 13 copied finance modules by digest and use the standalone statistics contract rather than a live source subprocess.\n- Focused pytest consumer: `tests/test_finance_forecast_evaluation_spine.py` must keep the positive statistical fixture, no-advice overclaim, live-market overclaim, lookahead split, semantic-negative-case, standalone-bundle, and digest-mismatch tests green.\n- Corpus consumer: `scripts/build_doctrine_projection.py --check-paper-module-corpus` must keep the 98-module Microcosm paper-module corpus valid without hand-editing the generated JSON instance.\n- Scope limit consumer: any public or dissemination copy must preserve the local ceiling that this is synthetic fixture forecast-evaluation evidence, not investment-related actions, live data, performance proof, optimizer authorization, or launch-scope decision.\n\n###### Prior Art Grounding\n\nThis component is grounded in forecast-evaluation statistics rather than trading systems. The core anchors are the [Diebold-Mariano test for comparing predictive accuracy](https://www.nber.org/papers/t0169), the Harvey-Leybourne-Newbold small-sample correction for prediction-error tests ( [DOI reference](https://doi.org/10.1016/S0169-2070%2896%2900719-4)), Hansen's [test for superior predictive ability](https://ideas.repec.org/a/bes/jnlbes/v23y2005p365-380.html), and proper-scoring-rule work such as [Gneiting and Raftery](https://sites.stat.washington.edu/people/raftery/Research/PDF/Gneiting2007jasa.pdf). The purged/embargoed split discipline also follows the financial ML concern that temporal leakage can make backtests look stronger than they are.\n\nMicrocosm borrows the professional evaluation posture: compute admissible statistics when the fixture supports them, return typed refusals when it does not, and keep evaluation separate from advice, live market data, or performance claims.\n\n###### Validation Result record Path\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_finance_forecast_evaluation_spine.py -q --basetemp=/tmp/microcosm_finance_forecast_evaluation_spine_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nFinance forecast evaluation spine proves only synthetic market-shaped forecast-evaluation fixture behavior, copied source manifest integrity, metadata-only result records, admissible statistic computation, and typed refusals for inadmissible finance claims. A diagram view and atlas navigation entry are generated for this module, but those navigation projections do not expand the proof. This module is not investment or trading decisions, uses no live market data, proves no track record or performance claim, mutates no optimizer, certifies no trading strategy, and treats SciPy absence as a typed HLN refusal rather than a hidden statistical success.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe generated JSON instance resolves six bundle-derived edges for this module: it explains component `finance_forecast_evaluation_spine`, explains mechanism `mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine`, is governed by concept `concept.research_and_science_replay_evidence_bundle`, is governed by principle `P-8`, abides by `AX-7`, and cites the code locus `src/microcosm_core/organs/finance_forecast_evaluation_spine.py`. Those edges come from `core/paper_module_capsules.json::paper_modules[30:paper_module.finance_forecast_evaluation_spine]` and the generated structured source record, not from this Markdown prose.\n\nMechanically, `P-8` and `AX-7` show up as refusal discipline: an admissible statistic can pass, but advice-shaped policy flags, live-market authority, leakage-prone time splits, source digest mismatch, and fake HLN p-values must block. The concept edge keeps the module in the research/science replay-evidence family, where proof value is a reproducible fixture and source-manifest witness rather than a claim about markets.\n\nMarket Dashboard Read-Model Bundle Runs a copied market-dashboard reader to catch broken links, stale feeds, and trading overclaims. 5/5\n\nDoes This bundle imports the market dashboard read-model source as public runnable system. Running it over synthetic market-dashboard rows shows how structural read-model checks, feed freshness classification, and related-situation grouping catch dangling graph edges, unsafe route refs, auto-apply overclaims, trading-language overclaims, silent omissions, stale or missing readiness, and no-overlap relation cases.\n\nScope limit This is fixture-bound read-model, freshness, and relation-grouping evidence only; it is not live market-level conclusions, not investment-related actions, not external model access, not launch-scope decision, and not whole-system correctness.\n\nRun\n\n```text\nmicrocosm batch12-market-dashboard-read-model-capsule run-market-dashboard-bundle --input examples/batch12_market_dashboard_read_model_capsule/exported_batch12_market_dashboard_read_model_capsule_bundle --out receipts/runtime_shell/demo_project/organs/batch12_market_dashboard_read_model_capsule\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Unsurfaced Source Primitives Bundle](docs/components.html#component-batch6_unsurfaced_primitives_capsule)\n\nresearch-workflows forecasting finance\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_market_dashboard_read_model_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 12 Market Dashboard Read-Model Bundle\n\nExplains component [Market Dashboard Read-Model Bundle](docs/components.html#component-batch12_market_dashboard_read_model_capsule) mechanism [validates public market dashboard read model bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-market-dashboard-read-model-capsule-validates-public-market-dashboard-read-model-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n\n###### Purpose\n\nThe underlying source module compiles a generated market-situation graph into a backend read model: a trust strip, a ranked situation queue, a detail index, a graph slice, facets, drilldowns, and an API contract. The read model is the shape a dashboard consumes. It runs the copied read-model helpers over small synthetic fixtures and asks one question: does the read-model layer hold its own claim boundary, or does it quietly become a market-truth or advice surface?\n\nThe interesting part is what the validator refuses rather than what it accepts. A presentation layer is the easy place for an overclaim to leak in: a label like \"strong buy\", an `auto_apply_allowed` flag left true, a freshness state that reports green from a stale or missing artifact. The copied `validate_market_dashboard_read_model` scans for trading and action-claim language, requires `oracle_evolve.auto_apply_allowed` to be false and `review_gated` to be true, requires `no_advice_mode` to be enabled, and requires the silent-omission count to be zero. The bundle drives those checks with fixtures designed to trip each one, then records whether the source actually flagged them.\n\nThe other two mechanisms guard the read path itself. A feed-freshness overlay classifies the current run into a small set of honest states so historical green proof cannot stand in for live-feed capability, and a related-situations scorer groups situations by shared entities or matching type without inventing links. Everything is fixture-bound: there is no live market data, no external model access, and no investment-related actions anywhere in scope.\n\n###### Mechanisms\n- `validate_market_dashboard_read_model`\n- `_runtime_feed_freshness_overlay`\n- `_related_situations`\n\n###### What the checks do\n\n`validate_market_dashboard_read_model` is the structural and overclaim gate. It first checks the read model is well formed: the schema version matches, every situation in the queue resolves to a detail entry, every graph-slice edge points at a node that exists, and each drilldown source-ref returns metadata only with no arbitrary file read and no `..` traversal in its route. It then enforces the claim boundary. `auto_apply_allowed` must be false, `review_gated` must be true, `no_advice_mode` must be enabled, the silent-omission count must be zero, and any copied source text is scanned for trading or action-claim language (buy, sell, short, price target, stop loss, and similar). The bundle feeds it five negative fixtures, one per failure shape, and confirms the source emits the matching error string for each. A read model that passed these checks but stayed silent on a planted overclaim would be the real failure, so the bundle treats a missing error as a finding.\n\n`_runtime_feed_freshness_overlay` reads a per-run readiness summary and reports one of three honest states. `fresh_green_feed` requires the run to be ready, all targets met, no blockers, and same-day generation. `stale_green_feed` is artifact-backed but no longer same-day. `blocked_missing_artifact` covers the run that is missing its readiness file, falls short on targets, or carries blockers. The point is that a stale or absent run never reports green: historical proof cannot stand in for live-feed capability, and the state carries a plain truth-statement saying so. The bundle writes synthetic readiness files for each case and checks the classifier returns the expected state.\n\n`_related_situations` builds the \"see also\" cohort for a situation. It collects other situations that either share an entity or match the situation type, ranks them, excludes the focus situation itself, and caps the list at six. The bundle checks one boundary case in particular: a situation with no entity overlap and a different type produces an empty cohort rather than a spurious link.\n\n###### Shape\n\nSource refs\n\nValidate market dashboard read model `validate_market_dashboard_read_model` Blocked missing artifact `blocked_missing_artifact` Diagram source\n\n```text\nflowchart TD A[\"Synthetic dashboard, freshness, related fixtures\"] --> B[\"Copied read-model helpers (market_dashboard_read_model.py)\"] B --> C[\"validate_market_dashboard_read_model\"] C --> C1[\"Structure: schema, queue-to-detail, graph edges, drilldown route safety\"] C --> C2[\"Scope limit: no auto-apply, review-gated, no-advice, no trading language, zero silent omissions\"] B --> D[\"_runtime_feed_freshness_overlay\"] D --> D1[\"fresh_green_feed\"] D --> D2[\"stale_green_feed\"] D --> D3[\"blocked_missing_artifact\"] B --> E[\"_related_situations\"] E --> E1[\"Entity overlap or type match; self-excluded, capped at six; no overlap means empty\"] C1 --> F[\"metadata-only result record and card (refs, digests, counts, verdicts)\"] C2 --> F D1 --> F D2 --> F D3 --> F E1 --> F\n```\n\n###### Reader Evidence Routing\n\nStart with `paper_modules/batch12_market_dashboard_read_model_capsule.json` for bundle-derived source authority, then read this Markdown as the explanatory projection. Use `examples/batch12_market_dashboard_read_model_capsule/exported_batch12_market_dashboard_read_model_capsule_bundle/source_module_manifest.json` to inspect copied-source digest status before opening copied source modules. Use `tests/test_batch12_market_dashboard_read_model_capsule.py` to verify the fixture and bundle expectations.\n\nThe useful evidence is dashboard read-model accounting over synthetic public fixtures: validation rows, freshness overlays, related-situation joins, negative cases, metadata-only result records, and scope limit fields.\n\n###### Prior Art Grounding\n\nThe component is grounded in CQRS/read-model and dashboard-observability patterns: derive presentation-ready projections from source data, make freshness visible, and keep the read surface separate from mutation authority. Useful anchors include:\n- Microsoft's [CQRS pattern](https://learn.microsoft.com/en-us/azure/architecture/patterns/cqrs), where read models are optimized for queries and presentation rather than command handling.\n- [Grafana dashboards](https://grafana.com/docs/grafana/latest/visualizations/dashboards/), which query and transform data sources into operational panels.\n\nMicrocosm borrows the read-model shape for dashboard validation, runtime feed freshness overlays, and related-situation joins. The result is fixture-bound mechanism evidence; it does not become market-level conclusions, external model access, investment-related actions, or launch-scope decision.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the dashboard read-model result record and sign-off JSON. The bundle command validates copied source system, manifest digests, freshness overlay rows, related-situation joins, negative cases, and metadata-only result record posture. The focused test checks fixture validation, bundle validation, digest/anchor coverage, and scope limits.\n\nThis result record path is reader-verifiable evidence only. It excludes launch, external model access, private-system equivalence, market-level conclusions, investment-related actions, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the copied source system produced market-dashboard read-model rows, runtime feed freshness overlays, related-situation joins, negative-case checks, metadata-only result record posture, and validation result records over synthetic inputs.\n\nThis module may not claim launch-scope decision, external model access, private-system equivalence, live market-level conclusions, investment-related actions, deployment posture, source-file changes, publishing-scope decision, or whole-system correctness.\n\n###### Scope limit\n\nThis is fixture-bound market-dashboard read-model mechanism evidence. It excludes launch, external model access, private-system equivalence, market-level conclusions, investment-related actions, deployment posture, source-file changes, publishing-scope decision, or whole-system correctness.\n\nPrediction Market Board Bundle Replays imported quant market math on test rows, with duplicate retention and seven refusals. 5/5\n\nDoes This bundle imports the quant presentation mart source as public runnable system. Running it over synthetic prediction-market and feed-diagnostic rows shows event identity joining, duplicate-market retention by volume, orphan identity refusal, provider drift flags, missingness rows, unavailable previous-green deltas, and source lifecycle vintage enrichment.\n\nScope limit This is deterministic fixture evidence for copied quant helpers only; it is not live prediction-market-level conclusions, not provider truth, not forecast correctness, not investment-related actions, not external model access, and not launch-scope decision.\n\nRun\n\n```text\nmicrocosm batch12-prediction-market-board-capsule run-prediction-market-board-bundle --input examples/batch12_prediction_market_board_capsule/exported_batch12_prediction_market_board_capsule_bundle --out receipts/runtime_shell/demo_project/organs/batch12_prediction_market_board_capsule\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Structural Theses Finance Bundle](docs/components.html#component-batch8_structural_theses_capsule)\n\nresearch-workflows forecasting finance\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_prediction_market_board_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 12 Prediction Market Board Bundle\n\nExplains component [Prediction Market Board Bundle](docs/components.html#component-batch12_prediction_market_board_capsule) mechanism [validates public prediction market board bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-prediction-market-board-capsule-validates-public-prediction-market-board-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n\n###### Purpose\n\nMarket and source dashboards have a recurring failure: a row looks like a fact when it is really a guess. A duplicate listing inflates a volume figure, an unmatched market slug grows a fabricated identity, a feed reports zero rows but the board shows it as healthy, and a \"change since last time\" number appears even when there is no prior baseline to compare against. The single question this component answers is whether the copied presentation-mart logic keeps those distinctions honest when run over public synthetic inputs.\n\nIt does that by importing the real `quant_presentation_mart` helper body and running it against fixtures that are built to expose each trap, then asserting the exact diagnostic the body should produce. The interesting choice is that the board never asserts what a market price means. It computes accounting about the data: which event a market belongs to, whether its identity was actually matched, how providers drifted, where rows went missing, and whether a vintage date is genuinely present. Aggregation is deliberately conservative. A missing value stays missing rather than defaulting to a confident zero, and an unmatched slug is reported as `missing_from_feed_artifact` instead of being given a synthetic event id.\n\nThe result is fixture-bound evidence, not a forecast. The board is a diagnostic surface over public synthetic rows. It does not read live markets, use external model services, or claim that any number is tradeable.\n\n###### Mechanisms\n- `_prediction_market_board`\n- `_polymarket_identity_by_slug`\n- `_provider_drift_monitor`\n- `_missingness_board`\n- `_delta_since_previous_green`\n- `_macro_lifecycle_by_slug`\n- `_macro_regime_board`\n\n###### How it works\n\nThe bundle loads three fixtures, runs the copied helpers, and checks eight named invariants. Each check targets a specific way a board can quietly mislead.\n\nThe event-join engine (`_prediction_market_board` with `_polymarket_identity_by_slug`) groups raw market rows into events using the Polymarket identity snapshot. Identity is matched by `market_slug`. When two rows share the same slug and outcome, only the higher-volume one is kept, so a duplicate listing cannot double a market count or inflate an aggregate. A slug with no identity match is not dropped and is not given a made-up event id. Its `event_identity_status` becomes `missing_from_feed_artifact` and its `max_liquidity` stays at `0.0`. The fixture proves all three: the duplicate fold (top volume 900000 with one surviving market), the orphan with a null event id, and the deduped aggregate.\n\nThe provider-drift monitor (`_provider_drift_monitor`) reads each feed's diagnostics and raises typed flags rather than a single health score. Generic transport problems (`provider_fallback_used`, `html_response_seen`, `fetch_failures`) are kept distinct from FRED-specific ones (`fred_invalid_series`, `fred_network_warning`). The fixture checks that the stock feed surfaces the generic set, the news feed stays clean, and the source feed surfaces the FRED set. Keeping the families apart means a source data-source fault is not laundered into a generic warning.\n\nThe missingness board (`_missingness_board`) lists only feeds that are not both non-empty and `ok`. A feed with zero rows is labelled `zero_rows`; a populated but low-quality feed is labelled `quality_degraded`; a healthy feed is omitted entirely. The fixture confirms the healthy feed is absent and the two failing lanes carry the correct reason, so an empty feed cannot read as present.\n\nThe prior-green delta (`_delta_since_previous_green`) only computes a \"change since last run\" when a previous green run actually exists. With no baseline it returns `status: unavailable` and an empty `row_deltas_by_lane`, which the fixture asserts directly. This is the guard against a delta number that has nothing to compare against.\n\nThe source lifecycle enrichment (`_macro_lifecycle_by_slug` feeding `_macro_regime_board`) buckets source series, then binds each bucket's `vintage_status` and `release_calendar_status` to whether the lifecycle structured source record genuinely carries that metadata. The fixture proves a series with a present vintage reads `available` with the expected observation date, while a series whose lifecycle row is absent reads `missing_from_feed_artifact`. A vintage date is shown only when it is really there.\n\n###### Shape\n\nSource refs\n\nno fabricated event id `missing_from_feed_artifact` Diagram source\n\n```text\nflowchart TD Rows[\"Synthetic market rows\"] --> Join[\"Event join + identity match _prediction_market_board\"] Identity[\"Polymarket identity snapshot\"] --> Join Helpers[\"Quant-mart helper fixtures\"] --> Drift[\"Provider drift monitor generic vs FRED flags\"] Helpers --> Miss[\"Missingness board zero_rows vs quality_degraded\"] Helpers --> Delta[\"Prior-green delta unavailable with no baseline\"] Helpers --> Source[\"Source regime board vintage status bound to structured source record\"] Join --> Dedup{\"Slug + outcome seen before?\"} Dedup -->|yes| Keep[\"Keep higher-volume market\"] Dedup -->|no, unmatched| Orphan[\"missing_from_feed_artifact no fabricated event id\"] Dedup -->|no, matched| Append[\"Append to event aggregate\"] Keep --> Result record[\"metadata-only result record and card diagnostic rows, negative cases, scope limit\"] Orphan --> Result record Append --> Result record Drift --> Result record Miss --> Result record Delta --> Result record Source --> Result record\n```\n\n###### Reader Evidence Routing\n\nStart with `paper_modules/batch12_prediction_market_board_capsule.json` for bundle-derived source authority, then read this Markdown as the explanatory projection. Use `examples/batch12_prediction_market_board_capsule/exported_batch12_prediction_market_board_capsule_bundle/source_module_manifest.json` to inspect copied-source digest status before opening copied source modules. Use `tests/test_batch12_prediction_market_board_capsule.py` to verify the fixture and bundle expectations.\n\nThe useful evidence is diagnostic accounting over synthetic public fixtures: provider identity matching, drift rows, missingness boards, prior-green deltas, lifecycle/vintage rows, source-regime enrichment, negative cases, metadata-only result records, and scope limit fields.\n\n###### Prior Art Grounding\n\nThe component borrows from prediction-market information aggregation and public market-data integration practice: event contracts expose market prices and settlement states, while dashboards must keep provider identity, missingness, and vintage drift visible. Relevant anchors include:\n- Robin Hanson's [information markets](https://mason.gmu.edu/~rhanson/infomkts.html) framing, where markets are used to aggregate dispersed information about uncertain events.\n- The CFTC's [prediction markets explainer](https://www.cftc.gov/LearnandProtect/PredictionMarkets), which frames event contracts, market prices, and consumer cautions.\n- [Polymarket API documentation](https://docs.polymarket.com/api-reference), as a concrete public API family for market, event, tag, series, and profile data.\n\nMicrocosm borrows the information-aggregation and provider-join shape, then keeps the board explicitly diagnostic: identity matching, provider drift, missingness, prior-green deltas, lifecycle vintage, and source-regime enrichment are tested over public synthetic fixtures. It is not market-level conclusions, provider truth, investment-related actions, or launch-scope decision.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the prediction-market board result record and sign-off JSON. The bundle command validates copied source system, manifest digests, provider identity and drift diagnostics, missingness rows, lifecycle rows, negative cases, and metadata-only result record posture. The focused test checks fixture validation, bundle validation, digest/anchor coverage, and scope limits.\n\nThis result record path is reader-verifiable evidence only. It excludes launch, external model access, private-system equivalence, market-level conclusions, provider truth, investment-related actions, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is fixture-bound mechanism evidence for prediction-market joining, quant-mart diagnostics, and source-lifecycle vintage enrichment. It excludes launch, external model access, private-system equivalence, market-level conclusions, provider truth, investment-related actions, source-file changes, publishing-scope decision, or whole-system correctness.\n\n###### Scope limit\n\nIt does not establish live market-level conclusions, provider truth, external model access, investment-related actions, source-file changes, launch-scope decision, publishing-scope decision, private-system equivalence, or whole-system correctness.\n\n#### Source refs\n\nBuilt from public source refs, with each input path recorded for provenance.\n\nEach component has a stable public source path with commands, source links, and its supported scope.",
    "byte_count": 147829,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:area-import-drift",
   "relative_href": "docs/area-import-drift.html",
   "path": "docs/area-import-drift.html",
   "title": "Import & drift control",
   "nav_group": "Areas",
   "nav_label": "Import & drift control",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_audio_level_rms_port",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "batch12_release_claim_language_gate"
    ],
    "family_id": "import_projection_and_drift"
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Area \u00b7 19 components\n\n### Import & drift control\n\nThe boundary that brings material into the public tree and flags drift.\n\n#### Components\n\nSource Projection Import Protocol Gates private-to-public imports, accepting only files with matching fingerprints and sources. 5/5\n\nDoes This is the checkpoint that handles bringing material from the larger private project into the public Microcosm folder. When someone proposes a set of files to import, it verifies each one: it only accepts material, and only when the destination file, a content fingerprint (to confirm the copy matches), a record of where it came from, and the supporting checks all line up. Anything held back as private or secret has to come with a written note saying so, and attempts to claim more authority than allowed are rejected. The record shows exactly what was imported, what was deliberately left out, and what was refused, so the public copy stays honest about its limits instead of quietly leaking private source or pretending to be more than it is.\n\nScope limit It authorizes only verified source body import with provenance and content-digest checks; it does not grant source authority, private-system equivalence, launch, hosted deployment, public sharing, recipient work, provider or Lean/Lake execution, secret or private-source-body export, or any whole-system correctness claim.\n\nRun\n\n```text\nmicrocosm macro-projection-import-protocol plan --input examples/macro_projection_import_protocol/exported_projection_import_bundle\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Formal Math Readiness Gate](docs/components.html#component-formal_math_readiness_gate), [Agent Route Observability Runtime](docs/components.html#component-agent_route_observability_runtime), [Mission Transaction Work Spine](docs/components.html#component-mission_transaction_work_spine), [Navigation Hologram Route Plane](docs/components.html#component-navigation_hologram_route_plane), [Pattern Binding Contract](docs/components.html#component-pattern_binding_contract), [Materials Chemistry Closed Loop Lab Safety Replay](docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay), [Saturation Engines Bundle](docs/components.html#component-batch11_saturation_engines_capsule), [Compliance Pipeline Bundle](docs/components.html#component-batch8_compliance_pipeline_capsule), [Governance & Compiler Mechanisms Bundle](docs/components.html#component-batch10_governance_compilers_capsule), [Live Source Drift Bundle](docs/components.html#component-batch10_live_source_drift_capsule), [Proof / Control / Runtime Import Bundle](docs/components.html#component-batch4_proof_authority_runtime), [Authority Systems Source Bundle](docs/components.html#component-batch5_authority_systems_capsule), [Unsurfaced Source Primitives Bundle](docs/components.html#component-batch6_unsurfaced_primitives_capsule), [Trace, Code-Map & Scheduling Engines Bundle](docs/components.html#component-batch7_macro_engines_capsule), [Demo Take Console Source Bundle](docs/components.html#component-batch7_demo_take_console_capsule), [Oracle Sibling Source Bundle](docs/components.html#component-batch7_oracle_sibling_capsule), [Secondary Runtime Source Bundle](docs/components.html#component-batch7_secondary_runtime_capsule), [Audio Level RMS Port](docs/components.html#component-batch8_audio_level_rms_port), [Policy Engines Bundle](docs/components.html#component-batch8_policy_engines_capsule), [Backend & Governance Engines Bundle](docs/components.html#component-batch9_macro_engines_capsule), [Concurrency Mission Control](docs/components.html#component-concurrency_mission_control), [Engine Room Demo](docs/components.html#component-engine_room_demo), [Executable Doctrine Grammar](docs/components.html#component-executable_doctrine_grammar)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/macro_projection_import_protocol.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Source Projection Import Protocol\n\nExplains component [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol) mechanism [validates public source projection imports](docs/rules-and-ideas.html#lattice-mechanism-mechanism-macro-projection-import-protocol-validates-public-macro-projection-imports) Governed by principles\n- [Carry basis and provenance together](docs/doctrine.html#dcard-p-14)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n\nconcept [source import and projection drift controls as provenance-preserving boundaries](docs/rules-and-ideas.html#lattice-concept-concept-import-projection-and-drift-control-bundle) Abides by axiom [Content-addressed determinism](docs/doctrine.html#dcard-ax-4) Depends on paper modules\n- [Agent Route Observability Runtime](docs/paper-modules.html#paper-module-agent-route-observability-runtime)\n- [Navigation Hologram Route Plane](docs/paper-modules.html#paper-module-navigation-hologram-route-plane)\n- [Pattern Binding Contract](docs/paper-modules.html#paper-module-pattern-binding-contract)\n\n`macro_projection_import_protocol` is the source-available membrane for bringing source system into Microcosm. It exists because Microcosm should be dense and alive without becoming a dump of private source bodies, operator context, model-output data, or launch material.\n\nThe component validates a projection packet with four public claims:\n- source bodies are copied or source-faithfully refactored only when the target file, digest, provenance, validation refs, and metadata-only result record contract verify;\n- private material is omitted with explicit omission result records;\n- public runtime refs are fixtures, standards, paper modules, exported bundles, copied body targets, and result record refs;\n- authority stays capped below launch, public sharing, private-system equivalence, and live source source authority.\n\n###### Purpose\n\nMicrocosm grows by copying real material out of a much larger private codebase. The danger in that move is obvious: a dense public copy is exactly the kind of artefact that quietly carries a secret, an operator conversation, a model-output data, or launch material along with the genuinely useful code. This component exists to answer one question for every copied slice: was this body allowed out, and is the public copy honestly tied to the source it claims to come from?\n\nThe answer is an accounting check, not a trust statement. Each copied row declares its source ref, its public target ref, a content digest, and a material class. The protocol sorts that class into one of two sets. Five classes are source bodies (pattern, standard, tool, result record, proof) and may be copied with provenance. Nine classes are forbidden outright (source note, operator thread, model-output data, account secret, secret, recipient packet, launch packet, and the like) and can never appear as an imported body. Anything claiming to be must also carry a verification record naming the digest, the source-to-target relation, and the command or test that consumes the copy.\n\nThe unusual part is how the protocol treats a copy whose source has since changed. For an exact-copy row it re-hashes the live source file on disk and compares it against the digest recorded at import time. A mismatch is not reported as a failed import. It is recorded as live source drift: the original copy was still honest, the source has simply moved on, and the row is flagged for the refresh actuator rather than failed. The protocol deliberately separates a dishonest import from a stale one. That keeps the public copy faithful without forcing it to track every upstream edit in lock-step, and it stops a routine upstream change from being mistaken for a broken proof.\n\nWhat the check does not do is just as load-bearing. A passing scan proves that the named slice omitted the forbidden material classes and kept result record bodies out of the result record. It does not establish the public copy is complete, equivalent to the private root, or ready to launch. The import is evidence about provenance and boundaries, never a launch decision.\n\n###### Shape\n\nThe protocol is the membrane between source source and public Microcosm evidence. It reads projection cells, classifies the requested import, verifies source/target refs and digest relations, applies the secret-exclusion boundary, and emits metadata-only result records that a public reader can replay without gaining live source authority.\n\nIts shape is deliberately two-level:\n- fixture and exported-bundle commands validate whole projection packets, negative cases, omitted-material result records, and the intake/status board;\n- source-module manifests bind each imported slice to source refs, target refs, digest relation, body-import class, validation refs, and scope limits.\n\nThat split keeps the component usable as a source-open body floor while preventing the paper module from becoming a static copy-count ledger. Counts, status totals, and current body-import floors live in result records and runtime status surfaces.\n\n###### Runtime Shape\n\nRun the fixture:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.macro_projection_import_protocol run --input fixtures/first_wave/macro_projection_import_protocol/input --out receipts/first_wave/macro_projection_import_protocol\n```\n\nRun the exported bundle:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.macro_projection_import_protocol run-projection-bundle --input examples/macro_projection_import_protocol/exported_projection_import_bundle --out receipts/runtime_shell/demo_project/organs/macro_projection_import_protocol\n```\n\nPreview the next import slice without writing result records:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.macro_projection_import_protocol plan --input examples/macro_projection_import_protocol/exported_projection_import_bundle\n```\n\nThe public CLI also exposes the same validator through:\n\nThe `plan` action emits `macro_projection_import_intake_preview_v1`. It does not write result records. It scores each proposed projection cell before import: source refs, public target refs, validation refs, selected pattern ids, copy policy, scope limit, omitted material, secret-exclusion scan count, verified body-import status, and ready/blocked status.\n\nExact-copy is a relation, not the whole protocol. Rows declared as exact-copy prove byte-identical source and target digests and may be maintained by the exact-copy refresh actuator. Rows declared as source-faithful public edits or refactors prove the source source digest and the improved public target digest separately, cite the rewrite or symbol mapping, and are maintained by their own validator/test lane. This is the lane for public-safety redaction, dependency trimming, Microcosm-standard compliance, or runnable local cleanup.\n\nIt also self-hosts the intake cell state machine. Every projection cell carries `projection_status`, `cell_state`, `action_required`, status reason, landed evidence refs, and a next runtime surface. The board totals those fields as status counts plus an open-actionable count so future passes can distinguish a ready but unlanded cell from a verified public runtime import, self-hosted protocol, or runtime bridge that is already consumed.\n\n`microcosm intake` is the runtime bridge over that plan. It writes `receipts/runtime_shell/intake_bridge/runtime_reveal_import_bridge.json`, links the projection cells to the spine and reveal commands, and projects the same statuses into the first-run bridge. Current landed statuses are: `public_runtime_import_landed` for `formal_math_readiness_extensions`, `self_hosted_status_protocol_landed` for `projection_protocol_self_host`, and `runtime_bridge_landed` for `runtime_reveal_import_bridge`. These statuses do not raise authority above public metadata, fixture shape, and result record refs.\n\n`microcosm status` and `microcosm spine` also expose the computed `macro_body_import_floor`. Treat that value as a result record-backed floor, not a stable prose constant: the current authority lives in result records/sign-off/first_wave/macro_projection_import_protocol_fixture_acceptance.json and the first-wave runtime result records under `receipts/first_wave/macro_projection_import_protocol/`. Cold readers should inspect `public_safe_body_import_count`, `public_safe_body_import_status`, `projection_status_counts`, `open_actionable_cell_count`, and `secret_exclusion_scan` there instead of trusting an old markdown count. The floor is still not a launch signal or private-system equivalence claim.\n\n###### Trace-Bundle Source-Body Import\n\nThe trace-bundle slice is the current proof-grade example of a source-body import. Its source-module manifest is `examples/macro_projection_import_protocol/exported_projection_import_bundle/trace_capsule_source_module_manifest.json`; the projection cell is `trace_capsule_prompt_edit_capture_source_modules_import`. The cell imports four source source bodies into the bundle:\n- `tools/meta/observability/cli_prompt_trace.py` -> `source_modules/tools/meta/observability/cli_prompt_trace.py`;\n- `system/server/tests/test_cli_prompt_trace_capsule.py` -> `source_modules/system/server/tests/test_cli_prompt_trace_capsule.py`;\n- `tools/agent_trace_structurer/parser.mjs` -> `source_modules/tools/agent_trace_structurer/parser.mjs`;\n- `tools/agent_trace_structurer/parser.test.mjs` -> `source_modules/tools/agent_trace_structurer/parser.test.mjs`.\n\nThe manifest is the body-floor result record for this slice. It records `module_count: 4`, `body_copied: true`, `body_in_receipt: false`, `sha256_match: true`, line counts, byte counts, required anchors, source refs, target refs, and the shared `copied_non_secret_macro_body` classification. That means the public bundle carries the source bodies, while runtime result records carry paths, hashes, counts, anchors, and validation refs without duplicating the bodies.\n\nDiagram source\n\n```text\nflowchart TD A[\"Copied material row source ref, target ref, digest, material class\"] --> B{\"Material class?\"} B -- \"forbidden class (secret, account secret, source note, operator, provider, launch)\" --> R[\"Reject: forbidden body import\"] B -- \"class (pattern, standard, tool, result record, proof)\" --> C{\"Verification record present and target digest bound?\"} C -- \"no\" --> R2[\"Reject: unverified import\"] C -- \"yes, exact copy\" --> D[\"Re-hash live source source on disk\"] D --> E{\"Source digest still matches?\"} E -- \"yes\" --> F[\"body floor\"] E -- \"no\" --> G[\"Flag live source drift (honest copy, refresh later)\"] G --> F F --> H[\"Per-slice manifest + metadata-only result record\"] H --> I[\"Reader projection\"] H -. does not grant .-> J[\"live source authority, public sharing, launch, or source-file changes\"]\n```\n\nThe imported Python side supplies the trace-bundle runtime surface: `cli_prompt_trace.py` reads selected source files, rejects binary paths, supports line-range and symbol selection, redacts selected excerpt text, and emits numbered source lines with schema metadata. Its companion test module proves terminal validation semantics, repeated prompt interning, source excerpt priority, and completion-report behavior. The imported JavaScript side supplies the Agent Trace Structurer surface: `parser.mjs` preserves `source_text` as the exact copied string, treats `source_lines` and indexes as deterministic navigation projections, and builds lossless attachment clips where exact text is reconstructed from `source_segments[].text`. `parser.test.mjs` proves embedded file artifact indexing, Codex trace shape, final-message extraction, AIW thread classification, and bounded export behavior.\n\nThis is a mechanism/evidence claim, not a launch claim. The slice proves that these four named, source bodies were imported into the public bundle with manifest-backed digest and anchor checks, and that the parser and trace bundle behavior have public fixture coverage. It does not establish that live provider logs, browser UI state, account or browser state, account secrets, raw operator thread bodies, recipient-send material, or future trace-bundle bodies are or exported.\n\nThose artifacts are the source-open floor. The result record bodies stay metadata-only, and private source note, operator thread content, model-output data bodies, account secrets, account or browser state, and launch or recipient material remain outside the public bundle.\n\n###### Evidence Binding\n\nThe component's current public authority is the accepted component row in `core/organ_registry.json` plus the sign-off result record result records/sign-off/first_wave/macro_projection_import_protocol_fixture_acceptance.json. The JSON paper-module bundle is `core/paper_module_capsules.json#paper_module.macro_projection_import_protocol`, and the resolved mechanism row is `core/mechanism_sources.json#mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports`. The runtime source locus is `src/microcosm_core/organs/macro_projection_import_protocol.py`, with focused regression coverage in `tests/test_macro_projection_import_protocol.py`.\n\nThe exported bundle does not have a single catch-all source-module manifest. It carries one `*_source_module_manifest.json` file per imported slice under `examples/macro_projection_import_protocol/exported_projection_import_bundle/`, plus copied targets under that bundle's `source_modules/` tree. That per-slice manifest shape is part of the evidence: it lets each imported route, tool, standard, result record, proof, or runtime body keep its own source ref, target ref, digest relation, validation refs, and scope limit.\n\nThe first command for the fixture lane is:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.macro_projection_import_protocol run --input fixtures/first_wave/macro_projection_import_protocol/input --out receipts/first_wave/macro_projection_import_protocol\n```\n\n###### Reader Evidence Routing\n\nUse this order when checking the module:\n1. Read the JSON bundle and standard to confirm the paper-module binding, scope limit, source-module manifest contract, and result record fields.\n2. Run the fixture command to validate projection cells and negative cases against temporary result records.\n3. Run the exported-bundle command to validate the public bundle and copied source-module surfaces.\n4. Inspect the source-module manifests for exact-copy versus source-faithful edit relations before deciding which refresh lane applies.\n5. Run the focused regression and paper-module corpus checks before landing a markdown or manifest update.\n\nIf a manifest is dry but a bundle-level validator still fails, check whether a bundle manifest carries its own expected digest or line-count rows. Do not infer that all companion manifest surfaces were refreshed just because an exact-copy source-module dry run is clean.\n\n###### Prior Art Grounding\n\nThe import membrane follows established provenance and software-supply-chain patterns: copied or refactored artifacts need source refs, target refs, digests, validation refs, omission records, and a claim boundary. The closest public anchors are [W3C PROV](https://www.w3.org/TR/prov-overview/) for describing entity/activity/agent provenance, the [SLSA specification](https://slsa.dev/spec/) for artifact integrity and provenance in software supply chains, and [in-toto](https://in-toto.io/) for linking supply-chain steps through signed metadata.\n\nMicrocosm applies those patterns to a public/private projection boundary rather than to launch attestation. The per-slice source-module manifests, secret-exclusion scans, metadata-only result records, and omission result records are inspired by that provenance lineage, but they remain a local validator contract for public Microcosm fixtures and exported bundles.\n\n###### Negative Cases\n\nThe validator intentionally rejects:\n- private body import requests;\n- omitted source material without omission result record refs;\n- authority upgrades into live source source authority;\n- projection cells without validation refs;\n- launch, public sharing, recipient-work, or secret-export claims.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate/`, reproduce this page's proof boundary with temporary result records:\n\nThese checks validate projection cells, per-slice manifests, omitted-material result records, and metadata-only result record policy only. A diagram view is generated for this module and an atlas card is linked. The checks do not authorize live source source authority, secret export, launch, public sharing, source-file changes, provider or Lean/Lake execution, or whole-system correctness.\n\nRe-enter this module when a new projection cell lands, a source-module manifest is refreshed, or a result record count changes. The repair route is to rerun the component validator, refresh the first-wave and sign-off result records, and update the standard or paper module only where the result record contract changed. Do not raise the scope limit from documentation edits.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can claim that the protocol validates projection cells, per-slice manifests, copied or source-faithful target bodies, omission result records, negative cases, and metadata-only result record policy. It can also claim that accepted result records expose current `public_safe_body_import_count`, `public_safe_body_import_status`, `projection_status_counts`, `open_actionable_cell_count`, and `secret_exclusion_scan` fields.\n\nIt cannot claim that Microcosm is launch-ready, equivalent to the private root, free of all private material, or authorized to publish. It also cannot raise an exact-copy refresh into permission to rewrite source-faithful public refactors, mutate live source source, use external model services, run Lean/Lake, or export operator/session bodies. Any stronger claim must come from the owning result record, standard, or launch gate.\n\nScope boundary: metadata, provenance, public runtime refs, copied-body presence, green fixture result records, digest refs, and intake status counts are bounded import evidence only. They are not launch-scope decision, publishing-scope decision, private-system equivalence, live source authority, semantic truth, complete secret-scan coverage, external model service, Lean/Lake execution, or whole-system correctness.\n\n###### Scope limit\n\nThis paper module explains a public projection protocol. It excludes launch, hosted deployment, public sharing, recipient work, external model access, Lean/Lake execution, secret export, private source-body export, or whole-system correctness.\n\nSource and projection details\n\n###### Source-Open Body Floor\n\nExact-copy rows are refreshed by `refresh-exact-copy-source-modules`; source-faithful edit rows stay with their own validator/test lane because their target body is intentionally public cleanup, normalization, or path redaction rather than byte identity.\n\nThe bundle body floor is never inferred from prose. A reader should inspect:\n- `examples/macro_projection_import_protocol/exported_projection_import_bundle/*_source_module_manifest.json` for per-slice source-to-target relations;\n- the copied targets under `examples/macro_projection_import_protocol/exported_projection_import_bundle/source_modules/`;\n- `receipts/first_wave/macro_projection_import_protocol/projection_import_intake_board.json` for cell state, open actions, and landed evidence refs;\n- result records/sign-off/first_wave/macro_projection_import_protocol_fixture_acceptance.json for the accepted public authority result record.\n\nWorld Model Projection Drift Control Room Pinpoints where a projected world-model copy drifted from its real source, with repair routes. 5/5\n\nDoes This component shows, in plain result records, where a projected copy of a world model has drifted from its real source. For each drift it names the signal, points to where the real source lives, gives a suggested repair route, and cites the test that would confirm the fix. The result records show the drift is being flagged honestly: the projection never claims to be the source of truth, and the result records deliberately leave out any non-public or secret-backed data.\n\nScope limit It only validates the declared public, metadata-only drift-result record contract. It supports inspection of recorded drift rows and source-linked refs; live repair, source control, doctrine changes, model-output export, public sharing, and launch are outside the fixture. It does not claim complete drift coverage or live repair control.\n\nRun\n\n```text\nmicrocosm world-model-projection-drift-control-room run-drift-control-bundle --input examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle --out receipts/runtime_shell/demo_project/organs/world_model_projection_drift_control_room\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Materials Chemistry Closed Loop Lab Safety Replay](docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay), [Mechanistic Interpretability Circuit Attribution Replay](docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay), [Prediction Oracle Reconciliation](docs/components.html#component-prediction_oracle_reconciliation), [Spatial World Model Counterfactual Simulation Replay](docs/components.html#component-spatial_world_model_counterfactual_simulation_replay), [Tool Server Pressure Inventory](docs/components.html#component-tool_server_pressure_inventory), [Market Dashboard Read-Model Bundle](docs/components.html#component-batch12_market_dashboard_read_model_capsule), [Structural Theses Finance Bundle](docs/components.html#component-batch8_structural_theses_capsule)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.world_model_projection_drift_control_room) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module World-Model Projection Drift Control Room\n\nExplains component [World Model Projection Drift Control Room](docs/components.html#component-world_model_projection_drift_control_room) mechanism [validates public projection drift control boundary](docs/rules-and-ideas.html#lattice-mechanism-mechanism-world-model-projection-drift-control-room-validates-public-projection-drift-control-boundary) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Make doctrine executable before authoritative](docs/doctrine.html#dcard-p-12)\n\n###### Abstract\n\n`world_model_projection_drift_control_room` is Microcosm's public projection-drift control component. It turns projected world-model rows into an auditable runtime result record: each row must carry a source signal, source ref, target ref, repair route, validation ref, fact-authority mesh, and explicit scope boundary booleans before the projection can pass.\n\nThe mechanism is deliberately narrow. It validates that public, metadata-only projection rows remain tied to named source evidence and rejection policy; it does not claim that the projection is source authority, that a live route was repaired, that private runtime state was inspected, or that Microcosm is public sharing-authorized or launch-authorized.\n\n###### Purpose\n\nThis component exists to answer one question: when a public read model says something has drifted, can that claim still be traced back to a real source artifact, or has the read model quietly started to stand in for the source?\n\nThe design choice that makes this more than a shape check is that the supplied `drift_rows.json` is never trusted as input. The validator recomputes the drift rows from the public runtime result record, then treats the supplied file only as an expected snapshot whose role is recorded as `expected_snapshot_not_source_authority`. If the snapshot disagrees with the recomputed rows, that is flagged as staleness, not accepted as fact. Each recomputed row is then diffed against a real source-state artifact: a row from the extracted-pattern ledger, or a view-quality action-map lens whose own summary is re-derived from its action rows. A row that cannot be re-derived from source, or whose guard reference or derivation path has changed, moves the verdict to `blocked`.\n\nThe same boundary holds in the other direction. A drift row may name a repair route, but the route stays a label rather than an action: the validator rejects any row that authorises live repair, source-file changes, automatic doctrine changes, or launch. A projection here can describe what is wrong and where to go next without ever being allowed to act on it or to speak for the source it describes.\n\n###### Telos\n\nProjection drift is the failure mode where a useful read model begins to look like truth. A dashboard row, generated structured source record, route card, or public runtime result record can be correct enough for navigation while still being downstream of a source artifact that owns the actual authority.\n\nThis component makes that boundary executable. It accepts public drift rows only when they retain:\n- a real source signal and source ref\n- a target ref that names where the projection appears\n- a repair-route label that remains a route, not a live mutation\n- a validation ref that can witness the row\n- a fact-authority record with authority, appearance, derivation, guard, and residual-route fields\n- metadata-only result record policy and an explicit scope limit\n\n###### Technical Object\n\nThe runtime locus is `src/microcosm_core/organs/world_model_projection_drift_control_room.py`. The exported public example is `examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle`. The accepted first-wave fixture is `fixtures/first_wave/world_model_projection_drift_control_room/input`.\n\nThe component exposes two public validation routes:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.world_model_projection_drift_control_room \\\n  run-drift-control-bundle \\\n  --input examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle \\\n  --out /tmp/microcosm_world_model_projection_drift_bundle\n```\n\n###### Projection-Drift Mechanism\n\nThe validator recomputes the public projection rows from runtime result records and source artifacts, then compares them with the supplied fixture snapshot. A row passes only when the recomputed projection, supplied snapshot, source-ref evidence, source-state diff, source-module manifest check, copied-body geometry probe, runtime result record witness, and non-public-state exclusion scan all stay inside the public boundary.\n\nThe core result payload records:\n- `drift_summary.row_count: 8`\n- `source_ref_count: 8`\n- `target_ref_count: 8`\n- `repair_route_count: 8`\n- `validation_ref_count: 8`\n- `fact_authority_row_count: 8`\n- `guarded_projection_treatment_count: 8`\n- `unguarded_duplicate_count: 0`\n- `runtime_receipt_witnessed_row_count: 8`\n- `source_authority_claim_count: 0`\n- `live_repair_authorized_count: 0`\n- `source_mutation_authorized_count: 0`\n- `automatic_doctrine_promotion_count: 0`\n\nThe source-state result record evidence is intentionally small and inspectable. The focused test suite expects exactly two source-state evidence classes: `extracted_pattern_ledger_row_diff` and `view_quality_action_map_summary_diff`.\n\n###### Runtime Result record Evidence\n\nThe public result record floor is metadata-only. The first-wave result records live at:\n- `receipts/first_wave/world_model_projection_drift_control_room/world_model_projection_drift_control_room_result.json`\n- `receipts/first_wave/world_model_projection_drift_control_room/world_model_projection_drift_control_room_validation_receipt.json`\n- result records/sign-off/first_wave/world_model_projection_drift_control_room_fixture_acceptance.json\n\nThe exported-bundle result record lives at:\n- `receipts/runtime_shell/demo_project/organs/world_model_projection_drift_control_room/exported_projection_drift_control_bundle_validation_result.json`\n\nThe exported-bundle result record records `body_import_status: real_runtime_receipt_landed`, `body_material_status: copied_non_secret_macro_body_landed`, `body_copied_material_count: 4`, `body_in_receipt: false`, and `release_authorized: false`. Its scope limit also sets `source_authority_claim`, `source_mutation_authorized`, `live_route_repair_authorized`, `automatic_doctrine_promotion_authorized`, `provider_payload_exported`, `publication_authorized`, and `release_authorized` to false.\n\n###### Source-Available Body Floor\n\nThe exported bundle includes copied source bodies so a reader can inspect the implementation class without receiving private runtime state in the result record. The source-module manifest is:\n- `examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle/source_module_manifest.json`\n\nIt records four copied modules:\n- `world_model_drift_aggregate_source_body_import`\n- `world_model_drift_endpoint_source_body_import`\n- `view_quality_action_map_source_body_import`\n- `view_quality_action_map_test_body_import`\n\nEvery manifest row is `body_copied: true`, `body_in_receipt: false`, `classification: copied_non_secret_macro_body`, and `material_class: public_macro_tool_body`, with `sha256_match: true`. The largest bodies are the Station world-model reducer `system/server/world_model.py`, the `/api/drift` endpoint in `system/server/main.py`, the view-quality action-map builder `tools/meta/observability/view_quality_census.py`, and its focused source regression test `system/server/tests/test_view_quality_census.py`.\n\nThe body floor is therefore source-available by bundle, not by result record. Result records carry paths, hashes, counts, anchor checks, and verdicts; they do not duplicate private bodies, model-output data, browser UI state, account or browser material, source notes, recipient-send state, or account secret-equivalent payloads.\n\n###### Mutation and Rejection Contract\n\nThe validator is not a shape-only check. The focused test suite mutates the public inputs and requires the verdict to move to `blocked` when authority or freshness is broken:\n- missing source refs produce `DRIFT_SOURCE_REF_REQUIRED`\n- missing repair or validation refs produce `DRIFT_VALIDATION_REF_REQUIRED`\n- missing fact-authority mesh produces `DRIFT_FACT_AUTHORITY_REQUIRED`\n- projection rows claiming source authority produce `DRIFT_SOURCE_AUTHORITY_FORBIDDEN`\n- live repair authority produces `DRIFT_LIVE_REPAIR_FORBIDDEN`\n- non-public runtime export produces `DRIFT_PRIVATE_RUNTIME_EXPORT_FORBIDDEN`\n- model-output data export produces `DRIFT_PROVIDER_PAYLOAD_FORBIDDEN`\n- automatic doctrine changes produces `DRIFT_AUTOMATIC_DOCTRINE_PROMOTION_FORBIDDEN`\n- launch-scope decision produces `DRIFT_RELEASE_AUTHORITY_FORBIDDEN`\n\nAdditional source-drift tests cover unwitnessed runtime rows, stale supplied snapshots, mutated runtime result record refs, missing source-ledger rows, source ledger rows without `source_refs`, view-quality source-file changes, internally consistent fake source refs, and selected-row order drift. These cases matter because a projection can be internally coherent and still lose authority if its source evidence, guard result record, or derivation path changes.\n\n###### Shape\n\nSource refs\n\nPublic runtime result record `public_projection_drift_control_lens.json` expected snapshot, source-linked only `Supplied drift_rows.json` Diagram source\n\n```text\nflowchart TD Result record[\"Public runtime result record public_projection_drift_control_lens.json\"] Recompute[\"Recompute drift rows from selected_pattern_ids + result record rows\"] Snapshot[\"Supplied drift_rows.json expected snapshot, source-linked only\"] SourceDiff[\"Source-state diff extracted-pattern ledger + view-quality action map\"] Geometry[\"View-quality geometry grade via copied view_quality_census.py\"] Witness[\"Runtime result record witness every recomputed row appears in the result record\"] Reject[\"Rejection gates missing/fake refs, private export, source authority, live repair, source-file changes, doctrine changes, launch\"] Result records[\"metadata-only result records first-wave, sign-off, exported bundle\"] Ceiling[\"Scope limit projection evidence only\"] Result record --> Recompute Recompute --> Snapshot Recompute --> SourceDiff Recompute --> Witness Recompute --> Geometry Snapshot --> Reject SourceDiff --> Reject Witness --> Reject Geometry --> Reject Reject --> Result records Result records --> Ceiling\n```\n\n###### Reader Evidence Routing\n\nRead in this order:\n1. Bundle and generated instance: `core/paper_module_capsules.json::paper_modules[27:paper_module.world_model_projection_drift_control_room]` and `paper_modules/world_model_projection_drift_control_room.json`.\n2. Runtime source and focused tests: `src/microcosm_core/organs/world_model_projection_drift_control_room.py` and `tests/test_world_model_projection_drift_control_room.py`.\n3. First-wave fixture and result records: `fixtures/first_wave/world_model_projection_drift_control_room/input`, `receipts/first_wave/world_model_projection_drift_control_room/`, and result records/sign-off/first_wave/world_model_projection_drift_control_room_fixture_acceptance.json.\n4. Exported-bundle evidence: `examples/world_model_projection_drift_control_room/exported_projection_drift_control_bundle/` and `receipts/runtime_shell/demo_project/organs/world_model_projection_drift_control_room/exported_projection_drift_control_bundle_validation_result.json`.\n5. Generated projection evidence: Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges_after_atlas_binding`, and the one selective dependency residual preserved by the generated JSON instance.\n\n###### Prior Art Grounding\n\nThis control room watches a world-model projection for drift between what the model expects and what the runtime reports. It draws on the model-monitoring and [concept-drift](https://en.wikipedia.org/wiki/Concept_drift) literature, which treats a growing gap between predicted and observed behaviour as an operational signal. Microcosm borrows the drift-as-signal shape over metadata-only result records; the result is fixture-bound monitoring evidence, source-linked only, private runtime inspection, or whole-system correctness.\n\n###### Validation Result record Path\n\nFocused runtime validation:\n\n```text\nPYTHONPATH=src ./repo-pytest \\\n  tests/test_world_model_projection_drift_control_room.py -q\n```\n\nPaper-module corpus validation:\n\n```text\ncd microcosm-substrate\nPYTHONPATH=src ../repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nPaper-module index validation from the repo root:\n\n```text\n./repo-python tools/meta/factory/build_paper_module_index.py --check\n```\n\n###### Scope boundary\n\n###### Limitations\n\nThe component validates metadata-only drift result records and public-source refs. It supports inspection of recorded drift rows; live repair, source control, doctrine changes, model-output export, public sharing, and launch are outside the fixture. It also does not claim that every possible world-model drift source is covered. Its claim is narrower: the named public drift rows are guarded by source refs, target refs, validation refs, fact-authority mesh, copied source body evidence, metadata-only result records, and negative-case rejection.\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Public metadata-only runtime result record and copied source-module evidence only; no private runtime body inspection, source authority, source-file changes, live route repair, automatic doctrine changes, model-output data export, launch-scope decision, publishing-scope decision, or whole-system correctness claim.\n\nSource and projection details\n\n###### Governing Lattice Bindings\n- source record: `core/paper_module_capsules.json::paper_modules[27:paper_module.world_model_projection_drift_control_room]`\n- Generated instance: `paper_modules/world_model_projection_drift_control_room.json`\n- Standard: `standards/std_microcosm_world_model_projection_drift_control_room.json`\n- Mechanism: `mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary`\n- Concept: `concept.import_projection_and_drift_control_bundle`\n- Principle refs: `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-8`, `P-9`, `P-12`, `P-15`\n- Axiom refs: `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, `AX-11`\n\nThe generated JSON instance reports `source_authority: json_capsule`, 19 resolved relationship edges, Mermaid `available_from_capsule_edges`, Atlas `linked_from_capsule_edges_after_atlas_binding`, and one honest selective residual for `paper_module.depends_on.paper_module` because the bundle does not yet name a sibling dependency module.\n\nUnsurfaced Source Primitives Bundle Exposes eleven real but under-surfaced parts and rejects non-public-state and overclaim cases. 5/5\n\nDoes This bundle imports the Set-6 source primitives that were real but under-surfaced. It exposes the 11 mechanisms, exact source-module manifest, source execution outcomes, and negative cases without exposing copied body text, raw operator transcripts, prompt-shelf private logs, provider/browser state, live market data, or media assets in result records.\n\nScope limit It validates only a public source-open bundle and bounded public exercises; it is not raw operator memory, not prompt-shelf capture authority, not live market data, not provider/browser state, not media launch, and not public sharing or launch-scope decision.\n\nRun\n\n```text\nmicrocosm batch6-unsurfaced-primitives-capsule run --input fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input --out receipts/first_wave/batch6_unsurfaced_primitives_capsule --acceptance-out receipts/acceptance/first_wave/batch6_unsurfaced_primitives_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch6_unsurfaced_primitives_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 6 Unsurfaced Primitives Bundle\n\nExplains component [Unsurfaced Source Primitives Bundle](docs/components.html#component-batch6_unsurfaced_primitives_capsule) mechanism [validates public unsurfaced primitives bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch6-unsurfaced-primitives-capsule-validates-public-unsurfaced-primitives-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\nThis component imports the Set-6 source primitives that the scout identified as real but under-surfaced. It is a source-open bundle: exact copied source source bodies plus bounded public exercises and stable negative cases.\n\nThe bundle covers text structuring, provenance reconciliation, epistemic display guards, governance policy judgment, clone-local concurrency, market-clock scheduling, provider recovery scoping, and demo-take temporal remapping. It does not import raw operator transcripts, prompt-shelf private logs, browser/provider state, live market data, account secrets, audio, video, or public sharing state.\n\n###### Purpose\n\nA scout found eleven small primitives scattered across the wider system that were real and load-bearing but had never been surfaced as public evidence. They are the sort of utility code that quietly decides whether a larger feature is correct: a finance unit-scale check, a clock that fires market events once per session, a function that subtracts paused time from a recorded video offset. This bundle exists to bring those eleven into the public system without pretending they are anything grander than they are.\n\nThe single question it answers is narrow but useful: do the copied bodies still behave as claimed? It is easy to copy a function into a public bundle, check its file hash, and call that proof. That only shows the bytes match. It says nothing about whether the logic is right. This bundle goes one step further. For each primitive it imports the copied body and runs it on a small public synthetic input, then asserts the specific output the real code should produce.\n\nThe unusual part is that the eleven primitives are checked by execution, not by description. The Markdown prose and the JSON bundle say what each one is meant to do; the component proves it by calling the real function and comparing the answer. Each primitive also carries a paired negative case, a deliberately malformed input that the code must reject or correct, so the bundle shows both the working path and the guard. No private bodies, transcripts, or live data enter the result records; only refs, digests, anchor names, and the pass or fail of each exercise.\n\n###### Prior Art Grounding\n\nThis bundle borrows from provenance modeling, risk-governance frameworks, policy-engine design, and temporal modeling. Useful anchors include:\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), for reconciling derived artifacts back to entities, activities, and responsible agents.\n- NIST's [AI Risk Management Framework](https://www.nist.gov/itl/ai-risk-management-framework), as a governance vocabulary for mapping, measuring, and managing system risk without turning every guard into a launch claim.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), which separates policy evaluation from application code through a general-purpose policy engine.\n- Martin Fowler's [bitemporal history](https://martinfowler.com/articles/bitemporal-history.html), as a prior pattern for preserving event time separately from record time.\n\nMicrocosm borrows the provenance, governance, policy-evaluation, and temporal separation patterns, but keeps this bundle at source-open public fixtures. It does not expose private operator memory, live market data, provider state, or publishing-scope decision.\n\n###### Shape\n\nStart from the bundle JSON, not from this prose. The source row `core/paper_module_capsules.json::paper_modules[78:paper_module.batch6_unsurfaced_primitives_capsule]` is the authority for the component subject, mechanism subject, concept edge, principle and axiom refs, dependency modules, runtime locus, generated projection statuses, and the scope limit. The generated JSON instance is `paper_modules/batch6_unsurfaced_primitives_capsule.json`; it is the parity projection that carries `source_authority: json_capsule`, the resolved relationship edges, the generated Mermaid and Atlas statuses, and the explicit scope boundaries.\n\nSource refs\n\nJSON bundle source row `core/paper_module_capsules.json` `paper_module.batch6_unsurfaced_primitives_capsule` Generated JSON instance source basis: source record `paper_modules/batch6_unsurfaced_primitives_capsule.json` `paper_modules/batch6_unsurfaced_primitives_capsule.md` Standards std_microcosm public Microcosm boundary `standards/std_microcosm_batch6_unsurfaced_primitives_capsule.json` Runtime/source loci runtime_shell and source_engines_gallery routes `src/microcosm_core/organs/batch6_unsurfaced_primitives_capsule.py` Fixtures, examples, source bundle `fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input` `examples/.../exported_batch6_unsurfaced_primitives_capsule_bundle` `source_module_manifest.json` Tests and result records `tests/test_batch6_unsurfaced_primitives_capsule.py` `receipts/first_wave/... validation/result/board` `receipts/acceptance/... fixture_acceptance.json` Diagram source\n\n```text\nflowchart LR Bundle[\"JSON bundle source row core/paper_module_capsules.json paper_module.batch6_unsurfaced_primitives_capsule\"] Instance[\"Generated JSON instance paper_modules/batch6_unsurfaced_primitives_capsule.json source basis: source record\"] Markdown[\"Markdown reader projection paper_modules/batch6_unsurfaced_primitives_capsule.md\"] Standards[\"Standards standards/std_microcosm_batch6_unsurfaced_primitives_capsule.json std_microcosm public Microcosm boundary\"] Runtime[\"Runtime/source loci src/microcosm_core/components/batch6_unsurfaced_primitives_capsule.py runtime_shell and macro_engines_gallery routes\"] Fixtures[\"Fixtures, examples, source bundle fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input examples/.../exported_batch6_unsurfaced_primitives_capsule_bundle source_module_manifest.json\"] Result records[\"Tests and result records tests/test_batch6_unsurfaced_primitives_capsule.py result records/first_wave/... validation/result/board result records/sign-off/... fixture_acceptance.json\"] Projections[\"Generated navigation projections Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] Ceiling[\"Scope limit fixture-bound public source-body import digest/anchor checks, synthetic exercises, negative cases, metadata-only result records only\"] Forbidden[\"Not authorized live operator memory, prompt capture authority, live market data, provider/browser state, media launch, source-file changes, public sharing or launch-scope decision, private-system equivalence, whole-system correctness\"] Bundle -->|seeds| Instance Bundle -->|bounds| Markdown Bundle -->|names standard contract and ceiling| Standards Bundle -->|cites resolved code locus| Runtime Runtime -->|runs fixture and bundle validators| Result records Fixtures -->|public inputs and exact copied source bodies| Runtime Fixtures -->|26 copied modules; sha256 and anchor checks; body_in_receipt false| Result records Instance -->|derives relationship edges| Projections Projections -->|navigation projection only| Markdown Standards -->|public/private and launch boundary| Ceiling Result records -->|pass/fail evidence remains bounded by| Ceiling Ceiling -->|excludes| Forbidden Markdown -->|must not outrank| Bundle\n```\n\nThe module is \"actual\" only because the reader can traverse these concrete surfaces:\n- **Bundle/source row:** `paper_module.batch6_unsurfaced_primitives_capsule` binds the accepted `batch6_unsurfaced_primitives_capsule` component, the `mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule` mechanism, `concept.import_projection_and_drift_control_bundle`, principles `P-2`, `P-5`, `P-9`, `P-15`, axioms `AX-4`, `AX-8`, `AX-10`, `AX-11`, and the dependency modules named in the structured lattice table below.\n- **Generated instance:** `paper_modules/batch6_unsurfaced_primitives_capsule.json` reports active status, `public_paper_module_json_seeded_from_capsule_registry_not_legacy_markdown_authority`, generated Mermaid `available_from_capsule_edges`, generated Atlas `linked_from_capsule_edges`, no unpopulated selective relations, and scope boundaries that the row is not runtime-correctness, launch-readiness, or whole-system authority.\n- **Standards:** `standards/std_microcosm_batch6_unsurfaced_primitives_capsule.json` is the specific public bundle standard, backed by `std_microcosm` for the wider Microcosm entry and public/private boundary. It allows public mechanism ids, source refs, digests, anchors, exact copied source modules, synthetic outcomes, scope limits, and scope boundaries; it forbids account secrets, account or browser state, model-output data bodies, browser UI live-access material, raw operator transcripts, prompt-shelf private logs, live market data responses, media assets, and public sharing operation state.\n- **Runtime/source loci:** the resolved locus is `src/microcosm_core/organs/batch6_unsurfaced_primitives_capsule.py`, with the runtime shell bundle-validation route and source-engines gallery route as readers over the same public component. The source bundle manifest records 26 copied source bodies with exact-copy source-to-target relations, SHA-256 matches, required anchors, and `body_in_receipt: false`.\n- **Fixtures/examples/source bundle:** fixture inputs live under `fixtures/first_wave/batch6_unsurfaced_primitives_capsule/input`; the exported bundle lives under `examples/batch6_unsurfaced_primitives_capsule/exported_batch6_unsurfaced_primitives_capsule_bundle`; `source_module_manifest.json` is the source-open body-floor manifest for copied modules and metadata-only result record handling.\n- **Tests/result records:** `tests/test_batch6_unsurfaced_primitives_capsule.py` covers the runtime component, copied subengine proofs, exact-copy imports, bundle shape, and private body omission. Result record authority is the fixture sign-off row plus `receipts/first_wave/batch6_unsurfaced_primitives_capsule/batch6_unsurfaced_primitives_capsule_result.json`, `batch6_unsurfaced_primitives_capsule_board.json`, `batch6_unsurfaced_primitives_capsule_validation_receipt.json`, and result records/sign-off/first_wave/batch6_unsurfaced_primitives_capsule_fixture_acceptance.json; the validation result record reports pass for source-module manifest status, exercise status, negative-case status, secret exclusion, and result record body scan.\n- **Scope limit:** this page can claim fixture-bound public source-body import, copied-module digest/anchor evidence, synthetic source-exercise evidence, negative-case coverage, and metadata-only result records only. It cannot claim live operator memory, prompt-shelf capture authority, live market data, provider/browser state, media launch, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.\n\n###### Source Modules\n\nThe exported bundle copies the relevant source sources under `examples/batch6_unsurfaced_primitives_capsule/exported_batch6_unsurfaced_primitives_capsule_bundle/source_modules/`. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.\n\n###### Reader Evidence Routing\n\nRead this module through the fixture command, exported-bundle validation, focused pytest, structured source record, and result record paths. The fixture proves a public source-open Set-6 exercise, while the bundle proves copied source digests, anchors, synthetic source exercises, negative cases, copied-subengine proofs, and metadata-only cards. The generated structured source record proves that Mermaid and Atlas availability come from bundle edges.\n\nThe validator's mechanism set remains evidence for the accepted Set-6 component result record. It does not turn this page into live operator memory, prompt-shelf capture authority, trading decisions, live provider recovery, browser state, demo media launch, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Mechanism Set\n\nThe validator requires exactly these 11 mechanism rows: source note keyphrase engine, schema-loose distillation index, operator handoff linkage, observed-turn window merge, market situation graph, finance numeric assurance, fail-closed status judge, idea-microcosm concurrency guard, metabolism market clock, population-lane provider recovery, and demo-take temporal join.\n\nThe source module manifest requires 14 exact copied source source/support modules. The fixture requires 11 stable negative cases, one per mechanism row. The command card is the intended cold-reader first surface; the full result record is the drilldown.\n\n###### How it works\n\nFor each mechanism the component loads the copied source body, runs it on a fixed public synthetic input, and checks the exact result. A few of the exercises make the idea concrete.\n- **Demo-take temporal join.** `video_t_seconds` converts a wall-clock offset into a position in a recorded video by subtracting elapsed paused time. The exercise feeds it a 120-second wall offset with one pause and resume fifteen seconds apart, and asserts the result is exactly 105.0. A second call with a pause that has not yet resumed checks the open-pause branch returns 15.0. The negative case confirms a still-open pause is handled rather than ignored.\n- **Finance numeric assurance.** `build_finance_numeric_assurance` recomputes declared numbers instead of trusting them. The exercise hands it a flow row tagged `usd_millions` whose `flow` and `flow_usd` fields disagree by orders of magnitude, plus a probability declared as 70.2. The check raises `stockgrid_flow_unit_scale_mismatch` and `probability_bounds`, and the result record's `display_state` becomes `blocked` rather than `trusted`. The point is that a mislabelled unit or an out-of-range probability fails closed.\n- **Operator handoff linkage.** `score_pair` compares an agent's suggestion (a Type B capture) against what the operator later typed (a Type A input) using containment, token overlap, and anchor matching. The exercise scores a related pair above the 0.8 floor with containment true, then scores an unrelated \"summarize the weather\" input and asserts it falls below 0.3. This is how the primitive tells a real handoff from a coincidence.\n- **Market-clock scheduling.** `due_fire_points` decides which scheduled market events are due at a given moment. The exercise sets the clock to 15:31 UTC with the open event already fired earlier that day, then asserts the hourly points fire while the already-fired open event is suppressed. The guard is idempotence: an event that already fired must not fire again in the same session.\n\nThe other mechanisms follow the same shape: keyphrase ranking returns ranked phrases for real text but an empty list for stopword-only input; the schema-loose distiller keeps assistant text and operator tail as separate roles without persisting either body; the fail-closed status judge blocks a transition when its policy is malformed; the concurrency guard reports that a parent directory and a child path overlap. Every exercise records only its pass or fail and a few summary numbers, never the copied body it ran against.\n\n###### Copied-Subengine Proofs\n\nThe post-Set-12 proof surface exercises two copied dormant subengines directly from the exported source bundle:\n- `operator_thread_memory` is loaded from the copied manifest and checked with synthetic observed-window cases for `observed_window_within_memory` and `preserved_existing_no_overlap`.\n- `market_situation_graph` is loaded from the same copied bundle and checked with a public synthetic mart that covers fixture scoring, counterevidence, context rows, and source refs.\n\nThese are public test-level proofs in `tests/test_batch6_unsurfaced_primitives_capsule.py`. They do not add an accepted component, do not widen the fixture scope limit, and do not export private thread memory or live market data.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the Set-6 public primitive-import result record and sign-off JSON. The bundle command validates copied source digests, anchor evidence, synthetic source exercises, negative cases, and metadata-only cards. The focused test covers the runtime component, copied subengine proofs, exported bundle shape, exact-copy imports, and private body omission. The corpus and projection checks prove only that the generated paper-module instance remains fresh for this bundle-backed Markdown state.\n\nThis result record path is public fixture evidence only. It does not establish live operator memory, capture authority, live market data, provider/browser state, media launch, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is not live operator memory, not capture authority, not trading decisions, not live provider recovery, not demo media launch, not publishing-scope decision, and not launch-scope decision. It is an exact-source public bundle with digest checks, source exercises, and negative-case coverage.\n\nAuthority Systems Source Bundle Replays eight authority and systems checks, rejecting provider, proof, and launch overclaims. 5/5\n\nDoes This bundle imports Set 5 public authority and systems source bodies as a bounded source-open replay. It checks post-execution result record validation, reasoning replay scope and lineage, proof-contract gating, process orphan classification, generated-state fixpoint settlement, trace-tape compaction, code blast radius, and doctrine graph compilation, with negative cases that prevent live provider, proof-success, process-signal, generated-state-mutation, source-file changes, public sharing, or launch overclaims.\n\nScope limit It validates only copied Set 5 authority-system source bodies and bounded deterministic exercises; it does not dispatch providers, prove Lean success, send live process signals, mutate generated state, change source files, authorize public sharing, include launch operations, or claim private-system equivalence.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.batch5_authority_systems_capsule run --input fixtures/first_wave/batch5_authority_systems_capsule/input --out receipts/first_wave/batch5_authority_systems_capsule --acceptance-out receipts/acceptance/first_wave/batch5_authority_systems_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nsource intake provenance authority-boundary\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch5_authority_systems_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 5 Authority and Systems Bundle\n\nExplains component [Authority Systems Source Bundle](docs/components.html#component-batch5_authority_systems_capsule) mechanism [validates public authority systems bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch5-authority-systems-capsule-validates-public-authority-systems-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\nSet 5 imports the next authority/systems contour as a bundle: post-execution result record validation, reasoning replay scope and lineage, verifier-gated Lean repair harnessing, process orphan classification, generated state fixpoint settlement, trace-tape compaction, code blast radius, and doctrine graph compilation.\n\nThe bundle carries exact copied source bodies in `examples/batch5_authority_systems_capsule/exported_batch5_authority_systems_capsule_bundle/source_modules/` and tests those copies against source-root digests and anchors. The runnable Microcosm exercise is deliberately bounded: it uses synthetic public inputs to prove the negative claim fences while preserving the real source source as the source-open system.\n\n###### Purpose\n\nThis page answers one question: can a cold reader inspect eight separate authority and systems mechanisms, and confirm each one refuses the wrong thing, without the reader having to run any of the real machinery?\n\nThe eight mechanisms are unrelated in subject. One validates post-execution result records; another decides when a reasoning step needs re-running; another gates a Lean proof attempt; another classifies a stray process; another settles generated-state residuals; another compacts a trace tape; another computes a code blast radius; another compiles a doctrine graph. What they share is a single discipline: each must decline to claim more than it has earned. The result record validator must not accept a drifted result record; the proof gate must not hand a placeholder proof to Lean; the orphan reaper must not signal a live process; the blast-radius pass must not invent coverage for a leaf with no dependents.\n\nThe unusual choice is that the bundle does not replay the real tools. It carries an exact copy of each source source body, checks those copies against the source-root digests and required anchors, and then runs a small synthetic re-derivation for each mechanism. Each re-derivation recomputes its own verdict from the fixture input rather than echoing a stored answer, so a negative case passes only when the exercise itself reaches the refusal, not when a fixture asserts it. The page is therefore a way to read eight refusal behaviours at once, with the genuine source bodies kept verifiable alongside.\n\n###### Shape\n\nSource refs\n\nRuntime component `batch5_authority_systems_capsule.py` metadata-only result records `receipts/first_wave/batch5_authority_systems_capsule` Diagram source\n\n```text\nflowchart TD Manifest[\"Copied source bundle + exercise manifest digests and required anchors checked first\"] --> Component[\"Runtime component batch5_authority_systems_capsule.py\"] Component --> E1[\"Result record validator flag provider/context/artifact drift\"] Component --> E2[\"Replay scope no_replay when changed context is disjoint\"] Component --> E3[\"Proof gate reject sorry/plan-only before Lean\"] Component --> E4[\"Orphan reaper live descendant -> requires_owner_check\"] Component --> E5[\"Fixpoint drainer residual source moved -> non-converging\"] Component --> E6[\"Trace tape over-budget -> pointer + omission result record\"] Component --> E7[\"Blast radius reverse closure; empty leaf stays empty\"] Component --> E8[\"Doctrine graph report deleted paths and tombstones\"] E1 --> Refusal[\"Shared refusal check each exercise recomputes its own verdict\"] E2 --> Refusal E3 --> Refusal E4 --> Refusal E5 --> Refusal E6 --> Refusal E7 --> Refusal E8 --> Refusal Refusal --> Result records[\"metadata-only result records result records/first_wave/batch5_authority_systems_capsule\"] Result records --> Ceiling[\"Scope limit: no external model access, mutation, proof success, launch, or private equivalence\"]\n```\n\nThe diagram starts where the runtime starts: the copied source bundle and the exercise manifest, checked against source-root digests and anchors. The component then fans out to the eight mechanism exercises, each recomputing its own pass or refusal verdict, and folds the results into metadata-only result records under a single scope limit. Generated-state mutation, external model access, proof-success claims, and launch-scope decision all stay outside that ceiling.\n\n###### What the eight exercises check\n\nEach exercise reads a small synthetic block from the fixture manifest and recomputes a verdict. None of them call a provider, run Lean, signal a process, or mutate generated state. What follows is the specific question each one answers.\n- Result record validator. Given a runtime grant and two post-execution result records, it recomputes the drift codes for the second result record: a substituted provider, a context class outside the grant's allowed set, an output artifact hash that diverges from the grant, or `runtime_execution` claimed when no runtime grant was issued. The valid result record must pass and the drifted one must be flagged; the exercise will not call drift \"absent\".\n- Replay scope. It compares the context classes a step consumed against the classes that changed. When the two sets are disjoint, the classification is `no_replay`. In the fixture, a step consumed a task spec and a public fixture while only ambient browser state changed, so re-running the step is not demanded.\n- Proof gate. It scans a candidate proof string before any Lean call. A `sorry` token, a plan-only phrasing such as \"plan:\" or \"I will\", or a proof that merely restates the declared theorem without an `exact` are each treated as failure classes, and the gate verdict becomes `rejected_before_lean`. The exercise records `0/8 historical banked attempts; no proof-success claim`.\n- Orphan reaper. A process marked as a live-session descendant is classified `requires_owner_check`, not `safe_close_candidate`, and no signal is sent even when the fixture requests `SIGKILL`. The refusal is the point: a stray-looking process that belongs to a live session must not be killed on inventory alone.\n- Fixpoint drainer. It walks residual signatures. If the same residual id reappears under a moved source signature, the settlement is classified `settlement_residual_source_moved`, which marks a non-converging residual rather than a settled one. No generated-state mutation is authorised either way.\n- Trace tape. When the joined trace text exceeds the byte budget, the exercise truncates to a head budget and appends a pointer row plus an omission result record that records the omitted byte count. A budget breach with no omission result record is treated as a failure, so compaction can never silently drop trace bytes.\n- Blast radius. It builds the reverse-dependency graph and takes the transitive closure of dependents for a target. A target with real dependents reports them; a leaf with no dependents reports an honestly empty bucket rather than inventing coverage.\n- Doctrine graph. It scans doctrine nodes for two conditions: a node whose code path no longer exists, reported as an authority gap, and a node marked `tombstone`, reported with its replacement id. The exercise passes only when both a drift finding and a tombstone candidate are present, so a deleted code path behind a doctrine claim cannot pass unnoticed.\n\n###### Reader Evidence Routing\n- A source-authenticity reader starts with the exported bundle `source_module_manifest.json`, then checks the copied files under `examples/batch5_authority_systems_capsule/exported_batch5_authority_systems_capsule_bundle/source_modules/` against the source source refs and anchor rows. The useful question is whether the public bundle is source-faithful, not whether it grants live generated-state authority.\n- A runtime reader runs the fixture command and the `run-batch5-bundle` command in the Validation Result record Path. The useful question is whether the synthetic exercise and exported bundle return bounded `pass` evidence while keeping body material out of result records.\n- A launch-boundary reader opens `tests/test_batch5_authority_systems_capsule.py` and the Scope limit before trusting any card copy. The useful question is whether negative fences block external model access, generated-state mutation, Lean proof-success claims, and launch-scope decision.\n\nIf any digest or exact-copy test is red, treat that as source-body import drift for the body-import owner. It does not make this Markdown a bundle source row, and it must not be patched here by hand.\n\n###### Prior Art Grounding\n\nThis bundle borrows from provenance interchange, trace instrumentation, and software supply-chain attestation practice. Useful anchors include:\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), which models the entities, activities, and agents involved in producing data so readers can assess reliability and trustworthiness.\n- [OpenTelemetry](https://opentelemetry.io/docs/), as a vendor-neutral pattern for traces, metrics, and logs across composed systems.\n- [SLSA provenance](https://slsa.dev/spec/v1.2/provenance), which treats artifact origin, builder identity, and build parameters as explicit attestable metadata.\n\nMicrocosm borrows the lineage, trace, and attestation shape, but keeps the exercise bounded to copied public source bodies, synthetic inputs, and negative claim fences. It excludes generated-state mutation, external model access, proof success, or launch.\n\n###### First Command\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.batch5_authority_systems_capsule run --input fixtures/first_wave/batch5_authority_systems_capsule/input --out /tmp/batch5_authority_systems_capsule --card\n```\n\n###### Source Bodies\n\nThe bundle imports these source bodies as exact public snapshots:\n- `tools/meta/factory/validate_reasoning_execution_receipt.py`\n- `tools/meta/factory/build_reasoning_execution_replay_scope.py`\n- `tools/meta/factory/build_reasoning_execution_lineage.py`\n- `tools/meta/factory/build_reasoning_execution_schedule_preflight.py`\n- `tools/meta/factory/run_verisoftbench_micro10_c_arm_provider_repair.py`\n- `tools/meta/control/orphan_reaper.py`\n- `system/lib/generated_state_drainer.py`\n- `system/lib/agent_execution_trace.py`\n- `system/lib/code_architecture_projection.py`\n- `system/lib/doctrine_graph.py`\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.batch5_authority_systems_capsule run \\\n  --input fixtures/first_wave/batch5_authority_systems_capsule/input \\\n  --out /tmp/microcosm-batch5-authority-systems-vrp \\\n  --card\nPYTHONPATH=src ../repo-python -m microcosm_core.organs.batch5_authority_systems_capsule run-batch5-bundle \\\n  --input examples/batch5_authority_systems_capsule/exported_batch5_authority_systems_capsule_bundle \\\n  --out /tmp/microcosm-batch5-authority-systems-bundle-vrp \\\n  --card\nPYTHONPATH=src ../repo-pytest tests/test_batch5_authority_systems_capsule.py -q --basetemp /tmp/microcosm-batch5-authority-systems-tests\n```\n\nThe fixture command writes the bounded synthetic exercise result record. The exported-bundle command validates the copied authority-system source modules, manifest digests, anchor rows, and secret-exclusion posture while keeping source bodies out of the result record. The focused test file checks the runtime exercise, exported bundle, omission result records, body-scan boundary, and negative claim fences.\n\nThis result record path is reader-verifiable evidence only. It does not flip Mermaid/Atlas status, create bundle authority, authorize generated-state mutation, dispatch providers, certify Lean proof success, claim launch-scope decision, or aggregate doctrine-lattice coverage.\n\n###### Scope boundary\n\n###### Scope limit\n- No live model/external model access.\n- No Lean proof-success or benchmark claim.\n- No process signals are sent.\n- No generated-state mutation is authorized.\n- No private-system equivalence, public sharing, or launch-scope decision.\n\n###### Scope limit\n\nLegacy Markdown path inventory only; no JSON bundle authority, typed subject coverage, runtime correctness, or launch proof.\n\nThis ceiling is deliberately lower than the runnable component evidence. The code and tests can show that the Batch5 exercise is inspectable and that its negative claim fences hold, but this page cannot promote itself into bundle authority, typed doctrine coverage, generated-state mutation permission, Lean proof success, provider correctness, publishing-scope decision, or aggregate doctrine-lattice health.\n\nTrace, Code-Map & Scheduling Engines Bundle Runs fifteen trace, code-map, and scheduling engines on test data, blocking truth overclaims. 5/5\n\nDoes This bundle imports the Set-7 source engines as exact copied source bodies plus deterministic public exercises. It exposes fifteen JS, TS, and Python engine bodies for trace parsing, code-map layout, DAG scheduling, source indexing, patch validation, hermetic clean-clone execution, robust numeric scoring, personalized PageRank routing, and regression-test selection, with negative cases that prevent launch, private-system, semantic-truth, or test-sufficiency overclaims.\n\nScope limit It validates only a public source-open bundle and bounded exercises; it is not live source authority, private-system equivalence, semantic truth, investment-related actions, complete sandbox proof, selected-test sufficiency proof, public sharing, or launch-scope decision.\n\nRun\n\n```text\nmicrocosm batch7-macro-engines-capsule run --input fixtures/first_wave/batch7_macro_engines_capsule/input --out receipts/first_wave/batch7_macro_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch7_macro_engines_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Policy Engines Bundle](docs/components.html#component-batch8_policy_engines_capsule), [Tools-Tail Primitives Bundle](docs/components.html#component-batch8_tools_tail_primitives_capsule), [Backend & Governance Engines Bundle](docs/components.html#component-batch9_macro_engines_capsule)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_macro_engines_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 7 Source Engines Bundle\n\nExplains component [Trace, Code-Map & Scheduling Engines Bundle](docs/components.html#component-batch7_macro_engines_capsule) mechanism [validates public source engines bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch7-macro-engines-capsule-validates-public-macro-engines-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\n###### TLDR\n\n`batch7_macro_engines_capsule` imports the Set-7 source engines as source bodies and runs focused exercises around them. It is a real-system bundle: source copies, original JS/TS witnesses, deterministic Python exercises, negative cases, digest checks, and fenced claims.\n\n###### What It Makes Visible\n- `tools/agent_trace_structurer/parser.mjs` as a trace-IR/edit-claim witness with `node --test parser.test.mjs`.\n- `system/server/ui/src/lib/codemap/` as a code-map layout witness with Vitest.\n- DAG wave scheduling, source indexing, patch context validation, network blocking, robust numeric center/scale, PageRank mass preservation, and never-empty regression-test selection.\n\n###### What Each Exercise Proves\n\nEach engine has a single deterministic check with a known answer, plus a paired negative case that must keep failing. The exercises are concrete:\n- **Trace IR parser** (`agent_trace_ir_compiler`). Runs `node --test parser.test.mjs` against the copied parser. The paired negative case is a commit claim with no diff evidence, which the parser's own test rejects, so a pass means the edit-claim gate is intact rather than merely that the file copied.\n- **Code-map layout** (`codemap_orbit_layout`). Runs the Vitest suite for the layout module and, in process, places five nodes on an orbit and measures every pair distance. The pass condition requires zero circle overlaps, so the layout proves geometric non-collision, not route meaning.\n- **DAG scheduler** (`constitutional_dag_kernel`). Calls `compute_waves` on a six-node graph and checks the schedule is exactly `[[\"a\",\"f\"], [\"b\",\"c\"], [\"d\"], [\"e\"]]`. A two-node cycle must raise, and an impure config path must be flagged, so the kernel proves wave ordering and cycle rejection together.\n- **launch-root index** (`release_root_compiler`). Parses the copied module's AST and confirms the expected report-building functions exist and that a missing-reference count is reported. This is source indexing, not launch-scope decision.\n- **Source surgeon** (`source_surgeon_patch`). Applies a one-line unified diff and checks the result is exactly `a = 'B'`. A diff whose context does not match must raise, and broken Python must fail to parse, so the engine proves patch-context and syntax validation, not semantic correctness.\n- **Clean clone** (`hermetic_clean_clone`). Temporarily replaces the socket factory and confirms an outbound connection raises a network-disabled error. It proves a hermetic baseline, not complete sandboxing.\n- **Robust calculator** (`calculator_standard_actor`). Feeds `[1, 2, 3, 4, 5, 100]` to the robust centre/scale routine. The robust centre stays at `3.5` while the naive mean is dragged above `19`, so the outlier is resisted. It is a numeric primitive, not market data or investment-related actions.\n- **PageRank ranker** (`personalized_pagerank_ranker`). Ranks a four-node graph and checks the score mass sums to `1.0`; an unknown source node must return an empty map. It proves the rank invariant and missing-source refusal, not semantic understanding.\n- **Regression selection** (`regression_test_selection`). Confirms the impacted- test selector never returns an empty set: an empty selection must fall back to a non-empty bundle. It proves the never-empty contract, not that the selected tests are sufficient.\n\nWhen the input is the exported source-open bundle rather than the live fixture, the same nine engine rows are gated on the copied source manifest instead: every expected digest must match and every required anchor must be present before any row passes. The exercises stay metadata-only throughout; result records carry status, counts, digests, and refs, never the copied source or command output.\n\n###### Prior Art Grounding\n\nThe component is grounded in trace instrumentation, graph analysis, and regression selection practice: parse execution traces into structured spans, project code or route graphs into navigable layouts, preserve graph-rank invariants, and choose focused tests without claiming sufficiency. Relevant anchors include:\n- [OpenTelemetry](https://opentelemetry.io/docs/), especially traces/spans as a vendor-neutral model for representing units of work and their relationships.\n- [D3 force layouts](https://github.com/d3/d3-force), a common graph layout pattern for visualizing networks and hierarchies.\n- [NetworkX PageRank](https://networkx.org/documentation/stable/reference/algorithms/generated/networkx.algorithms.link_analysis.pagerank_alg.pagerank.html), which documents the PageRank family for graph-link analysis.\n\nMicrocosm borrows the structured-trace, graph-layout, and invariant-checking shape across its mixed Set-7 engines. The bundle remains a bundle of focused source witnesses and deterministic exercises; it is not a complete sandbox, semantic truth engine, or proof that selected tests are sufficient.\n\n###### Source Body Imports\n\nThe source-module manifest at `examples/batch7_macro_engines_capsule/exported_batch7_macro_engines_capsule_bundle/source_module_manifest.json` lists the exact copied source bodies and required anchors. Result records store digests and counts, not source bodies.\n\n###### Purpose\n\nThis module is the reader-facing instrument for the accepted `batch7_macro_engines_capsule` component. Its source authority is the JSON source record in `core/paper_module_capsules.json`; this Markdown explains the proof boundary for a cold reader and points back to the runtime component, copied source manifest, and focused tests.\n\nThe component answers one narrow question: do nine unrelated source engines, copied out of the larger system as source, still behave the way their own tests and invariants say they should? Rather than describe them in prose, the bundle runs each one. A trace-IR parser is checked by its own Node test runner; a code-map layout is checked by its Vitest suite; a dependency-graph scheduler, a robust numeric scorer, a PageRank ranker, a patch applier, a network-isolation guard, an AST source index, and a regression-test selector are each driven through a small deterministic exercise with a known correct answer.\n\nWhat is worth noting is the mix. Most validators in this set check one shape of evidence. This one deliberately binds several kinds under a single fixture and a single scope limit: an external JavaScript test process, an external TypeScript test process, in-process Python function calls, and static AST reads. The point is not that any one engine is impressive in isolation. It is that nine engines with quite different runtimes can be exercised together, each with a concrete pass condition, while every exercise stays below launch, semantic-truth, and source-file changes.\n\nThe failure mode this guards against is the comfortable assumption that copied code still works. A source body can be copied faithfully, pass a digest check, and still be broken or subtly different from the original. The bundle refuses to treat a digest match as behaviour: each engine has to produce the expected output, and each negative case has to keep failing, before the row is allowed to pass.\n\n###### Shape\n\nSource refs\n\nNine engine rows `source_open_manifest_verified` Diagram source\n\n```text\nflowchart LR input[\"Input dir\"] mode{\"Live fixture or exported bundle?\"} subgraph Live[\"Live fixture: run each engine\"] trace[\"Trace IR parser node --test\"] codemap[\"Code-map layout Vitest + orbit non-overlap\"] dag[\"DAG scheduler waves + cycle reject\"] rest[\"launch index, source surgeon, clean clone, calculator, PageRank, regression selection\"] end subgraph Bundle[\"Exported bundle: gate on manifest\"] manifest[\"Source manifest: digests match + anchors present\"] rows[\"Nine engine rows source_open_manifest_verified\"] end neg[\"Negative cases must keep failing\"] result[\"metadata-only result status, counts, digests\"] ceiling[\"scope limit no launch, no semantic truth, no source-file changes\"] input --> mode mode -->|live| trace mode -->|live| codemap mode -->|live| dag mode -->|live| rest mode -->|bundle| manifest manifest --> rows trace --> neg codemap --> neg dag --> neg rest --> neg rows --> result neg --> result result --> ceiling\n```\n\n###### Reader Evidence Routing\n\nStart from the component source when checking behavior:\n- `EXPECTED_NEGATIVE_CASES` names the rejected cases.\n- `AUTHORITY_CEILING` names the forbidden claims.\n- `_source_open_bundle_exercises` and `_evaluate` assemble the accepted public witness set.\n- `run_batch7_bundle` and `result_card` expose the reproducible command and metadata-only summary.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the Set-7 source-engine result record and sign-off JSON. The exported-bundle command validates copied trace, codemap, DAG, source-rank, and regression-selection witnesses without emitting private bodies. The focused test covers the runtime component, exported bundle shape, exact-copy source imports, negative cases, card body omission, and numeric dependencies. The corpus and projection checks prove only that the generated paper-module instance remains fresh for this bundle-backed Markdown state.\n\nThis result record path is public fixture evidence only. It does not establish semantic truth, selected-test sufficiency, sandbox completeness, private-system equivalence, launch-scope decision, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis bundle is not launch-scope decision, hosted-public authority, semantic truth, investment-related actions, a complete sandbox, or proof that selected tests are sufficient. It excludes raw operator transcripts, provider/browser state, wallet/account state, account secrets, and live market fetches.\n\n###### Scope limit\n\nThe module can support only fixture-bound public source-body import evidence and deterministic exercise result records. It cannot authorize external model access, source-file changes, launch, public sharing, investment-related actions, private-system equivalence, or whole-system correctness.\n\nOracle Sibling Source Bundle Replays subject-index and truth-diff logic on copied code, rejecting reasoning overclaims. 5/5\n\nDoes This bundle imports the Set 7 public Oracle sibling source bodies as a bounded, source-open replay. It checks subject-index grounding, subject-snapshot hydration, source truth-diff deltas, quartet repair alias planning, and original pytest witness evidence, with negative cases that prevent Oracle reasoning, external model access, source-file changes, semantic-truth, coverage, public sharing, or launch overclaims.\n\nScope limit It validates only Oracle sibling copied source bodies and bounded deterministic exercises; it does not run Oracle reasoning, dispatch providers or bridges, invoke private orchestration engine, change source files, prove semantic truth, prove all Oracle paths are covered, authorize public sharing, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.batch7_oracle_sibling_capsule run --input fixtures/first_wave/batch7_oracle_sibling_capsule/input --out receipts/first_wave/batch7_oracle_sibling_capsule --acceptance-out receipts/acceptance/first_wave/batch7_oracle_sibling_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Tools-Tail Primitives Bundle](docs/components.html#component-batch8_tools_tail_primitives_capsule)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_oracle_sibling_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nDemo Take Console Source Bundle Replays the recording console's Swift logic without launching the app or capturing audio. 5/5\n\nDoes This bundle imports the Set 7 Demo Take Console public Swift source bodies as a bounded source-open replay. It checks SwiftPM build-witness posture, recording-state control, capture-helper bridge contracts, recorder-store capture FSM boundaries, hotkey/audio-meter behavior, and transcribe-payload construction, with negative cases that prevent app-launch, capture, model-dispatch, source-file changes, UI-coverage, public sharing, or launch overclaims.\n\nScope limit It validates only Demo Take Console copied Swift source bodies and bounded deterministic exercises; it does not launch the app, authorize screen or microphone capture, export recording sessions, execute FFmpeg, dispatch WhisperKit or other models, change source files, prove complete UI coverage, authorize public sharing, or include launch operations.\n\nRun\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.batch7_demo_take_console_capsule run --input fixtures/first_wave/batch7_demo_take_console_capsule/input --out receipts/first_wave/batch7_demo_take_console_capsule --acceptance-out receipts/acceptance/first_wave/batch7_demo_take_console_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Audio Level RMS Port](docs/components.html#component-batch8_audio_level_rms_port), [Unsurfaced Source Primitives Bundle](docs/components.html#component-batch6_unsurfaced_primitives_capsule)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch7_demo_take_console_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nTools-Tail Primitives Bundle Exercises four copied helper tools over fixed inputs without touching live systems or data. 5/5\n\nDoes This bundle imports four Set-8 tools-tail primitives as copied public source bodies with deterministic fixture exercises. It exposes observer set diffs, JSON patch interpretation, stable ledger-id hashing, and shadow envelope parsing without invoking live oracles, repository mutation, external model access, public sharing, or launch-scope decision.\n\nScope limit It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.\n\nRun\n\n```text\nmicrocosm batch8-tools-tail-primitives-capsule run --input fixtures/first_wave/batch8_tools_tail_primitives_capsule/input --out receipts/first_wave/batch8_tools_tail_primitives_capsule --acceptance-out receipts/acceptance/first_wave/batch8_tools_tail_primitives_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_tools_tail_primitives_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 8 Tools-Tail Primitives Bundle\n\nExplains component [Tools-Tail Primitives Bundle](docs/components.html#component-batch8_tools_tail_primitives_capsule) mechanism [validates public tools tail primitives bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-tools-tail-primitives-capsule-validates-public-tools-tail-primitives-capsule) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n\nThis component imports four Set-8 tools-tail primitives as exact copied source source bodies plus bounded public exercises: observer set diffing, JSON patch interpretation, ledger identity hashing, and shadow envelope parse coverage.\n\nThe bundle is intentionally source-open and bounded. It exercises pure mechanics over synthetic public fixtures. It does not run GodMode, use external model services, execute live bridge work, mutate repositories, export private lab artifacts, claim oracle truth, authorize public sharing, or approve launch.\n\n###### Purpose\n\nWhen a piece of tooling is copied from the private system into the public system, the obvious question is whether the copy still behaves the way the original did, or whether it has quietly drifted into a stub that only looks right. This bundle answers that one question for four small \"tools-tail\" primitives: does the copied source body, when run on a fixed public input, still produce the exact output the original would?\n\nThe unusual choice here is that the bundle does not re-describe the primitives or re-implement them. It loads the copied module straight from the exported bundle and runs the real functions, then checks the results against hard-coded expected values. If the copy were a hollow shell, the assertion would fail rather than pass with a green tick. The evidence is therefore behavioural, not merely a digest match: the code is executed, not just hashed.\n\nWhat it deliberately does not do is treat any of that execution as truth about the world. Diffing two sets of observer rows is set arithmetic, not a claim that either set is correct. Applying a JSON patch is interpreting an edit script, not a claim that the edit is the right one. The bundle keeps the gap between \"the mechanism runs as copied\" and \"the answer is correct\" explicit, which is why the scope limit refuses oracle truth, prediction correctness, and semantic edit correctness even though real code ran.\n\n###### Shape\n\nThe shape is a tools-tail primitive evidence map.\n\nSource refs\n\nJSON source record source basis: source record `core/paper_module_capsules.json[64]` Generated JSON instance 20 edges; 0 unresolved selective relations `paper_modules/batch8_tools_tail_primitives_capsule.json` `paper_modules/batch8_tools_tail_primitives_capsule.md` Local standard `standards/std_microcosm_batch8_tools_tail_primitives_capsule.json` Runtime/source locus loads copied modules, runs four exercises, checks exact output `src/microcosm_core/organs/batch8_tools_tail_primitives_capsule.py` Public fixture input four primitives + negative cases `fixtures/first_wave/batch8_tools_tail_primitives_capsule/input` Copied source bundle `examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle` `source_module_manifest.json` Tests and result records result records/first_wave + sign-off + bundle validation `tests/test_batch8_tools_tail_primitives_capsule.py` Diagram source\n\n```text\nflowchart TD bundle[\"JSON source record core/paper_module_capsules.json[64] source basis: source record\"] instance[\"Generated JSON instance paper_modules/batch8_tools_tail_primitives_capsule.json 20 edges; 0 unresolved selective relations\"] markdown[\"Reader projection paper_modules/batch8_tools_tail_primitives_capsule.md\"] standard[\"Local standard standards/std_microcosm_batch8_tools_tail_primitives_capsule.json\"] runtime[\"Runtime/source locus src/microcosm_core/components/batch8_tools_tail_primitives_capsule.py loads copied modules, runs four exercises, checks exact output\"] exercises[\"Four primitive exercises observer set diff | JSON-patch VM ledger-id hash | shadow envelope parse each: accept path + negative case\"] fixture[\"Public fixture input fixtures/first_wave/batch8_tools_tail_primitives_capsule/input four primitives + negative cases\"] bundle[\"Copied source bundle examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle source_module_manifest.json\"] tests[\"Tests and result records tests/test_batch8_tools_tail_primitives_capsule.py result records/first_wave + sign-off + bundle validation\"] projections[\"Generated navigation Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] ceiling[\"Scope limit deterministic public primitive exercises and metadata-only source refs only no oracle truth, semantic edit correctness, live bridge/Lab execution, external model access, repo mutation, public sharing, launch, or whole-system proof\"] bundle --> instance bundle --> runtime instance --> projections instance --> markdown standard --> runtime runtime --> bundle bundle --> runtime fixture --> runtime runtime --> exercises exercises --> tests fixture --> tests bundle --> tests tests --> ceiling projections --> ceiling markdown --> ceiling\n```\n\nThe bundle explains the `batch8_tools_tail_primitives_capsule` component and the public tools-tail mechanism, binds the import/projection drift concept plus the principle and axiom edges, and resolves the runtime locus to `src/microcosm_core/organs/batch8_tools_tail_primitives_capsule.py`. The local standard keeps the evidence to four primitive mechanics: observer set diffs, JSON-patch interpretation, ledger identity hashing, and shadow-envelope parse coverage. Public evidence may include primitive ids, source refs, digests, anchors, counts, stable negative cases, metadata-only result record posture, and scope limits; it must not include private lab artifacts, model-output data, bridge payloads, account or browser state, or account secret-equivalent material.\n\nThe fixture path `fixtures/first_wave/batch8_tools_tail_primitives_capsule/input` and exported bundle `examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle` hold the public inputs and exact copied source modules. The focused test and result records prove fixture mechanics, bundle validation, negative cases, source-module digest/anchor posture, and no body text in result records. Generated Mermaid and Atlas links only make the bundle edges walkable; they do not authorize live tool execution, bridge work, external model access, repository mutation, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\n###### How it works\n\nThe evaluator loads four copied modules by manifest reference and runs one bounded exercise against each, comparing the live output to a fixed expected value. A primitive passes only when every checked field matches.\n- Observer set diff. The copied `diff_evidence` and `diff_predictions` functions take two lists of rows keyed by id and partition them. For evidence, three lab rows and two oracle rows resolve to one overlap, one missed id, and one extra id; a row with no `ledger_id` is dropped rather than crashing the diff. For predictions, rows are split into matching, divergent, and missing-target sets. The exercise also asserts the dropped malformed row never appears in the serialised result, so a parse gap cannot leak through as silent data.\n- Version committer JSON-patch VM. The copied `_apply_op` interprets a small set of edit operations (`set`, `merge`, `append`) over a nested document by path. The exercise applies four ops, checks the resulting document exactly, and confirms that attempting to traverse into a scalar (`/profile/name` where `profile` is a string) raises `VersionCommitterError` instead of corrupting the document. The interesting property is the refusal: a malformed path is a controlled error, not a partial write.\n- Ledger-id identity hash. The copied `generate_ledger_id` produces a stable id from a lane and a record. The exercise checks that the lane alias `poly` and `POLYMARKET` normalise to the same canonical lane and hash to the same id, so the id is identity-stable across spelling; an unknown lane falls back to an `X_` prefix; and a record missing the identity field its lane requires raises `ValueError` rather than hashing a blank.\n- Shadow envelope parser coverage. The copied `run` parses a small envelope DSL (miner tuples, a spine line, prediction rows) written into a temporary run directory. The exercise feeds it one well-formed line and one malformed tuple per node, then checks that parsing did not hard-fail, that the well-formed rows parsed, and that the malformed tuple was counted as a `comma_arity` coverage gap. The point is that the parser reports its own coverage holes rather than swallowing them.\n\nEach exercise also has a matching negative case (`EXPECTED_NEGATIVE_CASES`) that re-runs the same code on input designed to be rejected and confirms the rejection. So for every primitive the page shows both the accepting path and the refusing path. None of these checks open a network, a provider, or the live bridge; they run copied source bodies in process and keep the bodies out of the result records.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[64]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_tools_tail_primitives_capsule.json` for the current generated instance.\n- Bundle route: inspect `examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle` for the copied source source modules.\n- Runtime route: run `tests/test_batch8_tools_tail_primitives_capsule.py` and the commands in ## Validation Result record Path.\n\n###### Prior Art Grounding\n\nThis bundle borrows from standardized patch formats, transparency-log identity patterns, provenance metadata, and parser coverage practice. Useful anchors include:\n- IETF [RFC 6902](https://datatracker.ietf.org/doc/html/rfc6902), which defines JSON Patch operations such as add, remove, replace, move, copy, and test.\n- IETF [RFC 9162](https://www.rfc-editor.org/rfc/rfc9162), where Certificate Transparency uses an append-only Merkle tree as an auditable log pattern.\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), for representing the provenance of derived artifacts and their generating activities.\n\nMicrocosm borrows the patch-operation, identity-hash, append-only-log, and provenance shapes, but keeps this bundle at deterministic fixture exercises. It does not claim oracle truth, semantic edit correctness, live bridge authority, external model access, repository mutation authority, or launch-scope decision.\n\n###### Source Modules\n\nThe exported bundle copies the relevant source sources under `examples/batch8_tools_tail_primitives_capsule/exported_batch8_tools_tail_primitives_capsule_bundle/source_modules/`. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.\n\n###### Mechanism Set\n\nThe validator requires exactly these four mechanism rows: observer set diff kernel, version-committer JSON patch VM, ledger-id identity hash engine, and shadow envelope DSL parser coverage.\n\nThe source module manifest requires four exact copied source source modules. The fixture requires four stable negative cases, one per mechanism row. Shared registry, sign-off, runtime-shell, CLI, atlas, and generated docs wiring is intentionally deferred while the existing shared Microcosm core lease is active.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded tools-tail primitives result record and sign-off JSON. The bundle command validates copied source sources, manifest digests, observer-diff, JSON-patch, ledger-id, and shadow-envelope exercises, body-exclusion posture, and scope limit fields. The focused test checks fixture mechanics, bundle validation, negative cases, and the no-live-bridge scope limit.\n\nThis result record path is reader-verifiable evidence only. It is not oracle truth, not prediction correctness, not semantic edit correctness, not live bridge or Lab execution authority, not external model access, not repository mutation authority, not publishing-scope decision, and not launch-scope decision.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is deterministic public-system evidence over fixture inputs only. It is not oracle truth, not prediction correctness, not semantic edit correctness, not provenance by itself, not Lab execution authority, not live Oracle bridge authority, not repository mutation authority, not external model access, and not launch-scope decision.\n\n###### Scope limit\n\nThis paper module can claim a tools-tail primitives fixture with a diagram view generated for navigation. It can explain deterministic public-system checks over fixture inputs and metadata-only source-module result records.\n\nIt cannot claim oracle truth, prediction correctness, semantic edit correctness, provenance sufficiency by itself, Lab execution authority, live Oracle bridge authority, repository mutation authority, external model access, publishing-scope decision, launch-scope decision, or whole-system correctness.\n\nPolicy Engines Bundle Maps three policy engines over test data without model calls or live campaign execution. 5/5\n\nDoes This bundle imports three Set-8 policy-engine bodies as copied public source modules with deterministic fixture exercises. It exposes lab contract audit, market fusion readiness, and campaign transition adjudication mechanics without model dispatch, live campaign execution, public sharing, or launch-scope decision.\n\nScope limit It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.\n\nRun\n\n```text\nmicrocosm batch8-policy-engines-capsule run --input fixtures/first_wave/batch8_policy_engines_capsule/input --out receipts/first_wave/batch8_policy_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch8_policy_engines_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_policy_engines_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 8 Policy Engines Bundle\n\nExplains component [Policy Engines Bundle](docs/components.html#component-batch8_policy_engines_capsule) mechanism [validates public policy engines bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-policy-engines-capsule-validates-public-policy-engines-capsule) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Possession is not permission](docs/doctrine.html#dcard-p-4)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nThis component imports three Set-8 policy engines as exact copied source source bodies plus bounded public exercises: Lab contract audit red/green gating, market-fusion fail-closed claim preflight, and campaign dispatch transition adjudication.\n\nThe bundle is source-open and bounded. It exercises deterministic policy mechanics over synthetic public fixtures. It does not run live campaigns, use external model services, mutate repositories, export private artifacts, claim market-level conclusions, authorize public sharing, or approve launch.\n\n###### Purpose\n\nThe three engines copied here share one design idea: a machine-checkable gate that runs before any judgement, model call, or downstream action, and refuses by default rather than passing on absent evidence. The bundle answers a single question for a cold reader: do these copied gate bodies still make the same deterministic decisions when run against public fixture inputs?\n\nThe Lab contract audit reads persisted Lab node artifacts from disk and applies fixed structural rules: a ban on question marks in compute-node outputs (an output carrying a `?` is treated as an unresolved hedge, not an answer), tuple formatting and two-sentence annotation rules, exact thesis inheritance between nodes, prediction targets grounded against an allowed set, and contradiction reconciliation. Any hard fail flips the report from `green` to `red`. The interesting choice is that this audit is deterministic and runs ahead of any semantic interpretation, so a runtime gate can fail closed on structure without asking a model whether the output looks right.\n\nThe market-fusion readiness gate decides whether a consumer may turn raw feed presence into a cross-feed claim. Every registered candidate situation is currently set to refuse, each for named, specific reasons (a missing provider, an absent event window, relation edges that are not measurement-conditioned). An unregistered situation also refuses, but with the distinct reason `candidate_situation_gate_missing`. That distinction is the point: the gate fails closed on anything it has not explicitly reasoned about, and the bundle checks that a registered refusal and a fail-closed refusal stay legible as different things.\n\nThe campaign dispatch adjudicator is a small state machine over a fixed table of legal status transitions. It returns `legal_transition` for an allowed move, `already_target` for a no-op, and raises an error for an illegal one. Its load- bearing rule is that `completed` is terminal: a `completed` dispatch cannot move back to `running` without an explicit superseding event.\n\n###### Shape\n\nRead this module as a bounded evidence pipeline: the JSON bundle names the paper-module authority, runtime locus, standard, and generated projections; the runtime exercises copied policy sources against public fixtures; the tests and result record commands verify those fixture mechanics and scope boundaries. Everything below the bundle is reader or navigation evidence, not live policy, source-file changes, market, public sharing, provider, production, or launch-scope decision.\n\nSource refs\n\nCopied source source bodies `lab_contract_audit.py` `market_fusion_readiness.py` `campaign_state_transition.py` question-mark ban, tuple/annotation, thesis inheritance, target grounding `compute_lab_contract_audit` Mkrun `preflight_candidate_situation` fail-closed default `refuse: candidate_situation_gate_missing` Cprun `validate_dispatch_transition` Diagram source\n\n```text\nflowchart TD bundle[\"Copied source source bodies lab_contract_audit.py market_fusion_readiness.py campaign_state_transition.py\"] fixtures[\"Public synthetic fixtures Lab node artifacts, candidate claims, dispatch status pairs\"] subgraph Lab[\"Lab contract audit\"] labrun[\"compute_lab_contract_audit question-mark ban, tuple/annotation, thesis inheritance, target grounding\"] labgreen[\"green no hard fails\"] labred[\"red QUESTION_MARK_OUTPUT and others\"] end subgraph Market[\"Market-fusion readiness\"] mkrun[\"preflight_candidate_situation\"] mknamed[\"refuse: named reasons registered situation\"] mkmissing[\"refuse: candidate_situation_gate_missing fail-closed default\"] end subgraph Campaign[\"Campaign dispatch adjudicator\"] cprun[\"validate_dispatch_transition\"] cplegal[\"legal_transition / already_target\"] cpillegal[\"CampaignTransitionError completed is terminal\"] end exercises[\"Bundle evaluator three engines must pass, three stable negative cases\"] ceiling[\"Scope limit fixture evidence and copied source refs only no live campaign, provider, market, repo, or launch-scope decision\"] bundle --> labrun bundle --> mkrun bundle --> cprun fixtures --> labrun fixtures --> mkrun fixtures --> cprun labrun --> labgreen labrun --> labred mkrun --> mknamed mkrun --> mkmissing cprun --> cplegal cprun --> cpillegal labred --> exercises mkmissing --> exercises cpillegal --> exercises exercises --> ceiling\n```\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[61]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_policy_engines_capsule.json` for the current generated instance of this module.\n- Bundle route: inspect `examples/batch8_policy_engines_capsule/exported_batch8_policy_engines_capsule_bundle` for the three copied source policy sources.\n- Runtime route: run `tests/test_batch8_policy_engines_capsule.py` and the commands in ## Validation Result record Path for recomputation evidence.\n\n###### Prior Art Grounding\n\nThis bundle borrows from policy-as-code, risk-management, and market-claim boundary practice. Useful anchors include:\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), which treats policy as a separately evaluated engine over structured input.\n- NIST's [AI Risk Management Framework](https://www.nist.gov/itl/ai-risk-management-framework), whose govern/map/measure/manage posture is a useful precedent for explicit risk gates and red/green decision surfaces.\n- The CFTC's [prediction markets](https://www.cftc.gov/LearnandProtect/PredictionMarkets) explainer, as a boundary reminder for market-facing claims and event-contract language.\n\nMicrocosm borrows the deterministic policy-gate and market-claim-preflight shape, but keeps the component to fixture inputs and copied public source. It does not run campaigns, use external model services, claim market-level conclusions, mutate repositories, or approve launch.\n\n###### Source Modules\n\nThe exported bundle copies the relevant source sources under `examples/batch8_policy_engines_capsule/exported_batch8_policy_engines_capsule_bundle/source_modules/`. Result records carry source refs, digests, anchors, counts, and exercise outcomes, not copied body text or private state.\n\n###### Mechanism Set\n\nThe validator requires exactly these three engine rows: Lab contract audit deterministic red gate, market-fusion readiness fail-closed gate, and campaign dispatch status transition adjudicator. The source module manifest requires three exact copied source source modules. The fixture requires three stable negative cases, one per engine row.\n\nEach engine exercise runs the copied body and checks a concrete decision, so a silent change in gate behaviour shows up as a blocked exercise:\n- Lab contract audit: a green artifact set must return `green`, and the same set with a banned `?` injected into a compute-node output must return `red` with `QUESTION_MARK_OUTPUT` in its hard fails. The negative case `BATCH8_LAB_CONTRACT_QUESTION_MARK_RED_GATE` confirms the red gate fires.\n- Market-fusion readiness: a registered candidate situation must refuse with named reasons, while an unregistered situation and a malformed payload must both refuse with `candidate_situation_gate_missing`. The negative case `BATCH8_MARKET_FUSION_MISSING_GATE_REFUSED` confirms the fail-closed default.\n- Campaign dispatch adjudicator: `candidate -> blocked` is a `legal_transition`, `completed -> completed` is `already_target`, and `completed -> running` raises a terminal-state error. The negative case `BATCH8_CAMPAIGN_COMPLETED_TO_RUNNING_REFUSED` confirms the refusal.\n\nShared registry, sign-off, runtime-shell, CLI, atlas, package-data, and generated docs wiring is intentionally deferred while the existing shared Microcosm core lease is active.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded policy-engine result record and sign-off JSON. The bundle command validates copied source policy sources, manifest digests, negative cases, source-body exclusion, and scope limit posture. The focused test checks deterministic red/green gates, bundle validation, private-boundary scans, and the no-launch scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not run live campaigns, use external model services, mutate repositories, validate markets, certify whole system safety, authorize public sharing, or approve launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is deterministic public-system evidence over fixture inputs only. It is not Lab correctness, not live campaign execution authority, not market validation, not whole-system safety, not repository mutation authority, not external model access, and not launch-scope decision.\n\n###### Scope limit\n\nThis paper module covers a bounded policy-engines fixture. A diagram view and atlas card are generated for this module. It can explain deterministic policy checks over public fixture inputs and metadata-only source-module result records.\n\nIt cannot claim Lab correctness, live campaign execution authority, market validation, whole-system safety, repository mutation authority, external model access, publishing-scope decision, launch-scope decision, or private-system equivalence.\n\nAudio Level RMS Port Computes the audio loudness math on test arrays without opening a microphone or capturing input. 3/5\n\nDoes This port projects the pure AudioLevelMonitor normalized-level RMS math into a runnable Python fixture over synthetic sample arrays. It exposes the normalization behavior without starting an audio session, requesting microphone permission, capturing device input, publishing, or granting launch control.\n\nScope limit projection mechanics only, not domain-level conclusions\n\nRun\n\n```text\nmicrocosm batch8-audio-level-rms-port run --input fixtures/first_wave/batch8_audio_level_rms_port/input --out receipts/first_wave/batch8_audio_level_rms_port --acceptance-out receipts/acceptance/first_wave/batch8_audio_level_rms_port_fixture_acceptance.json\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_audio_level_rms_port.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 8 Audio Level RMS Port\n\nExplains component [Audio Level RMS Port](docs/components.html#component-batch8_audio_level_rms_port) mechanism [validates public audio level rms port](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-audio-level-rms-port-validates-public-audio-level-rms-port) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n\nThis component ports the pure `AudioLevelMonitor.normalizedLevel` RMS math from Swift to Python and exercises it over public synthetic sample arrays.\n\nThe bundle is bounded to numeric parity. It does not start an `AVCaptureSession`, request microphone permission, read recorded audio, capture a device, claim UI readiness, authorize public sharing, or approve launch.\n\n###### Purpose\n\nThe Swift `AudioLevelMonitor` feeds a live microphone level meter in a recording app. Most of that file is platform machinery: opening a capture session, selecting a device, reading sample buffers off a callback. Buried inside is one small, pure function, `normalizedLevel`, that turns a block of audio samples into a single number between zero and one. That number is the only part that can be checked without a microphone, so it is the only part this component ports.\n\nThe single question this component answers is: does the Python re-implementation of that calculation produce the same level value as the Swift original, on inputs we can publish? Everything device-specific, permission-gated, or stateful is deliberately left on the Swift side. What crosses into Python is the arithmetic alone.\n\nThe interesting choice here is what is held out, not what is included. A live level meter is hard to test because it depends on real audio hardware and OS permissions that cannot live in a public fixture. By isolating the pure amplitude maths and exercising it over synthetic sample arrays, the component keeps a checkable parity claim about the part that matters for the meter reading, while making no claim at all about capture, permission, or device state. The test is scoped to being a maths port and nothing more.\n\n###### How it works\n\n`normalized_level` takes a sequence of samples and a format tag. It accepts only `float32` and `int16`; any other tag raises `ValueError`, which is how the \"unsupported format\" case is exercised. An empty buffer returns `0.0` immediately, before any arithmetic.\n\nFor each sample it accumulates the square of the value. Float samples are used as-is; int16 samples are first divided by `32767.0` (the Swift `Int16.max`) to map the integer range onto roughly minus-one to one. It then takes the root mean square, `sqrt(total / count)`, which summarises the block's energy as a single amplitude. That value is multiplied by `8.0` and clamped to the `[0.0, 1.0]` range with `min(max(rms * 8.0, 0.0), 1.0)`. The gain of eight is a display choice carried over verbatim from the Swift source: quiet speech sits low on a zero-to-one meter without it, so the level is scaled up and then capped so loud input cannot overshoot one. These two lines, the int16 divisor and the `rms * 8` clamp, are the anchors the bundle requires to match the copied Swift text.\n\nThe runtime checks three reference cases drawn from a public probe manifest (`float32`, `int16`, and an over-one buffer that must clamp), optionally decodes mono 16-bit PCM WAV byte fixtures and recomputes their level from the raw bytes, and runs three negative exercises: empty buffer must read zero, an over-one buffer must clamp to one, and an unknown format must be refused. Each case compares the observed level against the manifest's expected value within a small tolerance. A mismatch, a missing expected case, or a failed refusal is recorded as a finding, and any finding turns the verdict from `pass` to `blocked`.\n\n###### Shape\n\nRead this module as a bounded RMS-parity pipeline: the JSON bundle names the reader authority, runtime locus, standard, and generated navigation edges; the runtime ports Swift `normalizedLevel` math over public fixture arrays; tests and result records verify numeric parity and metadata-only evidence. Generated Mermaid and Atlas links are navigation status, not macOS audio-session, microphone, device, source-file changes, public sharing, or launch-scope decision.\n\nDiagram source\n\n```text\nflowchart TD swift[\"Copied Swift source AudioLevelMonitor.normalizedLevel metadata-only; anchors only\"] manifest[\"Public probe manifest synthetic sample arrays + WAV bytes expected level per case\"] samples[\"normalized_level(samples, format)\"] fmt{\"format tag?\"} refuse[\"raise ValueError unsupported format refused\"] empty{\"buffer empty?\"} zero[\"return 0.0\"] scale[\"square + accumulate int16 divided by 32767\"] rms[\"rms = sqrt(total / count)\"] clamp[\"min(max(rms * 8, 0), 1) scaled, then clamped to 0..1\"] compare[\"compare observed vs expected within tolerance\"] verdict{\"any finding?\"} blocked[\"status: blocked\"] passed[\"status: pass\"] ceiling[\"Scope limit RMS parity over public fixtures only no audio session, microphone, device, source-file changes, public sharing, or launch\"] swift --> samples manifest --> samples samples --> fmt fmt -->|\"not float32/int16\"| refuse fmt -->|\"float32 or int16\"| empty empty -->|\"yes\"| zero empty -->|\"no\"| scale scale --> rms rms --> clamp clamp --> compare refuse --> compare zero --> compare compare --> verdict verdict -->|\"yes\"| blocked verdict -->|\"no\"| passed blocked --> ceiling passed --> ceiling\n```\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[59]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_audio_level_rms_port.json` for the current generated instance derived from the source record.\n- Bundle route: inspect `examples/batch8_audio_level_rms_port/exported_batch8_audio_level_rms_port_bundle` for copied Swift source refs and digest evidence.\n- Runtime route: run `tests/test_batch8_audio_level_rms_port.py` and the commands in ## Validation Result record Path for recomputation evidence.\n\n###### Prior Art Grounding\n\nThe component is grounded in standard digital-audio metering practice: root mean square amplitude is a common way to summarize signal energy for level displays, while OS capture APIs and media tools are kept outside pure numeric tests. Useful anchors include:\n- Apple's [AVFoundation](https://developer.apple.com/av-foundation/) media framework family for time-based audiovisual capture and processing on Apple platforms.\n- [FFmpeg audio/video documentation](https://www.ffmpeg.org/documentation.html), as a broad media-processing toolchain where audio streams and levels are handled as explicit inputs and transforms.\n\nMicrocosm borrows only the pure RMS-level calculation shape and ports it to fixture-bound Python parity tests. It does not start an audio session, request microphone permission, read recorded audio, capture a device, or approve UI or launch-scope decision.\n\n###### Source Reference\n\nThe exported bundle copies `apps/demo-take-console/Sources/DemoTakeConsoleApp/AudioLevelMonitor.swift` under `examples/batch8_audio_level_rms_port/exported_batch8_audio_level_rms_port_bundle/source_modules/`. Result records carry refs, digests, anchors, sample counts, and parity verdicts, not copied body text, recorded audio, or private device state.\n\n###### Mechanism Set\n\nThe validator requires float32 parity, int16 parity, over-one clamp behavior, empty-buffer zero behavior, and unsupported-format refusal. Shared registry, sign-off, runtime-shell, CLI, atlas, package-data, and generated docs wiring is intentionally deferred while the existing shared Microcosm core lease is active.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded RMS parity result record and sign-off JSON. The bundle command validates the copied Swift source module, digest anchors, negative exercises, body-exclusion scan, and source-ref boundary. The focused test checks the Python port, bundle validation, result record body scan, and scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not start an audio session, request microphone permission, read recorded audio, prove device capture, approve UI readiness, change source files, authorize public sharing, or approve launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is deterministic Python-port evidence over fixture inputs only. It is not macOS audio-session evidence, not microphone permission authority, not device capture, not UI readiness, not source-file changes, and not launch-scope decision.\n\n###### Scope limit\n\nThis paper module can claim a deterministic Python port of the audio-level RMS calculation with a diagram view generated for this module and navigation links available from the same source row. It can explain deterministic numeric RMS/level behavior over fixture inputs and metadata-only result records.\n\nIt cannot claim macOS audio-session evidence, microphone permission authority, device capture, UI readiness, source-file changes, publishing-scope decision, launch-scope decision, or whole-system correctness. Those claims would need new supporting evidence before this module could narrate them.\n\nStructural Theses Finance Bundle Runs a copied finance-thesis model through dated test cases with no live market data or advice. 5/5\n\nDoes This bundle imports the structural_theses finance spine as a copied public source body with synthetic dated thesis-card exercises. The exercises run the lifecycle/backtest mechanics without live market data, investment-related actions, portfolio action, external model access, public sharing, or launch-scope decision.\n\nScope limit It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, or public sharing.\n\nRun\n\n```text\nmicrocosm batch8-structural-theses-capsule run --input fixtures/first_wave/batch8_structural_theses_capsule/input --out receipts/first_wave/batch8_structural_theses_capsule --acceptance-out receipts/acceptance/first_wave/batch8_structural_theses_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Prediction Market Board Bundle](docs/components.html#component-batch12_prediction_market_board_capsule)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_structural_theses_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 8 Structural Theses Bundle\n\nExplains component [Structural Theses Finance Bundle](docs/components.html#component-batch8_structural_theses_capsule) mechanism [validates public structural theses bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-structural-theses-capsule-validates-public-structural-theses-capsule) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axiom [Derivation before assertion](docs/doctrine.html#dcard-ax-1)\n\nThis component imports `tools/finance/structural_theses.py` as exact copied source source and exercises it over public synthetic structural-thesis fixtures.\n\nThe bundle is bounded to replayable CP1/CP2 thesis-family validation. It excludes financial decisions, investment recommendations, live market data, external model access, portfolio action, public sharing, or launch.\n\n###### Purpose\n\nThe copied source, `tools/finance/structural_theses.py`, takes a tempting idea and disciplines it. The tempting idea is that some market moves look structurally obvious, so a corpus of \"obvious\" theses ought to predict the next one. The trap is survivorship: it is easy to assemble a list of patterns that worked in hindsight and call the list a method.\n\nThe single question the source answers is narrower and harder. Given claims that looked structurally obvious at the time they were written, which reasoning families still survive once you resolve every claim forward and keep the ones that failed? The load-bearing inversion is that \"obvious\" is treated as a claim-status frozen at commitment time, never as a label applied to outcomes afterwards. A thesis whose meaning shifts once the result is known is a post-hoc mutation, and the leakage guard rejects it.\n\nWhat is unusual is that losers and negative controls are first-class, required evidence rather than noise. A refuted thesis must flow through the same pipeline as a confirmed one and stay legible as valid evidence; a negative control must be present and must not resolve into a confirmed claim. The output vocabulary deliberately has no tradable \"winner\": the strongest a surviving pattern can earn is `review_candidate`, a flag for human review and nothing more.\n\nThis bundle does not assert any of those findings as market-level conclusions. It imports the source verbatim, runs it over public synthetic rows, and checks that the discipline holds. It is not financial decisions, an investment recommendation, or live-market validation.\n\n###### What it validates\n\nThe component loads the copied finance source, builds one public winner, loser, and control family from a synthetic probe, and then exercises the source's own validator over both the clean family and three deliberately broken variants.\n\nThe clean path confirms the at-time semantics survive a full run: the winner resolves `claim_confirmed_forward`, the loser resolves `claim_refuted_forward` and is marked valid evidence, the control resolves as a control without becoming a confirmed claim, the surviving pattern lands in family memory as a `candidate_set`, and the authority boundary keeps `investment_recommendation_authorized` false. Under the hood the source maps each thesis onto the existing forecast-claim shape and drives the real CP1 admission, CP2 resolution, proper-scoring replay, and purged walk-forward replay with deterministic fixture prices rather than building a new evaluator.\n\nThe three negative exercises are the substance of the proof, because each one forces a specific discipline to fire:\n- **Survivor-only.** A family built from winners alone, with no failed thesis, must be rejected. The source raises `NO_LOSER_FLOWED_THROUGH`, `NO_NEGATIVE_CONTROL`, and `SURVIVORSHIP_SAMPLE`; the component confirms all three appear (error code `BATCH8_STRUCTURAL_THESES_SURVIVOR_ONLY_REJECTED`).\n- **Forward-gate breach.** A refuted pattern is smuggled into the forward review candidates. The source must raise `FORWARD_GATE_BREACH`, because only a pattern that survived at-time replay may produce a `review_candidate` (`BATCH8_STRUCTURAL_THESES_FORWARD_GATE_BREACH_REJECTED`).\n- **Control leak.** A negative control is mutated to claim it confirmed forward. The source must raise `CONTROL_LEAK` (`BATCH8_STRUCTURAL_THESES_CONTROL_LEAK_REJECTED`).\n\nIf any of these refusals fails to fire, the component records a blocked finding rather than a pass. Alongside the family check it verifies exact digest parity and required anchors for the copied source, so the page cannot drift away from the code it claims to exercise. Result records carry verdicts, counts, error codes, and refs only; copied bodies, market data, and model-output data stay out.\n\n###### Shape\n\nThis module's shape is bundle-first and projection-bounded. The source row is `core/paper_module_capsules.json::paper_modules[63:paper_module.batch8_structural_theses_capsule]`; the generated JSON instance is `paper_modules/batch8_structural_theses_capsule.json`, and it preserves `source_authority: json_capsule`.\n\nSource refs\n\nJSON source record `core/paper_module_capsules.json[63]` Runtime locus `organs/batch8_structural_theses_capsule.py` Exact copied source `tools/finance/structural_theses.py` CP1 admit forward-only CP2 resolve vs frozen criterion proper-scoring + purged replay `build_structural_thesis_family` on the clean family `validate_structural_thesis_family` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON source record core/paper_module_capsules.json[63]\"] --> Runtime[\"Runtime locus components/batch8_structural_theses_capsule.py\"] Source[\"Exact copied source tools/finance/structural_theses.py\"] -->|digest + anchor parity| Runtime Probe[\"Public synthetic probe winner, loser, control rows plus realized returns\"] --> Runtime Runtime --> Build[\"build_structural_thesis_family CP1 admit forward-only CP2 resolve vs frozen criterion proper-scoring + purged replay\"] Build --> Clean[\"validate_structural_thesis_family on the clean family\"] Clean --> CleanCheck{\"Winner confirmed, loser refuted + valid evidence, control not confirmed?\"} Runtime --> Neg[\"Three broken variants\"] Neg --> Survivor[\"Survivor-only family NO_LOSER_FLOWED_THROUGH NO_NEGATIVE_CONTROL SURVIVORSHIP_SAMPLE\"] Neg --> Forward[\"Refuted pattern smuggled into forward candidates FORWARD_GATE_BREACH\"] Neg --> Control[\"Control mutated to confirmed CONTROL_LEAK\"] CleanCheck -->|yes| Pass[\"Bounded pass result record\"] CleanCheck -->|no| Block[\"Blocked finding\"] Survivor -->|refusal fires| Pass Forward -->|refusal fires| Pass Control -->|refusal fires| Pass Survivor -->|refusal missing| Block Forward -->|refusal missing| Block Control -->|refusal missing| Block Pass --> Ceiling[\"Scope limit public synthetic fixture + copied source only\"] Ceiling -. forbids .-> NoClaims[\"No advice, recommendation, live market data, external model access, portfolio action, public sharing, launch\"]\n```\n\nThe standards lane is split deliberately. The module-specific public runtime standard, `standards/std_microcosm_batch8_structural_theses_capsule.json`, governs the fixture fields, public/private boundary, result record contract, validator command, negative-case count, and explicit anti-purpose. The wider `codex/standards/std_microcosm.json::paper_module_coverage_contract` governs how paper-module coverage, Atlas cards, generated Mermaid, and context-pack depth stay navigable without promoting generated projections into source truth.\n\nThe runtime/source lane is likewise bounded. The Microcosm component `src/microcosm_core/organs/batch8_structural_theses_capsule.py` loads the copied structural-theses source, builds the winner/loser/control family, evaluates survivor-only, forward-gate-breach, and control-leak negative exercises, and writes metadata-only result records. The exported bundle at `examples/batch8_structural_theses_capsule/exported_batch8_structural_theses_capsule_bundle` contains `source_module_manifest.json`; that manifest records 12 exact copied source modules for bundle validation, including `source_modules/tools/finance/structural_theses.py`, while the first-wave result record narrows the copied-source proof to the structural-theses module itself.\n\nThe proof lane is fixture-level. The public fixture input under `fixtures/first_wave/batch8_structural_theses_capsule/input` and the focused regression `tests/test_batch8_structural_theses_capsule.py` validate digest and anchor parity, thesis-family replay, winner/loser/control semantics, stable negative cases, body exclusion, scope limits, and the runtime-shell bundle path. Result record evidence lives under `receipts/first_wave/batch8_structural_theses_capsule/`, result records/sign-off/first_wave/batch8_structural_theses_capsule_fixture_acceptance.json, and `receipts/runtime_shell/demo_project/organs/batch8_structural_theses_capsule/exported_batch8_structural_theses_capsule_bundle_validation_result.json`.\n\nThe generated Mermaid and Atlas statuses are useful only as navigation result records: `available_from_capsule_edges` and `linked_from_capsule_edges` mean the JSON bundle edges are walkable. They do not authorize financial decisions, investment recommendations, live-market validation, external model access, portfolio action, public sharing, launch, private-system equivalence, or whole-system correctness.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[63]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_structural_theses_capsule.json` for current generated state.\n- Bundle route: inspect `examples/batch8_structural_theses_capsule/exported_batch8_structural_theses_capsule_bundle` for copied source refs and digest evidence.\n- Runtime route: run `tests/test_batch8_structural_theses_capsule.py` and the commands in ## Validation Result record Path.\n\n###### Prior Art Grounding\n\nThis bundle borrows from empirical-finance validation and bias-control patterns. Useful anchors include:\n- Fama and French's [common risk factors](https://mba.tuck.dartmouth.edu/pages/faculty/ken.french/data_library.html) work and data-library tradition, as a precedent for decomposing structural market claims into named factor families and testable rows.\n- MacKinlay's [event-study methodology](https://www.bu.edu/econ/files/2011/01/MacKinlay-1996-Event-Studies-in-Economics-and-Finance.pdf), as a prior pattern for separating an event window, expected baseline, and abnormal-return evidence.\n- Brown, Goetzmann, Ibbotson, and Ross on [survivorship bias](https://terpconnect.umd.edu/~wermers/ftpsite/FAME/Brown_Goetzmann_Ibbotson_Ross.pdf), which motivates explicit loser/control cases rather than winner-only thesis replay.\n\nMicrocosm borrows the factor-family, event-window, and bias-control shape, but keeps the component to public synthetic thesis rows and copied source. It is not financial decisions, an investment recommendation, live-market validation, portfolio authority, publishing-scope decision, or launch-scope decision.\n\n###### Source Reference\n\nThe exported bundle copies `tools/finance/structural_theses.py` under `examples/batch8_structural_theses_capsule/exported_batch8_structural_theses_capsule_bundle/source_modules/`. Result records carry refs, digests, anchors, counts, and runtime verdicts, not copied body text, model-output data, market data, or private runtime state.\n\n###### Mechanism Set\n\nThe validator requires exact source digest parity, structural-thesis source anchors, a public winner/loser/control family, valid loser evidence, a negative control that does not become a confirmed claim, and rejection of survivor-only, forward-gate-breach, and control-leak exercises. Shared registry, sign-off, runtime-shell, CLI, atlas, package-data, and generated docs wiring is intentionally deferred while shared Microcosm core leases are active.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded thesis-family result record and sign-off JSON. The bundle command validates copied source refs, digest anchors, public winner/loser/control cases, negative controls, body-exclusion posture, and scope limit fields. The focused test checks fixture validation, bundle validation, survivor-bias refusal, control-leak refusal, and claim boundaries.\n\nThis result record path is reader-verifiable evidence only. It is not financial decisions, not an investment recommendation, not live-market validation, not external model access, not portfolio authority, not publishing-scope decision, and not launch-scope decision.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis is deterministic fixture evidence over public synthetic thesis rows and exact copied source only. It is not advice, not an investment recommendation, not live-market validation, not external model access, not portfolio authority, not publishing-scope decision, and not launch-scope decision.\n\n###### Scope limit\n\nThis paper module demonstrates a bounded structural-theses fixture: deterministic validation over public synthetic thesis rows, exact copied source refs, and metadata-only result records. A diagram view is generated for this module and it appears in the Atlas navigation surface.\n\nIt cannot claim advice, investment recommendation, live-market validation, external model access, portfolio authority, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness. Higher claims must be authorized by the JSON bundle and generated projection state first.\n\nEngine Room Demo Runs proof, runtime, security, and routing demos through bounded public examples with stated limits. 5/5\n\nDoes This component turns the staged Engine Room bundles into one accepted public demo surface. It exercises the proof-search, runtime, integrity, security, navigation, orchestration, and reference-routing bundles through bounded public fixtures with explicit scope boundaries.\n\nScope limit It validates only the public Engine Room composition contract; it is not deployment posture, private-system equivalence, frontier theorem proving, complete security proof, public sharing, or launch-scope decision.\n\nRun\n\n```text\nmicrocosm engine-room-demo run --input fixtures/first_wave/engine_room_demo/input --out receipts/first_wave/engine_room_demo --acceptance-out receipts/acceptance/first_wave/engine_room_demo_fixture_acceptance.json\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Compliance Pipeline Bundle](docs/components.html#component-batch8_compliance_pipeline_capsule), [Validator Checker Bundle](docs/components.html#component-batch8_validator_checker_capsule)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/engine_room_demo.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Engine Room Demo\n\nExplains component [Engine Room Demo](docs/components.html#component-engine_room_demo) mechanisms\n- [validates public engine room demo](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-demo-validates-public-engine-room-demo)\n- [validates public projection leak gate](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-public-projection-leak-gate-validates-public-projection-leak-gate)\n- [validates public generated projection drift gate](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-generated-projection-drift-gate-validates-public-generated-projection-drift-gate)\n- [validates public command run singleflight](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-command-run-singleflight-validates-public-command-run-singleflight)\n- [validates public reference knowledge router](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-annex-knowledge-router-validates-public-annex-knowledge-router)\n- [validates public derived fact provider engine](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-derived-fact-provider-engine-validates-public-derived-fact-provider-engine)\n- [validates public egress self compliance gate](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-egress-self-compliance-gate-validates-public-egress-self-compliance-gate)\n- [validates public lean proof search lab](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-lean-proof-search-lab-validates-public-lean-proof-search-lab)\n- [validates public navigation fitness benchmark](docs/rules-and-ideas.html#lattice-mechanism-mechanism-engine-room-navigation-fitness-benchmark-validates-public-navigation-fitness-benchmark)\n\n`engine_room_demo` is the accepted Microcosm composition component for the staged Engine Room set. It wraps the bundles under `microcosm_core.engine_room`, runs the composed demo/audit path, and writes first-wave result records without promoting fixture rows into private-system or launch-scope decision.\n\n###### Purpose\n\nThe Engine Room set is ten separate bundles: a Lean proof-search lab, a metabolism runtime, command singleflight, a generated-projection drift gate, a derived-fact engine, a public-projection leak gate, an egress self-compliance gate, a navigation-fitness benchmark, a bridge-campaign DAG, and an reference knowledge router. Each bundle has its own fixture and result record. This component exists so that a reader does not have to trust ten claims separately. It answers one question: do the ten bundles together cover the fourteen targets the controller asked for, and does each one still own its full surface and run.\n\nA bundle \"owns its surface\" only when six files exist for it: module source, fixture input, fixture manifest, paper module, standard, and test. The audit checks all six per bundle, runs each fixture through its declared evaluator, and unions the targets the bundles actually declare against the fourteen the controller expected. A passing run means the set is complete and every fixture executed, not that any single bundle is finished or correct.\n\nThe design choice worth noting is in the negative case. Rather than compare against a frozen answer key, the negative fixture recomputes the live set of covered targets and fails only when the fixture names a target that is genuinely outside it. That keeps the refusal honest as the bundle set grows: the test cannot drift into agreement with a stale list, because there is no stored list to agree with.\n\nA second deliberate boundary is that the runner reads the shared component registry, sign-off file, and atlas, but never writes to them. It reports whether the composition component is integrated into those shared surfaces as a separate visibility line, and always records `shared_registry_mutated: false`. Composition coverage and shared-registry integration are kept as two distinct facts, so a green demo cannot quietly imply registry authority it does not hold.\n\n###### What It Runs\n- Verifies the 14 Engine Room jewel targets selected by the controller prompt.\n- Checks the owned staged bundle surfaces: module source, fixture input, fixture manifest, paper module, standard, and tests.\n- Executes the staged bundle demo through the public fixture chain.\n- Observes a negative fixture where an expected target is intentionally absent.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR A[\"Engine Room fixture cases\"] --> B[\"Accepted component wrapper\"] B --> C[\"Controller coverage audit\"] C --> D[\"10 staged bundle evaluators\"] D --> E[\"14 covered jewel targets\"] C --> F[\"Shared surface integration check\"] B --> G[\"Result, board, validation result record\"] G --> H[\"Sign-off result record\"] A --> I[\"Missing-target negative case\"] I --> C\n```\n\nThe shape is a composition proof over declared public bundles. The wrapper asks the staged Engine Room runner to verify target coverage, surface presence, fixture execution, shared-surface visibility, and the missing-target negative case. It writes public result records and an sign-off result record without exporting private source run state or turning the staged demo into launch-scope decision.\n\n###### Technical Mechanism\n\n`src/microcosm_core/organs/engine_room_demo.py` is a result record-writing wrapper around `src/microcosm_core/engine_room/demo.py`. The wrapper loads one or more fixture cases, calls `_evaluate_case` for each case, and writes four metadata-only artifacts: result, board, validation result record, and optional sign-off result record. The positive case delegates to `audit_controller_coverage`; the negative case does not compare against a static answer key, but recomputes the actual staged target set and fails only when the fixture names a target outside that set.\n\n`audit_controller_coverage` is the mechanism that makes the composition claim specific. It enumerates the ten `CAPSULES`, unions their declared jewel targets against `EXPECTED_JEWEL_TARGETS`, checks each bundle's owned source, fixture, manifest, paper module, standard, and test surface, optionally runs the staged bundle exercises through `run_demo`, and reads registry, sign-off, and atlas ids only as visibility evidence. The resulting result record distinguishes staged bundle completion from shared-registry integration and always reports `shared_registry_mutated: false`.\n\n`run_demo` is the execution spine below the audit. It imports each staged bundle module, calls the declared evaluator (`evaluate_fixture_dir` or `validate_fixture_dir`), records compact per-bundle status, and summarizes the covered jewel targets. A pass therefore means the selected public fixture chain ran for the declared bundle set and covered the expected target lattice; it does not mean the Engine Room set is deployment-posture, privately equivalent, benchmark-complete, or launch-approved.\n\n###### Governing Doctrine Relations\n\nThe generated structured source record binds this page to `concept.import_projection_and_drift_control_bundle`, `mechanism.engine_room_demo.validates_public_engine_room_demo`, and three adjacent Engine Room mechanisms for projection leakage, generated-projection drift, and command singleflight. Its governing principle refs are `P-1`, `P-2`, `P-3`, `P-5`, `P-6`, `P-8`, `P-9`, `P-12`, and `P-15`; its axiom refs are `AX-1`, `AX-4`, `AX-5`, `AX-7`, `AX-8`, and `AX-11`. In this module those refs all converge on one rule: composition evidence must be routed through explicit source, fixture, result record, and projection boundaries before it can support a reader claim.\n\nThe ten dependency modules are not decorative neighbors. They are the actual staged Engine Room bundle families consumed by the demo runner: Lean/proof-search, metabolism runtime, command singleflight, generated projection drift, derived facts, public projection leak checks, egress self-compliance, navigation fitness, bridge campaign DAGs, and reference knowledge routing. The bundle edge set is therefore a mechanism lattice over those bounded components, not an invitation to generalize beyond their result records.\n\n###### Named Proof Consumers\n- Fixture wrapper consumer: PYTHONPATH=src ../repo-python -m microcosm_core.components.engine_room_demo run --input fixtures/first_wave/engine_room_demo/input --out /tmp/microcosm-engine-room-demo/fixture --sign-off-out /tmp/microcosm-engine-room-demo/sign-off.json --json consumes `build_result`, the positive controller-audit fixture, the semantic missing-target negative case, result record writing, metadata-only sign-off output, and the module scope limit.\n- Controller audit consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.engine_room.demo audit --root . --json` consumes the ten-bundle inventory, 14-target coverage set, staged surface checks, shared-surface visibility readback, and the no-shared-mutation boundary.\n- Staged bundle execution consumer: `PYTHONPATH=src ../repo-python -m microcosm_core.engine_room.demo run --root . --json` consumes each public bundle evaluator and proves the composition runner can execute the declared Engine Room fixture chain without touching shared registry, sign-off, atlas, or generated projection surfaces.\n- Focused regression consumer: `PYTHONPATH=src ../repo-python -m pytest -p no:cacheprovider tests/test_engine_room_demo.py tests/test_engine_room_demo_organ.py -q` pins the bundle inventory, CLI JSON output, controller audit, semantic negative case, result record writer, public-relative fixture refs, and private-path redaction floor.\n- It is a read-only result record for the Markdown slice, not permission to hand-edit generated projections.\n\n###### Reader Evidence Routing\n\nRead `expected_jewel_count: 14` and `covered_jewel_count: 14` as controller target coverage for the staged Engine Room set. Read `capsule_count: 10` and `passed_capsule_count: 10` as successful execution of the selected public fixture evaluators.\n\nRead `shared_registry_mutated: false` as an authority boundary: the staged runner observes registry, sign-off, and atlas visibility, but it does not mutate those shared surfaces. Read `shared_integration_status` as a visibility result record, not as permission to alter the shared registry from this page.\n\nRead `body_in_receipt: false` as the public-copy boundary. Result records can expose counts, target ids, fixture refs, stable error codes, scope limits, and omission-safe summaries; they must not copy private source run state, model-output data, raw operator threads, browser UI material, account secrets, or cloned third-party body text.\n\n###### Prior Art Grounding\n\nThe component borrows from integration-testing and CI composition practice: multiple component checks are assembled into one public demo/audit path, negative fixtures prove refusal behavior, and result records summarize execution without upgrading fixture evidence into launch claims. Useful anchors include:\n- IBM's [integration testing](https://www.ibm.com/think/topics/integration-testing) overview, which frames testing around whether composed modules interact as intended.\n- [pytest fixtures](https://docs.pytest.org/en/stable/reference/fixtures.html), as a common pattern for public synthetic setup and reusable test inputs.\n- [GitHub Actions](https://github.com/features/actions), as a widely used workflow surface for composing build, test, and publish stages with explicit status.\n\nMicrocosm borrows the composed-demo and audit-pipeline shape, but keeps the claim at declared public composition only. It is not deployment posture, private-system equivalence, benchmark validation, a security proof, or launch-scope decision.\n\n###### Public Command\n\nThe CLI alias is:\n\nThe fixture manifest names one positive case (`positive_controller_audit`) and one negative case (`missing_expected_target_negative`) that expects `ENGINE_ROOM_EXPECTED_TARGET_MISSING`. The expected component result is `status: pass`, `expected_jewel_count: 14`, `positive_case_count: 1`, `negative_case_count: 1`, and `observed_negative_case_count: 1`.\n\nThe staged composition runner can also be inspected without writing sign-off result records:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.engine_room.demo audit --root . --json\nPYTHONPATH=src python3 -m microcosm_core.engine_room.demo run --root . --json\n```\n\nFocused verification from the source repo root:\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_demo.py tests/test_engine_room_demo_organ.py -q --basetemp /tmp/microcosm-engine-room-demo\ncd microcosm-substrate && PYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Validation Result record Path\n\n```text\nPYTHONPATH=src ./repo-pytest tests/test_engine_room_demo.py tests/test_engine_room_demo_organ.py -q --basetemp=/tmp/microcosm_engine_room_demo_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis component validates the declared public composition contract only. It is not deployment posture, not private-system equivalence, not a frontier theorem-proving claim, not a complete security proof, not benchmark validation, and not launch-scope decision.\n\nBackend & Governance Engines Bundle Exercises thirteen copied backend and governance engines over fixed public test cases. 5/5\n\nDoes This bundle imports the Set-9 source engines as exact copied source bodies plus deterministic public exercises. The exercises inspect thirteen backend, governance, projection, frontend data-shaping, worker-gate, and quality-accounting mechanisms, their source-module digest evidence, and the negative cases that prevent live-authority or result record-only overclaims.\n\nScope limit It validates only a public source-open bundle and bounded synthetic exercises; it is not live lineage truth, human approval authority, market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.\n\nRun\n\n```text\nmicrocosm batch9-macro-engines-capsule run --input fixtures/first_wave/batch9_macro_engines_capsule/input --out receipts/first_wave/batch9_macro_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch9_macro_engines_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Governance & Compiler Mechanisms Bundle](docs/components.html#component-batch10_governance_compilers_capsule)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch9_macro_engines_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 9 Source Engines Bundle\n\nExplains component [Backend & Governance Engines Bundle](docs/components.html#component-batch9_macro_engines_capsule) mechanism [validates public source engines bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch9-macro-engines-capsule-validates-public-macro-engines-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\n###### Purpose\n\nCopying a file into a public bundle proves only that the bytes match. It does not establish that the imported logic still behaves the way it did in the larger system it came from. This component exists to close that gap for thirteen backend, governance, and frontend data-shaping modules. The single question it answers is: do these copied source bodies still compute what they claim to compute, when run against bounded fixtures, here in the public repository?\n\nThe unusual part is how it checks. Rather than asserting against pre-baked result files, the component loads each copied module and calls its real functions. It imports `system/lib/approval_registry.py` and runs `decide_approval` against a temporary approvals tree to confirm a pre-acquired claim is refused. It imports `system/lib/python_documentation_tree.py` and runs `build_file_entry` over written-out Python to read symbols back. It runs the copied mission-graph compiler, the dependency-pin parser, the config-authority registry validator, the host-pressure admission builder, the worker budget guard, and the milestone metric computer, each on its own fixture. The three TypeScript bodies for finance clustering, edge extraction, and WorkAtlas aggregation are parsed for their load-bearing constants and branches, then mirrored deterministically. Each exercise carries both a positive shape and a paired negative case, so the proof moves with source behaviour, not with a static result record.\n\nThe reader should treat the result as fixture-bound evidence and nothing more. A passing bundle shows that representative mechanics still match the imported bodies under positive and negative cases. It does not assert live lineage truth, approval authority, real market or news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, or launch-scope decision.\n\n###### Abstract\n\nSet 9 Source Engines Bundle is a public Microcosm paper module for a source-open, body-import-backed component. The component copies thirteen source source bodies into `examples/batch9_macro_engines_capsule/exported_batch9_macro_engines_capsule_bundle/source_modules/`, checks their digests and required anchors, then runs deterministic public exercises over fixture data. The result is a reproducible evidence bundle for backend, governance, frontend data-shaping, worker-gate, and quality-accounting mechanics without granting live system authority.\n\nThe useful claim is narrow: the copied bodies and public fixtures can show that representative mechanics still behave like the imported source bodies under bounded positive and negative cases. They do not prove live lineage truth, approval authority, market or news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, private-system equivalence, or whole-system correctness.\n\n###### Telos\n\nThis module exists to make the Set-9 import legible as technical evidence rather than as generic public copy. A cold reader should be able to answer four questions:\n- Which source bodies were copied, and how are they checked?\n- Which mechanisms are exercised, and which ones are source-body-sensitive?\n- Which result records prove only fixture truth, and which claims remain forbidden?\n- How does this component relate to the Microcosm concept/mechanism/principle lattice?\n\n###### Mechanism Map\n\nSource refs\n\n13 copied source bodies `source_module_manifest.json` run / run_batch9_bundle `batch9_macro_engines_capsule.py` Diagram source\n\n```text\nflowchart TD manifest[\"source_module_manifest.json 13 copied source bodies\"] fixtures[\"first_wave fixture input probe manifest + 13 negative cases\"] runtime[\"batch9_macro_engines_capsule.py run / run_batch9_bundle\"] digest[\"Digest + anchor check copied bytes match source, required anchors present\"] exercise[\"Re-execute imported logic _run_all_exercises\"] py[\"10 Python bodies importlib load, call real functions (lineage, approval, AST, mission graph, pin drift, config, host pressure, doctrine, worker gate, milestone)\"] ts[\"3 TS-backed bodies parse constants/branches, mirror (finance, WorkAtlas, edge extractor)\"] pos[\"Positive case expected shape\"] neg[\"Negative case e.g. self-loop pruned, preacquired claim refused, forbidden surface blocked\"] result records[\"metadata-only result records result, board, validation, sign-off; body_in_receipt false\"] ceiling[\"Scope limit fixture evidence only\"] manifest --> runtime fixtures --> runtime runtime --> digest runtime --> exercise exercise --> py exercise --> ts py --> pos py --> neg ts --> pos ts --> neg digest --> result records pos --> result records neg --> result records result records --> ceiling\n```\n\nThe runtime source is `src/microcosm_core/organs/batch9_macro_engines_capsule.py`. Its load-bearing symbols are `EXPECTED_MECHANISMS`, `EXPECTED_MODULE_IDS`, `EXPECTED_NEGATIVE_CASES`, `SOURCE_REQUIRED_ANCHORS`, `AUTHORITY_CEILING`, `run`, `run_batch9_bundle`, and `result_card`.\n\n###### Set-9 Pipeline\n\nThe Set-9 pipeline has four stages.\n1. **Source import.** `source_module_manifest.json` declares thirteen copied source bodies, each with `source_ref`, copied target path, digest equality fields, line and byte counts, material class, and required anchors. The manifest states `source_import_class: copied_non_secret_macro_body`, `body_copied_material_count: 13`, and `body_in_receipt: false`.\n1. **Fixture execution.** `run` consumes `fixtures/first_wave/batch9_macro_engines_capsule/input`, including `batch9_macro_engines_capsule_probe_manifest.json` plus thirteen negative-case files. It writes the result, board, validation result record, and optional sign-off JSON.\n1. **Exported-bundle validation.** `run_batch9_bundle` validates `examples/batch9_macro_engines_capsule/exported_batch9_macro_engines_capsule_bundle`. The bundle manifest names `exported_batch9_macro_engines_capsule_bundle` as the input mode, points at `source_module_manifest.json`, and declares thirteen negative cases.\n1. **Result record and ceiling.** The public result records may expose refs, digests, anchors, counts, verdicts, negative-case outcomes, and omission evidence. They must not inline copied source bodies or private/live payloads.\n\n###### Mechanism Set\n\nMechanism id Imported source body What the public exercise checks `lineage_temporal_provenance_chain_resolver` `system/server/lineage.py` Parent/truth lineage chain behavior and self-loop pruning. `approval_sign_off_claim_adjudicator` `system/lib/approval_registry.py` Approval decision shape and claim-conflict enforcement. `python_ast_symbol_index_doc_tree` `system/lib/python_documentation_tree.py` Python AST symbol extraction, including async/function/class coverage. `finance_news_dedup_cluster_ranker` `system/server/ui/src/lib/financePresentation.ts` Headline fingerprinting, stopword behavior, and duplicate clustering. `mission_graph_topological_compiler` `system/server/graph.py` DAG compilation, group closure, upstream dependency walk, and missing-target handling. `dependency_pin_drift_auditor` `tools/dev/check_pin_drift.py` Requirement parsing and drift/missing/unparseable classification. `config_authority_drift_audit` `system/lib/config_authority_registry.py` Config authority registry validation and mutation-allowed rejection. `heterogeneous_graph_edge_extractor` `system/server/ui/src/pages/RootNavigator.tsx` Generic edge-field map extraction and relation normalization. `work_atlas_cell_histogram_aggregator` `system/server/ui/src/components/intelligence/WorkAtlas.tsx` Cell aggregation and the unrouted-only route-reason histogram gate. `host_pressure_admission_decision_gate` `system/lib/admission_consumer.py` Admission normalization and summary-first blocking behavior. `doctrine_file_enrichment_multihop_join` `system/server/doctrine_enrichment.py` File-to-doctrine enrichment join and empty-envelope detection. `worker_job_budget_forbidden_surface_gate` `system/lib/type_a_worker_harness.py` Provider budget and forbidden-surface pre-dispatch gates. `milestone_relative_promotion_quality_accounting` `system/lib/population_lane_metrics.py` Milestone-relative promotion metrics and blocker-to-next-action classification.\n\nSeveral tests deliberately mutate copied source bodies in a temporary public bundle and refresh the manifest digest. Finance, lineage, approval, AST, mission graph, dependency, config, WorkAtlas, heterogeneous edge, doctrine, worker-gate, host-pressure, and milestone tests prove the exercise result moves with source-body behavior rather than with static result record fixtures alone. Two tamper modes are load-bearing: an unapproved copied-body edit without a manifest digest refresh fails `CROWN_JEWEL_SOURCE_DIGEST_MISMATCH`, while a body edit with a refreshed digest is only accepted when the required witnesses and semantic exercise still pass. Removing a required witness while refreshing the digest still fails `CROWN_JEWEL_SOURCE_ANCHOR_MISSING`. The fixture path also resolves through the copied source-module manifest, so a fixture-only or static result record replacement is outside the accepted proof shape.\n\n###### Copied-Body and Import Authority\n\nThe source-module manifest is the body-import authority for this paper module. It proves that the public bundle contains copied bodies and that the runtime can compare copied target digests with expected source digests and required anchors. It does not make the Markdown source authority.\n\nThe authority chain is:\n- `core/paper_module_capsules.json::paper_modules[73:paper_module.batch9_macro_engines_capsule]` is the paper-module bundle source row.\n- `paper_modules/batch9_macro_engines_capsule.json` is the governed generated instance derived from that bundle.\n- `organs/batch9_macro_engines_capsule.json` and `mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json` bind the accepted component and mechanism to the runtime, result records, and scope limit.\n- `standards/std_microcosm_batch9_macro_engines_capsule.json` defines the public standard: exactly thirteen mechanisms, exactly thirteen copied source source modules, metadata-only result records, and forbidden live-authority claims.\n\n###### Current Partial-Realness Limitations\n\nSet 9 is real system progress because it copies source bodies and verifies source-sensitive behavior in public fixtures. It is still partial-realness, not live authority.\n- The lineage exercise is a public provenance specimen, not live lineage truth.\n- The approval exercise checks adjudication mechanics, not human approval authority.\n- The finance exercise checks headline clustering over synthetic rows, not real market-level conclusions, investment-related actions, or news-truth authority.\n- The host-pressure exercise checks admission-consumer behavior over quoted fixtures, not host-state truth.\n- The WorkAtlas, worker-gate, and milestone exercises validate bounded mechanics, not live work log authority or external model access readiness.\n- The generated Markdown/JSON/site projections remain navigation and reader surfaces; source authority stays in JSON contracts, source manifests, tests, and result records.\n\n###### Failure Modes\n\nThe standard and tests protect against these failure modes:\n- Mechanism count drifts away from thirteen.\n- Source-module count drifts away from thirteen without manifest and test updates.\n- The source manifest stops declaring `copied_non_secret_macro_body`.\n- A copied source body changes without a matching manifest digest update.\n- A copied source body loses required anchors, even if the manifest digest is refreshed.\n- Runtime exercises stop checking named engine semantics and become result record-only assertions.\n- Negative-case files declare error codes that the semantic evaluator does not actually observe.\n- Result records include copied body text, raw operator transcripts, provider/browser state, account secrets, live market data, private runtime state, or source bodies.\n- Public prose expands fixture evidence into launch, public sharing, provider, source-file changes, live-system, or private-system-equivalence authority.\n\n###### Evidence Contract\n\nRun these commands from `microcosm-substrate/`:\n\nThe fixture command proves the public fixture path. The bundle command proves the exported bundle path. The focused test suite covers exact-copy source imports, source-sensitive behavior shifts, copied-body digest mismatch blocking, source-import-class perturbation, required-witness removal with a refreshed digest, semantic negative cases, bundle validation, and metadata-only command cards. The doctrine projection checks prove only that the bundle-backed generated instance remains fresh for the current corpus. Rank saturation, rerank, and projection inheritance remain downstream routing work; this paper module does not apply or claim those projection mutations.\n\n###### Reader Evidence Routing\n\nUse this order when auditing the module:\n1. Read `standards/std_microcosm_batch9_macro_engines_capsule.json` for the governing standard and scope boundaries.\n2. Read `src/microcosm_core/organs/batch9_macro_engines_capsule.py` for expected mechanisms, expected modules, required source anchors, negative-case semantics, and scope limit.\n3. Read `examples/batch9_macro_engines_capsule/exported_batch9_macro_engines_capsule_bundle/source_module_manifest.json` for copied-body authority.\n4. Run the fixture and bundle validators, then the focused tests.\n5. Treat result records as metadata-only evidence summaries, not as copied body storage or live-system proof.\n\n###### Prior Art Grounding\n\nThis bundle imports copied source engine bodies and exercises them over fixtures. It follows the characterization, or golden-master, testing tradition ( [Feathers, Working Effectively with Legacy Code](https://en.wikipedia.org/wiki/Characterization_test)), which pins existing behaviour with deterministic fixtures before trusting it. Microcosm borrows the pin-then-exercise shape; the result is fixture-bound import evidence, not lineage truth, human-approval authority, or market-level conclusions.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\n```text\nPYTHONPATH=src python3 -m pytest tests/test_batch9_macro_engines_capsule.py -q\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nThese are reader-verifiable evidence only and do not include launch operations, external model access, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the component ran over public synthetic inputs and produced the result records and projections described above, reproduced by the validation result records named on this page.\n\nIt may not claim more than its bundle scope limit allows: Fixture-bound public source-body import and deterministic exercise evidence only; no live lineage truth, human approval authority, real market/news truth, host-state truth, work log truth, external model access, source-file changes, public sharing, launch-scope decision, or private-system equivalence.\n\nGovernance & Compiler Mechanisms Bundle Checks thirteen copied governance and compiler routines against the code they were copied from. 5/5\n\nDoes This bundle imports the Set-10 governance, compiler, launch, finance, dependency, DAG, table, reference, and recent-change source mechanisms as source-open system. It exposes for inspection the exact source-module digest evidence, the source-faithful public refactor for public sharing-manifest selector checks, the deterministic exercises, and the planted negative cases without exposing non-public paths, copied body text in result records, live ledgers, or launch-scope decision.\n\nScope limit It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live ledger control, or source-file changes.\n\nRun\n\n```text\nmicrocosm batch10-governance-compilers-capsule run --input fixtures/first_wave/batch10_governance_compilers_capsule/input --out receipts/first_wave/batch10_governance_compilers_capsule --acceptance-out receipts/acceptance/first_wave/batch10_governance_compilers_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_governance_compilers_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 10 Governance And Compilers Bundle\n\nExplains component [Governance & Compiler Mechanisms Bundle](docs/components.html#component-batch10_governance_compilers_capsule) mechanism [validates public governance compilers bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-governance-compilers-capsule-validates-public-governance-compilers-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\n###### Purpose\n\nThis bundle answers one question: when the wider system claims that a governance gate, a compiler, or a launch check behaves correctly, can a cold reader confirm that claim from copied source and a re-run, rather than taking the claim on trust? It collects fourteen mechanisms that already exist in the main system, copies their source bodies into the public bundle, and re-runs a small, source-faithful port of each one against controlled inputs.\n\nThe mechanisms span the work they were drawn from: a mutation gate that reads the latest user message and blocks file writes when the intent is diagnostic; an observe/apply compiler that turns an artifact into an apply plan and refuses malformed input; a reviewer gauntlet that checks a public proof bundle from several reader personas; launch-blocker triage; a public sharing path-contract check; result record-reuse staleness; a no-lookahead finance horizon; a session dependency wave; claim-conflict detection; role-aware blocking in a task graph; and three frontend helpers for table shaping, reference grouping, and recent-change coalescing.\n\nWhat is unusual is the stance towards its own fixtures. The negative-case files on disk hold only a label and an expected error code. The bundle does not treat that error code as proof of anything. For each negative case it recomputes the outcome itself, in code, and compares the computed result against the expectation. A fixture that merely declares the right error code, without the ported logic actually producing it, is flagged rather than passed. The point is to stop a test from grading itself green by assertion.\n\n###### Route Card\n- Component id: `batch10_governance_compilers_capsule`\n- JSON bundle authority: `core/paper_module_capsules.json::paper_module.batch10_governance_compilers_capsule`\n- Accepted-component evidence class: `verified_macro_body_import`\n- Runtime source: `src/microcosm_core/organs/batch10_governance_compilers_capsule.py`\n- Fixture input: `fixtures/first_wave/batch10_governance_compilers_capsule/input`\n- Runtime bundle: `examples/batch10_governance_compilers_capsule/exported_batch10_governance_compilers_capsule_bundle`\n- Exact-copy authority: the bundle `source_module_manifest.json` plus copied source modules; refresh through `macro_projection_import_protocol`, not by hand.\n\nThis Microcosm component imports and exercises Set-10 source system for governed mutation, observe/apply compilation, public-proof review, launch blocker triage, public sharing path contracts, result record reuse, no-lookahead horizons, session-wave execution, claim conflict wait tax, role-aware DAG blocking, frontend data shaping, reference grouping, and recent-change coalescing.\n\nThe bundle carries exact source source snapshots where safe. `publication_manifest_selector_contract_verifier` is represented as a source-faithful public refactor because the source source contains a private home-path example. `weighted_lane_width_apportionment_solver` is recorded as a binding repair deferred to the Set-9 RootNavigator body, not as a fresh Set-10 import.\n\nIntegrity hardening: negative-case fixture files are labels and stable-code rows only. The result record's `exercise.integrity_matrix` is the verdict surface: each Set-10 mechanism records source relation, positive computed output, negative input shape, negative computed output, scope limit, and whether the result was computed by the bundle evaluator. A fixture-supplied `error_codes` row is never enough to prove refusal behavior.\n\n###### Shape\n\nThe source row is `core/paper_module_capsules.json::paper_modules[75:paper_module.batch10_governance_compilers_capsule]`; the generated instance is `paper_modules/batch10_governance_compilers_capsule.json`; and the runtime source locus is `src/microcosm_core/organs/batch10_governance_compilers_capsule.py`. The specific standard is `standards/std_microcosm_batch10_governance_compilers_capsule.json`, with Microcosm-wide coverage and entry boundaries governed by `std_microcosm`.\n\nSource refs\n\nJSON bundle source row `core/paper_module_capsules.json` `paper_module.batch10_governance_compilers_capsule` Generated JSON instance `paper_modules/batch10_governance_compilers_capsule.json` `paper_modules/batch10_governance_compilers_capsule.md` Standards std_microcosm `std_microcosm_batch10_governance_compilers_capsule` Runtime/source loci exercise 14 mechanism ports resolve source evidence per mechanism recompute each negative case `batch10_governance_compilers_capsule.py` `flag fixture_verdict_echo_risk` Fixtures and source bundle fixtures/first_wave/.../input (labels + expected codes) exported bundle: 13 copied source modules `source_module_manifest.json` Tests and result records `tests/test_batch10_governance_compilers_capsule.py` `receipts/runtime_shell/demo_project/organs/batch10_governance_compilers_capsule` Diagram source\n\n```text\nflowchart LR Bundle[\"JSON bundle source row core/paper_module_capsules.json paper_module.batch10_governance_compilers_capsule\"] Instance[\"Generated JSON instance paper_modules/batch10_governance_compilers_capsule.json\"] Markdown[\"Markdown reader projection paper_modules/batch10_governance_compilers_capsule.md\"] Standard[\"Standards std_microcosm_batch10_governance_compilers_capsule std_microcosm\"] Runtime[\"Runtime/source loci batch10_governance_compilers_capsule.py exercise 14 mechanism ports resolve source evidence per mechanism recompute each negative case flag fixture_verdict_echo_risk\"] Fixtures[\"Fixtures and source bundle fixtures/first_wave/.../input (labels + expected codes) exported bundle: 13 copied source modules source_module_manifest.json\"] Tests[\"Tests and result records tests/test_batch10_governance_compilers_capsule.py result records/runtime_shell/demo_project/components/batch10_governance_compilers_capsule\"] Projections[\"Generated navigation projections Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] Ceiling[\"Scope limit fixture-bound public source-open evidence only no live ledger truth, source-file changes, public sharing, launch, provider, private-system, benchmark, or market authority\"] Bundle -->|seeds| Instance Bundle -->|bounds prose| Markdown Bundle -->|names laws and source authority| Standard Bundle -->|cites code locus| Runtime Runtime -->|computes integrity matrix and result records| Tests Fixtures -->|public inputs, exact copies, declared refactor| Runtime Fixtures -->|manifest and source bundle validate| Tests Instance -->|derives edges| Projections Projections -->|navigation only| Markdown Tests -->|result record evidence remains below| Ceiling Standard -->|enforces public/private and launch boundary| Ceiling Markdown -->|must not outrank| Bundle\n```\n\nThe bundle makes the module actual by binding five reader questions to typed authority surfaces:\n- What is the source of record? The source record and generated JSON instance, not this Markdown file and not generated Mermaid or Atlas output.\n- What is being exercised? The accepted `batch10_governance_compilers_capsule` component, the `mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule` mechanism, and the `concept.import_projection_and_drift_control_bundle` concept edge named by the bundle.\n- Which runtime and source artifacts matter? The component module computes the integrity matrix, negative-case verdicts, source evidence, fixture run, bundle validation, result card, and `AUTHORITY_CEILING`; the exported bundle carries `source_module_manifest.json`, copied source modules, and the declared public refactor for the private-path-bearing public sharing manifest selector body.\n- Which result records and tests are binding? The focused test file verifies the fixture run, bundle validation, digest mismatch rejection, private-body omission, negative-case semantics, source-evidence classifications, source helper parity, and reviewer-gauntlet behavior; the result record directory under `receipts/runtime_shell/demo_project/organs/batch10_governance_compilers_capsule` holds the runtime shell validation result, board, and validation result record.\n- What is the honest ceiling? The module can claim fixture-bound public source-open import/refactor evidence, deterministic exercise evidence, integrity-matrix verdicts, metadata-only result records, and validation result records. It cannot claim live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, private root equivalence, neutral benchmark evidence, market advice, deployment posture, or whole-system correctness.\n\n###### Bundle-Bound Reader Shape\n\nThe JSON bundle binds this paper module to one accepted subject: the `batch10_governance_compilers_capsule` component. The executable proof locus is `src/microcosm_core/organs/batch10_governance_compilers_capsule.py`, especially `_build_integrity_matrix`, `_source_evidence`, `_evaluate`, `run`, `run_batch10_governance_compilers_bundle`, `result_card`, `EXPECTED_MECHANISMS`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n\nThe bundle keeps the mechanism and concept layer intentionally narrow: it names the resolving governance/compiler mechanism subject and the `concept.import_projection_and_drift_control_bundle` concept, while additional concept or mechanism edges stay residual until resolving Microcosm rows exist. Its law edges are bounded to content-addressed reuse, provenance, freshness, and projection-below-source rules: `P-2`, `P-5`, `P-9`, `P-15`, `AX-4`, `AX-8`, `AX-10`, and `AX-11`. Its sibling paper-module dependencies are `macro_projection_import_protocol`, `batch10_live_source_drift_capsule`, and `batch9_macro_engines_capsule`.\n\nIf a projection disagrees with the bundle or refreshed source-open bundle, refresh the projection; do not edit generated output by hand.\n\n###### How it works\n\nThe run takes a public input directory, validates the source-module manifest, and exercises each of the fourteen mechanisms against inputs the evaluator constructs itself. `_build_integrity_matrix` then writes one row per mechanism. Each row records the source evidence for that mechanism, the positive computed output, the attached negative cases with their computed outputs, the scope limit, and a `current_action` of keep, harden, or block.\n\nSource evidence is resolved per mechanism by `_source_evidence`. A mechanism's named source reference is looked up in the manifest. If the body was copied exactly, the row carries the copy's digest status and anchor-match count. If the body could not be copied verbatim, the row instead names a declared source-faithful public refactor and records the original source digest. Two mechanisms are honest about not being plain copies. `publication_manifest_selector_contract_verifier` is a public refactor, because the source source carried a private home-path example that cannot ship. `weighted_lane_width_apportionment_binding_repair` is recorded as an under-bound repair deferred to the Set-9 RootNavigator body, so it is held as a block rather than presented as a fresh Set-10 import.\n\nThe negative cases are handled the same way. For each case, `_compute_negative_case_probe` runs the ported logic over the case's declared input and reads the result at a named path. For example, the mutation case feeds a diagnostic message and confirms `prohibit_file_writes` is true; the finance case feeds an unparseable horizon and confirms it is rejected; the public sharing case feeds a non-public paths against a hard-exclude rule and confirms it is caught. A row counts as proven only when the computed value matches the expectation. If any negative case lacks computed evidence, the summary raises `fixture_verdict_echo_risk`, and the run is blocked. The bundle also requires exactly thirteen copied source modules, so a thinned bundle fails rather than passes quietly.\n\n###### Prior Art Grounding\n\nThe component is grounded in policy-as-code, admission-control, and supply-chain assurance patterns: compile rules into deterministic checks, reject unsupported actions before they mutate state, and preserve provenance for the decision. Relevant anchors include:\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), which decouples policy decisions from enforcement and evaluates structured input against machine-readable rules.\n- Kubernetes [validating admission policies](https://kubernetes.io/docs/concepts/policy), which can block, warn, or audit non-compliant API requests before admission.\n- [SLSA](https://slsa.dev/spec/) and [OpenSSF Scorecard](https://openssf.org/scorecard/), which represent the broader software-supply-chain pattern of typed assurance levels, checks, and provenance.\n\nMicrocosm borrows the compiler/gate shape for governed mutation, public sharing path contracts, blocker triage, result record reuse, and claim-conflict accounting. The bundle remains fixture-bound evidence over copied or refactored source system; it is not live work log truth, source-file changes, publishing-scope decision, or investment-related actions.\n\n###### Reader Evidence Routing\n\nA cold reader should inspect the evidence in this order:\n1. Open the JSON source record to confirm source authority, subject ids, dependency ids, principle and axiom refs, code locus, Mermaid status, Atlas status, and the absence of unresolved selective relations.\n2. Run the focused component test to prove the public fixture still computes the integrity matrix and observes the required negative cases.\n3. Run the exported bundle validator when copied source digests, declared public refactors, metadata-only result records, or source-evidence rows are the question.\n4. Treat generated JSON, Mermaid, Atlas, and coverage as projection evidence only; if they drift, refresh them through the doctrine-lattice builder.\n5. Use the result record floor to verify source relations, positive and negative computed outputs, scope limits, and metadata-only result record payloads.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the governance/compiler integrity-matrix result record and sign-off JSON. The bundle command validates copied or source-faithful source system, source evidence, positive and negative exercise rows, metadata-only result records, and scope limit fields. The focused test verifies the mechanism matrix, negative floor, bundle validation, and scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not establish live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, neutral benchmark evidence, private-system equivalence, or investment-related actions.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the copied or declared governance/compiler source system produced source-evidence rows, computed positive and negative exercise rows, integrity-matrix verdicts, metadata-only result records, and validation result records with explicit scope limits.\n\nThis module may not claim live work log truth, live work log truth, source-file changes, publishing-scope decision, launch-scope decision, external model access, neutral benchmark evidence, private-system equivalence, investment-related actions, deployment posture, or whole-system correctness.\n\n###### Scope limit\n\nThis is not live work log truth, not live work log truth, not source-file changes, not public sharing or launch-scope decision, not external model access, not neutral benchmark evidence, not private-system equivalence, and not investment-related actions.\n\nThe useful claim is narrower: over the public fixtures and refreshed source-open bundle, the component shows that the Set-10 governance/compiler mechanisms have copied or declared source evidence, computed positive and negative exercise rows, and metadata-only result records with explicit scope limits.\n\nSaturation Engines Bundle Verifies twelve copied engine routines and computes each failure probe from inputs, not echoes. 5/5\n\nDoes This bundle imports twelve Set-11 saturation-engine mechanisms as source-open system. It exposes for inspection exact source-module digest evidence, source-faithful computed exercises, and computed negative-case probes without exposing non-public paths, copied body text in result records, live runtime state, source-file changes, public sharing, or launch-scope decision.\n\nScope limit It validates only the imported source body. It does not claim source authority, private-system equivalence, launch, public sharing, live runtime control, or source-file changes.\n\nRun\n\n```text\nmicrocosm batch11-saturation-engines-capsule run --input fixtures/first_wave/batch11_saturation_engines_capsule/input --out receipts/first_wave/batch11_saturation_engines_capsule --acceptance-out receipts/acceptance/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol), [Compliance Pipeline Bundle](docs/components.html#component-batch8_compliance_pipeline_capsule), [Navigation Hologram Route Plane](docs/components.html#component-navigation_hologram_route_plane), [Agent Route Observability Runtime](docs/components.html#component-agent_route_observability_runtime)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch11_saturation_engines_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 11 Saturation Engines Bundle\n\nExplains component [Saturation Engines Bundle](docs/components.html#component-batch11_saturation_engines_capsule) mechanism [validates public saturation engines bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch11-saturation-engines-capsule-validates-public-saturation-engines-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\n###### Purpose\n\n`batch11_saturation_engines_capsule` is a Microcosm component for the Set-11 saturation pass. It takes thirteen unrelated pieces of internal machinery, copies their source bodies into a public bundle, and re-runs each one against small synthetic fixtures so a reader can see the logic behave rather than take a claim on trust. The thirteen targets are deliberately mixed:\n- run affinity session scoring\n- calculator cluster insight derivation\n- std_python delta ratchet gating\n- exogenous navigation ladder grading\n- portability gate supersession rollup\n- shard browse context-priority sectioning\n- holographic research evidence selection\n- projection secret scanning\n- stockgrid flow multisource merge and unit normalization\n- source regime bucketing and z-score board construction\n- frontend navigation wayfinding\n- agent session diagnostic lenses\n- demo-take story coverage auditing\n\nThe single question the bundle answers is narrow: for each of these mechanisms, does the imported source actually compute the guard it claims to, on inputs designed to fail? It is a saturation pass because the targets share nothing except that pattern. They are a route ranker, a few financial-data normalisers, a navigation grader, a secret scanner, a graph wayfinder, and so on, swept up together so a reviewer can audit a broad slice of the codebase from one place.\n\nThe part worth noticing is how a negative case is treated. A fixture file named `..._stale_terminal_rejected` is only a label. The bundle never lets that label stand in for a result. It re-runs the real function on the fixture's own `probe_input`, computes whether the guard fired, and refuses to mark the case verified unless the mechanism's own exercise and the independent probe both agree. A fixture that asserts a failure it cannot demonstrate is flagged, not counted. That guard against self-congratulating fixtures is the reason the page exists.\n\n###### How it works\n\nThe run loop is the same for every target. The bundle first imports the copied source bundle and checks each module against the recorded source digest, line count, and a handful of required provenance anchors, so a drifted or partial copy is caught before any logic runs. It then exercises all thirteen mechanisms in a fixed order, and any reordering, blocked exercise, or missing module fails the run.\n\nEach mechanism's exercise feeds an integrity matrix row. A row pairs the mechanism's own computed output with an independently computed fixture probe and a binding disposition that records how the mechanism relates to the rest of the system: a new import, an already-bound gate the bundle is only re-checking, or an under-bound path it is extending. The two computed values must agree. The matrix marks a row's negative result verified only when the mechanism exercise and the fixture probe both come out true, and it sets `fixture_verdict_echo_risk` on any row where they do not. A non-zero echo-risk count is a finding that blocks the whole run.\n\nTwo short examples show what the probes actually compute. For run affinity, the probe builds a recommendation over candidate runs and confirms that a stale terminal run, even when made sticky and feed-rich, is not the one selected. For projection secret scanning, the probe runs the redaction patterns over a file carrying a synthetic key shape and a private ledger path and confirms both are blocked. The fixtures are synthetic and the key shapes are deliberate test strings, never live material.\n\nThe failure mode all of this guards against is the quiet pass: a fixture whose filename promises a rejection while the code underneath was never exercised, or was exercised and did not reject. By recomputing the guard from the fixture's own input and refusing to count a label it cannot reproduce, the bundle keeps the negative cases honest. The result records carry refs, digests, counts, and the computed verdicts; the copied bodies stay in the bundle's `source_modules` tree and are never inlined.\n\n###### Shape\n\nThis module's shape is a reader map over source-backed artifacts, not a new authority layer. The source record in `core/paper_module_capsules.json` is the source of record for subjects, code loci, doctrine refs, dependency edges, and projection status; `paper_modules/batch11_saturation_engines_capsule.json` is the governed JSON parity seed; this Markdown only narrates the proof boundary.\n\nSource refs\n\npaper_modules[76:paper_module.batch11_saturation_engines_bundle] source basis: source record `core/paper_module_capsules.json` governed JSON instance `paper_modules/batch11_saturation_engines_capsule.json` `markdown: legacy_import_projection_until_roundtrip_builder` active public runtime standard boundary: not live navigation/ledger/market/secret authority `standards/std_microcosm_batch11_saturation_engines_capsule.json` run, validate-bundle, result_card, scope_limit `src/microcosm_core/organs/batch11_saturation_engines_capsule.py` public mechanism and negative-case probes `fixtures/first_wave/batch11_saturation_engines_capsule/input` source_module_manifest.json: 12 copied/refactored public source modules `examples/batch11_saturation_engines_capsule/exported_batch11_saturation_engines_capsule_bundle` Tests `tests/test_batch11_saturation_engines_capsule.py` `scripts/build_doctrine_projection.py --check-paper-module-corpus` `scripts/build_doctrine_projection.py --check` status: pass; accepted: true; body_in_receipt: false `receipts/first_wave/batch11_saturation_engines_capsule/*` `receipts/acceptance/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json` Diagram source\n\n```text\nflowchart TD bundle[\"core/paper_module_capsules.json paper_modules[76:paper_module.batch11_saturation_engines_capsule] source basis: source record\"] instance[\"paper_modules/batch11_saturation_engines_capsule.json governed JSON instance markdown: legacy_import_projection_until_roundtrip_builder\"] standard[\"standards/std_microcosm_batch11_saturation_engines_capsule.json active public runtime standard boundary: not live navigation/ledger/market/secret authority\"] runtime[\"src/microcosm_core/components/batch11_saturation_engines_capsule.py run, validate-bundle, result_card, scope_limit\"] fixture[\"fixtures/first_wave/batch11_saturation_engines_capsule/input public mechanism and negative-case probes\"] bundle[\"examples/batch11_saturation_engines_capsule/exported_batch11_saturation_engines_capsule_bundle source_module_manifest.json: 12 copied/refactored public source modules\"] tests[\"tests/test_batch11_saturation_engines_capsule.py scripts/build_doctrine_projection.py --check-paper-module-corpus scripts/build_doctrine_projection.py --check\"] result records[\"result records/first_wave/batch11_saturation_engines_capsule/* result records/sign-off/first_wave/batch11_saturation_engines_capsule_fixture_acceptance.json status: pass; accepted: true; body_in_receipt: false\"] atlas[\"atlas/doctrine_lattice_graph.mmd and doctrine_lattice_projection.json Mermaid: available_from_capsule_edges Atlas: linked_from_capsule_edges\"] ceiling[\"Scope limit fixture-bound source-body import, source-faithful public ports, computed negative probes, metadata-only result records only\"] bundle -->|seeds subjects, dependencies, code locus, projection status| instance bundle -->|governed by| standard instance -->|cites resolved runtime/source locus| runtime standard -->|requires fixture and result record contract| fixture standard -->|requires copied/source-faithful public bundle| bundle runtime -->|exercises| fixture runtime -->|validates exact-copy/source-faithful evidence| bundle runtime -->|writes metadata-only result and validation result records| result records tests -->|checks runtime, bundle, corpus, projection freshness| result records instance -->|generated projection edge status| atlas result records -->|bounded evidence, not launch-scope decision| ceiling atlas -->|projection, source-linked only| ceiling\n```\n\nThe public/private and launch boundary stays narrow: the fixture inputs, source refs, digest rows, computed values, negative-probe labels, sign-off status, and metadata-only result records are evidence for the standalone `microcosm-substrate` bundle. They do not authorize live work log claims, navigation decisions, market or investment conclusions, complete secret detection, transcript or video authority, source-file changes, external model access, publishing-scope decision, launch-scope decision, private-system equivalence, generated-lattice source authority, or whole-system correctness.\n\n###### Reader Evidence Routing\n\nRead this module through the fixture, exported-bundle, focused-test, and generated-row surfaces. The fixture and bundle commands prove public source-body import discipline: exact copied-source digests, source-faithful public ports, computed negative-probe values, and metadata-only result cards. The structured source record proves that the paper module is bundle-backed and that Mermaid and Atlas availability come from bundle edges rather than prose.\n\nThe mixed Set-11 target list remains evidence routing, not an authority expansion. The reader should treat each target as a public fixture exercise inside the accepted saturation-engines component, not as live work log truth, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, publishing-scope decision, or launch-scope decision.\n\n###### Prior Art Grounding\n\nThe component borrows from overload management, backpressure, and observability practice: systems need explicit signals for saturation, queue pressure, freshness, and recoverability instead of relying on a single success/failure bit. Relevant anchors include:\n- Google's SRE guidance on [identifying and recovering from overload](https://sre.google/workbook/overload/), which treats overload as a measurable operational condition with mitigation strategies.\n- The Reactive Streams [backpressure specification](https://www.reactive-streams.org/), which standardizes asynchronous stream processing with non-blocking backpressure.\n- Google's SRE chapter on [monitoring distributed systems](https://sre.google/sre-book/monitoring-distributed-systems/), especially the distinction between symptoms and causes.\n\nMicrocosm borrows the saturation-signal and pressure-accounting pattern across its mixed Set-11 targets: route affinity, delta gates, shard browse priorities, evidence selection, secret scanning, market boards, wayfinding, and diagnostic lenses. The bundle computes public fixture verdicts; it is not live work log truth, complete secret detection, live market data, or launch-scope decision.\n\n###### Binding Dispositions\n\nSet-11 contained a mixed target set. The bundle records the distinction explicitly:\n- New or under-bound imports: run affinity, calculator insight, exogenous nav grading, shard browsing, holographic evidence selection, quant stockgrid, source regime board, frontend wayfinding, and session diagnostics.\n- Already-bound validations: projection secret scan and portability gate are covered by the engine-room public projection leak gate family; demo-take coverage is already represented by the Set-7 demo-take component. Set-11 validates the relevant scoring or gate behavior rather than claiming a standalone authority surface.\n- Partial existing system: the std_python ratchet path had existing assay coverage; the Set-11 bundle adds a bounded delta-regression witness.\n\n###### Shared Wiring Status\n\nThe component-owned system can validate independently. Shared registry, atlas, sign-off, Components, ARCHITECTURE, preflight, and package wiring must be serialized behind the live shared Microcosm binding owner before this component is promoted to whole-surface discoverability.\n\n###### Validation Result record Path\n\nNegative-case fixture files are inputs, not verdicts. Each file carries a public `probe_input`; the component computes the corresponding fixture probe and records `fixture_probe_input_digest`, `fixture_computed_value`, and `mechanism_computed_value` in the integrity matrix before counting a negative case as verified.\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the Set-11 saturation-engine result record and sign-off JSON. The bundle command validates copied source-source digests, source-faithful public port evidence, computed negative-probe evidence, and metadata-only cards. The focused test covers the runtime component, exported bundle shape, exact-copy imports, private body omission, stable negative cases, and tier-B mechanism output coverage. The corpus and projection checks prove only that the generated paper-module instance remains fresh for this bundle-backed Markdown state.\n\nThis result record path is public fixture evidence only. It does not establish live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, publishing-scope decision, launch-scope decision, external model access, or whole-system correctness.\n\n###### Scope boundary\n\n###### Boundary\n\nThis bundle is not live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, publishing-scope decision, or launch-scope decision. Result records expose only refs, digests, counts, computed verdicts, public negative-case probe digests, and omission result records; copied source source bodies remain under the public bundle's `source_modules` tree.\n\n###### Scope limit\n\nThis bundle is fixture-bound public source-body import, source-faithful public port evidence, computed negative-probe evidence, and metadata-only result record evidence only. It does not establish live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, source-file changes, publishing-scope decision, launch-scope decision, external model access, private-system equivalence, or whole-system correctness.\n\n###### Scope limit\n\nThose result records do not prove live work log truth, navigation authority, complete secret detection, live market data, investment-related actions, raw transcript authority, video capture, external model access, source-file changes, publishing-scope decision, launch-scope decision, private-system equivalence, or whole-system correctness.\n\nTool Server Pressure Inventory Flags detached helper processes and launch pressure from synthetic rows, not live hosts. 5/5\n\nDoes This component imports the source helper-process pressure inventory pattern as a public-safe, read-only validator. Over synthetic ps-shaped process rows it surfaces detached helper candidates, active-owner descendants, keep runtimes, and owner-launch pressure groups without reading live host processes or exposing command bodies.\n\nScope limit validates declared public helper-process pressure inventory contract only; no live process reads, process signalling, host mutation, launch-scope decision, external model access, non-public data equivalence, or whole-system correctness\n\nRun\n\n```text\nmicrocosm tool-server-pressure-inventory run --input fixtures/first_wave/tool_server_pressure_inventory/input --out receipts/first_wave/tool_server_pressure_inventory --acceptance-out receipts/acceptance/first_wave/tool_server_pressure_inventory_fixture_acceptance.json\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/tool_server_pressure_inventory.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Tool Server Pressure Inventory\n\nExplains component [Tool Server Pressure Inventory](docs/components.html#component-tool_server_pressure_inventory) mechanism [validates public tool server pressure inventory](docs/rules-and-ideas.html#lattice-mechanism-mechanism-tool-server-pressure-inventory-validates-public-tool-server-pressure-inventory) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Possession is not permission](docs/doctrine.html#dcard-p-4)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n\nAbides by axioms\n- [Authority by derivation, not possession](docs/doctrine.html#dcard-ax-3)\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n\n`tool_server_pressure_inventory` is the public read-only import of the source helper-process pressure inventory pattern from `tools/meta/control/orphan_reaper.py`. It validates the classifier without exposing live host state: fixtures inject a synthetic ps-shaped process table, synthetic helper-kind policy rows, and a synthetic owner-status taxonomy.\n\nThe accepted component keeps the load-bearing mechanism:\n- parse helper processes from ps-shaped rows\n- classify helper kind and owner status\n- distinguish detached orphan candidates from active-owner descendants\n- emit launch requests for over-budget active owners\n- keep all rows digest-only through `command_hash`\n\nThe exported bundle carries a source module manifest plus a source-faithful refactor body under `source_modules/tools/meta/control/`. That manifest records the source source ref, target digest, source digest, relation, material class, and required anchors. Result records carry refs, hashes, counts, and verdicts only; they do not inline the copied/refactored body.\n\nThe component rejects seven boundary failures:\n- active-owner descendants marked as safe-close candidates\n- unknown-owner processes marked as safe-close candidates\n- detached processes younger than the minimum age marked safe-close\n- process-signal results on the public surface\n- live command bodies instead of digest-only rows\n- absolute host paths\n- active-owner launch requests that overclaim kill or termination\n\n###### Purpose\n\nLong-running agent sessions leave helper processes behind: MCP servers, dev servers, keepalives. Over time these accumulate and the host slows down. The obvious fix is a reaper that walks the process table and kills stale helpers, and the source tool this component is ported from does exactly that. But a reaper is dangerous. The hard case is telling a genuinely abandoned process apart from a helper that a live session is still using. Kill the wrong one and you break the work in flight.\n\nThis component answers a single question: given a process table, which helper processes are safe to close, and which must be left alone because a live owner still depends on them? It does so by reconstructing each process's owner chain. A helper whose parent is `launchd` (`ppid == 1`) has been detached from any session and is a candidate. A helper that still traces back through a live agent session is not. The decision is deliberately narrow: a process is a safe-close candidate only when it is detached, its kind is on an allowlist, and it has been idle past a minimum age. Everything else routes to \"needs an owner check\" or \"keep\".\n\nWhat is unusual is the second half of the design. When an active owner is over its helper budget, the component does not propose a kill. It emits a launch *request*: a row that asks the owning session to launch or reuse its own lease. The inventory is explicitly not a kill list. The central invariant, enforced by an audit pass over the component's own output, is that an active-owner descendant can never become a safe-close candidate.\n\nThe public version keeps that classifier and that invariant but removes every actuator. There is no `os.kill`, no signal, no live `ps` call. Input is synthetic process text from a fixture, rows carry a `command_hash` rather than a command line, and a redaction guard rejects any fixture that smuggles an absolute path, a live command body, or a process-signal claim onto the public surface. The result is the safety reasoning of a reaper presented as a read-only validator, with the part that could actually harm a host left out.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart LR Fixture[\"Synthetic pressure fixture process_table, pressure_policy, owner_classes\"] Classifier[\"Classify helper kind, walk owner chain (up to 8 hops), hash command to command_hash\"] Owner{\"Owner status?\"} Detached[\"Detached orphan ppid == 1\"] Keep[\"Active owner or keep runtime\"] SafeClose[\"candidate_safe_close only if allowlisted and age >= min\"] Check[\"requires_owner_check or keep\"] launch[\"Over-budget owner: launch REQUEST, never a kill\"] Negative[\"Boundary failures unsafe safe-close, command leak, process signal, absolute path, launch overclaim\"] Source[\"Source manifest public refactor digest + anchors\"] Result records[\"metadata-only result records result, board, validation, fixture sign-off\"] Fixture --> Classifier Classifier --> Owner Owner --> Detached Owner --> Keep Detached --> SafeClose Detached --> Check Keep --> Check Keep --> launch Classifier --> Negative SafeClose --> Result records Check --> Result records launch --> Result records Negative --> Result records Source --> Result records\n```\n\n###### Technical Mechanism\n\nThe runtime mechanism is an actuatorless port of the read-only pressure path in `tools/meta/control/orphan_reaper.py`. The component receives injected synthetic `ps_text` plus `pressure_policy.json` and `owner_classes.json`; it never shells out to `ps`, imports process-control modules, or sends signals. `_parse_process_rows` normalizes process rows, `_process_kind` maps command tokens to helper kinds, and `_owner_status_for_process` walks parent links up to eight hops to separate `launchd_detached` helpers from active owner chains and keep runtimes.\n\nThe decision law is deliberately narrow. `_inventory_owner_and_decision` emits `candidate_safe_close` only when a helper is detached (`ppid == 1`), its kind is allowlisted, and its age exceeds the configured threshold. Active-owner chains, unknown parents, young detached helpers, and keep runtimes route to `requires_owner_check` or `keep`. Over-budget active-owner groups are summarized by `_active_owner_pressure_groups`, but the emitted `helper_owner_release_request_v1` can only ask the owner to launch the helper; it cannot claim that Microcosm killed, terminated, or safely closed a process.\n\nThe source-open body floor and the public result records enforce the same membrane. `_source_module_manifest_result` verifies the exported `orphan_reaper_pressure_inventory_public_refactor` body, its `source_faithful_public_refactor` relation, target digest, and required anchors. `_redaction_findings` rejects command previews, absolute host paths, and process-signal claims before result record writing. The result is a pressure classifier with executable evidence and a hard no-actuator boundary, not a live host cleanup tool.\n\n###### Reader Evidence Routing\n\nRead the positive fixture as pressure-inventory evidence, not host process control. The fixture supplies `process_table.json`, `pressure_policy.json`, and `owner_classes.json`; the component classifies helper kind, owner status, detached safe-close eligibility, active-owner descendants, keep runtimes, and over-budget active-owner groups. Active-owner pressure becomes a launch request row, not a kill, terminate, or signal action.\n\nRead the negative cases as the scope limit. The required failures are `active_owner_kill_candidate.json`, `unknown_owner_kill.json`, `premature_safe_close.json`, `process_signal_sent.json`, `command_preview_leak.json`, `absolute_path_leak.json`, and `owner_release_overclaim.json`. They prove the public surface rejects unsafe safe-close candidates, live command bodies, absolute host paths, process-signal claims, and launch-overclaim language.\n\nRead source-open evidence through the source module manifest. The exported bundle includes one copied public refactor body at `examples/tool_server_pressure_inventory/exported_tool_server_pressure_inventory_bundle/source_modules/tools/meta/control/orphan_reaper_pressure_inventory.py`. The manifest binds source and target digests, declares `source_faithful_public_refactor`, requires anchors such as `build_tool_server_pressure_inventory`, `build_pressure_hygiene_relief_receipt`, `no_process_signal_sent`, and `request_owner_release`, and keeps `body_in_receipt` and `body_text_in_receipt` false.\n\n###### Named Proof Consumers\n- Runtime fixture consumer: `microcosm_core.organs.tool_server_pressure_inventory run` consumes the synthetic pressure fixture and writes the result, board, validation result record, and sign-off result record.\n- Source-body consumer: `microcosm_core.organs.tool_server_pressure_inventory run-pressure-bundle` consumes the exported source-module bundle and blocks on missing manifests, target-ref mismatch, digest mismatch, unsafe body classes, or redaction hits.\n- Focused pytest consumer: `tests/test_tool_server_pressure_inventory.py` asserts every expected negative case, verifies that active-owner descendants are never safe-close candidates, checks owner-launch requests instead of kill actions, scans the component and public refactor AST for process-control imports or `.kill(...)`, validates target-ref/digest parity, and checks compact card omission result records.\n- Scope limit consumer: the standard `standards/std_microcosm_tool_server_pressure_inventory.json` and the scope limit in the component require `process_signal_authority`, `live_process_table_read_authorized`, `host_mutation_authorized`, `release_authorized`, `provider_calls_authorized`, and `whole_system_correctness_claim` to remain false.\n\n###### Prior Art Grounding\n\nThis component draws on process-inventory, tool-server, and owner-reference patterns. `psutil.process_iter()` is a common API for iterating over process metadata without shelling out to ad hoc `ps` parsing. Kubernetes garbage collection uses owner references to distinguish objects that may be collected from objects still owned by live controllers. The Model Context Protocol's tool-server model gives the local \"server exposes callable tools\" shape. The Microcosm version keeps the result deliberately weaker: synthetic rows are classified for pressure and safe-close eligibility, but the component does not read live host state or send signals.\n\nPrior-art anchors:\n- psutil process iteration: https://psutil.readthedocs.io/en/latest/#psutil.process_iter\n- Kubernetes owner-reference garbage collection: https://kubernetes.io/docs/concepts/architecture/garbage-collection/\n- Model Context Protocol tool servers: https://modelcontextprotocol.io/docs/concepts/tools\n\nScope limit: this is projection and validation only. It does not read the live process table, signal processes, mutate host state, include launch operations, use external model services, export private account or browser state, or prove whole-system correctness.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, validate with result records under `/tmp`:\n\nPassing result records prove synthetic inventory classification and source-manifest shape only; they do not read live host process state, send process signals, mutate host state, authorize cleanup, use external model services, or certify launch-scope decision. A diagram view and an atlas entry are generated for this module from the same source row.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module can claim that synthetic process-table fixtures, owner-status policy rows, digest-only command rows, boundary-failure cases, source manifest evidence, and metadata-only result records validate a public tool-server pressure classifier. It cannot claim live host inspection, process signaling, safe cleanup authority, host-state mutation, provider authority, launch-scope decision, private account or session export, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe generated row binds this module to mechanism `mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory`, concept `concept.import_projection_and_drift_control_bundle`, principles `P-2`, `P-4`, `P-6`, and `P-9`, axioms `AX-3`, `AX-5`, `AX-7`, and `AX-8`, and the runtime code locus `src/microcosm_core/organs/tool_server_pressure_inventory.py`. Those edges make the module a Microcosm import-and-validation proof: source-open digest evidence is allowed, while private host state, process control, provider authority, launch-scope decision, and whole-system correctness stay outside the claim.\n\nThe dependency edges to `mission_transaction_work_spine`, `provider_context_recipe_budget`, and `world_model_projection_drift_control_room` define the reader route. This module can explain how a helper-pressure row becomes a metadata-only result record and an owner-launch request, but it must borrow mission-landing, provider-budget, and projection-drift boundaries from those sibling modules before any broader operational or launch claim is made.\n\nCompliance Pipeline Bundle Confirms six copied compliance source files carry their functions; runs one helper on sample text. 3/5\n\nDoes This component imports the compliance adapter registry, compliance coverage and baseline scanners, Microcosm compliance adapter, bounded compliance-ledger builder, and observe pipeline stages as public runnable system. Running it shows how registered compliance adapters, bounded no-write checks, baseline companion scans, digest normalization, observe-plan helper selection, and dispatch/process boundaries fit together without refreshing the live ledger or dispatching providers.\n\nScope limit validates declared public Set 8 compliance pipeline bundle contract only; no full compliance-ledger freshness, external model access, model dispatch, source-file changes, source note mutation, launch, public sharing, non-public data equivalence, or whole-system correctness\n\nRun\n\n```text\nmicrocosm batch8-compliance-pipeline-capsule validate-bundle --input examples/batch8_compliance_pipeline_capsule/exported_batch8_compliance_pipeline_capsule_bundle --out /tmp/microcosm-batch8-compliance-pipeline-capsule\n```\n\nEvidence Computed projection evidence 3/5 Source-faithful refactor\n\nLinks to [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol), [Saturation Engines Bundle](docs/components.html#component-batch11_saturation_engines_capsule), [Navigation Hologram Route Plane](docs/components.html#component-navigation_hologram_route_plane), [Agent Route Observability Runtime](docs/components.html#component-agent_route_observability_runtime)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch8_compliance_pipeline_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 8 Compliance Pipeline Bundle\n\nExplains component [Compliance Pipeline Bundle](docs/components.html#component-batch8_compliance_pipeline_capsule) mechanism [validates public compliance pipeline bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch8-compliance-pipeline-capsule-validates-public-compliance-pipeline-capsule) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Apply the same floor to meta artifacts](docs/doctrine.html#dcard-p-13)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\n`batch8_compliance_pipeline_capsule` copies two source subsystems into Microcosm as source bodies and then exercises them. The first is the compliance scanner registry and its bounded ledger builder. The second is the six-stage observe pipeline that turns a source note into a synthesis seed. The component runs six engines over the copied bodies and writes metadata-only result records.\n\n###### Purpose\n\nMost of the bundle components in this set are shape linters: they grep the copied source for expected tokens and pass when the tokens are present. This one goes further. Four of its six engines run the copied bodies on synthetic inputs, importing the pipeline and scanner helpers directly or driving the ledger builder as a subprocess, so the result record records observed behaviour rather than mere presence. The question it answers is narrow and testable: when these two subsystems are imported as copied bodies, do they still behave as their source contracts say, without touching the live ledger or dispatching any work?\n\nThe behaviour worth singling out is digest preservation. The pipeline compresses a long source note down to a short digest before deciding what to inspect next. If that compression silently drops an instruction, the agent downstream loses it. The component feeds the real `digest_raw_seed` an eighty-line block of low-signal text with one directive line buried inside, then checks the directive survives the compression. The matching negative case removes the directive marker from the copied source and confirms the directive is then lost. That pairing is what the page is really about: a compression step that is asserted to keep the one line that matters, with a test that fails when it does not.\n\nThe standing limit is just as deliberate. The bounded compliance check runs the ledger builder in `--check --report` mode, which reads and reports but never writes the ledger. The pipeline engines stop before any bridge or external model access. The bundle is evidence that the imported mechanics work on a sample, not a claim that the full compliance ledger is fresh or that every branch is covered.\n\n###### Role\n\nThis module imports the source compliance scanner registry, the bounded compliance ledger builder, and the observe-loop pipeline stages into Microcosm as copied source bodies with a runnable component.\n\n###### Imported system\n- `system/lib/compliance/__init__.py`\n- `system/lib/compliance/compliance_coverage_adapter.py`\n- `system/lib/compliance/standard_baseline_adapter.py`\n- `system/lib/compliance/microcosm_adapter.py`\n- `tools/meta/factory/build_compliance_ledger.py`\n- `system/lib/pipeline/stage_extract.py`\n- `system/lib/pipeline/stage_select.py`\n- `system/lib/pipeline/stage_emit.py`\n- `system/lib/pipeline/stage_compile.py`\n- `system/lib/pipeline/stage_execute.py`\n- `system/lib/pipeline/stage_process.py`\n\n###### What the engines check\n\nThe component runs six engines and passes only if all six pass and every required source body is present.\n- `compliance_registry_runtime_witness` confirms the copied registry exposes the adapter table, the domain and baseline standard-id sets, and a `scan_all` entry point, that the coverage adapter carries its self-audit fields, and that the ledger builder carries its bounded-check command. When the live registry is importable it also reads the adapter, domain, and baseline counts as a shape witness, never as a freshness claim.\n- `compliance_coverage_bounded_check` runs the ledger builder with `--check --report` for two named standards. The pass condition is strict: the check reports `ok`, `wrote_ledger` is false, there are no error findings, and a next-step ratchet command is present. The point is a check that reads and reports without writing. Stale ledger rows that were not selected stay outside the claim.\n- `baseline_companion_scanner_contract` runs the baseline scanner on a sample standard and checks the returned row is honest about its own shallowness: it must be marked a baseline-inventory row with no domain-specific adapter, so a bare file-exists check can never read as a real compliance pass.\n- `pipeline_digest_and_shard_normalization` exercises three pure helpers from the extract stage. It checks the buried directive survives digest compression, that an unknown shard status is normalised to `pending` while the original value is preserved as a variant, and that diverse-shard selection caps how many shards one group can contribute.\n- `pipeline_observe_compile_helpers` runs the compile-stage helpers on a small fixture and checks they pull the right known-file mentions from free text, order follow-up files, and lift probe questions from a plan while skipping synthesis and summary roles.\n- `pipeline_dispatch_process_boundary_contract` confirms the execute and process stages keep the dispatch boundary explicit. It checks the copied bodies carry the `observe_dispatch_skipped` and `observe_dispatch_started` markers and the result record-selection helper, so the page can state plainly that bridge dispatch stays disabled.\n\nEach engine carries its own scope limit in the result record. The six negative cases each remove one load-bearing token from a copied body and confirm the matching engine then reports `blocked`, so a pass means the contract was actually exercised rather than skipped.\n\n###### Shape\n\nThe authoritative source record is `core/paper_module_capsules.json::paper_modules[60:paper_module.batch8_compliance_pipeline_capsule]`. The generated JSON instance is `paper_modules/batch8_compliance_pipeline_capsule.json`, whose `source_refs` mark that source record as the source of record and this Markdown as `legacy_markdown_projection_not_source_authority`.\n\nSource refs\n\nDispatch and process boundary `observe_dispatch_skipped` Diagram source\n\n```text\nflowchart LR bundle[\"Copied source bundle 11 source bodies body_in_receipt: false\"] subgraph Compliance[\"Compliance subsystem (3 engines)\"] reg[\"Registry runtime witness adapter table, scan_all, coverage self-audit\"] bounded[\"Bounded ledger check --check --report reports ok, wrote_ledger: false\"] base[\"Baseline scanner contract row admits no domain adapter\"] end subgraph Pipeline[\"Observe pipeline (3 engines)\"] digest[\"Digest and shard helpers buried directive survives; status normalised, variant kept\"] compile[\"Compile helpers file mentions, follow-ups, probe questions\"] boundary[\"Dispatch and process boundary observe_dispatch_skipped\"] end neg[\"6 negative cases remove one token per body; matching engine reports blocked\"] result records[\"metadata-only result records result, board, validation\"] ceiling[\"Scope limit no ledger refresh, no provider/bridge dispatch, no source note or source-file changes, no public sharing or launch\"] bundle --> reg & bounded & base bundle --> digest & compile & boundary bundle --> neg reg & bounded & base --> result records digest & compile & boundary --> result records neg --> result records result records --> ceiling\n```\n\nThe shape is a bounded compliance and observe-pipeline witness. The bundle names the component subject `batch8_compliance_pipeline_capsule`, the mechanism subject `mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule`, the resolved runtime/source locus `src/microcosm_core/organs/batch8_compliance_pipeline_capsule.py`, and the dependency/concept/law edges.\n\nThe local standard, when read as `standards/std_microcosm_batch8_compliance_pipeline_capsule.json`, keeps the same boundary: public engine ids, stable negative-case codes, source refs, digests, line counts, required anchors, bounded synthetic outcomes, scope limits, and scope boundaries are public-safe; keys, account secrets, browser state, account or browser state, model-output data bodies, browser UI live-access material, raw operator transcripts, private artifact bodies, live observe dispatch state, and source note bodies are forbidden public inputs. Its validator contract expects eleven copied source source modules and six negative cases, with the runtime command routed through `microcosm_core.organs.batch8_compliance_pipeline_capsule`.\n\nThe runtime locus writes and validates result records through `run`, `run_batch8_compliance_pipeline_bundle`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`. The fixture path `fixtures/first_wave/batch8_compliance_pipeline_capsule/input` and the example bundle `examples/batch8_compliance_pipeline_capsule/exported_batch8_compliance_pipeline_capsule_bundle` carry the public exercise inputs, source-module manifest, and copied compliance/pipeline source bodies. The manifest currently records `source_import_class: copied_non_secret_macro_body`, `module_count: 11`, and `body_in_receipt: false`.\n\nValidation evidence is the focused test `tests/test_batch8_compliance_pipeline_capsule.py`, the first-wave result record set under `receipts/first_wave/batch8_compliance_pipeline_capsule/`, the sign-off result record result records/sign-off/first_wave/batch8_compliance_pipeline_capsule_fixture_acceptance.json, the runtime-shell exported validation result record under `receipts/runtime_shell/demo_project/organs/batch8_compliance_pipeline_capsule/`, and the verifier cycle result record `state/microcosm_verifier/receipts/20260604T0346Z_batch8_compliance_pipeline_capsule_cycle.json`. Those result records can show pass status, exact-copy digest/anchor checks, stable negative cases, no-write behavior, secret/body exclusion scans, and `body_in_receipt: false`; they do not become full compliance-ledger freshness, pipeline dispatch, external model access, source-file changes, public sharing, launch, or whole-system correctness authority.\n\n###### Reader Evidence Routing\n- Bundle route: read `core/paper_module_capsules.json::paper_modules[60]` before treating this Markdown as explanation.\n- Generated route: inspect `paper_modules/batch8_compliance_pipeline_capsule.json` for the current generated instance (relationship graph, diagram availability, and lattice position).\n- Bundle route: inspect `examples/batch8_compliance_pipeline_capsule/exported_batch8_compliance_pipeline_capsule_bundle` for copied compliance and pipeline source refs.\n- Runtime route: run `tests/test_batch8_compliance_pipeline_capsule.py` and the commands in ## Validation Result record Path for recomputation evidence.\n\n###### Prior Art Grounding\n\nThis bundle borrows from control-assessment, policy-as-code, provenance, and observability practice. Useful anchors include:\n- NIST [SP 800-53 Rev. 5](https://csrc.nist.gov/pubs/sp/800/53/r5/upd1/final), as a control-catalog pattern for naming, assessing, and reporting control posture.\n- [Open Policy Agent](https://www.openpolicyagent.org/docs/latest), as a general-purpose policy engine pattern for evaluating structured inputs without embedding every rule in the caller.\n- [SLSA provenance](https://slsa.dev/spec/v1.2/provenance), for treating artifact origin and process metadata as explicit attestations.\n- [OpenTelemetry](https://opentelemetry.io/docs/), for instrumentation patterns around pipeline stages, traces, metrics, and logs.\n\nMicrocosm borrows the scanner, policy, provenance, and pipeline-stage shape, but the component only validates bounded no-write behavior and pure helper mechanics. It stays with bounded registry/helper checks; broader compliance refresh, provider work, source-record changes, and complete branch certification are outside this fixture.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the bounded compliance/pipeline exercise result record and sign-off JSON. The bundle command validates copied compliance and pipeline source modules, manifest digests, observed negative cases, result record body scans, and public/private boundary checks. The focused test confirms the no-write runtime boundary, bundle validation, omission posture, and scope limit.\n\nThis result record path is reader-verifiable evidence only. It does not refresh the full compliance ledger, dispatch bridge or provider work, change source records, certify every compliance branch, authorize public sharing, or approve launch.\n\n###### Scope boundary\n\n###### Scope limit\n\nThe bundle validates registry shape, bounded no-write compliance checks, baseline scanner truth accounting, and pure pipeline helper behavior. It does not refresh the full compliance ledger, dispatch bridge/provider work, change source records, or certify every compliance and pipeline branch.\n\n###### Scope limit\n\nThis paper module can claim a compliance pipeline fixture with a diagram view generated for this module and a navigable atlas card. It can explain registry shape checks, bounded no-write compliance probes, scanner truth accounting, pure pipeline helper behavior, and metadata-only result records.\n\nIt cannot claim full compliance-ledger refresh, bridge or external model access, source-record changes, complete compliance branch certification, public sharing, launch, or whole-system correctness.\n\nLive Source Drift Bundle Compares four copied router and landing routines against current code to surface stale copies. 5/5\n\nDoes This component imports exact current public source bodies for the option-surface router, mission-transaction landing preflight, work landing controller, and work log controller. Running it inspects stale-versus-current digest repair, source anchors, and compile-only validation without reading private runtime state or granting live mutation authority.\n\nScope limit verified source body import only, not route authority, work log or work log mutation authority, mission-transaction execution, git staging or commit approval, source-file changes, non-public runtime export, launch, or public sharing\n\nRun\n\n```text\nmicrocosm batch10-live-source-drift-capsule run --input fixtures/first_wave/batch10_live_source_drift_capsule/input --out receipts/first_wave/batch10_live_source_drift_capsule --acceptance-out receipts/acceptance/first_wave/batch10_live_source_drift_capsule_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Governance & Compiler Mechanisms Bundle](docs/components.html#component-batch10_governance_compilers_capsule)\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch10_live_source_drift_capsule.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 10 Live Source Drift Bundle\n\nExplains component [Live Source Drift Bundle](docs/components.html#component-batch10_live_source_drift_capsule) mechanism [validates public live source drift bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch10-live-source-drift-capsule-validates-public-live-source-drift-capsule) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Content-addressed determinism](docs/doctrine.html#dcard-ax-4)\n- [Provenance propagation and non-interference](docs/doctrine.html#dcard-ax-8)\n- [Temporal validity and freshness contracts](docs/doctrine.html#dcard-ax-10)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n\n###### Purpose\n\n`batch10_live_source_drift_capsule` answers one narrow question: can Microcosm prove that selected internal control source copies match the current source source bytes, still compile without import execution, and still carry the scope limit that prevents copied code from becoming route or mutation authority?\n\nThe component imports exact current Python source bodies for four source internal control files:\n- `system/lib/standard_option_surface.py`\n- `system/lib/mission_transaction_landing_preflight.py`\n- `tools/meta/control/work_landing.py`\n- tools/meta/factory/work_ledger.py\n\nThe bundle exists because the source source moved ahead of older public source-module records. The interesting part is that it keeps the old, wrong digest visible on purpose. Each digest row carries three fingerprints that must agree before a copy passes: the copied public body, the manifest target it claims to match, and the current source source. In the same row it keeps the stale recorded digest and asserts it differs from the current one, so the proof of freshness and the evidence of the earlier drift sit side by side.\n\nThat makes the component a drift sentinel rather than a one-off check. It is built to go red when the public copies fall behind the source source again, and a red result is the signal to refresh the copies through the exact-copy source lane, not a defect in the page. Two cheap checks back the freshness claim without running anything dangerous: the copied Python is compiled but never imported, so a malformed body is caught without executing source code, and a small set of named anchors is matched in each body so a copy that compiles but has quietly lost a command or contract surface is still flagged.\n\n###### Shape\n\nDiagram source\n\n```text\nflowchart TD A[\"Probe manifest stale + current digests\"] --> C B[\"Copied internal control bodies and source manifest\"] --> C C[\"Digest refresh matrix copied = target = current, stale differs from current\"] --> F B --> D[\"Compile gate py_compile, no import\"] B --> E[\"Anchor matrix named command and contract surfaces present\"] D --> F E --> F F[\"Scope limit gate import is not route or mutation authority\"] --> G[\"metadata-only result record and card\"] C -. mismatch .-> H[\"Blocked: refresh copies via exact-copy source lane\"]\n```\n\n###### Prior Art Grounding\n\nThe component borrows from reproducible-build and supply-chain provenance practice: declared source inputs are fingerprinted, generated or copied artifacts are checked against those fingerprints, and result records avoid shipping unnecessary private state. Useful anchors include:\n- [Bazel hermeticity](https://bazel.build/concepts/hermeticity), especially the emphasis on source identity, declared inputs, and repeatable outputs.\n- [SLSA provenance](https://slsa.dev/spec/), which records how software artifacts relate to build inputs and supply-chain guarantees.\n\nMicrocosm applies that pattern to live source-copy drift: stale digest rows remain visible as regression fixtures, current public copies must match source digests byte-for-byte, and result records carry digest/anchor/negative-case evidence instead of private source bodies or runtime state.\n\n###### Reader Evidence Routing\n\nThe copied bodies are real system, not result record-only metadata. The evidence route is still metadata-only at result record time: result records keep digest rows, required anchors, negative-case outcomes, compile status, and scope limit evidence.\n\nThe engine ids are:\n- `live_source_drift_digest_refresh_matrix`: compares stale recorded digests, current source digests, copied target digests, and target digest status.\n- `copied_python_source_compile_gate`: compiles each copied Python target without importing or executing it.\n- `control_surface_anchor_matrix`: checks that each copied body still exposes expected command, route, landing, claim, or read-result record anchors.\n- `claim_ceiling_gate`: verifies the copied-body import excludes live route decisions, work log mutation, work log mutation, mission execution, git staging, source-file changes, launch, public sharing, external model access, or non-public runtime export.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThis component is also a drift sentinel. The fixture command writes digest-refresh, compile-gate, anchor-matrix, and scope limit result records, and it is allowed to exit blocked when copied public source no longer matches current source source. That blocked result is evidence for the exact-copy/source-refresh owner lane, not a paper-module corpus defect. Re-entry after a blocked result is to refresh the copied public source bodies and manifest digests through the source-open exact-copy lane, then rerun the fixture, bundle, and focused test.\n\nThe bundle command validates current copied source digests, source manifests, compile-without-import checks, stale-digest negative cases, metadata-only cards, and scope limit fields when the exact-copy refresh is current. The focused pytest command is therefore a green-gate after refresh: if the sentinel is blocked, that test file is expected to fail on pass-status or exact-body equality and should be reported with the same exact-copy refresh residual. When current, the focused test covers stale digest replay, compile bypass, private runtime state export, and live mutation-authority claims.\n\nThis result record path is reader-verifiable evidence only. It does not provide route authority, Work or work log mutation authority, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.\n\n###### Scope boundary\n\n###### Scope limit\n\nFixture-bound source-digest, anchor, compile, and scope limit evidence only; no route authority, Work or work log mutation, mission execution, git approval, source-file changes, launch, public sharing, external model access, or non-public runtime export.\n\n###### Scope limit\n\nThis module supports only the reader-verifiable claim that selected internal control source copies can be compared with current source digests, compiled without import execution, checked for required anchors, and guarded by stale-digest and scope limit negative cases when the exact-copy lane is current. A green result does not grant route authority, Work or work log mutation authority, mission execution, git approval, source-file changes, launch-scope decision, publishing-scope decision, external model access, non-public runtime export, or whole-system correctness.\n\nRelease Public Wording Gate Flags affirmative open-source and deployment-posture wording while allowing safe boundary notes. 5/5\n\nDoes This component imports the launch claim-language gate as public runnable system. Running it over small public sharing-manifest fixtures shows boundary-only warnings allowed while affirmative open-source and production-readiness wording is classified as active claim language and blocked by the assert-clear contract.\n\nScope limit This is lexical fixture evidence only; it is not launch-scope decision, not publishing-scope decision, not semantic NLP truth, not secret-scan coverage, and not whole-system correctness.\n\nRun\n\n```text\nmicrocosm batch12-release-claim-language-gate run-release-claim-language-gate-bundle --input examples/batch12_release_claim_language_gate/exported_batch12_release_claim_language_gate_bundle --out receipts/runtime_shell/demo_project/organs/batch12_release_claim_language_gate\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nsource intake provenance drift-control\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/batch12_release_claim_language_gate.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Set 12 launch claim-Language Gate\n\nExplains component [Release Public Wording Gate](docs/components.html#component-batch12_release_claim_language_gate) mechanism [validates public launch claim language gate](docs/rules-and-ideas.html#lattice-mechanism-mechanism-batch12-release-claim-language-gate-validates-public-release-claim-language-gate) Governed by principles\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Apply the same floor to meta artifacts](docs/doctrine.html#dcard-p-13)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n\nAbides by axioms\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n- [Executable grammar before doctrine authority](docs/doctrine.html#dcard-ax-11)\n- [Reflexive accountability / no privileged meta-layer](docs/doctrine.html#dcard-ax-12)\n\n###### Purpose\n\nPublic copy drifts towards over-claiming. A page that started as \"fixture-proven, not yet published\" gets edited over months until someone writes launch, licensing, or maturity language without noticing that nothing changed underneath. This component answers one question: does a piece of public copy claim more than the result records behind it can support, and would the launch gate catch it if it did?\n\nThe mechanism it wraps is a deterministic regex scan, not a language model. The copied gate body reads a public sharing manifest, walks every claim-bearing file it lists, and matches each line against fixed families of risky launch, licensing, maturity, and private launch-control wording. What makes the scan more than a grep is the classification step. The same family of wording is read three ways depending on context: a bare affirmative launch or maturity claim becomes an `active_claim_blocker`; the same wording inside a forbidden-example block or near a negation marker becomes `boundary_or_negative_context` and is allowed; and a phrase that has neither an affirmative verb nor a clear negation marker is parked in a `needs_review` queue rather than waved through.\n\nThat last branch is the interesting design choice. The gate fails closed. An ambiguous claim does not pass quietly; it lands in a no-go review state, and `main --assert-clear` exits non-zero whenever any active blocker or unresolved review item remains. The scan never rewrites a file, never authorises launch, and treats marketing copy as just another claim surface with an evidence ledger rather than a looser register of speech.\n\nThis paper module is the public, fixture-bound check that the wrapped gate behaves as described over the shipped fixtures. The component runs the copied gate over a safe fixture and an active fixture, then checks that boundary-context language clears, that bare launch language blocks, and that the assert-clear exit code is 2 when blockers remain. It is a check on the checker, held behind digest, result record, and scope limit boundaries.\n\n###### Mechanisms\n- `_classify_hit`\n- `build_gate`\n- `main --assert-clear`\n\n###### Shape\n- Runtime locus: `src/microcosm_core/organs/batch12_release_claim_language_gate.py`, especially `_blocked_exercise`, `_write_gate_fixture`, `_run_main_assert_clear`, `_evaluate`, `run`, `run_batch12_release_claim_language_gate_bundle`, `result_card`, `EXPECTED_NEGATIVE_CASES`, and `AUTHORITY_CEILING`.\n- Source source import: `tools/meta/dissemination/release_claim_language_gate.py`, copied into the exported bundle as one source body with digest equality and anchors `RISKY_PHRASES`, `NEGATIVE_CONTEXT_MARKERS`, `def _classify_hit`, and `def build_gate`.\n- Positive fixture shape: one safe boundary-context claim surface passes because limiting language keeps `does_not_authorize_release: true`.\n- Active fixture shape: two active claim blockers are reported for bare unsupported launch-language surfaces, while boundary/negative context remains counted separately.\n- Negative floor: `affirmative_open_source_production_ready_blocks` and `assert_clear_returns_exit_2`, with stable error codes `BATCH12_RELEASE_CLAIM_ACTIVE_BLOCKER` and `BATCH12_RELEASE_CLAIM_ASSERT_CLEAR_EXIT_2`.\n- Public result record posture: real-system bundle, source manifest pass, secret-exclusion scan pass, result record body scan pass, and a false `body_in_receipt` flag.\n\nSource refs\n\nsafe and active public copy surfaces `release_gate_fixture.json` exact copied source gate body `source_module_manifest.json` negation marker or forbidden example => allowed `boundary_or_negative_context` Diagram source\n\n```text\nflowchart TD Fixture[\"release_gate_fixture.json safe and active public copy surfaces\"] Manifest[\"source_module_manifest.json exact copied source gate body\"] Loader[\"load source module digest equality and required anchors\"] SafeRoot[\"safe fixture root _write_gate_fixture(active=false)\"] ActiveRoot[\"active fixture root _write_gate_fixture(active=true)\"] Scan[\"build_gate scan manifest files for RISKY_PHRASES\"] Classify{\"_classify_hit read each phrase in context\"} Boundary[\"boundary_or_negative_context negation marker or forbidden example => allowed\"] Active[\"active_claim_blocker affirmative line, no downgrade => status active_claim_blocked\"] Review[\"needs_review no clear marker either way => fail-closed no-go queue\"] Assert[\"main --assert-clear exit 2 when not public_copy_clean\"] Negatives[\"computed negative cases affirmative claim blocks assert-clear exits 2 private internal control leak blocks\"] Result records[\"metadata-only result records result, board, validation, sign-off\"] Ceiling[\"scope limit no launch, public sharing, NLP truth, secret completeness, or whole-system claim\"] Fixture --> SafeRoot Fixture --> ActiveRoot Manifest --> Loader Loader --> Scan SafeRoot --> Scan ActiveRoot --> Scan Scan --> Classify Classify -->|allowed| Boundary Classify -->|blocked| Active Classify -->|ambiguous| Review Active --> Assert Review --> Assert Boundary --> Negatives Active --> Negatives Assert --> Negatives Negatives --> Result records Result records --> Ceiling\n```\n\nThis component is the public copy gate for result record-backed evidence accounting. It does not ask whether a phrase sounds impressive; it asks whether the phrase is within the evidence class and scope limit that result records can support.\n\nEvidence strength is typed ordinal data, not vibes: ranks, real-system flags, and fail-closed defaults constrain how far public language may climb. Independent validators reconcile each component's declared class against result record-backed facts so over-claiming is blocked and stale under-claiming can be surfaced for review. Result record scanners may downgrade when bodies or account secret-equivalent payloads leak; they cannot upgrade merely because a narrative is strong.\n\nThe boundary-context classifier is allowed to pass negated or limiting language such as \"not a hosted product\" while blocking bare maturity claims when no launch-scope decision exists. Marketing copy is therefore treated as another claim surface with an accounting ledger, not as a looser mode of speech.\n\n###### Reader Evidence Routing\n- Start with `paper_modules/batch12_release_claim_language_gate.json` for source authority, then read this Markdown as the projection.\n- Open `standards/std_microcosm_batch12_release_claim_language_gate.json` for the required witnesses, negative floor, denied authority, result record contract, validator command, and runtime bundle command.\n- Open `core/fixture_manifests/batch12_release_claim_language_gate.fixture_manifest.json` for source-open body import count, source manifest refs, and durable result record refs.\n- Open `examples/batch12_release_claim_language_gate/exported_batch12_release_claim_language_gate_bundle/source_module_manifest.json` before inspecting copied source modules; result records carry refs, hashes, counts, verdicts, and omissions rather than copied body text.\n- Open `tests/test_batch12_release_claim_language_gate.py` for assertions on pass result records, digest mismatch rejection, fixture path safety, duplicate-key rejection, duplicate fixture names, exact source body import, and card body omission.\n- Run fixture and bundle routes from `microcosm-substrate/`. The CLI supports `--card`, but it does not expose a `--json` flag.\n- Use `scripts/build_doctrine_projection.py --check-paper-module-corpus` to verify this Markdown projection still satisfies the shared paper-module coverage contract.\n\n###### Prior Art Grounding\n\nThe component borrows a narrow pattern from advertising-substantiation and regulated-communication practice: public claims should stay within evidence actually held, and stronger language requires stronger support. This is prior art for the proof-consumer shape only. The module does not implement legal compliance, include launch operations, or decide whether public copy is fit to publish.\n\nExternal source result record, checked 2026-06-05:\n\nSource Exact URL Why it matters here Local boundary FTC advertising substantiation policy `https://www.ftc.gov/legal-library/browse/ftc-policy-statement-regarding-advertising-substantiation` Objective claims need a reasonable basis before dissemination, and express or implied support claims must match the support actually held. Microcosm maps this to result record-backed evidence classes and fail-closed launch-language blockers, not to legal sufficiency. FINRA Rule 2210 `https://www.finra.org/rules-guidance/rulebooks/finra-rules/2210` Public communications must be fair and balanced, give a sound factual basis, and avoid false, exaggerated, unwarranted, promissory, or misleading claims. The module only uses this as a prior-art analogue for keeping benefits, risks, and qualifications in the same local claim context. SEC investment adviser marketing guide `https://www.sec.gov/resources-small-businesses/small-business-compliance-guides/investment-adviser-marketing` The marketing rule guide summarizes general prohibitions on untrue or misleading material statements, unsupported material facts, unfair treatment of risks, and constrained performance or endorsement claims. The module's investment-advice scope boundary stays negative: a green result record is not adviser marketing compliance or investment-related actions. SEC marketing compliance FAQ `https://www.sec.gov/rules-regulations/staff-guidance/division-investment-management-frequently-asked-questions/marketing-compliance-frequently-asked-questions` Current staff FAQ entries still route extracted performance and characteristics through Rule 206(4)-1 general prohibitions. This is a currency/source-link result record for scope limit posture, not a new Microcosm capability or finance claim.\n\nMicrocosm adapts the substantiation pattern to launch and evidence language. Result record-backed classes, ordinal evidence strength, real-system flags, boundary-context exceptions, and fail-closed defaults constrain what public copy may say. The gate blocks unsupported elevation without turning itself into public launch permission, market-level conclusions, investment-related actions, legal review, or whole-system correctness.\n\n###### Validation Result record Path\n\nReader-verifiable commands, run from the `microcosm-substrate/` public root:\n\nThe fixture command writes the claim-language gate result record and sign-off JSON. The bundle command validates copied source system, source manifest digests, active-blocker and boundary-context classification, negative cases, metadata-only result records, and scope limit fields. The focused test checks pass result records, digest mismatch rejection, fixture path safety, duplicate-key and duplicate-fixture rejection, exact source body import, and card body omission.\n\nThis result record path is reader-verifiable evidence only. It excludes launch, public sharing, external model access, semantic NLP truth, complete secret detection, private-system equivalence, portability proof, market-level conclusions, investment-related actions, source-file changes, or whole-system correctness.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim fixture-bound evidence that the Set 12 public launch-language gate can classify result record-backed public copy against an scope limit. Positive claims stay within typed claim hits, evidence strength ranks, real-system flags, boundary-context classification, fail-closed defaults, active blockers, negative cases, copied source source-module refs and bodies, source-manifest pass status, metadata-only result record scan status, secret-exclusion scan status, and validation result records.\n\nThis module may not claim public launch permission, public sharing posture, hosted product status, external model dispatch authority, semantic NLP truth, complete secret detection, private-system equivalence, portability proof, market-level conclusions, investment-related actions, source editing authority, deployment maturity, formal-result correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Limitations\n\nThe gate is a lexical and fixture-driven proof consumer, not a launch oracle. It exercises copied `release_claim_language_gate.py` behavior over bounded public markdown fixtures, so it can detect active over-claiming phrases, boundary-context exceptions, digest drift, fixture path hazards, and stable negative-case regressions. It cannot prove that public copy is semantically complete, market-accurate, legally sufficient, safe for public sharing, or free of all secrets.\n\nThe exact-copy evidence floor is intentionally narrow. The source-module manifest proves one copied source body, required anchors, digest equality, and metadata-only result record posture; it excludes refreshing the source module, accepting private-system equivalence, mutating launch policy, or publishing copied bodies into result records. Any change to the copied source body, fixture corpus, negative cases, or scope limit belongs in the source, standard, and bundle lanes before this Markdown can expand its claim.\n\nThe focused test proves the runtime contract only for the shipped fixtures and bundle shape. Passing `test_batch12_release_claim_language_gate.py` means the public proof consumer still rejects digest mismatch, unsafe fixture names, duplicate fixture inputs, unstable negative labels, and result record body leakage in that bundle. It does not establish launch-scope decision for other documents, providers, frontends, markets, or future site projections.\n\n###### Scope limit\n\nThis is fixture-bound launch claim-language gate evidence. Its scope stops before public launch permission, public sharing posture, external model dispatch, semantic NLP truth, complete secret detection, private-system equivalence, portability proof, market-level conclusions, investment-related actions, source editing authority, deployment maturity, formal-result correctness beyond the listed witnesses, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThis paper module sits under `concept.import_projection_and_drift_control_bundle`: a copied source mechanism is imported into the public system, exercised through public fixtures, and held behind digest, result record, and projection boundaries. The bundle therefore does not treat Markdown prose as authority; it treats the JSON bundle, generated instance, mechanism row, standard, source manifest, and result records as the lattice that the prose must explain.\n\nThe governing principles `P-2`, `P-6`, `P-13`, and `P-15` map onto the component's operational checks. Typed evidence ranks and real-system flags keep public claims below the result record-backed ceiling; public/private boundary rules keep source bodies and private launch state out of result records; negative fixtures and fail-closed defaults prevent optimistic marketing language from bypassing the validator; and generated Mermaid/Atlas rows remain projections of bundle edges, not independent launch-scope decision.\n\nThe axiom boundary is the hard scope limit. `AX-5`, `AX-7`, `AX-11`, and `AX-12` require the gate to preserve source truth, avoid projection drift, route public copy through explicit authority checks, and block unsupported launch language. That is why the mechanism couples `_write_gate_fixture`, `_evaluate`, `run_batch12_release_claim_language_gate_bundle`, exact-copy source manifest validation, and metadata-only result records instead of asking a prose reviewer to decide whether a claim sounds acceptable.\n\nThe sibling dependencies define how to read the result. `public_reveal_walkthrough` supplies the public-copy setting, `proof_derived_governed_mutation_authorization` supplies the proof-before-mutation posture, and `batch8_validator_checker_capsule` supplies the validator/checker pattern. This module is the claim-language checker within that lattice, not the public launch decision itself.\n\nThe generated JSON row currently contributes 15 relationship edges: two `paper_module.explains.organ_or_mechanism` edges, one `paper_module.governed_by.concept` edge, four `paper_module.governed_by.principle` edges, four `paper_module.abides_by.axiom` edges, three sibling `paper_module.depends_on.paper_module` edges, and one resolved `paper_module.cites.code_locus` edge.\n\nAt this HEAD the generated instance reports zero unresolved selective relations. If future bundle edits introduce residuals, this Markdown may name them but must not invent concept ids or promote candidate doctrine.\n\n#### Source refs\n\nBuilt from public source refs, with each input path recorded for provenance.\n\nEach component has a stable public source path with commands, source links, and its supported scope.",
    "byte_count": 272587,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:area-continuity",
   "relative_href": "docs/area-continuity.html",
   "path": "docs/area-continuity.html",
   "title": "Work & continuity",
   "nav_group": "Areas",
   "nav_label": "Work & continuity",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [
     "mission_transaction_work_spine",
     "durable_agent_work_landing_replay",
     "bridge_phase_continuity_runtime",
     "concurrency_mission_control"
    ],
    "family_id": "work_landing_and_continuity"
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Area \u00b7 4 components\n\n### Work & continuity\n\nHow reversible work is recorded, landing decisions are made, and runs resume.\n\n#### Components\n\nMission Transaction Work Spine Runs the real work-ledger engine on a sanitised snapshot to re-derive each change's verdict. 4/5 Runs real tools\n\nDoes Replays a fixed set of pre-recorded work-landing situations against a toy repository and shows when a change would be allowed to \"land\" versus blocked: two claims competing on the same file, a claim built on a stale parent commit, a claim missing its owned path, a clean preflight check that wrongly says the work is already finished, and which commit lane (a narrow scoped commit vs a broad checkpoint) a dirty working tree is permitted to use. Its exported bundle also anchors the public work log seed-speed source imports for session heartbeat, mutation-check, active-claim snapshot, and path-collision handling. The resulting result records show exactly why each situation was permitted or refused, instead of an opaque \"it's done\" message.\n\nScope limit It validates work-landing, claim, checkpoint-lane, and dependency metadata projections over fixed fixtures only; it does not mutate live ledgers or git, certify real completion, authorize broad staging without operator intent, or prove any change is actually correct or complete.\n\nRun\n\n```text\nmicrocosm mission-transaction-work-spine run --input fixtures/first_wave/mission_transaction_work_spine/input --out receipts/first_wave/mission_transaction_work_spine\n```\n\nEvidence Bounded runtime computation evidence 4/5 Real runtime result\n\nLinks to [Bounded Autonomy Campaign Packet](docs/components.html#component-bounded_autonomy_campaign_packet), [Concurrency Mission Control](docs/components.html#component-concurrency_mission_control), [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol), [Tool Server Pressure Inventory](docs/components.html#component-tool_server_pressure_inventory), [Live Source Drift Bundle](docs/components.html#component-batch10_live_source_drift_capsule), [Proof / Control / Runtime Import Bundle](docs/components.html#component-batch4_proof_authority_runtime), [Tools-Tail Primitives Bundle](docs/components.html#component-batch8_tools_tail_primitives_capsule), [Agent Benchmark Integrity Anti Gaming Replay](docs/components.html#component-agent_benchmark_integrity_anti_gaming_replay), [Agentic Vulnerability Discovery Patch Proof Replay](docs/components.html#component-agentic_vulnerability_discovery_patch_proof_replay)\n\nagent-concurrency workflow-engineering continuity\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.mission_transaction_work_spine) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Mission Transaction Work Spine\n\nExplains component [Mission Transaction Work Spine](docs/components.html#component-mission_transaction_work_spine) mechanism [validates public mission transaction bundle](docs/rules-and-ideas.html#lattice-mechanism-mechanism-mission-transaction-work-spine-validates-public-mission-transaction-bundle) Governed by principles [Do not land effects without compensation](docs/doctrine.html#dcard-p-10) [Bind authority to transaction scope](docs/doctrine.html#dcard-p-16) concept [work landing and continuity controls as transaction-scoped coordination evidence](docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle) Abides by axiom [Compensable transactional effects](docs/doctrine.html#dcard-ax-9) Depends on paper module [Durable Agent Work-Landing Replay](docs/paper-modules.html#paper-module-durable-agent-work-landing-replay)\n\n###### Purpose\n\nThis component exists because the riskiest moment in agentic code work is the one that feels safest: the agent runs a few checks, sees no errors, and concludes that its work is finished and committed. Those are different facts. A clean preflight describes the state of the checks. It says nothing about whether a competing claim already owns the same path, whether the branch has moved under the agent, or whether the commit ever actually landed. The single question this module answers is narrow and concrete: what evidence has to hold before a unit of work is allowed to land, and is that evidence checkable rather than asserted?\n\nThe interesting design choice is that the module refuses to trust its own declared verdicts. Most fixtures pass when their inputs carry the right labels. It then perturbs the input one field at a time: a same-path claim conflict, a stale expected-parent hash, a checkpoint lane mutated into an unauthorised broad commit. A genuine check has to break under each of those and stay clear under harmless ones, such as a claim on an unrelated path. That asymmetry, not the bare pass, is the claim.\n\nThe result is deliberately bounded. A pass means the public fixture, the exported source bodies, and the negative cases together preserve the work-landing contract and that its discriminating tests still discriminate. It does not touch the live work log, the live work log, or Git, and it grants no authority to commit, checkpoint broadly, back up, or launch.\n\n###### Abstract\n\n`mission_transaction_work_spine` is the public Microcosm paper module for work-landing discipline. Its telos is to make the boundary between \"a check looked clean\" and \"work is actually allowed to land\" inspectable as source, fixture, result record, and test evidence rather than as chat confidence or status arithmetic.\n\nThe component validates a fixed public mission-transaction bundle: Work item rows, work log path claims, dependency unlocks, transaction plans, result record drains, completion projections, scoped mutation policy, checkpoint-lane decisions, copied internal control source modules, and metadata-only result records.\n\nThe result is intentionally narrow. A pass means the public fixture and exported bundle preserve the mission-transaction contract, its source-open body floor, and its negative cases. It does not mutate work log, work log, or Git; it does not certify arbitrary live completion; and it does not grant broad checkpoint, backup, launch, public sharing, provider, or whole-system authority.\n\n###### Problem\n\nAgentic code work fails most often at transaction boundaries, not at isolated syntax checks. Common false positives include:\n- treating a clean preflight as a landed commit;\n- ignoring a competing work log claim on the same path;\n- accepting a claim whose expected parent no longer matches the repository;\n- marking a downstream Work item ready without hard-dependency evidence;\n- reading a dirty tree as a blocker for scoped commits while allowing broad staging without explicit operator authorization;\n- writing result records that smuggle private ledger or provider bodies into a public artifact.\n\nThe module turns those failures into a deterministic replay. A cold reader can inspect which public rows are projections, which copied source bodies implement the checks, which negative cases must be observed, and which authority claims remain forbidden even when every validator passes.\n\n###### Shape\n\nSource refs\n\nJSON bundle `paper_module.mission_transaction_work_spine` Component runtime `mission_transaction_work_spine.py` Diagram source\n\n```text\nflowchart TD Bundle[\"JSON bundle paper_module.mission_transaction_work_spine\"] Fixture[\"First-wave fixture Work items, claims, deps, lanes, result records\"] Bundle[\"Exported bundle work log, work log, checkpoint, scoped commit, preflight source bodies\"] Snapshot[\"Real work log session snapshot active claims, heartbeat, source hash\"] Runtime[\"Component runtime mission_transaction_work_spine.py\"] R3[\"R3 replay verdict runtime-derived, not label-derived\"] Result records[\"metadata-only result records refs, hashes, counts, limits\"] Ceiling[\"Scope limit no live ledger, git, launch, or provider authority\"] Bundle --> Runtime Fixture --> Runtime Bundle --> Runtime Snapshot --> Runtime Runtime --> R3 Runtime --> Result records R3 --> Ceiling Result records --> Ceiling\n```\n\nThis Mermaid diagram is the reader flow. The generated lattice Mermaid remains `available_from_capsule_edges`, and the generated Atlas card remains `linked_from_capsule_edges`; both are derived from bundle and doctrine-lattice rows, not from this prose.\n\n###### Technical Mechanism\n\nThe component exposes two validator paths.\n\nThe first-wave fixture command validates the local replay fixture and writes the canonical result record set:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.mission_transaction_work_spine run \\\n  --input fixtures/first_wave/mission_transaction_work_spine/input \\\n  --out receipts/first_wave/mission_transaction_work_spine\n```\n\nThat path loads public fixture rows, validates dependency unlocks, claim preflight, scoped result record authority, private-marker rejection, preflight overclaim rejection, checkpoint lane policy, and the real active-claims snapshot.\n\nThe exported-bundle command validates source-open import and bundle replay:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.mission_transaction_work_spine \\\n  validate-mission-transaction-bundle \\\n  --input examples/mission_transaction_work_spine/exported_mission_transaction_bundle \\\n  --out receipts/first_wave/mission_transaction_work_spine\n```\n\nThat path checks copied work log, work log, checkpoint, scoped-commit, and mission-preflight source modules by manifest, digest, anchor strings, secret-exclusion scan, and `body_in_receipt: false`. It also requires the real work log snapshot in the mission bundle. Commit `da97bc6394` (Require real work log snapshot in mission bundle) landed the snapshot as a required bundle input; later source/test commits recomputed the snapshot verdict and bound the R3 claim to runtime evidence.\n\n###### Prior Art Grounding\n\nThis component is the mission-transaction member of Microcosm's local work-landing family. Its closest sibling is `durable_agent_work_landing_replay`, which checks recorded landing rows, validation-before-commit ordering, HEAD movement, blocker capture, and work log completion evidence without performing live Git work. `mission_transaction_work_spine` narrows that pattern to the transaction preflight and work log seed-speed membrane: same-path claim conflicts, expected-parent mismatches, checkpoint-lane selection, dependency unlocks, result record drains, and session finalization posture.\n\nIt also supplies a source-import anchor used by adjacent public components such as `concurrency_mission_control` and `macro_projection_import_protocol`. Those links are structural evidence routes, not runtime invocation or launch-scope decision. The prior-art claim is therefore local and source-bounded: this paper module inherits the work-landing accounting shape, then tests the particular mission-transaction and work log session-snapshot boundary.\n\n###### Data And Evidence Contract\n\nThe public evidence bundle is composed of source refs, hashes, rows, and result records. The source bodies live only in the exported bundle's `source_modules/` tree; result records carry refs, counts, hashes, verdicts, and ceilings, not private or live internal control bodies.\n- JSON bundle: `core/paper_module_capsules.json::paper_modules[20:paper_module.mission_transaction_work_spine]`\n- Runtime locus: `src/microcosm_core/organs/mission_transaction_work_spine.py`\n- Fixture input: `fixtures/first_wave/mission_transaction_work_spine/input`\n- Exported bundle: `examples/mission_transaction_work_spine/exported_mission_transaction_bundle`\n- Real snapshot: examples/mission_transaction_work_spine/exported_mission_transaction_bundle/real_work_ledger_active_claims_snapshot.json\n- Fixture manifest: `core/fixture_manifests/mission_transaction_work_spine.fixture_manifest.json`\n- Mechanism row: `mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle`\n- Standard: `standards/std_microcosm_mission_transaction_work_spine.json`\n\nThe result record floor includes preflight, dependency blocked, work landing attempt, claim preflight, scoped mutation, checkpoint lane, completion projection, dependency unlock scheduler, reconcile plan, and exported-bundle validation result records. The fields must preserve schema and component ids, validator id, command, status, observed and missing negative cases, error codes, scope boundary, secret-exclusion status, public work-landing status, body-import status, `body_in_receipt: false`, scope limit, and result record paths.\n\n###### Discriminating Tests\n\nThe positive claim is not \"the fixture passes.\" The positive claim is that the fixture accepts real-good evidence and rejects targeted perturbations.\n- Real-good case: the real active-claims snapshot passes with R3 public_safe_real_work_ledger_session_snapshot_replay, a state/work_ledger/active_claims_snapshot.json source ref, a matching source hash, a bound session heartbeat, and five source-session claims.\n- Same-path perturbation: adding a competing claim on the requested path blocks preflight through work_ledger_runtime.active_claim_collisions_for_paths and emits `SAME_PATH_CLAIM_CONFLICT`.\n- Parent perturbation: changing the expected parent for a real claim blocks with `EXPECTED_PARENT_MISMATCH`; changing it back to the current parent clears.\n- Disjoint perturbation: adding a claim on a disjoint path does not create a collision for the requested path, so the public preflight remains pass.\n- Landing-row perturbation: mutating the checkpoint lane into an unauthorized broad checkpoint blocks with the checkpoint-lane violation floor.\n- Private-body perturbation: a fixture row that carries live private work log body material is rejected, while source bodies copied into the public bundle remain outside result records.\n- Overclaim perturbation: a clean preflight cannot claim that work is already landed.\n- Dependency perturbations: dangling dependency refs and ready rows with incomplete hard dependencies remain blockers.\n\nFocused regression coverage lives in `tests/test_mission_transaction_work_spine.py`. The R3 tests assert that the verdict is re-derived from runtime evidence, expected labels are not sufficient, source hashes are bound, mutated or stale snapshots are rejected, clear perturbations move the verdict, and `body_in_receipt` is false.\n\n###### Reader Evidence Routing\n\nRead this module as an evidence-accounting paper, not as a live controller.\n1. Open the mechanism row and standard to see the required bundle fields: work items, claim table, dependency graph, transaction plan, result record drain, completion projection, scoped mutation policy, checkpoint lane policy, copied source imports, body import verification, scope boundary, and scope limit.\n2. Inspect the real active-claims snapshot to see the source ref, source hash, snapshot time, source session id, owned paths, checkpoint lane case, runtime session, and metadata-only posture.\n3. Read the focused tests to verify R3 is runtime-derived: same-path conflicts, stale parents, landing-row violations, disjoint paths, and equal-parent mutations are all discriminated.\n4. Treat generated JSON, generated Mermaid, Atlas, public-site docs, and result records as projections or validator outputs.\n\n###### Limits And Non-Claims\n\nThe module's useful claim is compact: public fixture rows, copied control source bodies, a real work log session snapshot replay, discriminating negative cases, metadata-only result records, and focused tests preserve the mission-transaction work spine at R3.\n\nIt may not claim live work log authority, live work log authority, live Git mutation, broad checkpoint authorization, private backup execution, current repository completion, source-file changes, provider behavior, browser UI state, launch-scope decision, publishing-scope decision, hosted-product readiness, or whole-system correctness.\n\n###### Validation Result record Path\n\nFor this Markdown-only paper-module update, use non-mutating checks from repo root:\n\n```text\n./repo-pytest tests/test_mission_transaction_work_spine.py \\\n  -q \\\n  --basetemp=/tmp/microcosm_mission_transaction_work_spine_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\nFor a source, bundle, or projection landing, run the owner lane from `microcosm-substrate`:\n\n```text\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check-paper-module-corpus\nPYTHONPATH=src python3 scripts/build_doctrine_projection.py --check\n```\n\nDo not run `--write` from this Markdown-only lane.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim that public fixture rows, copied control source bodies, a real work log session snapshot replay, discriminating negative cases, metadata-only result records, and focused tests preserve the mission-transaction work spine at R3. That is a replay and evidence-shape claim.\n\nThis module may not claim live work log authority, live work log authority, live Git mutation, broad checkpoint authorization, private backup execution, current repository completion, source-file changes, provider behavior, browser UI state, launch-scope decision, publishing-scope decision, hosted-product readiness, or whole-system correctness.\n\nDurable Agent Work Landing Replay Audits recorded work-claims so each cites files, validates before commit, and proves HEAD moved. 5/5\n\nDoes This checks recorded examples of an agent finishing a piece of work the careful way: each example must name the exact files it claims to have touched, show that validation was recorded before any commit was attempted, and only label itself \"committed\" if the example also records the repository's HEAD moving. It also checks that blockers and ledger completion were captured. The check shows whether each recorded work-claim carries the required evidence and ordering, rather than being an unbacked chat boast. It judges the recorded claims against the contract; it does not run Git or prove that any commit truly landed in a real repository.\n\nScope limit It validates only the declared public work-landing contract over recorded rows. It is evidence for fixture-local completion mechanics, not for live Git side effects, unrelated-path staging, non-public body export, service operation, or distribution clearance.\n\nRun\n\n```text\nmicrocosm durable-agent-work-landing-replay run-work-landing-bundle\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Agent Completion Faithfulness Audit](docs/components.html#component-agent_closeout_faithfulness_audit), [Source Projection Import Protocol](docs/components.html#component-macro_projection_import_protocol)\n\nworkflow-engineering continuity\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.durable_agent_work_landing_replay) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Durable Agent Work-Landing Replay\n\nExplains component [Durable Agent Work Landing Replay](docs/components.html#component-durable_agent_work_landing_replay) mechanism [validates public work landing replay contract](docs/rules-and-ideas.html#lattice-mechanism-mechanism-durable-agent-work-landing-replay-validates-public-work-landing-replay-contract) Governed by principles\n- [Do not land effects without compensation](docs/doctrine.html#dcard-p-10)\n- [Carry basis and provenance together](docs/doctrine.html#dcard-p-14)\n- [Keep projections below source authority](docs/doctrine.html#dcard-p-15)\n- [Bind authority to transaction scope](docs/doctrine.html#dcard-p-16)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n\nconcept [work landing and continuity controls as transaction-scoped coordination evidence](docs/rules-and-ideas.html#lattice-concept-concept-work-landing-and-continuity-control-bundle) Abides by axioms [Content-addressed determinism](docs/doctrine.html#dcard-ax-4) [Compensable transactional effects](docs/doctrine.html#dcard-ax-9)\n\nDurable agent work-landing replay is the public work-spine component for showing how Microcosm treats agent work as a transaction instead of a chat claim. It binds owned-path claims, owner-native validation, scoped commit attempts, protected Git-metadata blockers, work log capture, work log finalizers, and seed reentry into a source-available replay contract.\n\nThe component is useful to a cold agent because it turns a landing claim into an evidence checklist: a row is not \"landed\" unless claimed paths, validation refs, commit-attempt refs, HEAD-before/after evidence, blocker capture, and ledger completion all line up in the recorded replay. It validates the replay contract and the negative fixtures. It does not perform the live landing itself.\n\n###### Purpose\n\nThis component exists because an agent saying \"I committed the fix\" is cheap, and the claim is the part that tends to be wrong. The single question it answers is narrow: given a recorded landing attempt, does the evidence actually support the words used to describe it?\n\nThe approach worth noticing is that two ordinary-sounding rules are made into rejections rather than suggestions. A row that uses landed-commit language is rejected unless the recorded Git HEAD moved between before and after, so \"I landed it\" cannot stand on a HEAD that never advanced. A row on the commit path is rejected unless validation is recorded as preceding the commit attempt, so \"it passed\" cannot be back-filled after the fact. Those two checks, plus blocker capture for metadata-blocked rows and work log completion for every row, are what separate a transaction from a chat claim.\n\nThe replay is also source-backed rather than described from memory. The mechanics it checks rows against are not paraphrased; the actual source internal control files (work landing, mission preflight, scoped commit, the work log) are copied into the bundle by digest, so a reader can see which code the model was tested against. The component reads that evidence and rejects overclaims; it never runs Git, stages anything, or authorises a launch.\n\n###### Shape\n\nSource refs\n\nValidator `durable_agent_work_landing_replay validator` Diagram source\n\n```text\nflowchart LR Fixture[\"Public replay fixture claimed rows, validation refs, commit attempts, blocker rows\"] Source[\"Copied internal control source bodies work landing, preflight, scoped commit, work log\"] Validator[\"durable_agent_work_landing_replay validator\"] Mechanics[\"Replay mechanics claim before mutation, validate before commit, HEAD movement before landed language\"] Negative[\"Negative floor live Git authority, missing completion, uncaptured blocker, private leakage\"] Result record[\"Result records board, result, validation, sign-off; no live mutation authority\"] Fixture --> Validator Source --> Validator Validator --> Mechanics Validator --> Negative Mechanics --> Result record Negative --> Result record\n```\n\n###### Public Contract\n- The source pattern is `durable_agent_work_landing_replay_compound`.\n- The fixture lives at `fixtures/first_wave/durable_agent_work_landing_replay/input/`.\n- The runtime example lives at `examples/durable_agent_work_landing_replay/exported_work_landing_replay_bundle/`.\n- The validator is `microcosm_core.organs.durable_agent_work_landing_replay`.\n- The CLI command is `microcosm durable-agent-work-landing-replay run-work-landing-bundle`.\n- The governing standard is `standards/std_microcosm_durable_agent_work_landing_replay.json`.\n- The component model row is `core/organ_atlas.json#durable_agent_work_landing_replay`.\n- The sign-off row is `core/organ_registry.json#durable_agent_work_landing_replay`.\n\n###### Technical Mechanism\n\nThe replay fixture imports six source internal control bodies through `examples/durable_agent_work_landing_replay/exported_work_landing_replay_bundle/source_module_manifest.json`. Those bodies are copied into `source_modules/` with digest provenance instead of being summarized from memory:\n- `system/lib/workitem_runtime_entrypoint.py`\n- `system/lib/work_landing_status.py`\n- `tools/meta/control/work_landing.py`\n- `tools/meta/control/mission_transaction_preflight.py`\n- `tools/meta/control/scoped_commit.py`\n- tools/meta/factory/work_ledger.py\n\nThe validator checks the replay rows against those source-backed mechanics rather than accepting a prose landing claim. `validate_projection_protocol` requires source pattern refs, projection result record refs, and public runtime refs. `validate_landing_policy` requires the scoped-commit, broad-checkpoint, metadata-blocked patch-bundle, and hard-stop lanes, with broad checkpointing kept behind explicit operator authorization and launch-scope decision kept false. `validate_work_landing_runs` enforces claim-before-mutation evidence, validation before commit attempt, HEAD movement before landed language, blocker capture before metadata-blocked completion, dirty-tree boundary evidence, and work log finalizer evidence.\n\nThe source-open body floor is enforced separately by `validate_source_module_imports`. The manifest must declare `copied_non_secret_macro_body`, `body_in_receipt: false`, exact-copy source-to-target relations, allowed public source material classes, expected digests, and required anchors inside each copied source body. That check keeps the reader claim tied to actual source internal control files while result records carry only refs, digests, counts, and verdicts.\n\nThe result builder merges projection-protocol, landing-policy, work-run, source-module, source-open-body, and secret-exclusion checks into one metadata-only result record set. The board result record records three claimed-path rows, two validation-before-commit mechanics, one metadata-blocked row, one landed-commit row, nine observed negative cases for the first-wave fixture, and zero authority for live Git mutation or launch.\n\n###### Prior Art Grounding\n\nThis component is grounded in provenance and software supply-chain integrity patterns. The [W3C PROV](https://www.w3.org/TR/prov-overview/) family provides a general model for entities, activities, and agents involved in producing an artifact. [SLSA](https://slsa.dev/spec/) brings a similar concern to software builds: source, build process, provenance, and artifact integrity are tracked so consumers can reason about where an artifact came from and how it was produced.\n\nMicrocosm borrows that provenance posture for agent work landing: claimed paths, validation refs, commit attempts, HEAD-before/after evidence, blocker capture, Task/work log completion, and seed reentry are separate evidence fields. It does not perform a live Git landing or prove arbitrary commits outside the replay.\n\n###### Reader Evidence Routing\n\nRead the replay as an evidence-accounting component, not as a live landing controller. The board result record is the primary reader surface: it shows which claimed-path rows carried validation evidence, which rows were blocked by Git-metadata or dirty-tree constraints, and which rows had enough HEAD before/after evidence to use landed language.\n\nRead the source-module manifest as provenance evidence for the imported control plane, not as a permission slip to mutate those source files. The manifest binds the copied bodies by digest and line count so a cold agent can see which mechanics the replay model was checked against.\n\nRead negative cases as the authority floor. Rows that claim live Git mutation, broad checkpoint authority, missing work log completion, uncaptured blockers, launch-scope decision, or non-public paths/body export are supposed to fail. Passing those refusals is part of the positive claim.\n\n###### Evidence Result records\n- `receipts/first_wave/durable_agent_work_landing_replay/durable_agent_work_landing_replay_result.json`\n- `receipts/first_wave/durable_agent_work_landing_replay/durable_agent_work_landing_replay_board.json`\n- `receipts/first_wave/durable_agent_work_landing_replay/durable_agent_work_landing_replay_validation_receipt.json`\n- result records/sign-off/first_wave/durable_agent_work_landing_replay_fixture_acceptance.json\n\nRun the fixture result record refresh from `microcosm-substrate` with:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.durable_agent_work_landing_replay run --input fixtures/first_wave/durable_agent_work_landing_replay/input --out receipts/first_wave/durable_agent_work_landing_replay\n```\n\nRun the exported bundle validator without mutating durable result records with:\n\n```text\nPYTHONPATH=src python3 -m microcosm_core.organs.durable_agent_work_landing_replay run-work-landing-bundle --input examples/durable_agent_work_landing_replay/exported_work_landing_replay_bundle --out /tmp/durable-agent-work-landing-replay\n```\n\n###### Named Proof Consumers\n- First-wave runtime consumer: `microcosm_core.organs.durable_agent_work_landing_replay run` consumes the fixture input, writes result, board, validation, and optional sign-off result records, and observes the nine negative cases declared in `EXPECTED_NEGATIVE_CASES`.\n- Exported-bundle consumer: `microcosm_core.organs.durable_agent_work_landing_replay run-work-landing-bundle` consumes the exported bundle without durable result record mutation, validates the source-module manifest, checks copied source-body digests and anchors, and emits the command card path used by runtime-shell demos.\n- Scope limit consumer: `standards/std_microcosm_durable_agent_work_landing_replay.json`, the component `AUTHORITY_CEILING`, and the fixture negative cases keep live Git mutation, broad checkpoint authority, unrelated dirty-path staging, live Task/work log mutation, external model access, source-file changes, public sharing, launch, non-public body export, and whole-system correctness outside this module.\n\n###### Negative Cases\n\nThe fixture rejects the nine named negative cases in `core/fixture_manifests/durable_agent_work_landing_replay.fixture_manifest.json`: missing validation evidence, validation recorded after a commit attempt, missing recorded completion, commit-landed language without a HEAD advance, live Git side-effect authority, missing dirty-tree boundary, uncaptured metadata blockers, overbroad distribution claims, and non-public path/body leakage.\n\n###### Validation Result record Path\n\n```text\n./repo-pytest tests/test_durable_agent_work_landing_replay.py -q --basetemp=/tmp/microcosm_durable_agent_work_landing_replay_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public replay evidence that claimed-path rows, validation-before-commit rows, HEAD before/after evidence, blocker-capture rows, work log finalizer evidence, copied internal control bodies, source manifests, metadata-only result records, and negative cases support the declared work-landing replay contract. The component, mechanism, code locus, governed concept, and principles are bound in the structured lattice bindings above.\n\nThis module may not claim live Git mutation, arbitrary commit-landed truth, live work log mutation, live work log mutation, external model access, broad checkpoint authority, source-file changes, hosted-public posture, launch-scope decision, publishing-scope decision, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope limit\n\nThis component is source-open replay evidence for synthetic result records and copied source bodies with digest provenance. It supports local inspection of recorded work-landing mechanics, while operational distribution and live Git side effects stay outside the public fixture.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe JSON bundle binds this module to mechanism `mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract`, component `durable_agent_work_landing_replay`, concept `concept.work_landing_and_continuity_control_bundle`, principles `P-5`, `P-10`, `P-14`, `P-15`, and `P-16`, axioms `AX-4` and `AX-9`, and the runtime code locus `src/microcosm_core/organs/durable_agent_work_landing_replay.py`. That lattice position makes the module a bounded work-landing accounting replay: it explains how evidence is recorded and rejected, not how to perform live Git mutation.\n\nThe concept edge is the scope limit. Broader work-continuity claims must route through sibling modules such as `bridge_phase_continuity_runtime` and `work_landing_control_spine`, while live landing behavior remains with the source internal control source files and work log/scoped-commit owner lanes. This module can cite their copied bodies as evidence, but it cannot promote itself into their live authority.\n\nBridge Phase Continuity Runtime Replays a paused job to prove the rules for safely resuming it hold and reject duplicate resumes. 5/5\n\nDoes Replays a small synthetic record of a paused background job to check that the rules for safely resuming it hold. It confirms the job left behind a real resume note, that trying to resume the same job twice is refused, that \"still alive\" pings can never count as permission to resume (and a long-stale ping can't be passed off as proof the job is still healthy), and that only a proper completion result record is allowed to claim the work actually finished. It also includes deliberately broken cases to prove each rule rejects them. These continuity rules are inspectable in plain result records without any live job, network call, or non-public data ever being touched.\n\nScope limit It validates only the declared public continuity contract over synthetic fixtures; it does not run live bridge transport, use external model services, read operator HUD/browser/phase-runtime or private-memory state, prove provider or UI uptime, land work, change source files, or include launch operations.\n\nRun\n\n```text\nmicrocosm bridge-phase-continuity-runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity\n```\n\nEvidence Contract validator evidence 5/5 Import validation\n\nLinks to [Agent Memory Temporal Conflict Replay](docs/components.html#component-agent_memory_temporal_conflict_replay), [Concurrency Mission Control](docs/components.html#component-concurrency_mission_control)\n\nworkflow-engineering continuity\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/core/paper_module_capsules.json#paper_module.bridge_phase_continuity_runtime) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Bridge Phase Continuity Runtime\n\nExplains component [Bridge Phase Continuity Runtime](docs/components.html#component-bridge_phase_continuity_runtime) mechanism [validates synthetic bridge continuity](docs/rules-and-ideas.html#lattice-mechanism-mechanism-bridge-phase-continuity-runtime-validates-synthetic-bridge-continuity) Governed by principles\n- [Recompute, do not echo](docs/doctrine.html#dcard-p-1)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Concentrate trust in small checkers](docs/doctrine.html#dcard-p-3)\n- [Cache by content, not by name](docs/doctrine.html#dcard-p-5)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n- [Preserve provenance across every boundary](docs/doctrine.html#dcard-p-9)\n- [Make doctrine executable before authoritative](docs/doctrine.html#dcard-p-12)\n\n###### Route Card\n\n`bridge_phase_continuity_runtime` is the public, executable synthetic transport continuity membrane for detached bridge work. It lets a cold agent validate the disk-first observe/apply handoff without opening live bridge transport, model-output data, operator HUD/browser state, prompt-shelf bodies, private memory, or active phase runtime state.\n\n###### Purpose\n\nThis paper module exists to make detached bridge continuity testable as a public fixture instead of a trust story about hidden agents or provider sessions. The component asks one bounded question: can a disk-first observe/apply handoff be represented by public synthetic transport inputs, validated through continuation, heartbeat, resource-pressure, resume, worker-skip, and completion result records, and kept below live bridge/provider/UI/source-file changes?\n\nThe important mechanism is not \"run a bridge.\" It is a continuity membrane: every claim must pass through explicit packet fields, negative-case checks, metadata-only result record writes, and an scope limit that says heartbeat is liveness evidence, resume is resume evidence, and neither is proof that work landed.\n\nFirst command:\n\n```text\nmicrocosm bridge-phase-continuity-runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity\n```\n\n###### Prior Art Grounding\n\nThis runtime borrows from durable execution, workflow orchestration, leases, and provenance practice. Useful anchors include:\n- [Temporal](https://docs.temporal.io/), whose durable-execution model keeps workflow state resumable across process failure and retries.\n- Apache Airflow [DAGs](https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/dags.html), which separate task ordering and retry/timeout policy from task internals.\n- Kubernetes [Lease-based leader election](https://kubernetes.io/docs/concepts/cluster-administration/coordinated-leader-election/), as a prior pattern for liveness evidence, lease renewal, and failover without confusing a heartbeat with work completion.\n- W3C [PROV](https://www.w3.org/TR/prov-overview/), for provenance records that let readers evaluate how an output was produced.\n\nMicrocosm borrows the resumable-workflow, DAG, lease, and provenance shapes, but keeps the component to public synthetic observe/apply fixture sign-off. It does not run live bridge transport, use external model services, prove UI uptime, land work, change source files, or include launch operations.\n\nPrimary authority surfaces:\n- Runtime: `src/microcosm_core/organs/bridge_phase_continuity_runtime.py`\n- Standard: `standards/std_microcosm_bridge_phase_continuity_runtime.json`\n- Fixture manifest: `core/fixture_manifests/bridge_phase_continuity_runtime.fixture_manifest.json`\n- Source-module manifest: `examples/macro_projection_import_protocol/exported_projection_import_bundle/observe_runtime_source_module_manifest.json`\n- Result record set: `receipts/second_wave/bridge_phase_continuity_runtime/*.json`\n\n###### Shape\n\nSource refs\n\nBlocked `tracked_receipt_writes_blocked` Diagram source\n\n```text\nflowchart TD Inputs[\"Six synthetic transport inputs detached job, continuation packet, heartbeat rows, resource pressure, worker-skip result record, forbidden terms\"] --> Transport[\"_validate_synthetic_transport_contract\"] Transport --> Good{\"Valid job? yielded to disk, packet not consumed, fresh heartbeat, phase and continuity match\"} Good -->|\"yes\"| Accept[\"Positive path accepted\"] Good -->|\"no\"| Refuse[\"Refusal floor: missing packet, missing fields, duplicate resume, heartbeat claims resume, stale heartbeat overclaim, dispatch blocked\"] Refuse --> Codes[\"Concrete error codes\"] Accept --> Fixture[\"_validate_fixture_contract source digests, completion finalizer, apply-failure rollback, public boundary\"] Codes --> Fixture Fixture --> Scan[\"private_state scan fixture and transport inputs\"] Scan --> Result records[\"Five metadata-only result records continuation, heartbeat, resource pressure, resume, completion transition\"] Result records --> Gate{\"Tracked result record-write gate\"} Gate -->|\"env set\"| Written[\"Result records written\"] Gate -->|\"env absent\"| Blocked[\"tracked_receipt_writes_blocked\"] Written --> Ceiling[\"Scope limit: no live bridge transport, external model access, HUD/browser/private memory, source-file changes, launch, or whole-system proof\"] Blocked --> Ceiling\n```\n\nThe shape is the public continuity membrane: six synthetic transport inputs are checked for a single valid resumable job and against a refusal floor, the accepted and rejected paths both feed the fixture-contract and non-public-state checks, and only then are the five metadata-only result records written through the tracked-write gate. The result record roles delimit what a reader can trust.\n\n###### Mechanism Pipeline\n\nThe runtime source locus is `src/microcosm_core/organs/bridge_phase_continuity_runtime.py`. Its public entry point `run` reads the fixture manifest, resolves public-relative fixture paths, and validates six synthetic transport inputs: `detached_job.json`, `continuation_packet.json`, `heartbeat_rows.jsonl`, `resource_pressure.json`, `worker_skip_receipt.json`, and `private_state_forbidden_terms.json`. JSONL heartbeat rows are streamed by `_read_required_jsonl` so malformed rows are findings, not a reason to ingest a whole live heartbeat body.\n\nThe central validator is `_validate_synthetic_transport_contract`. It separates five result record roles: continuation packet, heartbeat, resource pressure, resume result record, and completion transition. The implementation then writes the canonical result record set only through the result record-write gate. When the requested output is a tracked result record path and `MICROCOSM_TRACKED_RECEIPT_WRITES=1` is absent, the component reports `tracked_receipt_writes_blocked` instead of silently refreshing tracked evidence.\n\nThe negative-case floor is source-declared in `EXPECTED_NEGATIVE_CASES` and validated from fixture contents. Missing continuation packets, missing required fields, duplicate resume attempts, heartbeat rows that claim resume authority, stale heartbeat overclaims, resource-pressure dispatch blocks, private HUD body leakage, resume-pass work-landing overclaims, and observe/apply validation rollback all become explicit error codes. A pass therefore means the fixture both accepted the positive path and observed the refusal floor.\n\n###### Reader Evidence Routing\n\nReader evidence routes from this module to the runtime source locus, fixture manifest, source-module manifest, public result records, and focused regression. A diagram view and an atlas card are generated for this module. This page explains what a reader can infer from them.\n\nEvidence class What it supports Proof consumer Positive synthetic fixture The runner consumes the observe/apply fixture, writes five metadata-only result record roles, keeps non-public-state scan clean, and preserves the scope limit. `tests/test_bridge_phase_continuity_runtime.py::test_bridge_phase_continuity_runner_consumes_observe_apply_fixture` JSONL input handling Heartbeat rows are streamed, invalid JSONL rows become findings, and non-object rows are rejected without reading live transport state. `test_bridge_phase_continuity_jsonl_reader_streams` Tracked result record gate Durable tracked result record paths are not refreshed unless the explicit tracked-write environment variable is present. `test_bridge_phase_continuity_runner_reports_tracked_receipt_write_gate` Public synthetic label Fixture inputs use `synthetic_transport` and do not carry stale legacy transport or expected-error-code labels. `test_bridge_phase_continuity_fixture_inputs_use_public_synthetic_transport_label` Negative floor The seven expected negative case classes are observed as concrete error codes rather than prose warnings. Focused bridge-continuity negative-case tests in `tests/test_bridge_phase_continuity_runtime.py` CLI card boundary Compact command cards can summarize status without leaking forbidden private/live body classes. Bridge-continuity CLI/card tests in `tests/test_bridge_phase_continuity_runtime.py`\n\n###### What It Proves\n\nThe component proves a bounded public fixture contract:\n- A yielded synthetic job can be resumed only through an explicit continuation packet.\n- Missing packets, missing packet fields, and already consumed packets are rejected.\n- Heartbeat rows stay liveness evidence only; fresh or stale heartbeat rows do not become resume authority or provider/UI uptime evidence.\n- Resource pressure can block dispatch and must be recorded as a blocked decision.\n- Resume success is resume-only; it does not establish work landed without the completion transition result record.\n- Worker-skip result records dedupe a no-op without silently closing the claim.\n- The fixture and result records stay metadata-only for private/live-state classes.\n\nThe reusable mechanism is not \"subagents are good.\" It is the concrete continuity membrane that future agents can run before relying on observe/apply bridge resumption claims.\n\n###### Source-Backed System\n\nThe runtime consumes seven public fixture inputs:\n- `observe_apply_session_fixture.json`\n- `detached_job.json`\n- `continuation_packet.json`\n- `heartbeat_rows.jsonl`\n- `resource_pressure.json`\n- `worker_skip_receipt.json`\n- `private_state_forbidden_terms.json`\n\nThe fixture manifest declares five copied source body imports: `codex_paths_body_import`, `markdown_routing_body_import`, `observe_memory_body_import`, `observe_surfaces_body_import`, and `observe_runtime_body_import`. The component validates the copied target digests from `observe_runtime_source_module_manifest.json`; result record output keeps those bodies out of result records and records digest verdicts instead.\n\n###### Result record Floor\n\nA passing run writes five canonical result record roles:\n- `continuation_packet.json`\n- `heartbeat.json`\n- `resource_pressure.json`\n- `resume_receipt.json`\n- `closeout_transition.json`\n\nEach result record carries `organ_id`, `fixture_id`, `validator_id`, `checker_id`, `status`, `continuation_packet_status`, `heartbeat_status`, `resource_pressure_decision`, `resume_once_status`, `duplicate_resume_rejection`, `worker_skip_receipt_status`, `private_state_scan`, `authority_ceiling`, anti_claim, and the full result record path set.\n\nThe runtime also enforces tracked result record-write gating. A direct run to tracked result record paths without `MICROCOSM_TRACKED_RECEIPT_WRITES=1` reports `tracked_receipt_writes_blocked` rather than mutating tracked evidence silently.\n\n###### Negative Cases\n\nThe expected negative-case floor is source-declared in the runtime and manifest:\n- `missing_packet_duplicate_resume_and_resource_block`\n- `continuation_packet_missing_required_fields`\n- `heartbeat_claims_resume_authority`\n- `bridge_packet_private_hud_body`\n- `stale_heartbeat_overclaims_liveness`\n- `resume_success_overclaims_work_landed`\n- `apply_validation_failure_rolls_back_observe_promotion`\n\nThe current result record error-code set includes `MISSING_CONTINUATION_PACKET`, `MISSING_CONTINUATION_PACKET_FIELDS`, `CONTINUATION_PACKET_ALREADY_CONSUMED`, `HEARTBEAT_NOT_RESUME_AUTHORITY`, `STALE_HEARTBEAT_LIVENESS_CLAIM`, `RESOURCE_PRESSURE_DISPATCH_BLOCKED`, `BRIDGE_PACKET_PRIVATE_HUD_BODY`, `RESUME_PASS_OVERCLAIMS_WORK_LANDED`, and `OBSERVE_APPLY_VALIDATION_FAILED`.\n\n###### Validation Anchors\n\nFocused tests:\n\n```text\n./repo-pytest --host-pressure-policy=warn tests/test_bridge_phase_continuity_runtime.py\n```\n\nSource-form runtime:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src python3 -m microcosm_core.organs.bridge_phase_continuity_runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity\n```\n\nCompact card:\n\n```text\ncd microcosm-substrate && PYTHONPATH=src python3 -m microcosm_core.organs.bridge_phase_continuity_runtime run --input fixtures/second_wave/bridge_phase_continuity_runtime/input --out /tmp/microcosm-bridge-continuity --card\n```\n\n###### Validation Result record Path\n\n```text\n./repo-pytest --host-pressure-policy=warn tests/test_bridge_phase_continuity_runtime.py -q --basetemp=/tmp/microcosm_bridge_phase_continuity_runtime_pytest\n./repo-python scripts/build_doctrine_projection.py --check-paper-module-corpus\n```\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that synthetic observe/apply continuation packets, heartbeat rows, resource-pressure decisions, resume-once behavior, worker-skip result records, completion-transition result records, source-module manifests, negative cases, validation result records, and generated projections support the declared bridge-continuity fixture contract.\n\nThis module may not claim live bridge transport health, external model access, operator HUD/browser access, prompt-shelf or private-memory disclosure, live phase runtime truth, source-file changes, hosted-public posture, launch-scope decision, publishing-scope decision, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\n###### Scope limit\n\nThe component authorizes only public synthetic observe/apply fixture sign-off. It does not run live bridge transport, use external model services, read operator HUD/browser state, read live phase runtime state, read prompt-shelf or private-memory bodies, prove provider or UI uptime, land work, change source files, include launch operations, or certify whole-system correctness.\n\nRead the five result records as fixture evidence, not as a bridge-health statement. A pass means the declared public continuity contract held for the synthetic fixture and copied body floor.\n\nConcurrency Mission Control Runs copied claim-coordination code so duplicate, stale, and conflicting claims get blocked. 5/5\n\nDoes This component imports the real concurrency mission-control specimen builder plus public provider and work log bridge artifacts as exact copies. Running it shows duplicate claims, dependency conflicts, stale leases, missing result records, supervised finalizers, and misanchored claims blocked through repair rows while authority-collapse counters stay at zero.\n\nScope limit verified concurrency mission-control source body import only, not a live scheduler, external model access, hosted orchestration, production concurrency-safety proof, source authority, private-system equivalence, public sharing, or launch-scope decision\n\nRun\n\n```text\nmicrocosm concurrency-mission-control run --input fixtures/first_wave/concurrency_mission_control/input --out receipts/first_wave/concurrency_mission_control --acceptance-out receipts/acceptance/first_wave/concurrency_mission_control_fixture_acceptance.json\n```\n\nEvidence Verified source import evidence 5/5 Copied source body\n\nLinks to [Mission Transaction Work Spine](docs/components.html#component-mission_transaction_work_spine), [Live Source Drift Bundle](docs/components.html#component-batch10_live_source_drift_capsule)\n\nagent-concurrency workflow-engineering continuity\n\nSource [Design note](https://github.com/wcook04/microcosm-substrate/blob/main/paper_modules/concurrency_mission_control.md) \u00b7 [Source atlas](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\nPaper module Concurrency Mission Control\n\nExplains component [Concurrency Mission Control](docs/components.html#component-concurrency_mission_control) mechanism [validates public concurrency mission control](docs/rules-and-ideas.html#lattice-mechanism-mechanism-concurrency-mission-control-validates-public-concurrency-mission-control) Governed by principles\n- [Do not land effects without compensation](docs/doctrine.html#dcard-p-10)\n- [Bind authority to transaction scope](docs/doctrine.html#dcard-p-16)\n- [Lower claim strength to checker strength](docs/doctrine.html#dcard-p-2)\n- [Status fails closed](docs/doctrine.html#dcard-p-6)\n- [Refuse inadmissible computations with typed reasons](docs/doctrine.html#dcard-p-8)\n\nAbides by axioms\n- [Compensable transactional effects](docs/doctrine.html#dcard-ax-9)\n- [Fail-closed monotone lattice](docs/doctrine.html#dcard-ax-5)\n- [Typed partiality and refusal](docs/doctrine.html#dcard-ax-7)\n\n`concurrency_mission_control` imports the real self-indexing-cognitive-system/src/idea_microcosm/concurrency_mission_control_specimen.py source builder plus its public provider-canary and work log bridge artifacts as exact source copies. The component runs the copied builder in a temporary public seed root, then checks the transaction failure matrix, authority membrane, and a public work log seed-speed topology fixture. The work log code body itself is consumed through the existing `mission_transaction_work_spine` source-body import surfaces rather than duplicated here.\n\nThe component is deliberately narrow: it demonstrates fail-closed transaction gating for synthetic multi-agent lanes, not private mission-control runtime, external model access, live scheduling, production concurrency safety, hosted orchestration, or launch-scope decision.\n\n###### Purpose\n\nWhen several agents work the same repository at once, the dangerous moment is not a crash. It is a quiet one: two lanes edit the same generated file, or one lane commits work whose owner has not finished, and nobody notices until the state is already wrong. This component exists to make that moment a checkable verdict rather than a judgement call.\n\nThe single question it answers is: given a dirty path and the live claim topology around it, is acting on that path safe, and if not, what must happen first? The answer is never \"probably fine\". Each case resolves to a named classification and one allowed action, so a lane can decide whether to proceed, hand off, or wait.\n\nWhat is unusual is where the evidence comes from. Rather than re-implementing a scheduler, the component runs the real source mission-control builder over public synthetic lanes and reads a public snapshot of the work log's seed-speed topology: who holds which claim, whether their heartbeat is current, and where path claims collide. The most pointed part is the pair of classifier lenses. The closure-state lens then folds in validation, commitability, and residual evidence to say whether a piece of work is genuinely closed or only looks closed. Both lenses default to the cautious verdict when the evidence is thin, which is the behaviour the page is really about.\n\n###### Prior Art Grounding\n\nThis component borrows from workflow DAGs, lease-based coordination, atomic commit protocols, and CI concurrency controls. Useful anchors include:\n- Apache Airflow [DAGs](https://airflow.apache.org/docs/apache-airflow/stable/core-concepts/dags.html), for representing tasks, dependencies, retries, and scheduling separately from task internals.\n- Kubernetes [Lease-based leader election](https://kubernetes.io/docs/concepts/cluster-administration/coordinated-leader-election/), as a prior pattern for lease holders, renewals, and failover-sensitive internal control coordination.\n- IBM Research on [two-phase commit](https://research.ibm.com/publications/two-phase-commit-optimizations-and-tradeoffs-in-the-commercial-environment), as a transaction-consistency pattern for distributed participants under failure.\n- GitHub Actions [workflow syntax](https://docs.github.com/en/actions/reference/workflows-and-actions/workflow-syntax), for declared workflow concurrency and job orchestration controls.\n\nMicrocosm borrows the DAG, lease, commit-gate, and workflow-concurrency shapes, but keeps the component to fail-closed synthetic multi-agent transaction gating. It does not claim private mission-control runtime, external model access, live scheduling, production concurrency safety, hosted orchestration, or launch.\n\n###### Shape\n\nSource refs\n\nbridges green, authority-collapse zero, forbidden claims blocked `bridge_authority_membrane` heartbeat current, path claims collision-free `work_ledger_seed_speed_gate` dirty generated file: owner live / stale / absent > allowed action `generated_surface_claim_lens` Diagram source\n\n```text\nflowchart LR Builder[\"Copied source builder run in temp seed root: mission board, bridges, result record\"] Bridge[\"Public bridge artifacts provider canary and work log cap economy\"] Seed[\"work log seed-speed snapshot claims, heartbeats, collisions, session cards\"] subgraph Engines[\"Six engines (all must pass)\"] Matrix[\"failure_matrix_gate conflict, duplicate run, dependency, lease, result record, finalizer visible\"] Membrane[\"bridge_authority_membrane bridges green, authority-collapse zero, forbidden claims blocked\"] SeedGate[\"work_ledger_seed_speed_gate heartbeat current, path claims collision-free\"] SurfaceLens[\"generated_surface_claim_lens dirty generated file: owner live / stale / absent -> allowed action\"] ClosureLens[\"closure_state_lens closed and committed, validation deferred, or open and unclassified\"] end Negative[\"Negative floor missing seed root, blocked bridge, authority collapse, private runtime, claim collision\"] Result record[\"metadata-only result records refs, digests, anchors, counts, verdicts; no session or proof bodies\"] Builder --> Matrix Builder --> Membrane Bridge --> Membrane Seed --> SeedGate Seed --> SurfaceLens Seed --> ClosureLens Engines --> Negative Negative --> Result record\n```\n\n###### Engines\n- `mission_transaction_original_builder` dynamically loads the copied source builder and emits the mission board, provider repair bridge, work-metabolism bridge, residual replay bridge, and result record.\n- `failure_matrix_gate` checks that owner-path conflicts, duplicate command runs, dependency gaps, stale leases, missing result records, supervised-scope gaps, missing parent finalizers, and misanchored claims all remain visible.\n- `bridge_authority_membrane` checks that bridge statuses are green while authority-collapse counters remain zero and forbidden claims stay blocked.\n- work_ledger_seed_speed_gate checks that public session heartbeat, seed-speed status, mutation-check commands, multi-session/claim counts, and collision-free path-claim rows are present without exporting private work log session bodies.\n- Each classification carries the single allowed action, so the verdict is what a lane should do, not just what it observed.\n- `closure_state_lens` decides whether a unit of work is genuinely closed. It folds the generated-surface classification together with validation state, commitability, and any open residual, separating `closed_and_committed` from the cases that only look done: `closed_validation_deferred` (validation parked under host pressure), `closed_uncommitted_authority` (event authority exists but shared append logs are unsafe to stage), `false_residual_stale` (a residual left open against a passing generator check), or `open_unclassified` when the closure evidence is simply insufficient. The default is the last of these, so absent evidence never reads as success.\n\n###### Reader Evidence Routing\n\nRead this module as a coordination-evidence membrane, not as a live scheduler. Start with `paper_modules/concurrency_mission_control.json` for the full structured binding, then open `standards/std_microcosm_concurrency_mission_control.json` for required copied-body counts, negative cases, result record fields, and the public/private boundary.\n\nOpen `core/fixture_manifests/concurrency_mission_control.fixture_manifest.json` and `examples/concurrency_mission_control/exported_concurrency_mission_control_bundle/source_module_manifest.json` before inspecting copied source modules. The manifest floor names one source builder body and six public bridge artifacts; result record payloads should carry source refs, hashes, anchors, counts, verdicts, and omission result records, not body text.\n\nRead the work log seed-speed topology as a public coordination fixture. It can show heartbeat participation, mutation-check commands, session and claim counts, and collision-free selected rows, but it cannot export private work log session bodies or authorize live scheduling.\n\n###### Negative Cases\n\nThe fixture carries stable cases for missing seed roots, blocked provider bridges, authority-collapse claims, private runtime overclaims, and unresolved work log seed-speed claim collisions. If focused validation reports an exact-copy source-module body mismatch, route that repair through `microcosm_exact_copy_refresh`; do not treat this Markdown projection as source authority for copied source bodies.\n\n###### Validation Result record Path\n\nFrom `microcosm-substrate`, validate with throwaway result record outputs first:\n\nA diagram view and navigation card are generated for this module from its declared component, mechanism, concept, principle, axiom, dependency, and code-locus relationships. Fixture and bundle passes prove only public fail-closed coordination evidence over the declared copied bodies and synthetic fixtures. Source-copy digest drift belongs to `microcosm_exact_copy_refresh`; shared lattice projection drift belongs to the live projection owner lane.\n\n###### Scope boundary\n\n###### Scope limit\n\nThis module may claim public fixture evidence that the exact public source builder copy, provider-canary and work log bridge artifacts, failure-matrix fixture, bridge authority membrane, work log seed-speed topology fixture, source manifests, metadata-only result records, negative cases, and generated navigation projections support the declared concurrency mission-control fixture contract. It may also claim that the structured binding row resolves the accepted component subject, resolved mechanism subject, runtime source locus, governed concept, five principles, four axioms, and three dependency modules.\n\nThis module may not claim private mission-control runtime truth, external model access, live scheduling, production concurrency safety, hosted orchestration, source-file changes, hosted-public posture, launch-scope decision, publishing-scope decision, implementation correctness beyond the listed witnesses, or whole-system correctness.\n\nSource and projection details\n\n###### Governing Lattice Relation\n\nThe governing lattice claim is that this module turns concurrency coordination from a status narrative into a transaction-scoped evidence check. The bundle structured source record reports sixteen resolved edges and zero unresolved selective relations: the page explains the accepted component and mechanism, cites the runtime source locus, depends on the mission-transaction, bridge-continuity, and work-landing modules, and is governed by `concept.work_landing_and_continuity_control_bundle`. That concept binds this component to the same family shape as work landing and continuity controls: public fixture or exported bundle input becomes a coordination validator, and the result is a scoped transaction or continuity result record rather than chat status or generated projection authority.\n\nThe mechanism row `mechanism.concurrency_mission_control.validates_public_concurrency_mission_control` is the source-backed explanation edge. In source, `run`, `run_concurrency_mission_control_bundle`, `classify_generated_surface_claim_lens`, and `classify_concurrency_closure_state_lens` require copied-source digest equality, required anchors, failure-class coverage, work log seed-speed topology checks, metadata-only result records, and explicit scope limits. The focused proof consumer is `tests/test_concurrency_mission_control.py`: it checks the happy-path fixture, exported-bundle validation, digest-mismatch rejection, exact source-body imports, semantic negative cases, owner-state classification, and closure-state classification. The standard `std_microcosm_concurrency_mission_control.json` supplies the same ceiling in schema form, including seven copied public source modules, five negative cases, no non-public body export, and no live scheduler/provider/launch-scope decision.\n\nThe principle and axiom edges keep the proof boundary from drifting upward. `P-10`, `P-16`, and `AX-9` make coordination effects transaction-scoped and compensable; `P-2`, `P-6`, `P-8`, `AX-5`, `AX-7`, and `AX-8` force the validator to lower claim strength when evidence, preconditions, provenance, or refusal reasons are missing. A passing run therefore proves only the public concurrency mission-control fixture contract over declared copied bodies and synthetic fixtures. It does not establish private mission-control runtime truth, live scheduling, external model access, hosted orchestration, production concurrency safety, source-file changes, launch-scope decision, or whole-system correctness.\n\n#### Source refs\n\nBuilt from public source refs, with each input path recorded for provenance.\n\nEach component has a stable public source path with commands, source links, and its supported scope.",
    "byte_count": 64334,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:components",
   "relative_href": "docs/components.html",
   "path": "docs/components.html",
   "title": "Components",
   "nav_group": "Reference",
   "nav_label": "Components",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "component_refs": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "executable_doctrine_grammar",
     "navigation_hologram_route_plane",
     "standards_meta_diagnostics",
     "voice_to_doctrine_self_improvement_loop",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "doctrine_fact_claim_audit",
     "self_ignorance_coverage_ledger",
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization",
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "agent_memory_temporal_conflict_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "agent_route_observability_runtime",
     "provider_context_recipe_budget_policy",
     "agent_closeout_faithfulness_audit",
     "bounded_autonomy_campaign_packet",
     "batch7_secondary_runtime_capsule",
     "research_replication_rubric_artifact_replay",
     "spatial_world_model_counterfactual_simulation_replay",
     "materials_chemistry_closed_loop_lab_safety_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine",
     "batch12_market_dashboard_read_model_capsule",
     "batch12_prediction_market_board_capsule",
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_audio_level_rms_port",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "batch12_release_claim_language_gate",
     "mission_transaction_work_spine",
     "durable_agent_work_landing_replay",
     "bridge_phase_continuity_runtime",
     "concurrency_mission_control"
    ],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Components. Generated index of Microcosm public components. The full component card text is carried once in visible_text_index.logical_records.components.",
    "byte_count": 154,
    "packaging": "reference_page_shell_with_component_records_carried_once"
   }
  },
  {
   "id": "page:field-guide",
   "relative_href": "docs/field-guide.html",
   "path": "docs/field-guide.html",
   "title": "Field guide",
   "nav_group": "Reference",
   "nav_label": "Field guide",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/anti_principles/AP-1.json",
    "microcosm-substrate/anti_principles/AP-10.json",
    "microcosm-substrate/anti_principles/AP-11.json",
    "microcosm-substrate/anti_principles/AP-12.json",
    "microcosm-substrate/anti_principles/AP-13.json",
    "microcosm-substrate/anti_principles/AP-14.json",
    "microcosm-substrate/anti_principles/AP-15.json",
    "microcosm-substrate/anti_principles/AP-16.json",
    "microcosm-substrate/anti_principles/AP-17.json",
    "microcosm-substrate/anti_principles/AP-2.json",
    "microcosm-substrate/anti_principles/AP-3.json",
    "microcosm-substrate/anti_principles/AP-4.json",
    "microcosm-substrate/anti_principles/AP-5.json",
    "microcosm-substrate/anti_principles/AP-6.json",
    "microcosm-substrate/anti_principles/AP-7.json",
    "microcosm-substrate/anti_principles/AP-8.json",
    "microcosm-substrate/anti_principles/AP-9.json",
    "microcosm-substrate/atlas/entry_packet.json",
    "microcosm-substrate/axioms/AX-1.json",
    "microcosm-substrate/axioms/AX-10.json",
    "microcosm-substrate/axioms/AX-11.json",
    "microcosm-substrate/axioms/AX-12.json",
    "microcosm-substrate/axioms/AX-2.json",
    "microcosm-substrate/axioms/AX-3.json",
    "microcosm-substrate/axioms/AX-4.json",
    "microcosm-substrate/axioms/AX-5.json",
    "microcosm-substrate/axioms/AX-6.json",
    "microcosm-substrate/axioms/AX-7.json",
    "microcosm-substrate/axioms/AX-8.json",
    "microcosm-substrate/axioms/AX-9.json",
    "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
    "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
    "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
    "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
    "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
    "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
    "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
    "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
    "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
    "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
    "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
    "microcosm-substrate/core/doctrine_lattice_coverage.json",
    "microcosm-substrate/core/doctrine_lattice_relations.json",
    "microcosm-substrate/core/mechanism_sources.json",
    "microcosm-substrate/core/organ_atlas.json",
    "microcosm-substrate/core/organ_families.json",
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/paper_module_capsules.json",
    "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
    "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
    "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
    "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
    "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
    "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
    "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
    "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
    "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
    "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
    "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
    "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
    "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
    "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
    "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
    "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
    "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
    "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
    "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
    "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
    "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
    "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
    "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
    "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
    "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
    "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
    "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
    "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
    "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
    "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
    "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
    "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
    "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
    "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
    "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
    "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
    "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
    "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
    "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
    "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
    "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
    "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
    "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
    "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
    "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
    "microcosm-substrate/principles/P-1.json",
    "microcosm-substrate/principles/P-10.json",
    "microcosm-substrate/principles/P-11.json",
    "microcosm-substrate/principles/P-12.json",
    "microcosm-substrate/principles/P-13.json",
    "microcosm-substrate/principles/P-14.json",
    "microcosm-substrate/principles/P-15.json",
    "microcosm-substrate/principles/P-16.json",
    "microcosm-substrate/principles/P-17.json",
    "microcosm-substrate/principles/P-18.json",
    "microcosm-substrate/principles/P-19.json",
    "microcosm-substrate/principles/P-2.json",
    "microcosm-substrate/principles/P-20.json",
    "microcosm-substrate/principles/P-3.json",
    "microcosm-substrate/principles/P-4.json",
    "microcosm-substrate/principles/P-5.json",
    "microcosm-substrate/principles/P-6.json",
    "microcosm-substrate/principles/P-7.json",
    "microcosm-substrate/principles/P-8.json",
    "microcosm-substrate/principles/P-9.json"
   ],
   "content_refs": {
    "component_refs": [
     "cold_reader_route_map",
     "public_reveal_walkthrough",
     "pattern_binding_contract",
     "pattern_assimilation_step",
     "executable_doctrine_grammar",
     "navigation_hologram_route_plane",
     "standards_meta_diagnostics",
     "voice_to_doctrine_self_improvement_loop",
     "cognitive_operator_registry",
     "routing_anti_patterns_registry",
     "doctrine_fact_claim_audit",
     "self_ignorance_coverage_ledger",
     "proof_diagnostic_evidence_spine",
     "formal_math_readiness_gate",
     "corpus_readiness_mathlib_absence_gate",
     "mathematical_strategy_atlas_hypothesis_scorer",
     "tactic_portfolio_availability_probe",
     "target_shape_tactic_routing_gate",
     "lean_std_premise_index",
     "formal_math_premise_retrieval",
     "formal_math_verifier_trace_repair_loop",
     "formal_evidence_cell_anchor_resolver",
     "undeclared_library_prior_symbol_classifier",
     "ring2_premise_retrieval_precision_recall_harness",
     "formal_math_lean_proof_witness",
     "verifier_lab_kernel",
     "verifier_lab_execution_spine",
     "certificate_kernel_execution_lab",
     "batch4_proof_authority_runtime",
     "proof_derived_governed_mutation_authorization",
     "agent_benchmark_integrity_anti_gaming_replay",
     "batch10_cold_eval_honesty_capsule",
     "batch8_validator_checker_capsule",
     "agent_monitor_redteam_falsification_replay",
     "agent_sabotage_scheming_monitor_replay",
     "agent_memory_temporal_conflict_replay",
     "sleeper_memory_poisoning_quarantine_replay",
     "mcp_tool_authority_replay",
     "belief_state_process_reward_replay",
     "agent_sandbox_policy_escape_replay",
     "indirect_prompt_injection_information_flow_policy_replay",
     "agentic_vulnerability_discovery_patch_proof_replay",
     "agent_route_observability_runtime",
     "provider_context_recipe_budget_policy",
     "agent_closeout_faithfulness_audit",
     "bounded_autonomy_campaign_packet",
     "batch7_secondary_runtime_capsule",
     "research_replication_rubric_artifact_replay",
     "spatial_world_model_counterfactual_simulation_replay",
     "materials_chemistry_closed_loop_lab_safety_replay",
     "mechanistic_interpretability_circuit_attribution_replay",
     "prediction_oracle_reconciliation",
     "finance_forecast_evaluation_spine",
     "batch12_market_dashboard_read_model_capsule",
     "batch12_prediction_market_board_capsule",
     "macro_projection_import_protocol",
     "world_model_projection_drift_control_room",
     "batch6_unsurfaced_primitives_capsule",
     "batch5_authority_systems_capsule",
     "batch7_macro_engines_capsule",
     "batch7_oracle_sibling_capsule",
     "batch7_demo_take_console_capsule",
     "batch8_tools_tail_primitives_capsule",
     "batch8_policy_engines_capsule",
     "batch8_audio_level_rms_port",
     "batch8_structural_theses_capsule",
     "engine_room_demo",
     "batch9_macro_engines_capsule",
     "batch10_governance_compilers_capsule",
     "batch11_saturation_engines_capsule",
     "tool_server_pressure_inventory",
     "batch8_compliance_pipeline_capsule",
     "batch10_live_source_drift_capsule",
     "batch12_release_claim_language_gate",
     "mission_transaction_work_spine",
     "durable_agent_work_landing_replay",
     "bridge_phase_continuity_runtime",
     "concurrency_mission_control"
    ],
    "paper_module_refs": [
     "paper_module.verifier_lab_kernel",
     "paper_module.navigation_hologram_route_plane",
     "paper_module.agent_route_observability_runtime",
     "paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "paper_module.research_replication_rubric_artifact_replay",
     "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "paper_module.certificate_kernel_execution_lab",
     "paper_module.corpus_readiness_mathlib_absence_gate",
     "paper_module.pattern_binding_contract",
     "paper_module.bridge_phase_continuity_runtime",
     "paper_module.cognitive_operator_registry",
     "paper_module.agent_closeout_faithfulness_audit",
     "paper_module.cold_reader_route_map",
     "paper_module.proof_diagnostic_evidence_spine",
     "paper_module.proof_derived_governed_mutation_authorization",
     "paper_module.durable_agent_work_landing_replay",
     "paper_module.work_landing_control_spine",
     "paper_module.executable_doctrine_grammar",
     "paper_module.macro_projection_import_protocol",
     "paper_module.mission_transaction_work_spine",
     "paper_module.formal_math_readiness_gate",
     "paper_module.formal_math_lean_proof_witness",
     "paper_module.formal_math_verifier_trace_repair_loop",
     "paper_module.formal_evidence_cell_anchor_resolver",
     "paper_module.formal_math_premise_retrieval",
     "paper_module.lean_std_premise_index",
     "paper_module.world_model_projection_drift_control_room",
     "paper_module.public_reveal_walkthrough",
     "paper_module.standards_meta_diagnostics",
     "paper_module.finance_forecast_evaluation_spine",
     "paper_module.engine_room_demo",
     "paper_module.agent_memory_temporal_conflict_replay",
     "paper_module.agent_monitor_redteam_falsification_replay",
     "paper_module.agent_sabotage_scheming_monitor_replay",
     "paper_module.agent_sandbox_policy_escape_replay",
     "paper_module.belief_state_process_reward_replay",
     "paper_module.sleeper_memory_poisoning_quarantine_replay",
     "paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "paper_module.mcp_tool_authority_replay",
     "paper_module.tactic_portfolio_availability",
     "paper_module.target_shape_tactic_routing",
     "paper_module.ring2_premise_precision_recall",
     "paper_module.mathematical_strategy_atlas",
     "paper_module.verifier_lab_execution_spine",
     "paper_module.bounded_autonomy_campaign_packet",
     "paper_module.computer_use_action_trace_replay",
     "paper_module.concurrency_mission_control",
     "paper_module.doctrine_fact_claim_audit",
     "paper_module.self_ignorance_coverage_ledger",
     "paper_module.tool_server_pressure_inventory",
     "paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "paper_module.spatial_world_model_counterfactual_simulation_replay",
     "paper_module.prediction_oracle_reconciliation",
     "paper_module.provider_context_recipe_budget",
     "paper_module.undeclared_library_prior_classifier",
     "paper_module.voice_to_doctrine_self_improvement_loop",
     "paper_module.routing_anti_patterns_registry",
     "paper_module.batch8_audio_level_rms_port",
     "paper_module.batch8_compliance_pipeline_capsule",
     "paper_module.batch8_policy_engines_capsule",
     "paper_module.batch8_structural_theses_capsule",
     "paper_module.batch8_tools_tail_primitives_capsule",
     "paper_module.batch8_validator_checker_capsule",
     "paper_module.batch12_market_dashboard_read_model_capsule",
     "paper_module.batch12_prediction_market_board_capsule",
     "paper_module.batch12_release_claim_language_gate",
     "paper_module.batch10_cold_eval_honesty_capsule",
     "paper_module.batch10_live_source_drift_capsule",
     "paper_module.batch7_macro_engines_capsule",
     "paper_module.batch9_macro_engines_capsule",
     "paper_module.pattern_assimilation",
     "paper_module.batch10_governance_compilers_capsule",
     "paper_module.batch11_saturation_engines_capsule",
     "paper_module.batch4_proof_authority_runtime",
     "paper_module.batch6_unsurfaced_primitives_capsule",
     "paper_module.engine_room_public_projection_leak_gate",
     "paper_module.batch5_authority_systems_capsule",
     "paper_module.batch7_oracle_sibling_capsule",
     "paper_module.batch7_demo_take_console_capsule",
     "paper_module.engine_room_generated_projection_drift_gate",
     "paper_module.engine_room_command_run_singleflight",
     "paper_module.engine_room_metabolism_runtime",
     "paper_module.engine_room_bridge_campaign_dag",
     "paper_module.engine_room_annex_knowledge_router",
     "paper_module.engine_room_derived_fact_provider_engine",
     "paper_module.engine_room_egress_self_compliance_gate",
     "paper_module.engine_room_lean_proof_search_lab",
     "paper_module.engine_room_navigation_fitness_benchmark",
     "paper_module.cold_clone_probe",
     "paper_module.first_screen_composition_root",
     "paper_module.batch7_secondary_runtime_capsule",
     "paper_module.microcosm_axiom_substrate"
    ],
    "rules_and_ideas_refs": [
     "P-1",
     "P-2",
     "P-3",
     "P-4",
     "P-5",
     "P-6",
     "P-7",
     "P-8",
     "P-9",
     "P-10",
     "P-11",
     "P-12",
     "P-13",
     "P-14",
     "P-15",
     "P-16",
     "P-17",
     "P-18",
     "P-19",
     "P-20",
     "AX-1",
     "AX-2",
     "AX-3",
     "AX-4",
     "AX-5",
     "AX-6",
     "AX-7",
     "AX-8",
     "AX-9",
     "AX-10",
     "AX-11",
     "AX-12",
     "AP-1",
     "AP-2",
     "AP-3",
     "AP-4",
     "AP-5",
     "AP-6",
     "AP-7",
     "AP-8",
     "AP-9",
     "AP-10",
     "AP-11",
     "AP-12",
     "AP-13",
     "AP-14",
     "AP-15",
     "AP-16",
     "AP-17",
     "concept.agent_reliability_and_safety_validator_bundle",
     "concept.architecture_and_navigation_route_contract_bundle",
     "concept.entry_and_reveal_route_readiness_bundle",
     "concept.executable_doctrine_grammar_standard_bundle",
     "concept.first_screen_doctrine_effect_frame",
     "concept.formal_math_and_proof_witness_bundle",
     "concept.import_projection_and_drift_control_bundle",
     "concept.research_and_science_replay_evidence_bundle",
     "concept.standards_meta_diagnostics_bundle",
     "concept.voice_to_doctrine_self_improvement_loop_bundle",
     "concept.work_landing_and_continuity_control_bundle",
     "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "mechanism.engine_room_demo.validates_public_engine_room_demo",
     "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "paper_module.verifier_lab_kernel",
     "paper_module.navigation_hologram_route_plane",
     "paper_module.agent_route_observability_runtime",
     "paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "paper_module.research_replication_rubric_artifact_replay",
     "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "paper_module.certificate_kernel_execution_lab",
     "paper_module.corpus_readiness_mathlib_absence_gate",
     "paper_module.pattern_binding_contract",
     "paper_module.bridge_phase_continuity_runtime",
     "paper_module.cognitive_operator_registry",
     "paper_module.agent_closeout_faithfulness_audit",
     "paper_module.cold_reader_route_map",
     "paper_module.proof_diagnostic_evidence_spine",
     "paper_module.proof_derived_governed_mutation_authorization",
     "paper_module.durable_agent_work_landing_replay",
     "paper_module.work_landing_control_spine",
     "paper_module.executable_doctrine_grammar",
     "paper_module.macro_projection_import_protocol",
     "paper_module.mission_transaction_work_spine",
     "paper_module.formal_math_readiness_gate",
     "paper_module.formal_math_lean_proof_witness",
     "paper_module.formal_math_verifier_trace_repair_loop",
     "paper_module.formal_evidence_cell_anchor_resolver",
     "paper_module.formal_math_premise_retrieval",
     "paper_module.lean_std_premise_index",
     "paper_module.world_model_projection_drift_control_room",
     "paper_module.public_reveal_walkthrough",
     "paper_module.standards_meta_diagnostics",
     "paper_module.finance_forecast_evaluation_spine",
     "paper_module.engine_room_demo",
     "paper_module.agent_memory_temporal_conflict_replay",
     "paper_module.agent_monitor_redteam_falsification_replay",
     "paper_module.agent_sabotage_scheming_monitor_replay",
     "paper_module.agent_sandbox_policy_escape_replay",
     "paper_module.belief_state_process_reward_replay",
     "paper_module.sleeper_memory_poisoning_quarantine_replay",
     "paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "paper_module.mcp_tool_authority_replay",
     "paper_module.tactic_portfolio_availability",
     "paper_module.target_shape_tactic_routing",
     "paper_module.ring2_premise_precision_recall",
     "paper_module.mathematical_strategy_atlas",
     "paper_module.verifier_lab_execution_spine",
     "paper_module.bounded_autonomy_campaign_packet",
     "paper_module.computer_use_action_trace_replay",
     "paper_module.concurrency_mission_control",
     "paper_module.doctrine_fact_claim_audit",
     "paper_module.self_ignorance_coverage_ledger",
     "paper_module.tool_server_pressure_inventory",
     "paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "paper_module.spatial_world_model_counterfactual_simulation_replay",
     "paper_module.prediction_oracle_reconciliation",
     "paper_module.provider_context_recipe_budget",
     "paper_module.undeclared_library_prior_classifier",
     "paper_module.voice_to_doctrine_self_improvement_loop",
     "paper_module.routing_anti_patterns_registry",
     "paper_module.batch8_audio_level_rms_port",
     "paper_module.batch8_compliance_pipeline_capsule",
     "paper_module.batch8_policy_engines_capsule",
     "paper_module.batch8_structural_theses_capsule",
     "paper_module.batch8_tools_tail_primitives_capsule",
     "paper_module.batch8_validator_checker_capsule",
     "paper_module.batch12_market_dashboard_read_model_capsule",
     "paper_module.batch12_prediction_market_board_capsule",
     "paper_module.batch12_release_claim_language_gate",
     "paper_module.batch10_cold_eval_honesty_capsule",
     "paper_module.batch10_live_source_drift_capsule",
     "paper_module.batch7_macro_engines_capsule",
     "paper_module.batch9_macro_engines_capsule",
     "paper_module.pattern_assimilation",
     "paper_module.batch10_governance_compilers_capsule",
     "paper_module.batch11_saturation_engines_capsule",
     "paper_module.batch4_proof_authority_runtime",
     "paper_module.batch6_unsurfaced_primitives_capsule",
     "paper_module.engine_room_public_projection_leak_gate",
     "paper_module.batch5_authority_systems_capsule",
     "paper_module.batch7_oracle_sibling_capsule",
     "paper_module.batch7_demo_take_console_capsule",
     "paper_module.engine_room_generated_projection_drift_gate",
     "paper_module.engine_room_command_run_singleflight",
     "paper_module.engine_room_metabolism_runtime",
     "paper_module.engine_room_bridge_campaign_dag",
     "paper_module.engine_room_annex_knowledge_router",
     "paper_module.engine_room_derived_fact_provider_engine",
     "paper_module.engine_room_egress_self_compliance_gate",
     "paper_module.engine_room_lean_proof_search_lab",
     "paper_module.engine_room_navigation_fitness_benchmark",
     "paper_module.cold_clone_probe",
     "paper_module.first_screen_composition_root",
     "paper_module.batch7_secondary_runtime_capsule",
     "paper_module.microcosm_axiom_substrate"
    ],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Field guide. Generated middle-layer roster across Microcosm components, rules, ideas, and paper modules. The roster rows are carried once in visible_text_index.logical_records.rosters.",
    "byte_count": 184,
    "packaging": "reference_page_shell_with_roster_records_carried_once"
   }
  },
  {
   "id": "page:rules-and-ideas",
   "relative_href": "docs/rules-and-ideas.html",
   "path": "docs/rules-and-ideas.html",
   "title": "Doctrine reference",
   "nav_group": "Reference",
   "nav_label": "Doctrine reference",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/anti_principles/AP-1.json",
    "microcosm-substrate/anti_principles/AP-10.json",
    "microcosm-substrate/anti_principles/AP-11.json",
    "microcosm-substrate/anti_principles/AP-12.json",
    "microcosm-substrate/anti_principles/AP-13.json",
    "microcosm-substrate/anti_principles/AP-14.json",
    "microcosm-substrate/anti_principles/AP-15.json",
    "microcosm-substrate/anti_principles/AP-16.json",
    "microcosm-substrate/anti_principles/AP-17.json",
    "microcosm-substrate/anti_principles/AP-2.json",
    "microcosm-substrate/anti_principles/AP-3.json",
    "microcosm-substrate/anti_principles/AP-4.json",
    "microcosm-substrate/anti_principles/AP-5.json",
    "microcosm-substrate/anti_principles/AP-6.json",
    "microcosm-substrate/anti_principles/AP-7.json",
    "microcosm-substrate/anti_principles/AP-8.json",
    "microcosm-substrate/anti_principles/AP-9.json",
    "microcosm-substrate/atlas/entry_packet.json",
    "microcosm-substrate/axioms/AX-1.json",
    "microcosm-substrate/axioms/AX-10.json",
    "microcosm-substrate/axioms/AX-11.json",
    "microcosm-substrate/axioms/AX-12.json",
    "microcosm-substrate/axioms/AX-2.json",
    "microcosm-substrate/axioms/AX-3.json",
    "microcosm-substrate/axioms/AX-4.json",
    "microcosm-substrate/axioms/AX-5.json",
    "microcosm-substrate/axioms/AX-6.json",
    "microcosm-substrate/axioms/AX-7.json",
    "microcosm-substrate/axioms/AX-8.json",
    "microcosm-substrate/axioms/AX-9.json",
    "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
    "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
    "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
    "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
    "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
    "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
    "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
    "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
    "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
    "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
    "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
    "microcosm-substrate/core/doctrine_lattice_coverage.json",
    "microcosm-substrate/core/doctrine_lattice_relations.json",
    "microcosm-substrate/core/mechanism_sources.json",
    "microcosm-substrate/core/paper_module_capsules.json",
    "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
    "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
    "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
    "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
    "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
    "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
    "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
    "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
    "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
    "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
    "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
    "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
    "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
    "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
    "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
    "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
    "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
    "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
    "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
    "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
    "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
    "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
    "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
    "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
    "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
    "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
    "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
    "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
    "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
    "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
    "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
    "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
    "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
    "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
    "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
    "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
    "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
    "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
    "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
    "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
    "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
    "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
    "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
    "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
    "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
    "microcosm-substrate/principles/P-1.json",
    "microcosm-substrate/principles/P-10.json",
    "microcosm-substrate/principles/P-11.json",
    "microcosm-substrate/principles/P-12.json",
    "microcosm-substrate/principles/P-13.json",
    "microcosm-substrate/principles/P-14.json",
    "microcosm-substrate/principles/P-15.json",
    "microcosm-substrate/principles/P-16.json",
    "microcosm-substrate/principles/P-17.json",
    "microcosm-substrate/principles/P-18.json",
    "microcosm-substrate/principles/P-19.json",
    "microcosm-substrate/principles/P-2.json",
    "microcosm-substrate/principles/P-20.json",
    "microcosm-substrate/principles/P-3.json",
    "microcosm-substrate/principles/P-4.json",
    "microcosm-substrate/principles/P-5.json",
    "microcosm-substrate/principles/P-6.json",
    "microcosm-substrate/principles/P-7.json",
    "microcosm-substrate/principles/P-8.json",
    "microcosm-substrate/principles/P-9.json"
   ],
   "content_refs": {
    "rules_and_ideas_refs": [
     "P-1",
     "P-2",
     "P-3",
     "P-4",
     "P-5",
     "P-6",
     "P-7",
     "P-8",
     "P-9",
     "P-10",
     "P-11",
     "P-12",
     "P-13",
     "P-14",
     "P-15",
     "P-16",
     "P-17",
     "P-18",
     "P-19",
     "P-20",
     "AX-1",
     "AX-2",
     "AX-3",
     "AX-4",
     "AX-5",
     "AX-6",
     "AX-7",
     "AX-8",
     "AX-9",
     "AX-10",
     "AX-11",
     "AX-12",
     "AP-1",
     "AP-2",
     "AP-3",
     "AP-4",
     "AP-5",
     "AP-6",
     "AP-7",
     "AP-8",
     "AP-9",
     "AP-10",
     "AP-11",
     "AP-12",
     "AP-13",
     "AP-14",
     "AP-15",
     "AP-16",
     "AP-17",
     "concept.agent_reliability_and_safety_validator_bundle",
     "concept.architecture_and_navigation_route_contract_bundle",
     "concept.entry_and_reveal_route_readiness_bundle",
     "concept.executable_doctrine_grammar_standard_bundle",
     "concept.first_screen_doctrine_effect_frame",
     "concept.formal_math_and_proof_witness_bundle",
     "concept.import_projection_and_drift_control_bundle",
     "concept.research_and_science_replay_evidence_bundle",
     "concept.standards_meta_diagnostics_bundle",
     "concept.voice_to_doctrine_self_improvement_loop_bundle",
     "concept.work_landing_and_continuity_control_bundle",
     "mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "mechanism.engine_room_demo.validates_public_engine_room_demo",
     "mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "paper_module.verifier_lab_kernel",
     "paper_module.navigation_hologram_route_plane",
     "paper_module.agent_route_observability_runtime",
     "paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "paper_module.research_replication_rubric_artifact_replay",
     "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "paper_module.certificate_kernel_execution_lab",
     "paper_module.corpus_readiness_mathlib_absence_gate",
     "paper_module.pattern_binding_contract",
     "paper_module.bridge_phase_continuity_runtime",
     "paper_module.cognitive_operator_registry",
     "paper_module.agent_closeout_faithfulness_audit",
     "paper_module.cold_reader_route_map",
     "paper_module.proof_diagnostic_evidence_spine",
     "paper_module.proof_derived_governed_mutation_authorization",
     "paper_module.durable_agent_work_landing_replay",
     "paper_module.work_landing_control_spine",
     "paper_module.executable_doctrine_grammar",
     "paper_module.macro_projection_import_protocol",
     "paper_module.mission_transaction_work_spine",
     "paper_module.formal_math_readiness_gate",
     "paper_module.formal_math_lean_proof_witness",
     "paper_module.formal_math_verifier_trace_repair_loop",
     "paper_module.formal_evidence_cell_anchor_resolver",
     "paper_module.formal_math_premise_retrieval",
     "paper_module.lean_std_premise_index",
     "paper_module.world_model_projection_drift_control_room",
     "paper_module.public_reveal_walkthrough",
     "paper_module.standards_meta_diagnostics",
     "paper_module.finance_forecast_evaluation_spine",
     "paper_module.engine_room_demo",
     "paper_module.agent_memory_temporal_conflict_replay",
     "paper_module.agent_monitor_redteam_falsification_replay",
     "paper_module.agent_sabotage_scheming_monitor_replay",
     "paper_module.agent_sandbox_policy_escape_replay",
     "paper_module.belief_state_process_reward_replay",
     "paper_module.sleeper_memory_poisoning_quarantine_replay",
     "paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "paper_module.mcp_tool_authority_replay",
     "paper_module.tactic_portfolio_availability",
     "paper_module.target_shape_tactic_routing",
     "paper_module.ring2_premise_precision_recall",
     "paper_module.mathematical_strategy_atlas",
     "paper_module.verifier_lab_execution_spine",
     "paper_module.bounded_autonomy_campaign_packet",
     "paper_module.computer_use_action_trace_replay",
     "paper_module.concurrency_mission_control",
     "paper_module.doctrine_fact_claim_audit",
     "paper_module.self_ignorance_coverage_ledger",
     "paper_module.tool_server_pressure_inventory",
     "paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "paper_module.spatial_world_model_counterfactual_simulation_replay",
     "paper_module.prediction_oracle_reconciliation",
     "paper_module.provider_context_recipe_budget",
     "paper_module.undeclared_library_prior_classifier",
     "paper_module.voice_to_doctrine_self_improvement_loop",
     "paper_module.routing_anti_patterns_registry",
     "paper_module.batch8_audio_level_rms_port",
     "paper_module.batch8_compliance_pipeline_capsule",
     "paper_module.batch8_policy_engines_capsule",
     "paper_module.batch8_structural_theses_capsule",
     "paper_module.batch8_tools_tail_primitives_capsule",
     "paper_module.batch8_validator_checker_capsule",
     "paper_module.batch12_market_dashboard_read_model_capsule",
     "paper_module.batch12_prediction_market_board_capsule",
     "paper_module.batch12_release_claim_language_gate",
     "paper_module.batch10_cold_eval_honesty_capsule",
     "paper_module.batch10_live_source_drift_capsule",
     "paper_module.batch7_macro_engines_capsule",
     "paper_module.batch9_macro_engines_capsule",
     "paper_module.pattern_assimilation",
     "paper_module.batch10_governance_compilers_capsule",
     "paper_module.batch11_saturation_engines_capsule",
     "paper_module.batch4_proof_authority_runtime",
     "paper_module.batch6_unsurfaced_primitives_capsule",
     "paper_module.engine_room_public_projection_leak_gate",
     "paper_module.batch5_authority_systems_capsule",
     "paper_module.batch7_oracle_sibling_capsule",
     "paper_module.batch7_demo_take_console_capsule",
     "paper_module.engine_room_generated_projection_drift_gate",
     "paper_module.engine_room_command_run_singleflight",
     "paper_module.engine_room_metabolism_runtime",
     "paper_module.engine_room_bridge_campaign_dag",
     "paper_module.engine_room_annex_knowledge_router",
     "paper_module.engine_room_derived_fact_provider_engine",
     "paper_module.engine_room_egress_self_compliance_gate",
     "paper_module.engine_room_lean_proof_search_lab",
     "paper_module.engine_room_navigation_fitness_benchmark",
     "paper_module.cold_clone_probe",
     "paper_module.first_screen_composition_root",
     "paper_module.batch7_secondary_runtime_capsule",
     "paper_module.microcosm_axiom_substrate"
    ],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Doctrine reference. The compact public rule lattice: principles, axioms, concepts, mechanisms, and paper modules. Doctrine reference rows carry compact labels, synopsis text, typed read/context/source hrefs, and a route matrix that identifies the one body-bearing view.",
    "byte_count": 269,
    "packaging": "reference_page_shell_with_rule_records_carried_once"
   }
  },
  {
   "id": "page:paper-modules",
   "relative_href": "docs/paper-modules.html",
   "path": "docs/paper-modules.html",
   "title": "Paper modules",
   "nav_group": "Reference",
   "nav_label": "Paper modules",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/anti_principles/AP-1.json",
    "microcosm-substrate/anti_principles/AP-10.json",
    "microcosm-substrate/anti_principles/AP-11.json",
    "microcosm-substrate/anti_principles/AP-12.json",
    "microcosm-substrate/anti_principles/AP-13.json",
    "microcosm-substrate/anti_principles/AP-14.json",
    "microcosm-substrate/anti_principles/AP-15.json",
    "microcosm-substrate/anti_principles/AP-16.json",
    "microcosm-substrate/anti_principles/AP-17.json",
    "microcosm-substrate/anti_principles/AP-2.json",
    "microcosm-substrate/anti_principles/AP-3.json",
    "microcosm-substrate/anti_principles/AP-4.json",
    "microcosm-substrate/anti_principles/AP-5.json",
    "microcosm-substrate/anti_principles/AP-6.json",
    "microcosm-substrate/anti_principles/AP-7.json",
    "microcosm-substrate/anti_principles/AP-8.json",
    "microcosm-substrate/anti_principles/AP-9.json",
    "microcosm-substrate/atlas/entry_packet.json",
    "microcosm-substrate/axioms/AX-1.json",
    "microcosm-substrate/axioms/AX-10.json",
    "microcosm-substrate/axioms/AX-11.json",
    "microcosm-substrate/axioms/AX-12.json",
    "microcosm-substrate/axioms/AX-2.json",
    "microcosm-substrate/axioms/AX-3.json",
    "microcosm-substrate/axioms/AX-4.json",
    "microcosm-substrate/axioms/AX-5.json",
    "microcosm-substrate/axioms/AX-6.json",
    "microcosm-substrate/axioms/AX-7.json",
    "microcosm-substrate/axioms/AX-8.json",
    "microcosm-substrate/axioms/AX-9.json",
    "microcosm-substrate/concepts/concept.agent_reliability_and_safety_validator_bundle.json",
    "microcosm-substrate/concepts/concept.architecture_and_navigation_route_contract_bundle.json",
    "microcosm-substrate/concepts/concept.entry_and_reveal_route_readiness_bundle.json",
    "microcosm-substrate/concepts/concept.executable_doctrine_grammar_standard_bundle.json",
    "microcosm-substrate/concepts/concept.first_screen_doctrine_effect_frame.json",
    "microcosm-substrate/concepts/concept.formal_math_and_proof_witness_bundle.json",
    "microcosm-substrate/concepts/concept.import_projection_and_drift_control_bundle.json",
    "microcosm-substrate/concepts/concept.research_and_science_replay_evidence_bundle.json",
    "microcosm-substrate/concepts/concept.standards_meta_diagnostics_bundle.json",
    "microcosm-substrate/concepts/concept.voice_to_doctrine_self_improvement_loop_bundle.json",
    "microcosm-substrate/concepts/concept.work_landing_and_continuity_control_bundle.json",
    "microcosm-substrate/core/doctrine_lattice_coverage.json",
    "microcosm-substrate/core/doctrine_lattice_relations.json",
    "microcosm-substrate/core/mechanism_sources.json",
    "microcosm-substrate/core/paper_module_capsules.json",
    "microcosm-substrate/mechanisms/mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims.json",
    "microcosm-substrate/mechanisms/mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts.json",
    "microcosm-substrate/mechanisms/mechanism.agent_route_observability_runtime.validates_public_route_feedback.json",
    "microcosm-substrate/mechanisms/mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay.json",
    "microcosm-substrate/mechanisms/mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace.json",
    "microcosm-substrate/mechanisms/mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate.json",
    "microcosm-substrate/mechanisms/mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule.json",
    "microcosm-substrate/mechanisms/mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay.json",
    "microcosm-substrate/mechanisms/mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet.json",
    "microcosm-substrate/mechanisms/mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity.json",
    "microcosm-substrate/mechanisms/mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution.json",
    "microcosm-substrate/mechanisms/mechanism.cognitive_operator_registry.validates_public_operator_contract.json",
    "microcosm-substrate/mechanisms/mechanism.cold_clone_probe.validates_public_source_root_bootstrap.json",
    "microcosm-substrate/mechanisms/mechanism.cold_reader_route_map.validates_public_first_run_route_map.json",
    "microcosm-substrate/mechanisms/mechanism.concurrency_mission_control.validates_public_concurrency_mission_control.json",
    "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit.json",
    "microcosm-substrate/mechanisms/mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_demo.validates_public_engine_room_demo.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark.json",
    "microcosm-substrate/mechanisms/mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate.json",
    "microcosm-substrate/mechanisms/mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine.json",
    "microcosm-substrate/mechanisms/mechanism.first_screen_composition_root.validates_public_first_screen_composition_root.json",
    "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution.json",
    "microcosm-substrate/mechanisms/mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_lean_proof_witness.validates_public_lean_witness.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_readiness_gate.validates_public_readiness_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay.json",
    "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog.json",
    "microcosm-substrate/mechanisms/mechanism.lean_std_premise_index.validates_public_lean_std_premise_index.json",
    "microcosm-substrate/mechanisms/mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports.json",
    "microcosm-substrate/mechanisms/mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay.json",
    "microcosm-substrate/mechanisms/mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection.json",
    "microcosm-substrate/mechanisms/mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay.json",
    "microcosm-substrate/mechanisms/mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay.json",
    "microcosm-substrate/mechanisms/mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle.json",
    "microcosm-substrate/mechanisms/mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step.json",
    "microcosm-substrate/mechanisms/mechanism.pattern_binding_contract.validates_public_pattern_bindings.json",
    "microcosm-substrate/mechanisms/mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation.json",
    "microcosm-substrate/mechanisms/mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization.json",
    "microcosm-substrate/mechanisms/mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane.json",
    "microcosm-substrate/mechanisms/mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough.json",
    "microcosm-substrate/mechanisms/mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay.json",
    "microcosm-substrate/mechanisms/mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution.json",
    "microcosm-substrate/mechanisms/mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry.json",
    "microcosm-substrate/mechanisms/mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger.json",
    "microcosm-substrate/mechanisms/mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay.json",
    "microcosm-substrate/mechanisms/mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay.json",
    "microcosm-substrate/mechanisms/mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics.json",
    "microcosm-substrate/mechanisms/mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection.json",
    "microcosm-substrate/mechanisms/mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory.json",
    "microcosm-substrate/mechanisms/mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary.json",
    "microcosm-substrate/mechanisms/mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness.json",
    "microcosm-substrate/mechanisms/mechanism.verifier_lab_kernel.composes_public_formal_math_receipts.json",
    "microcosm-substrate/mechanisms/mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop.json",
    "microcosm-substrate/mechanisms/mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary.json",
    "microcosm-substrate/principles/P-1.json",
    "microcosm-substrate/principles/P-10.json",
    "microcosm-substrate/principles/P-11.json",
    "microcosm-substrate/principles/P-12.json",
    "microcosm-substrate/principles/P-13.json",
    "microcosm-substrate/principles/P-14.json",
    "microcosm-substrate/principles/P-15.json",
    "microcosm-substrate/principles/P-16.json",
    "microcosm-substrate/principles/P-17.json",
    "microcosm-substrate/principles/P-18.json",
    "microcosm-substrate/principles/P-19.json",
    "microcosm-substrate/principles/P-2.json",
    "microcosm-substrate/principles/P-20.json",
    "microcosm-substrate/principles/P-3.json",
    "microcosm-substrate/principles/P-4.json",
    "microcosm-substrate/principles/P-5.json",
    "microcosm-substrate/principles/P-6.json",
    "microcosm-substrate/principles/P-7.json",
    "microcosm-substrate/principles/P-8.json",
    "microcosm-substrate/principles/P-9.json"
   ],
   "content_refs": {
    "paper_module_refs": [
     "paper_module.verifier_lab_kernel",
     "paper_module.navigation_hologram_route_plane",
     "paper_module.agent_route_observability_runtime",
     "paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "paper_module.research_replication_rubric_artifact_replay",
     "paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "paper_module.certificate_kernel_execution_lab",
     "paper_module.corpus_readiness_mathlib_absence_gate",
     "paper_module.pattern_binding_contract",
     "paper_module.bridge_phase_continuity_runtime",
     "paper_module.cognitive_operator_registry",
     "paper_module.agent_closeout_faithfulness_audit",
     "paper_module.cold_reader_route_map",
     "paper_module.proof_diagnostic_evidence_spine",
     "paper_module.proof_derived_governed_mutation_authorization",
     "paper_module.durable_agent_work_landing_replay",
     "paper_module.work_landing_control_spine",
     "paper_module.executable_doctrine_grammar",
     "paper_module.macro_projection_import_protocol",
     "paper_module.mission_transaction_work_spine",
     "paper_module.formal_math_readiness_gate",
     "paper_module.formal_math_lean_proof_witness",
     "paper_module.formal_math_verifier_trace_repair_loop",
     "paper_module.formal_evidence_cell_anchor_resolver",
     "paper_module.formal_math_premise_retrieval",
     "paper_module.lean_std_premise_index",
     "paper_module.world_model_projection_drift_control_room",
     "paper_module.public_reveal_walkthrough",
     "paper_module.standards_meta_diagnostics",
     "paper_module.finance_forecast_evaluation_spine",
     "paper_module.engine_room_demo",
     "paper_module.agent_memory_temporal_conflict_replay",
     "paper_module.agent_monitor_redteam_falsification_replay",
     "paper_module.agent_sabotage_scheming_monitor_replay",
     "paper_module.agent_sandbox_policy_escape_replay",
     "paper_module.belief_state_process_reward_replay",
     "paper_module.sleeper_memory_poisoning_quarantine_replay",
     "paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "paper_module.mcp_tool_authority_replay",
     "paper_module.tactic_portfolio_availability",
     "paper_module.target_shape_tactic_routing",
     "paper_module.ring2_premise_precision_recall",
     "paper_module.mathematical_strategy_atlas",
     "paper_module.verifier_lab_execution_spine",
     "paper_module.bounded_autonomy_campaign_packet",
     "paper_module.computer_use_action_trace_replay",
     "paper_module.concurrency_mission_control",
     "paper_module.doctrine_fact_claim_audit",
     "paper_module.self_ignorance_coverage_ledger",
     "paper_module.tool_server_pressure_inventory",
     "paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "paper_module.spatial_world_model_counterfactual_simulation_replay",
     "paper_module.prediction_oracle_reconciliation",
     "paper_module.provider_context_recipe_budget",
     "paper_module.undeclared_library_prior_classifier",
     "paper_module.voice_to_doctrine_self_improvement_loop",
     "paper_module.routing_anti_patterns_registry",
     "paper_module.batch8_audio_level_rms_port",
     "paper_module.batch8_compliance_pipeline_capsule",
     "paper_module.batch8_policy_engines_capsule",
     "paper_module.batch8_structural_theses_capsule",
     "paper_module.batch8_tools_tail_primitives_capsule",
     "paper_module.batch8_validator_checker_capsule",
     "paper_module.batch12_market_dashboard_read_model_capsule",
     "paper_module.batch12_prediction_market_board_capsule",
     "paper_module.batch12_release_claim_language_gate",
     "paper_module.batch10_cold_eval_honesty_capsule",
     "paper_module.batch10_live_source_drift_capsule",
     "paper_module.batch7_macro_engines_capsule",
     "paper_module.batch9_macro_engines_capsule",
     "paper_module.pattern_assimilation",
     "paper_module.batch10_governance_compilers_capsule",
     "paper_module.batch11_saturation_engines_capsule",
     "paper_module.batch4_proof_authority_runtime",
     "paper_module.batch6_unsurfaced_primitives_capsule",
     "paper_module.engine_room_public_projection_leak_gate",
     "paper_module.batch5_authority_systems_capsule",
     "paper_module.batch7_oracle_sibling_capsule",
     "paper_module.batch7_demo_take_console_capsule",
     "paper_module.engine_room_generated_projection_drift_gate",
     "paper_module.engine_room_command_run_singleflight",
     "paper_module.engine_room_metabolism_runtime",
     "paper_module.engine_room_bridge_campaign_dag",
     "paper_module.engine_room_annex_knowledge_router",
     "paper_module.engine_room_derived_fact_provider_engine",
     "paper_module.engine_room_egress_self_compliance_gate",
     "paper_module.engine_room_lean_proof_search_lab",
     "paper_module.engine_room_navigation_fitness_benchmark",
     "paper_module.cold_clone_probe",
     "paper_module.first_screen_composition_root",
     "paper_module.batch7_secondary_runtime_capsule",
     "paper_module.microcosm_axiom_substrate"
    ],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Paper modules. The long-form write-ups behind the components: one document per mechanism, with how it is checked, its realness rungs, and where its scope stops. Component cards embed the same write-ups; this page is the whole collection in one place. The full paper-module reader text is carried once in visible_text_index.logical_records.paper_modules; diagrams are carried as compressed diagram assets.",
    "byte_count": 404,
    "packaging": "reference_page_shell_with_paper_module_records_and_compressed_diagrams"
   }
  },
  {
   "id": "page:evidence",
   "relative_href": "docs/evidence.html",
   "path": "docs/evidence.html",
   "title": "What the pass proves",
   "nav_group": "Reference",
   "nav_label": "What the pass proves",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/core/organ_registry.json",
    "microcosm-substrate/core/organ_atlas.json"
   ],
   "content_refs": {
    "evidence_profile_refs": [
     "evidence_profile:anti_principle:AP-1",
     "evidence_profile:anti_principle:AP-10",
     "evidence_profile:anti_principle:AP-11",
     "evidence_profile:anti_principle:AP-12",
     "evidence_profile:anti_principle:AP-13",
     "evidence_profile:anti_principle:AP-14",
     "evidence_profile:anti_principle:AP-15",
     "evidence_profile:anti_principle:AP-16",
     "evidence_profile:anti_principle:AP-17",
     "evidence_profile:anti_principle:AP-2",
     "evidence_profile:anti_principle:AP-3",
     "evidence_profile:anti_principle:AP-4",
     "evidence_profile:anti_principle:AP-5",
     "evidence_profile:anti_principle:AP-6",
     "evidence_profile:anti_principle:AP-7",
     "evidence_profile:anti_principle:AP-8",
     "evidence_profile:anti_principle:AP-9",
     "evidence_profile:axiom:AX-1",
     "evidence_profile:axiom:AX-10",
     "evidence_profile:axiom:AX-11",
     "evidence_profile:axiom:AX-12",
     "evidence_profile:axiom:AX-2",
     "evidence_profile:axiom:AX-3",
     "evidence_profile:axiom:AX-4",
     "evidence_profile:axiom:AX-5",
     "evidence_profile:axiom:AX-6",
     "evidence_profile:axiom:AX-7",
     "evidence_profile:axiom:AX-8",
     "evidence_profile:axiom:AX-9",
     "evidence_profile:component:agent_benchmark_integrity_anti_gaming_replay",
     "evidence_profile:component:agent_closeout_faithfulness_audit",
     "evidence_profile:component:agent_memory_temporal_conflict_replay",
     "evidence_profile:component:agent_monitor_redteam_falsification_replay",
     "evidence_profile:component:agent_route_observability_runtime",
     "evidence_profile:component:agent_sabotage_scheming_monitor_replay",
     "evidence_profile:component:agent_sandbox_policy_escape_replay",
     "evidence_profile:component:agentic_vulnerability_discovery_patch_proof_replay",
     "evidence_profile:component:batch10_cold_eval_honesty_capsule",
     "evidence_profile:component:batch10_governance_compilers_capsule",
     "evidence_profile:component:batch10_live_source_drift_capsule",
     "evidence_profile:component:batch11_saturation_engines_capsule",
     "evidence_profile:component:batch12_market_dashboard_read_model_capsule",
     "evidence_profile:component:batch12_prediction_market_board_capsule",
     "evidence_profile:component:batch12_release_claim_language_gate",
     "evidence_profile:component:batch4_proof_authority_runtime",
     "evidence_profile:component:batch5_authority_systems_capsule",
     "evidence_profile:component:batch6_unsurfaced_primitives_capsule",
     "evidence_profile:component:batch7_demo_take_console_capsule",
     "evidence_profile:component:batch7_macro_engines_capsule",
     "evidence_profile:component:batch7_oracle_sibling_capsule",
     "evidence_profile:component:batch7_secondary_runtime_capsule",
     "evidence_profile:component:batch8_audio_level_rms_port",
     "evidence_profile:component:batch8_compliance_pipeline_capsule",
     "evidence_profile:component:batch8_policy_engines_capsule",
     "evidence_profile:component:batch8_structural_theses_capsule",
     "evidence_profile:component:batch8_tools_tail_primitives_capsule",
     "evidence_profile:component:batch8_validator_checker_capsule",
     "evidence_profile:component:batch9_macro_engines_capsule",
     "evidence_profile:component:belief_state_process_reward_replay",
     "evidence_profile:component:bounded_autonomy_campaign_packet",
     "evidence_profile:component:bridge_phase_continuity_runtime",
     "evidence_profile:component:certificate_kernel_execution_lab",
     "evidence_profile:component:cognitive_operator_registry",
     "evidence_profile:component:cold_reader_route_map",
     "evidence_profile:component:concurrency_mission_control",
     "evidence_profile:component:corpus_readiness_mathlib_absence_gate",
     "evidence_profile:component:doctrine_fact_claim_audit",
     "evidence_profile:component:durable_agent_work_landing_replay",
     "evidence_profile:component:engine_room_demo",
     "evidence_profile:component:executable_doctrine_grammar",
     "evidence_profile:component:finance_forecast_evaluation_spine",
     "evidence_profile:component:formal_evidence_cell_anchor_resolver",
     "evidence_profile:component:formal_math_lean_proof_witness",
     "evidence_profile:component:formal_math_premise_retrieval",
     "evidence_profile:component:formal_math_readiness_gate",
     "evidence_profile:component:formal_math_verifier_trace_repair_loop",
     "evidence_profile:component:indirect_prompt_injection_information_flow_policy_replay",
     "evidence_profile:component:lean_std_premise_index",
     "evidence_profile:component:macro_projection_import_protocol",
     "evidence_profile:component:materials_chemistry_closed_loop_lab_safety_replay",
     "evidence_profile:component:mathematical_strategy_atlas_hypothesis_scorer",
     "evidence_profile:component:mcp_tool_authority_replay",
     "evidence_profile:component:mechanistic_interpretability_circuit_attribution_replay",
     "evidence_profile:component:mission_transaction_work_spine",
     "evidence_profile:component:navigation_hologram_route_plane",
     "evidence_profile:component:pattern_assimilation_step",
     "evidence_profile:component:pattern_binding_contract",
     "evidence_profile:component:prediction_oracle_reconciliation",
     "evidence_profile:component:proof_derived_governed_mutation_authorization",
     "evidence_profile:component:proof_diagnostic_evidence_spine",
     "evidence_profile:component:provider_context_recipe_budget_policy",
     "evidence_profile:component:public_reveal_walkthrough",
     "evidence_profile:component:research_replication_rubric_artifact_replay",
     "evidence_profile:component:ring2_premise_retrieval_precision_recall_harness",
     "evidence_profile:component:routing_anti_patterns_registry",
     "evidence_profile:component:self_ignorance_coverage_ledger",
     "evidence_profile:component:sleeper_memory_poisoning_quarantine_replay",
     "evidence_profile:component:spatial_world_model_counterfactual_simulation_replay",
     "evidence_profile:component:standards_meta_diagnostics",
     "evidence_profile:component:tactic_portfolio_availability_probe",
     "evidence_profile:component:target_shape_tactic_routing_gate",
     "evidence_profile:component:tool_server_pressure_inventory",
     "evidence_profile:component:undeclared_library_prior_symbol_classifier",
     "evidence_profile:component:verifier_lab_execution_spine",
     "evidence_profile:component:verifier_lab_kernel",
     "evidence_profile:component:voice_to_doctrine_self_improvement_loop",
     "evidence_profile:component:world_model_projection_drift_control_room",
     "evidence_profile:concept:concept.agent_reliability_and_safety_validator_bundle",
     "evidence_profile:concept:concept.architecture_and_navigation_route_contract_bundle",
     "evidence_profile:concept:concept.entry_and_reveal_route_readiness_bundle",
     "evidence_profile:concept:concept.executable_doctrine_grammar_standard_bundle",
     "evidence_profile:concept:concept.first_screen_doctrine_effect_frame",
     "evidence_profile:concept:concept.formal_math_and_proof_witness_bundle",
     "evidence_profile:concept:concept.import_projection_and_drift_control_bundle",
     "evidence_profile:concept:concept.research_and_science_replay_evidence_bundle",
     "evidence_profile:concept:concept.standards_meta_diagnostics_bundle",
     "evidence_profile:concept:concept.voice_to_doctrine_self_improvement_loop_bundle",
     "evidence_profile:concept:concept.work_landing_and_continuity_control_bundle",
     "evidence_profile:coverage_gap:component_relation_fill_gap",
     "evidence_profile:coverage_gap:mechanism_relation_fill_gap",
     "evidence_profile:mechanism:mechanism.agent_benchmark_integrity_anti_gaming_replay.validates_public_benchmark_integrity_replay",
     "evidence_profile:mechanism:mechanism.agent_closeout_faithfulness_audit.validates_closeout_evidence_claims",
     "evidence_profile:mechanism:mechanism.agent_memory_temporal_conflict_replay.validates_public_memory_conflict_replay",
     "evidence_profile:mechanism:mechanism.agent_monitor_redteam_falsification_replay.validates_public_monitor_verdict_receipts",
     "evidence_profile:mechanism:mechanism.agent_route_observability_runtime.validates_public_route_feedback",
     "evidence_profile:mechanism:mechanism.agent_sabotage_scheming_monitor_replay.validates_public_sabotage_scheming_monitor_replay",
     "evidence_profile:mechanism:mechanism.agent_sandbox_policy_escape_replay.validates_public_sandbox_policy_trace",
     "evidence_profile:mechanism:mechanism.agentic_vulnerability_discovery_patch_proof_replay.validates_public_agentic_vulnerability_patch_proof_replay",
     "evidence_profile:mechanism:mechanism.batch10_cold_eval_honesty_capsule.validates_public_cold_eval_honesty_capsule",
     "evidence_profile:mechanism:mechanism.batch10_governance_compilers_capsule.validates_public_governance_compilers_capsule",
     "evidence_profile:mechanism:mechanism.batch10_live_source_drift_capsule.validates_public_live_source_drift_capsule",
     "evidence_profile:mechanism:mechanism.batch11_saturation_engines_capsule.validates_public_saturation_engines_capsule",
     "evidence_profile:mechanism:mechanism.batch12_market_dashboard_read_model_capsule.validates_public_market_dashboard_read_model_capsule",
     "evidence_profile:mechanism:mechanism.batch12_prediction_market_board_capsule.validates_public_prediction_market_board_capsule",
     "evidence_profile:mechanism:mechanism.batch12_release_claim_language_gate.validates_public_release_claim_language_gate",
     "evidence_profile:mechanism:mechanism.batch4_proof_authority_runtime.validates_public_proof_authority_runtime_capsule",
     "evidence_profile:mechanism:mechanism.batch5_authority_systems_capsule.validates_public_authority_systems_capsule",
     "evidence_profile:mechanism:mechanism.batch6_unsurfaced_primitives_capsule.validates_public_unsurfaced_primitives_capsule",
     "evidence_profile:mechanism:mechanism.batch7_demo_take_console_capsule.validates_public_demo_take_console_capsule",
     "evidence_profile:mechanism:mechanism.batch7_macro_engines_capsule.validates_public_macro_engines_capsule",
     "evidence_profile:mechanism:mechanism.batch7_oracle_sibling_capsule.validates_public_oracle_sibling_capsule",
     "evidence_profile:mechanism:mechanism.batch7_secondary_runtime_capsule.validates_public_secondary_runtime_capsule",
     "evidence_profile:mechanism:mechanism.batch8_audio_level_rms_port.validates_public_audio_level_rms_port",
     "evidence_profile:mechanism:mechanism.batch8_compliance_pipeline_capsule.validates_public_compliance_pipeline_capsule",
     "evidence_profile:mechanism:mechanism.batch8_policy_engines_capsule.validates_public_policy_engines_capsule",
     "evidence_profile:mechanism:mechanism.batch8_structural_theses_capsule.validates_public_structural_theses_capsule",
     "evidence_profile:mechanism:mechanism.batch8_tools_tail_primitives_capsule.validates_public_tools_tail_primitives_capsule",
     "evidence_profile:mechanism:mechanism.batch8_validator_checker_capsule.validates_public_validator_checker_capsule",
     "evidence_profile:mechanism:mechanism.batch9_macro_engines_capsule.validates_public_macro_engines_capsule",
     "evidence_profile:mechanism:mechanism.belief_state_process_reward_replay.validates_public_belief_state_process_reward_replay",
     "evidence_profile:mechanism:mechanism.bounded_autonomy_campaign_packet.validates_public_bounded_autonomy_campaign_packet",
     "evidence_profile:mechanism:mechanism.bridge_phase_continuity_runtime.validates_synthetic_bridge_continuity",
     "evidence_profile:mechanism:mechanism.certificate_kernel_execution_lab.validates_public_certificate_kernel_execution",
     "evidence_profile:mechanism:mechanism.cognitive_operator_registry.validates_public_operator_contract",
     "evidence_profile:mechanism:mechanism.cold_clone_probe.validates_public_source_root_bootstrap",
     "evidence_profile:mechanism:mechanism.cold_reader_route_map.validates_public_first_run_route_map",
     "evidence_profile:mechanism:mechanism.concurrency_mission_control.validates_public_concurrency_mission_control",
     "evidence_profile:mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_corpus_readiness_boundary",
     "evidence_profile:mechanism:mechanism.corpus_readiness_mathlib_absence_gate.validates_public_mathlib_absence_boundary",
     "evidence_profile:mechanism:mechanism.doctrine_fact_claim_audit.validates_public_doctrine_fact_claim_audit",
     "evidence_profile:mechanism:mechanism.durable_agent_work_landing_replay.validates_public_work_landing_replay_contract",
     "evidence_profile:mechanism:mechanism.engine_room_annex_knowledge_router.validates_public_annex_knowledge_router",
     "evidence_profile:mechanism:mechanism.engine_room_command_run_singleflight.validates_public_command_run_singleflight",
     "evidence_profile:mechanism:mechanism.engine_room_demo.validates_public_engine_room_demo",
     "evidence_profile:mechanism:mechanism.engine_room_derived_fact_provider_engine.validates_public_derived_fact_provider_engine",
     "evidence_profile:mechanism:mechanism.engine_room_egress_self_compliance_gate.validates_public_egress_self_compliance_gate",
     "evidence_profile:mechanism:mechanism.engine_room_generated_projection_drift_gate.validates_public_generated_projection_drift_gate",
     "evidence_profile:mechanism:mechanism.engine_room_lean_proof_search_lab.validates_public_lean_proof_search_lab",
     "evidence_profile:mechanism:mechanism.engine_room_navigation_fitness_benchmark.validates_public_navigation_fitness_benchmark",
     "evidence_profile:mechanism:mechanism.engine_room_public_projection_leak_gate.validates_public_projection_leak_gate",
     "evidence_profile:mechanism:mechanism.executable_doctrine_grammar.validates_public_doctrine_grammar_bundle",
     "evidence_profile:mechanism:mechanism.finance_forecast_evaluation_spine.validates_public_finance_forecast_evaluation_spine",
     "evidence_profile:mechanism:mechanism.first_screen_composition_root.validates_public_first_screen_composition_root",
     "evidence_profile:mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchor_resolution",
     "evidence_profile:mechanism:mechanism.formal_evidence_cell_anchor_resolver.validates_public_evidence_cell_anchors",
     "evidence_profile:mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_lake_witness",
     "evidence_profile:mechanism:mechanism.formal_math_lean_proof_witness.validates_public_lean_witness",
     "evidence_profile:mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_projection",
     "evidence_profile:mechanism:mechanism.formal_math_premise_retrieval.validates_public_premise_retrieval_slice",
     "evidence_profile:mechanism:mechanism.formal_math_readiness_gate.validates_public_formal_math_readiness_bundle",
     "evidence_profile:mechanism:mechanism.formal_math_readiness_gate.validates_public_readiness_boundary",
     "evidence_profile:mechanism:mechanism.formal_math_verifier_trace_repair_loop.validates_public_verifier_trace_repair_bundle",
     "evidence_profile:mechanism:mechanism.indirect_prompt_injection_information_flow_policy_replay.validates_public_indirect_prompt_injection_information_flow_policy_replay",
     "evidence_profile:mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_catalog",
     "evidence_profile:mechanism:mechanism.lean_std_premise_index.validates_public_lean_std_premise_index",
     "evidence_profile:mechanism:mechanism.macro_projection_import_protocol.validates_public_macro_projection_imports",
     "evidence_profile:mechanism:mechanism.materials_chemistry_closed_loop_lab_safety_replay.validates_public_materials_lab_safety_replay",
     "evidence_profile:mechanism:mechanism.mathematical_strategy_atlas_hypothesis_scorer.validates_public_strategy_hypothesis_projection",
     "evidence_profile:mechanism:mechanism.mcp_tool_authority_replay.validates_public_mcp_tool_authority_replay",
     "evidence_profile:mechanism:mechanism.mechanistic_interpretability_circuit_attribution_replay.validates_public_mechanistic_interpretability_circuit_attribution_replay",
     "evidence_profile:mechanism:mechanism.microcosm_axiom_substrate.validates_public_axiom_support_boundary",
     "evidence_profile:mechanism:mechanism.mission_transaction_work_spine.validates_public_mission_transaction_bundle",
     "evidence_profile:mechanism:mechanism.navigation_hologram_route_plane.validates_public_route_plane_bundle",
     "evidence_profile:mechanism:mechanism.pattern_assimilation_step.validates_public_pattern_assimilation_step",
     "evidence_profile:mechanism:mechanism.pattern_binding_contract.validates_public_pattern_bindings",
     "evidence_profile:mechanism:mechanism.prediction_oracle_reconciliation.validates_public_prediction_oracle_reconciliation",
     "evidence_profile:mechanism:mechanism.proof_derived_governed_mutation_authorization.validates_synthetic_governed_mutation_authorization",
     "evidence_profile:mechanism:mechanism.proof_diagnostic_evidence_spine.validates_ring2_diagnostic_evidence_membrane",
     "evidence_profile:mechanism:mechanism.provider_context_recipe_budget_policy.validates_public_context_budget_boundary",
     "evidence_profile:mechanism:mechanism.public_reveal_walkthrough.validates_public_reveal_walkthrough",
     "evidence_profile:mechanism:mechanism.research_replication_rubric_artifact_replay.validates_public_research_replication_replay",
     "evidence_profile:mechanism:mechanism.ring2_premise_retrieval_precision_recall_harness.validates_public_premise_retrieval_attribution",
     "evidence_profile:mechanism:mechanism.routing_anti_patterns_registry.validates_public_routing_anti_patterns_registry",
     "evidence_profile:mechanism:mechanism.self_ignorance_coverage_ledger.validates_public_self_ignorance_coverage_ledger",
     "evidence_profile:mechanism:mechanism.sleeper_memory_poisoning_quarantine_replay.validates_public_sleeper_memory_poisoning_quarantine_replay",
     "evidence_profile:mechanism:mechanism.spatial_world_model_counterfactual_simulation_replay.validates_public_spatial_world_model_counterfactual_simulation_replay",
     "evidence_profile:mechanism:mechanism.standards_meta_diagnostics.validates_public_standards_meta_diagnostics",
     "evidence_profile:mechanism:mechanism.tactic_portfolio_availability_probe.validates_public_tactic_availability_projection",
     "evidence_profile:mechanism:mechanism.target_shape_tactic_routing_gate.validates_public_tactic_routing_boundary",
     "evidence_profile:mechanism:mechanism.tool_server_pressure_inventory.validates_public_tool_server_pressure_inventory",
     "evidence_profile:mechanism:mechanism.undeclared_library_prior_symbol_classifier.validates_public_symbol_boundary",
     "evidence_profile:mechanism:mechanism.verifier_lab_execution_spine.validates_public_verifier_transition_witness",
     "evidence_profile:mechanism:mechanism.verifier_lab_kernel.composes_public_formal_math_receipts",
     "evidence_profile:mechanism:mechanism.voice_to_doctrine_self_improvement_loop.validates_public_voice_to_doctrine_self_improvement_loop",
     "evidence_profile:mechanism:mechanism.world_model_projection_drift_control_room.validates_public_projection_drift_control_boundary",
     "evidence_profile:paper_module:paper_module.agent_benchmark_integrity_anti_gaming_replay",
     "evidence_profile:paper_module:paper_module.agent_closeout_faithfulness_audit",
     "evidence_profile:paper_module:paper_module.agent_memory_temporal_conflict_replay",
     "evidence_profile:paper_module:paper_module.agent_monitor_redteam_falsification_replay",
     "evidence_profile:paper_module:paper_module.agent_route_observability_runtime",
     "evidence_profile:paper_module:paper_module.agent_sabotage_scheming_monitor_replay",
     "evidence_profile:paper_module:paper_module.agent_sandbox_policy_escape_replay",
     "evidence_profile:paper_module:paper_module.agentic_vulnerability_discovery_patch_proof_replay",
     "evidence_profile:paper_module:paper_module.batch10_cold_eval_honesty_capsule",
     "evidence_profile:paper_module:paper_module.batch10_governance_compilers_capsule",
     "evidence_profile:paper_module:paper_module.batch10_live_source_drift_capsule",
     "evidence_profile:paper_module:paper_module.batch11_saturation_engines_capsule",
     "evidence_profile:paper_module:paper_module.batch12_market_dashboard_read_model_capsule",
     "evidence_profile:paper_module:paper_module.batch12_prediction_market_board_capsule",
     "evidence_profile:paper_module:paper_module.batch12_release_claim_language_gate",
     "evidence_profile:paper_module:paper_module.batch4_proof_authority_runtime",
     "evidence_profile:paper_module:paper_module.batch5_authority_systems_capsule",
     "evidence_profile:paper_module:paper_module.batch6_unsurfaced_primitives_capsule",
     "evidence_profile:paper_module:paper_module.batch7_demo_take_console_capsule",
     "evidence_profile:paper_module:paper_module.batch7_macro_engines_capsule",
     "evidence_profile:paper_module:paper_module.batch7_oracle_sibling_capsule",
     "evidence_profile:paper_module:paper_module.batch7_secondary_runtime_capsule",
     "evidence_profile:paper_module:paper_module.batch8_audio_level_rms_port",
     "evidence_profile:paper_module:paper_module.batch8_compliance_pipeline_capsule",
     "evidence_profile:paper_module:paper_module.batch8_policy_engines_capsule",
     "evidence_profile:paper_module:paper_module.batch8_structural_theses_capsule",
     "evidence_profile:paper_module:paper_module.batch8_tools_tail_primitives_capsule",
     "evidence_profile:paper_module:paper_module.batch8_validator_checker_capsule",
     "evidence_profile:paper_module:paper_module.batch9_macro_engines_capsule",
     "evidence_profile:paper_module:paper_module.belief_state_process_reward_replay",
     "evidence_profile:paper_module:paper_module.bounded_autonomy_campaign_packet",
     "evidence_profile:paper_module:paper_module.bridge_phase_continuity_runtime",
     "evidence_profile:paper_module:paper_module.certificate_kernel_execution_lab",
     "evidence_profile:paper_module:paper_module.cognitive_operator_registry",
     "evidence_profile:paper_module:paper_module.cold_clone_probe",
     "evidence_profile:paper_module:paper_module.cold_reader_route_map",
     "evidence_profile:paper_module:paper_module.computer_use_action_trace_replay",
     "evidence_profile:paper_module:paper_module.concurrency_mission_control",
     "evidence_profile:paper_module:paper_module.corpus_readiness_mathlib_absence_gate",
     "evidence_profile:paper_module:paper_module.doctrine_fact_claim_audit",
     "evidence_profile:paper_module:paper_module.durable_agent_work_landing_replay",
     "evidence_profile:paper_module:paper_module.engine_room_annex_knowledge_router",
     "evidence_profile:paper_module:paper_module.engine_room_bridge_campaign_dag",
     "evidence_profile:paper_module:paper_module.engine_room_command_run_singleflight",
     "evidence_profile:paper_module:paper_module.engine_room_demo",
     "evidence_profile:paper_module:paper_module.engine_room_derived_fact_provider_engine",
     "evidence_profile:paper_module:paper_module.engine_room_egress_self_compliance_gate",
     "evidence_profile:paper_module:paper_module.engine_room_generated_projection_drift_gate",
     "evidence_profile:paper_module:paper_module.engine_room_lean_proof_search_lab",
     "evidence_profile:paper_module:paper_module.engine_room_metabolism_runtime",
     "evidence_profile:paper_module:paper_module.engine_room_navigation_fitness_benchmark",
     "evidence_profile:paper_module:paper_module.engine_room_public_projection_leak_gate",
     "evidence_profile:paper_module:paper_module.executable_doctrine_grammar",
     "evidence_profile:paper_module:paper_module.finance_forecast_evaluation_spine",
     "evidence_profile:paper_module:paper_module.first_screen_composition_root",
     "evidence_profile:paper_module:paper_module.formal_evidence_cell_anchor_resolver",
     "evidence_profile:paper_module:paper_module.formal_math_lean_proof_witness",
     "evidence_profile:paper_module:paper_module.formal_math_premise_retrieval",
     "evidence_profile:paper_module:paper_module.formal_math_readiness_gate",
     "evidence_profile:paper_module:paper_module.formal_math_verifier_trace_repair_loop",
     "evidence_profile:paper_module:paper_module.indirect_prompt_injection_information_flow_policy_replay",
     "evidence_profile:paper_module:paper_module.lean_std_premise_index",
     "evidence_profile:paper_module:paper_module.macro_projection_import_protocol",
     "evidence_profile:paper_module:paper_module.materials_chemistry_closed_loop_lab_safety_replay",
     "evidence_profile:paper_module:paper_module.mathematical_strategy_atlas",
     "evidence_profile:paper_module:paper_module.mcp_tool_authority_replay",
     "evidence_profile:paper_module:paper_module.mechanistic_interpretability_circuit_attribution_replay",
     "evidence_profile:paper_module:paper_module.microcosm_axiom_substrate",
     "evidence_profile:paper_module:paper_module.mission_transaction_work_spine",
     "evidence_profile:paper_module:paper_module.navigation_hologram_route_plane",
     "evidence_profile:paper_module:paper_module.pattern_assimilation",
     "evidence_profile:paper_module:paper_module.pattern_binding_contract",
     "evidence_profile:paper_module:paper_module.prediction_oracle_reconciliation",
     "evidence_profile:paper_module:paper_module.proof_derived_governed_mutation_authorization",
     "evidence_profile:paper_module:paper_module.proof_diagnostic_evidence_spine",
     "evidence_profile:paper_module:paper_module.provider_context_recipe_budget",
     "evidence_profile:paper_module:paper_module.public_reveal_walkthrough",
     "evidence_profile:paper_module:paper_module.research_replication_rubric_artifact_replay",
     "evidence_profile:paper_module:paper_module.ring2_premise_precision_recall",
     "evidence_profile:paper_module:paper_module.routing_anti_patterns_registry",
     "evidence_profile:paper_module:paper_module.self_ignorance_coverage_ledger",
     "evidence_profile:paper_module:paper_module.sleeper_memory_poisoning_quarantine_replay",
     "evidence_profile:paper_module:paper_module.spatial_world_model_counterfactual_simulation_replay",
     "evidence_profile:paper_module:paper_module.standards_meta_diagnostics",
     "evidence_profile:paper_module:paper_module.tactic_portfolio_availability",
     "evidence_profile:paper_module:paper_module.target_shape_tactic_routing",
     "evidence_profile:paper_module:paper_module.tool_server_pressure_inventory",
     "evidence_profile:paper_module:paper_module.undeclared_library_prior_classifier",
     "evidence_profile:paper_module:paper_module.verifier_lab_execution_spine",
     "evidence_profile:paper_module:paper_module.verifier_lab_kernel",
     "evidence_profile:paper_module:paper_module.voice_to_doctrine_self_improvement_loop",
     "evidence_profile:paper_module:paper_module.work_landing_control_spine",
     "evidence_profile:paper_module:paper_module.world_model_projection_drift_control_room",
     "evidence_profile:principle:P-1",
     "evidence_profile:principle:P-10",
     "evidence_profile:principle:P-11",
     "evidence_profile:principle:P-12",
     "evidence_profile:principle:P-13",
     "evidence_profile:principle:P-14",
     "evidence_profile:principle:P-15",
     "evidence_profile:principle:P-16",
     "evidence_profile:principle:P-17",
     "evidence_profile:principle:P-18",
     "evidence_profile:principle:P-19",
     "evidence_profile:principle:P-2",
     "evidence_profile:principle:P-20",
     "evidence_profile:principle:P-3",
     "evidence_profile:principle:P-4",
     "evidence_profile:principle:P-5",
     "evidence_profile:principle:P-6",
     "evidence_profile:principle:P-7",
     "evidence_profile:principle:P-8",
     "evidence_profile:principle:P-9"
    ],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Evaluate\n\n### Evidence & authority\n\nThe 1-5 rank measures verdict independence: how much the check can fail on its own, from a 1 where the fixture hands over the answer to a 5 where the harness derives the verdict across the whole declared contract and can fail with no fixture echo. It does not measure how heavy the machinery is, how much real tooling runs, or how mature the component is.\n\nEvery one of the 78 components declares how it is backed: an evidence class and a strength rank from 1 to 5. The rank measures one thing only, verdict independence, which is how much the check can fail on its own rather than echoing an answer the fixture already supplied. A 1 means the fixture hands over the verdict and the component checks its shape. A 5 means the harness derives the verdict across the component's whole declared contract and can fail with nothing fed to it. The rank is not a measure of how much machinery runs or how mature a component is, so read the ordering carefully: a component that runs a real external tool over a deliberately small scope can sit at 4 while a contract validator with no external tool sits at 5. The classes below are ordered by how many components carry them, and each says plainly what it checks and what it does not.\n\nA class and a rank describe how a component's _own public contract and fixtures_ are checked, not whole-system correctness, live freshness, or anything past the component's stated scope. Each component card's \u201cScope limit\u201d line holds that boundary.\n\n#### Why these modes\n\nMicrocosm is the public release of a larger working system, and the evidence classes are the release lanes components took to get here. A verified source import carries real code across under content-digest checks. Computed projections and bounded replays exercise that code over public fixtures, where private data and live services cannot follow. Contract validators publish the checks themselves, so they can fail in public. External tool runs close the loop with real machinery, such as Lean and finance statistics code, where a real tool fits a bounded public form. A release where every component ran live external tools would need the live system; this one shows the mechanism, the code, and the check in their inspectable forms instead. The class records the lane a component took, not a quality tier.\n\nrank 5 \u00b7 39 rank 4 \u00b7 12 rank 3 \u00b7 27\n\nIf you are wondering why a Contract validator (5) outranks a component that compiles Lean or runs real statistics (4): the rank scores verdict independence, not engineering weight. An External tool run does invoke the real tool, but on this public slice it claims only a bounded witness, the tool's return code plus a few output checks over a small scope, so it is capped at 4. A Contract validator earns 5 because the harness derives the verdict over the component's whole declared contract, with no fixture-supplied answer to lean on. The same ordering holds down the scale: a validator with no external tool can outrank one that runs code when it checks more of its own contract unaided. Components that genuinely run external tools are flagged separately below.\n\n##### Components that actually run things Runs real tools\n\nA 4 here often means more machinery, not less. These components execute a real tool or runtime: they compile Lean through Lake, run forecast-evaluation statistics over market-shaped fixtures, or step a small NumPy model forward. They are capped at 4 because each claims only a bounded witness over a small scope, never a general proof. Look for the Runs real tools marker on a component to spot them.\n\n#### Computed projection (27)\n\nA deterministic projection verified by recomputing it from source rather than by a live run; negative cases are policy checks, not real-world validation. Rank 3: the code computes the result, but failure coverage is partial.\n\n[Agent Benchmark Integrity Anti Gaming Replay 3/5](docs/components.html#component-agent_benchmark_integrity_anti_gaming_replay) [Agent Memory Temporal Conflict Replay 3/5](docs/components.html#component-agent_memory_temporal_conflict_replay) [Agent Monitor Redteam Falsification Replay 3/5](docs/components.html#component-agent_monitor_redteam_falsification_replay) [Agent Sabotage Scheming Monitor Replay 3/5](docs/components.html#component-agent_sabotage_scheming_monitor_replay) [Agent Sandbox Policy Escape Replay 3/5](docs/components.html#component-agent_sandbox_policy_escape_replay) [Agentic Vulnerability Discovery Patch Proof Replay 3/5](docs/components.html#component-agentic_vulnerability_discovery_patch_proof_replay) [Audio Level RMS Port 3/5](docs/components.html#component-batch8_audio_level_rms_port) [Belief State Process Reward Replay 3/5](docs/components.html#component-belief_state_process_reward_replay) [Compliance Pipeline Bundle 3/5](docs/components.html#component-batch8_compliance_pipeline_capsule) [Formal Evidence Cell Anchor Resolver 3/5](docs/components.html#component-formal_evidence_cell_anchor_resolver) [Formal Math Premise Retrieval 3/5](docs/components.html#component-formal_math_premise_retrieval) [Formal Math Readiness Gate 3/5](docs/components.html#component-formal_math_readiness_gate) [Formal Math Verifier Trace Repair Loop 3/5](docs/components.html#component-formal_math_verifier_trace_repair_loop) [Indirect Prompt Injection Information Flow Policy Replay 3/5](docs/components.html#component-indirect_prompt_injection_information_flow_policy_replay) [Lean Std Premise Index 3/5](docs/components.html#component-lean_std_premise_index) [MCP Tool Authority Replay 3/5](docs/components.html#component-mcp_tool_authority_replay) [Materials Chemistry Closed Loop Lab Safety Replay 3/5](docs/components.html#component-materials_chemistry_closed_loop_lab_safety_replay) [Mathematical Strategy Atlas Hypothesis Scorer 3/5](docs/components.html#component-mathematical_strategy_atlas_hypothesis_scorer) [Prediction Oracle Reconciliation 3/5](docs/components.html#component-prediction_oracle_reconciliation) [Proof Diagnostic Evidence Spine 3/5](docs/components.html#component-proof_diagnostic_evidence_spine) [Research Replication Rubric Artifact Replay 3/5](docs/components.html#component-research_replication_rubric_artifact_replay) [Ring2 Premise Retrieval Precision Recall Harness 3/5](docs/components.html#component-ring2_premise_retrieval_precision_recall_harness) [Self Ignorance Coverage Ledger 3/5](docs/components.html#component-self_ignorance_coverage_ledger) [Sleeper Memory Poisoning Quarantine Replay 3/5](docs/components.html#component-sleeper_memory_poisoning_quarantine_replay) [Tactic Portfolio Availability Probe 3/5](docs/components.html#component-tactic_portfolio_availability_probe) [Target Shape Tactic Routing Gate 3/5](docs/components.html#component-target_shape_tactic_routing_gate) [Undeclared Library Prior Symbol Classifier 3/5](docs/components.html#component-undeclared_library_prior_symbol_classifier)\n\n#### Verified source import (21)\n\nA public source body is copied and validated against its origin byte for byte; the check fails on a missing target, a placeholder digest, an unverified body, or a launch or private-equivalence overclaim. Rank 5: a fully independent provenance verdict.\n\n[Authority Systems Source Bundle 5/5](docs/components.html#component-batch5_authority_systems_capsule) [Backend & Governance Engines Bundle 5/5](docs/components.html#component-batch9_macro_engines_capsule) [Cold Evaluation Honesty Bundle 5/5](docs/components.html#component-batch10_cold_eval_honesty_capsule) [Concurrency Mission Control 5/5](docs/components.html#component-concurrency_mission_control) [Demo Take Console Source Bundle 5/5](docs/components.html#component-batch7_demo_take_console_capsule) [Governance & Compiler Mechanisms Bundle 5/5](docs/components.html#component-batch10_governance_compilers_capsule) [Live Source Drift Bundle 5/5](docs/components.html#component-batch10_live_source_drift_capsule) [Market Dashboard Read-Model Bundle 5/5](docs/components.html#component-batch12_market_dashboard_read_model_capsule) [Oracle Sibling Source Bundle 5/5](docs/components.html#component-batch7_oracle_sibling_capsule) [Policy Engines Bundle 5/5](docs/components.html#component-batch8_policy_engines_capsule) [Prediction Market Board Bundle 5/5](docs/components.html#component-batch12_prediction_market_board_capsule) [Proof / Control / Runtime Import Bundle 5/5](docs/components.html#component-batch4_proof_authority_runtime) [Release Public Wording Gate 5/5](docs/components.html#component-batch12_release_claim_language_gate) [Saturation Engines Bundle 5/5](docs/components.html#component-batch11_saturation_engines_capsule) [Secondary Runtime Source Bundle 5/5](docs/components.html#component-batch7_secondary_runtime_capsule) [Source Projection Import Protocol 5/5](docs/components.html#component-macro_projection_import_protocol) [Structural Theses Finance Bundle 5/5](docs/components.html#component-batch8_structural_theses_capsule) [Tools-Tail Primitives Bundle 5/5](docs/components.html#component-batch8_tools_tail_primitives_capsule) [Trace, Code-Map & Scheduling Engines Bundle 5/5](docs/components.html#component-batch7_macro_engines_capsule) [Unsurfaced Source Primitives Bundle 5/5](docs/components.html#component-batch6_unsurfaced_primitives_capsule) [Validator Checker Bundle 5/5](docs/components.html#component-batch8_validator_checker_capsule)\n\n#### Contract validator (20)\n\nThe harness derives the verdict over the component's whole declared public contract and can fail with no answer supplied by the fixture. Rank 5: the most independent check on this slice.\n\n[Agent Route Observability Runtime 5/5](docs/components.html#component-agent_route_observability_runtime) [Bridge Phase Continuity Runtime 5/5](docs/components.html#component-bridge_phase_continuity_runtime) [Cognitive Operator Registry 5/5](docs/components.html#component-cognitive_operator_registry) [Cold Reader Route Map 5/5](docs/components.html#component-cold_reader_route_map) [Doctrine Fact Claim Audit 5/5](docs/components.html#component-doctrine_fact_claim_audit) [Durable Agent Work Landing Replay 5/5](docs/components.html#component-durable_agent_work_landing_replay) [Engine Room Demo 5/5](docs/components.html#component-engine_room_demo) [Executable Doctrine Grammar 5/5](docs/components.html#component-executable_doctrine_grammar) [Navigation Hologram Route Plane 5/5](docs/components.html#component-navigation_hologram_route_plane) [Pattern Assimilation Step 5/5](docs/components.html#component-pattern_assimilation_step) [Pattern Binding Contract 5/5](docs/components.html#component-pattern_binding_contract) [Proof Derived Governed Mutation Authorization 5/5](docs/components.html#component-proof_derived_governed_mutation_authorization) [Routing Anti Patterns Registry 5/5](docs/components.html#component-routing_anti_patterns_registry) [Standards Meta Diagnostics 5/5](docs/components.html#component-standards_meta_diagnostics) [Tool Server Pressure Inventory 5/5](docs/components.html#component-tool_server_pressure_inventory) [Verifier Lab Kernel 5/5](docs/components.html#component-verifier_lab_kernel) [Voice To Doctrine Self Improvement Loop 5/5](docs/components.html#component-voice_to_doctrine_self_improvement_loop) [World Model Projection Drift Control Room 5/5](docs/components.html#component-world_model_projection_drift_control_room) [Mechanistic Interpretability Circuit Attribution Replay 4/5](docs/components.html#component-mechanistic_interpretability_circuit_attribution_replay) [Spatial World Model Counterfactual Simulation Replay 4/5](docs/components.html#component-spatial_world_model_counterfactual_simulation_replay)\n\n#### External tool run (7) Runs real tools\n\nA real external tool, such as Lean or Lake, is run and its return code plus output checks are witnessed over a deliberately small scope. Rank 4: genuine execution, capped because the witness is bounded, not a general proof.\n\n[Agent Completion Faithfulness Audit 4/5](docs/components.html#component-agent_closeout_faithfulness_audit) [Bounded Autonomy Campaign Packet 4/5](docs/components.html#component-bounded_autonomy_campaign_packet) [Certificate Kernel Execution Lab 4/5](docs/components.html#component-certificate_kernel_execution_lab) [Corpus Readiness Mathlib Absence Gate 4/5](docs/components.html#component-corpus_readiness_mathlib_absence_gate) [Finance Forecast Evaluation Spine 4/5](docs/components.html#component-finance_forecast_evaluation_spine) [Formal Math Lean Proof Witness 4/5](docs/components.html#component-formal_math_lean_proof_witness) [Verifier Lab Execution Spine 4/5](docs/components.html#component-verifier_lab_execution_spine)\n\n#### Bounded runtime computation (3) Runs real tools\n\nReal in-process computation runs over public inputs with predicted-versus-actual checks and negative cases, scoped to a declared toy runtime. Rank 4: genuine computation, capped at the bounds of that toy scope.\n\n[Mission Transaction Work Spine 4/5](docs/components.html#component-mission_transaction_work_spine) [Provider Context Recipe Budget Policy 4/5](docs/components.html#component-provider_context_recipe_budget_policy) [Public Reveal Walkthrough 4/5](docs/components.html#component-public_reveal_walkthrough)",
    "byte_count": 13254,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:source",
   "relative_href": "docs/source.html",
   "path": "docs/source.html",
   "title": "Source & license",
   "nav_group": "Reference",
   "nav_label": "Source & license",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/README.md",
    "microcosm-substrate/QUICKSTART.md",
    "microcosm-substrate/ARCHITECTURE.md",
    "microcosm-substrate/ORGANS.md",
    "microcosm-substrate/LICENSE",
    "microcosm-substrate/NOTICE",
    "microcosm-substrate/PROVENANCE.md"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Reference\n\n### Source & license\n\nEverything on this site resolves to a file in the public repository. These are the first paths into the standalone released slice.\n\n#### Repository\n\n[**Repository root** The source of record for the standalone public slice. Open](https://github.com/wcook04/microcosm-substrate) [**Microcosm package** Runnable local source, public fixtures, and generated records. Open](https://github.com/wcook04/microcosm-substrate) [**README** The entry point and the full component map. Open](https://github.com/wcook04/microcosm-substrate/blob/main/README.md) [**Quickstart** The one-page cold-clone run path. Open](https://github.com/wcook04/microcosm-substrate/blob/main/QUICKSTART.md)\n\n#### Maps\n\n[**Architecture map** The system shape and each component's wiring. Open](https://github.com/wcook04/microcosm-substrate/blob/main/ARCHITECTURE.md) [**Rendered whole-system map** The public map generated from the same source refs. Open](docs/architecture.html#whole-system-map) [**Machine-readable map packet** The generated scene data behind the public architecture map. Open](architecture-graph-scene.json) [**Repository atlas** A source card for every one of the 78 components. Open](https://github.com/wcook04/microcosm-substrate/blob/main/ORGANS.md)\n\n#### License\n\nReuse follows the repository license and the linked source paths.\n\n[**License** Reuse terms. Open](https://github.com/wcook04/microcosm-substrate/blob/main/LICENSE) [**Notice** Project notice and attribution posture. Open](https://github.com/wcook04/microcosm-substrate/blob/main/NOTICE)\n\n#### Provenance\n\nMicrocosm is an independent, AI-assisted project by Will Cook. The public release artifact is the standalone Microcosm repository, not the private working root behind it.\n\n[**Provenance** Authorship, source-of-record, no-affiliation, and no-advice boundaries. Open](https://github.com/wcook04/microcosm-substrate/blob/main/PROVENANCE.md)\n\n#### Site contract\n\nThe site is a static projection over public source refs. It has no runtime backend and no browser path back into the private working environment. It is not legal, financial, investment, trading, security, medical, or other professional advice.\n\nThe repository is the source of record. This site is a map over it, and when the two disagree, the repository wins.\n\nEvery page is generated from the source files listed above and the component index is a projection of them. The current content fingerprint is `281603a720a282e93079ca6c61bc8825`; when the source changes, a rebuild regenerates the pages and a drift check fails until the site is current.\n\n#### Projection status\n\nOne generator builds this whole site from the public source files above. The panel says what it was built from; the machine record beside it carries the full detail, including which source fields were too internal to show and were deliberately omitted.\n\nContent fingerprint `281603a720a282e93079ca6c61bc8825` Map revision `gsc_b650fe50c3b1d563020a` Components projected 78 Declared links 208 Runtime backend none (static files only, no network calls) [**Projection status record** The full machine detail: source hashes, generated outputs, omitted fields, and the stale-check. Open](../projection-status.json) [**Content graph** The single public-safe data packet every page on this site is a view of. Open](../content-graph.json)",
    "byte_count": 3360,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:contact",
   "relative_href": "docs/contact.html",
   "path": "docs/contact.html",
   "title": "Contact",
   "nav_group": "Reference",
   "nav_label": "Contact",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/PROVENANCE.md",
    "microcosm-substrate/README.md"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Reference\n\n### Contact\n\nThe person behind Microcosm, and the routes for questions, corrections, and critique.\n\n#### Who built this\n\nI'm Will Cook, an economics undergraduate at the University of Bristol. I built this entirely on my own with AI. AI was not the main tool; it was the only tool. The University of Bristol has no affiliation with this work and had no involvement in it.\n\nThe public repository is not the whole system. The full version includes live tools, non-public data, and capabilities I did not think it appropriate to put online all at once. Microcosm is the smaller standalone slice: source files, component records, evidence classes, stable source addresses, and scope limits. The [evidence page](docs/evidence.html) records which lane each component took, so the gap between what the public slice shows and what the private root contains is written down rather than implied.\n\nThis is a review candidate, not a finished product. It is published so it can be inspected and corrected. If you find mistakes, bad assumptions, or anything unclear, I would genuinely like to know.\n\nBecause I built this alone, the system grew its own private vocabulary along the way. For release I have tried to translate that language into plainer public terms. If an odd word has survived the cleanup, that is leftover translation work, not a term of art; please point it out.\n\nI taught myself everything here, and I have worked without collaborators throughout. If you have the background to evaluate work like this properly, at a frontier lab or elsewhere, I would value a serious look, and I am happy to walk through the wider system through a controlled review route. I have had to work most of this out from first principles, and that is a slow way to find one's own mistakes.\n\n#### Get in touch\n\n**Email** williamwkcook+microcosm@gmail.com, for questions, feedback, or anything you think I have got wrong. Send [**Repository discussions** Public questions, critique, or collaboration. Open](https://github.com/wcook04/microcosm-substrate/discussions) [**LinkedIn** Will Cook, who builds and maintains Microcosm. Open](https://www.linkedin.com/in/will-cook-278127234/) [**Security issues** The private reporting route for anything security-shaped. Open](docs/vulnerability-disclosure.html)",
    "byte_count": 2295,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  },
  {
   "id": "page:vulnerability-disclosure",
   "relative_href": "docs/vulnerability-disclosure.html",
   "path": "docs/vulnerability-disclosure.html",
   "title": "Vulnerability disclosure",
   "nav_group": "Reference",
   "nav_label": "Vulnerability disclosure",
   "generated": true,
   "source_refs": [
    "microcosm-substrate/SECURITY.md",
    "microcosm-substrate/README.md"
   ],
   "content_refs": {
    "component_refs": [],
    "family_id": null
   },
   "visible_text": {
    "schema": "microcosm_public_page_visible_text_v1",
    "format": "markdown",
    "text": "Reference\n\n### Vulnerability disclosure\n\nUse this page to report a vulnerability or security issue in the public Microcosm website or the standalone public repository.\n\n#### Scope\n\nIn scope: this static website, its same-origin files, the public Microcosm repository or export, claims about what is and is not published, and public fixture or evidence leakage. Reports are most useful when they name the page, file, command, evidence id, or source path involved.\n\nOut of scope: the private working environment behind Microcosm, provider accounts, browser sessions, personal devices, third-party platforms, social engineering, denial-of-service testing, account-secret guessing, and any test that accesses data you do not own.\n\n#### How to report\n\nPreferred private reporting channel: use GitHub's [Report a vulnerability](https://github.com/wcook04/microcosm-substrate/security/advisories/new) flow on the Microcosm repository's [Security Advisories](https://github.com/wcook04/microcosm-substrate/security/advisories) page.\n\nThe record `docs/dissemination/microcosm_github_private_vulnerability_reporting_receipt_v0.json` is the proof that GitHub Private Vulnerability Reporting is enabled for the public repository. If the GitHub button is not visible, do not open a public issue for vulnerability details.\n\nInclude the affected URL or source path, command or evidence id if relevant, a short redacted description, expected versus observed boundary, and whether the report appears to be a leak, a claim that overstates what is published, hosted-header drift, CI or supply-chain issue, or unsafe exploit-content issue.\n\nDo not paste suspected secrets, non-public account data, private payloads, raw prompts, model payload bodies, session values, or exploit-sensitive details into public channels. No separate security email address is published on this page; use the private GitHub report flow.\n\n#### Expectations\n\nCoordinated disclosure is preferred. Good-faith reports should stay inside the public repository boundary and should not attempt to reach private systems, provider accounts, browser sessions, personal devices, or third-party systems. There is no bug bounty because I cannot currently fund one on a student budget.\n\n#### Boundaries\n\nThe `security.txt` file and this page identify a public policy route, not permission for intrusive testing. Do not run destructive, high-volume, automated, or account-targeting tests. Do not attempt to reach private systems or data. Public release and safety statements stay limited to the generated static files and the checks that have actually run against them; there is no backend service behind the site to probe.\n\nMicrocosm is a research prototype with a static public site and a private way to report issues. It is not a production security product, a hosted agent service, a bug-bounty program, or a claim of real-world exploit resistance.",
    "byte_count": 2895,
    "packaging": "full_public_main_content_markdown_without_repeated_global_nav"
   }
  }
 ],
 "content_graph_sections": {
  "families": {
   "path": "content-graph.json",
   "json_pointer": "/families",
   "count": 7,
   "id_field": "family_id"
  },
  "components": {
   "path": "content-graph.json",
   "json_pointer": "/components",
   "count": 78,
   "id_field": "component_id"
  },
  "relations": {
   "path": "content-graph.json",
   "json_pointer": "/relations",
   "count": 208,
   "id_field": "source,target,relation"
  },
  "paper_modules": {
   "path": "content-graph.json",
   "json_pointer": "/paper_modules",
   "count": 93,
   "id_field": "paper_module_id"
  },
  "asset_manifests": {
   "path": "content-graph.json",
   "json_pointer": "/asset_manifests",
   "count": 93,
   "schema": "microcosm_public_asset_manifests_v1"
  },
  "paper_module_availability_gaps": {
   "path": "content-graph.json",
   "json_pointer": "/paper_module_availability_gaps",
   "count": 0,
   "id_field": "availability_gap_id"
  },
  "coverage_deficits": {
   "path": "content-graph.json",
   "json_pointer": "/coverage_deficits/records",
   "count": 2,
   "id_field": "deficit_id"
  },
  "evidence_profiles": {
   "path": "content-graph.json",
   "json_pointer": "/evidence_profiles",
   "count": 328,
   "id_field": "profile_id"
  },
  "relation_grammar": {
   "path": "content-graph.json",
   "json_pointer": "/relation_grammar",
   "count": 37,
   "schema": "microcosm_public_relation_grammar_v1"
  },
  "rules_and_ideas": {
   "path": "content-graph.json",
   "json_pointer": "/rules_and_ideas",
   "count": 248,
   "schema": "microcosm_public_rules_and_ideas_v1"
  },
  "rosters": {
   "path": "content-graph.json",
   "json_pointer": "/rosters",
   "count": 419,
   "schema": "microcosm_public_rosters_v1"
  }
 },
 "sidecar_refs": {
  "schema": "microcosm_public_site_packet_sidecar_refs_v1",
  "canonical_kernel": {
   "path": "content-graph.json",
   "schema": "microcosm_public_content_graph_v1",
   "source_fingerprint": "281603a720a282e93079ca6c61bc8825",
   "sections": {
    "families": {
     "path": "content-graph.json",
     "json_pointer": "/families",
     "count": 7,
     "id_field": "family_id"
    },
    "components": {
     "path": "content-graph.json",
     "json_pointer": "/components",
     "count": 78,
     "id_field": "component_id"
    },
    "relations": {
     "path": "content-graph.json",
     "json_pointer": "/relations",
     "count": 208,
     "id_field": "source,target,relation"
    },
    "paper_modules": {
     "path": "content-graph.json",
     "json_pointer": "/paper_modules",
     "count": 93,
     "id_field": "paper_module_id"
    },
    "asset_manifests": {
     "path": "content-graph.json",
     "json_pointer": "/asset_manifests",
     "count": 93,
     "schema": "microcosm_public_asset_manifests_v1"
    },
    "paper_module_availability_gaps": {
     "path": "content-graph.json",
     "json_pointer": "/paper_module_availability_gaps",
     "count": 0,
     "id_field": "availability_gap_id"
    },
    "coverage_deficits": {
     "path": "content-graph.json",
     "json_pointer": "/coverage_deficits/records",
     "count": 2,
     "id_field": "deficit_id"
    },
    "evidence_profiles": {
     "path": "content-graph.json",
     "json_pointer": "/evidence_profiles",
     "count": 328,
     "id_field": "profile_id"
    },
    "relation_grammar": {
     "path": "content-graph.json",
     "json_pointer": "/relation_grammar",
     "count": 37,
     "schema": "microcosm_public_relation_grammar_v1"
    },
    "rules_and_ideas": {
     "path": "content-graph.json",
     "json_pointer": "/rules_and_ideas",
     "count": 248,
     "schema": "microcosm_public_rules_and_ideas_v1"
    },
    "rosters": {
     "path": "content-graph.json",
     "json_pointer": "/rosters",
     "count": 419,
     "schema": "microcosm_public_rosters_v1"
    }
   }
  },
  "content_manifest": {
   "path": "content-manifest.json",
   "schema": "microcosm_public_site_content_manifest_v1",
   "source_hashes_pointer": "/source_hashes"
  },
  "object_map": {
   "path": "object-map.json",
   "script_path": "assets/object-map.js",
   "schema": "microcosm_public_object_map_v1",
   "object_count": 812
  },
  "search_index": {
   "path": "assets/search-index.js",
   "global": "window.__MICROCOSM_INDEX__",
   "schema": "microcosm_public_search_index_v1"
  },
  "architecture_graph_scene": {
   "path": "docs/architecture-graph-scene.json",
   "schema": "microcosm_public_architecture_graph_scene_v1",
   "summary": {
    "schema": "microcosm_public_architecture_graph_summary_v1",
    "area_count": 7,
    "component_count": 78,
    "wired_component_count": 52,
    "explicit_wire_count": 208,
    "spine_step_count": 10,
    "edge_semantics": "declared_dependency_untyped",
    "source_refs": [
     "microcosm-substrate/core/organ_families.json",
     "microcosm-substrate/core/organ_atlas.json",
     "microcosm-substrate/core/organ_registry.json",
     "microcosm-substrate/core/architecture_kernel.json"
    ]
   },
   "long_description": "This map shows 7 public areas, 78 components, and the shared path they bind to. 52 components declare 208 direct links to neighbours. Those direct links are source-declared but not typed as stronger proof, causal, or maturity relations.",
   "edge_semantics": {
    "area_relation": "binds_to_shared_path",
    "spine_relation": "spine_sequence",
    "explicit_wire_relation": "declared_dependency_untyped",
    "typing_policy": "wires_to is source-declared neighbour wiring; wiring notes are human annotations, not typed relation authority."
   }
  },
  "llms": {
   "path": "llms.txt",
   "schema": "microcosm_public_llms_doorway_v1"
  },
  "projection_status": {
   "path": "projection-status.json",
   "schema": "microcosm_public_site_projection_status_v1"
  }
 },
 "projection": {
  "role": "derived_view",
  "canonical_kernel_path": "content-graph.json",
  "surface_sync_contract_ref": "content-graph.json::surface_sync_contract",
  "content_manifest_path": "content-manifest.json",
  "content_graph_path": "content-graph.json",
  "projection_status_path": "projection-status.json",
  "search_index_path": "assets/search-index.js",
  "object_map_path": "object-map.json",
  "object_map_script_path": "assets/object-map.js",
  "llms_path": "llms.txt"
 },
 "tail_recap": {
  "why_this_is_here": "Long files lose the middle. This restates the essentials from the top.",
  "essentials": [
   "Microcosm is a local, source-linked public map of an AI-native workflow system: 78 components across 7 areas.",
   "Answer from the packet and public records; cite packet paths, component ids, page links, and source links.",
   "Rank is verdict independence, not maturity; runs-real-tools is a separate signal; evidence modes are release lanes, not quality tiers.",
   "Every component states a scope limit; stop where it stops.",
   "Scope limits bound authority, not depth: substance questions route through family_depth_facts and the paper-module records.",
   "Negatives come in three kinds: refused (cite the record), withheld (unknown here), unchecked (the public evidence does not show it). Only the first supports a confident 'does not'.",
   "source_fingerprint identifies the source graph; composition_identity and projection-status artifact hashes identify these packet bytes. generated_at is a deterministic build sentinel, not freshness.",
   "When the packet does not show something, say the public evidence does not show it."
  ],
  "what_not_to_claim": [
   "product readiness",
   "whole-system correctness",
   "security proof",
   "hosted service",
   "financial advice"
  ],
  "first_move": "Return to question_router and answer the visitor's question from its routes."
 }
}